Valter Silva's questions

I have 3 servers with Zookeeper and ActiveMQ installed. Everything seems to be working fine, however, when one of my node dies, and a new election occurs, however the new leader don't have the same database state as the other leader had.

Any idea why this is happening ? I can see that the followers are attaching to the leader, which I understand that they are able to communicate with each other. Is this correct ? What are the points that I might be missing here in order for this synchronization to happen ?

This is how I'm setting my activemq.xml related to replicaDB:

...
<persistenceAdapter>

    <replicatedLevelDB
        directory="${activemq.data}/leveldb"
        replicas="3"
        bind="tcp://0.0.0.0:61618"
        zkAddress="queue1.company.com:2881,queue2.company.com:2881,queue3.company.com:2881"
        zkPassword="unique_password_for_queue_1"
        zkPath="/activemq/leveldb-stores"
        hostname="queue3.company.com"
    />


</persistenceAdapter>
<sslContext>
    <sslContext keyStore="/opt/activemq/conf/queue3.jks" keyStorePassword="unique_password_for_keystore_at_queue_1" trustStore="/opt/activemq/conf/queue3.jts" trustStorePassword="unique_password_for_truststore_at_queue_1" />
</sslContext>
...

I need to use the arn many times, currently it looks like this:

arn:aws:iam::000000000000:user/FirstName.LastName

Is it possible to customize it for something like this ?

arn:aws:iam::CompanyName:user/FirstName.LastName

So I could use it on others arn as well, such as this:

arn:aws:iam::000000000000:role/my.role

I'm trying to make my AWS environment safer. So, I just created a bucket, no modifications at all, on S3, and want to give a minimal set of permission to my application users. So, I have created an user called keeper, he can, basically, only assume some role that I can specify in his policy. And this is working because I have assume a role and requested a temporary session token for him via CLI. However, in this role I have specified a policy that, is possible to upload a file to a specific path, in my new bucket.

However, this is not working, giving me permission denied. Do I need to specify a bucket policy where it says that it's possible to upload an object to my path ?

If so, what is the meaning of roles then ? I'm a bit confused about resources policy and users/roles/groups policies.

I'm new to AWS CLI, but one thing that is bothering me a bit, is the fact that I need to store my credentials in a file. I have several buckets on S3, and I create an account for my application, which will have only access for this bucket. However, if my server is hacked, the attacker could easily read my .aws/credentials file and destroy everything within my bucket. Then, my company would be in huge problems, since we rely on AWS a lot! Is there any suggestion to increase the security of this scenario ?

I can totally understand that if my server is hacked, and has sudo acess, my chances are slim, however, I would like to make more difficult as possible to prevent any damage.

I have over 200 servers, but is hard to keep tracking all of them by some documents, after a while it gets outdated, so to refresh this document, I have to know which servers I can login via SSH. I already create a script which gonna ping through a range of IP address, with this list now I would like to know if I can SSH into them. I was thinking in a combination of sshpass and ssh inside a loop, but wonder if that's the best solution.

Any idea or suggestion ?

I work in a company where we have a network ethernet and wi-fi, we would like to create a network where our customers could access our network but don't have access to our computer network.

This access would be internet only, nothing more. The customers will not see our computers and the files that we share in our network.

I have two routers, how can I do this ?

A Cisco Linksys Wireless-N Broadband Router WRT160N V3 and a Netgear Wireless G Router WGR614 v9 and about firewalls there´s only windows firewalls in each computer by default.

I have this topology in my network at the company where I work:

Where the only router is the 'main router' (is here where we receive the internet signal from our provider) the others networks points are switches, so today my network is in cascade and I wonder if this is the best topology for my network. If not, what would be ?

EDIT: This is the structure of the company where I work: