DEV Community: Arun Kumar Singh

Getting Started with AWS Bedrock AgentCore : Part 1

Arun Kumar Singh — Tue, 05 Aug 2025 13:32:31 +0000

⚠️ Important: Amazon Bedrock AgentCore is in preview release and is subject to change. In this post, I will use an example from AWS and will extend it to have few more things.

What is Bedrock AgentCore

Amazon Bedrock AgentCore is a complete set of capabilities to deploy and operate agents securely, at scale. It is a serverless runtime purpose-built for deploying and scaling dynamic AI agents and tools using any open-source framework including Strands Agents, LangChain, LangGraph and CrewAI.

It supports any protocol such as MCP and A2A, and any model from any provider including Amazon Bedrock, OpenAI, Gemini, etc. Developers can securely and reliably run any type of agent including multi-modal, real-time, or long-running agents.

The platform operates on a modular architecture with seven core components that can be used independently or together.

AgentCore Runtime
AgentCore Memory
AgentCore Identity
AgentCore Gateway
AgentCore Observability
AgentCore Built-in Tools
I will not go through each and every component mentioned above but would like to cover the heart of this ecosystem.

Agent runtime
It represents a containerized application that processes user inputs, maintains context, and executes actions using AI capabilities. When you create an agent, you define its behavior, capabilities, and the tools it can access.

Protocol support

HTTP for simple request/response patterns
Model Context Protocol (MCP) for standardized agent-tool interactions

please note this service is available in 4 regions at the time of writing this post.

How to deploy?
There are couple of ways how you can use Bedrock AgentCore. Let’s start with most basic way Bedrock AgentCore Runtime starter toolkit.

Amazon Bedrock AgentCore Runtime starter toolkit

this approach is good when you want to quickly deploy existing agent functions.

Let’s build an agent using Strands framework and deploy it using toolkit.

To start with toolkit, you need following items →

An agent
A role need to be created beforehand
An ECR repository need to be created beforehand Agent config you can find it here -> https://github.com/arunksingh16/ai-projects/blob/main/aws-bedrock-agentcore-starter/agent.py

To run agent or tool in AgentCore Runtime you need an AWS Identity and Access Management execution role. Starter toolkit package your agent as a container image so ECR repo is also required. Both of the item I have created using cdk. (make sure you update your account id in scripts where ever required).

Role and ECR

Create required role and ECR using CDK script ->

https://github.com/arunksingh16/ai-projects/tree/main/aws-bedrock-agentcore-starter/infra

Once you are done with role and ECR, lets try deploy the agentcore config. To run the config in the folder you need agentcore utility. That you can get it via ->

pip install bedrock-agentcore-starter-toolkit

Now you are ready, make sure you have set AWS env variables and secret.

# this command will ask for ECR repository details and auth details. 
# please note i have used default IAM based auth
agentcore configure --entrypoint agent.py -n strands_agentcore -r us-east-1 -er "arn:aws:iam::<accountID>:role/MyBedrockAgentRol

The command will generate a Dockerfile, .dockerignore and .bedrock_agentcore.yaml configuration file in same folder.

Please note

Amazon Bedrock AgentCore requires ARM64 architecture for all deployed agents.

Launch your agent:

# agentcore launch
agentcore launch --code-build
# the above command will create a docker image and push it to repository
# i have selected option of code-build so it will utilise AWS code
# build pipeline for that
# At last it will deploy it in AgentCore runtime

I noticed that the deployment started failing. In the latest version of the Bedrock AgentCore Starter Toolkit, there’s a new --codebuild flag for the agentcore launch command, which enables ARM64 container builds. You can view the build process directly in AWS.

Upon reviewing the logs, I realized it was referencing the wrong ECR. I updated the ECR value in the .bedrock_agentcore.yaml file and re-ran the agentcore launch command this time, it worked successfully.

You can view your deployments in runtime console.

Time to run some tests from cli.

(myenv) ➜  my-strands-agent agentcore invoke '{"prompt": "What is 2+2?"}'
Payload:
{
  "prompt": "What is 2+2?"
}
Invoking BedrockAgentCore agent 'strands_agentcore' via cloud endpoint
Session ID: aa53199a-1760-4a60-ba62-5a8d511b216f

Response:
{
  "ResponseMetadata": {
    "RequestId": "ebacaf55-1750-434b-963c-41bfea5cde8e",
    "HTTPStatusCode": 200,
    "HTTPHeaders": {
      "date": "Mon, 04 Aug 2025 10:09:11 GMT",
      "content-type": "application/json",
      "transfer-encoding": "chunked",
      "connection": "keep-alive",
      "x-amzn-requestid": "ebacaf55-1750-434b-963c-41bfea5cde8e",
      "baggage": "Self=1-689086c2-61df3327557ffd33689d8f7b,session.id=aa53199a-1760-4a60-ba62-5a8d511b216f",
      "x-amzn-bedrock-agentcore-runtime-session-id": "aa53199a-1760-4a60-ba62-5a8d511b216f",
      "x-amzn-trace-id": "Root=1-689086c2-37bd21e07a967574243b50d0;Self=1-689086c2-61df3327557ffd33689d8f7b"
    },
    "RetryAttempts": 0
  },
  "runtimeSessionId": "aa53199a-1760-4a60-ba62-5a8d511b216f",
  "traceId": "Root=1-689086c2-37bd21e07a967574243b50d0;Self=1-689086c2-61df3327557ffd33689d8f7b",
  "baggage": "Self=1-689086c2-61df3327557ffd33689d8f7b,session.id=aa53199a-1760-4a60-ba62-5a8d511b216f",
  "contentType": "application/json",
  "statusCode": 200,
  "response": [
    "b'\"The answer is **4**.\"'"
  ]
}

This was a valuable exercise. Another important takeaway is that performance and monitoring data can be viewed in the CloudWatch GenAI Observability dashboard a newly released feature from AWS.

Can I place a streamlit front end?

Lets modify the agent code to handle streaming response first. The Strands Agents SDK includes a special function, stream_async(prompt), that enables streaming. When you use this method, the agent starts processing the request such as a user question and as each part of the response (like a word or sentence or agent action) is generated, it is sent back immediately to the requester.

So update the agent code entrypoint as ->

@app.entrypoint
async def invoke(payload):
    """Answer the user's question with streaming."""    
    user_message = payload.get("prompt")

    # Generate a response with streaming
    stream = agent.stream_async(user_message)
    async for event in stream:
        yield event

Deploy the agent again using same command as earlier

agentcore launch --code-build

Create a steamlit frontend as following code link, make sure you update the arn for agentcore runtime.

https://github.com/arunksingh16/ai-projects/blob/main/aws-bedrock-agentcore-starter/fronend.py

run the front end

streamlit run frontend.py

Now pass your prompt here !

How it is different from Strands Framework

While both AgentCore and Strands Agents are AWS offerings for building AI agents, they serve distinctly different purposes and complement each other rather than compete.

Strands Agents is an open-source SDK that focuses on simplifying the development of AI agents through a model-driven approach.

AgentCore, in contrast, is an infrastructure and deployment platform that provides the production-grade foundation for running any agent framework, including Strands. The relationship is complementary.

As one technical analysis noted: “Strands gives you the tools to build the agent, AgentCore gives you the infrastructure to run it at scale”. AgentCore explicitly supports Strands Agents as one of its compatible frameworks, allowing developers to build with Strands and deploy on AgentCore infrastructure

Key Features in AgentCore

Framework Agnostic: Works with any AI agent framework (Strands, LangGraph, CrewAI, AutoGen, or custom logic)
Enterprise Infrastructure: AWS-managed infrastructure with built-in gateway and memory integrations
Memory Management: Sophisticated conversation memory with semantic strategies and branching
Async Task Management: Built-in support for long-running background tasks
Health Monitoring: Real-time health status and monitoring capabilities

I would like to cover majority of this in next posts.

Till then, Stay Safe and Take Care.

💬 Let’s Connect

LinkedIn: https://www.linkedin.com/in/arunksingh16/
GitHub: https://github.com/arunksingh16
Twitter: https://twitter.com/arun16
Medium: https://arunksingh16.medium.com/

Introducing aws cdk drift

Arun Kumar Singh — Thu, 29 May 2025 20:37:14 +0000

As AWS CDK (Cloud Development Kit) continues to evolve, so does its tooling to ensure infrastructure consistency. A significant addition to the CDK CLI is the cdk drift command, introduced in version 2.1017.0 (build f227c9b) yesterday. It facilitates drift detection. - a critical feature for maintaining the integrity of your cloud resources. This blog post aims to demystify drift detection in AWS CDK, contrasting it with the cdk diff command, and providing a practical example to illustrate its application.

What is Drift Detection?

Drift detection in AWS CloudFormation identifies discrepancies between the actual state of your stack resources and their expected configurations as defined in your templates. Such drifts often result from manual changes made outside the CDK or CloudFormation workflows, leading to potential inconsistencies, security vulnerabilities, or operational issues. The cdk drift command integrates with CloudFormation's drift detection capabilities, enabling CDK users to detect and address these inconsistencies directly from the CLI.

cdk drift vs. cdk diff: Understanding the Difference

While both cdk drift and cdk diff are tools for comparing infrastructure states, they serve distinct purposes:
cdk diff: Compares your local CDK application's synthesized CloudFormation template with the last deployed stack template. It highlights changes you intend to deploy but does not consider the current state of live resources. It is useful for previewing changes before deployment to avoid surprises.
cdk drift: Compares the last deployed stack template with the actual live configuration of resources in your AWS account. It detects changes made outside of the CDK or CloudFormation, such as manual modifications via the AWS Console or CLI.

In essence, cdk diff is proactive, showing what will change upon deployment, whereas cdk drift is reactive, revealing unauthorized or unintended changes that have already occurred.

Getting Started with cdk drift
To use the cdk drift command, make sure you're using AWS CDK CLI version 2.1017.0

npm install -g aws-cdk@2.1017.0
npx cdk --version
# Should output something like: 2.1017.0 (build f227c9b)
npx cdk -h # it will start listing command option for drift

POC: Detecting Drift in an S3 Bucket

Let's walk through a scenario to understand how cdk drift operates. Define and Deploy an S3 Bucket Using CDK.

import * as cdk from 'aws-cdk-lib';
import { Construct } from 'constructs';
// import * as sqs from 'aws-cdk-lib/aws-sqs';
import * as s3 from 'aws-cdk-lib/aws-s3';
export class CdkdriftStack extends cdk.Stack {
  constructor(scope: Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    new s3.Bucket(this, 'MyBucket', {
      versioned: true,
      removalPolicy: cdk.RemovalPolicy.DESTROY,
    });
  }
}

const app = new cdk.App();
new CdkdriftStack(app, 'CdkdriftStack');

Verify the bucket created and run cdk diff.

Lets do some manual changes, After deployment, navigate to the AWS Console, manually disable the bucket versioning

Run the cdk diff again and this shows no difference because your local CDK code still defines the bucket as versioned. cdk diffonly compares your local template with the last deployed template, which still expects versioning enabled. Run cdk drift - This triggers drift detection against the live stack. It detects that the bucket's versioning property has drifted (disabled manually).

The introduction of the cdk drift command enhances AWS CDK's capabilities, providing developers with a powerful tool to ensure their infrastructure remains consistent with defined configurations. By understanding and utilizing drift detection, teams can proactively manage their cloud resources, reduce unexpected issues, and maintain compliance with organizational standards.

References
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html
https://github.com/aws/aws-cdk/issues/1723

💬 Let's Connect
LinkedIn: https://www.linkedin.com/in/arunksingh16/
GitHub: https://github.com/arunksingh16
Twitter: https://twitter.com/arun16
Medium: https://medium.com/@arunksingh16

Terraform: Good to know features - Post 1

Arun Kumar Singh — Sun, 12 Sep 2021 18:00:18 +0000

Terraform Validation

Starting Terraform 0.13, Hashicorp has released Custom Variable Validation in HCL. Each variable block can have zero or more validation blocks and an error message. It's quite useful feature which gives you an edge to control the values.

variable "cloudenv" {
  type        = string
  description = "Cloud Environment"

  validation {
    condition = anytrue([
      var.cloudenv == "prd",
      var.cloudenv == "qa",
      var.cloudenv == "uat",
      var.cloudenv == "dev"
    ])
    error_message = "Must be a valid Cloud Env, values can be prd, qa, uat, or dev."
  }
}

Terraform Suppressing Values

There are certain cases in which you want terraform not to print the information when you run plan or apply. Good part is terraform has a way for you. Setting a variable as sensitive prevents Terraform from showing its value in the plan or apply output.

variable "user_information" {
  type = object({
    name    = string
    address = string
  })
  sensitive = true
}

Debug terraform

You can set TF_LOG to one of the log levels TRACE, DEBUG, INFO, WARN or ERROR to change the verbosity of the logs and push it to one of the files on disk for analysis.

mkdir logs
export TF_LOG_PATH="./logs/terraform.log"
export TF_LOG="INFO"

My Git Notebook!

Arun Kumar Singh — Thu, 05 Aug 2021 17:13:17 +0000

This is Just another post on Git. Nothing new, everything is available in web! I have just collected few important concepts for day to day work.

Git Remote Server

Remote repositories are versions of your project that are hosted on the Internet or network somewhere.

# origin - default name for remote server
git remote add origin <remote url>
# list remote urls
git remote -v

To track any remote branch

git checkout --track origin/feature

receive changes from remote repo -
git fetch - download changes and then you can evaluate
git pull - combination of fetch and merge

Use diff

diff command is pretty useful while working with git.

# what changed since last commit
git diff HEAD
# diff between branches
git diff feature master

Branching is helpful !

Think of a situation you have checked out on a master branch and found a code bug. You start making changes to fix that and in the meantime you realised that you are directly making changes in master!
You thought to press ctrl+Z but you don't want to loose the potential solution. In this situation branching can help. Checkout your solution with new branch and keep it in new branch until you are ok with the solution. This is simple scenario but there can be number of others. Branching is beautiful just you need to know, how to handle it!

# Checkout a branch
git checkout <existing branch>

# Checkout and create a new branch
git checkout -b <new branch name>

Picking specific changes(folder/file) from another branch

Consider you have few changes on branch features/myFix and you want to merge it in features/BugRel . All changes are in a folder.

# checkout your features/BugRel branch
git checkout features/BugRel

# pick changes from folder
git checkout features/myFix -- MyFixChanges/

That's all you have to do. Now that folder is in your branch, commit it.

Rename/Delete Branch

git branch -m <oldname> <newname>
git branch -d <branchname>
# force delete
git branch -D <branchname>

Merge and Compare Branches

Fast-forward - Because there was no conflicting activity in the target branch when we are merging changes from source, commits happen in sequence

git checkout <target branch>
git merge <source branch>

Use diff always before merging

git diff <target branch> <source branch>

Before starting merge always update from remote.

Aborting a merge

git merge --abort

Rebase

An advance feature, Clean-up your local history(Squashing multiple commit into one) or pull changes from a branch into your branch without performing a merge. Use it only your working branch not on public branch.

git log --oneline
git rebase -i <sha>
# to visit what happened after rebase
git reflog

Cherry Pick

Cherry picking is the act of picking a commit from a branch and applying it to another.

# find the commit details
git log <branch name> --oneline
# checkout the branch where you want to put the commit
git checkout <b-name>
# perform the cherry pick commit to HEAD
git cherry-pick <commit>

That's All for this post. Thanks

Activation Failure / 504 Gateway Timeout in Atlassian Jira

Arun Kumar Singh — Tue, 08 Jun 2021 17:39:40 +0000

While deploying Jira in Kubernetes or Docker you might have faced Activation Failure / 504 Gateway Timeout issues while working with plugins load. There can be other root causes but most prominent one is that your Jira Universal Plugin Manager is trying to connect to Marketplace. We can disable the same in Jira to avoid these errors.

`Switching UPM to offline mode in Jira`

https://marketplace.atlassian.com
https://marketplace-cdn.atlassian.com

To fix that you can disable it via system property

# Set the system property upm.pac.disable to true. When this property is set to true, UPM does not try to access the Atlassian Marketplace. Example:
-Dupm.pac.disable=true

or Login in application and follow the steps below :-

From the top navigation bar in your application, choose > Add-ons or Manage apps
Click the Settings link at the bottom of the page.
Uncheck the Connect to the Atlassian Marketplace checkbox. This option is enabled by default.
Click Apply

`References:`

https://confluence.atlassian.com/upm/disabling-and-enabling-apps-273875716.html

https://confluence.atlassian.com/upm/problems-connecting-to-the-atlassian-marketplace-273875718.html

https://confluence.atlassian.com/upm/configuring-marketplace-connectivity-306350947.html

Configure Proxy credentials in docker-desktop windows?

Arun Kumar Singh — Fri, 21 May 2021 10:55:58 +0000

Open Docker Desktop Settings > Proxies > Set Manual proxy configuration

Put proxy details and give it a try

format: proxy:port

If this does not work. try this

format: domain\username:password@proxy:port

Please encode special characters in password at https://www.url-encode-decode.com

Make sure you add URLs which need to Bypass. Thanks

Shell Tips

Arun Kumar Singh — Sun, 25 Apr 2021 20:03:58 +0000

Extract File name in bash:-

You can use basename to Strip directory and suffix from filenames

for i in /tmp/files/*/*; do
 key=$(basename $i)

Add Date in File or folder Name:-

In case you have requirement of adding date in your file or folder name

now=$(date +"%m-%d-%Y")
printf "%s\n" $now

User Input:-

read command can be used to take input from user.

read -p "Please input $inp? [yn]" answer
if [[ $answer = y ]] ; then
  # run the command
  echo "Yes"
fi

Use set -x to watch execution

By default, after the script is executed, it only displays the results. You can use set -x to output the executed command line before its execution result.

root@bd92bbce2f7d:/# cat dummy.sh
#!/usr/bin/env bash
set -x
echo Step 1
echo Step 2


root@bd92bbce2f7d:/# sh dummy.sh
+ echo Step 1
Step 1
+ echo Step 2
Step 2

I will keep updating this post, if I find something useful. Thanks

How to run multiple commands in Docker Container

Arun Kumar Singh — Sun, 25 Apr 2021 20:02:27 +0000

There can be scenarios in which you may have to run/execute commands using a container to get something done.

docker run <your container> /bin/bash -c "command1; command2"

arun@mymachine:~ sudo docker run singharunk/dev /bin/bash -c "date; whoami"
Sun Apr 25 19:58:50 UTC 2021
root

How to delete Kubernetes pods hanging in Terminating state

Arun Kumar Singh — Tue, 06 Apr 2021 10:20:17 +0000

While working on Kubernetes environment you may see hanging PODs after termination. You will see the state of Terminating

$ kubectl get pods
 NAME        READY     STATUS        RESTARTS   AGE
 nginx       0/1       Terminating   0          1d

This can hold your work for sometime. In these cases you need to find the root cause of this issue but in the mean time if you want to quickly get rid of those pods, run following command -

$ kubectl delete pod <pod-name> -n <namespace> --grace-period=0 --force

My Azure Notebook: Key Things

Arun Kumar Singh — Tue, 23 Mar 2021 17:23:02 +0000

Organisation— An organization represents a business entity that is using Microsoft cloud offerings. The organization is a container for subscriptions.

Azure subscription— A subscription is an agreement with Microsoft to use one or more Microsoft cloud platforms or services

User Acccount— User accounts for all of Microsoft’s cloud offerings are stored in an Azure Active Directory (Azure AD) tenant. An Azure AD tenant can be synchronized with your existing Active Directory Domain Services. Multiple subscriptions of an organization can use the same Azure AD tenant.

Azure AD tenant— A dedicated and trusted instance of Azure AD that’s automatically created when your organization signs up for a Microsoft cloud service subscription, such as Microsoft Azure, Microsoft Intune, or Microsoft 365. An Azure tenant represents a single organization.

Resource— A manageable item that is available through Azure. Virtual machines, storage accounts, web apps, databases, and virtual networks are examples of resources. Resource groups, subscriptions, management groups, and tags are also examples of resources.

Resource group— A container that holds related resources for an Azure solution. The resource group includes those resources that you want to manage as a group. You decide which resources belong in a resource group based on what makes the most sense for your organization. See Resource groups.

Resource provider— A service that supplies Azure resources. For example, a common resource provider is Microsoft.Compute, which supplies the virtual machine resource. Microsoft.Storage is another common resource provider. See Resource providers and types.

Azure Stock Keeping Unit(SKU)— It represents a purchasable Stock Keeping Unit (SKU) under a product. It can be of different type depends on product. Kind of Item for sale !

Azure compute unit (ACU)— The Azure Compute Unit (ACU) is used in understanding the relative compute performance between different Azure compute series VMs. Microsoft uses the ACU concept to help you compare computing performance across the different types of compute VM SKUs.

Azure Service principal— An Azure service principal is an identity created for use with applications, hosted services, and automated tools to access Azure resources.

Azure App Registration- In order to delegate Identity and Access Management functions to Azure AD, an application must be registered with an Azure AD tenant. When you register your application with Azure AD, you are creating an identity configuration for your application that allows it to integrate with Azure AD.

PowerShell Tricks 💡

Arun Kumar Singh — Fri, 19 Mar 2021 18:54:33 +0000

Finding Version of your powershell

PS C:\> $PSVersionTable

Name                           Value
----                           -----
PSVersion                      5.1.17763.1490
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.17763.1490

List AD Groups which you are part of :

PS C:\> $id = [Security.Principal.WindowsIdentity]::GetCurrent()
PS C:\> $groups = $id.Groups | foreach-object {$_.Translate([Security.Principal.NTAccount])}
PS C:\> $groups | select *

List Processes

PS C:\> Get-Process | Sort-Object CPU -descending | Select-Object -first 1

Handles  NPM(K)    PM(K)      WS(K)     CPU(s)     Id  SI ProcessName
-------  ------    -----      -----     ------     --  -- -----------
   2593      97   154056     174068     458.39  18020   1 chrome

Filter Example

Get-Process | Select-Object -Property 'Id','StartTime','HandleCount' | Where-Object -FilterScript { $_.Id -eq "1"  } | Format-Table -AutoSize

To list what modules are loaded in current powershell session

PS C:\> Get-Module

ModuleType Version    Name                                ExportedCommands
---------- -------    ----                                ----------------
Manifest   3.1.0.0    Microsoft.PowerShell.Management     {Add-Computer, Add-Content, Checkpoint-Computer, Clear-Content...}
Manifest   3.1.0.0    Microsoft.PowerShell.Utility        {Add-Member, Add-Type, Clear-Variable, Compare-Object...}
Script     2.0.0      PSReadline                          {Get-PSReadLineKeyHandler, Get-PSReadLineOption, Remove-PSReadLineKeyHandler, Set-PSReadLineKeyHandler...}


# List Available Modules

PS C:\> Get-Module -ListAvailable

Locate your command

PS C:\> Get-Command -Name *service*

CommandType     Name                                               Version    Source
-----------     ----                                               -------    ------
Alias           Get-ASRServicesProvider                            0.2.4      AzureRM.RecoveryServices.SiteRecovery
Alias           Get-AzureRmRecoveryServicesAsrNotificationSetting  0.2.4      AzureRM.RecoveryServices.SiteRecovery
Alias           Get-AzureRmRecoveryServicesAsrVaultSettings        0.2.4      AzureRM.RecoveryServices.SiteRecovery
Alias           Get-AzureRmRecoveryServicesBackupProperties        4.1.2      AzureRM.RecoveryServices
Alias           New-AzureRmDataFactoryV2LinkedService              0.5.3      AzureRM.DataFactoryV2

Using Get-Help

PS C:\> Get-Help -Name *TIME*

Name                              Category  Module                    Synopsis
----                              --------  ------                    --------
New-TimeSpan                      Cmdlet    Microsoft.PowerShell.U... ...
Get-TimeZone                      Cmdlet    Microsoft.PowerShell.M... ...
Set-TimeZone                      Cmdlet    Microsoft.PowerShell.M... ...

PS C:\> Get-Help Get-TimeZone

NAME
    Get-TimeZone

SYNTAX
    Get-TimeZone [[-Name] <string[]>]  [<CommonParameters>]

    Get-TimeZone -Id <string[]>  [<CommonParameters>]

    Get-TimeZone -ListAvailable  [<CommonParameters>]

To find out the information attached with an object use “Get-Member” cmdlet.

PS C:\> Get-Service | Get-Member


   TypeName: System.ServiceProcess.ServiceController

Name                      MemberType    Definition
----                      ----------    ----------
Name                      AliasProperty Name = ServiceName
RequiredServices          AliasProperty RequiredServices = ServicesDependedOn
Disposed                  Event         System.EventHandler Disposed(System.Object, System.EventArgs)
Close                     Method        void Close()
Continue                  Method        void Continue()
CreateObjRef              Method        System.Runtime.Remoting.ObjRef CreateObjRef(type requestedType)
Dispose                   Method        void Dispose(), void IDisposable.Dispose()
Equals                    Method        bool Equals(System.Object obj)
ExecuteCommand            Method        void ExecuteCommand(int command)

Repository from where packages are coming

PS C:\> Get-PSRepository

Name                      InstallationPolicy   SourceLocation
----                      ------------------   --------------
PSGallery                 Untrusted            https://www.powershellgallery.com/api/v2

Grep Examples

PS C:\Temp> Select-String -Path *.yaml -Pattern "kind" | Select Filename, LineNumber, Line, Path | Format-Table

Filename          LineNumber Line                        Path
--------          ---------- ----                        ----
lgl.yaml                   4 kind: ConfigMap             C:\Temp\lgl.yaml
lgl.yaml                  19 kind: ConfigMap             C:\Temp\lgl.yaml
lgl.yaml                  33 kind: Service               C:\Temp\lgl.yaml
lgl.yaml                  51 kind: Service               C:\Temp\lgl.yaml

Place output of command in a file

Get-Process | Select-Object -Property 'Id','StartTime' | Out-File a.txt

Select-String -Path *.yaml -Pattern "kind" | Select Filename, LineNumber, Line, Path | Format-Table | Export-Csv -path output.csv -NoTypeInformation

Path

$Env:Path += ";c:\temp"
Set-Item -Path Env:Path -Value ($Env:Path + ";C:\Temp")

Command History

PS C:\Temp> Get-History

  Id CommandLine
  -- -----------
   1 cd c:/
   2 $id = [Security.Principal.WindowsIdentity]::GetCurrent()
   3 $groups = $id.Groups | foreach-object {$_.Translate([Security.Principal.NTAccount])}
   4 $groups | select *

Copy Data

Copy-Item -Filter *.yaml -Path c:\temp -Recurse -Destination D:\temp\

I will keep updating this post if I find something useful. Thanks

more on PowerShell

Docker: Running Linux Container with a Non-Root user

Arun Kumar Singh — Fri, 19 Mar 2021 17:50:10 +0000

Common way of Running Container

arun@controller:~$ sudo docker run -it ubuntu bash 
Unable to find image 'ubuntu:latest' locally
latest: Pulling from library/ubuntu
83ee3a23efb7: Already exists 
db98fc6f11f0: Already exists 
f611acd52c6c: Already exists 
Digest: sha256:703218c0465075f4425e58fac086e09e1de5c340b12976ab9eb8ad26615c3715
Status: Downloaded newer image for ubuntu:latest
root@27e9f62a1021:/# 
root@27e9f62a1021:/# whoami 
root
root@27e9f62a1021:/#

You can pass user-id and group-id as a argument to run a container with different user

arun@controller:~$ sudo docker run --rm -it -u $(id -u ${USER}):$(id -g ${USER}) ubuntu bash 
groups: cannot find name for group ID 1000
I have no name!@186e2848baf1:/$ whoami
whoami: cannot find name for user ID 1000
I have no name!@186e2848baf1:/$ id
uid=1000 gid=1000 groups=1000