native environment – 3-tier architecture intro – alternative methods of resource connection: – Bastion host – SSM – EC2 Instance Connect – demo Why we should care? – brute force attacks – exploitation NatGateway – regular resource access become more annoying solution one - bastion host Host Instance ProxyJump Bastion PreferredAuthentications publickey IdentitiesOnly=yes IdentityFile Port 22 Host Bastion PreferredAuthentications publickey IdentitiesOnly=yes IdentityFile /Users/kuba/.ssh/id_ed25519_gowaw56 User kuba Hostname 35.158.161.105 Port 22bastion host - props

—Restricted execution framework . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1270 30.2 Bastion —Restricting access to objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1273 (1)>) is a poor email matching pattern, which will match with 'host.com>' as well as 'user@host.com', but not with 'host.com'. 2.4 新版功能. The special sequences consist of '\' and a character ACE， 例 如 www. xn--alliancefranaise-npb.nu)。随后此域名的 ACE 形式可以用于所有由于特定协议而不允许使 用任意字符的场合，例如 DNS 查询，HTTP Host 字段等等。此转换是在应用中进行的；如有可能将对用户 可见：应用应当透明地将 Unicode 域名标签转换为线上的 IDNA，并在 ACE 标签被呈现给用户之前将其转换 回 Unicode。 If

—Restricted execution framework . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1270 30.2 Bastion —Restricting access to objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1273 (1)>) is a poor email matching pattern, which will match with 'host.com>' as well as 'user@host.com', but not with 'host.com'. 2.4 新版功能. The special sequences consist of '\' and a character ACE， 例 如 www. xn--alliancefranaise-npb.nu)。随后此域名的 ACE 形式可以用于所有由于特定协议而不允许使 用任意字符的场合，例如 DNS 查询，HTTP Host 字段等等。此转换是在应用中进行的；如有可能将对用户 可见：应用应当透明地将 Unicode 域名标签转换为线上的 IDNA，并在 ACE 标签被呈现给用户之前将其转换 回 Unicode。 If

—Restricted execution framework . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1270 30.2 Bastion —Restricting access to objects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1273 (1)>) is a poor email matching pattern, which will match with 'host.com>' as well as 'user@host.com', but not with 'host.com'. 2.4 新版功能. The special sequences consist of '\' and a character ACE， 例 如 www. xn--alliancefranaise-npb.nu)。随后此域名的 ACE 形式可以用于所有由于特定协议而不允许使 用任意字符的场合，例如 DNS 查询，HTTP Host 字段等等。此转换是在应用中进行的；如有可能将对用户 可见：应用应当透明地将 Unicode 域名标签转换为线上的 IDNA，并在 ACE 标签被呈现给用户之前将其转换 回 Unicode。 If

course Quiz time 2 Patterns Oldschool host device all the things© host device everywhere Conditional function body constexpr everything Disable Cuda warnings host device template 3 The dark path Function Function dispatch triple 4 Cuda proposal Conditional host device Forbid bad cross function calls 3/664/66 Motivation Patterns The dark path Cuda proposal Thank you Motivation 1 Motivation Audience Allowed function calls in Cuda CPU host GPU global device9/66 Motivation Patterns The dark path Cuda proposal Thank you Allowed function calls in Cuda CPU host GPU global device global ≃ device10/66

环境字典 env 运行环境即设置 环境即状态共享 其他考虑 环境变量完整列表 Execution model Execution strategy Defining tasks Defining host lists Intelligently executing tasks with execute Failure handling Connections Password management contrib.console import confirm 改好之后，我们重新部署： $ fab deploy No hosts found. Please specify (single) host string for connection: my_server [my_server] run: git pull [my_server] out: Already up-to-date. [my_server] fabfile 中指定任何连接信息，所以 Fabric 依旧不知道该在哪里运 行这些远程命令。遇到这种情况时，Fabric 会在运行时提示我们。连接的定义 使用 SSH 风格的“主机串”（例如： user@host:port ），默认使用你的本地用户 名——所以在这个例子中，我们只需要指定主机名 my_server 。 与远程交互 如果你已经得到了代码，说明 git pull 执行非常顺利——但如果这是第一次

环境字典 env 运行环境即设置 环境即状态共享 其他考虑 环境变量完整列表 Execution model Execution strategy Defining tasks Defining host lists Intelligently executing tasks with execute Failure handling Connections Password management contrib.console import confirm 改好之后，我们重新部署： $ fab deploy No hosts found. Please specify (single) host string for connection: my_server [my_server] run: git pull [my_server] out: Already up-to-date. [my_server] fabfile 中指定任何连接信息，所以 Fabric 依旧不知道该在哪里运 行这些远程命令。遇到这种情况时，Fabric 会在运行时提示我们。连接的定义 使用 SSH 风格的“主机串”（例如： user@host:port ），默认使用你的本地用户 名——所以在这个例子中，我们只需要指定主机名 my_server 。 与远程交互 如果你已经得到了代码，说明 git pull 执行非常顺利——但如果这是第一次

public: // Other stuff. bool IsInMap(const std::string& host) const { return host_int_map_.contains(host); } private: std::map host_int_map_; }; #include bool HasKnownHost(const HasKnownHost(const A& a) { return std::ranges::any_of( GetKnownHosts(), [&a](const auto& host) { return a.IsInMap(host); } ); }A better solution is to use std::span & std::string_view ☺ // In source file GetKnownHosts(), [&a](const auto& host) { return a.IsInMap(host); }); ^~~~ bool HasKnownHost(const A& a) { return std::ranges::any_of( GetKnownHosts(), [&a](const auto& host) { return a.IsInMa

JFrog Artifactory, including the free Artifactory Community Edition for Conan, enabling developers to host their own private packages on their own server. The ConanCenter central repository contains hundreds your own server to host your own packages and binaries privately, without needing to share them. The free JFrog Artifactory Community Edition (CE) is the recommended Conan server to host your own packages from remote servers. • JFrog Artifactory Community Edition (CE) is the recommended Conan server to host your own packages pri- vately under your control. It is a free community edition of JFrog Artifactory

JFrog Artifactory, including the free Artifactory Community Edition for Conan, enabling developers to host their own private packages on their own server. The ConanCenter central repository contains hundreds your own server to host your own packages and binaries privately, without needing to share them. The free JFrog Artifactory Community Edition (CE) is the recommended Conan server to host your own packages from remote servers. • JFrog Artifactory Community Edition (CE) is the recommended Conan server to host your own packages pri- vately under your control. It is a free community edition of JFrog Artifactory