In this webinar, I discuss the benefits of “Infrastructure-as-code” and how you can automate your cloud infrastructure deployments. We did a deep dive into Terraform, a leading solution and demonstrated how it enables the creation of reproducible infrastructure and accelerates productivity for infrastructure deployments on Alibaba Cloud. I also explored how to scale deployment for other use cases such as Disaster Recovery and Multi-cloud Deployment.

1. AUTOMATE YOUR CLOUD
INFRASTRUCTURE DEPLOYMENT
WITH TERRAFORM
Vinod Narayanankutty, 3 Sep

2. ABOUT ME
Vinod Narayanankutty
Enablement Director, Biqmind
Cloud Transformation Specialist
/vinodnarayanankutty
/nvinod-net

3. ABOUT BIQMIND
We provide Specialist Services and Software Tools to make cloud-native possible
Cloud-native Tools
CAPE radically simplifies advanced
Kubernetes functionalities
across clouds/on-premise
Disaster Recovery, Data Mobility and
Migration, Multi-cluster deployment, CI/CD
Specialist Services
Advisory and implementation services to
bridge gaps around process, product,
and technologies
Architecture, Development,
DevSecOps, Project Management
Discovery Workshops
Focused programs that deliver practical
goals, use cases and action plans
in 1 to 3 days
Technology or
industry specific

4. • What is Infrastructure as Code (IaC)?
• Why Terraform and how it works?
• Terraform and Alibaba Cloud
• Scaling deployments
TODAY’S AGENDA

5. WHAT IS INFRASTRUCTURE AS CODE?

6. Infrastructure as Code:
Provisioning infrastructure through software to
achieve consistent and predictable environments

7. FORMATS & APPROACHES
YAML
JSON
HCL
Imperative or Procedural:FORMATS:
aliyun ecs CreateInstance
--InstanceName myvm1
--ImageId centos_7_03_64_40G_alibase_20170625.vhd
--InstanceType ecs.n4.small
Declarative:
resource "alicloud_instance" "instance" {
instance_name = " myvm1 “
image_id = " centos_7_03_64_40G_alibase_20170625.vhd "
instance_type = " ecs.n4.small “
}

8. IT BENEFITS
ü Automated deployment
ü Repeatable & Consistent
ü Reusable modules
ü Source Control
ü Documentation

9. Time Cost Quality
Better customer
experience
BUSINESS BENEFITS
$

10. CHALLENGES
Culture Change Learning Curve

11. AVAILABLE SOLUTIONS
Available on Alibaba Cloud
Resource Orchestration Service
Others
OpenAPI Explorer

12. TERRAFORM OVERVIEW

13. Easy to Use and Modular
Supports Multiple Providers
Rich Integration
Plan and Apply
WHY TERRAFORM?

14. HOW DOES TERRAFORM WORK?
Code
Terraform files
Terraform
Core
Providers,
Terraform Plugins
InfrastructureTerraform State

15. Files
• main.tf – holds your Terraform
configuration code
• terraform.tfvars – specify variables for
your code
• terraform.tfstate – state file generated by
Terraform (do not touch)
TERRAFORM FILES & FORMAT
provider "alicloud" {
version = "1.93.0"
}
variable "vpc_name" {
default = "TF-VPC-DEV"
}
resource "alicloud_vpc" "vpc" {
name = var.vpc_name
}
output “vpc_id" {
value = alicloud_vpc.vpc.id
}

16. Initialize Plan Apply Destroy
TERRAFORM COMMANDS

17. TERRAFORM CORE OPTIONS
Terraform CLI – opensource Terraform Cloud, SaaS
and
Terraform Enterprise, Self-hosted

18. • Part of Alibaba Cloud DevOps Solution (link)
• Alibaba Cloud provider for Terraform (link)
• Terraform Module Web GUI (link)
• Terraform Modules and Examples (link)
ALIBABA CLOUD + TERRAFORM

19. INFRASTRUCTURE AS CODE +
TERRAFORM

20. DEMO SCENARIO
VPC: 10.0.0.0/16
VSwitch
10.0.1.0/24
VSwitch
10.0.2.0/24
VSwitch
10.0.3.0/24
Subnet –
Web
Subnet –
App
Subnet –
DB
VPC: 10.0.0.0/16
VSwitch
10.0.1.0/24
Subnet –
WebApp
Create
New
Update
Existing
Clean
up

21. DEMO TOOLS
Terraform Code Terraform Cloud
Manage Runs
Store State Files
GitHub
Version Control
System
Alibaba Cloud
Infrastructure
Provider

22. PREREQUISITES & PREPARATION
1.
Alibaba Cloud
API Access Key
2.
GitHub
Repository
3.
Terraform
Workspace

23. TERRAFORM EXECUTION
VPC: 10.0.0.0/16
VSwitch
10.0.1.0/24
VSwitch
10.0.2.0/24
VSwitch
10.0.3.0/24
Subnet –
Web
Subnet –
App
Subnet –
DB
Deploy
Update
Destroy
• Create a Virtual
Private Cloud (VPC)
• Create Subnet-
WebApp
• Update Subnet-
WebApps to
Subnet-Web
• Create Subnets
App and DB
• Cleanup

24. DEPLOYMENT AT SCALE

25. INFRA-AS-CODE PIPELINES
Test Env Prod Env
ReportCode
Commit
Trigger
Build
Deploy
Approve
DeployReview

26. DISASTER RECOVERY
Plan &
Apply
Region A Region BSecured
Backup
Scheduled
Trigger
Recovery
Deploy
Infra
Recover App
& Data

27. MIGRATION
On-prem or
Public Cloud
Alibaba CloudSecured
Backup
Terraform
Config
Architecture
Diagram
Infra Migration
App & Data Migration

28. MULTICLOUD DEPLOYMENT
Alibaba Cloud
Other Cloud
On-premise

29. Confidential – do not distribute
TRY CAPE NOW AT
CAPE.SH

30. TRAINING AND CERTIFICATION
Confidential – do not distribute
CERTIFICATION
• Apsara Certification
• Cloud Native Examination Prep Course
• Sign up for October exam schedule
• HashiCorp Infrastructure Automation Certification
TRAINING
• Alibaba Cloud Video Centre
• Terraform by HashiCorp

31. Q&A

32. THANK YOU
For more information:
Vinod Narayanankutty
vinod.nara@biqmind.com

33. © Copyright 2020 by Biqmind Pte. Ltd. All Rights Reserved.
No part of this document may be reproduced, transmitted, transcribed, stored in a retrieval system or translated into any language in any form by any
means without the written permission of Biqmind.
All contents are subject to change. While every precaution has been taken in the preparation of this document, Biqmind assumes no responsibility for
errors, omissions, or for damages resulting from the use of the information herein.
Products or corporate names may be trademarks or registered trademarks of other companies and are used only for the explanation and to the owners’
benefit, without intent to infringe.
We own all rights, titles, and interests in perpetuity to all intellectual properties which are, in whole or in part, described in this proposal. No parties shall
have any claim to or have any right, title or interest in them of any kind or nature.
Intellectual properties shall mean any idea, invention, knowledge, information, document, item, property, matter or issue, including without limitation to
the following:
• All intellectual property rights (whether owned exclusively by either Biqmind or related entities, or jointly with other parties or whether currently owned
by either Biqmind or related entities, or developed by Biqmind or related entities in the future).
• All Inventions contemplated, developed and accomplished by Biqmind or the related entities; For the purpose of this clause, “Invention” shall mean any
and all inventions (whether patentable, patented or not), ideas, and discoveries, including improvements, original works of authorship, designs,
formulas, processes, techniques, know-how computer programs or portions thereof, databases, trade secrets and proprietary information,
documentation, and materials made, created, conceived or reduced to practice.
Biqmind and related entities’ respective trade secrets and business information, including but not limited to all development plans and prospectuses,
technical files, technical diagrams, drawings, formulas, models and relevant technical articles, technical reports, all quality management methods, pricing
methods, sales methods and customers’ materials.
Confidential – do not distribute

34. Credits:
Slides 14, 21 : Icons made by Smashicons from Flaticon
Slides 25, 26: Icons made by Freepik from Flaticon
Slides 27, 28: Icons made by srip from Flaticon
Confidential – do not distribute