Using the DevOps model to treat your infrastructure environments as code enables you to automate and scale your development and production environments. Companies such as Puppet and Chef have built popular infrastructure automation solutions and have a thriving community interested in helping others succeed. AWS OpsWorks helps you succeed in using Puppet and Chef on AWS by removing the undifferentiated heavy lifting. In this session, discover how OpsWorks helps you focus on the core task of configuration management using Puppet and Chef, by setting up and maintaining your environment in just a few clicks.

1. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS re:INVENT
C o n f i g u r a t i o n M a n a g e m e n t w i t h A W S O p s W o r k s
Automate and Scale
Jens Bräuer and Mark Rambow
N o v e m b e r 3 0 , 2 0 1 7

2. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
What to Expect from This Session
• Configuration management: automate your infrastructure
• Configuration management in AWS
• Chef Automate and Puppet Enterprise
• Live demos of AWS OpsWorks for Puppet Enterprise

3. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Configuration Management
Configuration Management is a practice
that lets you use code
that represents the state of your infrastructure

4. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS CloudFormation—Infrastructure Level
and many more…
Amazon
VPC
AWS
Lambda
Amazon
EC2
Amazon
S3
Amazon
DynamoDB
Elastic Load
Balancing
Amazon
CloudFront
Amazon
CloudWatch
Elastic Load
Balancing
AWS Elastic
Beanstalk
Amazon ECS Amazon
RDS
Amazon
Redshift
Amazon
VPC
AWS
OpsWorks

5. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks—Instance Level
Packages
Files Config
Every single bit on the instance

6. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Your Infrastructure—Setup
In the cloud, you need
• Consistency
• Insights
• Self-service

7. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Your Infrastructure—Maintenance
Typical operational challenges
• Company policy compliance
• Software versions
• Apply patches
• System level rollbacks
• Key rotation
• Add and remove users
• Remove access for terminated instances
• …

8. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks for Puppet Enterprise—Demo 1
• Let’s see what our cluster looks like
• And install a new package

9. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks Offers Configuration Management
• Abstraction for your configuration
• Community Configuration Code
• Chef Supermarket and Puppet Forge
• Widely adopted DSLs: Chef and Puppet
• Insights and Actions
• Easy to use with AWS Auto Scaling

10. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Manage Your Infrastructure with Code
• Desired state
• Software development best practices
• Automation, repeatability, reliability
• System Configuration modeled with code

11. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks for
Chef Automate and Puppet Enterprise
Server Management from AWS OpsWorks
• Setup with just a few clicks
• Monitored health
• Automated backups
• Restoration
• Auto upgrades
(NEW)

12. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks for Puppet Enterprise—Demo 2
• Creating an AWS OpsWorks for Puppet Enterprise Server

13. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks for
Chef Automate and Puppet Enterprise
• Enterprises move away from single server approach
• Configuration managed by individual teams
• Baseline configuration is shared
(NEW)

14. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks for
Chef Automate and Puppet Enterprise
• Supported by AWS
• Licenses and billing through AWS
• Hourly billing per node
(NEW)

15. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks Unattended Node Association
• AWS APIs to establish trust
• AWS IAM-based permission model, no shared certificates
• Amazon EC2 Auto Scaling Groups
• AWS EC2, CloudFormation, anything that supports userdata
scripts

16. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Chef Node Association
Operator Workstation key
NodeNodeNode
Node
Node
Node
key
(2) knife bootstrap…
SSH
(1) knife upload…
(3) Chef runs

17. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Puppet Node Association
NodeNodeNode
Node
Node
Node
CA
Cert
(1) Cert signing request
(3) Receiving catalogs
Verify
CSR
(4) Sending results and facts
(2)

18. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
OpsWorks for * Associate Node
or
key
NodeNodeNode
Node
Node
Node
key
(1) Associate-
node
(2) Establish trust
(3) Configuration
management
AWS OpsWorks CM API Endpoint IAM

19. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks Starter Kit
• Quickstart guide
• Workstation configuration
• First provisioned managed node in minutes
• Example and Getting-Started guide
• Ready-to-use userdata script

20. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks for Chef Automate
• Chef Server (12.16.4)
• Chef Automate and
Compliance (1.6.179)

21. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks for Puppet Enterprise
• Puppet Enterprise Server v. 2017.3.2
• Puppet 5 Platform
• Puppet Code Manager
• Puppet Tasks

22. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS OpsWorks for Puppet Enterprise—Demo 3
• Use the StarterKit and provision your first node(s)
• Deploy a change to the Puppet Master
• Integrate with EC2 Auto Scaling

23. © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Wrap Up
• It is easy to get your server from AWS OpsWorks
• Provisioning new nodes and management is straight forward
• Integration with EC2 Auto Scaling is enhanced
• You can meet us
• At the AWS Management Tools Booth
• Puppet and Chef can be found in the Expo Hall
• Hang out with us at the AWS Village
• Twitter: @AWSOpsWorks