Pro-Tips-for-Builders-on-AWS

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Pro Tips for Builders on AWS
Pahud Hsieh
Specialist SA, Serverless
Amazon Web Services

A little bit about me
• Serverless Specialist SA, GCR
• Focus on Serverless, Container and DevOps
• Father of a 5-year-old daughter
• Was Living in Shanghai 2006-2012
• Fan of road trip. Been to Siberia, Balkans,
India, Cuba and Svalbard

AWS CLI

Why we love the CLI

JMESPath

$ aws ec2 describe-regions
$ aws ec2 describe-regions --query 'Regions[*].RegionName'

$ aws ec2 describe-regions --query 'Regions[?starts_with(RegionName,
`us`)].RegionName'

$ aws ec2 describe-regions --query 'Regions[?starts_with(RegionName,
`us`)].RegionName’ --output table

# assign $regions as bash array
$
# number of regions
$ echo ${#regions[@]}
# for loop processing
$ for r in ${regions[@]}
do
custom_process_logic $r
done

Who am I?

$ aws sts get-caller-identity
{
"Account": "901234567890",
"UserId": "AIDAJVHX3XBRH4AFDCYHS",
"Arn": "arn:aws:iam::901234567890:user/pahud"
}

Assume-Role

$ cat ~/.aws/config
[default]
region = us-west-2
[profile devops]
source_profile = default
role_arn = arn:aws:iam::643758553812:role/AdminRole4Switch

$ aws --profile devops sts get-caller-identity
{
"Account": "643758553812",
"UserId": "AROAI4IWAM5EDVG5YGZ1W:botocore-session-
1561296250",
"Arn": "arn:aws:sts::643758553812:assumed-
role/AdminRole4Switch/botocore-session-1561296250"
}

AWS CLI in Docker

FROM alpine:latest
RUN
mkdir -p /aws &&
apk -Uuv add groff less python py-pip &&
pip install awscli &&
apk --purge -v del py-pip &&
rm /var/cache/apk/*
WORKDIR /aws
ENTRYPOINT ["aws"]

$ alias aws="docker run -v $HOME:/root -v `pwd`:/workdir
pahud/awscli:latest”
$ aws sts get-caller-identity
{
"Account": "901234567890",
"UserId": "AIDAJVHX3XBRH4AFDCYHS",
"Arn": "arn:aws:iam::901234567890:user/pahud"
}

Can I use AWS CLI in Lambda?

https://github.com/aws-samples/aws-lambda-layer-awscli

Just 3 lines in Lambda

Can I make my code reusable?

SAM Template
Tells AWS CloudFormation this is a
SAM template it needs to
“transform”
Creates a AWS Lambda function
with the referenced managed AWS
IAM policy, runtime, code at the
referenced zip location, and handler
as defined. Also creates an Amazon
API Gateway and takes care of all
mapping/permissions necessary
Creates a Amazon DynamoDB table
AWSTemplateFormatVersion: '2010-09-09’
Transform: AWS::Serverless-2016-10-31
Resources:
GetHtmlFunction:
Type: AWS::Serverless::Function
Properties:
CodeUri: s3://sam-demo-bucket/todo_list.zip
Handler: index.gethtml
Runtime: nodejs6.10
Policies: AmazonDynamoDBReadOnlyAccess
Events:
GetHtml:
Type: Api
Properties:
Path: /{proxy+}
Method: ANY
ListTable:
Type: AWS::DynamoDB::Table

What does a Serverless App look like

Develop/package/deploy SAM application
$ ENV_VAR=VALUE sam local invoke FunctionName --event event.json
$ ENV_VAR=VALUE sam local start-api
$ sam package --template-file template.yaml
--s3-bucket my-s3-bucket
--output-template-file packaged.yaml
$ sam deploy --template-file packaged.yaml
--capabilities CAPABILITY_IAM CAPABILITY_AUTO_EXPAND
--stack-name my-stack-name
--parameter-overrides Foo=bar
$ sam logs --name FunctionName --stack-name StackName --tail

Package, Publish and Deploy

Serverless Application Repository(SAR)

Now your Serverless Stack looks like this

MyServerlessApp:
Type: AWS::Serverless::Application
Properties:
Location:
ApplicationId: arn:aws:serverlessrepo:us-east-1:903779448426:applications/my-app-name
SemanticVersion: 1.0.0
Parameters:
ClusterName: !Ref ClusterName
LambdaRoleArn: !Ref LambdaRoleArn
LambdaLayerKubectlArn: !Ref LambdaLayerKubectlArn
NodeInstanceRoleArn: !Ref NodeInstanceRoleArn
FunctionName: !Sub "eks-auth-update-hook-${AWS::StackName}"
Define Your Serverless App to Install from SAR

UpdateCM:
Type: Custom::UpdateConfigMap
Properties:
ServiceToken: !GetAtt ConfigMapUpdate.Outputs.LambdaFuncArn
Dependency Resource(s)

Reusing Your Serverless App means:
No Server + (almost) No Code !

How to publish to SAR

Metadata:
AWS::ServerlessRepo::Application:
Name: my-serverless-app
Description: ”My Demo Serverless App for SAR"
Author: Pahud Hsieh
SpdxLicenseId: Apache-2.0
LicenseUrl: LICENSE
ReadmeUrl: README.md
Labels: [demo','lambda','kubectl','eks', 'aws', 'kubernetes', 'k8s']
HomePageUrl: https://github.com/pahud/my-demo-sar-app
SemanticVersion: 1.0.1
SourceCodeUrl: https://github.com/pahud/my-demo-sar-app
Metadata in SAM template

Publish SAM application to SAR
$ sam package --template-file template.yaml
--s3-bucket my-s3-bucket
--output-template-file packaged.yaml
$ sam publish --template-file packaged.yaml
The following metadata of application "arn:aws:serverlessrepo:us-east-
1:068896461592:applications/my-serverless-app" has been updated:
{
"Description": ”My Demo Serverless App for SAR”,
"Author": ”Pahud Hsieh"
}
Click the link below to view your application in AWS console:
https://console.aws.amazon.com/serverlessrepo/home?region=us-east-1#/published-
applications/arn:aws:serverlessrepo:us-east-1:0123456789:my-serverless-app

AWS Lambda Layers

Reusing Your Lambda Layers

aws-samples/aws-lambda-layer-awscli

One-click Deployment
https://github.com/aws-samples/aws-lambda-layer-awscli

Resources:
LambdaLayer:
Type: AWS::Serverless::LayerVersion
Properties:
LayerName: !Sub "${AWS::StackName}"
ContentUri: ./layer.zip
CompatibleRuntimes:
- provided
LicenseInfo: 'Available under the MIT-0 license.'
RetentionPolicy: Retain

#!/bin/bash
-
CONTAINER= -
CONTAINER /
CONTAINER /
exit 0

Key Takeaways
1. Use JMESPath to query your AWS CLI output
2. Containerize your AWS CLI
3. Bundle AWS CLI in AWS Lambda Layer and script your Lambda in Bash
4. Publish your Serverless Layers and Apps to SAR
5. Zero server and (almost) zero code
6. Welcome to the new Serverless World

Thank you!
S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Pahud Hsieh @pahudnet
hunhsieh@amazon.com
http://fb.me/pahud
Specialist SA, Serverless
Amazon Web Services

Pro-Tips-for-Builders-on-AWS

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Pro-Tips-for-Builders-on-AWS

Similar to Pro-Tips-for-Builders-on-AWS (20)

More from Amazon Web Services

More from Amazon Web Services (20)

Pro-Tips-for-Builders-on-AWS