Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Provision to Production with Terraform Enterprise
Similar to Provision to Production with Terraform Enterprise (20)
More from Amanda MacLeod
More from Amanda MacLeod (6)
Recently uploaded
Recently uploaded (20)
Provision to Production with Terraform Enterprise
- 1. Copyright © 2018 HashiCorp Provision to Production with Terraform Enterprise Quickly and efficiently deploy infrastructure without anxiety
- 2. Copyright © 2018 HashiCorp • HashiCorp solutions engineer based in Austin, Texas • Learned to type on a manual typewriter • Recovering system administrator • Enjoys building robots and automated things • AWS Solutions Architect – Associate • Likes yoga and making pizzas • Github username: scarolan Your Host - Sean Carolan 2 Sean in Mexico with parrots (yes, they are real)
- 3. Copyright © 2018 HashiCorp • Mandatory tags on your AWS Instances • Deploy a cleanup bot to terminate or stop what’s not in use • Send reports to your users via Slack or email • Save piles of money and buy a boat https://www.hashicorp.com/resources/rein-in-cloud- costs-with-terraform-and-aws-lambda In the previous episode… 3
- 4. Copyright © 2018 HashiCorp • Provision infrastructure quickly and efficiently • Ensure that organizational standards are followed correctly • Have increased control and security in the cloud • Reduce risk and human error • Maintain an audit trail of all changes made to dev, staging and prod environments The Promise of Cloud 4
- 5. Copyright © 2018 HashiCorp Everything is an API 5 • Cloud infrastructure is provisioned via a REST-ful API. • Everything in AWS has an API endpoint. • The GUI is training wheels for new users • Giving users unrestricted console access is risky • You must master Infrastructure as Code to increase velocity safely • Break the habit of using the console to create resources My First Cloud Console* * Yes, this is a joke. But not really. Stop depending on the GUI!
- 6. Copyright © 2018 HashiCorp 1. It’s the DNA of your infrastructure 2. All the details for building out complex topologies are encoded in a simple language 3. The code is both human and machine readable 4. Everything should be stored as code, and not manual instructions or steps Infrastructure as Code 6
- 7. Copyright © 2018 HashiCorp Infrastructure as Code Tools 7 Operating System Linux, Windows, etc. Config management tools can help you build your OS and application configs. They are generally limited to working within the confines of your operating system. You can build bespoke infrastructure as code using Bash or Powershell.
- 8. Copyright © 2018 HashiCorp Infrastructure as Code Tools 8 AWS Azure GCP Each cloud has its own YAML or JSON based provisioning tool. Terraform can be used across all major cloud providers and VM hypervisors.
- 9. Copyright © 2018 HashiCorp What is Terraform? 9 • Terraform: the DNA of your hybrid infrastructure • Both human and machine friendly • Easy to copy, re-use, test, share and modify • Expose only the necessary variables to consumers • Build any infrastructure on any platform
- 10. Copyright © 2018 HashiCorp Why Terraform Enterprise? 10 • Easy Mode - UI integration with Version Control System • Advanced Users - API driven workflow with CI/CD pipeline • Centralized Terraform state management • Create infrastructure on multiple cloud platforms • Sentinel policy enforcement • Single Sign-On with SAML • Secure variable and API key management • Promote code changes safely through environments
- 11. Copyright © 2018 HashiCorp A Sentinel Stands Guard 11 • Restrict instance sizes • Limit the number of instances • Run only in specific regions • Enforce tagging standards • Mandate use of hardened images • Many more rules are possible…
- 12. Copyright © 2018 HashiCorp Simple and effective workflow 12
- 13. s Copyright © 2018 HashiCorp 13 Live Demo
- 14. Copyright © 2018 HashiCorp Useful Links 14
Editor's Notes
- Hi, I'm Sean Carolan, Solutions Engineer with HashiCorp. I’m a former systems administrator. In a past life I worked in the gaming industry. I’ve got many years experience caring for and feeding Linux servers.
- In part one of this webinar, we showed you how to use Terraform to deploy a serverless application. A simple tagging system was used to mark instances for deletion after their time-to-live expires. Hopefully you saved a ton of money and learned a bit about Terraform and AWS Lambda in the process. But how can you make sure everything gets tagged properly to begin with? In part two we will show you how to securely and safely provision cloud infrastructure with Terraform Enterprise.
- Everyone wants to move to the cloud. Infrastructure on demand – what’s not to like. Just pay as you go and your cloud vendor will manage all the hardware and low-level infrastructure for you. But it’s not that easy! Your vendors and devops unicorns will tell you it’s great. Just sprinkle some devops on there, and you’ll be good to go. But as anyone who’s done a cloud migration project will tell you, it’s not quite that easy. If you simply “lift and shift” your current legacy processes and code into the cloud you’ll be a little better off, but you still won’t achieve the velocity or level of efficiency you were promised.
- In the cloud everything is an API. All the way down to the network level. You can describe entire networks and virtual data centers using code. AWS is a service oriented architecture. There was a famous memo that Jeff Bezos created back in 2002. It was a mandate. Every single department had to move to a Service Oriented Architecture. Instead of calling up someone over in marketing you had to interact with their API. And all those APIs had to be build to be public-facing right from the get go. https://plus.google.com/+RipRowan/posts/eVeouesvaVX https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Welcome.html You absolutely must master infrastructure as code to get the most out of cloud The GUI is training wheels. You have to learn to ride without them [slide] Giving your users unrestricted access to your AWS account is dangerous.