SlideShare a Scribd company logo
1©2019 HeleCloud 1©2019 HeleCloud
Accelerating Infrastructure as Code
and Configuration Management
using CI on AWS
Will Hall – DevOps Consultant
Do you actually treat
your Infrastructure as
Code?
3©2019 HeleCloud 3©2019 HeleCloud
1. Why do you use IaC or Config
Management?
2. AWS as an API
3. Effective Infrastructure Planning
4. The Infrastructure Development
LifeCycle
5. IaC and CI
6. Pipelining inside AWS with Code*
and Terraform
Today…
4©2019 HeleCloud 4©2019 HeleCloud
About Me – Will Hall
• DevOps Consultant @
HeleCloud
• Work on IaC, CI/CD,
Automation
• Docker Community Leader
• GitLab Hero
• 16 Guitars
• Twitter: @hn_will
• LinkedIn:
https://linkedin.com/in/willhallonline
Git Everything!
7©2019 HeleCloud 7©2019 HeleCloud
IaC and Configuration Management
• Software
• Infrastructure
• Documentation
• Marketing
• Automation
• CI
• Blog
8©2019 HeleCloud 8©2019 HeleCloud
Infrastructure as Code
Easily reproducible
Disposable
Consistent
Change is easy, cheap, and
repeatable
9©2019 HeleCloud 9©2019 HeleCloud
Cloud is the Operating System
Athena
10©2019 HeleCloud 10©2019 HeleCloud 10©2019 HeleCloud
Solve our problems…
Is AWS just an API?
12©2019 HeleCloud 12©2019 HeleCloud
Treating AWS as an API
• Request resources
• Utilise value-added services
• Build with flexibility to change and knowledge of
landscape
• Re-usability of solutions
Infrastructure… as code
14©2019 HeleCloud 14©2019 HeleCloud
IaC Tools
Infrastruct
Provisioni
• Terraform
• AWS
CloudForm
Configurat
Managem
• Ansible
• Chef
• Puppet
15©2019 HeleCloud 15©2019 HeleCloud
IaC Separation
Infrastructu
Provisionin
• WHAT
Configurati
Manageme
• HOW
16©2019 HeleCloud 16©2019 HeleCloud
IaC Separation
Infrastructu
Provisionin
• Immutable
Configurati
Manageme
• Mutable
Understandi
ng
18©2019 HeleCloud 18©2019 HeleCloud
Understanding your landscape
• What assets do you have?
• Mutable or immutable
• What skills do you have, what do you need?
19©2019 HeleCloud 19©2019 HeleCloud
Infrastructure Planning Balance
Risk
RewImpa
Infrastructure Life Cycle
21©2019 HeleCloud 21©2019 HeleCloud
Infrastructure Lifecycle
Provision
Configure
Deploy
Monitor
Destroy
Iterate
22©2019 HeleCloud 22©2019 HeleCloud
Software Defined Infrastructure
• Software workflows for
infrastructure changes to
match product:
• Versioning
• Issue management
• Changelogs
• Auditability
• Testing that building and
running the infrastructure
works as planned:
• Repeatable
• Stable
• Secure
• Visible
23©2019 HeleCloud 23©2019 HeleCloud
CI/CD for Infrastructure
• Continual deployment models
• Integration of changes to working environments
• Many small iterative improvements
• Machine based releases
• Automation reveals assumptions and errors faster
• Automation delivers speed, stability, security
Everybody loves
pipelines
25©2019 HeleCloud 25©2019 HeleCloud
Pipeline Tools
• AWS:
• CodeBuild
• CodePipeline
• VCS
• GitLab CI
• BitBucket Pipelines
• External tools
• CircleCI
• Travis
• Jenkins (meh)
26©2019 HeleCloud 26©2019 HeleCloud
Choosing Pipeline Tools
• Either match your Infrastructure Provider
• AWS CodeBuild
• AWS CodePipeline
• Or your VCS:
• GitLab CI
• BitBucket Pipelines
• CircleCI
©2019 HeleCloud 2727©2019 HeleCloud 2727
Pipeline Based IaC
Lint Build
Deploy
Test
Test Deploy Monitor Destroy
Secure
DevSecOp
s
28©2019 HeleCloud 28©2019 HeleCloud
DevSecOps in IaC
• Secure inside your pipeline
• Code analysis
• Change management
• Compliance monitoring
• Threat investigation
• Vulnerability assessment
In the real world…
30©2019 HeleCloud 30©2019 HeleCloud 30©2019 HeleCloud
AWS CodePipeline for Terraform
1.Lint (terraform fmt)
2.Build (terraform init, version, validate)
3.Plan (terraform plan -out=plan.out)
4.Comply (terraform-compliance)
5.Test (go test –v [terratest])
6.Apply (terraform apply)
7.Destroy (terraform destroy)
31©2019 HeleCloud 31©2019 HeleCloud
Testing Terraform
• Build
• Terraform
• Comply
• Terraform-Compliance https://github.com/eerkunt/terraform-
compliance
• Terratest – Do it on a separate account!
• Terratest https://github.com/gruntwork-io/terratest
32©2019 HeleCloud 32©2019 HeleCloud
BuildSpec-ing it
• For us; BuildSpec Files Pre-Created
• Structured separation into logical units:
• Compute
• Storage
• Database
• IAM
33©2019 HeleCloud 33©2019 HeleCloud
CodePipeline Hierarchy
• CodeBuild Project
• BuildSpec
• pre_build: setup project space
• build: run core commands
• post-build: complete tasks
• artifacts: store artifacts
34©2019 HeleCloud 34©2019 HeleCloud 34©2019 HeleCloud
CodeBuild-pre_build
pre_build:
commands:
- echo "Executing codebuild for ${service_name}”
- CURRENT_ACCOUNT_ID=$(echo $CODEBUILD_BUILD_ARN | cut -d':' -
f5)
- temp_role=$(aws sts assume-role --role-arn
arn:aws:iam::$CURRENT_ACCOUNT_ID:role/${assume_role_name} --
role-session-name ${CURRENT_ACCOUNT_ID}_tf_apply)
- aws configure set aws_access_key_id $(echo $temp_role | jq
.Credentials.AccessKeyId | xargs)
- …
35©2019 HeleCloud 35©2019 HeleCloud 35©2019 HeleCloud
CodeBuild-build
build:
commands:
- aws configure…
- terraform init -no-color 2>&1 | tee /tmp/initOut.txt
- terraform apply -no-color --auto-approve
- go test –v
- …
36©2019 HeleCloud 36©2019 HeleCloud 36©2019 HeleCloud
CodeBuild-post_build
post_build:
commands:
- echo "Exit with error if the build didn't succeed"
- bash -c "if [ /"$CODEBUILD_BUILD_SUCCEEDING/" == /"0/" ];
then exit 1; fi"
- echo "build finished on `date`"
37©2019 HeleCloud 37©2019 HeleCloud 37©2019 HeleCloud
CodeBuild-artifacts
artifacts:
files:
- /tmp/${service_name}_initOut.txt
- /tmp/${service_name}_tfoutput.yml
discard-paths: yes
Code it all!
39©2019 HeleCloud 39©2019 HeleCloud
Infrastructure as Code
Easily reproducible
Disposable
Consistent
Change is easy, cheap, and
repeatable
40©2019 HeleCloud 40©2019 HeleCloud
Value creation
• All solutions need a reason for selection
• IaC gives you to potential to scale and alter infrastructure
in seconds
• IaC is not complete without CI/Automation
• Review and manage Infrastructure like software
• Build on best practices to enable future security
• Structure before you act
• Focus on principles and let them choose tools for you
Do you actually treat
your Infrastructure as
Code?
42©2019 HeleCloud 42©2019 HeleCloud
Questions?
@hn_will
https://linkedin.com/in/willhallonline
https://www.helecloud.com
43©2019 HeleCloud 43©2019 HeleCloud
Credits
• Image by https://pixabay.com/users/Rainer_Maiores-
147114/
• Image by https://pixabay.com/users/Free-Photos-242387/
• Image by https://pixabay.com/users/hschmider-3108740/
• Image by https://pixabay.com/users/acekreations-
1659208/
• Image by https://pixabay.com/users/jarmoluk-143740/
• Image by https://pixabay.com/users/DariuszSankowski-
1441456/
• Image by https://pixabay.com/users/RyanMcGuire-
123690/

More Related Content

What's hot

DevOps Toolbox: Infrastructure as code
DevOps Toolbox: Infrastructure as codeDevOps Toolbox: Infrastructure as code
DevOps Toolbox: Infrastructure as code
sriram_rajan
 
DevCon 2018 - 5 ways to use AWS with Alfresco
DevCon 2018 - 5 ways to use AWS with AlfrescoDevCon 2018 - 5 ways to use AWS with Alfresco
DevCon 2018 - 5 ways to use AWS with Alfresco
Gavin Cornwell
 
Nils Rhode - Does it always have to be k8s - TeC Day 2019
Nils Rhode - Does it always have to be k8s - TeC Day 2019Nils Rhode - Does it always have to be k8s - TeC Day 2019
Nils Rhode - Does it always have to be k8s - TeC Day 2019
Haufe-Lexware GmbH & Co KG
 
Infrastructure as Code on Azure: Show your Bicep!
Infrastructure as Code on Azure: Show your Bicep!Infrastructure as Code on Azure: Show your Bicep!
Infrastructure as Code on Azure: Show your Bicep!
Marco Obinu
 
Multi-container Applications on OpenShift with Ansible Service Broker
Multi-container Applications on OpenShift with Ansible Service BrokerMulti-container Applications on OpenShift with Ansible Service Broker
Multi-container Applications on OpenShift with Ansible Service Broker
Amazon Web Services
 
Infrastructure Automation with Chef
Infrastructure Automation with Chef Infrastructure Automation with Chef
Infrastructure Automation with Chef
REAN Cloud
 
A Pathway to Continuous Integration/Continuous Delivery on AWS
A Pathway to Continuous Integration/Continuous Delivery on AWSA Pathway to Continuous Integration/Continuous Delivery on AWS
A Pathway to Continuous Integration/Continuous Delivery on AWS
Bhuvaneswari Subramani
 
AWS Summit Sydney 2014 | Continuous Integration and Deployment Best Practices...
AWS Summit Sydney 2014 | Continuous Integration and Deployment Best Practices...AWS Summit Sydney 2014 | Continuous Integration and Deployment Best Practices...
AWS Summit Sydney 2014 | Continuous Integration and Deployment Best Practices...
Amazon Web Services
 
Implementing Infrastructure as Code ConfigMgtCamp 2017
Implementing Infrastructure as Code ConfigMgtCamp 2017Implementing Infrastructure as Code ConfigMgtCamp 2017
Implementing Infrastructure as Code ConfigMgtCamp 2017
Kief Morris
 
X-celerate 2019: Iterating fast with the MERN Stack
X-celerate 2019: Iterating fast with the MERN StackX-celerate 2019: Iterating fast with the MERN Stack
X-celerate 2019: Iterating fast with the MERN Stack
Haufe-Lexware GmbH & Co KG
 
Accelerating Innovation with DevOps on AWS
Accelerating Innovation with DevOps on AWSAccelerating Innovation with DevOps on AWS
Accelerating Innovation with DevOps on AWS
Amazon Web Services
 
Chef Cookbook Workflow
Chef Cookbook WorkflowChef Cookbook Workflow
Chef Cookbook Workflow
Amazon Web Services
 
Azure Days 2019: Infrastructure as Code auf Azure (Jonas Wanninger & Daniel H...
Azure Days 2019: Infrastructure as Code auf Azure (Jonas Wanninger & Daniel H...Azure Days 2019: Infrastructure as Code auf Azure (Jonas Wanninger & Daniel H...
Azure Days 2019: Infrastructure as Code auf Azure (Jonas Wanninger & Daniel H...
Trivadis
 
Infrastructure as Code
Infrastructure as CodeInfrastructure as Code
Infrastructure as Code
Matt Cowger
 
Infrastructure as Code
Infrastructure as CodeInfrastructure as Code
Infrastructure as Code
Robert Greiner
 
Serverless Summit India 2017: Fission
Serverless Summit India 2017: FissionServerless Summit India 2017: Fission
Serverless Summit India 2017: Fission
Vishal Biyani
 
Introduction to chef
Introduction to chefIntroduction to chef
Introduction to chef
Krishna Kishore
 
OSGi Feature Model - Where Art Thou - David Bosschaert (Adobe)
OSGi Feature Model - Where Art Thou - David Bosschaert (Adobe)OSGi Feature Model - Where Art Thou - David Bosschaert (Adobe)
OSGi Feature Model - Where Art Thou - David Bosschaert (Adobe)
mfrancis
 
Chef Automate - Infracoders Canberra August 8, 2017
Chef Automate - Infracoders Canberra August 8, 2017Chef Automate - Infracoders Canberra August 8, 2017
Chef Automate - Infracoders Canberra August 8, 2017
Matt Ray
 
AWS DevOps Event - AWS Services enabling DevOps - Continuous Integration & Au...
AWS DevOps Event - AWS Services enabling DevOps - Continuous Integration & Au...AWS DevOps Event - AWS Services enabling DevOps - Continuous Integration & Au...
AWS DevOps Event - AWS Services enabling DevOps - Continuous Integration & Au...
Ian Massingham
 

What's hot (20)

DevOps Toolbox: Infrastructure as code
DevOps Toolbox: Infrastructure as codeDevOps Toolbox: Infrastructure as code
DevOps Toolbox: Infrastructure as code
 
DevCon 2018 - 5 ways to use AWS with Alfresco
DevCon 2018 - 5 ways to use AWS with AlfrescoDevCon 2018 - 5 ways to use AWS with Alfresco
DevCon 2018 - 5 ways to use AWS with Alfresco
 
Nils Rhode - Does it always have to be k8s - TeC Day 2019
Nils Rhode - Does it always have to be k8s - TeC Day 2019Nils Rhode - Does it always have to be k8s - TeC Day 2019
Nils Rhode - Does it always have to be k8s - TeC Day 2019
 
Infrastructure as Code on Azure: Show your Bicep!
Infrastructure as Code on Azure: Show your Bicep!Infrastructure as Code on Azure: Show your Bicep!
Infrastructure as Code on Azure: Show your Bicep!
 
Multi-container Applications on OpenShift with Ansible Service Broker
Multi-container Applications on OpenShift with Ansible Service BrokerMulti-container Applications on OpenShift with Ansible Service Broker
Multi-container Applications on OpenShift with Ansible Service Broker
 
Infrastructure Automation with Chef
Infrastructure Automation with Chef Infrastructure Automation with Chef
Infrastructure Automation with Chef
 
A Pathway to Continuous Integration/Continuous Delivery on AWS
A Pathway to Continuous Integration/Continuous Delivery on AWSA Pathway to Continuous Integration/Continuous Delivery on AWS
A Pathway to Continuous Integration/Continuous Delivery on AWS
 
AWS Summit Sydney 2014 | Continuous Integration and Deployment Best Practices...
AWS Summit Sydney 2014 | Continuous Integration and Deployment Best Practices...AWS Summit Sydney 2014 | Continuous Integration and Deployment Best Practices...
AWS Summit Sydney 2014 | Continuous Integration and Deployment Best Practices...
 
Implementing Infrastructure as Code ConfigMgtCamp 2017
Implementing Infrastructure as Code ConfigMgtCamp 2017Implementing Infrastructure as Code ConfigMgtCamp 2017
Implementing Infrastructure as Code ConfigMgtCamp 2017
 
X-celerate 2019: Iterating fast with the MERN Stack
X-celerate 2019: Iterating fast with the MERN StackX-celerate 2019: Iterating fast with the MERN Stack
X-celerate 2019: Iterating fast with the MERN Stack
 
Accelerating Innovation with DevOps on AWS
Accelerating Innovation with DevOps on AWSAccelerating Innovation with DevOps on AWS
Accelerating Innovation with DevOps on AWS
 
Chef Cookbook Workflow
Chef Cookbook WorkflowChef Cookbook Workflow
Chef Cookbook Workflow
 
Azure Days 2019: Infrastructure as Code auf Azure (Jonas Wanninger & Daniel H...
Azure Days 2019: Infrastructure as Code auf Azure (Jonas Wanninger & Daniel H...Azure Days 2019: Infrastructure as Code auf Azure (Jonas Wanninger & Daniel H...
Azure Days 2019: Infrastructure as Code auf Azure (Jonas Wanninger & Daniel H...
 
Infrastructure as Code
Infrastructure as CodeInfrastructure as Code
Infrastructure as Code
 
Infrastructure as Code
Infrastructure as CodeInfrastructure as Code
Infrastructure as Code
 
Serverless Summit India 2017: Fission
Serverless Summit India 2017: FissionServerless Summit India 2017: Fission
Serverless Summit India 2017: Fission
 
Introduction to chef
Introduction to chefIntroduction to chef
Introduction to chef
 
OSGi Feature Model - Where Art Thou - David Bosschaert (Adobe)
OSGi Feature Model - Where Art Thou - David Bosschaert (Adobe)OSGi Feature Model - Where Art Thou - David Bosschaert (Adobe)
OSGi Feature Model - Where Art Thou - David Bosschaert (Adobe)
 
Chef Automate - Infracoders Canberra August 8, 2017
Chef Automate - Infracoders Canberra August 8, 2017Chef Automate - Infracoders Canberra August 8, 2017
Chef Automate - Infracoders Canberra August 8, 2017
 
AWS DevOps Event - AWS Services enabling DevOps - Continuous Integration & Au...
AWS DevOps Event - AWS Services enabling DevOps - Continuous Integration & Au...AWS DevOps Event - AWS Services enabling DevOps - Continuous Integration & Au...
AWS DevOps Event - AWS Services enabling DevOps - Continuous Integration & Au...
 

Similar to Will hall - Accelerating Infrastructure as Code and Configuration Management with CI and AWS

DevOps on AWS: A Practical Introduction
DevOps on AWS: A Practical IntroductionDevOps on AWS: A Practical Introduction
DevOps on AWS: A Practical Introduction
aledsage
 
How to Prevent Your Kubernetes Cluster From Being Hacked
How to Prevent Your Kubernetes Cluster From Being HackedHow to Prevent Your Kubernetes Cluster From Being Hacked
How to Prevent Your Kubernetes Cluster From Being Hacked
Nico Meisenzahl
 
How (and why) to roll your own Docker SaaS
How (and why) to roll your own Docker SaaSHow (and why) to roll your own Docker SaaS
How (and why) to roll your own Docker SaaS
Ryan Crawford
 
KCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being Hacked
KCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being HackedKCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being Hacked
KCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being Hacked
Nico Meisenzahl
 
Infrastructure Is Code with the AWS Cloud Development Kit (DEV372) - AWS re:I...
Infrastructure Is Code with the AWS Cloud Development Kit (DEV372) - AWS re:I...Infrastructure Is Code with the AWS Cloud Development Kit (DEV372) - AWS re:I...
Infrastructure Is Code with the AWS Cloud Development Kit (DEV372) - AWS re:I...
Amazon Web Services
 
DevOps Spain 2019. Pedro Mendoza-AWS
DevOps Spain 2019. Pedro Mendoza-AWSDevOps Spain 2019. Pedro Mendoza-AWS
DevOps Spain 2019. Pedro Mendoza-AWS
atSistemas
 
HOW TO DRONE.IO IN CI/CD WORLD
HOW TO DRONE.IO IN CI/CD WORLDHOW TO DRONE.IO IN CI/CD WORLD
HOW TO DRONE.IO IN CI/CD WORLD
Aleksandr Maklakov
 
Microservices & Serverless Architecture Principles Applied - Cisco Live Orlan...
Microservices & Serverless Architecture Principles Applied - Cisco Live Orlan...Microservices & Serverless Architecture Principles Applied - Cisco Live Orlan...
Microservices & Serverless Architecture Principles Applied - Cisco Live Orlan...
Cisco DevNet
 
PaaSVSContainerization
PaaSVSContainerizationPaaSVSContainerization
PaaSVSContainerization
Seyed Ehsan Beheshtian
 
AWS DevOps Essentials: An Introductory Workshop on CI/CD Best Practices (DEV3...
AWS DevOps Essentials: An Introductory Workshop on CI/CD Best Practices (DEV3...AWS DevOps Essentials: An Introductory Workshop on CI/CD Best Practices (DEV3...
AWS DevOps Essentials: An Introductory Workshop on CI/CD Best Practices (DEV3...
Amazon Web Services
 
IBM Bluemix hands on
IBM Bluemix hands onIBM Bluemix hands on
IBM Bluemix hands on
Felipe Freire
 
CICDforModernApplications_Stockholm.pdf
CICDforModernApplications_Stockholm.pdfCICDforModernApplications_Stockholm.pdf
CICDforModernApplications_Stockholm.pdf
Amazon Web Services
 
Using Databases and Containers From Development to Deployment
Using Databases and Containers  From Development to DeploymentUsing Databases and Containers  From Development to Deployment
Using Databases and Containers From Development to Deployment
Aerospike, Inc.
 
Interop 2017 - Managing Containers in Production
Interop 2017 - Managing Containers in ProductionInterop 2017 - Managing Containers in Production
Interop 2017 - Managing Containers in Production
Brian Gracely
 
Gitlab ci, cncf.sk
Gitlab ci, cncf.skGitlab ci, cncf.sk
Gitlab ci, cncf.sk
Juraj Hantak
 
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-nativeKubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
cornelia davis
 
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-nativeKubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
VMware Tanzu
 
IBM InterConnect 2015 - IIB in the Cloud
IBM InterConnect 2015 - IIB in the CloudIBM InterConnect 2015 - IIB in the Cloud
IBM InterConnect 2015 - IIB in the Cloud
Andrew Coleman
 
From Code to a running container | AWS Summit Tel Aviv 2019
From Code to a running container | AWS Summit Tel Aviv 2019From Code to a running container | AWS Summit Tel Aviv 2019
From Code to a running container | AWS Summit Tel Aviv 2019
AWS Summits
 

Similar to Will hall - Accelerating Infrastructure as Code and Configuration Management with CI and AWS (20)

DevOps on AWS: A Practical Introduction
DevOps on AWS: A Practical IntroductionDevOps on AWS: A Practical Introduction
DevOps on AWS: A Practical Introduction
 
How to Prevent Your Kubernetes Cluster From Being Hacked
How to Prevent Your Kubernetes Cluster From Being HackedHow to Prevent Your Kubernetes Cluster From Being Hacked
How to Prevent Your Kubernetes Cluster From Being Hacked
 
How (and why) to roll your own Docker SaaS
How (and why) to roll your own Docker SaaSHow (and why) to roll your own Docker SaaS
How (and why) to roll your own Docker SaaS
 
KCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being Hacked
KCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being HackedKCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being Hacked
KCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being Hacked
 
Infrastructure Is Code with the AWS Cloud Development Kit (DEV372) - AWS re:I...
Infrastructure Is Code with the AWS Cloud Development Kit (DEV372) - AWS re:I...Infrastructure Is Code with the AWS Cloud Development Kit (DEV372) - AWS re:I...
Infrastructure Is Code with the AWS Cloud Development Kit (DEV372) - AWS re:I...
 
DevOps Spain 2019. Pedro Mendoza-AWS
DevOps Spain 2019. Pedro Mendoza-AWSDevOps Spain 2019. Pedro Mendoza-AWS
DevOps Spain 2019. Pedro Mendoza-AWS
 
HOW TO DRONE.IO IN CI/CD WORLD
HOW TO DRONE.IO IN CI/CD WORLDHOW TO DRONE.IO IN CI/CD WORLD
HOW TO DRONE.IO IN CI/CD WORLD
 
Microservices & Serverless Architecture Principles Applied - Cisco Live Orlan...
Microservices & Serverless Architecture Principles Applied - Cisco Live Orlan...Microservices & Serverless Architecture Principles Applied - Cisco Live Orlan...
Microservices & Serverless Architecture Principles Applied - Cisco Live Orlan...
 
PaaSVSContainerization
PaaSVSContainerizationPaaSVSContainerization
PaaSVSContainerization
 
AWS DevOps Essentials: An Introductory Workshop on CI/CD Best Practices (DEV3...
AWS DevOps Essentials: An Introductory Workshop on CI/CD Best Practices (DEV3...AWS DevOps Essentials: An Introductory Workshop on CI/CD Best Practices (DEV3...
AWS DevOps Essentials: An Introductory Workshop on CI/CD Best Practices (DEV3...
 
IBM Bluemix hands on
IBM Bluemix hands onIBM Bluemix hands on
IBM Bluemix hands on
 
CICDforModernApplications_Stockholm.pdf
CICDforModernApplications_Stockholm.pdfCICDforModernApplications_Stockholm.pdf
CICDforModernApplications_Stockholm.pdf
 
SD Times - Docker v2
SD Times - Docker v2SD Times - Docker v2
SD Times - Docker v2
 
Using Databases and Containers From Development to Deployment
Using Databases and Containers  From Development to DeploymentUsing Databases and Containers  From Development to Deployment
Using Databases and Containers From Development to Deployment
 
Interop 2017 - Managing Containers in Production
Interop 2017 - Managing Containers in ProductionInterop 2017 - Managing Containers in Production
Interop 2017 - Managing Containers in Production
 
Gitlab ci, cncf.sk
Gitlab ci, cncf.skGitlab ci, cncf.sk
Gitlab ci, cncf.sk
 
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-nativeKubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
 
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-nativeKubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
Kubo (Cloud Foundry Container Platform): Your Gateway Drug to Cloud-native
 
IBM InterConnect 2015 - IIB in the Cloud
IBM InterConnect 2015 - IIB in the CloudIBM InterConnect 2015 - IIB in the Cloud
IBM InterConnect 2015 - IIB in the Cloud
 
From Code to a running container | AWS Summit Tel Aviv 2019
From Code to a running container | AWS Summit Tel Aviv 2019From Code to a running container | AWS Summit Tel Aviv 2019
From Code to a running container | AWS Summit Tel Aviv 2019
 

More from AWSCOMSUM

Introducing AWS DeepRacer: David Smith
Introducing AWS DeepRacer: David SmithIntroducing AWS DeepRacer: David Smith
Introducing AWS DeepRacer: David Smith
AWSCOMSUM
 
Beyond serverless.pptx
Beyond serverless.pptxBeyond serverless.pptx
Beyond serverless.pptx
AWSCOMSUM
 
Onur Salk & Onur Gurdamar - Everything as Code: Creating an application stack...
Onur Salk & Onur Gurdamar - Everything as Code: Creating an application stack...Onur Salk & Onur Gurdamar - Everything as Code: Creating an application stack...
Onur Salk & Onur Gurdamar - Everything as Code: Creating an application stack...
AWSCOMSUM
 
Nils Mohr & Jake Pearce - 100 years of flight data at British Airways. Past, ...
Nils Mohr & Jake Pearce - 100 years of flight data at British Airways. Past, ...Nils Mohr & Jake Pearce - 100 years of flight data at British Airways. Past, ...
Nils Mohr & Jake Pearce - 100 years of flight data at British Airways. Past, ...
AWSCOMSUM
 
Phil Basford - machine learning at scale with aws sage maker
Phil Basford - machine learning at scale with aws sage makerPhil Basford - machine learning at scale with aws sage maker
Phil Basford - machine learning at scale with aws sage maker
AWSCOMSUM
 
Dan pudwell - AWS community summit-oct-2019
Dan pudwell - AWS community summit-oct-2019Dan pudwell - AWS community summit-oct-2019
Dan pudwell - AWS community summit-oct-2019
AWSCOMSUM
 
Mike fowler - Getting started with machine learning (london 2019)
Mike fowler - Getting started with machine learning (london 2019)Mike fowler - Getting started with machine learning (london 2019)
Mike fowler - Getting started with machine learning (london 2019)
AWSCOMSUM
 
Efi Merdler Kravitz - 7 things you should know before going serverless
Efi Merdler Kravitz - 7 things you should know before going serverlessEfi Merdler Kravitz - 7 things you should know before going serverless
Efi Merdler Kravitz - 7 things you should know before going serverless
AWSCOMSUM
 
Michelle Chismon - Anything is possible!* Learning with AWS DeepLens *But not...
Michelle Chismon - Anything is possible!* Learning with AWS DeepLens *But not...Michelle Chismon - Anything is possible!* Learning with AWS DeepLens *But not...
Michelle Chismon - Anything is possible!* Learning with AWS DeepLens *But not...
AWSCOMSUM
 
Bernd Rücker - Lost in transaction? Strategies to manage consistency in serve...
Bernd Rücker - Lost in transaction? Strategies to manage consistency in serve...Bernd Rücker - Lost in transaction? Strategies to manage consistency in serve...
Bernd Rücker - Lost in transaction? Strategies to manage consistency in serve...
AWSCOMSUM
 
Ben Bridts - $ aws help
Ben Bridts -  $ aws helpBen Bridts -  $ aws help
Ben Bridts - $ aws help
AWSCOMSUM
 
Richard pablo - IoT Provisioning Solving the nightmare
Richard pablo - IoT Provisioning Solving the nightmareRichard pablo - IoT Provisioning Solving the nightmare
Richard pablo - IoT Provisioning Solving the nightmare
AWSCOMSUM
 
Matt Houghton - AWS Comsum - October 2019
Matt Houghton - AWS Comsum - October 2019Matt Houghton - AWS Comsum - October 2019
Matt Houghton - AWS Comsum - October 2019
AWSCOMSUM
 
Bruno Amaro Almeida - What can aws tell us about fake and credible news medi...
Bruno Amaro Almeida -  What can aws tell us about fake and credible news medi...Bruno Amaro Almeida -  What can aws tell us about fake and credible news medi...
Bruno Amaro Almeida - What can aws tell us about fake and credible news medi...
AWSCOMSUM
 
Serhat Can- 4 keytakeaways from running serverless on production for 4 years
Serhat Can-  4 keytakeaways from running serverless on production for 4 yearsSerhat Can-  4 keytakeaways from running serverless on production for 4 years
Serhat Can- 4 keytakeaways from running serverless on production for 4 years
AWSCOMSUM
 
Stuart jones - Deconstructing the monolith. Migrating complex systems simply ...
Stuart jones - Deconstructing the monolith. Migrating complex systems simply ...Stuart jones - Deconstructing the monolith. Migrating complex systems simply ...
Stuart jones - Deconstructing the monolith. Migrating complex systems simply ...
AWSCOMSUM
 
Dwp achieving cloud adoption at enterprise scale | Diptesh Patel
Dwp achieving cloud adoption at enterprise scale | Diptesh PatelDwp achieving cloud adoption at enterprise scale | Diptesh Patel
Dwp achieving cloud adoption at enterprise scale | Diptesh Patel
AWSCOMSUM
 
RUNNING AWS LOCALLY
RUNNING AWS LOCALLY RUNNING AWS LOCALLY
RUNNING AWS LOCALLY
AWSCOMSUM
 
Multi accountstrategy | david lewthwaite
Multi accountstrategy | david lewthwaiteMulti accountstrategy | david lewthwaite
Multi accountstrategy | david lewthwaite
AWSCOMSUM
 
Serverless for Visual Journalism at the BBC | Doug Winter
Serverless for Visual Journalism at the BBC  |  Doug WinterServerless for Visual Journalism at the BBC  |  Doug Winter
Serverless for Visual Journalism at the BBC | Doug Winter
AWSCOMSUM
 

More from AWSCOMSUM (20)

Introducing AWS DeepRacer: David Smith
Introducing AWS DeepRacer: David SmithIntroducing AWS DeepRacer: David Smith
Introducing AWS DeepRacer: David Smith
 
Beyond serverless.pptx
Beyond serverless.pptxBeyond serverless.pptx
Beyond serverless.pptx
 
Onur Salk & Onur Gurdamar - Everything as Code: Creating an application stack...
Onur Salk & Onur Gurdamar - Everything as Code: Creating an application stack...Onur Salk & Onur Gurdamar - Everything as Code: Creating an application stack...
Onur Salk & Onur Gurdamar - Everything as Code: Creating an application stack...
 
Nils Mohr & Jake Pearce - 100 years of flight data at British Airways. Past, ...
Nils Mohr & Jake Pearce - 100 years of flight data at British Airways. Past, ...Nils Mohr & Jake Pearce - 100 years of flight data at British Airways. Past, ...
Nils Mohr & Jake Pearce - 100 years of flight data at British Airways. Past, ...
 
Phil Basford - machine learning at scale with aws sage maker
Phil Basford - machine learning at scale with aws sage makerPhil Basford - machine learning at scale with aws sage maker
Phil Basford - machine learning at scale with aws sage maker
 
Dan pudwell - AWS community summit-oct-2019
Dan pudwell - AWS community summit-oct-2019Dan pudwell - AWS community summit-oct-2019
Dan pudwell - AWS community summit-oct-2019
 
Mike fowler - Getting started with machine learning (london 2019)
Mike fowler - Getting started with machine learning (london 2019)Mike fowler - Getting started with machine learning (london 2019)
Mike fowler - Getting started with machine learning (london 2019)
 
Efi Merdler Kravitz - 7 things you should know before going serverless
Efi Merdler Kravitz - 7 things you should know before going serverlessEfi Merdler Kravitz - 7 things you should know before going serverless
Efi Merdler Kravitz - 7 things you should know before going serverless
 
Michelle Chismon - Anything is possible!* Learning with AWS DeepLens *But not...
Michelle Chismon - Anything is possible!* Learning with AWS DeepLens *But not...Michelle Chismon - Anything is possible!* Learning with AWS DeepLens *But not...
Michelle Chismon - Anything is possible!* Learning with AWS DeepLens *But not...
 
Bernd Rücker - Lost in transaction? Strategies to manage consistency in serve...
Bernd Rücker - Lost in transaction? Strategies to manage consistency in serve...Bernd Rücker - Lost in transaction? Strategies to manage consistency in serve...
Bernd Rücker - Lost in transaction? Strategies to manage consistency in serve...
 
Ben Bridts - $ aws help
Ben Bridts -  $ aws helpBen Bridts -  $ aws help
Ben Bridts - $ aws help
 
Richard pablo - IoT Provisioning Solving the nightmare
Richard pablo - IoT Provisioning Solving the nightmareRichard pablo - IoT Provisioning Solving the nightmare
Richard pablo - IoT Provisioning Solving the nightmare
 
Matt Houghton - AWS Comsum - October 2019
Matt Houghton - AWS Comsum - October 2019Matt Houghton - AWS Comsum - October 2019
Matt Houghton - AWS Comsum - October 2019
 
Bruno Amaro Almeida - What can aws tell us about fake and credible news medi...
Bruno Amaro Almeida -  What can aws tell us about fake and credible news medi...Bruno Amaro Almeida -  What can aws tell us about fake and credible news medi...
Bruno Amaro Almeida - What can aws tell us about fake and credible news medi...
 
Serhat Can- 4 keytakeaways from running serverless on production for 4 years
Serhat Can-  4 keytakeaways from running serverless on production for 4 yearsSerhat Can-  4 keytakeaways from running serverless on production for 4 years
Serhat Can- 4 keytakeaways from running serverless on production for 4 years
 
Stuart jones - Deconstructing the monolith. Migrating complex systems simply ...
Stuart jones - Deconstructing the monolith. Migrating complex systems simply ...Stuart jones - Deconstructing the monolith. Migrating complex systems simply ...
Stuart jones - Deconstructing the monolith. Migrating complex systems simply ...
 
Dwp achieving cloud adoption at enterprise scale | Diptesh Patel
Dwp achieving cloud adoption at enterprise scale | Diptesh PatelDwp achieving cloud adoption at enterprise scale | Diptesh Patel
Dwp achieving cloud adoption at enterprise scale | Diptesh Patel
 
RUNNING AWS LOCALLY
RUNNING AWS LOCALLY RUNNING AWS LOCALLY
RUNNING AWS LOCALLY
 
Multi accountstrategy | david lewthwaite
Multi accountstrategy | david lewthwaiteMulti accountstrategy | david lewthwaite
Multi accountstrategy | david lewthwaite
 
Serverless for Visual Journalism at the BBC | Doug Winter
Serverless for Visual Journalism at the BBC  |  Doug WinterServerless for Visual Journalism at the BBC  |  Doug Winter
Serverless for Visual Journalism at the BBC | Doug Winter
 

Recently uploaded

To Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsTo Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
Paul Groth
 
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyesAssuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyes
ThousandEyes
 
PHP Frameworks: I want to break free (IPC Berlin 2024)
PHP Frameworks: I want to break free (IPC Berlin 2024)PHP Frameworks: I want to break free (IPC Berlin 2024)
PHP Frameworks: I want to break free (IPC Berlin 2024)
Ralf Eggert
 
FIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdfFIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance
 
Leading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdfLeading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdf
OnBoard
 
GraphRAG is All You need? LLM & Knowledge Graph
GraphRAG is All You need? LLM & Knowledge GraphGraphRAG is All You need? LLM & Knowledge Graph
GraphRAG is All You need? LLM & Knowledge Graph
Guy Korland
 
DevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA ConnectDevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA Connect
Kari Kakkonen
 
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
BookNet Canada
 
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdfSmart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
91mobiles
 
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
Sri Ambati
 
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdfFIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance
 
Designing Great Products: The Power of Design and Leadership by Chief Designe...
Designing Great Products: The Power of Design and Leadership by Chief Designe...Designing Great Products: The Power of Design and Leadership by Chief Designe...
Designing Great Products: The Power of Design and Leadership by Chief Designe...
Product School
 
JMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and GrafanaJMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and Grafana
RTTS
 
The Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and SalesThe Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and Sales
Laura Byrne
 
Knowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and backKnowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and back
Elena Simperl
 
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
Product School
 
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
Product School
 
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualitySoftware Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Inflectra
 
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdfFIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance
 
From Daily Decisions to Bottom Line: Connecting Product Work to Revenue by VP...
From Daily Decisions to Bottom Line: Connecting Product Work to Revenue by VP...From Daily Decisions to Bottom Line: Connecting Product Work to Revenue by VP...
From Daily Decisions to Bottom Line: Connecting Product Work to Revenue by VP...
Product School
 

Recently uploaded (20)

To Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsTo Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
 
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyesAssuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyes
 
PHP Frameworks: I want to break free (IPC Berlin 2024)
PHP Frameworks: I want to break free (IPC Berlin 2024)PHP Frameworks: I want to break free (IPC Berlin 2024)
PHP Frameworks: I want to break free (IPC Berlin 2024)
 
FIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdfFIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdf
 
Leading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdfLeading Change strategies and insights for effective change management pdf 1.pdf
Leading Change strategies and insights for effective change management pdf 1.pdf
 
GraphRAG is All You need? LLM & Knowledge Graph
GraphRAG is All You need? LLM & Knowledge GraphGraphRAG is All You need? LLM & Knowledge Graph
GraphRAG is All You need? LLM & Knowledge Graph
 
DevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA ConnectDevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA Connect
 
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
 
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdfSmart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
 
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
 
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdfFIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
 
Designing Great Products: The Power of Design and Leadership by Chief Designe...
Designing Great Products: The Power of Design and Leadership by Chief Designe...Designing Great Products: The Power of Design and Leadership by Chief Designe...
Designing Great Products: The Power of Design and Leadership by Chief Designe...
 
JMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and GrafanaJMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and Grafana
 
The Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and SalesThe Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and Sales
 
Knowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and backKnowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and back
 
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
 
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
 
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualitySoftware Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
 
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdfFIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
 
From Daily Decisions to Bottom Line: Connecting Product Work to Revenue by VP...
From Daily Decisions to Bottom Line: Connecting Product Work to Revenue by VP...From Daily Decisions to Bottom Line: Connecting Product Work to Revenue by VP...
From Daily Decisions to Bottom Line: Connecting Product Work to Revenue by VP...
 

Will hall - Accelerating Infrastructure as Code and Configuration Management with CI and AWS

  • 1. 1©2019 HeleCloud 1©2019 HeleCloud Accelerating Infrastructure as Code and Configuration Management using CI on AWS Will Hall – DevOps Consultant
  • 2. Do you actually treat your Infrastructure as Code?
  • 3. 3©2019 HeleCloud 3©2019 HeleCloud 1. Why do you use IaC or Config Management? 2. AWS as an API 3. Effective Infrastructure Planning 4. The Infrastructure Development LifeCycle 5. IaC and CI 6. Pipelining inside AWS with Code* and Terraform Today…
  • 4. 4©2019 HeleCloud 4©2019 HeleCloud About Me – Will Hall • DevOps Consultant @ HeleCloud • Work on IaC, CI/CD, Automation • Docker Community Leader • GitLab Hero • 16 Guitars • Twitter: @hn_will • LinkedIn: https://linkedin.com/in/willhallonline
  • 5.
  • 7. 7©2019 HeleCloud 7©2019 HeleCloud IaC and Configuration Management • Software • Infrastructure • Documentation • Marketing • Automation • CI • Blog
  • 8. 8©2019 HeleCloud 8©2019 HeleCloud Infrastructure as Code Easily reproducible Disposable Consistent Change is easy, cheap, and repeatable
  • 9. 9©2019 HeleCloud 9©2019 HeleCloud Cloud is the Operating System Athena
  • 10. 10©2019 HeleCloud 10©2019 HeleCloud 10©2019 HeleCloud Solve our problems…
  • 11. Is AWS just an API?
  • 12. 12©2019 HeleCloud 12©2019 HeleCloud Treating AWS as an API • Request resources • Utilise value-added services • Build with flexibility to change and knowledge of landscape • Re-usability of solutions
  • 14. 14©2019 HeleCloud 14©2019 HeleCloud IaC Tools Infrastruct Provisioni • Terraform • AWS CloudForm Configurat Managem • Ansible • Chef • Puppet
  • 15. 15©2019 HeleCloud 15©2019 HeleCloud IaC Separation Infrastructu Provisionin • WHAT Configurati Manageme • HOW
  • 16. 16©2019 HeleCloud 16©2019 HeleCloud IaC Separation Infrastructu Provisionin • Immutable Configurati Manageme • Mutable
  • 18. 18©2019 HeleCloud 18©2019 HeleCloud Understanding your landscape • What assets do you have? • Mutable or immutable • What skills do you have, what do you need?
  • 19. 19©2019 HeleCloud 19©2019 HeleCloud Infrastructure Planning Balance Risk RewImpa
  • 21. 21©2019 HeleCloud 21©2019 HeleCloud Infrastructure Lifecycle Provision Configure Deploy Monitor Destroy Iterate
  • 22. 22©2019 HeleCloud 22©2019 HeleCloud Software Defined Infrastructure • Software workflows for infrastructure changes to match product: • Versioning • Issue management • Changelogs • Auditability • Testing that building and running the infrastructure works as planned: • Repeatable • Stable • Secure • Visible
  • 23. 23©2019 HeleCloud 23©2019 HeleCloud CI/CD for Infrastructure • Continual deployment models • Integration of changes to working environments • Many small iterative improvements • Machine based releases • Automation reveals assumptions and errors faster • Automation delivers speed, stability, security
  • 25. 25©2019 HeleCloud 25©2019 HeleCloud Pipeline Tools • AWS: • CodeBuild • CodePipeline • VCS • GitLab CI • BitBucket Pipelines • External tools • CircleCI • Travis • Jenkins (meh)
  • 26. 26©2019 HeleCloud 26©2019 HeleCloud Choosing Pipeline Tools • Either match your Infrastructure Provider • AWS CodeBuild • AWS CodePipeline • Or your VCS: • GitLab CI • BitBucket Pipelines • CircleCI
  • 27. ©2019 HeleCloud 2727©2019 HeleCloud 2727 Pipeline Based IaC Lint Build Deploy Test Test Deploy Monitor Destroy Secure DevSecOp s
  • 28. 28©2019 HeleCloud 28©2019 HeleCloud DevSecOps in IaC • Secure inside your pipeline • Code analysis • Change management • Compliance monitoring • Threat investigation • Vulnerability assessment
  • 29. In the real world…
  • 30. 30©2019 HeleCloud 30©2019 HeleCloud 30©2019 HeleCloud AWS CodePipeline for Terraform 1.Lint (terraform fmt) 2.Build (terraform init, version, validate) 3.Plan (terraform plan -out=plan.out) 4.Comply (terraform-compliance) 5.Test (go test –v [terratest]) 6.Apply (terraform apply) 7.Destroy (terraform destroy)
  • 31. 31©2019 HeleCloud 31©2019 HeleCloud Testing Terraform • Build • Terraform • Comply • Terraform-Compliance https://github.com/eerkunt/terraform- compliance • Terratest – Do it on a separate account! • Terratest https://github.com/gruntwork-io/terratest
  • 32. 32©2019 HeleCloud 32©2019 HeleCloud BuildSpec-ing it • For us; BuildSpec Files Pre-Created • Structured separation into logical units: • Compute • Storage • Database • IAM
  • 33. 33©2019 HeleCloud 33©2019 HeleCloud CodePipeline Hierarchy • CodeBuild Project • BuildSpec • pre_build: setup project space • build: run core commands • post-build: complete tasks • artifacts: store artifacts
  • 34. 34©2019 HeleCloud 34©2019 HeleCloud 34©2019 HeleCloud CodeBuild-pre_build pre_build: commands: - echo "Executing codebuild for ${service_name}” - CURRENT_ACCOUNT_ID=$(echo $CODEBUILD_BUILD_ARN | cut -d':' - f5) - temp_role=$(aws sts assume-role --role-arn arn:aws:iam::$CURRENT_ACCOUNT_ID:role/${assume_role_name} -- role-session-name ${CURRENT_ACCOUNT_ID}_tf_apply) - aws configure set aws_access_key_id $(echo $temp_role | jq .Credentials.AccessKeyId | xargs) - …
  • 35. 35©2019 HeleCloud 35©2019 HeleCloud 35©2019 HeleCloud CodeBuild-build build: commands: - aws configure… - terraform init -no-color 2>&1 | tee /tmp/initOut.txt - terraform apply -no-color --auto-approve - go test –v - …
  • 36. 36©2019 HeleCloud 36©2019 HeleCloud 36©2019 HeleCloud CodeBuild-post_build post_build: commands: - echo "Exit with error if the build didn't succeed" - bash -c "if [ /"$CODEBUILD_BUILD_SUCCEEDING/" == /"0/" ]; then exit 1; fi" - echo "build finished on `date`"
  • 37. 37©2019 HeleCloud 37©2019 HeleCloud 37©2019 HeleCloud CodeBuild-artifacts artifacts: files: - /tmp/${service_name}_initOut.txt - /tmp/${service_name}_tfoutput.yml discard-paths: yes
  • 39. 39©2019 HeleCloud 39©2019 HeleCloud Infrastructure as Code Easily reproducible Disposable Consistent Change is easy, cheap, and repeatable
  • 40. 40©2019 HeleCloud 40©2019 HeleCloud Value creation • All solutions need a reason for selection • IaC gives you to potential to scale and alter infrastructure in seconds • IaC is not complete without CI/Automation • Review and manage Infrastructure like software • Build on best practices to enable future security • Structure before you act • Focus on principles and let them choose tools for you
  • 41. Do you actually treat your Infrastructure as Code?
  • 42. 42©2019 HeleCloud 42©2019 HeleCloud Questions? @hn_will https://linkedin.com/in/willhallonline https://www.helecloud.com
  • 43. 43©2019 HeleCloud 43©2019 HeleCloud Credits • Image by https://pixabay.com/users/Rainer_Maiores- 147114/ • Image by https://pixabay.com/users/Free-Photos-242387/ • Image by https://pixabay.com/users/hschmider-3108740/ • Image by https://pixabay.com/users/acekreations- 1659208/ • Image by https://pixabay.com/users/jarmoluk-143740/ • Image by https://pixabay.com/users/DariuszSankowski- 1441456/ • Image by https://pixabay.com/users/RyanMcGuire- 123690/