2019-11-05 AWS Pretoria Meetup - Setting up your first environment and adding automation
Download as PPTX, PDF0 likes183 views
This document provides a guide for setting up AWS environments, covering topics such as VPC and EC2 overviews, multi-account setup, and automation practices. It emphasizes the benefits of using multiple accounts for security, infrastructure parity, and effective credential management. The document concludes by recommending the use of infrastructure-as-code tools like AWS CloudFormation, AWS CDK, and Terraform for automation.
![© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
~/.aws/credentials
[meetup-main]
aws_access_key_id = my_api_key
aws_secret_access_key = my_api_secret](https://image.slidesharecdn.com/2019-11-05awspretoriameetup-settingupyourfirstenvironmentandaddingautomation-191106071015/85/2019-11-05-AWS-Pretoria-Meetup-Setting-up-your-first-environment-and-adding-automation-24-320.jpg)
![© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
~/.aws/config
[profile meetup-main]
region = eu-west-1
[profile meetup-dev]
role_arn = arn:aws:iam::123456789012:role/terraform
source_profile = webinar-main
[profile meetup-prod]
role_arn = arn:aws:iam::123456789013:role/terraform
source_profile = webinar-main](https://image.slidesharecdn.com/2019-11-05awspretoriameetup-settingupyourfirstenvironmentandaddingautomation-191106071015/85/2019-11-05-AWS-Pretoria-Meetup-Setting-up-your-first-environment-and-adding-automation-25-320.jpg)
2019-11-05 AWS Pretoria Meetup - Setting up your first environment and adding automation
- 1. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. Setting up your first environment and adding automation Cobus Bernard AWS SENIORTECHNICAL EVANGELIST @cobusbernard cobusbernard cobusbernard
- 2. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. Agenda • VPC Overview • EC2 Overview • Multi-account setup • Automate!
- 3. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. Introduction • Benefits of multiple accounts • Security – role switching • Naming convention • Infrastructure as Code – infrastructure parity • Single credential set • Isolation
- 4. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 5. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 6. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 7. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 8. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 9. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 10. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 11. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 12. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 13. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 14. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 15. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 16. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 17. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 18. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 19. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 20. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 21. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 22. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 23. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 24. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. ~/.aws/credentials [meetup-main] aws_access_key_id = my_api_key aws_secret_access_key = my_api_secret
- 25. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. ~/.aws/config [profile meetup-main] region = eu-west-1 [profile meetup-dev] role_arn = arn:aws:iam::123456789012:role/terraform source_profile = webinar-main [profile meetup-prod] role_arn = arn:aws:iam::123456789013:role/terraform source_profile = webinar-main
- 26. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. Using theroles aws --profile meetup-main ec2 describe-vpcs { "Vpcs": [ { "VpcId": "vpc-a1a3bdc7", "InstanceTenancy": "default", "CidrBlockAssociationSet": [ { "AssociationId": "vpc-cidr-assoc-b28680d9", "CidrBlock": "172.31.0.0/16",
- 27. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. Using theroles aws --profile meetup-dev ec2 describe-vpcs { "Vpcs": [ { "VpcId": "vpc-035c4565", "InstanceTenancy": "default", "CidrBlockAssociationSet": [ { "AssociationId": "vpc-cidr-assoc-1c8e8877", "CidrBlock": "172.31.0.0/16”,
- 28. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 29. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 30. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. Automation • Use templates for IAM policies! • Use AWS profiles to execute in each environment • Use Infrastructure-as-Code (AWS Cloudformation, AWS CDK, Terraform)
- 31. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 32. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 33. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 34. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 35. Thank you! © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. COBUS BERNARD AWS SENIORTECHNICAL EVANGELIST @cobusbernard cobusbernard cobusbernard