aws as a code - using ansible

About BESTSELLER1

"AWS as a code" using Ansible

2016/12

"AWS as a code" using Ansible |

- problems, motivations, goal

- infrastructure environment design (DTAP)

- branch design

- code !!!

- workflow

- security*

- cons*

2

CONTENTS

"AWS as a code" using Ansible |

Serkan Capkan

lead system engineer @bestseller

serkancapkan

3

me

"AWS as a code" using Ansible |

- keep logic at repository

4

problems, motivations, goal

"AWS as a code" using Ansible |

- keep logic at repository

5

problems, motivations, goal

"AWS as a code" using Ansible |

- keep logic at repository

- PR, code review (check, share)

6

problems, motivations, goal

sharing: new EFS

sharing: mounting to rundeck server

check

"AWS as a code" using Ansible |

- keep logic at repository

- code review (check, awareness)

- change management

7

problems, motivations, goal

"AWS as a code" using Ansible |

- keep logic at repository

- code review (check, awareness)

- change management

- goal: develop all infrastructure!

8

problems, motivations, goal

"AWS as a code" using Ansible |9

infrastructure design (DTAP)

network

elastic beansta

lk

efs

Security groups

RDS

"AWS as a code" using Ansible |10

infrastructure design (DTAP)

D

service confD.

service conf.

T

service conf.

A

service conf.

P

PLA

YG

RO

UN

D

T A P

dev

network

elastic beansta

lk

efs

Security groups

RDS

"AWS as a code" using Ansible |11

infrastructure design (DTAP)

D

service confD.

service conf.

T

service conf.

A

service conf.

P

PLA

YG

RO

UN

D

T A P

dev

D

service conf.

D

service conf.

T

service conf.

A

service conf.

P

MA

STE

R

T A Pmas

ternetwork

elastic beansta

lk

efs

Security groups

RDS

"AWS as a code" using Ansible |12

infrastructure design (DTAP)

D

service confD.

service conf.

T

service conf.

A

service conf.

P

PLA

YG

RO

UN

D

T A P

dev

D

service conf.

D

service conf.

T

service conf.

A

service conf.

P

MA

STE

R

T A Pmas

ter

DEV 4 SYSTEM ENGINEERS

PRODUCTIONnetwork

elastic beansta

lk

efs

Security groups

RDS

"AWS as a code" using Ansible |

13

branch design

"AWS as a code" using Ansible |14

code!!!

"AWS as a code" using Ansible |15

code!!!

PLAYGROUND

git checkout dev

MASTER

git checkout master

"AWS as a code" using Ansible |

16

workflow

PLAYGROUND MASTER

development

PR, code review, merge

"AWS as a code" using Ansible |17

code!!! (RDS)

"AWS as a code" using Ansible |18

code!!! (elastic beanstalk)

"AWS as a code" using Ansible |19

code!!! (elastic beanstalk)

"AWS as a code" using Ansible |20

code!!!

"AWS as a code" using Ansible |21

code!!!

"AWS as a code" using Ansible |22

code!!!

"AWS as a code" using Ansible |23

code!!!

"AWS as a code" using Ansible |

24

security*

"AWS as a code" using Ansible |

25

security*

"AWS as a code" using Ansible |

● credentials commit problem

● lack of modules

● outdated modules (or boto2)

● resources without tagging feature

26

cons*

"AWS as a code" using Ansible |

27

questions