My DevOps toolbox for AWS practitioner

In this post, you will find my best tools to work with if you are playing around with AWS Services. Please let us know yours in the comments below :punch: Last Update: 2019-02-14 General :construction: Description Links Use multiple AWS Accounts on the same browser using Firefox Containers Firefox Containers Facilitate your switch role experience with this AddOn FF - Extend Switch Roles - Chrome - Extend Switch Roles Easy way to know your current public ip, using AWS Service What is my Public IP Check if any website is hosted on AWS Is It on AWS? Test the reachability of EC2 worldwide EC2 Reachability A great reference for IAM, needs to be updated Cloudonaut IAM Reference AWS Transferts costs are a nightmare, this is intended to help a bit AWS Transferts Costs Want to know the current inter AWS Region latency? Inter-Region Latency THE REFERENCE (don’t forget the associate Slack) AWS Open Guide FinOps :dollar: Description Links Compare all existing EC2 instances, and pricing on a single view, with search capabilities ec2instances.info Well known AWS Calculator, a new version is coming AWS Calc Infrastructure as Code (IaC) :memo: Description Links Great post if your plan to use VSCode with CFN VSCode Linter for CFN, and really up-to-date! cfn-lint pycharm is my preferred IDE for Terraform with this plugin Terraform Security / Governance / Hardening :flashlight: Description Links Cloud Governance, Security and compliance made it easy Cloud Custodian Entirely nuke an AWS Account (warning), for example, training accounts aws-nuke Store your AWS credential encrypted, and other cool feature like: login AWS-Vault Least Privileges tool from 0xdabbad00, using Athena and CloudTrail CloudTracker Map / Audit your AWS environments, and much more, Thanks again Scott CloudMapper Schema :triangular_ruler: Description Links Schema / Design your Architecture (with new AWS icons) Draw.io Same, with some advanced paid features ($) CloudCraft See ya Folks. ...

February 14, 2019 · 2 min · 313 words · zoph

From Plumber to Blogger

Previously I wrote an [article]({{ site.baseurl }}/cloud/Jekyll-Pipeline-CBCD/) on my blog’s pipeline, It was quite complex for this dead simple use case: Publish static website from markdown files Automate build to convert markdown in html static pages using Jekyll Be able to preview articles with draft subdomain Few months ago, during the re:Invent'18, AWS launched a new service called AWS Amplify Console, I didn’t pay attention to this new service until a few days ago, when trying to find some optimizations around my blog. ...

January 29, 2019 · 2 min · 284 words · zoph

[FR] Re:Invent 2018

Retour sur une semaine incroyable et riche en annonces comme à l’accoutumée pour cette nouvelle édition du salon annuel Amazon Web Services (AWS) à Las Vegas. Dans cet article, nous allons revenir sur les principaux lancements de cette année, des plus importants aux plus inattendus. Quelques chiffres avant de commencer, AWS est un business avec un CA de 27Mds$, avec une croissance de 46-49%. Cette année, le re:Invent c’est 50 000 participants annoncés, répartis sur les 5 principaux casinos de Las Vegas. ...

December 27, 2018 · 6 min · 1223 words · zoph

AWS re:Invent'18 - re:Cap

Pre-re:Invent'18 Launches 🚀 (November 2018) AWS Region in Milan, Italy. CloudFormation Drift Detection. EC2 Auto Scaling Groups With Multiple Instance Types & Purchase Options. Train Custom Document Classifiers with Amazon Comprehend. Amazon S3 Block Public Access – Another Layer of Protection for Your Accounts and Buckets. Using AWS CodePipeline to Perform Multi-Region Deployments. AWS Resource Access Manager – Cross-Account Resource Sharing. AWS GovCloud (US-East) Now Open. Amazon Route 53 Resolver for Hybrid Clouds. Predictive Scaling for EC2, Powered by Machine Learning. re:Invent'18 (Nov. 26-30, 2018 - Las Vegas, NV) 🚀 = Launch ...

December 2, 2018 · 4 min · 773 words · zoph

SecretManagement for Terraform and Ansible

In this quick article, I’ll show you how I use AWS SSM Parameter Store as a glue between Terrafom and Ansible. Use Case For a personal project, I needed to pass some parameters (key/value) and secrets (encrypted) from my IaC Terraform to Ansible. AWS SSM PS ? AWS SSM Parameter Store is a secure key-value storage, a native EC2 functionality. From AWS Documentation: Parameter Store offers the following benefits and features: Use a secure, scalable, hosted secrets management service (No servers to manage). Improve your security posture by separating your data from your code. Store configuration data and secure strings in hierarchies and track versions. Control and audit access at granular levels. Configure change notifications and trigger automated actions. Tag parameters individually, and then secure access from different levels, including operational, parameter, EC2 tag, or path levels. Reference AWS Secrets Manager secrets by using Parameter Store parameters. Use Parameter Store parameters with other Systems Manager capabilities and AWS services to retrieve secrets and configuration data from a central store. The following AWS services support Parameter Store parameters: Amazon EC2, Amazon Elastic Container Service, AWS Lambda, AWS CloudFormation, AWS CodeBuild, and AWS CodeDeploy. Configure integration with AWS KMS, Amazon SNS, Amazon CloudWatch, and AWS CloudTrail for encryption, notification, monitoring, and audit capabilities. Terraform Set SSM secrets the right way: ...

October 5, 2018 · 2 min · 345 words · zoph