GitHub Actions with AWS: Hands-On

Hi Folks, Lately, I was experimenting with GitHub Actions (GHA), as it is a buzzword since General Availability (GA), but I didn’t take time to try it before. I’ve done it for you folks. 🙌 Context GHA was released on GA in November 2019, the main features are: Automate development workflows (CI/CD): build, test, deploy Hosted runners / self-hosted runners Automate the management of your GH Community: PR, Code Reviews, or Issue Tracking Built-in secrets store ...

March 29, 2020 · 6 min · 1250 words · zoph

Serverless job scheduling using AWS Fargate

I was wondering if I could schedule simple bash scripts using AWS Fargate for some trivial batches operations. To be completely honest, It is also an excuse to learn more about AWS Fargate, and to convert a legacy bash script based on EC2 Spot instance to a container world. In this post, we will see how to schedule a bash script job once a day. To do so, we will deploy the corresponding AWS infrastructure (even if it’s serverless, yes :wink:) using Terraform. ...

September 22, 2019 · 5 min · 1005 words · zoph

SecretManagement for Terraform and Ansible

In this quick article, I’ll show you how I use AWS SSM Parameter Store as a glue between Terrafom and Ansible. Use Case For a personal project, I needed to pass some parameters (key/value) and secrets (encrypted) from my IaC Terraform to Ansible. AWS SSM PS ? AWS SSM Parameter Store is a secure key-value storage, a native EC2 functionality. From AWS Documentation: Parameter Store offers the following benefits and features: Use a secure, scalable, hosted secrets management service (No servers to manage). Improve your security posture by separating your data from your code. Store configuration data and secure strings in hierarchies and track versions. Control and audit access at granular levels. Configure change notifications and trigger automated actions. Tag parameters individually, and then secure access from different levels, including operational, parameter, EC2 tag, or path levels. Reference AWS Secrets Manager secrets by using Parameter Store parameters. Use Parameter Store parameters with other Systems Manager capabilities and AWS services to retrieve secrets and configuration data from a central store. The following AWS services support Parameter Store parameters: Amazon EC2, Amazon Elastic Container Service, AWS Lambda, AWS CloudFormation, AWS CodeBuild, and AWS CodeDeploy. Configure integration with AWS KMS, Amazon SNS, Amazon CloudWatch, and AWS CloudTrail for encryption, notification, monitoring, and audit capabilities. Terraform Set SSM secrets the right way: ...

October 5, 2018 · 2 min · 345 words · zoph