Terraform on zoph.me

GitHub Actions with AWS: Hands-On

Sun, 29 Mar 2020 13:37:00 +0200

Hi Folks,

Lately, I was experimenting with GitHub Actions (GHA), as it has been a buzzword since General Availability (GA), but I didn’t take the time to try it before. I’ve done it for you folks. 🙌

Context

GHA was released on GA in November 2019, the main features are:

Automate development workflows (CI/CD): build, test, deploy
Hosted runners / self-hosted runners
Automate the management of your GH Community: PR, Code Reviews, or Issue Tracking
Built-in secrets store

Serverless job scheduling using AWS Fargate

Sun, 22 Sep 2019 13:37:00 +0200

I was wondering if I could schedule simple bash scripts using AWS Fargate for some trivial batch operations.

To be completely honest, it is also an excuse to learn more about AWS Fargate, and to convert a legacy bash script based on EC2 Spot instances to a container world.

In this post, we will see how to schedule a bash script job once a day. To do so, we will deploy the corresponding AWS infrastructure (even if it’s serverless, yes :wink:) using Terraform.

SecretManagement for Terraform and Ansible

Fri, 05 Oct 2018 22:31:32 +0200

In this quick article, I’ll show you how I use AWS SSM Parameter Store as glue between Terraform and Ansible.

Use Case

For a personal project, I needed to pass some parameters (key/value) and secrets (encrypted) from my IaC Terraform to Ansible.

AWS SSM PS?

AWS SSM Parameter Store is a secure key-value store, a native EC2 functionality.

From AWS Documentation:

Parameter Store offers the following benefits and features:

Use a secure, scalable, hosted secrets management service (No servers to manage).
Improve your security posture by separating your data from your code.
Store configuration data and secure strings in hierarchies and track versions.
Control and audit access at granular levels.
Configure change notifications and trigger automated actions.
Tag parameters individually, and then secure access from different levels, including operational, parameter, EC2 tag, or path levels.
Reference AWS Secrets Manager secrets by using Parameter Store parameters.
Use Parameter Store parameters with other Systems Manager capabilities and AWS services to retrieve secrets and configuration data from a central store. The following AWS services support Parameter Store parameters: Amazon EC2, Amazon Elastic Container Service, AWS Lambda, AWS CloudFormation, AWS CodeBuild, and AWS CodeDeploy.
Configure integration with AWS KMS, Amazon SNS, Amazon CloudWatch, and AWS CloudTrail for encryption, notification, monitoring, and audit capabilities.

Terraform

Set SSM secrets the right way: