Module 11

Risks for manual processes

• Doesn't support repeatability at scale

• Doesn't have version control

• Lacks audit trails

• has inconsistency configurations

Infrastructure as Code is the wave

• Rapidly deploy complex environments with configuration consistency

• Propagate a change to all stacks by modifying the template

• Clean up by deleting the stack, which deletes the resources created

• The key benefits are reusability, repeatability, and maintainability

CloudFormation

• Provides a simplified way to model, create, and manage a collection of AWS resources

• A collection of resources is called a CloudFormation stack.

• There is no extra charge (pay for only the resources that you create).

• Can create, update, and delete stacks

• Enables orderly and predictable provisioning and updating of resources

• Enables version control of AWS resource deployments

AWS IaC services that use CloudFormation

How it works

Template components

• You can use the same CloudFormation template to create both your production environment and development environment.

CloudFormation change sets

• One way to update a stack (and thus update your AWS resources) is to update the CloudFormation template that you used to create the stack and then run the Update Stack option

• With Change Sets, you can preview the changes, verify that they align with your expectations, and then approve the updates before you proceed

• Templates can be organized as:

  • Frontend services

  • Backend services

  • Shared services

  • Network

  • Security

AWS Quick Starts

• Are gold-standard deployments•Are based on AWS best practices for security and high availability

• Can be used to create entire architectures in less than an hour

• Can be used for experimentation and as the basis for your own architectures

CodeWhisperer

• Just AI to help you when coding

• Is an artificial intelligence (AI)-powered code generator for integrated development environments (IDEs) and code editors

• Works with your favorite programming language and IDE

• Generates code suggestions in real-time within your IDE

• Identifies hard-to-find vulnerabilities•References multiple standards and best practices