ECS constructs and security features – Running Containers in AWS

Being an opinionated container management service from AWS, some constructs are unique to the ECS service. Since they are not commonly used across other tools or platforms in the container ecosystem, let’s briefly discuss them. Important constructs used by ECS Similar to how we declaratively define the state of our resources in a CloudFormation template, … Read more

Summary – Programmatic Approach to IaC with AWS CDK

In this chapter, we learned about the basics of working with AWS CDK to create infrastructure resources using general-purpose programming languages. This approach to managing cloud infrastructure is particularly useful for teams who are used to working with CloudFormation, have experience using the service in an enterprise-grade environment, and would now like to take the … Read more

Synthesizing the template – Programmatic Approach to IaC with AWS CDK

The synthesizing process generates a valid CloudFormation YAML template. At this point, you could also deploy it directly within your AWS environment, or instruct CDK to do so. For now, let’s trigger template synthetization with the cdk synth command: The 40-odd lines of code we added to the lib/chapter-6-stack.ts file resulted in a template 10 … Read more

AWS services that support running containers in the cloud – Running Containers in AWS

It mainly comes down to the trade-offs between the level of control and ease of operations. Depending on the needs of your workloads and your teams’ comfort with containerization, you might decide to choose one of the three AWS offerings discussed in this section. AWS Elastic Compute Cloud (EC2) Organizations that prefer to have maximum … Read more

Support for life cycle hooks that map to different phases of software change – Rolling Out a CI/CD Pipeline

With support for several life cycle hooks, you can pin down the actions that you want to take when you reach a particular stage of the rollout process. This could beBeforeInstall, AfterInstall, upon ApplicationStart, or during ValidateService , among several others. Depending on the chosen compute platform, you can choose and implement all the hooks … Read more

Open source or commercial offerings? – Rolling Out a CI/CD Pipeline

You can start with open source versions of the CI/CD tools, but in the long run, the overall total cost of ownership (TCO) takes a hit as it factors in the time you invest in maintaining, scaling, and operating these solutions. AWS-managed services remove this overhead and allow you to pay as you go. Economies … Read more

Amazon CloudWatch event integration – Rolling Out a CI/CD Pipeline

You can monitor and build automations when specific events occur in your repositories. Among several others, events such as creating pull requests, adding comments, or reacting to comments could be automatically captured and forwarded to a Lambda function, which then notifies the team over Slack or email, for example. Data protection for meeting compliance requirements … Read more

Pre-configured build environments for popular programming languages

You do not need to reinvent the wheel for known programming languages and tooling dependencies. CodeBuild offers several Windows/Linux environments and programming runtimes such as Android, Golang, Dotnet, Java, Node.js, and so on. With specifications as high as 255 GB of RAM, 72 vCPUs, and 824 GB of disk space on offer, you can support … Read more

Key concepts in CDK– Programmatic Approach to IaC with AWS CDK

The three most important CDK concepts are constructs, stacks, and apps. All of them are represented as classes in the respective programming languages. Let’s clearly define the role of each of these concepts in realizing your infrastructure on AWS. Constructs A CDK construct is the underlying AWS resource that you would like to manage as … Read more

Adopting a declarative approach – Programmatic Approach to IaC with AWS CDK

Once the needs grow beyond basic scripting solutions, organizations typically take the next steps with more advanced services such as CloudFormation and Terraform. In some cases, they might even adopt these services directly, depending on the existing experience and knowledge within the company. These services offer a declarative approach to infrastructure definition, where the user … Read more