AWS CloudFormation

-

 AWS CloudFormation


AWS CloudFormation - 
  • AWS CF is a service that allows you to manage, configure and provision your Infrastructure as a code 
  • AWS CF provides a common language for you to describe and provision all the infrastructure resources in your cloud environment 
  • Resources are defined using CF templates 
  • CF interpretes the template and makes the appropriate API calls to create the resources you have defined
  • Supports YAML or JSON

CF Templates - 
  • YAML file that defines a CF stack
  • Templates have to be uploaded in S3 and then referenced in CF
  • Logical  IDs are used to reference resources within the template 
  • Physicals IDs identify resources outside of AWS CF templates, but only after the resources after created 
  • Template Components - 
  • Resources - AWS resources declared in the template (mandatory)
  • Parameters - Dynamic inputs for your template 
  • Mappings - Statics variables for your template
  • Outputs - References to what has been created (will be returned upon stack creation)
  • Conditionals - List of conditions to perform resource creation
  • Metadata 
  • Template helpers - 
  • References
  • Functions
  • You can associate the CreationPolicy attribute with a resource to prevent its status from reaching create complete until CF receives a specified number of cfn-signals or the timeout period is exceeded 
  • Use CF with securely configured templates to ensure that applicatins are deployed in secure configurations 

Stack Sets -  
  • Deployed resources based on templates 
  • Create, update and delete stacks using templates 
  • Deployed through the management console, CLI or APIs
  • Updating Stacks - 
  • AWS CF provides two methods for updating stacks: direct update or creating and executing change sets 
  • When you directly update a stack, you submit changes and AWS CF immediately deploys them 
  • Use direct updates when you want to quickly deploy your updates
  • with change sets, you can preview the changes AWS CF will make to your stack, and then decide whether to apply those changes 
Nested Stacks - 
  • Nested stacks allow re-use of CF code for common use cases
  • Instead of copying out the code each time, create a standard template for each common use case and reference from within your CF templates 

Comments

Post a Comment

Popular posts from this blog

AWS Instance Store

-
Image
 AWS Instance Store  AWS Instance Store -  Hardware storage directly attached to EC2 instance amd cannot be detached and attached to another instance  Highest IOPS for any available storage Ephemiral Storage (Loses data when instance is terminated, stopped or hibernated) Good to buffer/cache/scratch data/temporary content  AMI created from an instance does not its instance store volume preserved  You can specify the instance store volumes to an instance when you launch the instance. You can't attach instance store volumes to an instance after you’ve launched it. Raid -  Raid 0  Improve performance of a storage volume by distributing reads and write in a stripes across attached volumes  If you add a storage volume you get the straight addition of throughput and iops For high performance applications Raid 1   Improve data availability by mirroring in multiple volumes For critical applications
Read more

AWS Identity and Access Management

-
Image
  IAM Introduction to IAM -  AWS identity and management is a web service that helps you to securely control access to AWS resources You use IAM to control who is authenticated and authorized to use resources IAM allows you to create and manage AWS users and groups , and use permissions to allow or deny their access to AWS resources IAM is a fundamental part of AWS security, as it allows you to implement the principle of least privilege , ensuring that users and applications have only the permissions they need to perform their tasks IAM also provides features such as multi-factor authentication (MFA) , password policies, and access keys to enhance the security of your AWS environment Features of IAM -  IAM User  -   IAM allows you to create and manage users in your AWS account Each IAM user has a unique name and security credentials, which are used to authenticate and authorize their access to AWS resources IAM users have security credentials that are us...
Read more

Elastic Block Storage (EBS)

-
Image
 Elastic Block Storage (EBS) Elastic Block Storage (EBS) -  AWS Elastic Block Storage is a web service that provides block level storage volumes for use with amazon EC2 instances Amazon EBS volumes are highly available and reliable storage volumes that can be attached to any running instance and used like hard drive Amazon EBS allows you to create storage volumes and attach them to EC2 instances   It is used for various databses (both relational and non relational) as well as a wide range of application such as software testing and development  EBS provides a high performance option for many use cases it is directly attached to the instance Features of EBS  -  Amazon Elastic Block Storage  Region and availability zones are multiple physical location for your resources such as instances and EBS volumes Using security groups, you can specify the protocols, ports and source IP ranges that can reach your instances Elastic IP addresses are static IPv4 ...
Read more