HashiTalks Africa - Going multi-account on AWS with Terraform

•Als PPTX, PDF herunterladen•

1 gefällt mir•34,266 views

Cobus Bernard

Deck for the demo at HashiTalks Africa on 30 April 2020. Covers the reasons for wanting to use multiple accounts.

Internet

© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Going Multi-Account on AWS with Terraform
H a s h i T a l k s A f r i c a – 2 0 2 0 / 0 4 / 3 0
Cobus Bernard
Sr Developer Advocate
Amazon Web Services
@cobusbernard
cobusbernard
cobusbernard

© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
• Developer for 15 years
• AWS Customer for 8 years
• Terraform since 0.6
@cobusbernard
cobusbernard
cobusbernard

© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
Why use multiple account?
Splitting resources between accounts
Account switching
Role switching
Q&A

© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS global platform
AWS global infrastructure
• 24 Regions with 76 Availability Zones
• 4 Regions coming soon: Indonesia, Japan
and Spain
216 CloudFront PoPs
• 205 edge locations
• 11 Regional edge caches
• 245 Countries and territories served
AWS global network
• Redundant 100 GbE network
• 100% encrypted between facilities
• Private network capacity between
all AWS Regions except China
SLA of
99.99% availability

© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.

© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Allow
s3:*
Userdata-dev
Userdata-dev/*
Environment security
AWS account
Userdata-dev
Userdata-test
Userdata-UAT
Userdata-prod
Allow
s3:*
Userdata-test
Userdata-test/*
Allow
s3:GetObjects
s3:ListObjects
Userdata-UAT
Userdata-UAT/*
Deny
s3:*
Userdata-prod
Userdata-prod/*

© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Environment security
AWS account
Userdata-dev
Userdata-test
Userdata-UAT
Userdata-prod
Allow
s3:*
Userdata-dev
Userdata-dev/*
Allow
s3:*
Userdata-test
Userdata-test/*
Allow
s3:GetObjects
s3:ListObjects
Userdata-UAT
Userdata-UAT/*
Deny
s3:*
Userdata-prod
Userdata-prod/*

© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Environment security
AWS account Dev
AWS account Test
AWS account UAT
AWS account Prod
Userdata-dev Userdata-UAT
Userdata-test
Userdata-prod
Userdata-dev
Userdata-test
Userdata-UAT
Userdata-prod

Thank you!
© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Cobus Bernard
Sr Developer Advocate
Amazon Web Services
@cobusbernard
cobusbernard
cobusbernard

Weitere ähnliche Inhalte

Was ist angesagt?

AWS Summit Seoul 2015 - 국내 사례로 본 클라우드 운영 최적화 (이주완-메가존)Amazon Web Services Korea

Best Practices for Implementing Your Encryption Strategy Using AWS Key Manage...Amazon Web Services

AWS Security – Keynote Address (SEC101) | AWS re:Invent 2013Amazon Web Services

Secure your Web Applications with AWS Web Application Firewall (WAF) and AWS ...Amazon Web Services

Deep dive - AWS security by designRichard Harvey

Aws container webinar day 2HoseokSeo7

AWS Partner Webcast - Use Your AWS CloudTrail Data and Splunk Software To Imp...Amazon Web Services

Aws(in)security - the devil is in the detailPawel Rzepa

Architecting-for-the-cloud-Best-PracticesAmazon Web Services

Introduction to Threat Detection and Remediation on AWSAmazon Web Services

A Self-Defending Border: Protect Your Web-Facing Workloads with AWS Security ...Amazon Web Services

CloudHSM: Secure, Scalable Key Storage in AWS - AWS Online Tech TalksAmazon Web Services

AWS Cloud Security & Compliance Basics WebinarAmazon Web Services

Architecting for End-to-End Security in the Enterprise (ARC308) | AWS re:Inve...Amazon Web Services

Security overview-aws-lambdaVIJAY REDDY

(SEC301) Strategies for Protecting Data Using Encryption in AWSAmazon Web Services

Module 3: Security, Identity and Access Management - AWSome Day Online Confer...Amazon Web Services

Securing Your AWS Infrastructure with Edge ServicesAmazon Web Services

DEM14 Extending the Cisco SD-WAN Fabric to the AWS CloudAmazon Web Services

Building a Hyper Secure VPC on AWS with PuppetTim Nolet

Was ist angesagt? (20)

AWS Summit Seoul 2015 - 국내 사례로 본 클라우드 운영 최적화 (이주완-메가존)

Best Practices for Implementing Your Encryption Strategy Using AWS Key Manage...

AWS Security – Keynote Address (SEC101) | AWS re:Invent 2013

Secure your Web Applications with AWS Web Application Firewall (WAF) and AWS ...

Deep dive - AWS security by design

Aws container webinar day 2

AWS Partner Webcast - Use Your AWS CloudTrail Data and Splunk Software To Imp...

Aws(in)security - the devil is in the detail

Architecting-for-the-cloud-Best-Practices

Introduction to Threat Detection and Remediation on AWS

A Self-Defending Border: Protect Your Web-Facing Workloads with AWS Security ...

CloudHSM: Secure, Scalable Key Storage in AWS - AWS Online Tech Talks

AWS Cloud Security & Compliance Basics Webinar

Architecting for End-to-End Security in the Enterprise (ARC308) | AWS re:Inve...

Security overview-aws-lambda

(SEC301) Strategies for Protecting Data Using Encryption in AWS

Module 3: Security, Identity and Access Management - AWSome Day Online Confer...

Securing Your AWS Infrastructure with Edge Services

DEM14 Extending the Cisco SD-WAN Fabric to the AWS Cloud

Building a Hyper Secure VPC on AWS with Puppet

Ähnlich wie HashiTalks Africa - Going multi-account on AWS with Terraform

AWS SSA Webinar 7 - Getting Started on AWSCobus Bernard

Leveraging serverless in fullstack developmentEric Johnson

AWS SSA Webinar 11 - Getting started on AWS: SecurityCobus Bernard

20200513 - CloudComputing UCUMarcia Villalba

AWS 101Amazon Web Services

Migration to Aws Cloud Mufti Ardian

Introduction to Hybrid Cloud on AWSTom Laszewski

Introduction to Hybrid Cloud on AWS - AWS Online Tech TalksAmazon Web Services

Expanding Your AWS and On-premise Footprint to AWS GovCloud (US)Amazon Web Services

[AWS Media Symposium 2019] Perfecting the Media Experience with AWS - Bhavik ...Amazon Web Services Korea

Microsoft Active Directory Deep DiveAmazon Web Services

Moving your commercial databases to Amazon RDSAmazon Web Services

Track 5 Session 4_ intel 透過AWS Outposts就地佈署 on-premises 雲端環境.pptxAmazon Web Services

深入淺出 AWS 混合式雲端架構 Amazon Web Services

Cloud ibrido nella PAAmazon Web Services

AWS CZSK Webinář 2020.03: AWS OutpostsVladimir Simek

AcademyCloudFoundations_Module_08 (1).pptxrawwatchtime

How to secure your Active Directory deployment on AWS - FND306-R - AWS re:Inf...Amazon Web Services

AWS SSA Webinar 17 - Getting Started on AWS with Amazon RDSCobus Bernard

Design, Deploy, Optimize SQL Server Workloads on AWS - SRV209 - Anaheim AWS S...Amazon Web Services

Ähnlich wie HashiTalks Africa - Going multi-account on AWS with Terraform (20)

AWS SSA Webinar 7 - Getting Started on AWS

Leveraging serverless in fullstack development

AWS SSA Webinar 11 - Getting started on AWS: Security

20200513 - CloudComputing UCU

AWS 101

Migration to Aws Cloud

Introduction to Hybrid Cloud on AWS

Introduction to Hybrid Cloud on AWS - AWS Online Tech Talks

Expanding Your AWS and On-premise Footprint to AWS GovCloud (US)

[AWS Media Symposium 2019] Perfecting the Media Experience with AWS - Bhavik ...

Microsoft Active Directory Deep Dive

Moving your commercial databases to Amazon RDS

Track 5 Session 4_ intel 透過AWS Outposts就地佈署 on-premises 雲端環境.pptx

深入淺出 AWS 混合式雲端架構

Cloud ibrido nella PA

AWS CZSK Webinář 2020.03: AWS Outposts

AcademyCloudFoundations_Module_08 (1).pptx

How to secure your Active Directory deployment on AWS - FND306-R - AWS re:Inf...

AWS SSA Webinar 17 - Getting Started on AWS with Amazon RDS

Design, Deploy, Optimize SQL Server Workloads on AWS - SRV209 - Anaheim AWS S...

Mehr von Cobus Bernard

London Microservices Meetup: Lessons learnt adopting microservicesCobus Bernard

AWS SSA Webinar 34 - Getting started with databases on AWS - Managing DBs wit...Cobus Bernard

AWS SSA Webinar 33 - Getting started with databases on AWS Amazon DynamoDBCobus Bernard

AWS SSA Webinar 32 - Getting Started with databases on AWS: Choosing the righ...Cobus Bernard

AWS SSA Webinar 30 - Getting Started with AWS - Infrastructure as Code - Terr...Cobus Bernard

AWS SSA Webinar 28 - Getting Started with AWS - Infrastructure as CodeCobus Bernard

AWS Webinar 24 - Getting Started with AWS - Understanding DRCobus Bernard

AWS Webinar 23 - Getting Started with AWS - Understanding total cost of owner...Cobus Bernard

AWS SSA Webinar 21 - Getting Started with Data lakes on AWSCobus Bernard

AWS SSA Webinar 20 - Getting Started with Data Warehouses on AWSCobus Bernard

AWS SSA Webinar 19 - Getting Started with Multi-Region Architecture: ServicesCobus Bernard

AWS SSA Webinar 18 - Getting Started with Multi-Region Architecture: DataCobus Bernard

AWS EMEA Online Summit - Live coding with containersCobus Bernard

AWS EMEA Online Summit - Blending Spot and On-Demand instances to optimizing ...Cobus Bernard

AWS SSA Webinar 16 - Getting Started on AWS with Amazon EC2Cobus Bernard

AWS SSA Webinar 15 - Getting started on AWS with Containers: Amazon EKSCobus Bernard

AWS SSA Webinar 13 - Getting started on AWS with Containers: Amazon ECSCobus Bernard

AWS SSA Webinar 12 - Getting started on AWS with ContainersCobus Bernard

AWS SSA Webinar 10 - Getting Started on AWS: NetworkingCobus Bernard

AWS SSA Webinar 9 - Getting Started on AWS: StorageCobus Bernard

Mehr von Cobus Bernard (20)

London Microservices Meetup: Lessons learnt adopting microservices

AWS SSA Webinar 34 - Getting started with databases on AWS - Managing DBs wit...

AWS SSA Webinar 33 - Getting started with databases on AWS Amazon DynamoDB

AWS SSA Webinar 32 - Getting Started with databases on AWS: Choosing the righ...

AWS SSA Webinar 30 - Getting Started with AWS - Infrastructure as Code - Terr...

AWS SSA Webinar 28 - Getting Started with AWS - Infrastructure as Code

AWS Webinar 24 - Getting Started with AWS - Understanding DR

AWS Webinar 23 - Getting Started with AWS - Understanding total cost of owner...

AWS SSA Webinar 21 - Getting Started with Data lakes on AWS

AWS SSA Webinar 20 - Getting Started with Data Warehouses on AWS

AWS SSA Webinar 19 - Getting Started with Multi-Region Architecture: Services

AWS SSA Webinar 18 - Getting Started with Multi-Region Architecture: Data

AWS EMEA Online Summit - Live coding with containers

AWS EMEA Online Summit - Blending Spot and On-Demand instances to optimizing ...

AWS SSA Webinar 16 - Getting Started on AWS with Amazon EC2

AWS SSA Webinar 15 - Getting started on AWS with Containers: Amazon EKS

AWS SSA Webinar 13 - Getting started on AWS with Containers: Amazon ECS

AWS SSA Webinar 12 - Getting started on AWS with Containers

AWS SSA Webinar 10 - Getting Started on AWS: Networking

AWS SSA Webinar 9 - Getting Started on AWS: Storage

Kürzlich hochgeladen

Call Now ☎ 8264348440 !! Call Girls in Sarai Rohilla Escort Service Delhi N.C.R.soniya singh

Call Girls Service Chandigarh Lucky ❤️ 7710465962 Independent Call Girls In C...Sheetaleventcompany

Call Now ☎ 8264348440 !! Call Girls in Green Park Escort Service Delhi N.C.R.soniya singh

✂️ 👅 Independent Andheri Escorts With Room Vashi Call Girls 💃 9004004663Call Girls Mumbai

𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...Neha Pandey

(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7Call Girls in Nagpur High Profile Call Girls

@9999965857 🫦 Sexy Desi Call Girls Laxmi Nagar 💓 High Profile Escorts Delhi 🫶Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure

'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...APNIC

VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure

Call Now ☎ 8264348440 !! Call Girls in Shahpur Jat Escort Service Delhi N.C.R.soniya singh

AWS Community DAY Albertini-Ellan Cloud Security (1).pptxellan12

Networking in the Penumbra presented by Geoff Huston at NZNOGAPNIC

DDoS In Oceania and the Pacific, presented by Dave Phelan at NZNOG 2024APNIC

INDIVIDUAL ASSIGNMENT #3 CBG, PRESENTATION.CarlotaBedoya1

On Starlink, presented by Geoff Huston at NZNOG 2024APNIC

Enjoy Night⚡Call Girls Dlf City Phase 3 Gurgaon >༒8448380779 Escort ServiceDelhi Call girls

Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...tanu pandey

Hot Service (+9316020077 ) Goa Call Girls Real Photos and Genuine Servicesexy call girls service in goa

Call Girls In Pratap Nagar Delhi 💯Call Us 🔝8264348440🔝soniya singh

Russian Call Girls in %(+971524965298 )# Call Girls in DubaiDubai call girls 971524965298 Call girls in Bur Dubai

Kürzlich hochgeladen (20)

Call Now ☎ 8264348440 !! Call Girls in Sarai Rohilla Escort Service Delhi N.C.R.

Call Girls Service Chandigarh Lucky ❤️ 7710465962 Independent Call Girls In C...

Call Now ☎ 8264348440 !! Call Girls in Green Park Escort Service Delhi N.C.R.

✂️ 👅 Independent Andheri Escorts With Room Vashi Call Girls 💃 9004004663

𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...

(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7

@9999965857 🫦 Sexy Desi Call Girls Laxmi Nagar 💓 High Profile Escorts Delhi 🫶

'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...

VVVIP Call Girls In Connaught Place ➡️ Delhi ➡️ 9999965857 🚀 No Advance 24HRS...

Call Now ☎ 8264348440 !! Call Girls in Shahpur Jat Escort Service Delhi N.C.R.

AWS Community DAY Albertini-Ellan Cloud Security (1).pptx

Networking in the Penumbra presented by Geoff Huston at NZNOG

DDoS In Oceania and the Pacific, presented by Dave Phelan at NZNOG 2024

INDIVIDUAL ASSIGNMENT #3 CBG, PRESENTATION.

On Starlink, presented by Geoff Huston at NZNOG 2024

Enjoy Night⚡Call Girls Dlf City Phase 3 Gurgaon >༒8448380779 Escort Service

Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...

Hot Service (+9316020077 ) Goa Call Girls Real Photos and Genuine Service

Call Girls In Pratap Nagar Delhi 💯Call Us 🔝8264348440🔝

Russian Call Girls in %(+971524965298 )# Call Girls in Dubai

HashiTalks Africa - Going multi-account on AWS with Terraform

1. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. Going Multi-Account on AWS with Terraform H a s h i T a l k s A f r i c a – 2 0 2 0 / 0 4 / 3 0 Cobus Bernard Sr Developer Advocate Amazon Web Services @cobusbernard cobusbernard cobusbernard

4. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS global platform AWS global infrastructure • 24 Regions with 76 Availability Zones • 4 Regions coming soon: Indonesia, Japan and Spain 216 CloudFront PoPs • 205 edge locations • 11 Regional edge caches • 245 Countries and territories served AWS global network • Redundant 100 GbE network • 100% encrypted between facilities • Private network capacity between all AWS Regions except China SLA of 99.99% availability

6. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. Allow s3:* Userdata-dev Userdata-dev/* Environment security AWS account Userdata-dev Userdata-test Userdata-UAT Userdata-prod Allow s3:* Userdata-test Userdata-test/* Allow s3:GetObjects s3:ListObjects Userdata-UAT Userdata-UAT/* Deny s3:* Userdata-prod Userdata-prod/*

7. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. Environment security AWS account Userdata-dev Userdata-test Userdata-UAT Userdata-prod Allow s3:* Userdata-dev Userdata-dev/* Allow s3:* Userdata-test Userdata-test/* Allow s3:GetObjects s3:ListObjects Userdata-UAT Userdata-UAT/* Deny s3:* Userdata-prod Userdata-prod/*

8. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. Environment security AWS account Dev AWS account Test AWS account UAT AWS account Prod Userdata-dev Userdata-UAT Userdata-test Userdata-prod Userdata-dev Userdata-test Userdata-UAT Userdata-prod

9. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. Environment security AWS account Dev AWS account Test AWS account UAT AWS account Prod Userdata-dev Userdata-UAT Userdata-test Userdata-prod AWS account Main

HashiTalks Africa - Going multi-account on AWS with Terraform

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Ähnlich wie HashiTalks Africa - Going multi-account on AWS with Terraform

Ähnlich wie HashiTalks Africa - Going multi-account on AWS with Terraform (20)

Mehr von Cobus Bernard

Mehr von Cobus Bernard (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

HashiTalks Africa - Going multi-account on AWS with Terraform