Hoʻolauna ʻia ʻo AWS Landing Zone i hoʻolālā ʻia i kahi module Terraform

Aloha kākou! I Dekemaba, hoʻomaka ʻo OTUS i kahi papa hou - Hoʻolālā Cloud Solution. I ka hoʻomaka ʻana o kēia papa, ke kaʻana nei mākou iā ʻoe i kahi unuhi o nā mea hoihoi e pili ana i ke kumuhana.

AWS Landing Zone He hoʻonā e kōkua i nā mea kūʻai aku e hoʻonohonoho wikiwiki i kahi kaiapuni AWS paʻa, multi-account e pili ana i nā hana maikaʻi loa.

No ʻelima mau makahiki, ua hana pau ʻole kā mākou hui ma Mitoc Group e kōkua i nā hui nui e hoʻololi pono a kūkulu a hoʻoneʻe paha i kā lākou kapuaʻi kikohoʻe i ke ao AWS. I nā huaʻōlelo ʻē aʻe, e ʻōlelo i kā mākou mau hoaaloha ma AWS: "Ke hana hou nei kā mākou mea kūʻai aku iā lākou iho me AWS." He hoʻoikaika pau ʻole ia e hana hou a hoʻomaʻamaʻa i nā mīkini no ka poʻe kūʻai aku iā lākou iho, a he hana maikaʻi loa ʻo AWS i ka hoʻoponopono ʻana i nā pilikia paʻakikī me nā haʻina maʻalahi e aʻo.

AWS Landing Zone (kumu)

He aha ka AWS Landing Zone?

Wahi a ka ʻike mai kahi kumu kūhelu:

ʻO ka AWS Landing Zone kahi hoʻonā e kōkua i nā mea kūʻai aku e hoʻonohonoho i kahi kaiapuni AWS paʻa me nā moʻolelo he nui e pili ana i nā hana maikaʻi loa o AWS. Me nā koho he nui, hiki i ka hoʻonohonoho ʻana i kahi kaiapuni multi-account ke hoʻopau i ka manawa, komo i ka hoʻonohonoho ʻana i nā moʻokāki a me nā lawelawe he nui, a koi i ka ʻike hohonu o nā lawelawe AWS.

Ua hōʻemi nui ʻo AWS Landing Zone i ka paʻakikī a me ke kūlike o nā ʻano hoʻolālā like i hāʻawi ʻia i nā mea kūʻai aku. Ma ka lima ʻē aʻe, pono kā mākou hui e hoʻonohonoho hou i kekahi mau ʻāpana CloudFormation e like me nā ʻāpana Terraform i mea e hoʻohana hou ai iā lākou no ka automation.

No laila ua nīnau mākou iā mākou iho, no ke aha e kūkulu ʻole ai i ka hopena AWS Landing Zone holoʻokoʻa ma Terraform? Hiki iā mākou ke hana i kēia a e hoʻoponopono i nā pilikia o kā mākou mea kūʻai? Spoiler: e hoʻoholo ana ia! 🙂

I ka manawa hea ʻaʻole pono ʻoe e hoʻohana i ka AWS Landing Zone?

Inā ʻoe e pili ana i nā lawelawe kapuaʻi maʻamau a me nā kumuwaiwai kapuaʻi i loko o hoʻokahi a i ʻole ʻelua mau moʻolelo AWS, hiki i kēia mau hana ke overkill. Hiki i ka mea pili ʻole i kēia wahi ke hoʻomau i ka heluhelu :)

He aha kāu e noʻonoʻo ai ma mua o ka hoʻomaka ʻana i ka hana?

ʻO ka nui o nā hui nui a mākou i hana pū ai ua loaʻa i kekahi ʻano hoʻolālā ao. Paʻakikī nā ʻoihana e hoʻokō pono i nā lawelawe kapua me ka ʻike ʻole a me nā manaʻolana. E ʻoluʻolu e lawe i ka manawa e wehewehe i kāu hoʻolālā a hoʻomaopopo i ke ʻano o ka AWS e pili ai.

I ka hoʻonohonoho ʻana i kahi hoʻolālā, hoʻoikaika ikaika nā mea kūʻai aku ʻo AWS Landing Zone i kēia aʻe:

• ʻAʻole koho wale ka ʻautome. ʻOi aku ka makemake o ka automation native cloud.
• Hoʻohana mau nā hui i nā mīkini like me nā pūʻulu like o nā mea hana e hoʻolako i nā kumuwaiwai ao. ʻOi aku ka maikaʻi o ka hoʻohana ʻana iā Terraform.
• Loaʻa i nā mea hoʻohana kapuaʻi ʻoi loa ka hiki ke hana i nā kaʻina hana hou a hāʻawi iā lākou e like me nā lawelawe reusable ma kahi o ka code reusable. ʻOi aku ka maikaʻi o ka hoʻolālā serverless.

Ke hoʻolauna nei i ka Terraform Module no AWS Landing Zone

Ma hope o kekahi mau mahina o ka hana nui, hauʻoli wau e hōʻike aku iā ʻoe Module Terraform no AWS Landing Zone. Nīnau mālama ʻia ma GitHub, a nā mana hoʻokuʻu paʻa paʻi ʻia ma ka Terraform Module Registry.

No ka hoʻomaka ʻana, e hoʻā wale main.tf i kāu code:

module "landing_zone" {
  source     = "TerraHubCorp/landing-zone/aws"
  version    = "0.0.6"
  root_path  = "${path.module}"
  account_id = "${var.account_id}"
  region     = "${var.region}"
  landing_zone_components = "${var.landing_zone_components}"
}

'Ōlelo Aʻo: E hōʻoia e hiki variables.tf a me nā mea a pau āu e pono ai outputs.tf.

I mea e maʻalahi ai ka hoʻomaopopo ʻana, ua hoʻohui mākou i nā waiwai paʻamau i terraform.tfvars:

account_id = "123456789012"
region = "us-east-1"
landing_zone_components = {
  landing_zone_pipeline_s3_bucket = "s3://terraform-aws-landing-zone/mycompany/landing_zone_pipeline_s3_bucket/default.tfvars"
  [...]
}

ʻO ia ke ʻano o ka hoʻohana ʻana i kēia module terraform makemakeʻoe:

1. Hoʻololi i nā waiwai account_id и region iā ʻoe iho, e pili ana i ka ʻikepili i loko o ka AWS Organization;
2. Hoʻololi i nā waiwai landing_zone_components nā mea e pili ana i kāu hihia hoʻohana AWS Landing Zone;
3. hoololi s3://terraform-aws-landing-zone/mycompany i kāu poloka S3 a me ka prefix kī S3kahi āu e mālama ai i nā faila .tfvars (a i ʻole ke ala pololei i nā faila .tfvars ma kāu waihona kūloko).

He ʻumi, haneli, a mau kaukani paha nā ʻāpana hiki ke hoʻoili ʻia i kēia module, akā ʻaʻole pono lākou a pau e hoʻolālā ʻia. I ka wā holo, nā ʻāpana ʻaʻole i ʻāpana o ka palapala ʻāina loli landing_zone_components e malama ole ia.

hopena

Hauʻoli mākou a haʻaheo e kaʻana like i nā hua o kā mākou hoʻoikaika ʻana e kōkua i nā mea kūʻai aku e kūkulu i ka automation native cloud. ʻO ka module Terraform no AWS Landing Zone kahi ʻano ʻē aʻe e kōkua i nā hui e hoʻonohonoho wikiwiki i kahi kaiapuni AWS paʻa me nā helu he nui e pili ana i nā hana maikaʻi loa o AWS. Ua ʻike maikaʻi mākou e ulu nei ʻo AWS ma kahi wikiwiki wikiwiki loa, a ke kūpaʻa nei mākou i ka hoʻomohala wikiwiki ʻana i kahi hopena terraform e uhi ana i nā kumu āpau a hoʻohui pū me nā ʻōnaehana hana AWS ʻē aʻe.

ʻo ia wale nō. Ke kali nei mākou i kāu mau manaʻo a kono iā ʻoe e webinar manuahi i loko o mākou E noʻonoʻo kākou i ka hoʻolālā ʻana o ka hoʻolālā ʻāina ʻo Cloud Landing Zone a noʻonoʻo i nā hiʻohiʻona kūkulu hale o nā kāʻei kapu nui..

Source: www.habr.com