Introducing programmable AWS Landing Zone in a Terraform module

Nyob zoo sawv daws! Thaum Lub Kaum Ob Hlis, OTUS nthuav tawm chav kawm tshiab - Cloud Solution Architecture. Hauv kev cia siab tias yuav pib ntawm chav kawm no, peb tab tom qhia rau koj txog kev txhais cov ntaub ntawv nthuav dav ntawm lub ncauj lus.

AWS Landing Zone yog ib qho kev daws teeb meem uas pab cov neeg siv khoom sai teeb tsa kev ruaj ntseg, ntau tus account AWS ib puag ncig raws li kev coj ua zoo tshaj.

Tau ntau tshaj tsib xyoos, peb pab neeg ntawm Mitoc Group tau ua haujlwm tsis tu ncua los pab cov koom haum loj ua tiav kev hloov pauv thiab tsim lossis hloov pauv lawv cov hneev taw digital mus rau AWS huab. Hauv lwm lo lus, hais txog peb cov phooj ywg ntawm AWS: "Peb cov neeg siv khoom tau rov tsim kho lawv tus kheej nrog AWS." Nws yog qhov tsis muaj qhov xaus rau kev rov tsim kho dua tshiab thiab ua kom yooj yim rau cov neeg kho tshuab sawv cev ntawm cov neeg siv khoom lawv tus kheej, thiab AWS ua haujlwm zoo los daws cov teeb meem nyuaj nrog cov kev daws teeb meem yooj yim.

AWS Landing Zone (qhov chaw)

AWS Landing Zone yog dab tsi?

Raws li cov ntaub ntawv los ntawm official qhov chaw:

AWS Landing Zone yog ib qho kev daws teeb meem uas pab cov neeg siv khoom sai teeb tsa qhov chaw ruaj ntseg AWS nrog ntau tus account raws li AWS cov kev coj ua zoo tshaj plaws. Nrog ntau txoj kev xaiv, teeb tsa ntau tus account ib puag ncig tuaj yeem siv sijhawm sijhawm, koom nrog kev teeb tsa ntau tus account thiab cov kev pabcuam, thiab xav tau kev nkag siab tob txog AWS cov kev pabcuam.

AWS Landing Zone tau txo qis qhov nyuaj thiab sib xws ntawm cov qauv tsim zoo sib xws xa mus rau cov neeg siv khoom sib txawv. Ntawm qhov tod tes, peb pab neeg yuav tsum tau teeb tsa qee qhov CloudFormation Cheebtsam ua Terraform Cheebtsam txhawm rau siv lawv ntxiv rau automation.

Yog li peb nug peb tus kheej, vim li cas ho tsis tsim tag nrho AWS Landing Zone daws hauv Terraform? Peb puas tuaj yeem ua qhov no thiab nws puas yuav daws tau peb cov neeg siv khoom cov teeb meem? Spoiler: nws yuav thiab yog twb txiav txim siab! 🙂

Thaum twg koj yuav tsum tsis siv AWS Landing Zone?

Yog tias koj tab tom cuam tshuam nrog cov kev pabcuam huab thiab huab huab hauv ib lossis ob tus account AWS, cov kev ntsuas no yuav dhau mus. Leej twg tsis hais txog qhov no tuaj yeem nyeem ntxiv :)

Koj yuav tsum xav txog dab tsi ua ntej pib ua haujlwm?

Ntau lub koom haum loj uas peb tau ua haujlwm nrog twb muaj qee yam huab cua zoo nyob rau hauv qhov chaw. Cov tuam txhab tawm tsam kom ua tiav cov kev pabcuam huab yam tsis muaj lub zeem muag meej thiab kev cia siab. Thov siv sijhawm los txheeb xyuas koj lub tswv yim thiab nkag siab tias AWS haum rau nws li cas.

Thaum teeb tsa lub tswv yim, ua tiav AWS Landing Zone cov neeg siv khoom nquag tsom mus rau cov hauv qab no:

• Automation tsuas yog tsis muaj kev xaiv. Huab haiv neeg automation yog nyiam.
• Cov pab pawg tsis tu ncua siv tib lub tshuab nrog tib cov cuab yeej los muab cov peev txheej huab. Nws yog qhov zoo dua los siv Terraform.
• Cov neeg siv huab tau txais txiaj ntsig zoo tshaj plaws muaj peev xwm los tsim cov txheej txheem rov siv tau thiab xa lawv ua cov kev pabcuam rov siv tau dua li cov lej rov siv tau. Serverless architecture yog nyiam.

Introducing the Terraform Module for AWS Landing Zone

Tom qab ob peb lub hlis ntawm kev ua haujlwm hnyav, kuv zoo siab los qhia rau koj Terraform module for AWS Landing Zone. Qhov chaws code yog khaws cia ntawm GitHub, thiab ruaj khov versions luam tawm ntawm Terraform Module Registry.

Txhawm rau pib, tsuas yog qhib main.tf rau koj tus lej code:

module "landing_zone" {
  source     = "TerraHubCorp/landing-zone/aws"
  version    = "0.0.6"
  root_path  = "${path.module}"
  account_id = "${var.account_id}"
  region     = "${var.region}"
  landing_zone_components = "${var.landing_zone_components}"
}

Nco tseg: Nco ntsoov qhib variables.tf thiab txhua yam koj xav tau los ntawm outputs.tf.

Yuav kom nkag siab yooj yim, peb tau ntxiv qhov tseem ceeb rau terraform.tfvars:

account_id = "123456789012"
region = "us-east-1"
landing_zone_components = {
  landing_zone_pipeline_s3_bucket = "s3://terraform-aws-landing-zone/mycompany/landing_zone_pipeline_s3_bucket/default.tfvars"
  [...]
}

Qhov no txhais tau hais tias thaum siv no module terraform koj yuav xav tau:

1. Hloov cov nqi account_id и region rau koj tus kheej, uas sib haum rau cov ntaub ntawv hauv AWS Organization;
2. Hloov cov nqi landing_zone_components cov uas phim koj AWS Landing Zone siv rooj plaub;
3. kho s3://terraform-aws-landing-zone/mycompany rau koj block S3 thiab key prefix S3qhov twg koj yuav khaws cov ntaub ntawv .tfvars (los yog txoj hauv kev rau cov ntaub ntawv .tfvars nyob rau hauv koj lub zos cia).

Cov qauv no yuav muaj kaum, pua, lossis ntau txhiab tus qauv siv tau, tab sis tsis yog txhua tus ntawm lawv yuav tsum tau siv lossis yuav raug xa mus. Thaum lub sijhawm ua haujlwm, cov khoom uas tsis yog ib feem ntawm daim ntawv qhia hloov pauv landing_zone_components yuav tsis quav ntsej.

xaus

Peb zoo siab heev thiab txaus siab los qhia cov txiv hmab txiv ntoo ntawm peb cov kev siv zog los pab cov neeg siv khoom tsim huab cua ib txwm muaj automation. Terraform module rau AWS Landing Zone yog lwm qhov kev daws teeb meem uas pab cov koom haum sai sai teeb tsa qhov chaw ruaj ntseg AWS nrog ntau tus account raws li AWS cov kev coj ua zoo tshaj plaws. Peb paub zoo tias AWS tab tom loj hlob ntawm qhov nrawm nrawm, thiab peb tau cog lus los tsim kho cov tshuaj terraform sai sai uas npog tag nrho cov hauv paus thiab tseem koom nrog lwm cov kev daws teeb meem AWS.

Yog tag nrho. Peb tab tom tos koj cov lus thiab caw koj mus dawb webinar nyob rau hauv uas peb Cia peb kawm txog kev tsim ntawm Cloud Landing Zone domain architecture thiab xav txog cov qauv kev tsim vaj tsev ntawm cov thawj tswj hwm.

Tau qhov twg los: www.hab.com