Pulogalamu ya ProHoster > Blog > Ulamuliro > Kuyambitsa Programmable AWS Landing Zone mu Terraform module

Kuyambitsa Programmable AWS Landing Zone mu Terraform module

Moni nonse! Mu Disembala, OTUS iyambitsa maphunziro atsopano - Cloud Solution Architecture. Poyembekezera kuyamba kwa maphunzirowa, tikugawana nanu kumasulira kwazinthu zosangalatsa pamutuwu.

Kuyambitsa Programmable AWS Landing Zone mu Terraform module

AWS Landing Zone ndi yankho lomwe limathandiza makasitomala mwamsanga kukhazikitsa malo otetezeka a AWS a akaunti zambiri pogwiritsa ntchito njira zabwino.

Kwa zaka zoposa zisanu, gulu lathu la Mitoc Group lagwira ntchito molimbika kuthandiza mabungwe akulu bwino kusintha digito ndikupanga kapena kusamutsa mawonekedwe awo a digito kupita kumtambo wa AWS. Mwanjira ina, kunena mawu a anzathu ku AWS: "Makasitomala athu akudziyambitsanso ndi AWS." Ndikuyesetsa kosatha kuyambiranso ndikusintha zimango m'malo mwa makasitomala okha, ndipo AWS imachita ntchito yabwino yothetsa mavuto ovuta ndi mayankho osavuta kuphunzira.

Kuyambitsa Programmable AWS Landing Zone mu Terraform module
Malo otsetsereka a AWS (gwero)

Kodi AWS Landing Zone ndi chiyani?

Malinga ndi zomwe zachokera ku boma:

AWS Landing Zone ndi yankho lomwe limathandiza makasitomala kukhazikitsa malo otetezeka a AWS okhala ndi maakaunti angapo kutengera machitidwe abwino a AWS. Ndi zosankha zambiri, kukhazikitsa malo okhala ndi akaunti zambiri kumatha kutenga nthawi, kuphatikizira kukonza maakaunti ndi mautumiki angapo, ndipo pamafunika kumvetsetsa mozama za ntchito za AWS.

AWS Landing Zone yachepetsa kwambiri zovuta komanso kusasinthika kwa mapangidwe ofanana omwe amaperekedwa kwa makasitomala osiyanasiyana. Kumbali ina, gulu lathu lidayenera kukonzanso zigawo zina za CloudFormation ngati zida za Terraform kuti zizigwiritsa ntchito mopitilira muyeso.

Chifukwa chake tidadzifunsa, bwanji osapanga yankho lonse la AWS Landing Zone ku Terraform? Kodi tingachite izi ndipo zitha kuthetsa mavuto amakasitomala athu? Wowononga: itero ndipo ikuganiza kale! πŸ™‚

Ndi liti pamene simuyenera kugwiritsa ntchito AWS Landing Zone?

Ngati mukuchita ndi ntchito zamtambo wanthawi zonse ndi zida zamtambo mkati mwa akaunti imodzi kapena ziwiri za AWS, izi zitha kukhala zochulukira. Aliyense amene sagwirizana ndi mfundoyi akhoza kupitiriza kuwerenga :)

Kodi muyenera kuganizira chiyani musanayambe ntchito?

Ambiri mwa mabungwe akuluakulu omwe tagwira nawo ntchito ali kale ndi njira zamtambo. Makampani akuvutika kuti agwiritse ntchito bwino mautumiki amtambo popanda masomphenya omveka bwino ndi ziyembekezo. Chonde tengani nthawi yofotokozera njira yanu ndikumvetsetsa momwe AWS ikuloweramo.

Mukakhazikitsa njira, makasitomala opambana a AWS Landing Zone amayang'ana kwambiri izi:

  • Automation si njira yokhayo. Cloud native automation ndiyokonda.
  • Matimu nthawi zonse amagwiritsa ntchito zimango zomwezo ndi zida zomwezo popereka zida zamtambo. Ndi bwino kugwiritsa ntchito Terraform.
  • Ogwiritsa ntchito mtambo opindulitsa kwambiri ali ndi kuthekera kopanga njira zomwe zingagwiritsidwenso ntchito ndikuzipereka ngati ntchito zomwe zingagwiritsidwenso ntchito m'malo mwa ma code. Zomangamanga zopanda seva ndizokonda.

Kuyambitsa Terraform Module ya AWS Landing Zone

Pambuyo pa miyezi ingapo yogwira ntchito molimbika, ndiri wokondwa kukuwonetsani Terraform module ya AWS Landing Zone. Nambala yachinsinsi imasungidwa pa GitHub, ndi zokhazikika zomasulidwa lofalitsidwa pa Terraform Module Registry.

Kuti muyambe, ingoyatsa main.tf ku kodi yanu:

module "landing_zone" {
  source     = "TerraHubCorp/landing-zone/aws"
  version    = "0.0.6"
  root_path  = "${path.module}"
  account_id = "${var.account_id}"
  region     = "${var.region}"
  landing_zone_components = "${var.landing_zone_components}"
}

Zindikirani: Onetsetsani kuti mwayatsa variables.tf ndi chilichonse chomwe mungafune kuchokera outputs.tf.

Kuti zikhale zosavuta kuzimvetsa, tawonjezera zikhalidwe zosasinthika ku terraform.tfvars:

account_id = "123456789012"
region = "us-east-1"
landing_zone_components = {
  landing_zone_pipeline_s3_bucket = "s3://terraform-aws-landing-zone/mycompany/landing_zone_pipeline_s3_bucket/default.tfvars"
  [...]
}

Izi zikutanthauza kuti mukamagwiritsa ntchito gawoli terraform muyenera:

  1. Sinthani makhalidwe account_id ΠΈ region zanu, zomwe zimagwirizana ndi zomwe zili mu bungwe la AWS;
  2. Sinthani makhalidwe landing_zone_components zomwe zimagwirizana ndi vuto lanu la AWS Landing Zone;
  3. kukonzanso s3://terraform-aws-landing-zone/mycompany ku block yanu S3 ndi mawu oyamba S3komwe mudzasungira mafayilo .tfvars (kapena njira yeniyeni yopita ku mafayilo .tfvars m'malo osungira kwanuko).

Gawoli litha kukhala ndi magawo makumi, mazana, kapena masauzande azinthu zomwe zingagwiritsidwe ntchito, koma sizinthu zonse zomwe ziyenera kutumizidwa. Pa nthawi yothamanga, zigawo zomwe sizili mbali ya mapu osinthika landing_zone_components adzanyalanyazidwa.

Pomaliza

Ndife okondwa komanso onyadira kugawana nawo zipatso za kuyesetsa kwathu kuthandiza makasitomala kupanga makina amtundu wamtambo. Gawo la Terraform la AWS Landing Zone ndi yankho lina lomwe limathandiza mabungwe kukhazikitsa malo otetezeka a AWS okhala ndi maakaunti angapo kutengera machitidwe abwino a AWS. Tikudziwa bwino kuti AWS ikukula mwachangu kwambiri, ndipo tadzipereka kupanga njira yothetsera terraform yomwe imakhudza maziko onse ndikuphatikizanso ndi njira zina zopangira AWS.

Ndizomwezo. Tikuyembekezera ndemanga zanu ndikukuitanani webinar yaulere momwe ife Tiphunzira kamangidwe kamangidwe ka Cloud Landing Zone ndikuganizira kamangidwe ka madera akulu..

Source: www.habr.com

Kuwonjezera ndemanga