Kuyambitsa Programmable AWS Landing Zone mu Terraform module

Moni nonse! OTUS ikuyambitsa maphunziro atsopano mu Disembala— Cloud Solution ArchitecturePoyembekezera kukhazikitsidwa kwa maphunzirowa, tikugawana nanu zomasulira zazinthu zosangalatsa pamutuwu.

AWS Landing Zone ndi yankho lomwe limathandiza makasitomala mwamsanga kukhazikitsa malo otetezeka a AWS a akaunti zambiri pogwiritsa ntchito njira zabwino.

Kwa zaka zopitirira zisanu, gulu lathu la Mitoc Group lagwira ntchito mwakhama kuthandiza mabungwe akuluakulu kuti azitha kuyendetsa bwino kusintha kwa digito ndi kumanga kapena kusamukira ku AWS Cloud. Mwanjira ina, kutchula anzathu ku AWS: "Makasitomala athu akudziyambitsanso ndi AWS." Uku ndikuyesa kosatha kukonzanso ndi kufewetsa machitidwe m'malo mwa makasitomala athu, ndipo AWS imapambana pakuthetsa mavuto ovuta ndi mayankho osavuta kuphunzira.

Malo otsetsereka a AWS (gwero)

Kodi AWS Landing Zone ndi chiyani?

Malinga ndi zomwe zachokera ku boma:

AWS Landing Zone ndi yankho lomwe limathandiza makasitomala kukhazikitsa malo otetezeka, okhala ndi akaunti zambiri za AWS kutengera machitidwe abwino a AWS. Pokhala ndi zosankha zambiri, kukhazikitsa malo okhala ndi akaunti zambiri kumatha kukhala nthawi yambiri, kumafuna kasinthidwe ka maakaunti ndi mautumiki angapo, komanso kumafuna kumvetsetsa kwakukulu kwa mautumiki a AWS.

Yankho la AWS Landing Zone linachepetsa kwambiri zovuta komanso kusasinthika kwa mapangidwe ofanana omwe amaperekedwa kwa makasitomala osiyanasiyana. Kumbali ina, gulu lathu lidayenera kukonzanso zida zina za CloudFormation ngati zida za Terraform kuti zithandizire kuti zizingopanga zokha.

Chifukwa chake tidadzifunsa, bwanji osapanga yankho lonse la AWS Landing Zone ku Terraform? Kodi tingathe kuchita izi, ndipo zingathetse mavuto a makasitomala athu? Wowononga: asankha ndipo akuganiza kale! 🙂

Ndi liti pamene simuyenera kugwiritsa ntchito AWS Landing Zone?

Ngati mukuchita ndi ntchito zamtambo wanthawi zonse ndi zida zamtambo mkati mwa akaunti imodzi kapena ziwiri za AWS, izi zitha kukhala zosafunikira. Wina aliyense amene sali m'gululi atha kupitiriza kuwerenga.

Kodi muyenera kuganizira chiyani musanayambe ntchito?

Mabungwe ambiri akulu omwe tagwira nawo ntchito ali kale ndi njira zamtambo. Makampani amavutika kuti agwiritse ntchito bwino mautumiki amtambo popanda masomphenya omveka bwino komanso zoyembekeza zofotokozedwa. Chonde tengani nthawi yofotokozera njira yanu ndikumvetsetsa momwe AWS ikuloweramo.

Pofotokoza njira yawo, makasitomala opambana a AWS Landing Zone amayang'ana kwambiri izi:

• Automation yokha si njira. Native cloud automation imakonda.
• Magulu nthawi zonse amagwiritsa ntchito zimango ndi zida zomwezo popereka zida zamtambo. Terraform ndi yabwino.
• Ogwiritsa ntchito mtambo opindulitsa kwambiri ali ndi kuthekera kopanga njira zomwe zingagwiritsidwenso ntchito ndikuzipereka ngati ntchito zomwe zingagwiritsidwenso ntchito m'malo mwa ma code. Zomangamanga zopanda seva ndizokonda.

Kuyambitsa Terraform Module ya AWS Landing Zone

Pambuyo pa miyezi ingapo yogwira ntchito molimbika, ndiri wokondwa kukuwonetsani Terraform module ya AWS Landing Zone. Nambala yachinsinsi imasungidwa pa GitHub, ndi zokhazikika zomasulidwa amasindikizidwa pa Terraform Module Registry.

Kuti muyambe, ingoyatsa main.tf mu code yanu:

module "landing_zone" {
  source     = "TerraHubCorp/landing-zone/aws"
  version    = "0.0.6"
  root_path  = "${path.module}"
  account_id = "${var.account_id}"
  region     = "${var.region}"
  landing_zone_components = "${var.landing_zone_components}"
}

Chidziwitso: Onetsetsani kuti mwayatsa variables.tf ndi chilichonse chomwe mungafune kuchokera outputs.tf.

Kuti timvetsetse bwino, tawonjezera zosintha zosasinthika terraform.tfvars:

account_id = "123456789012"
region = "us-east-1"
landing_zone_components = {
  landing_zone_pipeline_s3_bucket = "s3://terraform-aws-landing-zone/mycompany/landing_zone_pipeline_s3_bucket/default.tfvars"
  [...]
}

Izi zikutanthauza kuti mukamagwiritsa ntchito gawoli terraform muyenera:

1. Sinthani makhalidwe account_id и region zanu, zomwe zimagwirizana ndi zomwe zili mu bungwe la AWS;
2. Sinthani makhalidwe landing_zone_components zomwe zimagwirizana ndi vuto lanu la AWS Landing Zone;
3. kukonzanso s3://terraform-aws-landing-zone/mycompany ku block yanu S3 ndi mawu oyamba S3komwe mudzasungira mafayilo .tfvars (kapena njira yeniyeni yopita ku mafayilo .tfvars m'malo osungira kwanuko).

Gawoli litha kukhala ndi magawo makumi, mazana, kapena masauzande azinthu zomwe zingagwiritsidwe ntchito, koma si zonse zomwe zimafunikira kapena zidzatumizidwa. Pa nthawi yothamanga, zigawo zomwe sizili mbali ya mapu osinthika landing_zone_components adzanyalanyazidwa.

Pomaliza

Ndife okondwa komanso onyadira kugawana nawo zotsatira za khama lathu, zomwe zimathandiza makasitomala kupanga makina opangira mitambo. Gawo la Terraform la AWS Landing Zone ndi yankho lina lomwe limathandiza mabungwe kuti akhazikitse mwachangu malo otetezeka a AWS, okhala ndi maakaunti ambiri kutengera machitidwe abwino a AWS. Tikudziwa bwino kuti AWS ikusintha mwachangu kwambiri, ndipo tadzipereka kutulutsa yankho la Terraform mwachangu ndikuphimba maziko onse ndikuphatikiza ndi mayankho ena a AWS.

Ndizo zonse pakadali pano. Tikuyembekezera ndemanga zanu ndikukuitanani webinar yaulere momwe ife Tiyeni tifufuze mamangidwe a Cloud Landing Zone domain ndikuwonanso kamangidwe ka madera akulu..

Source: www.habr.com