Cloud Migrations

What it looks like…

• FULLY AUTOMATED

  Our GitOps process enables all engineers to participate without risking instability. By using 100% Infrastructure as Code, developers perform “Operations by Pull Request” so that every change goes through Code Review and CI/CD workflow.

• REPEATABLE

  100% Infrastructure-as-Code eliminates error-prone manual operations. Reproducible 100% of the time. Spin up as many environments as needed and treat them all the same. Lifecycle Management strategies ensure easy upgrades of all components without major disruptions.

• BEST PRACTICES

  We deliver a flexible solution capable of supporting any class of application that you might need to run now or in the future. We adhere to the best practices of the AWS Foundations Framework and the CIS Benchmarks for security.

• HIGHLY AVAILABLE

  Fault-tolerant so that services won't fall over and die if a component fails. Resilient by design, so that services self-heal without human intervention. Scalable to grow with demand both instantaneously and over time as the business grows. Capable of being both scaled-up and scaled-out.

Local Development Environments

Rapid Software Development…

• REPEATABLE

  Reproducible 100% of the time. Spin up as many environments as needed and treat them all the same.

• SQUASH BUGS

  Treat everything as “Infrastructure as Code” for more manageable environments. Reduce the human element wherever possible.

• EASY TO USE

  Developers should be able to get up and contribute their first “Pull Requests” day-one.

• FAST ONBOARDING

  Simple enough that anyone on your team should be able to use it.

Release Engineering

Confidence that it works…

• INTEGRATION TESTING

  Leverage CodeFresh, GitHub Actions or other systems like AWS CodeBuild, and Jenkins to build and test every commit. Know exactly which commit broke the build every time.

• CONT. DELIVERY

  Deploy exactly what was tested to any cluster using immutable containers. Identify problems before they get into production. Run identical environments to eliminate headaches.

• PREVIEW ENVIRONMENTS

  Preview Environments enable any branch or Pull Request to be deployed as a short-lived ephemeral environment. Unlimited environments ensure developers are unblocked to test their changes.

• FULLY AUTOMATED

  Zero downtime, rolling deployments are accomplished automatically using Kubernetes with Helm. Need a service mesh like Istio? No problem.

Automated Deployments

Easy deployments…

• EASY ROLLOUTS

  Infrastructure as code means it can be tested as code.

• QUICK ROLLBACKS

  Easy rollbacks when things don't work as expected. Just revert to the previous deployment without bending over backward.

• ZERO-DOWNTIME

  Zero downtime, rolling deployments are accomplished automatically by Kubernetes.

• RELIABLE

  Improve overall stability by catching problems early. Treat every problem as an opportunity to eliminate future headaches.

Site Reliability Engineering

System-wide overview…

• DASHBOARDS

  Dashboards provide an overview of everything at a glance and provide the necessary transparency across departments. Get everyone on the same page and working towards the same goals by giving them the insights they need to do it.

• KEY PERFORMANCE INDICATORS

  KPIs provide the benchmarks for success. They give a concrete indicator when things are working or broken. Alert based on thresholds instead of discrete events. Generate actionable notifications that escalate only when it matters to On-Call Engineers.

• LOG AGGREGATION

  Monitor internal services for both availability and correctness. Aggregate and report on logs collected from all services across all machines.

• MONITORING AS CODE

  External services are just as integral to the performance of your product as internal ones. Monitor all dependencies as if they were your own. Escalate before their problems become yours.

Scale Testing

Know your limits…

• TEST PLAN

  Collect and ship logs somewhere for easy reporting.

• ESTABLISH BASELINE

  Reporting on logs requires visualization of events because that's the only way to make sense of mounds of data.

• SIMULATE TRAFFIC

• OPTIMIZE & REPEAT

  Integrate with monitoring and alerting so that critical events are not lost.

Training and Support

Foster a DevOps culture…

• CODE REVIEWS

  DevOps involves constant cross-training of engineers to achieve business continuity at the human-level.

• SCREEN SHARING

• SLACK CHANNEL

  Best Practices exist to teach hard lessons more easily.

• DOCUMENTATION

  Cloud Technologies are evolving at an astonishing rate. Get help staying on top of the latest & greatest tech without getting overwhelmed.

Security & Compliance

Protect your business…

• SINGLE SIGN-ON

  Cloud security involves hardening all components, restricting access with SSO/MFA, and having a bird's eye view of everything going on to quickly remediate any incident.

• PHYSICAL SECURITY

  On-prem security is just as important as cloud security. Protect your intellectual property (IP) from being compromised. Lockdown laptops, wifi, and physical access. A company is only as secure as its weakest link.

• AUDIT TRAILS

  Auditing is the on-going process of surfacing anomalous events happening across all systems by combing through centrally aggregated logs like Splunk, Sumologic or Kibana/ElasticSearch.

• SECRETS MANAGEMENT

  Secrets management ensures there's a formal process for storing, securing, and rotating passwords and keys. Well designed solutions help ensure your company will not be tomorrow's headline news.

Gap Assessments

Gain the upper hand…

• CLOUD ARCHITECTURE

  We'll perform a comprehensive 12-factor assessment on your code base

• GITHUB

  We'll review your GitHub organization to make sure your taking maximum advantage of the platform, including a comprehensive security assessment.

• DOCKER/COMPOSE

  We'll review your Dockerfiles and Docker Compositions to make sure you're making best use of the tools.

• KUBERNETES

  We'll review your usage of Kubernetes and make recommendations on how to better leverage the platform to your advantage.

Other Resources

• Hundreds of Terraform Modules

  We are the largest provider of high quality, well-maintained, 100% Open Source (APACHE2) Terraform Modules. All modules are tested with terratest. Pull Requests welcome! View our Terraform Modules

• Dozens of Helm Charts

  What makes them special is we've developed these charts to integrate with third-party services like Github for authentication (OAuth2) and Duo for MFA. View our Helm Charts

• Dozens of Helmfiles

  Preconfigured release configurations for all essential services for kubernetes including Prometheus, Grafana, Nginx Ingress, Kube Dashboard, Cloudflare Argo, Fluentd, and much more. View our Helmfiles

• Helpful Slack Community

  Join our community, It's FREE! This is the best place to talk shop, ask questions, solicit feedback, and work together as a community to build sweet infrastructure. Join our Slack Community

• Badass Documentation

  Here you'll find comprehensive guides and documentation to help you start working with the Cloud Posse technology stack as quickly as possible, as well as support if you get stuck. Read our Docs

• Free Weekly "Office Hours"

  Every week we hold a conference call via Zoom for our community members to share what they are working on and ask questions. Join our next call