DevOps "Office Hours" (2021-06-23)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have.

You can register here: https://cloudposse.com/office-hours

Join the conversation:
https://slack.cloudposse.com/

Find out how we can help your company:
https://cloudposse.com/quiz
https://cloudposse.com/accelerate/

Learn more about Cloud Posse:
https://cloudposse.com
https://github.com/cloudposse
https://sweetops.com/
https://newsletter.cloudposse.com
https://podcast.cloudposse.com/

[00:00:00​] Intro
[00:01:47] Vendir: Feature Ignore Paths Merged. Now waiting on release.
https://github.com/vmware-tanzu/carvel-vendir/pull/64
[00:49:13​] (Continued) Vendir: Feature Ignore Paths Merged. Now waiting on release.
[00:02:49​] New Terraform Module: AWS Global Accelerator
https://github.com/cloudposse/terraform-aws-global-accelerator
[00:04:01​] AWS Macie and AWS Firewall Manager forthcoming.
https://github.com/cloudposse/terraform-aws-macie/pull/1
https://github.com/cloudposse/terraform-aws-firewall-manager
[00:04:54] HashiCorp Google Workspace Provider announced
https://www.hashicorp.com/blog/announcing-the-google-workspace-provider-for-hashicorp-terraform-tech-preview
[00:05:39] AWS CloudFormation Public Registry
https://aws.amazon.com/about-aws/whats-new/2021/06/announcing-a-new-public-registry-for-aws-cloudformation/
[00:07:13​] Drift Detection Support Added to Spacelift
https://github.com/cloudposse/terraform-spacelift-cloud-infrastructure-automation/pull/44
[00:11:35​] Cloudflare Waiting Rooms
https://blog.cloudflare.com/building-waiting-room-on-workers-and-durable-objects/
[00:12:38​] Steampipe - SQL-esque queries for your cloud infrastructure
https://steampipe.io/
[00:14:50] Running Terraform with no internet access (terraform-bundle) 
https://github.com/hashicorp/terraform/tree/main/tools/terraform-bundle
[00:20:32] Policy enforcement based on git-diff? 
[00:27:27​] How do you write a trust policy for an IAM role to allow/disallow AWS SSO roles from another account to assume the role, given that AWS SSO generates non-deterministic IAM role names that change over time?
[00:43:48] (Continued) How do you write a trust policy for an IAM role to allow/disallow AWS SSO roles from another account to assume the role, given that AWS SSO generates non-deterministic IAM role names that change over time?
[00:31:48] Amazon EC2 now allows you to create crash-consistent AMIs and EBS Backups 
https://aws.amazon.com/about-aws/whats-new/2021/06/aws-backup-supports-crash-consistent-backup-amazon-ebs-volumes-attached-to-amazon-ec2-instance/
[00:33:06​] Any nice Azure reference architectures out there?
[00:36:10] How to share Terraform Generated SSH Keypair?
[00:38:20​] How to serve static HTML page from S3 through an ALB 
[00:52:00​] Cloud9 environments for limited budget teams 
[00:56:35​] Outro


#officehours,#cloudposse,#sweetops,#devops,#sre,#terraform,#kubernetes,#aws