#announcements - September 2018

module "rds_cluster_aurora_postgres" {
  source             = "git::<https://github.com/cloudposse/terraform-aws-rds-cluster.git?ref=master>"
  name               = "postgres"
  engine             = "aurora-postgresql"
  cluster_family     = "aurora-postgresql9.6"
  cluster_size       = "2"
  namespace          = "eg"
  stage              = "dev"
  admin_user         = "admin1"
  admin_password     = "Test123456789"
  db_name            = "dbname"
  instance_type      = "db.r4.large"
  vpc_id             = "vpc-XXXXXXXX"
  availability_zones = ["us-east-1a", "us-east-1b"]
  security_groups    = []
  subnets            = ["subnet-XXXXXXXX", "subnet-XXXXXXXX"]
  zone_id            = "ZXXXXXXXXXXXX"
}

output "name" {
  value       = "${module.rds_cluster_aurora_postgres.name}"
  description = "Database name"
}

output "user" {
  value       = "${module.rds_cluster_aurora_postgres.user}"
  description = "Username for the master DB user"
}

output "password" {
  value       = "${module.rds_cluster_aurora_postgres.password}"
  description = "Password for the master DB user"
}

output "cluster_name" {
  value       = "${module.rds_cluster_aurora_postgres.cluster_name}"
  description = "Cluster Identifier"
}

output "master_host" {
  value       = "${module.rds_cluster_aurora_postgres.master_host}"
  description = "DB Master hostname"
}

output "replicas_host" {
  value       = "${module.rds_cluster_aurora_postgres.replicas_host}"
  description = "Replicas hostname"
}

Outputs:

cluster_name = eg-dev-postgres
master_host = <http://master.postgres.XXXXXXXXX.net|master.postgres.XXXXXXXXX.net>
name = dbname
password = Test123456789
replicas_host = <http://replicas.postgres.XXXXXXXX.net|replicas.postgres.XXXXXXXX.net>
user = admin1

* module.vpc_peering.data.aws_route_table.requestor: data.aws_route_table.requestor: value of 'count' cannot be computed

module "vpc" {
  source  = "terraform-aws-modules/vpc/aws"
  version = "1.40.0"

  name = "hub-vpc"
  cidr = "${var.bit_mask_16}.0.0/16"
  azs             = ["${var.az_a}"]
  private_subnets = ["${var.bit_mask_16}.1.0/24"]
  public_subnets  = ["${var.bit_mask_16}.101.0/24"]

  enable_nat_gateway = true
  enable_vpn_gateway = false

  tags = {
    Terraform = "true"
    Environment = "hub"
  }
}

module "vpc_peering" {
  source           = "git::<https://github.com/cloudposse/terraform-aws-vpc-peering.git?ref=master>"
  namespace        = "hub"
  stage            = "dev"
  name             = "hub-to-mc"
  requestor_vpc_id = "${module.vpc.vpc_id}"
  acceptor_vpc_id  = "${var.mc_vpc_id}"

  tags = {
    Terraform = "true"
    Environment = "hub"
  }
}

[Root]                  (Consolidated Billing / Org Root +  IAM users here)
[Security]              (Central logs, audits)
[Prod], [Dev], [Local]  (Environment application specific accounts)

[Root]                  (Consolidated Billing / Org Root)
[Security]              (Central logs, audits)
[Identity]              (IAM here?)
[Prod], [Dev], [Local]  (Environment application specific accounts)

>> The mental gymnastics I see companies go through to avoid vendor lock-in and “reasons” for multi-cloud always astound me. It’s baffling the amount of money companies are willing to spend on things that do not differentiate them in any way whatsoever and, in fact, forces them to divert resources from business-differentiating things.

>> When you abstract away the differentiating features to avoid lock-in, you also abstract away the value. You end up with vendor “lock-out,” which basically means you aren’t leveraging the full value of services.