#aws - August 2024

Hey, I've written a blog post on the stuff I'm currently working on at work: creating AWS infrastructure with something called Pulumi. Pulumi is another IAC tech. It sits in the same area as Terraform, but it is nothing like Terraform as you, as a developer, can bring your own language to it like, say, Python, Go, and C# and make cloud infrastructure as well as build your app. So essentially, it will remove the DevOps part from the picture eventually. As you will know how to build this stuff with Pulumi.

Well, if this sounds interesting, please read my post, and if you really like it, could you share it?

Link to post: https://theclouddude.co.uk/two-alb-target-groups-one-ecs-with-pulumi-python

I don't work for Pulumi, and I don't make any money out of my blog.

There seems to be a scarcity of documentation and explainers for ECS Service Connect automatic encryption. At least I would have wanted more when implemented it for the first time. Thus, a video explainer recorded together with Vladimir Samoylov https://www.youtube.com/watch?v=z1WQ-YSAsVY and a supporting blog post https://fivexl.io/blog/ecs-service-connect-encryption/ Hope it will be helpful for some of you out there to make your organizations more secure

I seem to be hitting this common problem when using the aws components of need the account_map component. I was just trying to deploy a simple s3 bucket and I got this error:-

module.iam_roles.module.account_map.data.utils_component_config.config[0]: Reading...

Planning failed. Terraform encountered an error while generating this plan.

╷
│ Error: failed to find a match for the import '/Users/gwestwood/work/orcid-terraform-xxxx/components/terraform/s3-bucket/stacks/orgs/**/*.yaml' ('/Users/gwestwood/work/orcid-terraform-xxx/components/terraform/s3-bucket/stacks/orgs' + '**/*.yaml')

i think it's also hitting https://atmos.tools/quick-start/advanced/configure-repository/#atmosyaml-cli-config-file-location

yea i got the atmos path thing to work so now it's just failing because of the missing stack

has anyone been able to workaround the limitation with NOT being able to tag permission sets that get created as roles in target accounts? it’s pretty wild that this limitation is in place 😭

Does anyone have experience with moving existing MySQL RDS databases to graviton and sequencing around the upgrade to MySQL 8.0?

Hello!
Is there any option to use the AWS Loadbalancer Controller in defaultTargetType: instance mode, but only add the instances to the target group where pod runs? And the conroller automaticaly updates the target group if the pod moved to an another instance?
The service uses nodeport.

I’m getting random 503's on a setup I’m doing
jenkins.example.com --> NLB 443 --> ALB HTTPS --> EC2 instance with Jenkins (8080)

I cannot find the cause of it

Hey everyone, I’m excited to share an article we just developed at Appvia on building a well-architected landing zone on AWS. It’s packed with insights for anyone in DevOps, platform engineering, or cloud architecture, focusing on how to set up a secure and scalable AWS foundation.

Would love to hear your thoughts on it: https://www.appvia.io/blog/building-a-well-architected-landing-zone-on-aws

I use Cloudposse EKS node group module. Initially I created the node group with desired_instance=1 for testing when trying to increase the desired it's ignored. Just wanted to understand the rational behind that behaviour.

Hi,
Anyone using latest 'cloudposse/terraform-aws-eks-node-group' for windows nodes plz? I am having issue when node tries to connect to EKS cluster.