AWS Builders Online Series
Deploy Infrastructure
as a Code on AWS
Nelli Lovchikova
Solutions Architect Manager
Amazon Web Services
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
1. Infrastructure as a code (IaC) overview
2. AWS CloudFormation
3. AWS Cloud Development Kit (AWS CDK)
4. Terraform with AWS CDK
5. Recap
6. Next steps – resources to get started
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Challenge: Environmental Drift
• Each environment maintains individual settings
• Snowflake effect
• Causes by
• Manual changes
• Poor configuration
• Application mischief
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Challenge: Human Error
• Idempotence – same operation produces the same result
• Lost knowledge
• Emergency situations
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Infrastructure as a code (IaC)
Consistent Lower risk of Lower cost Self-documented
human error
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Evolution of Infrastructure as Code (IaC)
Abstractions
Generators
Declarative
Scripted AWS CDK
Troposphere Pulumi
Manual GoFormation
AWS CloudFormation
#!/bin/bash Terraform
Wikis, playbooks,
ask-Bob-he-knows
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS CloudFormation
Upload local files or Stacks and resources are
Code in YAML or JSON
from an Amazon S3 provisioned as a running
directly or use sample
bucket environment
templates
Create stack
using API via AWS
CloudFormation
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Cloud Development Kit (CDK)
App
Stack (s)
Construct Construct
AWS Lambda Amazon Amazon Amazon S3
DynamoDB SQS Bucket
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Development workflow
execute synthesize deploy provision
AWS CDK AWS CDK Template and AWS
Cloud Resources
Source Code CLI assets CloudFormation
📙 cdk init // create new project
🛠 npm run build // build project
🧬 cdk synth // create templates and assets
🔎 cdk diff // check what will change
🚀 cdk deploy // push changes to your account
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Construct levels
L3 Patterns
L2 AWS Constructs
L1 AWS CloudFormation resources
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Level 1
cdk synth
• Generated mappings from CloudFormation Specification
• abc.CfnXyz → AWS::ABC::XYZ CloudFormation Resource
• ec2.CfnInstance → AWS::EC2::Instance
• kms.CfnKey → AWS::KMS::Key
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Level 2
• Ready-to-use VPC setup
cdk synth • 65536 IPs split equally between 4 subnets
• If you provide a region → adjusted to 3 AZs
• Everything is optional, change any parameter
• Sane default values
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Level 3
AWS VPC Elastic Load Balancer AWS Fargate Amazon ECS task
definition
• Subnets • Security group • IAM roles • Image
829 line Security group egress • CPU
• EIP • • IAM policies
AWS CloudFormation Security group ingress • Memory
• NAT gateways • • Log group
template • Port
“amazon-ecs-sample”
• Internet gateway • Task definition • Configuration
• Listener
image
• Route
• Route table • Target group
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Terraform
Terraform
provider
Target API
Terraform
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Terraform configuration
A Terraform configuration is a
complete document in the
Terraform language that tells
Terraform how to manage a given
collection of infrastructure.
A configuration can consist of
multiple files and directories.
Key concepts: Providers,
resources, variables, outputs, and
modules.
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS CDK supports Terraform
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Conclusion
• Infrastructure as a code and it’s evolution
• AWS CloudFormation
• AWS CDK – concepts, levels and abstractions
• Terraform
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Next steps: Get hands-on
1. https://github.com/aws-cloudformation
2. https://github.com/aws/aws-cdk
3. https://github.com/aws-samples/aws-cdk-examples
4. https://cdkworkshop.com/
5. https://docs.aws.amazon.com/cdk/api/v2/docs/aws-construct-library.html
6. https://cdkworkshop.com/20-typescript/70-advanced-topics/200-pipelines/2000-create-repo.html
7. https://www.hashicorp.com/blog/cdk-for-terraform-now-generally-available
8. https://developer.hashicorp.com/terraform/tutorials/cdktf
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Visit the AWS Modern Applications Resource Hub
Dive deeper with these resources to help you innovate fast, reduce risk, and accelerate time to market
• Build modern applications on AWS
• Building event-driven architectures on AWS
• Seamless Kubernetes on premises and in the cloud
• Unlock digital transformation by modernizing with containers
• Unleash the power of modern apps with generative AI on AWS
• Accelerate full-stack web and mobile app development on AWS https://tinyurl.com/modern-apps-aws
• Determining the total cost of ownership: Comparing serverless and server-based
technologies
… and more!
Visit resource hub
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Training & Certification
Access 600+ free digital courses with AWS Skill Builder
Focus on the cloud skills and services that are most
relevant to you across 30+ AWS solutions, including
digital self-paced learning plans and ramp-up guides
• Build your future in the AWS Cloud at your own pace
https://skillbuilder.aws/
• Advance your skills and knowledge with learning plans
• Validate your cloud expertise with AWS Certification
BUILD IN-DEMAND CLOUD SKILLS
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Thank you for attending
AWS Builders Online Series
We hope you found it interesting! A kind reminder to complete the survey.
Let us know what you thought of today’s event and how we can improve the event
experience for you in the future.
[email protected]
twitter.com/AWSCloud
facebook.com/AmazonWebServices
youtube.com/user/AmazonWebServices
linkedin.com/company/amazon-web-services
twitch.tv/aws
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Thank you!
Nelli Lovchikova
Solutions Architect Manager
Amazon Web Services
© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved.
