Terraform Building Blocks and Best Practices

A Comprehensive Guide Understanding Terraform’s basic building blocks is crucial for effective infrastructure management. This guide covers essential components and best practices for structuring your Terraform code. Core Building Blocks Provider Configuration Providers are your gateway to various cloud platforms. Here’s how to configure one: Variables Variables make your configurations Read more…

Understanding Terraform

The Infrastructure as Code Tool Terraform has revolutionized how we manage cloud infrastructure. This powerful tool, created by HashiCorp, enables developers and operations teams to define infrastructure using code rather than clicking through cloud provider interfaces. Let’s dive into what makes Terraform essential for modern DevOps practices. What is Terraform? Read more…

Understanding AWS Control Tower

Simplified Multi-Account Management AWS Control Tower provides a streamlined way to set up and govern a secure, multi-account AWS environment. This service automates the setup of baseline environments using AWS best practices, making it easier for enterprises to ensure compliance while maintaining agility. Core Benefits AWS Control Tower delivers three Read more…

AWS: RDS Multi-AZ, Multi-Region and Read Replicas

Multi-AZ Deployments The main purpose is high availability – failover It happens automatically in the background It can be enabled on the database creation or after Synchronous replication (except for Aurora — asynchronous) Always span at least two Availability Zones within a single region Benefits include Enhanced durability Increased availability Read more…

AWS: Amazon Athena

Amazon Athena Overview Amazon Athena is an interactive query service (serverless) that allows analyzing data in Amazon S3 using SQL Athena used Data Catalogue that stores the S3 DDL Athena is based on Presto – an open-source, distributed SQL query engine optimized for low latency and ad-hoc data analysis with Read more…

AWS: VPC Endpoints

Overview VPC Endpoint enables a private connection between VPC and AWS supported services (including S3, Athena, DynamoDB, ECS) and AWS Marketplace services (AWS PrivateLink-powered SaaS) Unlike VPC Endpoint – NAT Gateway uses the Internet Gateway and thus the public internet, impacting solution performance and cost VPC Endpoint VPC Endpoint enables Read more…

AWS: EC2 Roles and Instance Profiles

Overview An IAM Role is an IAM entity that defines a set of permissions for making AWS service requests. IAM roles are not associated with a specific user or group. Instead, trusted entities assume roles, such as IAM users, applications, or AWS services such as EC2. (what can I do?) An instance profile represents EC2 instances (who am I?). Instance profiles provide temporary credentials that are rotated Read more…

AWS Certified Solutions Architect – Associate (SAA-C02) – Databases

AWS Supported Database Types Hosted Services Relational (OLTP) Multiple database engine providers e.g. Amazon Aurora, SQL Server, Oracle Non-Relational (NoSQL) Amazon DynamoDB Data Warehouse (OLAP) Amazon Redshift Customer Installed “Bring Your Own License” (BYOL) Self-install/ configuration on EC2s Hosted Services AWS Relational Database Services (RDS) Amazon Aurora MySQL Amazon Aurora PostgreSQL Oracle Read more…

AWS Certified Solutions Architect – Associate (SAA-C02) – Application & Deployment Services

Overview Application and deployment services allow you to implement logic and code in the cloud Some services provide code execution, and others offer data analytics Selecting the appropriate service is essential and requires an understanding of its capabilities Lambda Service AWS compute service that runs code without servers Runs code Read more…