Category: AWS

Push Docker images to Amazon ECR using YAML based Azure Pipelines

~ sourav kundu ~ Leave a comment

When it comes to identifying a process to deliver continuous value to customers, CI-CD is the defacto standard. And container technology enables that by encapsulating an application and its dependencies into a package that can be hosted and scaled independently of other applications. So DevOps engineers and application developers merged these ideas to forge a … Continue reading Push Docker images to Amazon ECR using YAML based Azure Pipelines

Download AWS S3 bucket into an EC2 instance in 5 steps using user data and Terraform

~ sourav kundu ~ 2 Comments

I required a few files and folders on an EC2 instance as part of the provisioning process. So, the objective was to upload these files and folders into an AWS S3 bucket and download them from the EC2 instance with the assistance of the user data script and Terraform. Note: As a reader of this … Continue reading Download AWS S3 bucket into an EC2 instance in 5 steps using user data and Terraform

Install AWS CLI on a Windows EC2 instance using Terraform and user data

~ sourav kundu ~ 2 Comments

In the last post, I discussed the steps involved in installing AWS.Tools module for PowerShell on AWS EC2 using user data and Terraform. This post lists the steps to install the AWS CLI on an AWS Windows EC2 instance. I used EC2 user data and Terraform to automate AWS CLI installation as part of the … Continue reading Install AWS CLI on a Windows EC2 instance using Terraform and user data

Install AWS.Tools module for PowerShell on AWS EC2 using user data and Terraform

~ sourav kundu ~ 2 Comments

I was under the impression that all AWS EC2 instances have the latest version of AWS CLI installed. So, I was in for a pretty shock when I discovered that is not always the case. However, I was required to use the AWS CLI, and since this was an EC2 with Windows OS, I proceeded … Continue reading Install AWS.Tools module for PowerShell on AWS EC2 using user data and Terraform

Manage sensitive variables in AWS EC2 user data with Terraform

~ sourav kundu ~ 2 Comments

If you have worked with EC2 user data, you'd have noticed a shortcoming in the approach  -the inability to pass command-line arguments to the user data script at run time. Let me explain why I believe that to be a problem. User data is a capability associated with an AWS EC2 instance as part of … Continue reading Manage sensitive variables in AWS EC2 user data with Terraform

Attach IAM role to AWS EC2 instance using Terraform

~ sourav kundu ~ 4 Comments

I have a fair level of understanding about the relationship between AWS IAM policy, role, user, and group. I have also implemented the concept of assumed-role and the trusted and trusting account association. You can read more about that at -Creating IAM assume-role relationship between two AWS accounts. So, when I heard of EC2s being … Continue reading Attach IAM role to AWS EC2 instance using Terraform

Working with AWS EC2 user data and Terraform

~ sourav kundu ~ 4 Comments

User data is a feature that allows customization of AWS EC2 (virtual machine) when it is created and (if desired) also with each restart after they are provisioned.As we all know, AWS EC2 (virtual machines) is the legacy approach to hosting applications in the world of containers. Last year I attended a webinar sponsored by … Continue reading Working with AWS EC2 user data and Terraform

Strengthen security posture with Terraform and AWS IAM to manage AWS cloud resources

Is Terraform using an AWS IAM administrator user credential to manage AWS resources?
~ sourav kundu ~ Leave a comment

Terraform uses AWS IAM user credentials to manage resources in the AWS cloud. It does so by utilizing the secret key and access key of the IAM user. Hence, Terraform's ability to manage (create/update/delete) resources depend on the permission associated with the AWS IAM user. When I started working with Terraform to manage resources in … Continue reading Strengthen security posture with Terraform and AWS IAM to manage AWS cloud resources