Category: checkov

Amazon S3-SNS-Lambda Event-Driven Architecture with Terraform

~ sourav kundu ~ Leave a comment

When development teams need to process thousands of file uploads daily across multiple applications, traditional polling-based monitoring systems create significant operational overhead and cost inefficiencies. Manual file-processing workflows can't scale to meet modern application demands, leading to delayed processing, wasted resources, and potential data loss during peak loads. Event-driven architecture solves this challenge by automatically … Continue reading Amazon S3-SNS-Lambda Event-Driven Architecture with Terraform

Create Amazon RDS for PostgreSQL DB using Terraform and GitHub Actions

~ sourav kundu ~ Leave a comment

In this note, I discuss creating an Amazon RDS for PostgreSQL DB using Terraform and securely automating the provisioning process using GitHub Actions. By the end of this note, you will learn about the underlying architectural dependencies and specific properties needed to create a secure RDS for PostgreSQL DB using Terraform. Per AWS-Docs, Amazon Relational … Continue reading Create Amazon RDS for PostgreSQL DB using Terraform and GitHub Actions

Create Amazon ElastiCache for Memcached using Terraform and GitHub Actions

~ sourav kundu ~ 2 Comments

Caches store frequently accessed data in memory, which is accessible much faster than disk-based storage or even a database. This capability reduces data retrieval latency and improves the application response times. Amazon ElastiCache for Memcached is a fully managed caching service, which means AWS handles maintenance, patching, backups, and monitoring. In this note, I demonstrate … Continue reading Create Amazon ElastiCache for Memcached using Terraform and GitHub Actions

Automating AWS Infrastructure with CloudFormation and GitHub Actions: A Tutorial

~ sourav kundu ~ 1 Comment

This note aims to demonstrate how to deploy a couple of CloudFormation templates using GitHub Actions to create Amazon cloud resources. There are two tools we're discussing. The first one is AWS CloudFormation, an infrastructure as a code tool to provision AWS cloud resources declaratively. The AWS cloud resources and their relationships are declared in … Continue reading Automating AWS Infrastructure with CloudFormation and GitHub Actions: A Tutorial

Create Amazon EC2 Auto Scaling group and load balancer using Terraform and GitHub Actions

~ sourav kundu ~ 7 Comments

When project teams host an application or service on an Amazon EC2 instance, they have specific questions about the underlying infrastructure. A few of them could be: (a) Can the project team be assured that if some or all existing EC2 instances were terminated or unresponsive, new Amazon EC2 instances (with the application hosted) would … Continue reading Create Amazon EC2 Auto Scaling group and load balancer using Terraform and GitHub Actions

Implement pull request-based workflow using Terraform, Infracost, Checkov, and GitHub Actions

~ sourav kundu ~ 1 Comment

The software development process has continuously evolved over the past several years. The evolution process continued with the wide-scale availability of cloud platforms like AWS and Azure. We realized the practice of infrastructure as code (IAC) when the development practice of coding was merged with the operations practice of creating and managing cloud infrastructure. Then, … Continue reading Implement pull request-based workflow using Terraform, Infracost, Checkov, and GitHub Actions

Create AWS Secrets Manager secret using Terraform secure variables and GitHub Actions secrets

~ sourav kundu ~ 5 Comments

A little while back, I encountered an exciting use case requiring me to use GitHub Actions secrets. The use case was to create an AWS Secrets Manager secret resource using Terraform in a CI/CD pipeline. An AWS Secrets Manager secret is a resource to store secure credentials. In the past, I created an AWS Secrets … Continue reading Create AWS Secrets Manager secret using Terraform secure variables and GitHub Actions secrets

Automate Terraform configuration scan with Checkov and GitHub Actions

~ sourav kundu ~ 9 Comments

Terraform enables developers to create cloud resources via a few lines of code. Hence, these developers must write code that is easy to understand and follows security best practices. Moreover, following best practices becomes a habit if there is a system to keep that in check. Checkov is a proven static analysis tool that checks for standard best practices in your … Continue reading Automate Terraform configuration scan with Checkov and GitHub Actions