<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>CloudFormation on Teddy Ferdinand</title><link>https://tferdinand.net/en/tags/cloudformation/</link><description>Recent content in CloudFormation on Teddy Ferdinand</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Fri, 30 Oct 2020 15:34:38 +0000</lastBuildDate><atom:link href="https://tferdinand.net/en/tags/cloudformation/index.xml" rel="self" type="application/rss+xml"/><item><title>AWS IAM: Between dream and nightmare</title><link>https://tferdinand.net/en/aws-iam-between-dream-and-nightmare/</link><pubDate>Sun, 16 Aug 2020 04:51:07 +0000</pubDate><guid>https://tferdinand.net/en/aws-iam-between-dream-and-nightmare/</guid><description>&lt;p&gt;I have been using AWS professionally for over 4 years now.&lt;/p&gt;
&lt;p&gt;To be a bit old-fashioned, when I started on AWS, the following services and features did not exist:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;The ALB/NLB&lt;/li&gt;
&lt;li&gt;ACM&lt;/li&gt;
&lt;li&gt;ElasticSearch Service&lt;/li&gt;
&lt;li&gt;Lambda inside a VPC or with the duration of more than 5 minutes&lt;/li&gt;
&lt;li&gt;ECS/EKS/ECR&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;During these 4 years, I had the opportunity to do a lot of IAM, essential to deploy secure solutions on Amazon.&lt;/p&gt;
&lt;h2 id="iam-and-least-privilege"&gt;IAM and least privilege&lt;/h2&gt;
&lt;p&gt;Identity and Access Management (IAM) is the AWS service that defines users or roles and their associated permissions.&lt;/p&gt;</description></item><item><title>Terraform VS CloudFormation: Which tool to deploy on AWS?</title><link>https://tferdinand.net/en/terraform-vs-cloudformation-which-tool-to-deploy-on-aws/</link><pubDate>Fri, 13 Dec 2019 11:00:00 +0000</pubDate><guid>https://tferdinand.net/en/terraform-vs-cloudformation-which-tool-to-deploy-on-aws/</guid><description>&lt;p&gt;Terraform or CloudFormation, the two tools are often pitted against each other, asking DevOps to decide and choose one tool or the other. However, from my point of view, these two tools do not necessarily address the same needs.&lt;/p&gt;
&lt;h2 id="asking-the-question-of-ones-exact-need"&gt;Asking the question of one&amp;rsquo;s exact need&lt;/h2&gt;
&lt;p&gt;Before knowing which tool to go to, it is important to know the exact need to be addressed:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Do I want to deploy only on AWS?&lt;/li&gt;
&lt;li&gt;Do I need to interface with existing tools (especially CI/CD)?&lt;/li&gt;
&lt;li&gt;Do I want to host the deployment solution myself or depend on a managed service?&lt;/li&gt;
&lt;li&gt;Do I already use other tools from the HashiCorp ecosystem (Nomad, Packer, Consul or Vault for example)?&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Indeed, with these questions you can already target the tool you want to use more easily.&lt;/p&gt;</description></item><item><title>Migrate your infrastructure to AWS in an optimal way</title><link>https://tferdinand.net/en/migrate-your-infrastructure-to-aws-in-an-optimal-way/</link><pubDate>Fri, 12 Apr 2019 12:39:56 +0000</pubDate><guid>https://tferdinand.net/en/migrate-your-infrastructure-to-aws-in-an-optimal-way/</guid><description>&lt;p&gt;The Cloud appears to be an Eldorado for many companies: simpler application deployment, cost reduction, use of innovative technologies, so many advantages that Amazon promises to its potential customers, but is it that simple?&lt;/p&gt;
&lt;p&gt;AWS, and the cloud more generally, can be an excellent lever on the points mentioned above, however it is quite easy to lose feathers. In this article, I will list what, for me, seems to be the mistakes to avoid.&lt;/p&gt;</description></item></channel></rss>