Integration & Automation
Category: Security, Identity, & Compliance
Automate IAM credential reports for large AWS Organizations
Learn how to manage credentials with many accounts, automate IAM credential reports, and consolidate the results.
Manage multiaccount and multi-Region infrastructure in Terraform using AWS Cloud9
Learn how to reduce the use of managing secret and access keys and quickly deploy all the resources. Use version control to track all changes and enable better control in a multiaccount infrastructure.
Save time with automated security checks of your Terraform scripts
Learn how to integrate Checkov into CodePipeline with fully automated pre-deployment compliance checks of your Terraform scripts, including built-in notifications. Our solution provides an end-to-end, automated CI/CD pipeline that allows you to stay compliant with AWS best-practices with minimal operational overhead.
Read parameters across AWS Regions with AWS CloudFormation custom resources
Learn to use CloudFormation custom resources in multistack AWS Cloud Development Kit (AWS CDK) applications to read parameters across AWS Regions.
Manage permission sets and account assignments in AWS IAM Identity Center with a CI/CD pipeline
Have you created permission sets and assigned them to AWS Identity and Access Management (IAM) groups in AWS Organizations? Have you used existing corporate identities with AWS IAM Identity Center (successor to AWS Single Sign-On) to grant Active Directory groups access to AWS accounts and applications? Save time and minimize errors by managing permission sets automatically with a continuous integration and continuous deployment (CI/CD) pipeline built with AWS developer tools.
Create a more secure LAMP stack with AWS WAF (web application firewall)
Learn how to create a more secure LAMP stack with AWS WAF, Route 53 domain, and AWS Certificate Manager. This post walks you through automation steps to deploy a highly available LAMP-stack application with a web application firewall.
Disaster recovery: 3 failover scenarios for your Amazon Aurora global database with Terraform (Part 2)
Simulate recovering an Amazon Aurora global database after a disaster. Walk through three failover scenarios, observe their effect on Terraform state, and learn how to maintain the global database topology and configuration using Terraform.
Collect custom metrics with Amazon CloudWatch strategic tagging
Learn how to use an Amazon CloudWatch agent to automate the collection of custom metrics for two Amazon EC2 instances. The solution is based on a tagging strategy combined with AWS Systems Manager State Manager to enforce specific CloudWatch agent configurations for EC2 instances that are tagged appropriately.
Prepare for faster disaster recovery: Deploy an Amazon Aurora global database with Terraform (Part 1)
Learn how to automate the deployment and management of an Amazon Aurora global database—across multiple AWS Regions—with Terraform. This architecture can provide disaster recovery from Region-wide outages with low recovery time objective (RTO) and recovery point objective (RPO).
Automate VPC tagging with AWS Control Tower lifecycle events
Automatically tag resources in an AWS account created by AWS Control Tower.