AWS Cloud Operations Blog
How to update AWS Service Catalog provisioned products to new product versions and report changes using AWS Step Functions, AWS Lambda, and Amazon Athena
AWS Service Catalog enables organizations to centrally manage commonly-deployed AWS services and provisioned software products. It also helps you achieve consistent governance and compliance requirements, while it empowers users to self-serve and quickly deploy the approved AWS services they need. Customers that I talk to want to have a mechanism to keep previously provisioned products […]
Your AWS CloudFormation guide to re:Invent 2018
There are less than two weeks left until re:Invent 2018. As in years past, AWS CloudFormation will be there, both behind the scenes deploying infrastructure and front-and-center for break-out sessions, workshops, and chalk talks. Here are a few highlights we’ve pulled from the session catalog, followed by the full list of CloudFormation-focused sessions and workshops to help […]
Create an approval workflow for AWS Service Catalog in ServiceNow
The AWS Service Catalog connector for ServiceNow allows AWS enterprise customers to securely provision compliant workloads using ServiceNow on AWS. A lot of customers ask me how to create an approval workflow in ServiceNow for deploying AWS products. For example, such a workflow might be needed if a data scientist wants to launch an Amazon EMR […]
Monitor tag changes on AWS resources with serverless workflows and Amazon CloudWatch Events
Introduction Amazon CloudWatch Events now supports tag changes on AWS resources. Using this new CloudWatch Event type, you can build CloudWatch event rules to match tag changes and route them to one or more targets like an AWS Lambda function to trigger automated workflows. In this blog post, I’ll provide an example for using AWS […]
Building a portfolio of self-service databases with AWS Service Catalog and AWS CloudFormation
Modern distributed applications are moving towards a “purpose-built” database strategy. This means that the selection of database type, size, and configuration should match the problem the database is trying to solve. AWS customers are also requiring that these databases have the appropriate level of security control and organizational governance to operate in customer environments. AWS […]
Resolving circular dependency in provisioning of Amazon S3 buckets with AWS Lambda event notifications
Overview AWS CloudFormation provides a common language for you to describe and provision all of the infrastructure resources in your cloud environment. CloudFormation allows you to use a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all AWS Regions and accounts. It […]
Applying customizations automatically in AWS OpsWorks for Chef Automate
During mandatory maintenance, AWS OpsWorks for Chef Automate performs Chef Server and Chef Automate version, security, and operating system patching. Version updates for Chef go through extensive testing to verify they are production ready and don’t disrupt existing environments. When an instance is replaced, customers often ask how they can restore their custom settings in […]
How to setup and use AWS OpsWorks for Chef Automate or Puppet Enterprise in an isolated subnet
Introduction For enhanced security, it’s often preferable to place resources in AWS within a subnet with no internet access. Recently, AWS expanded the number of services supported by interface VPC endpoints within the AWS ecosystem, so it’s now easier than ever to run AWS OpsWorks for Chef Automate or AWS OpsWorks for Puppet Enterprise within […]
Using AWS Systems Manager Parameter Store Secure String parameters in AWS CloudFormation templates
When using AWS CloudFormation templates to code your infrastructure, you should consider applying best practices to improve the maintainability of your code. Further, these best practices should be augmented by guidelines like those outlined for twelve-factor apps, which are targeted at optimizing applications for continuous deployment. Of these factors, you should note that you should […]
How to automate Puppet manifest testing and delivery in AWS OpsWorks for Puppet Enterprise
Organizations that use AWS OpsWorks Puppet Enterprise can use AWS services that manage, test, and deploy code to create a continuous integration and continuous deployment (CI/CD) infrastructure. In this blog post, we will show how you can use AWS CloudFormation, Amazon S3, AWS CodeCommit, AWS CodeBuild, AWS Systems Manager, and AWS CodePipeline to set up […]