With IAM identity-based policies, you can specify allowed or denied actions. For some actions, you can specify the resources and conditions under which actions are allowed or denied. Amazon VPC supports specific actions, resources, and condition keys. Administrators can use AWS JSON policies to specify who has access to what. That is, which principal can perform actions on what resources, […]
In the previous study note, we focused mainly on how AWS is organized from the infrastructure side and how you can organize your account(s) with users, groups, roles, and permissions. Now it’s time to dive into the Networking and Security network elements that AWS made available to isolate and connect IaaS infrastructure with managed services. […]
Let’s continue with my study notes giving a brief look at how the Amazon Web Service is built and how it organizes tenant, services, permissions, etc. Global infrastructure organization Amazon Web Service is a multisite, multi-datacenter Public Cloud Provider spread across the world. At the root of the service, there are the regions and edge […]
It’s time for our appointment with news and highlights coming from Cloud Space. Some important announcements are coming from VMworld 2020 about App modernization, Networking, and Security. HashiCorp announces two important projects called Waypoint and Boundary near the availability of Consul and Vault in the HashiCorp Cloud Platform. From Kubernetes space, RancherLabs announces the availability […]
Here starts a series of posts focused on AWS Solution Architect Certifications (Associate and Professional). This is an important change of path of my knowledge to cover the “new side” of the IT: The cloud. In the past, I was focusing mainly on the private cloud and sometimes I was involved in some hybrid-cloud projects. […]
Some important news and ideas come from HPE Discover 2020. The virtual edition of this event has concluded with important improvements and news about Greenlake, Cloud Backup Service, PointNext services, etc… but from my point of view, the most important feature in Cloud-Native Application space is the launch of Ezmeral. Let’s see in-depth The As-a-service […]
In my previous posts, I already showed how with a simple vanilla template and cloud-init template it’s possible to create a fully customized workload without “manual” interventions respecting the declarative methods where possible and in the same time injecting scripts able to prepare the virtual machine for the real purpose of the workload. In this […]
As seen in my previous post, the “for-each” statement can be used by Terraform main and data to cycle on VM properties and properly fill the cloud-init templates transforming a single static declarative file, into a dynamic template that could be reused in a lot of cases. During the Terraform execution probably you’ll see that […]
I already write here about the ability to use Cloud-init in conjunction with Terraform to build an efficient and infrastructure-as-code system to cover infrastructure and configuration setup using the same deploy engine. Now. it’s time to take a step forward, showing how to use a for-each statement with Terraform to deploy different virtual machines using […]
Cloud-init is an interesting industry solution for the distribution of computational resources across the major cloud providers (private included). Starting from an empty template, it’s possible to attach and apply every OS configuration, without manual intervention. In this way, IP addresses, users, packages and etc, are applied without user interaction. IMHO this is a key […]
Utilizzando il sito, accetti l'utilizzo dei cookie da parte nostra. Using this site you accept cooking utilization. maggiori informazioni more Informations
Questo sito utilizza i cookie per fornire la migliore esperienza di navigazione possibile. Continuando a utilizzare questo sito senza modificare le impostazioni dei cookie o cliccando su "Accetta" permetti il loro utilizzo. This site uses cookies to provide the best browsing experience possible. By continuing to use this website without changing your cookie settings or clicking "Accept" allow their use.