The idea of ‘Everything as Code’ (EaC) is emerging across each layer of the stack

writing infrastructure as software, where everything is expressed with code 


Infrastructure as a code - Terraform


Environment as Code - docker / Vagrant


Configuration as Code Ansible /Puppet/Chef


Date Pipelines as Code - Apache Airflow


Security Configuration as Code - Checkov


Encryption Management as Code - AWS KMS / Hashi Vault

Comments

Post a Comment

Popular posts from this blog

Polkadot programming - development using node template

  Polkadot - Substrate development Step by Step Following commands will work on macOS... Good luck This steps are for starting single node at backend and starting front end to explore ( e.g. transfer fund from one account to another) ----start---- Install Homebrew /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install.sh)" Install opensssl brew update && brew install openssl Install Rust and RustToolchain curl https://sh.rustup.rs -sSf | sh source ~/.cargo/env rustup default stable rustup update rustup update nightly rustup target add wasm32-unknown-unknown --toolchain nightly verify installation by  rustc --version rustup show Prepare a Substrate node using the node template Setup node template. Its a  provides a working development environment so that you can start building on Substrate right away. git clone https://github.com/substrate-developer-hub/substrate-node-template cd substrate-node-template # We want to us...
Read more

AWS Rout53 NS records do not match with whois dns records OR Your site NOT working with registered domain name? Check this...

  Log in to your AWS web console Select Route53 service Select Hosted Zones in the left pane Select domain name (but do not click on the domain name, just select the radio button) Notice the 4 name servers in the right pane. Next, go to domain registrar site (in your case stay in Route53), log in and configure name servers for your domain. In Route53: select 'Registered domains' in the left pane, click on your domain name, verify that in the upper right you have name servers from step 5, if they don't exactly match, click 'Add/Edit Name servers' and enter name servers from step 5) After this you will receive email on your registered email id with AWS. Once the sync os done you will get notified. After notification you can try your ULR <some-name>.com or www.<some-name>.com "A" records created during route 53
Read more

Cloud Architecture Notes

Image
The architectural priorities and needs of every app are different, but the four pillars of architecture are an excellent guidepost you can use to make sure that you have given enough attention to every aspect of your application: Security : Safeguarding access and data integrity and meeting regulatory requirements Performance and scalability : Efficiently meeting demand in every scenario Availability and recoverability : Minimizing downtime and avoiding permanent data loss Efficiency and operations : Maximizing maintainability and ensuring requirements are met with monitoring A layered approach to security Defense in depth is a strategy that employs a series of mechanisms to slow the advance of an attack aimed at acquiring unauthorized access to information The common principles used to define a security posture are confidentiality, integrity, and availability, known collectively as CIA. Confidentiality - Principle of least privilege. Restricts access to informa...
Read more