AWS Automation using Terraform

What is Terraform?

HashiCorp Terraform is an open-source infrastructure as code (IaC) software tool that allows DevOps engineers to programmatically provision the physical resources an application requires to run. Infrastructure as code is an IT practice that manages an application's underlying IT infrastructure through programming.

What is AWS Automation?

Automation, a capability of AWS Systems Manager, simplifies common maintenance and deployment tasks of Amazon Elastic Compute Cloud (Amazon EC2) instances and other AWS resources. ... Build automations to configure and manage instances and AWS resources.

Here is a full tutorial video (Concept + Demo) based on "How we can do AWS Automation using Terraform"👇👇

Resource: aws_launch_configuration

Provides a resource to create a new launch configuration, used for autoscaling groups.

Example Usage

data "aws_ami" "ubuntu" {
  most_recent = true

  filter {
    name   = "name"
    values = ["ubuntu/images/hvm-ssd/ubuntu-trusty-14.04-amd64-server-*"]
  }

  filter {
    name   = "virtualization-type"
    values = ["hvm"]
  }

  owners = ["099720109477"] # Canonical
}

resource "aws_launch_configuration" "as_conf" {
  name          = "web_config"
  image_id      = data.aws_ami.ubuntu.id
  instance_type = "t2.micro"
}

Using with AutoScaling Groups

Launch Configurations cannot be updated after creation with the Amazon Web Service API. In order to update a Launch Configuration, Terraform will destroy the existing resource and create a replacement. In order to effectively use a Launch Configuration resource with an AutoScaling Group resource, it's recommended to specify create_before_destroy in a lifecycle block. Either omit the Launch Configuration name attribute, or specify a partial name with name_prefix. Example:

data "aws_ami" "ubuntu" {
  most_recent = true

  filter {
    name   = "name"
    values = ["ubuntu/images/hvm-ssd/ubuntu-trusty-14.04-amd64-server-*"]
  }

  filter {
    name   = "virtualization-type"
    values = ["hvm"]
  }

  owners = ["099720109477"] # Canonical
}

resource "aws_launch_configuration" "as_conf" {
  name_prefix   = "terraform-lc-example-"
  image_id      = data.aws_ami.ubuntu.id
  instance_type = "t2.micro"

  lifecycle {
    create_before_destroy = true
  }
}

resource "aws_autoscaling_group" "bar" {
  name                 = "terraform-asg-example"
  launch_configuration = aws_launch_configuration.as_conf.name
  min_size             = 1
  max_size             = 2

  lifecycle {
    create_before_destroy = true
  }
}

With this setup Terraform generates a unique name for your Launch Configuration and can then update the AutoScaling Group without conflict before destroying the previous Launch Configuration.

How to Enable AWS Security Hub?

What is a security Hub?

AWS Security Hub provides you with a comprehensive view of your security state in AWS and helps you check your environment against security industry standards and best practices.

Security Hub collects security data from across AWS accounts, services, and supported third-party partner products and helps you analyze your security trends and identify the highest priority security issues.

Here is a Demonstration video on AWS Security Hub👇👇

Benefits of AWS Security Hub

• Reduced effort to collect and prioritize findings
• Automatic security checks against best practices and standards
• Consolidated view of findings across accounts and providers
• Ability to automate remediation of findings

Enable AWS Security Hub

• Once you have logged into your AWS account and enabled AWS Config, we need to enable Security Hub. Navigate to the AWS Security Hub console. Alternatively, you can just search for Security Hub and select the service.
• In the AWS Security Hub service console you can click on the Go to Security Hub orange button to navigate to AWS Security Hub in your account.
• Additional information is provided regarding Security standards and AWS Integrations. You can read more here. Now select Enable Security Hub.
• With AWS Security Hub now enabled in your account, you can explore the security insights AWS Security Hub offers.
• 
  

AWS new service AWS Private 5G

Amazon Web Services (AWS) announced the availability of a private 5G service for enterprises named AWS Private 5G.

Here is a fully dedicated video based on AWS Private 5G service👇👇

ABOUT AWS

Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 200 fully-featured services from data centers globally. Millions of customers — including the fastest-growing startups, largest enterprises, and leading government agencies — are using AWS to lower costs, become more agile, and innovate faster.

What is a Private Network?

A Private Mobile Network features network infrastructure which is used exclusively by devices authorized by the end user organisation. Typically, this is deployed in one or more specific locations which are owned or occupied by the end user organisation to deliver targeted coverage, capacity and other capabilities. Devices which are registered on public mobile networks will not work on the private network except where specifically authorised.

Benefits of Private networks?

• Offering enterprises a greater level of control over deployment, security, equipment and device choices

• Enabling highly targeted indoor/outdoor coverage

• High and reserved capacity

• Providing independence from public network

What are the benefits of AWS Private 5G?

This is a new managed service that helps enterprises set up and scale private 5G mobile networks in their facilities in days instead of months. With just a few clicks in the AWS console, customers specify where they want to build a mobile network and the network capacity needed for their devices. AWS then delivers and maintains the small cell radio units, servers, 5G core, and radio access network (RAN) software, and subscriber identity modules (SIM cards) required to set up a private 5G network and connect devices. AWS Private 5G automates the setup and deployment of the network and scales capacity on-demand to support additional devices and increase network traffic. There are no upfront fees or per-device costs with AWS Private 5G, and customers pay only for the network capacity and throughput they request.

Many enterprise networks are constrained by increasing growth in users, devices, and application demands. Increased video content, new applications that require ultra-low latency connectivity to end-user devices, and thousands of smart IoT devices demand extended coverage, more capacity, better reliability, and robust security and access control. Customers want to build their own private 5G networks to address these limitations, but private mobile network deployments require customers to invest considerable time, money, and effort to design their network for anticipated peak capacity, and procure and integrate software and hardware components from multiple vendors. Even if customers are able to get the network running, current private mobile network pricing models charge for each connected device and make it cost-prohibitive for use cases that involve thousands of connected devices. AWS Private 5G simplifies the procurement and deployment allowing customers to deploy their own 4G/LTE or 5G network within days instead of months, scale up and down the number of connected devices rapidly, and benefit from a familiar on-demand cloud pricing model.

AWS Private 5G is available in preview in the United States. To request access, visit the sign-up page here.

How to Create and Restore RDS Snapshot in specific time ?

What is Amazon RDS?

Amazon Relational Database Service (Amazon RDS) makes it easy to set up, operate, and scale a relational database in the cloud. It provides cost-efficient and resizable capacity while automating time-consuming administration tasks such as hardware provisioning, database setup, patching, and backups. It frees you to focus on your applications so you can give them the fast performance, high availability, security and compatibility they need.