Implementing DevOps on AWS电子书

Implementing DevOps on AWS

Implementing DevOps on AWS

Credits

About the Author

About the Reviewer

www.PacktPub.com

Why subscribe?

Customer Feedback

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Downloading the example code

Downloading the color images of this book

Errata

Piracy

Questions

1. What is DevOps and Should You Care?

What is DevOps?

A common goal

Shared knowledge (no silos)

Trust and shared responsibility

Respect

Automation

Reproducible infrastructure

Metrics and monitoring

Continuous Integration, Delivery, and Deployment

Embracing failure

Should you care

Is this the right time?

Will it work?

Is it worth it?

Do you need it?

Summary

2. Start Treating Your Infrastructure as Code

IaC using Terraform

Configuration

Template design

Resources

Variables

Outputs

Operations

Validation

Dry-run

Deployment

Updates

Removal

IaC using CloudFormation

Configuration

Template design

Parameters

Resources

Outputs

Operations

Template validation

Deploying a Stack

Updating a stack

Deleting a stack

Summary

3. Bringing Your Infrastructure Under Configuration Management

Introduction to SaltStack

Preparation

Writing Configuration Management code

States

Pillars

Grains

Top files

Bootstrapping nodes under Configuration Management (end-to-end IaC)

Summary

4. Build, Test, and Release Faster with Continuous Integration

Prepare IaC

Terraform templates

Variables

Variables (values)

Resources

Create the VPC

Add networking components

Add EC2 node and related resources

Outputs

SaltStack code

States

Pillars

Minion configuration

Deploy IaC

Setup CI

Jenkins initialization

Writing a demo app

Defining the pipeline

Setting up the pipeline

Summary

5. Ever-Ready to Deploy Using Continuous Delivery

Preparing Terraform templates

Resources

Variables

Variables (values)

Outputs

Prepareing Salt code

States

top.sls

jenkins

nginx

Pillars

Minion configuration

Preparing Jenkins code

Packer

demo-app.json

demo-app_vars.json

demo-app_userdata.sh

Serverspec

spec/localhost/demo-app_spec.rb

demo-app

demo-app-cdelivery

Preparing CodeCommit repositories

Deploy Terraform templates

Initializing Jenkins

Configuring Jenkins jobs

demo-app pipeline

demo-app-cdelivery pipeline

Summary

6. Continuous Deployment - A Fully Automated Workflow

Terraform code (resources.tf)

outputs.tf

Deployment

Jenkins pipelines

Continuous Deployment pipeline

cdeployment.sh

Summary

7. Metrics, Log Collection, and Monitoring

Centralized logging

Ingesting and storing logs with Logstash and Elasticsearch

Collecting logs with Elasticsearch Filebeat

Visualizing logs with Kibana

Metrics

Ingesting and storing metrics with Prometheus

Gathering OS and application metrics with Telegraf

Visualizing metrics with Grafana

Monitoring

Alerting with Prometheus

Self-remediation with Prometheus and Jenkins

Summary

8. Optimize for Scale and Cost

Architectural considerations

The VPC

CIDR

Subnets and Availability Zones

VPC limits

The frontend layer

The backend layer

The object storage layer

The load balancing layer

Cross-zone load balancing

ELB pre-warming

The CDN layer

Spot instances

AWS Calculators

Summary

9. Secure Your AWS Environment

Managing access using IAM

Securing the root account

VPC security

Security Groups

Network ACLs

VPN gateway

VPC peering

EC2 security

IAM Roles

SSH access

Individual keys

Entrypoint

ELBs everywhere

HTTPS by default

Encrypted storage

EBS volumes

S3 objects

OS updates

Security auditing

VPC Flow Logs

CloudTrail

Trusted Advisor

AWS Config

Self pen testing

Summary

10. AWS Tips and Tricks

Using VPCs

Keep the Main route table as a fallback

Staying within the VPC

Creating IAM roles in advance

Groups over users

Knowing the AWS service limits

Pre-warm ELBs if needed

Using termination protection

Tagging what you can

Deploying across multiple zones

Enhancing your ELB health-checks

Offloading SSL onto the ELB

EIP versus public IP

Mind the full-hour billing

Using Route53 ALIAS records

The S3 bucket namespace is global

- versus . in the S3 bucket name

Randomizing S3 filenames

Initializing (pre-warm) EBS volumes

Summary