JAWSPANKRATION2024-LuthfiAnandra

Slide deck for my session "CI/CD Pipeline for Terraform Workflow Using Amazon CodeCatalyst" in JAWSPANKRATION 2024. Session reference: https://jawspankration2024.jaws-ug.jp/en/timetable/TT-04/

Transcript

1. How to run CI/CD pipeline for Terraform workflow using Amazon CodeCatalyst Luthfi Anandra Site Reliability Engineer @ AccelByte AWS Community Builder HashiCorp Ambassador
2. The core Terraform workflow 2 Write Plan Apply User Author infrastructure as code Preview changes before applying Provision reproducible infrastructure Source: https://developer.hashicorp.com/terraform /intro/core-workflow
3. Why we need CI/CD for Terraform workflow As organization or team is scaled, we need to integrate Terraform workflow 3 Write Plan Apply Users Each user can write locally Run on CI/CD • Single source of truth • Prevent race condition • Collaboration
4. What can we use as CI/CD tool for Terraform workflow “Amazon CodeCatalyst is an integrated service for software development teams adopting continuous integration and deployment practices into their software development process. CodeCatalyst puts the tools you need all in one place. You can plan work, collaborate on code, and build, test, and deploy applications with continuous integration/continuous delivery (CI/CD) tools. “ 4 Source: https://docs.aws.amazon.com/codecatalys t/latest/userguide/welcome.html
5. Run Terraform plan and apply workflow in CodeCatalyst 5 Users Write Plan Apply What we need ? Workflow definition file
6. Workflow definition file 6 Reference: https://docs.aws.amazon.com/codecatalys t/latest/userguide/workflow-reference.html
7. Demo 7
8. Demo scenario and resources 8
9. Demo resource 9 Example repository: https://github.com/lanandra/terraform -workflow-codecatalyst
10. Takeaways • Amazon CodeCatalyst can act as alternative for CI/CD engine/tools that can be used to run Terraform workflow • Amazon CodeCatalyst use IAM role to interact with AWS services. By using this method, Terraform doesn’t need to inject static credentials such as AWS Access Key and AWS Secret Key into the pipeline. This can’t help prevent security breaches • Amazon CodeCatalyst can give seamless experience if We want to deploy application to AWS environments 10
11. Thank you! 11 Luthfi Anandra linkedin.com/in/luthfi-anandra