Optimizing AWS workflows with the CDK for Terraform

Slide 1

Slide 1 text

© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. Optimizing AWS workflows with the CDK for Terraform S P O N S O R E D B Y H A S H I C O R P Kyle Ruddy (he/him) C O P 4 0 2 - S Senior Technical Product Marketing Manager HashiCorp Taylor Dolezal (he/him) Senior Developer Advocate HashiCorp

Slide 2

Slide 2 text

Slide 3

Slide 3 text

Slide 4

Slide 4 text

Slide 5

Slide 5 text

Slide 6

Slide 6 text

Slide 7

Slide 7 text

© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. Terraform state compatibility • Terraform 0.15 is forward-compatible with state files to 1.0 • Backward-compatible to >0.14.0 0.14 0.15 1.0

Slide 8

Slide 8 text

Slide 9

Slide 9 text

© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. Sensitive function Introduction of a new set of sensitive/non-sensitive functions to help organizations build on Terraform’s sensitivity resource “aws_db_instance” “mydb” { password = sensitive(data.resource.name.id) ... }

Slide 10

Slide 10 text

Slide 11

Slide 11 text

© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. Terraform Cloud F U L L Y - M A N A G E D I N F R A S T R U C T U R E A S C O D E C L O U D S E R V I C E Developers Plan Cost Estimation PRIVATE MODULE REGISTRY Operations Apply Sentinel Policy Run Tasks

Slide 12

Slide 12 text

Slide 13

Slide 13 text

Slide 14

Slide 14 text

Slide 15

Slide 15 text

Slide 16

Slide 16 text

Slide 17

Slide 17 text

Slide 18

Slide 18 text

Slide 19

Slide 19 text

Slide 20

Slide 20 text

Slide 21

Slide 21 text

Slide 22

Slide 22 text

Slide 23

Slide 23 text

© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. CDK for Terraform The CDK for Terraform is a project that allows users to define infrastructure using programming languages CDK for (CRDS) HCL JSON

Slide 24

Slide 24 text

Slide 25

Slide 25 text

© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. CDK for Terraform Packages • cdktf-cli – A CLI that allows users to run commands to initialize, import, and synthesize CDK for Terraform applications • cdktf – A library for defining Terraform resources using programming constructs

Slide 26

Slide 26 text

Slide 27

Slide 27 text

Slide 28

Slide 28 text

Slide 29

Slide 29 text

Slide 30

Slide 30 text

© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. Providers and resources import { Construct } from "constructs"; import { App, TerraformStack } from "cdktf"; import { AwsProvider } from "./.gen/providers/aws"; ... new AwsProvider(this, "aws", { region: "us-west-2", });

Slide 31

Slide 31 text

© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. Stacks class MyStack extends TerraformStack { constructor(scope: Construct, id: string) { super(scope, id); // Your Infrastructure Here } } const app = new App(); new MyStack(app, "a-single-stack"); app.synth();

Slide 32

Slide 32 text

© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. Functions import { Fn, TerraformOutput } from "cdktf"; import { DataAwsAvailabilityZones } from "@cdktf/provider-aws"; const zones = new DataAwsAvailabilityZones(this, "zones", { state: "available", }); new TerraformOutput(this, "first-zone", { value: Fn.element(zones.names, 0), });

Slide 33

Slide 33 text

© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. Tokens const vpc = new Vpc(this, vpcName, { name: vpcName, publicSubnets: ["10.0.1.0/24", "10.0.2.0/24"], }); new Eks(this, "EksModule", { clusterName: "my-kubernetes-cluster", subnets: Token.asList(vpc.publicSubnetsOutput), clusterLogRetentionInDays: logRetention.numberValue, });

Slide 34

Slide 34 text

© 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. Thank you! © 2021, Amazon Web Services, Inc. or its affiliates. All rights reserved. Kyle Ruddy (he/him) @kmruddy [email protected] Taylor Dolezal (he/him) @onlydole [email protected]