Talk on how to set up your first AWS multi-account environment, with focus on the components that make up a Amazon VPC. Also a quick look at Amazon EC2 and how to use Terraform to use AWS CLI profiles to access the different accounts.

1. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Setting up your first environment and
adding automation
Cobus Bernard
AWS SENIORTECHNICAL EVANGELIST
@cobusbernard
cobusbernard
cobusbernard

2. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
• VPC Overview
• EC2 Overview
• Multi-account setup
• Automate!

3. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Introduction
• Benefits of multiple accounts
• Security – role switching
• Naming convention
• Infrastructure as Code – infrastructure parity
• Single credential set
• Isolation

4. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

5. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

6. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

7. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

8. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

9. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

10. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

11. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

12. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

13. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

14. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

15. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

16. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

17. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

18. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

19. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

20. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

21. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

22. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

23. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

24. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
~/.aws/credentials
[meetup-main]
aws_access_key_id = my_api_key
aws_secret_access_key = my_api_secret

25. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
~/.aws/config
[profile meetup-main]
region = eu-west-1
[profile meetup-dev]
role_arn = arn:aws:iam::123456789012:role/terraform
source_profile = webinar-main
[profile meetup-prod]
role_arn = arn:aws:iam::123456789013:role/terraform
source_profile = webinar-main

26. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Using theroles
aws --profile meetup-main ec2 describe-vpcs
{
"Vpcs": [
{
"VpcId": "vpc-a1a3bdc7",
"InstanceTenancy": "default",
"CidrBlockAssociationSet": [
{
"AssociationId": "vpc-cidr-assoc-b28680d9",
"CidrBlock": "172.31.0.0/16",

27. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Using theroles
aws --profile meetup-dev ec2 describe-vpcs
{
"Vpcs": [
{
"VpcId": "vpc-035c4565",
"InstanceTenancy": "default",
"CidrBlockAssociationSet": [
{
"AssociationId": "vpc-cidr-assoc-1c8e8877",
"CidrBlock": "172.31.0.0/16”,

28. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

29. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

30. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Automation
• Use templates for IAM policies!
• Use AWS profiles to execute in each environment
• Use Infrastructure-as-Code (AWS Cloudformation, AWS CDK, Terraform)

31. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

32. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

33. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

34. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

35. Thank you!
© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
COBUS BERNARD
AWS SENIORTECHNICAL EVANGELIST
@cobusbernard
cobusbernard
cobusbernard