3 ms·
This was a good read but really if you already follow the common best practices of IAC/terraform/aws multi-account I don't think you're going to learn much. Th
by swozey 3y ago
This was a good read but really if you already follow the common best practices of IAC/terraform/aws multi-account I don't think you're going to learn much.
The comments in here kind of made me think I was going to hop in and take away some huge wins I hadn't considered. But I have been working with Terraform and AWS for a very long time.
If you're unfamiliar with AWS multi-account best practices this is a good read.
https://aws.amazon.com/organizations/getting-started/best-practices/ https://aws.amazon.com/organizations/getting-started/best-pr...
- bcjordan 3y agoI remember periodically coming across services/platforms that purport to make setting up secure AWS accounts / infra configuration easier and default secure — anyone know what I may be thinking of?
- swozey 3y agoActually the article here is one of those options - https://substrate.tools/ https://substrate.tools/ I don't know how integrating this into an environment where you already have tons of AWS accounts would go but it's interesting. Thankfully I only have to make new accounts when we greenfield a service and that's maybe a yearly thing.