NDS X AWS 세미나에서 발표한 Infra as Code 발표 자료입니다! 대표적인 IAC툴인 테라폼과 클라우드포메이션을 비교하고 서버리스로 배포할때의 장단점 및 현장에서의 사용 노하우가 포함되어 있습니다

1. Serverless
with
Infra As Code

3. Infra As Code?
1.
2.
3.

4. IAC
stage,
10 3 !?!

5. IAC

6. IAC
VCS
,

8. ! !
AWS
GCP,Azure,K8S
AWS
Terraform Python, CloudFormation Go

9. IAC
1.

10. IAC
2.

11. IAC
3.

13. SDK AWS
SDK CF
SDK
, ,
CF

15. Import & terraforming CloudFormer
import
CloudFormation
CloudFormer

16. ETC
github intergration CloudFormation
Designer
remote backend web console

17. AWS CDK

18. AWS CDK
CloudFormation terrform
—TF data
—
: TypeScript, JavaScript, Java, C#, Python

19. Serverless deploy tool

21. IAC !

22. AWS SAM
—cloudformation
—cloudformation Transform
Transform: 'AWS::Serverless-2016-10-31'
—

23. AWS Chalice
—Flask
—

24. zappa
— WSGI
— flask, django
— !

26. serverless framework
—
—AWS azure, Google Cloud Functions
—
—CloudFormation

27. terraform
—terraform 0.12
module lambda
—terraform
,

29. zappa + terraform
serverless framework + terraform
IAC
IAC

30. ex) , , 53
resource "aws_route53_record" "amazonses_verification_record" {
zone_id = "${data.aws_route53_zone.domain.zone_id}"
name = "_amazonses.${aws_ses_domain_identity.domain_identity.id}"
type = "TXT"
ttl = "600"
records = [
"${aws_ses_domain_identity.domain_identity.verification_token}"]
}
resource "aws_ses_domain_identity_verification" "verification" {
domain = "${aws_ses_domain_identity.domain_identity.id}"
depends_on = [
"aws_route53_record.amazonses_verification_record"]
}

31. dkim
resource "aws_ses_domain_dkim" "dkim" {
domain = "${aws_ses_domain_identity.domain_identity.domain}"
}
resource "aws_route53_record" "amazonses_dkim_verification_record" {
count = 3
zone_id = "${data.aws_route53_zone.domain.zone_id}"
name = "${element(aws_ses_domain_dkim.dkim.dkim_tokens, count.index)}._domainkey.${local.domain}"
type = "CNAME"
ttl = "600"
records = [
"${element(aws_ses_domain_dkim.dkim.dkim_tokens, count.index)}.dkim.amazonses.com"]
}
resource "aws_route53_record" "mx_record" {
zone_id = "${data.aws_route53_zone.domain.zone_id}"
name = "${local.domain}."
type = "MX"
ttl = "300"
records = [
"10 inbound-smtp.${var.region}.amazonaws.com"]
}

32. workspace likelion_net
likelion.net SES
SES
locals {
domain = "${replace(terraform.workspace, "_", ".") }"
}
data "aws_route53_zone" "domain" {
name = "${local.domain}."
}
resource "aws_ses_domain_identity" "domain_identity" {
domain = "${data.aws_route53_zone.domain.name}"
}

33. RDS,VPC

34. IAC
IAC
IAC

35. —
cli,sdk
—s3
destroy

36. ACM !
— acm
— IAC
—
—

37. QnA