One cloud consultants building journey
One cloud consultants building journey
I needed to ramp up on the new feature of AWS’s Managed Active Directory (Hybrid Edition) and so it’s good opportunity to share my experience. First off the use case – much like the original version of Managed AD, the Hybrid Edition is ment to allow organizations to extend their on-premises AD to the cloud […]
January 2025 marks a couple of milestones. It will be my 3rd year at Slalom and is my 25th year in technology consulting. Wow time flies…and so I thought I would share some reflections on this journey I’ve been (and am still) on. For those who have known me long, know that my path to […]
Hello again friend. It’s the heat of the summer and I’ve been on a rather long engagement helping a client automate the build of EKS servers. One item I was keen to automate was the target subnet where the cluster gets installed and where to place the node group(s). So I turned to the aws_subnets […]
As I continue my Terraform journey, I am always trying to find better ways to deal with the complexities of the code and the resulting resources built from the code. Security Groups are no execption. I did some web searching and found some code to parse a CSV and create a security group rule set. […]
RBAC or Role-based Access Control, is a key feature of Kubernetes (a.k.a. k8s) that provides access control by roles and role bindings. A role will be defined with a set of api_groups (“” for default, “apps”, “autoscaling”, “batch”, “extensions”, “networking.k8s.io”, “authentication.k8s.io”,”storage.k8s.io”,”certificates.k8s.io), resources (pods, deployments, namespaces, secrets, persistentvolumes, configmaps, nodes), and vebs (create, get, delete, list, […]
I’m currently on a cool project where we are automating the deployment of EKS clusters with Terraform. The TFE server is configured with an IAM user, that TF user will automatically be added to the aws-auth section of the configmap. We have EKS module code to add our SSO group’s rolearn to the configmap. The […]
My first bit of code for my new employer was help to setup a “security VPC” that hosts a pair of Palo-Alto firewalls to inspect traffic from other AWS accounts (AKA “hub and spoke”). This work was based (loosely) on repos found here and here…these repos build a similar environment but within a single AWS […]
I discovered a handy trick to get the account id of the given profile/account. The key is to use a new data source object and pass it the provider. See the code below. So no need to ever put account ids in terraform code again? I’m good with that. Happy building, D
My latest project is a bit of a return to my old life with Microsoft. The majority of my AWS work has been with Linux workloads, so it’s been nice to brush off my old skills and return to PowerShell 😃. After manually joining a couple of instances to a self-managed AD (not an AWS […]
My current project is a datacenter migration where we’re moving Windows workloads up to AWS. One item we had been struggling with was with two large file share servers. The shares are multiple terabytes in size with lots of small files/docs and subfolders. The challenge we had been dealing with the performance of DataSync with […]