Motivation We have a devops project structure used to deploy our infrastructure to AWS environments. We have increased the automation level of this along the way and we did a presentation of this to an organization level team. One of their questions was “If we are to deploy our infrastructure using…

We needed to create AWS ES index snapshots periodically and copy them to S3. I found an AWS documentation links which describes how to do this manually. But I wanted to automate these parts. There were three main parts in this solution. 1. Creating roles with correct privileges This is the easiest part to automate with…

In my previous blog[1] I mentioned about the features I added to the API GW Ingress Controller in the first cut. But as our project evolved I included few more cool features and this time I am going to talk about them. Separating out Ingress rules and API resources published via API GW. Ingress controller was earlier defining APIs based on…

I was trying to use [1] to set up API Gateway faced Ingress setup. But when I was doing that I found a lot of short falls in the feature list present. Rather than complaining I developed these missing features by myself. So this blog is to introduce these features. …

AWS introduced the Control Tower solution as an extended version of AWS Organizations recently. AWS Control Tower has the following features. Some of them are supported by AWS Organizations. Major addition here OU wise Guard Rail Management. And also a lot of tasks are automated and provide ease to the…

Recently AWS started to support the capability of securing AWS Elastic Search Domains with AWS Cognito. I was going to use that feature and found it hard to find a cloud formation template to deploy this at once. So I developed the cloud formation template [1]. …

How do you create the AWS Managed Certificate in AWS Certificate Manager when you are deploying your solution in AWS ? When it comes to multi account deployments this case gets severe. Say you have a Development, Staging and Production deployments in different accounts and you want to use same…

If you look over the internet you will find how to do something manually in multiple ways. But in Dev Ops world automating that takes priority. Same applies here. There are many places that talks about how to rollover logs using ES endpoints in AWS. But I am taking it…

This is a continuance of my last post[1]. As I mentioned there not only logs, if you are using other tools also its nicer to mange the data published by them from a single account. Today’s post is about having centralized x-ray dashboard. According to the x-ray daemon[2] the way…