Thabo Lebelo

Remote Backends with S3

Terraform state files are just JSON data structures that maps real world infrastructure resources to the resource definition in configuration files. A state file can be considered to be a blueprint of all the resources that Terraform manages.

Virtual MFA device for AWS accounts

It is best practice to secure your AWS (IAM or Root) user account with MFA, we can integrate AWS with Vault to achieve this. The TOTP secrets engine in Vault can be enabled and configured to be used as an MFA virtual device by AWS.

Generate AWS Credentials dynamically in Vault

One of the key integrations that Vault provides is the AWS Secrets Engine, which can be used to create credentials on the fly. Credentials for Vault to access the AWS API can be obtained via secrets engine root configuration, IAM role attached to the Vault server instance, or environment variables.

Installing Vault on an AWS EC2 Instance

HashiCorp Vault allows organizations to securely store secrets such as API encryption keys, passwords, and certificates. Vault validates and authorizes clients (users, machines, apps) before providing them access to secrets or stored sensitive data.

Retrieve Multiple SSM Parameters using a Lambda Function

AWS Systems Manager Parameter Store provides secure, hierarchical storage for configuration data management and secrets management. You can store data such as passwords, database strings and license codes as parameter values. You can store values as plain text or encrypted data

Setup a CI/CD Pipeline for AWS CDK Applications

CDK Pipelines is a high-level construct library that makes it easy to set up a continuous deployment pipeline for your CDK applications. The pipeline is powered by a popular Continuous Integration (CI) and Continuous Delivery (CD) tool called AWS CodePipeline.

Lambda integrations in API Gateway

Lambda functions can be invoked on an HTTPS URL using methods GET, PUT, and POST. The data passed to the URL can be made available inside the lambda function too. You can integrate an API method with a Lambda function using Lambda proxy integration or non-proxy (custom) integration.

Deploy an Angular Application to S3 and CloudFront

Angular is a JavaScript framework for building single-page client applications using HTML and TypeScript. We can easily host the generated static website on Amazon S3 by configuring a CloudFront (CDN) distribution and then uploading the Angular build artefacts to the bucket.

Scan Docker images for vulnerabilities with AWS ECR

Amazon ECR is a fully managed container registry used to store, manage and deploy container images. ECR Image Scanning assesses and identifies operating system vulnerabilities. Using automated image scans you can ensure container image vulnerabilities are found before getting pushed to production.

Consume a GraphQL API from a React Application

React is a JavaScript library used to create websites, it allows us to create Single Page Applications. The server will only send a single HTML page to the browser for the website to run fully, the react application manages the whole website including the data, user interaction, and routing.