Infrastructure As Code
57 items tagged with "infrastructure-as-code"
Standards2
Terraform HCL 2.0
Adhering to HashiCorp standards during software migrations is essential for mitigating risks, ensuring compliance, and enhancing operational efficiency. By implementing best practices such as Infrastructure as Code and utilizing tools like Terraform and Vault, teams can streamline their migration processes while safeguarding sensitive data and maintaining regulatory compliance.
GitOps Principles v1
The Open GitOps standard provides a framework for managing infrastructure and application deployments in a consistent, reliable manner. By adopting this standard, migration projects can enhance collaboration, ensure compliance, and streamline deployment processes, ultimately leading to more successful transitions to cloud-native environments.
Best Practices8
GitOps Principles v1
Declarative, verifiable and automated operations — using Git as the single source of truth for infra and apps.
Infrastructure-as-Code Security Playbook
Best practices for securing Terraform, CloudFormation, and ARM templates in CI/CD pipelines.
Terraform Module Design Patterns
Guidelines for writing reusable, versioned, and documented Terraform modules.
Immutable Infrastructure
An operations model where servers and components are never modified after deployment; changes ship as freshly built, versioned replacements rather than in-place edits.
Pipeline as Code
Defining CI/CD pipelines in version-controlled configuration files stored alongside the application, so the delivery process is reviewable, reproducible, and auditable.
Configuration as Code
Managing application and system configuration in version-controlled, machine-readable files instead of manual settings, making configuration reviewable, auditable, and reproducible.
Cloud Landing Zone
A pre-configured, secure, multi-account cloud foundation with baked-in identity, networking, governance, and guardrails so teams can deploy workloads safely at scale.
Platform Engineering
Platform engineering builds and runs internal self-service platforms and paved roads that let product teams ship software faster with lower cognitive load and consistent guardrails.
Anti-Patterns4
Configuration Drift
Environments that should be identical gradually diverge as undocumented manual changes accumulate, breaking reproducibility and causing inconsistent behavior.
Environment Parity Gap
Development, staging, and production environments differ enough that testing in one gives little confidence about behavior in another.
ClickOps
Provisioning and changing cloud infrastructure by hand through web consoles, producing undocumented, irreproducible, and unauditable configuration.
No Infrastructure as Code
Running infrastructure without any code-based definition, so it cannot be versioned, reviewed, reproduced, or recovered systematically.
Tutorials2
Blueprints17
On-Prem Datacenter to AWS Blueprint
Migrate an on-premises datacenter to AWS using a phased 7 Rs strategy with a landing zone, lift-and-shift, and selective re-platforming.
On-Prem Datacenter to Azure Blueprint
Migrate an on-premises datacenter to Microsoft Azure using Cloud Adoption Framework landing zones, Azure Migrate, and phased rehost-then-modernize waves.
On-Prem Datacenter to Google Cloud Blueprint
Migrate an on-premises datacenter to Google Cloud using the landing zone blueprint, Migrate to Virtual Machines, and phased rehost-and-optimize waves.
VMware vSphere to AWS Blueprint
Migrate a VMware vSphere estate to AWS, relocating VMs to VMware Cloud on AWS or rehosting natively to EC2 with AWS MGN.
VMware vSphere to Azure VMware Solution Blueprint
Relocate a VMware vSphere estate to Azure VMware Solution with HCX, then selectively modernize VMs to native Azure services.
On-Prem to Hybrid Cloud Blueprint
Build a hybrid cloud that keeps regulated or latency-bound workloads on-prem while extending elastic workloads to public cloud with consistent networking and governance.
Docker Swarm to Amazon ECS Blueprint
Migrate containerized services from Docker Swarm to Amazon ECS on Fargate, translating Compose-style stacks into task definitions and services.
OpenStack Private Cloud to AWS Blueprint
Migrate workloads from a self-operated OpenStack private cloud to AWS, retiring the IaaS operational burden and adopting managed services.
CloudFormation to Terraform Blueprint
Migrate AWS infrastructure as code from CloudFormation to Terraform, importing existing resources without destroying or recreating live infrastructure.
VM-Deployed App to Cloud-Native Blueprint
Re-platform a VM-deployed backend application to a cloud-native architecture with containers, managed services, and twelve-factor config.
Manual Deployments to Flux GitOps Blueprint
Adopt Flux CD to reconcile Kubernetes clusters from Git, replacing manual deploys with declarative, pull-based GitOps and automated image updates.
ClickOps to Terraform Blueprint
Codify manually provisioned cloud resources into Terraform infrastructure-as-code with import, modules, remote state, and CI-driven plans.
CloudFormation to Terraform Blueprint
Migrate AWS CloudFormation stacks to Terraform with state import, module refactoring, and a coexistence strategy during transition.
Terraform to OpenTofu Blueprint
Migrate Terraform projects to OpenTofu, the open-source fork, with version pinning, state compatibility checks, and CI updates.
Static Secrets to Cloud Secrets Manager Blueprint
Migrate hard-coded and static secrets to a managed cloud secrets manager with IAM-scoped access, versioning, and automatic rotation.
Snowflake Servers to Immutable Infrastructure Blueprint
Replace hand-tuned snowflake servers with immutable infrastructure built from versioned images and replaced, never patched, in place.
Manual VM Configuration to Ansible Blueprint
Replace manual SSH server configuration with idempotent Ansible playbooks, roles, and inventory for repeatable configuration management.
Products2
Reference Architectures3
EKS Production Container Platform
A hardened, multi-account Amazon EKS platform for running production microservices with GitOps delivery and full observability.
Multi-Cloud Portable Container Platform
A portable Kubernetes platform deployed identically across AWS, Azure, and GCP using GitOps and infrastructure as code to avoid lock-in.
Three-Tier Web Application
The classic presentation, application, and data tiers deployed on virtual machines behind a load balancer with a managed database.
Playbooks7
AWS Landing Zone Rollout Playbook
A phased program to establish a secure, multi-account AWS foundation with guardrails, networking, and identity before workloads arrive.
Azure Landing Zone Rollout Playbook
A phased program to deploy an enterprise-scale Azure landing zone with management groups, policy guardrails, hub-spoke networking, and subscription vending.
GCP Landing Zone Rollout Playbook
A phased program to build a Google Cloud foundation with a resource hierarchy, org policies, shared VPC networking, and automated project factory.
Cloud Governance Rollout Playbook
A phased program to establish guardrails, policy-as-code, and compliance automation across a growing multi-account cloud estate.
Infrastructure as Code Adoption Playbook
A phased program to bring an ad-hoc cloud estate under infrastructure as code with modules, pipelines, and policy enforcement.
GitOps Adoption Playbook
A program to make Git the single source of truth for infrastructure and deployments using declarative, continuously reconciled delivery.
Terraform and IaC Rollout Playbook
A program to introduce Terraform-based infrastructure as code across teams with reusable modules, secure state, and policy guardrails.
Checklists9
AWS Landing Zone Setup Checklist
Stand up a secure, multi-account AWS foundation with guardrails, networking, and logging before workloads arrive.
Azure Landing Zone Setup Checklist
Build an enterprise-scale Azure landing zone with management groups, policy, networking, and identity ready for workloads.
GCP Landing Zone Setup Checklist
Establish a secure Google Cloud foundation with a resource hierarchy, org policies, shared VPC, and centralized logging.
Terraform Module Review Checklist
Review a Terraform module for correctness, reusability, security, and maintainability before publishing it for shared use.
Kubernetes Cluster Setup Checklist
Provision a new managed Kubernetes cluster with the networking, security, and platform add-ons teams need from day one.
GitOps Adoption Readiness Checklist
Verify the prerequisites for declarative, Git-driven Kubernetes delivery are in place before adopting GitOps.
Infrastructure-as-Code Migration Readiness Checklist
Confirm you are ready to bring an existing manually managed cloud estate under infrastructure-as-code without disruption.
Infrastructure as Code Review Checklist
Review Terraform or equivalent IaC for security, modularity, state safety, and reproducibility before it provisions production.
Platform Engineering & Internal Developer Platform Readiness Checklist
Assess readiness to build an internal developer platform that provides self-service, paved-path delivery for product teams.
Glossaries2
Infrastructure as Code
Managing and provisioning infrastructure through machine-readable configuration files
GitOps
An operational model in which the desired state of infrastructure and applications is declared in a Git repository and automatically reconciled into the running environment by an agent.