Simplifying your infrastructure with Go, CDK, and cdk8s

In this demo-driven session, explore how to define and deploy infrastructure as Go code with AWS CDK and AWS CDK for Kubernetes (cdk8s). First, learn how to build and test a simple CDK application and extend it to a complete serverless application. Then, explore how to manage Kubernetes applications/infrastructure with cdk8s, including how to use the cdk8s-plus library to reduce verbosity and convert existing Kubernetes custom resource definitions to Go code. Finally, learn how to combine CDK and cdk8s in the same application to deploy your infrastructure (Amazon EKS cluster) and code (Kubernetes applications).

Manage your infrastructure with Terraform and GitHub Actions

Automating your infrastructure changes to deploy the same way as your code deploys reduces the risk of it breaking and spoiling your weekend. Being able to reliably, predictably, and consistently roll out infrastructure changes across multiple environments sounds like a challenge, but it can be achieved by applying DevOps practices to your existing CI/CD pipelines. In this session, learn how to use Terraform and GitHub Actions to manage and automate your infrastructure creation and updates via git. See how testing and deploying to a preproduction environment can help you ensure any changes can be deployed safely without service interruptions.

AWS infrastructure as code: A year in review

Join this session to learn about the new features and improvements for AWS infrastructure as code with AWS CloudFormation and AWS CDK.

How to reuse patterns when developing infrastructure as code

Explore AWS Cloud Development Kit (AWS CDK) constructs and AWS CloudFormation modules and how they can help make it easier to build applications on AWS. Learn best practices from United Airlines, who shares how they have used AWS CDK to create an internal library of infrastructure components that their development team can reuse to accelerate application delivery.

Terraform providers using AWS CloudFormation custom resources

Terraform, AWS CloudFormation, and AWS CDK support a broad set of AWS services. Often, users want to automate more and even create resources that are not supported out of the box. In this session, explore how to build CloudFormation custom resources using your chosen programming language or Docker container. This method has been successfully used with CloudFormation and CDK, and it also works well with Terraform. Using Terraform modules, you only have to add a few lines of code to your projects to use a custom provider. Explore how this solution is designed to be secure, simple, future-proof, and reliable.

Ideal blueprint versus reality for CI/CD pipelines

Continuous integration and deployment (CI/CD) is becoming more mainstream, but it seems that every time a new project starts, more information is needed: What is the best branch strategy? Where and how should you implement a quality gate? When does CI finish and CD start? What steps should be in the CI/CD pipeline to reduce lead time (LT) for changes and mean time to recovery (MTTR)? In this chalk talk, walk through a blueprint of a CI/CD pipeline, identify metrics that help you measure your CI/CD and increase deployment frequency, and put those configurations into practice.

Provisioning, automating, and orchestrating IaC on AWS

Join this chalk talk to get your questions answered about virtually all things infrastructure as code (IaC), including AWS services and AWS Partner IaC products. Explore topics such as IaC patterns, AWS CDK, and AWS CloudFormation. Also, learn how to augment your CI/CD workflows with services such as AWS Systems Manager and select the right tools for the job.

The evolution of CI/CD on AWS

Continuous integration and continuous delivery (CI/CD) is a software development practice wherein developers regularly merge their code changes into a central repository so that code changes are automatically built, tested, and prepared for a release to production. In this chalk talk, learn about the evolution of CI/CD services since the release of AWS CodeBuild in 2016.

Building a self-service developer portal

Organizations adopting DevOps benefit from tools that help them integrate CI/CD best practices into their process and automate manual processes. In this chalk talk, walk through a modern self-service developer portal and discuss the tradeoffs of governance and developer productivity. Finally, learn how AWS Proton can help you create consistent infrastructure for development teams and provide mechanisms for developers to augment systems as needed.

Multi-Region deployments with CI/CD and Terraform on AWS

Financial services organizations deploy workloads into multiple AWS Regions to enhance user experience, satisfy data residency requirements, or maintain business continuity. Infrastructure as code allows these organizations to achieve repeatability of deployments at scale in the cloud. In this chalk talk, learn how to deploy infrastructure using Terraform in multiple AWS Regions using AWS CI/CD built with Terraform. Dive deep into the Terraform deployment workflow and overall architecture for the pipeline. In addition, walk through how to structure Terraform code for multi-Region deployments and design considerations for the CI/CD pipeline.

Network operations, management, and governance best practices

In this chalk talk, learn about best practices to keep in mind while using CI/CD and DevOps principles to manage your network infrastructure. Using sample code for end-to-end implementation, learn how to set up monitoring for networking services with Amazon CloudWatch and how to debug connectivity issues in a multi-account setup using features like Amazon VPC Reachability Analyzer, Route Analyzer, VPC Flow Logs, and port mirroring. Discover ways to use automation to make these activities an ongoing part of your operations.

Ship securely: Automated security testing for developers

In this workshop, learn how to build automated security testing into your CI/CD pipelines using AWS services and open-source tools. The workshop highlights how to identify and mitigate common risks early in the development cycle and also covers how to incorporate code review steps. All this can help you ship faster and more securely. You must bring your laptop to participate.

Build a complete DevSecOps pipeline on AWS

Organizations want to deliver applications that prioritize security and governance. In this workshop, learn to build a DevSecOps CI/CD pipeline with security and compliance testing integrated into the development process. Discover how you can create a CI/CD pipeline that delivers tested and secure infrastructure as code using a Git branching strategy for your AWS accounts. Learn to use GitHub Actions to integrate AWS CloudFormation Guard (cfn-guard) to run policy validations and ensure that pipeline deployments are consistent and that they meet your organization’s compliance standards.

Simplify and automate continuous compliance with AWS

In this workshop, learn how to simplify and automate the definition of controls for managing compliance at scale using AWS Config. Also learn how to automate the process of collecting evidence based on those controls. This workshop dives deep into custom rules with AWS CloudFormation Guard, conformance packs, and evidence collection with AWS Audit Manager. Learn about concepts like continuous compliance and automated remediation. You must bring your laptop to participate.

Develop AWS CloudFormation templates to manage your infrastructure

In this workshop, learn how to develop and test AWS CloudFormation templates. Create CloudFormation templates to deploy and manage resources. Learn about CloudFormation language features that allow you to reuse and extend templates for many scenarios. Explore testing tools to validate your CloudFormation templates including cfn-lint and CloudFormation Guard. You must bring your laptop to participate.

Getting started with Amazon Elastic Kubernetes Service (Amazon EKS)

Ready to kick off or accelerate your Kubernetes experience? This workshop provides an introduction to Kubernetes using the AWS managed Kubernetes service Amazon EKS. Previous experience with Kubernetes or container workflows is useful but not required. During this workshop you deploy everything needed to have a set of microservices running with additional useful day-2 functionality in place. The workshop includes deploying a set of microservices, configuring a load balancer in front of your service, configuring centralized logging, and enabling automatic scaling of your pods and worker nodes. You must bring your laptop to participate.

Proactive security and compliance for infrastructure-as-code resources

In this builders’ session, learn how to test AWS CloudFormation templates, Kubernetes configurations, and Terraform JSON plans and configurations using Guard. Dive into static assessment of infrastructure-as-code templates, deployment safety assessment checks, and proactive compliance by testing Guard rules against your configuration files. Then learn how to use CloudFormation hooks to run preventive compliance rules against stacks created using CloudFormation, AWS CDK, AWS Serverless Application Model (SAM), or AWS Amplify. You must bring your laptop to participate.