y0zg

S3 Static Sites

⚠ This post is fairly old. I don't keep it up to date. Be sure to see comments where some people have posted updates

What this will cover

Host a static website at S3
Redirect www.website.com to website.com
Website can be an SPA (requiring all requests to return index.html)
Free AWS SSL certs
Deployment with CDN invalidation

Terraform vs PostgreSQL RDS

Thanks to new resources (postgresql_default_priviledges) and some fixes Terraform can now add new databases and manage ownership / access to them.

This example creates new database and two users. You can use owner to create new tables and run migrations and user for normal read/write access to database.

	#!/usr/bin/env bash

	NODESAPI=/api/v1/nodes

	function getNodes() {
	kubectl get --raw $NODESAPI \| jq -r '.items[].metadata.name'
	}

	function getPVCs() {
	jq -s '[flatten \| .[].pods[].volume[]? \| select(has("pvcRef")) \| '\

	import aws_assume_role_lib # https://github.com/benkehoe/aws-assume-role-lib

	account_role_name = "YOUR_ACCOUNT_ROLE_NAME_HERE" # TODO: put your role name here

	management_account_session = boto3.Session()
	# if you're using AWS SSO in your management account and there's a specific role for this work, you could use aws-sso-lib
	# https://github.com/benkehoe/aws-sso-util/blob/master/lib/README.md
	# management_account_session = aws_sso_lib.get_boto3_session(start_url, sso_region, management_account_id, management_role_name, region=sso_region)

	orgs = management_account_session.client('organizations')

	# Get rid of color codes
	mutate {
	gsub => ["message", "\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[m\|K]", ""]
	}