Home

AWS

1. Essentials (once per organization)

   • terraform stage storage (S3 + Dynamo)
   • terraform IAM user

2. Bootstrap (once per account)

   • terraform admin policy
   • terraform IAM role

3. Users, groups, privileges management

   • Create user accounts
   • Create user groups
   • Setup policies
   • Setup roles

4. DNS zones

   • public zones
   • private zones

5. Virtual network

   • VPC
   • IGW
   • public subnets
   • public subnets routing tables - via IGW
   • NAT-GW - one, or one per region
   • private subnets
   • private subnets routing tables - via NAT-GW
   • dedicated subnets for ELB
   • security groups (?)

6. Virtual machine

   • SSH keys management (deploy keys) or not?
   • SSH authentication with Azure Active Directory - AWS alternative

7. Kubernetes service

   • AKS deployment
   • aws-auth config (to enable IAM logins)
   • aws-logging config (to enable logs)
   • service accounts & IAM role integration

8. Static page hosting (?)

   • custom domain
   • S3 backend
   • ACM certificate
   • Cloudfront CDN