Cloud Posse DevOps "Office Hours" (2022-05-18)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have.

You can register here: https://cloudposse.com/office-hours

Join the conversation:
https://slack.cloudposse.com/

Find out how we can help your company:
https://cloudposse.com/quiz
https://cloudposse.com/accelerate/

Learn more about Cloud Posse:
https://cloudposse.com
https://github.com/cloudposse
https://sweetops.com/
https://newsletter.cloudposse.com
https://podcast.cloudposse.com/

[00:00:00] Intro
[00:01:13] Red Hat open sources StackRox
https://techcrunch.com/2022/05/17/red-hat-open-sources-stackrox-the-kubernetes-security-platform-it-acquired-last-year/
[00:01:52] Easily Manage Access to Kubernetes
https://github.com/infrahq/infra
[00:03:40] Heroku CI and Review App Secrets Compromised (Dejavu?)
https://news.ycombinator.com/item?id=31417993
[00:04:56] AWS Control Tower can now use customer provided core accounts
https://aws.amazon.com/about-aws/whats-new/2022/05/aws-control-tower-now-use-customer-provided-core-accounts/
[00:07:41] AWS SSO delegated administration to a member account
https://aws.amazon.com/blogs/security/getting-started-with-aws-sso-delegated-administration/
[00:10:21] Yet Another Kubernetes Controller for Terraform (weaveworks, rancher, et al)
https://www.appvia.io/blog/self-service-of-cloud-resources
https://github.com/weaveworks/tf-controller
https://github.com/rancher/terraform-controller
[00:12:20] Terraform provider for Atlas Database Migrations
https://atlasgo.io/blog/2022/05/04/announcing-terraform-providerx
[00:15:56] What does cloudposse use for ingress controller?
[00:24:41] I’m curious what kinds of patterns cloudposse has seen work for “On demand” environments, for microservices?
[00:38:10] atmos.tools launched!
[00:39:33] Using Terraform to create a DB from scratch - how are we supposed to manage the DB passwords?
[00:44:02] How would you set up IAM policies if starting from scratch?
[00:46:42] Outro