#office-hours - October 2022

Anyone else using Bitbucket for CI/CD?
https://bitbucket.org/blog/macos-runners-bitbucket

In case people are interested I'll be raising the following topic tomorrow during office hours. I think it's an interesting one and looking to get people's feedback on it:

https://sweetops.slack.com/archives/CB6GHNLG0/p1664903787880119

@Erik Osterman (Cloud Posse) I have a meeting that goes until 12PM PT. I can skip it if I need to because I definitely want to raise the observe-as-code debate, but if you have content until 12PM and I can bring that up after that'd be great. Either way just not sure what you have on the agenda today. Thanks!

Random one: I know the official line is that s3 buckets can’t be moved between accounts, but is that really true even at the “ask AWS support nicely” level? We’ve got a few big enough buckets that, on the face of it, it would cost a few k to copy them from one account to another, which is a blocker for my preferred approach of rebuilding key systems in new accounts to get rid of old cruft. Any stories of non-bank-breaking S3 bucket migrations would be interesting!

@here office hours is starting in 30 minutes! Remember to post your questions here.

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Linda Pham (Cloud Posse) has joined Public "Office Hours"

Jose Figueredo has joined Public "Office Hours"

Isaac M has joined Public "Office Hours"

Allan Swanepoel has joined Public "Office Hours"

Jonathan Poczatek has joined Public "Office Hours"

Peter Dada has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Gabriel Zabal has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Guelor Emanuel has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Jared Richards has joined Public "Office Hours"

Jonas Steinberg has joined Public "Office Hours"

Zadkiel has joined Public "Office Hours"

Ozzy has joined Public "Office Hours"

I'd like to pose a bit of an involved question on what priority observability as code is.

Marc Tamsky has joined Public "Office Hours"

Harold Sphinx has joined Public "Office Hours"

Charles Smith has joined Public "Office Hours"

sebastian maniak has joined Public "Office Hours"

Adedapo Ajuwon has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Vijay Kukreja has joined Public "Office Hours"

Ray Botha has joined Public "Office Hours"

sebastian maniak has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

PePe Amengual has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Peter Dada has joined Public "Office Hours"

Vijay Kukreja has joined Public "Office Hours"

Thanks everyone for the awesome discussion today 🙏

Thanks, @Jonas Steinberg @Matt Calhoun @Eric Berg @Alanis Swanepoel for the great discussion today.

@here office hours is starting in 30 minutes! Remember to post your questions here.

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Linda Pham (Cloud Posse) has joined Public "Office Hours"

Isaac M has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

andy miguel has joined Public "Office Hours"

Jared Richards has joined Public "Office Hours"

Amaan Khan has joined Public "Office Hours"

Jose Figueredo has joined Public "Office Hours"

Hao Wang has joined Public "Office Hours"

Oskar Maria Grande has joined Public "Office Hours"

Andrew Hall has joined Public "Office Hours"

Jonathan Poczatek has joined Public "Office Hours"

sebastian maniak has joined Public "Office Hours"

Jim Park has joined Public "Office Hours"

Alexandr Vorona has joined Public "Office Hours"

Shantanu Gole has joined Public "Office Hours"

Marc Tamsky has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

Srivardhan T has joined Public "Office Hours"

Gabriel Zabal has joined Public "Office Hours"

Johnmary Odenigbo has joined Public "Office Hours"

Links from today's call:
https://go.hashicorp.com/index.php/email/emailWebview?md_id=58714
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
https://humanitec.com/whitepapers/kubernetes-benchmarking-study-2022
https://www.reddit.com/r/Terraform/comments/xxf691/terraform_plugin_framework_is_now_in_public_beta/
https://twitter.com/iamvlaaaaaaad/status/1534489514818686976

I know there are a number of ways to initialize your vault cluster but personally I am a fan of being able to do things in terraform: https://registry.terraform.io/providers/rickardgranberg/vaultoperator/0.1.6

^^ Sharing in case you folks haven't heard of it before.

@Erik Osterman (Cloud Posse) - during some of the office hours calls you point to your internal ?confluence? page where you show how you structure aws accounts in an ldap / ou style

is there any chance that page is publicly accessible?

@here office hours is starting in 30 minutes! Remember to post your questions here.

what is cloudposse?

who are you?

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

John Jarvis has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Emile Fugulin has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

Linda Pham (Cloud Posse) has joined Public "Office Hours"

Jose Figueredo has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Ozzy has joined Public "Office Hours"

Isaac M has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

Jonas Frank has joined Public "Office Hours"

Allan Swanepoel has joined Public "Office Hours"

Jonathan Poczatek has joined Public "Office Hours"

RB (Ronak Bhatia) (Cloud Posse) has joined Public "Office Hours"

PePe Amengual has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

Oskar Maria Grande has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

Joshua Magady has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Brian Pauley has joined Public "Office Hours"

Maura Rowell has joined Public "Office Hours"

Hey, popping in and out — kids’ bedtimes 🙂 — but I’ll check out the recording later. Hoping to take advantage of these more; thanks for doing them!

Jared Richards has joined Public "Office Hours"

Andrew Vitko has joined Public "Office Hours"

Devendra Yadav has joined Public "Office Hours"

PePe Amengual has joined Public "Office Hours"

Andrew Nascimento has joined Public "Office Hours"

Jared Richards has joined Public "Office Hours"

Arthur Dent has joined Public "Office Hours"

Link from today's session:
https://github.com/cloudposse/terraform-aws-ecs-cluster/
https://registry.terraform.io/providers/cloudposse/template/2.2.0?pollNotifications=true
https://github.blog/2022-10-18-introducing-fine-grained-personal-access-tokens-for-github/
https://github.blog/changelog/2022-10-13-design-improvements-to-github-actions-navigation
https://www.docker.com/pricing/october-2022-pricing-change-faq/
https://neon.tech/

Q: How are people enforcing MFA in AWS? Not using AWS SSO at the moment, just IAM Users and IAM Groups. Have seen a cloudtrail solution that uses a cloudwatch metric filter and alarm which does the trick, but is probably very expensive as you need to use cloudtrail.

We are using a product called gravitational teleport, where mfa is added to github, people login via their github profile and only a particular team has access to the aws console itself

@here office hours is starting in 30 minutes! Remember to post your questions here.

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Isaac M has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Joe Caulfield has joined Public "Office Hours"

Linda Pham (Cloud Posse) has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

Paul Bullock has joined Public "Office Hours"

Maura Rowell has joined Public "Office Hours"

Jared Richards has joined Public "Office Hours"

Brian Pauley has joined Public "Office Hours"

Jared Richards has joined Public "Office Hours"

sebastian maniak has joined Public "Office Hours"

Joshua Magady has joined Public "Office Hours"

Amaan Khan has joined Public "Office Hours"

Amaan Khan has joined Public "Office Hours"

Jim Park has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

Sean TUrner has joined Public "Office Hours"

Olad Oke has joined Public "Office Hours"

Srivardhan T has joined Public "Office Hours"

Olad Oke has joined Public "Office Hours"

Links from office hours:
https://github.com/cloudposse/infra-live/pull/184
https://aws.amazon.com/about-aws/whats-new/2022/10/aws-organizations-console-centrally-manage-primary-contact-information-aws-accounts/
https://aws.amazon.com/about-aws/whats-new/2022/10/aws-batch-supports-amazon-eks/
https://devopsian.net/posts/terraform-data-sources-over-remote-state/
https://brendanthompson.com/posts/2022/10/terraform-for-expression
https://aws.amazon.com/about-aws/whats-new/2022/10/dark-mode-support-aws-management-console/ and https://aws.amazon.com/about-aws/whats-new/2022/10/amazon-sqs-increased-throughput-quota-fifo-high-throughput-ht-mode-6000-transactions-per-second-tps/
https://github.com/fffaraz/awesome-selfhosted-aws
https://www.home-assistant.io/
https://www.iampulse.com/
https://github.com/iann0036/iamlive
https://airiam.io/
https://hackingblogs.com/aws-security-tools-detail-guide/
https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-policy-generation.html