Resource Providersįor a while, we only had Custom Resources to provision and manage resources that CloudFormation didn’t natively support. Instead of CloudFormation managing your resources, you are using CloudFormation as a bad Domain-Specific Language compiler that you have to babysit. Take note, while powerful, you are treading dangerous territory as it becomes easy to effectively build your own Domain Specific Language. Whatever you want to do, macros can likely get you there.
You could imagine being able to provide opinionated IAM policy generators or S3 bucket resource macros. For example, Trek10 provides a macro that lets you write Step Function Amazon States Language (ASL) with pure yaml and smartly resolves CFN intrinsic functions. One of the more powerful concepts, bringing whole new capabilities to essentially add your own opinionated capabilities to CloudFormation. It offers robust resource state management, and these days it can tell you what is going to happen before you run your deployment.Ī lot of great features have worked to make CloudFormation more enjoyable or productive to work with over the years.
CFN was originally only offered in JSON, but we were finally treated to a heaping helping of tabs vs spaces actually mattering with native CFN YAML support in 2016.ĬloudFormation is one of the safest ways to build, manage, change, and destroy resources in your infrastructure. I have come to respect, hate, love, and revere its power to describe and manage infrastructure. So what IAC tools are available to you in AWS, and how do you choose between them? AWS CloudFormationĬloudFormation (CFN) is the original IaC tool for AWS, released in 2011. The “how” of how one approaches IaC is, of course, AWS engineers’ very own version of the old “tabs vs spaces” debate. I don’t have to rebuild in my mind exactly what I was thinking from scratch. I, time and time again, have found it easier to return to projects weeks or months later and quickly be able to understand how things work from a familiar baseline and context. These days, I actually find it faster to just start with all of my applications or even proof-of-concept with an IaC tool and go from there.
0 kommentar(er)
