AWS re:Invent 2021 - Automating cross-account CI/CD pipelines [REPEAT]

[@zachgoll]

This was an excellent presentation. Give it 5-10 years and this flow will be a standard across all companies. It just makes sense.

[@nataliewhite5731]

Hi everyone! Natalie here. I've tried to post the GitHub link here several times but it keeps getting removed. It's automate-cross-account-cicd-cfn-cdk under the aws-samples repo.

[@raajheshkannaa1]

Hey Natalie, this is amazing. Thank You for this.

[@raajheshkannaa1]

qq, would cdk bootstrapping the cross accounts alley the initial need to run the cf templates to create that pipeline iam role. I’ve built a project for the same purpose in a slightly different approach, I’d like to get you feedback. CDK Bootstrapping CrossAccounts: github.com/raajheshkannaa/cdk-booty-strappin Cross Account Deployment using CDK pipelines: github.com/raajheshkannaa/fleet-access

[@nataliewhite5731]

Yes you could bootstrap across accounts to deploy the roles with CDK instead of CloudFormation. But you're trading a single deploy for the overhead of a CI/CD pipeline to deploy roles, then the repo, then the application.. Bootstrapping using organizations also works but not everyone uses Organizations. :) There are lots of ways to accomplish it, I just wanted to tell the story of choosing the tool you use based on different personas versus using the CDK for everything.

[@raajheshkannaa1]

@@nataliewhite5731 Thank You, you are right about using what works for the current time and personas.

[@GradientGroup]

My favorite session of all ReInvent 2021. Thank you so much!

[@nataliewhite5731]

Thank you so much!

[@jairjosafath9693]

advanced CICD love it

[@a1chai]

Amazing video! 🤩

[@chris0628]

How does rollback work in this pipeline?

[@SV-tc8cu]

... and where is the github link?

[@blanky_nap]

That was my question as well

[@nataliewhite5731]

@@blanky_nap I've tried to post the GitHub link here several times but it keeps getting removed. It's automate-cross-account-cicd-cfn-cdk under the aws-samples repo.

[@blanky_nap]

@@nataliewhite5731 OK thanks a lot! I will check it 👍

[@diegonayalazo]

Thanks for sharing

[@gtopcu]

Great content, I'm amazed how well you integrated CI/CD & IaaC and created the whole environment, ready for production use. Would be great to access all the resources

[@nataliewhite5731]

I've tried to post the GitHub link here several times but it keeps getting removed. It's automate-cross-account-cicd-cfn-cdk under the aws-samples repo.

[@prerakhere]

This is overwhelming.

[@Qwerty32134313]

No Cloudformation, thank you very much. It cannot handle the re-deployment of resources as simple as a S3 bucket due to not being empty and Lambda due to ENI. CDK is just a wrapper around Cloudformation so it is almost as flawed. Why pick up a technology which will make your life difficult, there are much better alternatives, such as Terraform. Let alone that Cloudformation redeployment does not detect manual changes in the account, and is slower than a tortoise. I think that there is not a worse tool to pick than Cloudfirmation for IaC right now.

[@ihmpall]

If you’re doing manual changes in the account you’re doing it wrong.

[@Qwerty32134313]

@@ihmpall I am not, however it is difficult to enforce this to everyone, and anyone. There are cases where you need to make sure there are no changes, or to undo a manual patch done due to a disaster recovery or so many other reasons. Why limit yourself to a to tool that simply does not cut it, when there are better ones?

[@diegonayalazo]

Thanks for sharing

[@awssupport]

Glad you enjoyed it, Diego! 🤝 ^BD