Best practices
summary
AWS ProServe presents a reusable Terraform Landing Zone that uses HashiCorp Terraform, Vault Enterprise and Consul to automate multi‑account AWS orgs, deploy core accounts, and vended account pre‑warming. The solution provisions ~59 AWS services, supports thousands (customers report >1,000) accounts, injects GitLab/GitHub repos into Terraform Enterprise/Cloud workspaces, enforces Sentinel policy as code (demo blocks a plan until an EC2 name tag is added), and includes cost estimation and state management; the automation works end‑to‑end in the live demo.
AI-written summary · about
chapters (6)
- 0:00Introduction and setup
- 12:19Terraform landing zone solution
- 26:39HashiCorp Vault overview
- 34:10HashiCorp Consul overview
- 40:12Terraform Enterprise deep dive
- 52:55Live demo and wrap-up
related talks
45mThe Automation of a Landing Zone- 45mThe Automation of a Landing Zone
26mHands-On Terraform Module for AWS Landing Zone
41mAutomating Multi-Cloud, Multi-Region Vault for Teams and Landing Zones
42mHands-on with the Terraform Module for AWS Landing Zone
01h 03mTerraforming the world, one cloud at a time.
18mTerraforming AWS Control Tower
55mSelf-service infrastructure is no longer a dream