Building a Secure AWS Self-Service Platform for Regulated Industries

on YouTube ↗36m

" summary

Shows a concrete IDP that vends governed AWS accounts and environments using ServiceNow, GitLab, Terraform, Control Tower, Service Catalog, Backstage and Argo CD, with account creation taking ~7.5 minutes and full infra plus app deployment ~25 minutes. Security uses a deployment IAM user, a StackSet-injected CICD role with a tight trust policy, and TF modules for VPC/EKS/RDS; costs are surfaced in choices. Implements two flows: ServiceNow → GitLab → Terraform for accounts and Backstage scaffolder generating TF vars for self‑service infra, and it works end‑to‑end.

AI-written summary · about

" chapters (10)

1. 0:00Introduction to platform engineering
2. 1:45Why build an internal platform
3. 4:51Key benefits of platform engineering
4. 7:19Defining internal developer platforms
5. 11:13Creologic’s platform journey
6. 20:43AWS architecture for Creologic
7. 25:14Demo of account provisioning
8. 27:39Demo of infrastructure provisioning
9. 32:20Best practices for platform teams
10. 34:47Key takeaways and conclusion

" related talks

• 55mBest practicesIrshad A Buchh, Trevor Hansen · AWS re:Invent 2019 Global Partner Summit
• 55mSelf-service infrastructure is no longer a dreamWelly Siauw, Dan Barr · AWS re:Invent 2023
• 41mBuild cloud foundations for growth and resilienceNipun Sharma, Chandra Allaka · AWS Summit Singapore 2022
• 44mPlatform Engineering in actionMaarten Vandeperre, Vincent Seynhaeve · Voxxed Days Luxembourg 2026
• 14mPlatform engineeringJelle Pelgrims · devopsdays Eindhoven 2023
• 41mAWS Cloud Automation Platform with Terraform and JenkinAshok Kalakoti · AWS Community Day Singapore 2023
• 32mAgile governance on AWS GovCloud (US)Kaushik Mohanty, Diane Kozobolis · AWS AMER Summit May 2021
• 18mTerraforming AWS Control TowerMarko Bevc · HashiConf Europe 2022