Configuration management and service discovery in a serverless world. DevOps Fest'19
summary
Demo shows concrete patterns and working code: environment variables for per‑env names, AWS Systems Manager Parameter Store for centralized keys, and Secrets Manager rotation every day wired to RDS with permissions tightened to a single secret. Live deployment breaks then succeeds when the secret name and IAM grant are fixed. A Python/Node library and a workshop (unicorn rental) exist. Performance data shows requiring only DynamoDB client and trimming x‑ray cuts ~125 ms and costs; a lambda power‑tuning tool finds optimal memory for speed vs cost.
AI-written summary · about
chapters (16)
- 0:00Start
- 3:24Lambda permission model
- 7:59AWS Lambda environment variables
- 10:30AWS Systems Manager–Parameter Store
- 13:01Parameter Store access via SDK with ssm_cache
- 15:14AWS Secrets Manager + Parameter Store
- 16:15Secrets access via Parameter Store with ssm_cache
- 30:52Anatomy of a function
- 31:22The request lifecycle
- 32:53Efficient function code
- 36:23Lazy initialization example (Python & boto3)
- 37:05Optimized dependency usage (Node.js SDK & X-Ray)
- 40:14Concise function logic (example)
- 41:33Small changes, big difference
- 47:14No orchestration in code
- 50:36Do I need a VPC?
related talks
55mHandling secrets in cloud-based applications
30mSecurity in the Serverless Environment
51mTaking Serverless to the Next Level
47mBuild your next microservices application with modern AWS services
28mServerless Backend for Frontend on AWS
12mServerless State of the Union
34mChaos engineering for serverless
14mState of Serverless DevEx & Observability