Building a Secure AWS Golden Image Pipeline with Packer, Vault and Terraform
summary
Demo shows a full CI/CD pipeline that uses Packer, Vault and Terraform to bake secure OS images, triggers OpenSCAP-to-Ansible remediations, and produces usable AMIs via both Packer’s EBS and QEMU builders. Workflow builds a Vault-packaged image, uploads raw/qcow2/vmdk artifacts to S3, imports them with AWS import‑export, launches a t2.micro EC2 instance with Terraform, runs tests, and then destroys it — the end-to-end build, import and provision sequence completes successfully.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 0:52Who is Alif
- 2:19Image Pipeline Workflow
- 4:30Packer Build Options
- 6:32Automated Build Options
- 7:02Kickstart
- 7:24Profiler
- 8:20Ansible
- 9:26Specification
- 10:39Options
- 12:38Vault
- 17:09Demo
related talks
28mUsing an Image Release Process for Security Wins
37mGolden Image Factory With HCP Packer & Terraform
49mBuild, provision & deploy in the Cloud with Packer, Ansible & Terraform
26mJumpboxes at Easy: How Terraform and Packer Enable the Easy Creation of Secure Jumpboxes
43mImmutable AWS Deployments with Packer and Jenkins
56mHCP Packer Learn Lab: Build a Golden Image Pipeline
39mAutomating Immutable Infrastructure With Packer & Terraform
33mBuilding Automated Pipelines for Infrastructure Code with Terraform and Packer