How Sunrise Banks Built a Symmetric Multi Cloud Architecture with Terraform & Vault
summary
Describes a reproducible pattern that builds mirrored Azure and AWS datacenters by allocating /16 vnet/vpc slots, splitting each into eight security zones (~8k IPs per zone), and predefining identical subnets so identical IPs and names appear across regions. Uses a cloud‑builder composed of primitive, aggregator, and main Terraform modules to emit full vnets/vpcs. Uses Terraform Cloud workspaces & module registry for CI/CD and versioning and HashiCorp Vault for secrets, enabling whole clouds to be destroyed and recreated quickly.
AI-written summary · about
chapters (17)
- 0:00Introduction and motivation
- 3:17Speaker introduction
- 5:04Sunrise Banks and mission
- 5:47Symmetric architecture design
- 7:14Level one symmetry principles
- 11:30Level two symmetry zones
- 14:20Level three subnet consistency
- 16:52Advantages of symmetric design
- 17:14Cloud builder system overview
- 18:43Cloud builder architecture layers
- 21:14Traffic cop module explained
- 22:37Code walkthrough example
- 24:46Scaling multi-cloud systems
- 25:28CI/CD with Terraform Cloud
- 26:54Module versioning
- 28:17Centralized secrets with Vault
- 29:21Summary and conclusion
related talks
29mBuilding for massive scale and security with the HashiCorp Cloud Platform
14mMulti-Cloud Foundations with Terraform
45mMulti-Cloud & On-Premise, Let's Cross Borders! Get the Best of Both Worlds
53mProvisioning Cloud Infrastructure+Terraform
22mTerraform Hybrid: Unifying Your Physical and Cloud Datacenters
26mHands-On Terraform Module for AWS Landing Zone
17mMulti Region Deployments with AWS CI/CD and Terraform
54mInfrastructure as Code with Terraform on Azure