#refarch (2024-06)
Cloud Posse Reference Architecture
2024-06-11
Hey everyone, what would be the implications of disabling the SCP for DenyEC2InstancesWithoutEncryptionInTransit?
The way I understand AWS docs for this, is that it’s some sort of additional encryption on certain Nitro-based instances. The wording in the SCP document kinda sounds like there is no encryption in transit at all, unless one of the instances is used. Am I wrong?
Learn how the AWS shared responsibility model applies to data protection in Amazon Elastic Compute Cloud.
No big deal at all this is just if you wanted to ensure that traffic within the VPC is encrypted in transit
Learn how the AWS shared responsibility model applies to data protection in Amazon Elastic Compute Cloud.
Even then it’s not encrypted between load balancers and instances
A certain subset of the nitro class instances automatically enable this because of their network backhaul
2024-06-12
2024-06-13
Hello, can I get some advice on how I can set a Lambda function to run on a daily schedule? It looks like it can use an SNS topic or Eventbridge Schedule, but I don’t see how to format that in TF. Thanks!
It’s also worth considering if a lambda is the easiest long-term solution, depending on what you wanna do. We frequently use GitHub actions on schedule jobs because they’re just so easy to set up.
2024-06-17
Hi team, can someone explain me how to get an access to Cloud Posse Reference Architecture?
I found this link on this page https://github.com/cloudposse/terraform-aws-components/tree/main/modules/eks/cluster but it’s leading to https://docs.cloudposse.com/reference-architecture/ and after that I got redirected to https://docs.cloudposse.com/account/confirmation/
where I see Your registration must be approved by an administrator.
Your registration must be approved by an administrator.
At the moment, you need to be a paying customer, I think.
Your registration must be approved by an administrator.
Yes Marat is correct. At the moment only customers or enterprise GitHub subscribers are granted access to the reference architecture
2024-06-18
2024-06-26
2024-06-28
@linen