#refarch (2024-06)

Cloud Posse Reference Architecture

2024-06-11

Marat Bakeev avatar
Marat Bakeev

Hey everyone, what would be the implications of disabling the SCP for DenyEC2InstancesWithoutEncryptionInTransit?

The way I understand AWS docs for this, is that it’s some sort of additional encryption on certain Nitro-based instances. The wording in the SCP document kinda sounds like there is no encryption in transit at all, unless one of the instances is used. Am I wrong?

Data protection in Amazon EC2 - Amazon Elastic Compute Cloud

Learn how the AWS shared responsibility model applies to data protection in Amazon Elastic Compute Cloud.

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

No big deal at all this is just if you wanted to ensure that traffic within the VPC is encrypted in transit

Data protection in Amazon EC2 - Amazon Elastic Compute Cloud

Learn how the AWS shared responsibility model applies to data protection in Amazon Elastic Compute Cloud.

1
Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

Even then it’s not encrypted between load balancers and instances

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

A certain subset of the nitro class instances automatically enable this because of their network backhaul

2024-06-12

2024-06-13

Taimur Gibson avatar
Taimur Gibson

Hello, can I get some advice on how I can set a Lambda function to run on a daily schedule? It looks like it can use an SNS topic or Eventbridge Schedule, but I don’t see how to format that in TF. Thanks!

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

It’s also worth considering if a lambda is the easiest long-term solution, depending on what you wanna do. We frequently use GitHub actions on schedule jobs because they’re just so easy to set up.

2024-06-17

Evgenii Vasilenko avatar
Evgenii Vasilenko

Hi team, can someone explain me how to get an access to Cloud Posse Reference Architecture? I found this link on this page https://github.com/cloudposse/terraform-aws-components/tree/main/modules/eks/cluster but it’s leading to https://docs.cloudposse.com/reference-architecture/ and after that I got redirected to https://docs.cloudposse.com/account/confirmation/ where I see Your registration must be approved by an administrator.

Account Confirmation | The Cloud Posse Developer Hub

Your registration must be approved by an administrator.

1
Marat Bakeev avatar
Marat Bakeev

At the moment, you need to be a paying customer, I think.

Account Confirmation | The Cloud Posse Developer Hub

Your registration must be approved by an administrator.

Dan Miller (Cloud Posse) avatar
Dan Miller (Cloud Posse)

Yes Marat is correct. At the moment only customers or enterprise GitHub subscribers are granted access to the reference architecture

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

@Evgenii Vasilenko I’ll reach out to you via DM

1

2024-06-18

2024-06-26

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

(optional) @Marat Bakeev @Amir Jakoby workshop starting now!

1

2024-06-28

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

@linen

    keyboard_arrow_up