using powershell dsc with aws cloud and cloudformation

PowerPoint Presentation

AWS (EC2|CloudFormation) and PowerShell Desired State ConfigurationRavikanth Chaganti@RavikanthMicrosoft MVP (Windows PowerShell & Microsoft Azure)

PowerShell Conference Asia

AGENDAPowerShell DSC configuration delivery methods and AWS EC2Why CloudFormation?CloudFormation and DSC - Know HowsDemo Scripts: http://azrs.tk/cfnatpsconf

PowerShell Conference Singapore 2016

PowerShell DSC - Delivering Configuration

PowerShell Conference Singapore 2016

Demo Configuration via Push

Requires WinRM configurationHTTP (5985) orHTTPS (5986)Requires relevant firewall rules inside EC2 instanceRequires local administrator or equivalent credentials

PowerShell Conference Singapore 2016

Demo Pull Configuration via Pull Service on EC2

Requires an additional EC2 Windows instanceRequires security group configuration to allow the pull server web services accessRequires AWS credentialsAccess and Shared keys

PowerShell Conference Singapore 2016

Demo Pull Configuration via Pull Service on EC2 and onboarding via SSM Command

Requires an additional EC2 Windows instanceRequires security group configuration to allow the pull server web services accessRequires AWS credentialsAccess and Shared keysRequires meta-configuration stored in a blob

PowerShell Conference Singapore 2016

Demo Bootstrapping new EC2 instance via Pull Service on EC2

Requires an additional EC2 Windows instanceRequires security group configuration to allow the pull server web services accessRequires AWS credentialsAccess and Shared keysRequires meta-configuration stored in a blobRequires AWS PowerShell tools

PowerShell Conference Singapore 2016

Demo Configuration via AA DSC Pull Service

Requires Azure subscriptionRequires connectivity to Azure AutomationInternet orVPNRequires AWS credentialsAccess and Shared keys

PowerShell Conference Singapore 2016

Why CloudFormation?Typical enterprise application deployments are multi-tierEach tier may have multiple instancesDependencies exist between tiersIndividual instance deployment is not scalableNot DevOps friendlyMust treat an entire application service deployment as a single entityCloudFormation enables this definition via a declarative and JSON or YAML based template language

PowerShell Conference Singapore 2016

CloudFormation Template Syntax{ "AWSTemplateFormatVersion": "version date", "Description": "JSON string", "Metadata": { templatemetadata }, "Parameters": { setofparameters }, "Mappings": { setofmappings }, "Conditions": { setofconditions }, "Resources": { setofresources }, "Outputs": { setofoutputs }}JSON---AWSTemplateFormatVersion: "version date"

Description: String

Metadata: template metadata

Parameters: set of parameters

Mappings: set of mappings

Conditions: set of conditions

Resources: set of resources

Outputs: set of outputsYAML

PowerShell Conference Singapore 2016

Demo First CFN Template

Requires a keypair nameRequires security group configuration to allow RDP and web service accessDeployment viaConsolePowerShell Tools

PowerShell Conference Singapore 2016

Demo DSC Configuration via CFN Template

Requires a keypair nameRequires security group configuration to allow RDP and web service accessRequires DSC configuration stored in a place accessible to CFNDeployment viaConsolePowerShell Tools

PowerShell Conference Singapore 2016

SummarySeveral ways to onboard EC2 instancesUnderstand CFN helper scripts when using CloudFormationxCloud services are certainly helpful

PowerShell Conference Singapore 2016

PowerShell Conference Singapore 2016Dont Forget!

Fill in your survey its how we do better!Dont lose your badge! You need it for the Social EventsGrab the Speakers for a chat they all have time for you!Let everyone know what they are missing on Social Media#PowerShell#PSConfAsia

Tweets (preferably with Pictures) win Prizes!!!!

Photos of Marina Bay Credit: Sebastian Szumigalski