Show and Tell: Secure pipelines in GitLab and AWS

In this Show ’n Tell, Bas Bremer tells you all about how you can secure your pipelines in GitLab and AWS.

When collaborating on IaC projects in GitLab, it’s best practice to use pipelines to keep your resources in sync. That way, all changes to your infrastructure are auditable and traceable. Also, you don’t have to worry about conflicts between you and your co-workers because GitLab handles that for you.
In order to make it possible, it’s necessary to allow GitLab to access the AWS environment. This can be done by creating an AWS account, which comes with credentials, which should be stored in GitLab. This is possible but how are you able to maintain this? And what if you have multiple accounts and need to rotate all the keys? Isn’t there another way? Yes, there is!

Agenda

  • 0:00 - 1:25 - Welcome, Introduction and house rules by Fabian 

  • 1:25 - 34:33 – How to build secure Terraform pipelines with GitLab and AWS by Bas

  • 34:33 – 37:39 – Q&A with Bas & Fabian

Presenters

fabian

 

Fabian Met
Webinar host @ Fullstaq

 
Bas Bremer - Vierkant

 

Bas Bremer
DevOps Engineer @ Fullstaq

Suzanne is a growth-driven marketing manager at Fullstaq and a big fan of the open-source community and the philosophy of sharing knowledge and insights together. She loves to make awesome content with the Fullstaq team full of passionate people.

In her spare time, she loves to travel, go to events, meet new people, and do tons of nerdy stuff, like watching the latest Marvel movies, Witcher series, or playing video games.
March 08, 2022 | Show 'n Tell | 1 MINUTES

What I learned building my own OSS project

In this Show ’n Tell, Joeri will share his experience of building his very own Open Source project.

February 03, 2022 | Show 'n Tell | 2 MINUTES

Show 'n Tell: Deep Dive & Live Demo Harvester

In this Show ’n Tell, we take a deep dive into Harvester. What is Harvester? And why is it worth taking a good look at it? Our colleague Nico Oosterwijk will tell you what Harvester is and the benefits of this platform. Our special guest Sheldon Lo-A-Njoe from Suse will give you a live demo of how everything works.

November 05, 2021 | | 2 MINUTES

To Serverless or not to Serverless?

In this talk Vincent will introduce you to the big world of Serverless Computing with a specific focus on Function as a Service (FaaS) on the Google Cloud …