s0enke

import { CfnOutput, Stack, StackProps } from "aws-cdk-lib";
import { Construct } from "constructs";
import * as lambda from "aws-cdk-lib/aws-lambda";
import * as apigateway from "@aws-cdk/aws-apigatewayv2-alpha";
import { HttpLambdaIntegration } from "@aws-cdk/aws-apigatewayv2-integrations-alpha";

import * as cdk from "aws-cdk-lib";

export class CdkBrefStack extends Stack {
  constructor(scope: Construct, id: string, props?: StackProps) {

s0enke

// Possible since https://github.com/aws/aws-cdk/pull/17144

class VpcProduct extends servicecatalog.ProductStack {

  vpc: aws_ec2.Vpc;

  constructor(scope: Construct, id: string) {
    super(scope, id);
    this.vpc = new aws_ec2.Vpc(this, 'Vpc', {

s0enke

PS C:\gfos\jdk\bin> java -jar .\HostId.jar
display name    : Software Loopback Interface 1
name            : lo
index           : 1
loopback        : true
p2p             : false
up              : true
virtual         : false
network interface Software Loopback Interface 1 is invalid: no hardware address

s0enke

        {
            "Sid": "ProtectBackups",
            "Condition": {
                "ArnNotLike": {
                    "aws:PrincipalARN": "arn:aws:iam::*:role/AWSControlTowerExecution"
                }
            },
            "Action": [
                "backup:Delete*",
                "backup:Update*"

s0enke

AWSTemplateFormatVersion: "2010-09-09"
Resources:
  BackupRole:
    Type: "AWS::IAM::Role"
    Properties:
      RoleName: SampleBackupRole
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: "Allow"

s0enke

# Landing Zone Service Control Policies
organization_policies:
  ...
  - name: restrict-to-eu
    description: Restrict to EU regions
    policy_file: policies/restrict_to_eu_regions.json
    #Apply to accounts in the following OU(s)
    apply_to_accounts_in_ou:
      - core
      - applications

s0enke

Do you have more resources? Please leave a comment!

• Beyond Blame (Dave Zwieback)
• https://response.pagerduty.com/after/post_mortem_process/
• https://victorops.com/wp-content/uploads/2014/09/Blameless-Post-Mortems.pdf
• https://response.pagerduty.com/after/post_mortem_process/
• https://medium.com/production-ready/writing-your-first-postmortem-8053c678b90f
• https://medium.com/production-ready/on-finding-root-causes-c0ce524bf98b
• https://www.slideshare.net/jallspaw/advanced-postmortem-fu-and-human-error-101-velocity-2011
• http://extfiles.etsy.com/DebriefingFacilitationGuide.pdf

s0enke

# call me with
# $ ansible-playbook ansible_playbook.yaml
---
- hosts: localhost
  connection: local
  gather_facts: no

  tasks:
  - cloudformation:
      stack_name: "stack_name"

s0enke

http://blog.gardeviance.org/2015/04/the-only-structure-youll-ever-need.html

s0enke

policies:

  - name: s3-bucket-check
    resource: s3
    mode:
      role: arn:aws:iam::xxxxx:role/lambda-basic-execution
      type: periodic
      schedule: "rate(10 minutes)"