<h1>Automation</h1>
<h2>Why do we automate?</h2>
Automation cuts down on mistakes being made by humans. The more you an automate, the more work you will get done.
Benefits
<ul>
<li>Save time</li>
<li>Increase Security</li>
<li>Be Consistent</li>
</ul>
3 Service
<ul>
<li>CloudFormation - allows you to provision resources quickly and consistently, and manage them throughout their life cycles, by treating infrastructure as code</li>
<li>Elastic Beanstalk - Easy to use all in one service for deploying and scaling web applications and services developed with a variety of supported languages</li>
<li>Systems Manager - gives you the ability to patch, update, manage, and configure your ec2 instance along with on-premise architecture</li>
</ul>
Automate everything - automation is always better than manual work
Benefits - Know that it's more reliable and faster
Tools - Know the right tool for the job
Immutable - Allows you to easily create and destroy your architecture as needed.
<h2>CloudFormation</h2>
Step 1 (Write Code ) CloudFormation is a declarative programming language. It supports either JSON or YAML formatting
Step 2 ( Deploy your Template ) When you upload your template, CloudFormation will go through the process of making the needed AWS API calls on your behalf
parameters, questions built into the code that need to be answered. For example, set up on t2.micro
Template is stored in S3 bucket
Mappings map to resources you want set up. If the template works in the us-east-1 region but not the oregon region, add configuration to mapping
Resources are what you give the template to be able to do what it is needed to do.
Hard coded values and resource ID's can be the reason templates fail to create. If you give a IAM role or AMI policy of one region but try to build in a different, that is gonna fail
on template fail, it will role back to the last known good state.
makes the same API calls you can do manually.

For managing the patch level on your Windows servers.

For managing the string variable in a secure fashion.

For using data/parameters across AWS services without exposing the values as plaintext in commands, functions, agent logs, or CloudTrail logs.

Deployment of application code can't modify existing cloud resources, requiring creation of new resources.

Deployment of application code requires your cloud architecture to be in read-only mode.

Deployment of application code can't proceed because AWS has locked your account.

Deployment of application code can't destroy cloud resources.

It will deploy and update your applications for you.

It will automatically replace instances that fail.

You maintain full control over all of your architecture.

Elastic Beanstalk will rewrite your applications from any language into Python.

guru-automate Quiz

1 of 5 Score: 0

What are common use cases for the AWS Systems Manager Parameter Store "SecureString" parameter?