Ganesh Shankar

Yeah. Hi. This is Ganesh. I have 60 total of 16 years of IT experience. And, currently, I'm working at the cloud infrastructure unit. Here, I have my card. I'm working on AWS, a server platform, for around 8 years. Under here, I used to provide

Secure sensitive data. From committing this institute code, we can give in a separate variable d.s like that. We can provide in a separate file.d.f file. We can pass it via the TF variable files separately without committing to VCS. Also, otherwise, for example, if you want to pass the access and security of the AWS in the Jenkins portal, we can use the Jenkins portal as a credential plug-in. By using the credential plug-in, we can upgrade the passwords there. Here, in Terraform, we can fetch those passwords from this plugin with credentials by in the files. Like that, we can secure the sensitive data.

This one, but by using the stateful set, we can do a distributed application. That's what Here, we are using the Argo CD. By using the Argo CD, it will be continuous deployment. There, we can manage the state from the GitOps code. Using that, we can manage the state of those applications. The same state will be available throughout, without any deployments, it will not change the application state.

How did you choose Azure Blob storage mobile Azure file? Sure about Azure. I do have knowledge on that. Azure Blob storage is like a file system, similar to an S3 bucket in AWS. It's a storage system for storing objects in the cloud, similar to an S3 bucket. There is no limitation for Azure Blob storage or file storage. It will be file storage is nothing more than we can connect with these Azure machine instances. I'm not familiar with Azure, mostly. I used to work on the AWS cloud.

Here for when we can consider choosing one second. One second. Sorry. Then, what would be the consideration for choosing between AWS Fargate and EC2 instances. Sorry about that. AWS Fargate and the EC2 instances. Here, we can use EC2 instances, it's like a dedicated machine kind of application we can run. Here, Fargate is what we feel if you want to know, for example, if you want to run cron jobs in EKS, on the jobs on EKS, that time we can use the Fargate. We will create instances on demand, it will create an instance, execute the jobs, and then terminate it. For that type of situation, we can use Fargate. An EC2 instance is dedicated for applications running continuously on the server, meaning we can choose between these two instances.

Generation with Docker enhanced application deployment in the cloud. So how does containerization enhance application deployment in the cloud? It simplifies application deployments and we can maintain the image in one artifact. From there, we can pull out the major Docker images and build an application anywhere in EKS or any Docker Swarm or like that orchestration tools.

So, the URL is down here. Maybe the Git clone will not work. So we need to have a separate command for Git clone.

Security groups, we need to check which voice it is. If it's for a Windows bench, we need to allow the RTP port protocol. In the same way, we need to allow application port numbers. If it's a Linux machine, we need to access and then access application. The security folks, we need to download specific port requests.

Teleform multi-tier web application using AWS services. Multi-tier application, in the sense that we can use a three-tier application, three-tier services. Okay? Here, we can have an ALP. ALP in place of accessing EC2. We can have a three-tier application like EC2, where there is a when the user tries to access our application, it will hit the ALP, which is in the application load balancer. From there, it will go to the EC2 instances, where we can design two EC2 instances, a target group. In the target group, we can assign a port number, such as port 80, for accessing the web application. Behind the web application, we can enable another load balancer with application awareness using the API. And behind that API, we can access the databases. Like that, you know, we can decide to enter a formula. We're going to build that application by using AWS services. Like, what are the AWS services if you want to create things? What application load balancer, easy to insert security groups, and security groups. If anything needs to be attached to that EC2 instance, we need to create IAM permissions, policies.

If required to build a CICD pipeline, which tool is the Kubernetes ecosystem review recommends. The CICD pipeline we're using, we can use Jenkins orchestration tool. From that, we can build the Docker image, and we can do scanning of those images. Some security tools, and then we can push that after building the image and push that image through any repository like Nexus repository. From there, we can use a CD tool like Argo CD. By using the CD, we can do a continuous deployment to the Kubernetes clusters. That way, we can build a CICD pipeline for Kubernetes applications.

Which AWS service would you use to create a centralized routing solution? If this is for a security purpose, you can have a control tower. In the control tower, you can set default audit logging tools. A logging tool will be created automatically. By using that logging tool, you can have a centralized logging solution. The control tower will be useful for security purposes and the AWS organization. Inside the control tower, you can have an AWS organization. Once you enable the control tower, you have a separate audit account and logs. It contains a centralized view of all the accounts, what accounts are created via control. This is the service we are using. We can use AWS Organizations for this purpose. There are multiple security services available, like CloudWatch.