Auto provision resources on AWS org-sagebase-sandbox account.
The workflow to provision AWS resources is done using pull requests. Request using PRs provide history, gating, reviewing and an approval process.
Instructions and workflow to auto provision and de-provision resources are in Example PRs
We use sceptre and cloudformation to deploy resources onto an AWS account.
As a pre-deployment step we syntatically validate our sceptre and cloudformation templates with yamllint and cfn-lint. It is recommended that you do the same before creating a PR.
We have configured Travis to deploy cloudformation template updates.
- We use the AWS SSM to store secrets for this project. Sceptre retrieves the secrets using a sceptre ssm resolver and passes them to the cloudformation stack on deployment.