About AWS CDK CI/CD

Question

We use AWS CDK to build and manage our AWS environment.
We have split accounts by use and manage nearly 100 accounts apart from security accounts and other administrative accounts.

We are regularly updating the existing mechanism in accordance with continuous updates of AWS services, but we are no longer able to respond in a timely manner because we are performing equivalent processing for nearly 100 accounts.

I know that CDK and multi-account configurations are already being used by many companies, but how are you resolving this kind of operational burden?
I am wondering if it is possible to trigger pull request approval and automatically perform tests using fine-grained assersions and cdk diff, and if there are no problems, automatically deploy to all accounts. I am wondering how it is done in the world in general.

Best Regards,

Accepted Answer

Hi, you have a practical cross-account / cross region example here: 
https://github.com/aws-samples/multiple-account-cdk-cicd-pipeline

Additionally, CDK-based Stacksets are on the way: 
* https://github.com/aws/aws-cdk-rfcs/issues/66
* https://github.com/cdklabs/cdk-stacksets/

They are based on CFN Stacksets, which would be the best solution to your question if you were in CFN environment without CDK.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/what-is-cfnstacksets.html

Hope it helps!

About AWS CDK CI/CD

Conteúdo relevante