A presentation at JAWS PANKRATION 2021 by Jenna Pederson
#JAWSPANKRATION Bringing software development practices to your infrastructure @jennapederson
What is Infrastructure as Code? Code that lets you automate deployments of your infrastructure to facilitate both scaling and quicker, repeatable deployments. @jennapederson
Infrastructure as Code IS Code Version control it Code review it Test it Deploy it to each environment with CI/CD @jennapederson
wo on m e rks my ac hin (or account or region) What happens when infrastructure code breaks? The blast radius is much wider. More resources, regions, accounts, customers, and dollars are impacted. @jennapederson
Why Test Infrastructure? The cloud makes it easier and quicker to provision infrastructure, but there is complexity with that scale. @jennapederson
Slow + Expensive Manual Tests Failing Fast Balance fast and cheap tests with more expensive tests that are closer to the real infrastructure and production environment. System Tests Integration Tests Contract Tests Unit Tests Fast + Cheap
Benefits of TDD Reduced defect rates Improve the overall design Focused on requirements Focused on small chunks Serves as documentation Confidence @jennapederson
The Flow RED REFACTOR 3. Make it better
What is a unit test? Exercises a small part of your application, one unit, and verifies that it’s correct. Get feedback early on to shorten the feedback loop between changes Serves as documentation Can be run in your CI/CD tool Isolated from other resources and external APIs @jennapederson
Unit Testing Infrastructure Code Apply the same process to your infrastructure code. @jennapederson
A unit test checks: If a resource will be created with the correct configuration The correct number of resources will be created Dependencies between resources are correct Interpolated values are correct @jennapederson
Example Unit Test
How do we go from code to infrastructure?
What is an Integration Test? Tests the interactions across different units or modules, or in the case of infrastructure testing, across cloud resources. Verifies your provisioned cloud resources are created and configured as you expect them to be. Gives you confidence in infrastructure at scale and at velocity. @jennapederson
Chef InSpec Open-source framework to test and audit cloud resources IN the cloud Tests are written with a DSL Can be used across teams Test resources that are managed manually or with code Ensures requirements are met at every stage of the SDLC @jennapederson
Example Integration Test
Detecting Drift Use InSpec to compare the desired state with the actual state of your cloud resources. Can be used against any resources, regardless of how they are managed. @jennapederson
Without CI/CD Development Test Staging Production @jennapederson
With CI/CD Development Test Staging Production @jennapederson
Wrapping Up Infrastructure code is like any other code, treat it as such. Testing is never done, even once you reach production. It’s cheaper to detect broken code early. @jennapederson
Thank you! @jennapederson /in/jennapederson jennapederson https://jenna.link/hq7
The cloud makes it easier and quicker to provision infrastructure at scale, but there is added complexity with that scale. By bringing practices from software development like test driven development, automated testing, and continuous integration/deployment to manage complexity at each stage of the pipeline, you can build and manage your cloud resources more effectively, consistently, and more securely.
The following resources were mentioned during the presentation or are useful additional information.
for free. You
can too.