A infraestrutura está se tornando um código

Infrastructure is becoming code

Infrastructure as Code is all the rage and would be a great addition to your DevOps pipeline.

infraestrutura como um código

CI/CD tools (such as Jenkins, Circleci, TeamCity, Bamboo, Datadog or GitLab).

That doesn't mean you'll need all of the tools above. On the other hand, you may even need more. The important thing is that you decide which approach you want to take to IaC, define your project (and its demands) and then start building the means to make it happen.

Automation is key

One aspect of IaC that is extremely crucial is automation. The goal should be to move from needing manual software stack updates to full automation. As soon as changes are made to your code repository, automation must kick in to test and deploy that code to production. This is fundamental to Infrastructure as Code because code is not just delivered as a service or application, it also serves as a delivery and update mechanism.

And by automating aspects like provisioning and configuration, you've elevated your delivery platform in ways that weren't possible with traditional infrastructure methods.

Don't forget security testing

As you build your IaC platform, your first priorities will be to stand up and automate the stack. When doing this, you must not forget about security testing. If you neglect the security aspect of IaC, you will end up delivering applications and services ready to be hacked. When building your IaC delivery platform, you must ensure that your software stacks are always compliant with industry regulations and best practices.

This can be a huge challenge, given the number of moving parts involved in IaC. If you start this process with security in mind, you'll have fewer problems ensuring it's implemented correctly as you go along. Keep unnecessary ports closed, use only official container images, and test, test, test.

In fact, your goal should be to implement automated security testing (to accompany automated bug testing and deployment). It’s not enough to “shift security left” by relying on your developers to protect your systems. Since IaC is very DevOps-centric, the onus of security will fall on all departments involved.

Conclusion

Infrastructure as Code is a complex model that will deliver incredible results for your business (if implemented wisely). If you take the time upfront and design the system with industry best practices in mind, you will find that your IaC platform will enable your business to scale to meet virtually any demand thrown at your systems.

If you liked this, be sure to check out our other DevOps articles.

  • Is DevOps right for your company?
  • Is it time for decentralized IT?
  • Why Businesses Are Moving to 'IT as a Service'
  • What your developers need to know before they start working with Kubernetes
  • What is website reliability engineering and how can it positively impact DevOps?

Source: BairesDev

Conteúdo relacionado

Back to blog

Leave a comment

Please note, comments need to be approved before they are published.