Infrastructure as Code

This is such a given (also in the industry) that we no longer feature it on our tech radar.

All cloud infrastructure should be provisioned and maintained using Infrastructure as Code (IaC). We no longer use the templating services of the individual cloud providers, such as CloudFormation for AWS and ARM templates for Azure. Instead we use OpenTofu for every cloud, so the same tooling and skills carry over between providers, including a European Sovereign Cloud. To configure servers and bare metal, as opposed to provisioning cloud resources, we use pyinfra: infrastructure as Python code over plain SSH, without agents.

If possible, use policies to disable manual changes in cloud portals and force scripted modifications.

This is now such a given (also in the industry) that we no longer feature it on our tech radar.

All cloud infrastructure should be provisioned and maintained using Infrastructure as Code (IaC). To manage this we will use templating services provided by the cloud provider. For AWS we will use Cloudformation and for Azure resources, we will use ARM templates. If possible use policies to disable manual changes in cloud portals and force scripted modifications.

All cloud infrastructure should be provisioned and maintained using Infrastructure as Code (IaC). To manage this we will use templating services provided by the cloud provider. For AWS we will use Cloudformation and for Azure resources, we will use ARM templates. If possible use policies to disable manual changes in cloud portals and force scripted modifications.