Skip to content

Latest commit

 

History

History
182 lines (124 loc) · 5.23 KB

PITCHME.md

File metadata and controls

182 lines (124 loc) · 5.23 KB
theme paginate style
gaia
true
section { background: #f2f2f2; color: #393e46; } h1, h2 { color: #222831; } h1 strong, h2 strong { color: #f96d00; } p strong, li strong { color: #f96d00; } section::after { font-size: 0.5em; }

bg left:40% 110%

Sustainable Personal Accounts

✨ Liberate Software Engineers! ✨ Each of them deserves a full AWS account to innovate fastly.


“ Knowledge technologists become the dominant social force ”

-- Peter Drucker (2001)

♻️

“ The condition of all progress is experience ”

-- Felix Adler (1913)


✨ Sustainable Personal Accounts

What? SPA provides an entire AWS account to software engineers of an enterprise. Yes, this can mean thousands of AWS accounts to manage.

Why? Collective business agility relies on individuals. Democratize access to AWS console and tools to accelerate innovation.

How? SPA automates the management of AWS personal accounts at scale, with maintenance windows on each account. Central teams can purge resources, enforce corporate guardrails and update shared blueprints periodically and automatically.


🔭 Use Sustainable Personal Accounts to:

  • align newly created AWS account with corporate policies
  • configure AWS Budgets, and consolidate budget alerts
  • continuously deploy the DevOps and SIEM tools of your enterprise
  • force the purge of cloud resources at regular points in time
  • tag AWS accounts as per FinOps and CloudOps changing needs
  • manage AWS accounts collectively (by Organization Unit) or individually
  • set maintenance window of your choice
  • adjust CodeBuild scripts to your exact needs

🌈 Guiding Principles

We drive innovation with experimentations - How many AWS accounts are for individuals across your organization? #KPI

We trust our employees and colleagues - Few cloud accounts go above budget and need corrective action. #KPI

We influence corporate culture with recycling - Maintenance windows enforce resource deletion (cost avoidance) and foster Continuous Integration (CI) at enterprise scale.

We scale with automated guardrails and with insourced blueprints


🏭 Event-driven Architecture

  • Account tags store states of the machine and enforce scoped limitations with Service Control Policies (SCP).

  • Single event bus for state transitions and for events generated by SPA itself. EventBridge bus lives in Automation account.

  • Serverless processing of transitions with Lambda functions deployed in Automation account, and triggered with EventBridge.

  • Serverless heavy processing with CodeBuild projects executed within each personal account, on maintenance windows.


bg contain


width:800px

Settings per Organizational Unit


Ok, walk me through the solution


<style scoped> section { background: orange; } </style>

bg 80%


<style scoped> section { background: orange; } </style>

bg 80%


bg 100%


🎬 Initiative timeline

🥚 Validate the concept with AWS Control Tower specialists (Dec 2021)

🐣 Introduce SPA at AWS Summit in Paris (April 2022)

🐤 Release of public GitHub repository of SPA (Summer 2022)

🐥 Adapt the solution to multiple enterprises

🐦 Present SPA governance capabilities at AWS Summit in Paris (April 2023)

🐧 Release of technical blog post on the SPA design (H2)


🍻 How to adapt the solution to your specific requirements?

1. Customization with configuration and templates: Download the package, look at the documentation and run it for yourself.

2. Fork this open source project: If you have python competencies with AWS CDK and boto3, then feel free to fork this project and to taylor it to your specific needs.

3. Reply can help! We are using the system for ourselves. And we have developed it, before sharing it with the community.

Contact Reply


width:800px

https://github.com/reply-fr/sustainable-personal-accounts


bg w:800