#Npm serverless codepipeline aws how to#
#Npm serverless codepipeline aws software#

One bucket to store the AWS Config configuration items, another to store Lambda source artifacts, and another bucket to store the CodePipeline artifacts. Amazon S3 – There are several buckets defined in the template using the AWS::S3::Bucket resource.The SNS topic is used by the CodeCommit repository for notifications. Amazon SNS – Provisions a Simple Notification Service (SNS) Topic using the AWS::SNS::Topic resource.The components of this solution are described in more detail below: In the figure below, you see the architecture for launching a deployment pipeline that gets source assets from CodeCommit, builds with CodeBuild, and deploys a Lambda function to AWS. In this post, I take the concept to its logical conclusion by automating the entire continuous compliance and auto remediation solution in versioned code that’s stored in AWS CodeCommit using AWS CloudFormation and AWS CodePipeline along with the other services that detect and fix noncompliant resources including AWS Config Rules, Amazon CloudWatch Event Rules, and AWS Lambda.

#Npm serverless codepipeline aws how to#

In Automatically Remediate Noncompliant AWS Resources using Lambda, I described how to configure AWS resources in the console to automatically remediate noncompliant resources. To many, so much of this seems more of a burden in order to satisfy compliance requirements (a form of “ risk management theater“) rather than something that truly helps reduce organizational and system risks that protect their end users. While this doesn’t scale for any organization, it’s particularly difficult to scale a model like this in the cloud where you can provision thousands of resources at the click of a button. In many cases, in order to maintain adherence to internal and external compliance requirements, teams distribute these types of checklists to hundreds of teams and/or conduct audits around release events or randomly in order to ensure compliance.

#Npm serverless codepipeline aws software#

It might be a spreadsheet, website, or other “digital” tool but, in the end, it’s still checklists that software teams must comply with by filling out forms and then – ideally – fixing the discovered issues. Whether it’s in or out of the cloud, most IT compliance usually comes in the form of a multitude of checklists – like the one you see below.