Tumpsh / sandbox-provisioner

An service to auto provision resources on AWS scicomp

Overview

Auto provision resources on AWS org-sagebase-sandbox account.

Workflow

The workflow to provision AWS resources is done using pull requests. Request using PRs provide history, gating, reviewing and an approval process.

Contributions

Contributions are welcome.

Requirements:

• Install pre-commit app
• Clone this repo
• Run pre-commit install to install the git hook.

Testing

As a pre-deployment step we syntatically validate our sceptre and cloudformation yaml files with pre-commit.

Please install pre-commit, once installed the file validations will automatically run on every commit. Alternatively you can manually execute the validations by running pre-commit run --all-files.

Provision resources

Instructions and workflow to auto provision and de-provision resources are in Example PRs

Deployments

We use sceptre and cloudformation to deploy resources onto an AWS account.

Continuous Integration

We have configured Travis to deploy cloudformation template updates.

Issues

• https://sagebionetworks.jira.com/projects/IT

Builds

• https://travis-ci.org/Sage-Bionetworks/sandbox-provisioner

Secrets

• We use the AWS SSM to store secrets for this project. Sceptre retrieves the secrets using a sceptre ssm resolver and passes them to the cloudformation stack on deployment.