Postsread more
Layer 0: Bootstrapping an AWS Org Without a Single Stored Credential
Last week I laid out the whole platform : five accounts, an EKS-based internal developer platform, built in the open in layers. This week I want to go all the way down to the floor, Layer 0, the org bootstrap, because it’s where the most interesting tension in any infrastructure-as-code project lives: something has to exist before Terraform can run, and I refuse to store a secret in a public repo to make that happen.