My approach to configuration management (cm) for my AWS infrastructure.
-
Create an AWS account.
-
Setup MFA for the
rootaccount user. -
Create a
rootaccount user access key. -
Setup
aws-cliclient with therootaccount user access key. -
Run the
bootstrap.pyscript.- Record the
adminaccount user password created. - Record the
opentofuaccount user access key created. - These changes can be undone by using the
bootstrap.pyscript's--undooption. It is presumed at this point that theaws-cliclient will be configured with anotherrootaccount user access key.
- Record the
-
Delete the root account user access key.
-
Setup MFA for the
adminaccount user.
See LICENSE.