AWS bulut platformasida nima amalga oshirdingiz…

AWSda infratuzilma va ilovalarni joylashtirishni avtomatlashtirishni amalga oshirdim, IaaS va PaaS xizmatlaridan foydalanib.

Asosiy ish sohalari:

Infratuzilma kod sifatida (IaC): AWS CloudFormation va Terraform yordamida infratuzilmani tavsiflash va boshqarish (VPC, EC2, RDS, S3 va boshqalar).
CI/CD pipeline'lari: AWS CodePipeline, CodeBuild, CodeDeploy yordamida avtomatik qurish, test qilish va joylashtirishni sozlash. GitHub/GitLab bilan integratsiya.
Konteynerlashtirish: Amazon ECS va Amazon EKS yordamida konteynerlangan ilovalarni joylashtirish va boshqarish. Fargate yordamida serverlarsiz konteynerlarni sozlash.
Monitoring va loglash: Amazon CloudWatch yordamida metrikalar va loglarni yig'ish, ogohlantirishlarni sozlash. AWS X-Ray yordamida taqsimlangan tizimlarni tracing qilish.
Konfiguratsiya boshqaruvi: EC2 instansiyalarini markazlashtirilgan boshqarish uchun AWS Systems Manager'dan foydalanish.
Xavfsizlik: AWS Identity and Access Management (IAM) yordamida kirishlarni boshqarish, tarmoq xavfsizligi uchun Security Groups va NACLlardan foydalanish, AWS Secrets Manager yordamida maxfiy ma'lumotlarni xavfsiz saqlash.
Serverlarsiz hisoblash: AWS Lambda'da funksiyalarni ishlab chiqish va joylashtirish.
Ma'lumotlar bazalari bilan ishlash: Amazon RDS (PostgreSQL, MySQL) va Amazon DynamoDB'ga sozlash va migratsiya qilish.
Xarajatlarni optimallashtirish: AWS Cost Explorer yordamida resurslar iste'molini tahlil qilish va xarajatlarni optimallashtirish.

AWS CodePipeline'da pipeline misoli:

# CloudFormation'da pipeline ta'rifi misoli
Resources:
  MyPipeline:
    Type: AWS::CodePipeline::Pipeline
    Properties:
      Name: my-application-pipeline
      RoleArn: !GetAtt CodePipelineServiceRole.Arn
      ArtifactStore:
        Type: S3
        Location: !Ref PipelineArtifactBucket
      Stages:
        - Name: Source
          Actions:
            - Name: SourceAction
              ActionTypeId:
                Category: Source
                Owner: ThirdParty
                Provider: GitHub
                Version: '1'
              OutputArtifacts:
                - Name: SourceOutput
              Configuration:
                Owner: my-github-user
                Repo: my-application-repo
                Branch: main
                PollForChanges: true
                AccessToken: "{{resolve:secretsmanager:github_token:SecretString:token}}"
        - Name: Build
          Actions:
            - Name: BuildAction
              ActionTypeId:
                Category: Build
                Owner: AWS
                Provider: CodeBuild
                Version: '1'
              InputArtifacts:
                - Name: SourceOutput
              OutputArtifacts:
                - Name: BuildOutput
              Configuration:
                ProjectName: !Ref CodeBuildProject
        # ... boshqa etaplar (Test, Deploy)

Terraform yordamida VPCni joylashtirish:

# terraform.tf
resource "aws_vpc" "main" {
  cidr_block = "10.0.0.0/16"
  enable_dns_hostnames = true
  enable_dns_support = true

  tags = {
    Name = "main-vpc"
  }
}

resource "aws_subnet" "public" {
  vpc_id     = aws_vpc.main.id
  cidr_block = "10.0.1.0/24"
  availability_zone = "us-east-1a" # Misol AZ

  tags = {
    Name = "public-subnet-us-east-1a"
  }
}

# ... boshqa resurslar (Internet Gateway, Route Tables va boshqalar)

AWS bulut platformasida nima amalga oshirdingiz?