aws-deployment-framework VS superwerker

In some scenarios you might have the need to replicate an AWS CodeCommit repository. When I was setting up a test organization using AWS Deployment Framework (ADF) I ran into this myself. Because I want to test the deployment of my landing zone I needed to have a close replica. This includes the CodeCommit setup. But at the same time I did not want to change the development workflow. The workflow is pretty straight forward. You create a feature branch to work in. When you are ready you merge it to a development branch. When it needs to go to production you merge it into the main branch. So we will use the development branch to deploy to the test organization. But, because the test organization is a replica of production. Merging to the development branch would not have effect on the test organization. For this we need to synchronize the development branch to the test organization.

Within AWS Organizations you can apply Service control policies (SCPs). All AWS Accounts under the OU (Organization Unit) with the SCP will be subjective to this SCP. What if you need to make a change in this SCP? How can you test this change? SCPs are not the only things you might want to test. Remember that I mentioned that ADF is also bootstrapping the accounts? That could be a VPC with subnets for networking. How do you ensure that the change that you made works as intended? When merging to your main branch. It will trigger a rollout process depending on your configuration.

AWS Deployment Framework (ADF)

I had set up a Community Builders AWS Organization recently using superwerker. My intent is for this organization to show the best practices for setting up a multi-account organization with Organizational Units representing sandbox, test and production environments, scoped developer roles and limited production access. I think the developer roles need a little work, but the group was able to be productive in this environment, so that's a win.

If you go with CT, the easy way to get started it to use: https://github.com/superwerker/superwerker I use it for my personal accounts, and minimal installation is less than $10 monthly. You should get an email domain to go with it; using .link domains is inexpensive. For email addresses, use plus email addresses. That way, you can land all emails in the same account. (I use a junk google email address for those.) I guess I would recommend CT, especially with a low-bar entry like superwerker.

On my accounts, I use this: https://github.com/superwerker/superwerker, the resources it creates by default cost me less than $10 per month, I have only a few accounts. Easy way to get started.

I kinda spam this a lot but if you are new building on AWS and have a domain name you can put under Route53 control than check out https://superwerker.cloud/ -- it's a free and AWS blessed stack that automates the setup of an multi-account AWS org complete with all the initial SSO, governance, audit and compliance stuff ready to go.

I use this stack pretty often when setting someone up with a greenfield proper AWS multi account structure with security guardrails and compliance frameworks provisionally set up: https://superwerker.cloud - it’s open source and “blessed” by AWS but built and maintained by a commercial consultancy

Superwerker is an open-source AWS CloudFormation solution that simplifies the setup of an AWS account. It follows best practices for security and efficiency. It was/is developed and maintained by AWS Advanced Partners kreuzwerker and superluminar. It even has its own landing page with great content like a short video and more. Hard to believe this is a free product.

If you are going to blow it up anyway check out https://superwerker.cloud — free and aws approved QuickStart for multi account plus SSO plus all the security guardrails.

. I use superwerker even for my accounts (near 'no use' costs around $10 per month. The cost will go up based on what services are used. werker. I use superwerker even for my personal accounts (near 'no use' costs around $10 per month. Cost will go up based on what services are used.

A Reddit question for how to set up AWS Organizations and AWS SSO. I recommended giving https://github.com/superwerker/superwerker a try.

I personally use this: https://github.com/superwerker/superwerker