aws-nuke VS cloud-nuke

To give this a slightly different spin:

--> "The best optimization is simply not spinning things up."

At least for local development and testing, as made possible by LocalStack (https://localstack.cloud), among other local testing solutions and emulators.

We've seen so many teams fall into the trap of "someone forgot to shut down dev resource X for a week and now we've racked up a $$$ bill on AWS".

What is everyone's strategy to avoid this kind of situation? Tools like `aws-nuke` (https://github.com/rebuy-de/aws-nuke) are awesome (!) to clean up unused resources, but frankly they should not be necessary in the first place.

We use nuke aws at work to remove any leftovers: https://github.com/rebuy-de/aws-nuke

You can use this tool on github to nuke all resources.

There's this. I haven't used it myself, but it looks to be pretty effective: https://github.com/rebuy-de/aws-nuke

At this scale, operations can take a lot of time, because there are multiple operational tasks that we need to do when AWS accounts are leaving the AWS Organization or Teams are nuking the AWS account, StackSets Instances get drifted, because not all required resources for compliance can be secured ( SCP Limitations ), existing AWS accounts are joining the AWS Organization and all mandatory StackSets needs to be deployed, and manual steps should be reduced to a minimum. Furthermore, there is no feature from the Service itself to gain an overview of the status of drifted Instances and the general health of your StackSet health and compliance.

Since you're using CDK already, have a way to configure the deployment of the whole thing to a per-developer test account; that's still gonna cost you, but you can bundle everything in an organization / organizational unit for billing purposes, and you can also schedule https://github.com/rebuy-de/aws-nuke to run nightly to clean these accounts from longer-running resources.

And by extension, https://github.com/rebuy-de/aws-nuke as well.

I can also recommend aws-nuke which is an easy to way to destroy in your account.

nothing blew up accidentally this week, but our team at kubefirst is falling more and more in love with aws-nuke. it's an open source command line tool that lets you basically reset an aws account back to an empty state. if you have an environment where you regularly practice your platform provisioning, you probably know that failed destroys while iterating on orchestration can leave junk behind pretty easily. aws-nuke has been so nice to be able to blow away everything in an aws account - and then we just run terraform in the account to get all our core infra back afterward. nice allowlist filters and dryrun detail work too. check them out.

- https://gruntwork.io/ - https://github.com/gruntwork-io

After discussing the testing approaches suggested by the two IaC providers Terraform and Pulumi, in the next post we will take a look at the dedicated IaC testing providers takes on this topic. Here we will have a look at Gruntwork and Snyk. So, stay tuned if you are interessted!

Or your working on gruntwork.io company, this is the only the thing that makes ok all what you say here. However I believe they can make better product instead of angry chat on reddit without getting in details.

Like others have said, your infra might itself be the product.

Look at https://gruntwork.io.

They’ve made a lucrative business by selling infra scripts that others can use.

And their subscription model means they keep the scripts up to date.

Have been checking out terragrunt and terratest lately(part of https://gruntwork.io)

Gruntwork | Software Engineers (Principal, Staff) | 100% Remote/US time zones | Full-time | https://gruntwork.io/

We aim to improve humanity's most important invention: Software. Our product enables software teams to launch and maintain production-grade cloud infrastructure in days, not months. We create the building blocks that devs use to make launching in AWS with infrastructure as code 10x better.

We work with AWS, K8s, Terraform, Go, Typescript, and React/Next. We’re a small team (~20 people), but our clients include Toyota, Adobe, TicketMaster, Verizon, and lots of startups.

We are profitable, self-funded (no investors, no debt), pay salaries, equity, and bonuses according to transparent formulas, and are very focused on building a company we're proud of. We are 100% remote, with 2/3 of our team in the USA and 1/3 in Europe. We have company-wide in-person meetups every few months. We welcome applicants from all backgrounds.

Our measure of a successful Grunt is (1) think like an owner, (2) make impact, (3) communicate effectively, (4) be a good person. If this sounds like you, we're hiring!

- Principal Software Engineer

- Staff Software Engineer

Learn more at https://gruntwork.io/careers/

Most people hesitate to use cloud hosted offerings for development. First of all, most providers have a generous free tier for devs, which can get you started. Secondly I recommend using tools like cloudnuke to avoid paying for cloud resources you're not using.