ACM(AWS Certificate Manager)是AWS推出的全受管的SSL/TLS憑證管理系統，它可以幫我們生成Amazon Root CA的免費憑證讓我們在AWS上包括ELB， API Gateway, CloudFront等資源使用，2020年3月20日ACM正式支持AWS China regions(北京與寧夏）， 意味著除了global 19 個AWS regions之外，現在還支持中國的兩個regions來到總共21個。 這個影片我們嘗試用AWS CDK為寧夏Region的ACM服務「開箱介紹」，示範怎麼完全不需要操作AWS console的情況下，整個在CDK裡面從申請證書，DNS驗證，創建ALB，證書掛上ALB，最後再創建一個基於AWS Fargate的serverless container服務介入這個ALB，提供可靠的HTTPS服務，並且一台EC2都不需要使用。 看完這部影片你將會： 1. 了解ACM的運作與DNS/Email驗證機制 2. 學會如何用CDK provision你的ACM certificate並且支持wildcard域名 3. 學會如何用CDK創建ALB/Listener/Target Group等，並且掛上ACM certificate提供HTTPS接入 4. 學會如何CDK創建一個Fargate服務，配置Task Definition, Container Definition與Port mapping等 5. 學會以上整套東西如何部署到AWS China Region(cn-northwest-1) 6. 學會遇到CDK常見的錯誤時應該如何trouble shooting 0:01 ACM正式在AWS China Regions發布 0:51 @aws-cdk/aws-certificatemanager 開箱 2:34 開始Demo 5:33 第一次deploy 6:10 DNS Validation 6:24 Route53配置CNAME 7:05 ACM Certificate創建完成 7:30 開始嘗試創建ALB 9:10 第二次Deploy 9:28 第三次Deploy 9:34 第四次Deploy 10:08 第五次Deploy 10:56 第六次Deploy 11:32 創建Amazon ECS with AWS Fargate服務 11:49 @aws-cdk/aws-ecs-patterns 介紹 12:35 改成用 @aws-cdk/aws-ecs 來打造 15:12 第七次Deploy 15:58 輸出網址，第八次Deploy 16:55 使用cusotm domain name，第九次Deploy 17:06 部署成功 17:20 從FF瀏覽器檢查HTTPS證書 17:48 Amazon Root CA 18:22 wrap-up 立即訂閱Pahud DEV Youtube Channel http://bit.ly/Pahud-Dev-Subscribe Twitter: https://twitter.com/pahudnet Github: https://github.com/pahud Telegram: https://t.me/PahudDev #AWS #CDK #ACM #Fargate #ALB ... https://www.youtube.com/watch?v=puVL2vJgiYM

This video walks you through the aws-cdk #PR #22312 to add metadata options support to the launchTemplate L2 construct. This video is recorded in 4K 2160p quality. Make sure you select the best quality for best watching experience. https://github.com/aws/aws-cdk/pull/22312 0:00:00 Introduction 0:02:58 Install the Gitpod browser extension 0:04:56 read the issue 0:06:08 read the source code of launch-template.ts 0:07:30 check the cloudformation doc for MetadataOptions 0:09:36 open a Gitpod workspace for this PR 0:11:16 connect local VSCode to the Gitpod workspace 0:13:02 yarn install 0:14:23 run `buildup` for aws-ec2 0:15:59 open the launch-template.ts and start coding 0:32:07 write a integ.launch-template.ts to test the new feature 0:36:44 alias `cdk` CLI to the correct path 0:37:30 yarn watch 0:38:24 `cdk synth` for the first time and check the YAML 0:39:55 configure your AWS account 0:40:16 option 1 - add credentials as persisting env vars in Gitpod 0:42:10 option 2 - use AWS SSO 0:42:24 install AWS CLI V2 for AWS SSO 0:43:38 add ~/.aws/config 0:44:01 aws sso login 0:44:28 run `aws sts get-caller-identity` to validate the current identity 0:44:59 run `cdk diff` first 0:45:47 run `cdk deploy` 0:46:11 check the cloudformation console 0:49:10 commit current progress to our branch in the fork repo 0:51:36 submit a draft PR 0:54:36 continue our development and open a new workspace from PR 0:57:57 complete our integ testing and generate the snapshot 1:00:13 yarn test to validate the snapshot 1:01:46 git commit 1:02:05 add unit tests 1:05:23 run `yarn test` to check all tests 1:05:50 git commit 1:06:08 update README 1:06:48 yarn awslint 1:07:35 git commit and check the PR 1:08:22 debug the failed CodeBuild CI build 1:09:25 refactor our design 1:11:32 commit and push again 1:11:43 CI passed 1:11:54 ready for review 1:12:08 closing AWS CDK Contributing Guide https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md Gitpod - Instant Development Environment Setup https://www.youtube.com/watch?v=QV1fYt-7SLU Amazon Web Service - Replace IAM Users with AWS SSO https://youtu.be/L3xoiabmcO0 ... https://www.youtube.com/watch?v=JjAMvBzSrEQ