Building a multi-account, multi-runtime service-oriented architecture
summary
A concrete reference architecture shows a working multi-account, multi-runtime, multi-region system spanning three regions (us-east-1, us-west-2, eu-west-1) using AWS Organizations, Transit Gateway networking, Amazon ECS/EKS/EC2 runtimes, and an S3+CloudFront frontend; infrastructure is deployed from Terraform Cloud workspaces with dynamic AWS credentials and reusable regional modules. HashiCorp products provide secrets, mesh, and access: Vault (performance replication + namespaces), Consul service mesh (cluster peering, sameness groups, traffic splitting for canaries), and Boundary (just‑in‑time SSH/session recording). A public mono‑repo contains the demo that demonstrates failover and cross‑region service routing.
AI-written summary · about
chapters (11)
- 0:00Introduction and challenges
- 2:36Technology and tools
- 5:18Guiding principles
- 6:58Service-oriented approach
- 10:31Multi-account setup
- 14:42Multi-runtime and security
- 21:12Multi-region connectivity
- 29:21Observability and management
- 34:38Feature updates and fixes
- 40:03Securing user access
- 43:52Adding runtimes and wrap-up
related talks
55mBest practices
19mPreparing for disaster: going Multi-Region
17mMulti Region Deployments with AWS CI/CD and Terraform
43mModern Enterprise Network Architecture in AWS Cloud
29mMulti-Regional High Availability in AWS Cloud
40mScaling Startup for Success: Building modern Architectures and Developer Acceleration
36mBuilding a Secure AWS Self-Service Platform for Regulated Industries
45mMulti-Cloud & On-Premise, Let's Cross Borders! Get the Best of Both Worlds