Ravi Sir's Cards › AWS
CI not laptop prod
This revision card explains CI not laptop prod. It starts from the need that laptop admin deploys skip reviews and leave keys around. It describes build, synth/validate, staging smoke, then approved prod. The how-to section notes OIDC roles + least privilege beat long-lived access keys. An example on the card is rohan blocks merge until sam validate / cdk diff is green.
Read card text
What this card says
Why do we need it?
Laptop admin deploys skip reviews and leave keys around.
What is it?
Build, synth/validate, staging smoke, then approved prod.
CI
How to do it
OIDC roles + least privilege beat long-lived access keys.
OIDC
Example
Rohan blocks merge until sam validate / cdk diff is green.