Sign in to create and edit playbooks. Sign In Register

Infrastructure as Code First

infrastructure-as-code-first · always_apply: yes

Content

Every AWS resource this playbook creates — S3 buckets, Lambda functions, Glue database/crawlers, the Athena workgroup, IAM roles/policies, ECS Fargate Streamlit mart, GitHub OIDC deploy role — is defined in the CDK app (four stacks: Deploy, Ingestion, Catalog, Eda), not clicked into existence in the console. Deploy that app exclusively through CI (GitHub Actions or GitLab CI, matching wherever the repo lives) via cdk deploy; a laptop only ever runs cdk bootstrap plus one sandbox mint of the OIDC DeployStack, never a shared environment after that.

Details
Slug:
infrastructure-as-code-first
Always apply:
Yes
Created:
Aug 31, 2026
Updated:
Sep 15, 2026
Playbook
Delivery Constraint & Opportunity Analysis

v25.1

View Playbook
Activities 9