Show HN: The Segment AWS Stack

Very nice. I didn&#x27;t know about terraform, and seems like a very powerful combo... Can anyone comment as to the differences in functionality between ansible AWS playbooks and terraform?<p>The Segment Stack is a good showcase of best-practices for AWS ... only one thing I didn&#x27;t understand, why a NAT instance is needed in each subnet? <a href="https:&#x2F;&#x2F;github.com&#x2F;segmentio&#x2F;stack&#x2F;blob&#x2F;master&#x2F;vpc&#x2F;main.tf#L54" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;segmentio&#x2F;stack&#x2F;blob&#x2F;master&#x2F;vpc&#x2F;main.tf#L...</a> It seems a little wasteful. Couldn&#x27;t you just allow traffic between the subnets?

This is great!<p>I&#x27;ve been working on an open source stack that is somewhat similar and serves the same purpose. Allowing startups to bootstrap their stack on AWS.<p><a href="http:&#x2F;&#x2F;docs.the-startup-stack.com" rel="nofollow">http:&#x2F;&#x2F;docs.the-startup-stack.com</a><p>Great work on open sourcing this. I will see what I can do to contribute.

This is amazing. Kudos to the Segment team for putting in the effort to share and open source this. And also kudos for leveraging Terraform rather than CloudFormation. I may fork this to get it running with kubernetes on GCP

One thing that I would have loved some more detail on is how are secrets and credentials being handled?

This is so timely for me! I was struggling to build a repeatable stack with CloudFormation, started down the road of Terraform just last night. This will help me skip a lot of learning curve. Thank you!

Thank you for sharing, simple and detailed. However I&#x27;d like to comment that AWS is not cheap.

If you were to set this up and leave it running (say for a dev environment), what would your monthly bill look like?

So, my co-founder and I have basically been independently building a commercially supported alternative to this excellent open source package. But there are a few differences that make sense when offering this as a paid service:<p>- We wrote our own terraform testing framework to validate that every change to our modules doesn&#x27;t break functionality - We actively update our modules based on feedback from new client engagements - We provide commercial support for each module - We combine our modules with consulting and training as needed<p>And of course, there are many similarities - We give 100% of the source code to our clients - Everything runs in the client&#x27;s AWS account - Everything is self-documented, modularized, and can be combined&#x2F;composed as the needs of different teams require<p>I didn&#x27;t mean for this to be a shameless plug; more just that I found it interesting to compare the open source vs. commercial approach to solving this same problem. Props to the Segment team for sharing this.

What tool did you use to make the flow chart, or is it custom?<p>[0] <a href="https:&#x2F;&#x2F;segment.com&#x2F;blog&#x2F;the-segment-aws-stack&#x2F;images&#x2F;main.png" rel="nofollow">https:&#x2F;&#x2F;segment.com&#x2F;blog&#x2F;the-segment-aws-stack&#x2F;images&#x2F;main.p...</a>

I so much wish segment would offer their services on the Azure stack.