Multi-region support with StackSets

[tj]

Support for multiple regions with Stack Sets.

[stephenmathieson]

Any progress here? Getting this in will be a huge win.

[tj]

@stephenmathieson nope not yet

[lukeed]

Poking in to ask if anything from re:Invent made this possible?

[tj]

yep, still pretty low priority TBH, but at least now with Dynamo's replication there's more db options. In most a lot of cases one region + CDN is enough I think

[tj]

note to self: list of hosted zone ids are here http://docs.aws.amazon.com/general/latest/gr/rande.html

[sudhirj]

Notes to @tj

• API Gateway recently added support for regional endpoints (earlier API-GW endpoints already had an AWS managed CloudFront distribution in front of them).

  • This should allow deploying API-GWs multi region, and then setting them up on Route53 with Latency routing so the users are always sent to the closest region. Or create a CloudFront distro that will internally route to the nearest region.

• Environment variables need to be region specific - different regions use different DB/DynamoDB

• Might be nice to have automatic subdomains on all configured domains - like us-east-1.app.domain.com including the main app.domain.com configured using Route53 above.

[sudhirj]

Also, ACM certs will have to be requested once for each region, might make sense to just do wildcards in every region.

[tj]

Yeah :( that part will be annoying (#452) they have support for DNS verification as well now at least too

[francocorreasosa]

Hello 👋 Is there any progress on this? Thanks!

[tj]

For me the ACM verifications are the biggest blocker, it would be awful UX to receive like 150 emails, and dig through which ones are for which region you still need to verify. The DNS alternative isn't much better there either :'(. I'll see if maybe I can grab one from a region and replicate it to the others, that would unblock this I think.

Keep in mind your data has to be replicated too otherwise it's not really going to be much of an improvement over the default CloudFront -> API Gateway setup we have now.

[tj]

Ohh I misread the docs actually, the DNS verification should work across regions unlike email. That's not too bad. I'll try to get on this soonish!

[francocorreasosa]

Awesome! Thanks @tj 🎉

[sanjaypojo]

Hey @tj poking to see if this might be ready sometime soon? :)

[tj]

Hard to say, traction hasn't been as good as I was hoping so it might be too large of an addition, especially when lots of services are going this route by default (Lambda@edge, Cloudflare workers, etc)

[pontusab]

Is it possible to do a multi-region deployment yet? looking into serverless framework and that can currently do that. But really love up and want to continue with that. Is it possible in some other way, like manually, for now, adding to route53 etc?

[tj]

@pontusab not out of the box yet, the easiest manual route would probably be with https://aws.amazon.com/global-accelerator/

[pontusab]

@tj Thanks, will look into that 🥇