Why segmenting your infrastructure into tiers makes your infrastructure design better

Infrastructure as Code has the great side-effect of allowing us to bucket our various types of infrastructure into tiers. These tiers may divide the infrastructure in many different ways (perhaps in terms of ownership, security level, or even frequency of change). Each tier may then be treated as a distinct unit, with each tier building upon the previous, to create a cohesive and coherent architecture design.

This talk will present a tried and tested tiering approach, which allowed us to improve our security posture, reduce IaC deployment times, reduce infrastructure sprawl, and enforce ownership; whilst giving greater freedom to our development teams to create required infrastructure quicker and safer.