Has anyone gone down the road of offering an image factory of AWS AMIs? I’m currently building out Packer automation to provide hardened images to my organization, but curious if anyone has ran into problems at scale with the approach.

The

atmos packer

commands were part of some work we did on building an image factory with GitHub Actions

Nice, did you have to share those AMIs out? I'm looking to push into an artifact account and then share out to different orgs

Yes, exactly, then had to share those images with accounts in the org

Sweet, that's exactly what I’m thinking about

Yes, so we use a GHA workflow with approval gates (using env protections). The image would be built, then automatically spun up. Wait for approval. If approved, it would share to other accounts. If rejected it would do nothing. Either way, it would terminate the EC2 instance that was spun up.

we have all of that (The image would be built, then automatically spun up. Wait for approval. If approved, it would share to other accounts. If rejected it would do nothing) in a repo that we did for a customer - the complete workflow

I'm doing this for runs-on.com with this repo: https://github.com/runs-on/runner-images-for-aws. You can find some scripts and workflows within. Also using github env protection for the approval process.