Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provision ECS Hello World (Nginx) #14

Merged
merged 7 commits into from
Nov 23, 2023
Merged

Conversation

aaroncarlucci
Copy link
Owner

@aaroncarlucci aaroncarlucci commented Nov 22, 2023

This PR addresses #7 and includes:

  • ECS cluster
  • ECS service
  • ECS task definition
  • ALB and associated listener and target groups.

TODO:

  • Implement an SSL certificate, listen on 443 and redirect port 80 traffic to HTTPS on the load balancer. Implement DNS and public SSL traffic on ALB #17
  • Consider encrypting traffic between the load balancer and the app services - this might require building a custom docker image and self-signed certificate Encrypt traffic between ALB and ECS application #15
  • Possibly decouple the ingress and egress rules from the security group definitions - that may cause consistency issues when infrastructure is destroyed or changed in some cases
  • Iterate on hardening, documentation and testing
  • Create issues for the above

@aaroncarlucci aaroncarlucci self-assigned this Nov 22, 2023
@aaroncarlucci aaroncarlucci linked an issue Nov 22, 2023 that may be closed by this pull request
@aaroncarlucci aaroncarlucci merged commit 4ee0165 into develop Nov 23, 2023
1 check passed
@aaroncarlucci aaroncarlucci deleted the feature/ecs-hello-world branch November 23, 2023 12:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Provision Hello World application
1 participant