This repository contains a hardened, 2-tiered implementation of the DevOps Platform
The CloudFormation templates in this repository implement the following network architecture:
The architecture has been decomposed into the following fine-grained layers.
- Layer 1 - Base networking (VPC Flow Logs Role, VPC, Subnets)
- Layer 2 - Private Services (ADOP/C)
- Layer 3 - Public Proxy
- Layer 4 - OpenVPN
- Layer 5 - Lambda Backups
Pre-requisite CloudFormation scripts for;
- Allocating EIPs for VPN, NAT Gateway instance one and two.
Defines the base networking:
- VPC Flow Logs Role
- VPC
- Public networking
- Private networking
Provisions your ADOP/C instance in a private subnet.
Defines outer proxy service which supports the infrastructure.
Defines OpenVPN service which supports the infrastructure.
Defines the Lambda service which backs up the underlying EBS data.
The following cost breakdown is based on the following assumptions. In reality the cost is likely to be a little bit higher:
- Default Instance types
- Daily snapshots based on 5% increments
- 200 MB of data in S3
- Web traffic is unaccounted for
- Elastic IPs are constantly assigned
We have used the AWS Simple Monthly Calculator to work out all the estimates.