colex / aws-infrastructure Goto Github PK

The region bootstrap should only contain the bare minimum for starting a project with a sane and secure setup:

• VPC with subnets
• Bastion servers
• Internet Gateway
• NAT Gateway

The region bootstrap would be a good starting point for any project regardless of what services they might use (EC2 only, Elastic Beanstalk, ECS...). Therefore the ECS setup and cluster should be extracted into their own bootstrap (maybe bootstrap-ecs). That might require some outputs from the bootstrap-region to be fed into the bootstrap-ecs.

With the newly released Container Registry from AWS, we should look into adding ECR permissions to the role used for the ECS cluster, so images published in ECR can be used right away.

Acceptance Criteria:

• Images can be pulled from ECS instances using ecs-role