Staging

.aws/admin-webapp.json

@@ -0,0 +1,35 @@
+{
+  "family": "admin-webapp-task",
+  "networkMode": "awsvpc",
+  "requiresCompatibilities": ["FARGATE"],
+  "cpu": "256",
+  "memory": "512",
+  "executionRoleArn": "arn:aws:iam::{{AWS_ACCOUNT_ID}}:role/ecsTaskExecutionRole",
+  "containerDefinitions": [
+    {
+      "name": "admin_webapp",
+      "image": "{{ECR_REGISTRY}}/admin-webapp-repo:latest",
+      "essential": true,
+      "portMappings": [
+        {
+          "containerPort": 80,
+          "protocol": "tcp"
+        }
+      ],
+      "secrets": [
+        {
+          "name": "REACT_APP_ADMIN_KEY",
+          "valueFrom": "arn:aws:secretsmanager:{{AWS_REGION}}:{{AWS_ACCOUNT_ID}}:secret:admin/api-key"
+        }
+      ],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "/ecs/admin-webapp",
+          "awslogs-region": "{{AWS_REGION}}",
+          "awslogs-stream-prefix": "ecs"
+        }
+      }
+    }
+  ]
+}

.aws/backend.json

@@ -0,0 +1,80 @@
+{
+  "family": "backend-task",
+  "networkMode": "awsvpc",
+  "requiresCompatibilities": ["FARGATE"],
+  "cpu": "512",
+  "memory": "1024",
+  "executionRoleArn": "arn:aws:iam::{{AWS_ACCOUNT_ID}}:role/ecsTaskExecutionRole",
+  "taskRoleArn": "arn:aws:iam::{{AWS_ACCOUNT_ID}}:role/ecsTaskRole",
+  "containerDefinitions": [
+    {
+      "name": "backend",
+      "image": "{{ECR_REGISTRY}}/backend-repo:latest",
+      "essential": true,
+      "portMappings": [
+        {
+          "containerPort": 3000,
+          "protocol": "tcp"
+        }
+      ],
+      "secrets": [
+        {
+          "name": "MONGO_URI",
+          "valueFrom": "arn:aws:secretsmanager:{{AWS_REGION}}:{{AWS_ACCOUNT_ID}}:secret:backend/mongo-uri"
+        },
+        {
+          "name": "MONGO_USER",
+          "valueFrom": "arn:aws:secretsmanager:{{AWS_REGION}}:{{AWS_ACCOUNT_ID}}:secret:backend/mongo-user"
+        },
+        {
+          "name": "MONGO_PASSWORD",
+          "valueFrom": "arn:aws:secretsmanager:{{AWS_REGION}}:{{AWS_ACCOUNT_ID}}:secret:backend/mongo-password"
+        }
+      ],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "/ecs/backend",
+          "awslogs-region": "{{AWS_REGION}}",
+          "awslogs-stream-prefix": "ecs"
+        }
+      },
+      "mountPoints": [
+        {
+          "sourceVolume": "ssl-certs",
+          "containerPath": "/etc/nginx/ssl",
+          "readOnly": true
+        },
+        {
+          "sourceVolume": "app-data",
+          "containerPath": "/usr/src/app/src/data",
+          "readOnly": true
+        }
+      ]
+    }
+  ],
+  "volumes": [
+    {
+      "name": "ssl-certs",
+      "efsVolumeConfiguration": {
+        "fileSystemId": "{{EFS_ID}}",
+        "transitEncryption": "ENABLED",
+        "authorizationConfig": {
+          "accessPointId": "{{EFS_SSL_ACCESS_POINT}}",
+          "iam": "ENABLED"
+        }
+      }
+    },
+    {
+      "name": "app-data",
+      "efsVolumeConfiguration": {
+        "fileSystemId": "fs-XXXXX",
+        "transitEncryption": "ENABLED",
+        "authorizationConfig": {
+          "accessPointId": "{{EFS_DATA_ACCESS_POINT}}",
+          "iam": "ENABLED"
+        }
+      }
+    }
+  ]
+}

.aws/mongo.json

@@ -0,0 +1,86 @@
+{
+  "family": "mongo-task",
+  "networkMode": "awsvpc",
+  "requiresCompatibilities": ["FARGATE"],
+  "cpu": "512",
+  "memory": "1024",
+  "executionRoleArn": "arn:aws:iam::{{AWS_ACCOUNT_ID}}:role/ecsTaskExecutionRole",
+  "taskRoleArn": "arn:aws:iam::{{AWS_ACCOUNT_ID}}:role/ecsTaskRole",
+  "containerDefinitions": [
+    {
+      "name": "mongo",
+      "image": "mongo:7.0",
+      "essential": true,
+      "portMappings": [
+        {
+          "containerPort": 27017,
+          "protocol": "tcp"
+        }
+      ],
+      "secrets": [
+        {
+          "name": "MONGO_INITDB_ROOT_USERNAME",
+          "valueFrom": "arn:aws:secretsmanager:{{AWS_REGION}}:{{AWS_ACCOUNT_ID}}:secret:mongo/root-username"
+        },
+        {
+          "name": "MONGO_INITDB_ROOT_PASSWORD",
+          "valueFrom": "arn:aws:secretsmanager:{{AWS_REGION}}:{{AWS_ACCOUNT_ID}}:secret:mongo/root-password"
+        },
+        {
+          "name": "FIDESINNOVA_DB_USERNAME",
+          "valueFrom": "arn:aws:secretsmanager:{{AWS_REGION}}:{{AWS_ACCOUNT_ID}}:secret:mongo/db-username"
+        },
+        {
+          "name": "FIDESINNOVA_DB_PASSWORD",
+          "valueFrom": "arn:aws:secretsmanager:{{AWS_REGION}}:{{AWS_ACCOUNT_ID}}:secret:mongo/db-password"
+        }
+      ],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "/ecs/mongo",
+          "awslogs-region": "{{AWS_REGION}}",
+          "awslogs-stream-prefix": "ecs"
+        }
+      },
+      "mountPoints": [
+        {
+          "sourceVolume": "mongo-data",
+          "containerPath": "/data/db",
+          "readOnly": false
+        },
+        {
+          "sourceVolume": "mongo-init",
+          "containerPath": "/docker-entrypoint-initdb.d",
+          "readOnly": true
+        }
+      ]
+    }
+  ],
+  "volumes": [
+    {
+      "name": "mongo-data",
+      "efsVolumeConfiguration": {
+        "fileSystemId": "{{EFS_ID}}",
+        "transitEncryption": "ENABLED",
+        "rootDirectory": "/mongo-data",
+        "authorizationConfig": {
+          "accessPointId": "{{EFS_MONGO_DATA_ACCESS_POINT}}",
+          "iam": "ENABLED"
+        }
+      }
+    },
+    {
+      "name": "mongo-init",
+      "efsVolumeConfiguration": {
+        "fileSystemId": "fs-XXXXX",
+        "transitEncryption": "ENABLED",
+        "rootDirectory": "/mongo-init-scripts",
+        "authorizationConfig": {
+          "accessPointId": "{{EFS_MONGO_INIT_ACCESS_POINT}}",
+          "iam": "ENABLED"
+        }
+      }
+    }
+  ]
+}

.aws/webapp.json

@@ -0,0 +1,35 @@
+{
+  "family": "webapp-task",
+  "networkMode": "awsvpc",
+  "requiresCompatibilities": ["FARGATE"],
+  "cpu": "256",
+  "memory": "512",
+  "executionRoleArn": "arn:aws:iam::{{AWS_ACCOUNT_ID}}:role/ecsTaskExecutionRole",
+  "containerDefinitions": [
+    {
+      "name": "webapp",
+      "image": "{{ECR_REGISTRY}}/webapp-repo:latest",
+      "essential": true,
+      "portMappings": [
+        {
+          "containerPort": 80,
+          "protocol": "tcp"
+        }
+      ],
+      "secrets": [
+        {
+          "name": "REACT_APP_API_KEY",
+          "valueFrom": "arn:aws:secretsmanager:{{AWS_REGION}}:{{AWS_ACCOUNT_ID}}:secret:webapp/api-key"
+        }
+      ],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "/ecs/webapp",
+          "awslogs-region": "{{AWS_REGION}}",
+          "awslogs-stream-prefix": "ecs"
+        }
+      }
+    }
+  ]
+}