DevOps microservice
in plain words
A Flask service built, tested, scanned and deployed to AWS ECS Fargate by a GitHub Actions pipeline, with Terraform for all infrastructure.
under the hood
Stack
- Terraform
- VPC, subnets, security groups, IAM roles, ECS Fargate service, ECR and an Application Load Balancer
- AWS ECS Fargate
- Serverless container hosting behind an Application Load Balancer
- Docker
- Container image for a Python Flask service, pushed to ECR
- GitHub Actions
- CI/CD pipeline running Pytest and Bandit, then building, pushing and deploying
- Bandit
- Static security scanning in CI
- CloudWatch
- Service logs and metrics