Skip to content

Commit

Permalink
Merge branch 'main' of github.com:MilesSystems/aws-deployment
Browse files Browse the repository at this point in the history
  • Loading branch information
RichardTMiles committed Jul 3, 2024
2 parents 95f2b0c + 56c036b commit 123b354
Showing 1 changed file with 25 additions and 40 deletions.
65 changes: 25 additions & 40 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,20 +14,32 @@ you! Our custom files, as well as 1Strategy LLC's, are licensed under the Apache

![ServiceArchitecture.svg](Diagrams%2FServiceArchitecture.svg)

# Configure
# AWS Architecture

https://github.com/aws-samples/aws-refarch-wordpress
https://docs.aws.amazon.com/whitepapers/latest/best-practices-wordpress/reference-architecture.html

## Networking

![NetworkingDiagram.svg](Diagrams%2FNetworkingDiagram.svg)

https://medium.com/aws-activate-startup-blog/practical-vpc-design-8412e1a18dcc#.g0txo2p4v
https://asecure.cloud/w/vpc/
https://awstip.com/provisioning-vpc-using-aws-cloudformation-7f6affc36a4e
https://aws.amazon.com/blogs/architecture/the-journey-to-cloud-networking/
https://www.slideshare.net/slideshow/20191105-aws-pretoria-meetup-setting-up-your-first-environment-and-adding-automation/190964275
https://docs.aws.amazon.com/whitepapers/latest/build-secure-enterprise-ml-platform/networking-architecture.html

To set up the AWS access keys for your GitHub Actions workflow, you need to follow these steps:
#### HIPPA Networking

1. Create IAM User: Log in to your AWS Management Console, go to the IAM service, and create a new IAM user or use an
existing one. Make sure the user has the necessary permissions to deploy resources to your AWS environment.
- AWSCloudFormationFullAccess
- AmazonVPCFullAccess
-
2. Generate Access Keys: After creating the IAM user, generate access keys for the user. You'll get an Access Key ID and
a Secret Access Key.
3. Store Access Keys in GitHub Secrets: Go to your GitHub repository, navigate to "Settings" > "Secrets", and add the
Access Key ID and Secret Access Key as secrets. For example, you can name them NONPROD_AWS_ACCESS_KEY_ID and
NONPROD_AWS_SECRET_ACCESS_KEY.
https://medium.com/aws-activate-startup-blog/architecting-your-healthcare-application-for-hipaa-compliance-part-2-ea841a6f62a7

## AWS Control Tower

![AccountStructure.svg](Diagrams%2FAccountStructure.svg)

https://aws.amazon.com/blogs/mt/customizing-account-configuration-aws-control-tower-lifecycle-events/
https://docs.aws.amazon.com/controltower/latest/userguide/creating-resources-with-cloudformation.html

## Actions Workflow Breakdown

Expand All @@ -43,7 +55,7 @@ To set up the AWS access keys for your GitHub Actions workflow, you need to foll
- MAGE-BUILDER: Builds and manages Amazon Machine Images (AMI) using AWS Image Builder.
- DEPLOY: Deploys the application stack and manages auto-scaling groups.

### GitHub Actions OIDC
### GitHub Actions OIDC (actions aws setup)

Create the OIDC role for the GitHub Actions workflow to assume.
You can use the following command from the root of this repository to create the role, note that the parameters are
Expand All @@ -65,33 +77,6 @@ You may be required to specify a cli `--profile` and/or `--region` if you have m
in your AWS CLI.
Use the command `aws configure sso --profile prod` to configure the profile for the AWS CLI to use the SSO credentials.

# AWS Architecture

https://github.com/aws-samples/aws-refarch-wordpress
https://docs.aws.amazon.com/whitepapers/latest/best-practices-wordpress/reference-architecture.html

## Networking

![NetworkingDiagram.svg](Diagrams%2FNetworkingDiagram.svg)

https://medium.com/aws-activate-startup-blog/practical-vpc-design-8412e1a18dcc#.g0txo2p4v
https://asecure.cloud/w/vpc/
https://awstip.com/provisioning-vpc-using-aws-cloudformation-7f6affc36a4e
https://aws.amazon.com/blogs/architecture/the-journey-to-cloud-networking/
https://www.slideshare.net/slideshow/20191105-aws-pretoria-meetup-setting-up-your-first-environment-and-adding-automation/190964275
https://docs.aws.amazon.com/whitepapers/latest/build-secure-enterprise-ml-platform/networking-architecture.html

#### HIPPA Networking

https://medium.com/aws-activate-startup-blog/architecting-your-healthcare-application-for-hipaa-compliance-part-2-ea841a6f62a7

## AWS Control Tower

![AccountStructure.svg](Diagrams%2FAccountStructure.svg)

https://aws.amazon.com/blogs/mt/customizing-account-configuration-aws-control-tower-lifecycle-events/
https://docs.aws.amazon.com/controltower/latest/userguide/creating-resources-with-cloudformation.html

## AWS CloudFormation

https://docs.aws.amazon.com/cloudformation/
Expand Down

0 comments on commit 123b354

Please sign in to comment.