Hi all. Thanks for this great service/product. I was able to create a production ready stack for our open sourced project using Pulumi's Node.js libraries and AWS that includes:
• VPC and RDS instance in private subnet
• ECS managing containers in private subnet
• Continuous deployment with CodePipeline and CodeBuild from Github to ECR and then update ECS Task definition
• ASM to securely provide secrets as environment variables into containers
• Configure Coudflare to secure connection to ALB through HTTPS/SSL
• Separate foundation stack (VPC and RDS) from application stack (ECS and etc) through Node script
• Cloudwatch of metrics of services
If you'd like to fork it or use it as an example:
https://github.com/khatm-org/khatm-infrastructure/wiki/Architecture
Thanks!