Dev-Sec-Ops Examples

Infrastructure as Code

• Terraform modules
  • github based module sources

AWS

• Base infrastructure

  • default VPC
  • NAT Gateway
  • SSM / ECR VPC Endpoints

• VPN

  • AWS Client VPN
  • Site-to-Site with VPN Gateway
  • Site-to-Hub with Transit Gateway
  • [Site-to-Site VPN between AWS VPC and GCP VPC]
    • TBD

• EC2

  • test instance
  • dev instance

• ECS

  • python-webapp1 service

• RDS

  • devpostgres instance

• VPC Peering

  • TBD
  • Peering default VPC and backend VPC
  • EC2 instance in private subnet @ each VPC
  • Route between private subnets

• EKS provisioning using terraform

  • TBD
  • Private subnets @ default VPC
  • Public accessible controller

• EKS provisioning using eksctl

  • TBD
  • Private subnets @ default VPC
  • Public accessible controller
  • Tools installation after provisioning

• Transit Gateway between VPCs in different AWS account

  • TBD

• Single VPC internet exits for multiple VPCs using Transit Gateway

  • TBD
  • NAT GW @ default VPC
  • No NAT GW @ 2 other VPCs
  • Transit Gateway among all 3 VPCs
  • All outgoing traffic will be routed to default VPC then exit to internet

GCP

• Base infrastructure - TBD

• VM - TBD - Private subnet - iAH connection

• GKE - TBD - Private subnet

---

CI/CD

• Web Application / ALB + ECS + RDS @ Peered VPC

  • TBD

• 3 Tier Web Application / ALB + EKS + API + RDS

  • TBD

• Web Application 2 / ArgoCD on EKS

  • TBD

• Developer-controlled Github Runner using Action Runner Controller

  • TBD

---

Security

• Accessing Resource on Private Subnet using AWS SSM
  • TBD
  • No public IP address
  • No VPN
  • Direct ssh access to instance
  • Accessing backend resource using port-forwarding on private instance
• Accessing Resource on Private Subnet using Kubernetes control plane
  • TBD

---

MLOps

• Deploy model from Huggingface
  • TBD