Compliance with AWS QuickStart architecture requirements - Githubissues

villasv / aws-airflow-stack

Turbine: the bare metals that gets you Airflow

https://victor.villas/aws-airflow-stack/

MIT License

377 stars 69 forks source link

Compliance with AWS QuickStart architecture requirements #98

Closed villasv closed 5 years ago

villasv commented 5 years ago

Source: https://aws-quickstart.github.io/reqs.html#min

[x] Multi-AZ architecture
- [x] Provide Multi-AZ AutoScalingGroup for the scheduler #110
- [x] Provide Multi-AZ AutoScalingGroup for the webserver #111
- [x] Provide Multi-AZ AutoScalingGroup for the workers #112
[x] Support for the majority of AWS Regions
[x] New VPC and existing VPC deployment options
[x] Product instances in private subnets
[x] NAT gateways for outbound internet access from private subnets
[x] Marketplace AMIs whenever possible; no prebaked AMIs
[x] AMI mappings; no hardcoded AMIs
[x] User-friendly parameter labels and groups
[x] CIDR block lockdown for external admin access
[x] Security groups with principle of least privilege
[x] No software bits with deployment
[x] No hardcoded passwords
[x] No sensitive data in EC2 instance user data or other clear text
[x] No use of 0.0.0.0/0 for open remote management access
[x] No resources created automatically outside stack

Also worth taking a look at https://www.cloudconformity.com/conformity-rules/

villasv commented 5 years ago

Finished at 567ba214877b1b81155b82ea134d527812edb363