wellcomecollection / platform-infrastructure

:building_construction: Infrastructure for the Wellcome Digital Platform
MIT License
24 stars 8 forks source link

Add image-builder for required base images (monitoring agents) #416

Closed kenoir closed 8 months ago

kenoir commented 8 months ago

What's changing and why?

This change attempts to provision an AWS image-builder pipeline to install necessary agents on our EC2 instances as part of a base AMI.

See: https://github.com/wellcomecollection/platform-infrastructure/issues/410

Borrows heavily from: https://github.com/aws-ia/terraform-aws-ec2-image-builder

How to test?

Run the image builder pipeline by doing terraform apply, an image should be successfully built and distributed.

How can we measure success?

Our EC2 instances can easily and repeatably be kept up to date with security / monitoring requirements as well as ensuring we reduce our security risk by keeping our images up to date.