Infra Cornerstone Work#2

Open

kylelisk wants to merge 16 commits intoTrustScience:mainfrom

kylelisk:klisk/aws-infra-cornerstone

Commits on Oct 7, 2025

Initial VPC and networking commit. Also included some github actions stuff because I like it :)
Kyle Lisk
committed
Initial VPC and networking commit. Also included some github actions stuff because I like it :)
Kyle Lisk
committed

Commits on Oct 8, 2025

Added ECS and ECR related stuff as well as updated the github actions pipelines.
Kyle Lisk
committed

Commits on Oct 9, 2025

Added an ALB so I can actually get to the webpage in the ECS cluster
Kyle Lisk
committed
Added certificate logic and also least-priviledge role for the ECS tasks as well as HTTPS
Kyle Lisk
committed
Fix terraform formatting issues
Kyle Lisk
committed
Checkov fixes ;)
Kyle Lisk
committed
Checkov fixes again. Also encrypted thee cloudwatch logs
Kyle Lisk
committed
Checkov fixes round 3
Kyle Lisk
committed
Added a network firewall and dedicated subnets.
Kyle Lisk
committed
Fixed checkov failures again.. might be worth disabling, yet I enjoy the security scanning
Kyle Lisk
committed

Commits on Oct 10, 2025

A couple main items in this commit, network firewall and kms updates:
Kyle Lisk
committed
Improved security on the security groups to only certain ports within specific CIDR ranges. Also cleaned up the README
Kyle Lisk
committed
Fixed two oopsies:
Kyle Lisk
committed
Because I'm a completionist at times, I fixed the checkov failures right quick.
Kyle Lisk
committed
Fixed terraform fmt issue
Kyle Lisk
committed