AWS env setup

[mahalakshme]

Tasks

Preview Give feedback

1. Infra based on capacity
2. CircleCI builds to deploy to both preprod and prod
3. Deployment of lambdas for media
4. Personal ssh access preferred
5. Backups 35 days as usual
6. DB monitoring
7. Newrelic, bugsnag
8. New app with defaults (details will come in later here)
9. DNS rwb.avniproject.org delegated from avniproject.org to Route53 on the new account
10. Sample report to ensure connectivity
11. Access details on Keeweb
12. Infra details on Release Tracker
13. IAM account with admin access to be handed over
14. Setup role for access to Samanvay AWS account IAM users
15. Setup Cognito, SNS and S3 (create bucket) for RWB staging and prod
16. Support case to register sender id, increase sms quota, move out of SNS sandbox
17. Ansible inventory setup for RWB staging and prod
18. Ansible vars setup for RWB staging and prod
19. Create keypair for infra access (for backup. Prefer personal keys)
20. Delete default VPC. Create new VPCs. Setup VPC peering between reporting and other VPCs
21. Disable all traffic from default security groups for new VPCs
22. Request ACM certs
23. IAM user for avni-server access to S3 and cognito
24. Add to Freshping monitoring

Pending:

• Create prod db read replica.
• Change instance classes for prod resources before going live.
• Use Avni sender id in SNS. Pending AWS support response.

Out of scope

• RWB implementation
• Reports for RWB

Testing

• Technical review
• Create a sample implementation to verify implementation, reports, rules-server, media server, etl and jasper

Root account details temporarily available with @vinayvenu

[mahalakshme]

@vinayvenu have we received playstore details also? ETL also need to be setup in new env for reports?

[1t5j0y]

More tasks..

• IAM account with admin access to be handed over
• Configure IAM security policies
• Setup role to allow access for Samanvay AWS account IAM users
• Setup Cognito and SNS for RWB staging and prod
• Ansible inventory setup for RWB staging and prod
• Ansible vars setup for RWB staging and prod
• Create keypair for infra access (for backup. Prefer personal keys)
• Delete default security groups for new VPCs

[vinayvenu]

Added to main list.

[1t5j0y]

URLs:
Staging
Prod
Jasper

Pending:

• Create prod db read replica.
• Change RDS instance classes for prod resources before going live.
• Use Avni sender id in SNS. Pending AWS support response. Done

[mahalakshme]

@1t5j0y considering u 've made so many commits this can be reviewed no?

[1t5j0y]

@mahalakshme changes made are configuration and can be checked as part of the 'technical review' mentioned in testing scope.

[himeshr]

URLs: Staging Prod Jasper

Pending:

• Create prod db read replica.
• Change RDS instance classes for prod resources before going live.
• Use Avni sender id in SNS. Pending AWS support response. Done

Reviewed changes and also verified RWB app overall functioning. Looks good.
Pending tasks are as listed in quoted comment.