aem-aws-stack-builder

aem-aws-stack-builder copied to clipboard

Custom Stack Provisioner pre step is currently executed before any fact initialisation. It was initially expected to be an independent set of provisioning steps that wouldn't need any Facter fact....

cliffano

Stack Manager is currently provisioned with no VPC. It should consume the VPC ID configured in network exports (or network VPC itself).

cliffano

Since permission type C does not allow the creation of instance profiles, roles, and DNS, we need the ability to create a CF stack which contains IAM and Route53 resources....

cliffano

Move generated system credentials storage to Secrets Manager or Parameter Store

1

Generated stack-specific system users passwords are currently stored in S3 and only encrypted at-rest. This has to be improved by storing either encrypted password or moving it all the way...

cliffano

New architecture for permission type a (v2.0.0 original app architecture)

1

During the effort to unify v1.x and v2.0.0 feature sets, we lost the original v2.0.0 app architecture. Now that master has the structure to support multiple architectures, v2.0.0 app architecture...

cliffano

Add deploy_on_init feature in full-set environment

1

Deploy on initialisation feature has been introduced for Consolidated architecture. The same thing needs to be applied to Full-Set architecture.

cliffano

All actions (e.g. export backup) currently sets `HOME` to `/root`, but it's not clear whether it's really needed, and whether it needs to be that location. Ideally it shouldn't. This...

cliffano

Live and recovery snapshot cleanups schedule is currently predefined, but different users would like to have different schedule, so these schedules need to be parameterised and be configurable on user...

cliffano

Similar to network-exports, instance-profiles-exports CF templates need to be added for aem/consolidated, aem/full-set, and stack-manager architectures. This is to support environments where instance profiles can't be created by the platform...

cliffano

packer-aem supports the ability to enable/disable the installation of collectd, but currently aem-aws-stack-builder mandates the configuration of collectd, making the assumption that collectd and the plugins are already installed. A...

cliffano