le-tf-infra-aws icon indicating copy to clipboard operation
le-tf-infra-aws copied to clipboard

Refactor the ref arch to use a per-environment ECR approach

Open diego-ojeda-binbash opened this issue 10 months ago • 0 comments

Describe the Feature

Currently the ECR approach is centralized on the Shared account. That should be changed to a per-environment (account) approach. That way every account would be in charge of keeping ECR in control and only resources in the same account would be allowed different kinds of access to such ECR repos. Images will be built and pushed to the dev ECR. Then, via ECR cross-account/cross-region replication, those images will be replicated to other accounts. For instance, DEV could replicate to STG, and STG could replicate to PRD; or alternatively the replication between STG and PRD could be conditional, based on tags or on a different logic.

Expected Behavior

Use Case

Describe Ideal Solution

Alternatives Considered

Additional Context

diego-ojeda-binbash avatar Apr 23 '24 18:04 diego-ojeda-binbash