Transition Dev environment Infrastructure to ECS

[shanice-skylight]

PULL REQUEST

Summary

1. Add workflows to complete the following actions:

• Run terraform plan and terraform apply
• Run trivy which will check for critical and high vulnerabilities in the terraform code
• Run tflint to ensure formatting is kept to standard

2. Using the terraform modules and resources below to create the 3 main elements necessary to run query connector:

• Using dibbs-ecr-viewer to create ecs resources to include all dependents
• Using vpc to create vpc resources to include all dependencies
• Using aws_db_instance resource to create the postgres database

3. Resources created manually:

• S3 bucket named query-connector-tfstate-dev, used to store the terraform tfstate

• IAM role named qc-github-role-skylight used by Github actions to complete actions in AWS account

  • Currently I am not using the OIDC provided in the dibbs-ecr-viewer module, this may be the solution to avoid manually creating this role in the future.

• Dynamodb table named query-connector-tfstate-lock-dev used to lock the tfstate file

• Related Issue

• Moved the infrastructure from EKS to ECS to expedite deployments and to match applications needs.

Fixes #

• Leveraged modules mentioned above to make the transition from EKS to ECS

Additional Information

Anything else the review team should know?

Checklist

• Descriptive Pull Request title
• Link to relevant issues
• Provide necessary context for design reviewers
• Update documentation

[nickclyde]

Looking great, just a few comments:

[shanice-skylight]

All comments addressed and review changes made, ready for last review.

[nickclyde]

Fantastic work! 🚀

[alismx]

It looks pretty ready! My comments are just about extra comments that have been left. While I'd love to see these cleaned up, I won't block it on that. Feel free to clean them up now or do a follow-up PR if that's easier. Approved!

[alismx]

This comment could be removed.

[alismx]

Since this is used internally by the qc team and not a template used by others, the comments in this section could be removed.