diff --git a/terragrunt/docs/README.md b/terragrunt/docs/README.md index 7ab1e3f4d..e1e9e23f3 100644 --- a/terragrunt/docs/README.md +++ b/terragrunt/docs/README.md @@ -2,12 +2,20 @@ ## Diagrams +- [High-Level Overview (DNS, Networking, ECS, and Data Flow)](#cdp-sirsi-application-high-level-overview-of-dns-networking-ecs-and-data-flow) +- [ECS and RDS Database Integration](#cdp-sirsi-application-ecs-and-rds-database-integration) +- [ECS and SQS Queue Integration](#cdp-sirsi-application-ecs-and-sqs-queue-integration) + +--- + ### CDP-SIRSI Application: High-Level Overview of DNS, Networking, ECS, and Data Flow This diagram provides an overview of the CDP-SIRSI application’s architecture, covering DNS records, load balancing, ECS services, and database connections. It includes key services and interactions but does not represent the complete implementation details. ![CDP-SIRSI-HLO-DNS-NET-ECS-DATA](./diagrams/CDP-SIRSI-HLO-DNS-NET-ECS-DATA.png) +--- + ### CDP-SIRSI Application: ECS and RDS Database Integration This diagram illustrates the integration between the ECS cluster and Amazon RDS databases for the CDP-SIRSI application. It shows how various product services within the ECS tasks, such as Authority, Data Sharing, and Organisation tasks, interact with the cdp-sirsi and cdp-sirsi-entity-verification databases. The IAM role: cdp-sirsi-ecs-task is permitted to securely pull credentials from AWS Secrets Manager, which manages the automatic weekly rotation of master database credentials. @@ -16,6 +24,8 @@ Additionally, the PG Admin Task is a tool used in the non-production environment ![CDP-SIRSI-ECS-RDS](./diagrams/CDP-SIRSI-ECS-RDS.png) +--- + ### CDP-SIRSI Application: ECS and SQS Queue Integration This diagram illustrates the integration between the ECS cluster and SQS queues for the CDP-SIRSI application. It shows how different services within the ECS tasks, such as Entity Verification and Organisation tasks, interact with both standard and dead-letter FIFO queues. The IAM role: cdp-sirsi-ecs-task is granted access to these SQS queues, allowing secure interaction and message handling. Queue attributes, including deduplication, message retention, and encryption with SSE-SQS, are highlighted to ensure system security and reliable message processing. diff --git a/terragrunt/docs/diagrams/CDP-SIRSI-ECS-RDS.png b/terragrunt/docs/diagrams/CDP-SIRSI-ECS-RDS.png index 85e31753c..69d2b5c78 100644 Binary files a/terragrunt/docs/diagrams/CDP-SIRSI-ECS-RDS.png and b/terragrunt/docs/diagrams/CDP-SIRSI-ECS-RDS.png differ diff --git a/terragrunt/docs/diagrams/CDP-SIRSI-ECS-SQS.png b/terragrunt/docs/diagrams/CDP-SIRSI-ECS-SQS.png index 4f22ef637..3f4b9d62d 100644 Binary files a/terragrunt/docs/diagrams/CDP-SIRSI-ECS-SQS.png and b/terragrunt/docs/diagrams/CDP-SIRSI-ECS-SQS.png differ diff --git a/terragrunt/docs/diagrams/CDP-SIRSI-HLO-DNS-NET-ECS-DATA.png b/terragrunt/docs/diagrams/CDP-SIRSI-HLO-DNS-NET-ECS-DATA.png index 49aa21d4b..156473708 100644 Binary files a/terragrunt/docs/diagrams/CDP-SIRSI-HLO-DNS-NET-ECS-DATA.png and b/terragrunt/docs/diagrams/CDP-SIRSI-HLO-DNS-NET-ECS-DATA.png differ