aws-quickstart / quickstart-ammos-smallsat-toolkit Goto Github PK

@andrew-glenn
Need a VPC Stack to come up as part of the pre-deployment. This VPC can be a pretty standard setup with:

• 3 private subnets (Application servers and ES index)
• 3 public subnets (ALB and an EC2 bastion)
• VPC Endpoint for SSM to instances in private SN

https://github.com/aws-quickstart/quickstart-nasa-jpl-cubs/blob/60320d39cc4c159874c691a6977ee9663b1028db/templates/ammos-cubs-ait.template.yaml#L18-L20

https://github.com/aws-quickstart/quickstart-nasa-jpl-cubs/blob/60320d39cc4c159874c691a6977ee9663b1028db/templates/ammos-cubs-ait.template.yaml#L93-L112

https://github.com/aws-quickstart/quickstart-nasa-jpl-cubs/blob/60320d39cc4c159874c691a6977ee9663b1028db/templates/ammos-cubs-editor.template.yaml#L104-L152

@andrew-glenn
We bring up a config bucket and want it to be auto-populated with a set of defaults/reference files taken from a public S3 bucket maintained by JPL.
I've penned the config bucket and custom resource which will populate said bucket in the config template, here, just need the lambda code which @andrew-glenn said he had handy

https://github.com/aws-quickstart/quickstart-nasa-jpl-cubs/blob/60320d39cc4c159874c691a6977ee9663b1028db/templates/ammos-cubs-ait.template.yaml#L142-L147

https://github.com/aws-quickstart/quickstart-nasa-jpl-cubs/blob/60320d39cc4c159874c691a6977ee9663b1028db/templates/ammos-cubs-ait.template.yaml#L132-L148

https://github.com/aws-quickstart/quickstart-nasa-jpl-cubs/blob/60320d39cc4c159874c691a6977ee9663b1028db/templates/ammos-cubs-editor.template.yaml#L185-L191

The ALB for this quickstart has an HTTPS listener set up to route traffic to the AIT Editor's target group if the Host for the request is editor.ammos-cubs-alb.cld.jpl.nasa.gov. SSL/TLS is being terminated at the ALB and traffic is being routed to port 80 on the registered target in the AIT Editor target group, however the registered target is listening for regular non-HTTPS traffic on port 80.

The ammos-cubs-editor.template.yaml CloudFormation template should be updated so that the EditorTargetGroup resource is using the HTTP protocol instead of HTTPS.

https://github.com/aws-quickstart/quickstart-ammos-smallsat-toolkit/blob/main/templates/ammos-cubs-editor.template.yaml#L94