feat: Add ECS Fargate infrastructure and deployment configuration#362

Merged

Sancus merged 16 commits intostagefrom

feat/ecs-fargate-migration

Feb 26, 2026

Commits on Feb 14, 2026

feat: deploy ATN stage infra on ECS Fargate with VPC peering and smoke test
Jonathan Alvarez Delgado
committed
feat: add GuardDuty post-destroy cleanup script
Jonathan Alvarez Delgado
committed
feat: add resource tagging, fix Fargate task role, and harden secrets policies
Jonathan Alvarez Delgado
committed

Commits on Feb 15, 2026

feat: add read-only health check command for ECS deployment validation
Jonathan Alvarez Delgado
committed
refactor: tighten ro_healthcheck safety enforced RO session, sanitised output)
Jonathan Alvarez Delgado
committed
feat: add ECS autoscaling and IaC validation workflow
Jonathan Alvarez Delgado
committed

Commits on Feb 16, 2026

fix(healthcheck): use canonical ES client and improve DB failure diagnostics
Jonathan Alvarez Delgado
committed
fix(stage settings): correct cache prefix and drop legacy CORS override helper
Jonathan Alvarez Delgado
committed
feat(pulumi): make default VPC ingress SGs configurable, run ECS services with settings_local_stage
Jonathan Alvarez Delgado
committed

Commits on Feb 17, 2026

fix(stage settings): use RDS endpoint for slave DB and correct ES hostname
Jonathan Alvarez Delgado
committed
fix(scripts): add retry backoff to guardduty-cleanup for ENI release timing
Jonathan Alvarez Delgado
committed

Commits on Feb 18, 2026

security: move Redis and ES endpoints to Secrets Manager, remove hardcoded metadata
Jonathan Alvarez Delgado
committed
security: scope PassRole to specific cron roles, remove Resource wildcard
Jonathan Alvarez Delgado
committed
feat(ci): add stage deploy workflow with preview-only mode and safety scaling
Jonathan Alvarez Delgado
committed
fix(ci): suspend autoscaling before scale-to-0, add workflow paths to validate filter
Jonathan Alvarez Delgado
committed
style: ruff format __main__.py
Jonathan Alvarez Delgado
committed