Multi-Account Architecture

Multi-Account Architecture An architecture diagram generated by Archify. Git Repo · desired state · Management Account Git Repo desired state ArgoCD · GitOps controller · Management Account · focal ArgoCD GitOps controller focal EKS Dev · target cluster · Dev Account EKS Dev target cluster EKS Staging · target cluster · Staging Account EKS Staging target cluster EKS Production · target cluster · Prod Account EKS Production target cluster pull manifests cross-account cross-account cross-account Management Account Dev Account Staging Account Prod Account Legend Backend Database Cloud

Management account

  • • ArgoCD runs once, centrally
  • • Git repository is the single source of desired state

Workload accounts

  • • Dev, staging, and production each in a separate AWS account
  • • ArgoCD reconciles each EKS cluster over a cross-account connection

IAM integration

  • • Use IAM Roles for Service Accounts (IRSA) for secure AWS API access