Lab environment and trust boundaries

Lab environment and trust boundaries An architecture diagram generated by Archify. Management EKS · 1.36 / managed context · Architecture component Management EKS 1.36 / managed context Service EKS · 1.36 / service context · Architecture component Service EKS 1.36 / service context Aurora · SNS · SQS · Dedicated DB / event path · Architecture component Aurora · SNS · SQS Dedicated DB / event path Prometheus · Loki · Tempo · Grafana / management Collector · Architecture component Prometheus · Loki · Tempo Grafana / management Collector Prometheus + Collector · scrape / CRI logs / OTLP traces · Architecture component Prometheus + Collector scrape / CRI logs / OTLP traces CloudWatch Logs · Structured logs / AIOps · Architecture component CloudWatch Logs Structured logs / AIOps hosts collect SQL / events mTLS JSON logs Legend Backend Database Cloud

Explicit prerequisites

  • • Reviewed VPC, private subnets, routes, DNS and SGs
  • • TCP NLB forwarding plus endpoint client-certificate checks

Lab scope

  • • Single backends/DB writer are not production HA
  • • Karpenter, other backends and GitOps are separate extensions