Environments
-
Dev.. Qc(test) ... Stage(product owner).. Prod
-
only one prod
-
vpc-network/aws Account) per environment is better
-
why org accounts? sometimes env managed by team with iam account, least priveldge policy
-
good design ex? Ex prod has following resources and vpc , prod-vpc and prod-db
-
theoretical ::: same resources per env.
- non prod env, we destroy other resources /environments -script created destroyed
Ex destroying lamda fn
-Qc on/off with lambda fns that open Ec2 etc
- Ec2 with off service
Autoscaling in all prod
Resources in down times, resources to minimum..