Shopix Production AWS Infrastructure
A full-stack ecommerce platform on a custom VPC across two availability zones: an internet-facing ALB in public subnets, application servers in private subnets, and RDS MySQL with no public exposure. Deploys run through GitHub Actions using OIDC, so no static AWS keys exist anywhere, and server access is through SSM rather than open SSH.
- AWS
- VPC
- ALB
- RDS
- ECR
- SSM
- OIDC
- GitHub Actions
- Docker
Architecture
Six subnets across two availability zones. The ALB sits in the public pair, application servers in the private pair, and RDS MySQL in a third pair with no public access. A NAT gateway gives private instances outbound access for pulling images and packages, with no inbound path back.
Access
No SSH port is open anywhere in the stack. Instance access goes through AWS Systems Manager, which means no key material to distribute and every session logged.
Deploys authenticate through GitHub OIDC and assume a role, so there are no static AWS credentials in the pipeline.
Status
The infrastructure was built, deployed and verified, then torn down to avoid running cost. The repository holds the configuration, architecture diagram and screenshots from the running system.