AWS foundations

The AWS pieces MiniTickets lives in, from the account down to CloudFront.

Part of the path: read these pages in order.

1. Account and region

   What are an AWS account and a region, and why does MiniTickets use one of each?

2. VPC and subnets

   Why do the database and the cache sit in subnets the internet cannot reach?

3. Route tables, and why there is no NAT

   How does traffic know where to go, and how does MiniTickets work without a NAT gateway?

4. Security groups

   How does a security group decide who may connect, and how do you read one rule?

5. IAM roles

   What is the difference between a task role and a task execution role?

6. Secrets

   How does the API get the database password without it being in the code or the image?

7. RDS Postgres

   Where does the data live, who can reach it, and what happens when it is down?

8. ElastiCache Valkey

   What does the cache hold, and what happens to MiniTickets when it disappears?

9. ECR and container images

   Where do the images come from, and how does a task know which one to run?

10. ECS on Fargate

    How do a cluster, a service, a task definition and a task relate to each other?

11. Load balancer and target groups

    How does the load balancer pick a task, and what makes a target unhealthy?

12. DNS and certificates

    How does a browser find MiniTickets, and where does the HTTPS certificate come from?

13. CloudFront

    What does CloudFront add in front of the load balancer, and how does the load balancer trust it?