Warren Parad
May 22, 2021

--

Isn't it a bit ridiculous to not use APIGW + Lambda function to do all of this at a fraction of the cost. Not to mention deploying tech directly to EC2 is not well maintainable.

These are manual steps and should be automated. Also you don't need nginx when an ALB will do. And EC2 should be dropped in favor of ECS with Fargate, then you don't need to manage instances at all. Thing of the security vulnerabilities you can avoid by trusting the upgrades to AWS to handle.

In 2021, it's also a bit irresponsible to have a guide that even suggests not using HTTPS. Non-TLS encrypted traffic is a security incident waiting to happen. ALWAYS include ACM for cert generation, Route53 for validation and redirect, and HTTPS port 443 TLS listener on your load balancer. It isn't an option to not.

--

--

Warren Parad
Warren Parad

Written by Warren Parad

CTO and Founder Authress, Complete Auth for B2B.

Responses (1)