|
32 | 32 | ```mermaid
|
33 | 33 | mindmap
|
34 | 34 | root((Lambda in Private VPC))
|
35 |
| - Infra |
36 |
| - VPC |
37 |
| - Subnets |
38 |
| - Endpoints |
39 |
| - ACLs & SGs |
40 |
| - Compute |
41 |
| - LambdaHealth |
42 |
| - LambdaCRUD |
43 |
| - API |
44 |
| - API_Gateway |
45 |
| - CustomDomain |
46 |
| - Route53 |
47 |
| - Resilience |
48 |
| - ResilienceHub |
49 |
| - FIS |
50 |
| - WAFv2 |
51 |
| - CI_CD |
52 |
| - Linting |
53 |
| - SecurityScans |
54 |
| - Deploy |
55 |
| - Data |
56 |
| - DynamoDBGlobal |
57 |
| - DeadLetterSNS |
| 35 | + Infra((Infrastructure)) |
| 36 | + VPC((VPC)) |
| 37 | + Subnets((Subnets)) |
| 38 | + Endpoints((VPC Endpoints)) |
| 39 | + Networking((ACLs & SGs)) |
| 40 | + Compute((Compute)) |
| 41 | + HealthLambda((Healthcheck Lambda)) |
| 42 | + CrudLambda((CRUD Lambda)) |
| 43 | + API((API Layer)) |
| 44 | + Gateway((API Gateway)) |
| 45 | + Domain((Custom Domain)) |
| 46 | + DNS((Route 53 Failover)) |
| 47 | + Resilience((Resilience & DR)) |
| 48 | + ResHub((AWS Resilience Hub)) |
| 49 | + RTO_RPO((RTO & RPO Policies)) |
| 50 | + HA((High Availability)) |
| 51 | + DR((Disaster Recovery)) |
| 52 | + DR_Strategies((Recovery Strategies)) |
| 53 | + BackupRestore((Backup & Restore)) |
| 54 | + PilotLight((Pilot Light)) |
| 55 | + WarmStandby((Warm Standby)) |
| 56 | + MultiSite((Multi-site Active-Active)) |
| 57 | + BCP((Business Continuity Plan)) |
| 58 | + Data((Data)) |
| 59 | + DynamoDB((Global Table)) |
| 60 | + DLQ((Dead‑Letter SNS)) |
| 61 | + Security((Security)) |
| 62 | + WAF((AWS WAFv2)) |
| 63 | + IAM((IAM Roles & Policies)) |
| 64 | + NetworkACL((Network ACLs)) |
| 65 | + SecurityGroup((Security Groups)) |
| 66 | + CI_CD((CI/CD & Scanning)) |
| 67 | + Linting((cfn-lint)) |
| 68 | + CNag((cfn-nag)) |
| 69 | + Checkov((Checkov)) |
| 70 | + ZAP((ZAP API Scan)) |
| 71 | + Scorecard((OSSF Scorecard)) |
| 72 | + Actions((GitHub Actions)) |
| 73 | + Docs((Documentation)) |
| 74 | + Runbooks((Runbooks)) |
| 75 | + DRPlan((DR Plan)) |
| 76 | + BCPPlan((BCP Plan)) |
| 77 | + TechStack((Tech Stack)) |
| 78 | + |
| 79 | + classDef root fill:#ffcc00,stroke:#333,stroke-width:2px; |
| 80 | + classDef Infra,Compute,API,Resilience,Data,Security,CI_CD,Docs fill:#00ccff,stroke:#333; |
| 81 | + classDef DR_Strategies,RTO_RPO,HA,DR,BCP fill:#ff6666,stroke:#333; |
| 82 | + classDef VPC,Subnets,Endpoints,Networking fill:#99ee99,stroke:#333; |
| 83 | + classDef HealthLambda,CrudLambda fill:#cc99ff,stroke:#333; |
| 84 | + classDef Gateway,Domain,DNS fill:#ff99cc,stroke:#333; |
| 85 | + classDef DynamoDB,DLQ fill:#ffcc99,stroke:#333; |
| 86 | + classDef WAF,IAM,NetworkACL,SecurityGroup fill:#ff9966,stroke:#333; |
| 87 | + classDef Linting,CNag,Checkov,ZAP,Scorecard,Actions fill:#99ccff,stroke:#333; |
| 88 | + classDef Runbooks,DRPlan,BCPPlan,TechStack fill:#ccccff,stroke:#333; |
58 | 89 | ```
|
59 | 90 |
|
60 | 91 | ---
|
61 | 92 |
|
| 93 | +## 🚧 Disaster Recovery Strategies |
| 94 | + |
| 95 | +This section outlines the four main AWS disaster recovery patterns supported by this project: |
| 96 | + |
| 97 | +```mermaid |
| 98 | +flowchart TB |
| 99 | + style DR fill:#f9f,stroke:#333,stroke-width:2px |
| 100 | + DR[Disaster Recovery Strategies] |
| 101 | +
|
| 102 | + DR --> BR[Backup & Restore] |
| 103 | + DR --> PL[Pilot Light] |
| 104 | + DR --> WS[Warm Standby] |
| 105 | + DR --> MS[Multi-site Active-Active] |
| 106 | +
|
| 107 | + subgraph BR_Info [Backup & Restore] |
| 108 | + direction LR |
| 109 | + BR1>Data & Snapshots] |
| 110 | + BR2>Restore in New Region] |
| 111 | + end |
| 112 | +
|
| 113 | + subgraph PL_Info [Pilot Light] |
| 114 | + direction LR |
| 115 | + PL1>Minimal Infra Always On] |
| 116 | + PL2>Scale Up On Demand] |
| 117 | + end |
| 118 | +
|
| 119 | + subgraph WS_Info [Warm Standby] |
| 120 | + direction LR |
| 121 | + WS1>Scaled-Down Prod Copy] |
| 122 | + WS2>Instant Scale to Prod] |
| 123 | + end |
| 124 | +
|
| 125 | + subgraph MS_Info [Multi-site Active-Active] |
| 126 | + direction LR |
| 127 | + MS1>Full Production in All Regions] |
| 128 | + MS2>Global Load Balancing] |
| 129 | + end |
| 130 | +``` |
| 131 | + |
| 132 | +- **Backup & Restore**: Periodic backups of configuration and data; recovery time depends on restore duration. |
| 133 | +- **Pilot Light**: Core components running in standby; scale up non-critical services when needed. |
| 134 | +- **Warm Standby**: Fully functional but scaled-down duplicate environment; fast failover. |
| 135 | +- **Multi-site Active-Active**: Full environments in all regions; automatic global traffic distribution. |
| 136 | + |
| 137 | +--- |
| 138 | + |
62 | 139 | ## 🌐 Overview
|
63 | 140 |
|
64 | 141 | Run Lambda inside private subnets in two regions, with:
|
|
0 commit comments