Please enable JavaScript.

Coggle requires JavaScript to display documents.

CICD - Coggle Diagram

- - - - Managed by updating the weighted Alias pointing to Version X and X-1 (Alias aka Alias Routing Configuration)
      - Shifts traffic between Lambda Aliases
      - Integrate with SAM
    - - Canary
        
        X% shifted for T minutes, then remaining 100-X%
        
        Example: LambdaCanary10Percent5Minutes
      - Linear
        
        X% shifted every T minutes until 100%
        
        Example: LambdaLinear10PercentEvery10Minute
      - AllAtOnce
        
        Immediate 100% shift to new version
  - - - Replaces 'Task Sets' in the Service
    - - Load Balancer (ALB or NLB)
      - Two Target Groups (Blue and Green)
      - Two Listeners (Production and optional Test). Test Listener: run validation tests on "Green" tasks from Q&A team before shift real user traffic. pre-traffic validation or Dark Canary testing
    - - Reroute traffic only after success of optional Test Listener
      - Bake Time: Wait before terminating original Task Set
    - - Same Canary/Linear/AllAtOnce as Lambda
  - - - CodeDeploy Agent installed on instances (install via SSM)
      - IAM Instance Profile with S3/CodeDeploy permissions
      - appspec.yml in root of revision
    - - In-Place
        
        Stops app, installs new version, starts app
        
        Cons: Potential downtime, harder rollback
        
        Pros: No extra infrastructure costs
      - Blue/Green
        (EC2 only)
        
        Provisions new 'Green' instances (in a new ASG)
        
        Traffic rerouted via Load Balancer
        
        Old 'Blue' instances terminated after success
    - - OneAtATime: Max availability, slow
      - HalfAtATime: 50% must remain healthy
      - AllAtOnce: Fastest, highest risk of downtime
      - Custom
  - - - BeforeInstall -> AfterInstall -> ApplicationStart -> ValidateService
    - - BeforeAllowTraffic -> AfterAllowTraffic
    - - Automatic on CloudWatch Alarms or Deployment Failure
  - - - ApplicationStop
        
        Gracefully stop the current application and drain connections.
      - BeforeInstall
        
        Prepare the environment, such as decrypting files or creating backups.
      - AfterInstall
        
        Configure the app or set permissions after files are copied.
      - ApplicationStart
        
        Restart services/processes that were stopped for the new version.
      - ValidateService
        
        Final smoke tests to verify the deployment is healthy and reachable.
      - DownloadBundle
        
        (cannot be scripted)
      - Install
        
        (cannot be scripted)
    - - BeforeAllowTraffic
        
        Lambda validation function runs before any traffic shifts to the new version.
      - AfterAllowTraffic
        
        Lambda validation function runs after all traffic has shifted to the new version.
      - AllowTraffic
        
        (cannot be scripted)
    - - BeforeInstall
        
        Tasks to run before the replacement (Green) task set is created.
      - AfterInstall
        
        Tasks after Green tasks are created but before they are registered with listeners.
      - AfterAllowTestTraffic
        
        (cannot be scripted) Validation tests hit the Test Listener port to check Green tasks internally.
      - BeforeAllowTraffic
        
        Final checks before production traffic begins shifting to the Green task set.
      - AfterAllowTraffic
        
        Post-deployment logic once 100% of production traffic is on the new version.
      - Install
        
        (cannot be scripted)
      - AllowTraffic
        
        (cannot be scripted)
      - AllowTestTraffic
        
        (cannot be scripted)