AWS Work

Some more AWS work remains to be done (and more in comments below):

• Create new prod and stage S3 buckets for the Yari document content, static and sitemap files (dev has already been created)
• Create new AWS IAM user (and associated IAM policies that are restricted to the tasks of the deployer) with programmatic credentials for running the deployer within GitHub Actions
• Define changes and change plan required for primary stage and prod CDN’s. Can we re-use our current primary stage and prod CDN’s and simply apply our new behaviors and some associated Lambda functions at launch time, or do we need to create fresh CDN’s and have AWS-Support help us switch the CNAME’s from the old CDN’s to the new ones? ANSWER: After discussing this with @limed, we will create fresh CDN’s and have AWS-Support help us switch the CNAME’s from the old CDN’s to the new ones.
• Create the new CloudFront distribution for Yari stage (this will replace the existing stage CDN on launch day)
  • Define new Group origin with the mdn-content-stage S3 bucket as its primary origin and the stage ELB (public access point for the stage Django services) as its secondary origin for 404 fail-overs
  • Define new behaviors
• Create the new CloudFront distribution for Yari prod (this will replace the existing prod CDN on launch day)
  • Define new Group origin with the mdn-content-prod S3 bucket as its primary origin and the prod ELB (public access point for the prod Django services) as its secondary origin for 404 fail-overs
  • Define new behaviors

- [ ] Create Lambda function mdn-content-origin-response in the us-east-1 region for handling “fundamental” redirects (this might not be strictly necessary since we will fail-over to Django and Django already handles the fundamental redirects) NOTE: This was not needed. We handle the fundamental redirects within our mdn-content-origin-request Lambda@Edge function.

[peterbe]

Besides, when you say “stage” you mean something like developer.allizom.org, right? Not individual PR builds.

[escattone]

This is done.