Manual steps to be coded up

[antoinefalisse]

@sashasimkin these are the three steps we/I had to do manually to get things to work, could we "include" them in terraform instead? I would suggest we do it on the OpenCap side (parent project).

1. Add internet gateway to subnets
2. Add policy to retrieve secrets to ecs-task-execution-role
3. Create S3 bucket (https://github.com/stanfordnmbl/opencap-infrastructure/blob/main/production/backend.tf#L3)

If you see other critical steps after what we discussed, please fell free to suggest any changes that you think should be implemented (eg, for security reasons)

Thanks

[sashasimkin]

hey @antoinefalisse , thanks for listing these!

It would take me approximately 1 hr to implement these + 30 mins to scan the code and list possible critical failures.

Additionally, we'll need a meeting of around 1hr after I've implemented these to bring the resources that were created AdHoc under terraform management.

I should be able to complete these before EOW, however might expect a few delays depending on my workload.

Lmk if I should proceed.

[antoinefalisse]

Hey @sashasimkin, thanks. Please go for it.