Production Guidance
Deployment examples and best practices for running All ID in production.
Overview
This section provides platform-specific deployment guides to help you run All ID in production. Each guide includes complete setup instructions, security configurations, monitoring, and operational best practices.
Deployment guides
AWS ECS
Complete guide for deploying All ID on AWS ECS Fargate with Application Load Balancer, RDS Aurora MySQL, and Cloud Map service discovery.
We provide two Infrastructure as Code (IaC) options:
AWS CDK (TypeScript)
Includes:
Infrastructure as Code using AWS CDK (TypeScript)
Network and security group configuration
ECS Fargate cluster setup
Aurora MySQL Serverless v2 database
Application Load Balancer with path-based routing
Multi-tenant deployment support
Complete step-by-step deployment instructions
The CDK guide includes a complete CDK project for automated infrastructure provisioning. Certta will provide the CDK code as part of the deployment package.
Terraform (HCL)
Includes:
Infrastructure as Code using Terraform (HCL)
Modular architecture with reusable modules
Network and security group configuration
ECS Fargate cluster setup
Aurora MySQL Serverless v2 database
Application Load Balancer with path-based routing
Multi-tenant deployment support
Complete step-by-step deployment instructions
State management best practices
The Terraform guide includes complete Terraform modules and configurations. Certta will provide the Terraform code as part of the deployment package.
Which IaC tool should I choose?
AWS CDK: Choose if you prefer TypeScript/JavaScript, want strong AWS integration, or have existing CDK expertise
Terraform: Choose if you prefer declarative HCL syntax, need multi-cloud support, or have existing Terraform expertise
Both options create identical infrastructure and are fully supported by Certta.
Other platforms
Additional deployment guides for other platforms (EKS, Kubernetes, Docker Compose) can be provided based on customer requirements. Contact your Certta technical account manager for assistance with alternative deployment platforms.
General best practices
Regardless of your deployment platform, follow these core principles:
High availability
Deploy across multiple availability zones
Use database replication with automatic failover
Configure health checks and readiness probes
Implement auto-scaling based on load metrics
Security
Deploy services in private networks
Use secrets management for credentials (never hardcode)
Implement IP whitelisting for Certta Router Service
See Security Best Practices for detailed security guidelines including network segmentation, encryption, and IP whitelisting.
Monitoring and operations
Set up alerting for CPU, memory, and error rates
Monitor database performance and connection pools
Track API latency and throughput
Enable automated database backups with 7+ days retention
Test restoration procedures regularly
Environment sizing
Balance cost with reliability based on environment:
Development/Testing:
Single instances of each service
Smaller database configurations
Minimal monitoring
Production:
Multi-instance deployments with auto-scaling
Multi-AZ database with replicas
Comprehensive monitoring and alerting
Start with a minimal production setup and scale based on actual usage patterns. Monitor costs and adjust resource allocations as needed.
Getting support
For deployment assistance:
Review platform-specific guides in this section
Consult Technical Requirements for resource specifications
Review Configuration for environment variables
Contact your Certta technical account manager for deployment support
Next steps
Choose your deployment platform and IaC tool:
AWS ECS with CDK (TypeScript)
AWS ECS with Terraform (HCL)
Review Technical Requirements for resource specifications
Prepare your infrastructure prerequisites
Follow the step-by-step deployment instructions
Configure monitoring and alerting
Validate your deployment
Last updated