Infrastructure Control

[jambonrose]

The cloud infrastructure is currently outside of version control. That should be changed.

Some tool evaluation is necessary. I'd like to use Troposphere, but that involves introducing Python and Troposphere as a dependency. On the other hand, I could simply use a JSON file for the CloudFormation config, but that makes me unhappy as well, as hand-hacking JSON is prone to error.

Given that this is already a CloudFormation template, I think it'd be best to avoid Terraform, despite the fact that running on several clouds could be fun.

[jambonrose]

It is worth noting that I made manual changes to the infrastructure today, meaning the existing infrastructure JSON will be out of sync. Specifically:

CloudFront:

• HTTP 2 and IPv6 were both enabled on the site.
• TLS was upgraded from v1 to v1.1_2016

CloudFront Behavior:

• Default asset cache TTL is 2592000 seconds (30 days)

Error Pages:

• Error Message Cache Control headers set to 2592000 seconds (30 days)

It is worth considering whether the minimum Cache Control header should be changed from 86400 seconds (1 day) to 2592000 seconds (30 days). Or perhaps to 604800 seconds (7 days).