y0zg / eks-web-application

EKS Demo Lab

This demo environment is set up with a few significant flaws that should not be replicated in production environments. These flaws are intentional, except for the ones that weren't ;).

The sole purpose of this demo environment is to identify flaws by using third party tools to identify "opportunities for improvement." Don't use this as an example of my work, unless you're looking for a cautionary tale.

Flaws

1. An outdated version of Ubuntu and MongoDB are used for the MongoDB server
2. Logs are directly written to a public S3 bucket
3. IMDSv2 is not enabled
4. The EKS cluster is not configured to use a private endpoint
5. MongoDB instance EBS volumes are not encrypted
6. The MongoDB instance is not configured to use TLS
7. The MongoDB instance profile has overly permissive IAM permissions
8. ECS images are not scanned for vulnerabilities
9. And more!

Requirements

Name	Version
terraform	>=1.5.7
aws	>=5.17.0
helm	2.11.0
kubectl	1.14.0
kubernetes	2.23.0
local	2.4.0
null	3.2.1
random	3.5.1
time	>=0.9.1
tls	4.0.4

Providers

Name	Version
aws	5.17.0
aws.virginia	5.17.0
kubernetes	2.23.0
local	2.4.0
null	3.2.1
random	3.5.1
tls	4.0.4

Inputs

Name	Description	Type	Default	Required
common_tags	Common variables for all modules	map(string)	n/a	yes
mongodb_version	Version of MongoDB to install	string	n/a	yes

Outputs

Name	Description
ami_creation_date	Old Ubuntu AMI creation date
ami_id	Old Ubuntu AMI ID
instance_id	MongoDB instance ID
mongodb_connection_string	MongoDB connection string
mongodb_password	MongoDB password
ssh_key_filename	MongoDB SSH command