Skip to content

Commit 419aa63

Browse files
vywang-awskrokoko
vywang-aws
and
krokoko
authored
update documentdb to reference amazon documentdb (#61)
Co-authored-by: Alain Krok <alkrok@amazon.com>
1 parent 8bb51b3 commit 419aa63

3 files changed

Lines changed: 48 additions & 48 deletions

File tree

‎plugins/deploy-on-aws/skills/deploy/references/cost-estimation.md‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ Use the **awspricing** MCP server to get accurate cost estimates before generati
1717
| Aurora PostgreSQL | `AmazonRDS` | Filter: `databaseEngine` = "Aurora PostgreSQL" |
1818
| Aurora MySQL | `AmazonRDS` | Filter: `databaseEngine` = "Aurora MySQL" |
1919
| RDS PostgreSQL | `AmazonRDS` | Filter: `databaseEngine` = "PostgreSQL" |
20-
| DocumentDB | `AmazonDocDB` | MongoDB-compatible managed database |
20+
| Amazon DocumentDB | `AmazonDocDB` | MongoDB-compatible managed database |
2121
| ALB | `AWSELB` | Application Load Balancer |
2222
| S3 | `AmazonS3` | Storage and requests |
2323
| CloudFront | `AmazonCloudFront` | CDN distribution |
@@ -54,9 +54,9 @@ Aurora Serverless v2 charges per ACU-hour (Aurora Capacity Unit).
5454

5555
- ~$180-360/month depending on load
5656

57-
## DocumentDB Serverless Pricing
57+
## Amazon DocumentDB Serverless Pricing
5858

59-
DocumentDB Serverless charges per DCU-hour (DocumentDB Capacity Unit),
59+
Amazon DocumentDB Serverless charges per DCU-hour (DocumentDB Capacity Unit),
6060
storage (GB-month), and I/O (standard config only).
6161

6262
- Minimum: 0.5 DCU
@@ -77,7 +77,7 @@ storage (GB-month), and I/O (standard config only).
7777
- Dev: ~$70-100/month
7878
- Production: ~$200-400/month
7979

80-
**Small web app (Fargate + DocumentDB Serverless + ALB):**
80+
**Small web app (Fargate + Amazon DocumentDB Serverless + ALB):**
8181

8282
- Dev: ~$70-155/month
8383
- Production: ~$200-450/month

‎plugins/deploy-on-aws/skills/deploy/references/defaults.md‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -30,28 +30,28 @@ Use `amplify_docs` topic in awsknowledge MCP for framework-specific guidance
3030

3131
## Database
3232

33-
| Data Pattern | Default (Dev) | Default (Prod) | Override Trigger |
34-
| -------------------- | ---------------------- | ---------------------- | -------------------------------------- |
35-
| PostgreSQL | Aurora Serverless v2 | Aurora Serverless v2 | "simple RDS" → RDS |
36-
| MySQL | Aurora Serverless v2 | Aurora Serverless v2 | "simple RDS" → RDS |
37-
| DocumentDB / MongoDB | DocumentDB Serverless | DocumentDB Serverless | "provisioned" → DocumentDB provisioned |
38-
| NoSQL / Key-Value | DynamoDB | DynamoDB | - |
39-
| Redis / Caching | ElastiCache Serverless | ElastiCache Serverless | - |
40-
| Full-text search | OpenSearch Serverless | OpenSearch Serverless | - |
33+
| Data Pattern | Default (Dev) | Default (Prod) | Override Trigger |
34+
| ------------------ | ---------------------------- | ---------------------------- | --------------------------------------------- |
35+
| PostgreSQL | Aurora Serverless v2 | Aurora Serverless v2 | "simple RDS" → RDS |
36+
| MySQL | Aurora Serverless v2 | Aurora Serverless v2 | "simple RDS" → RDS |
37+
| Document / MongoDB | Amazon DocumentDB Serverless | Amazon DocumentDB Serverless | "provisioned" → Amazon DocumentDB provisioned |
38+
| NoSQL / Key-Value | DynamoDB | DynamoDB | - |
39+
| Redis / Caching | ElastiCache Serverless | ElastiCache Serverless | - |
40+
| Full-text search | OpenSearch Serverless | OpenSearch Serverless | - |
4141

4242
### Why Aurora Serverless v2
4343

4444
Scales to near-zero in dev (0.5 ACU minimum), scales up automatically for production.
4545
Single choice works for both environments. Only use provisioned RDS if user has
4646
specific cost constraints or compliance requirements.
4747

48-
### Why DocumentDB Serverless for MongoDB
48+
### Why Amazon DocumentDB Serverless for MongoDB
4949

50-
DocumentDB Serverless is the on-demand, auto-scaling configuration of Amazon DocumentDB.
50+
Amazon DocumentDB Serverless is the on-demand, auto-scaling configuration of Amazon DocumentDB.
5151
It dynamically adjusts capacity based on application demand so you only pay for what you
5252
use. Ideal for dev/test, variable workloads, and new applications where capacity needs
5353
are unknown. Compatible with MongoDB 3.6, 4.0, 5.0 and 8.0 APIs.
54-
Use provisioned DocumentDB only when you have predictable, steady-state workloads
54+
Use provisioned Amazon DocumentDB only when you have predictable, steady-state workloads
5555
or specific compliance requirements that need fixed instance sizing.
5656

5757
## Storage

‎plugins/deploy-on-aws/skills/deploy/references/security.md‎

Lines changed: 33 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -21,15 +21,15 @@ Apply these patterns automatically when generating IaC:
2121

2222
## Encryption
2323

24-
| Component | Default (Dev) | Default (Prod) | Override Trigger |
25-
| --------------- | --------------------------- | -------------------------- | ---------------- |
26-
| S3 buckets | SSE-S3 (AES-256) | SSE-KMS (customer-managed) | "no encryption" |
27-
| RDS/Aurora | Encrypted (AWS-managed key) | Encrypted (CMK) | - |
28-
| DocumentDB | Encrypted (AWS-managed key) | Encrypted (CMK) | - |
29-
| EBS volumes | Encrypted | Encrypted | - |
30-
| ALB | TLS 1.2+ only | TLS 1.2+ only | - |
31-
| Secrets Manager | AWS-managed key | CMK | - |
32-
| CloudFront | TLS 1.2+ | TLS 1.2+ | - |
24+
| Component | Default (Dev) | Default (Prod) | Override Trigger |
25+
| ----------------- | --------------------------- | -------------------------- | ---------------- |
26+
| S3 buckets | SSE-S3 (AES-256) | SSE-KMS (customer-managed) | "no encryption" |
27+
| RDS/Aurora | Encrypted (AWS-managed key) | Encrypted (CMK) | - |
28+
| Amazon DocumentDB | Encrypted (AWS-managed key) | Encrypted (CMK) | - |
29+
| EBS volumes | Encrypted | Encrypted | - |
30+
| ALB | TLS 1.2+ only | TLS 1.2+ only | - |
31+
| Secrets Manager | AWS-managed key | CMK | - |
32+
| CloudFront | TLS 1.2+ | TLS 1.2+ | - |
3333

3434
### Why SSE-S3 for dev, SSE-KMS for prod
3535

@@ -56,13 +56,13 @@ When serving static content via CloudFront:
5656

5757
## VPC Placement
5858

59-
| Component | Default (Dev) | Default (Prod) |
60-
| ------------- | -------------------------------- | -------------------------------- |
61-
| Fargate tasks | Private subnet + NAT Gateway | Private subnet + NAT Gateway |
62-
| ALB | Public subnet | Public subnet |
63-
| RDS/Aurora | Private subnet (no public IP) | Private subnet (no public IP) |
64-
| DocumentDB | Private subnet (no public IP) | Private subnet (no public IP) |
65-
| Lambda | VPC-attached if DB access needed | VPC-attached if DB access needed |
59+
| Component | Default (Dev) | Default (Prod) |
60+
| ----------------- | -------------------------------- | -------------------------------- |
61+
| Fargate tasks | Private subnet + NAT Gateway | Private subnet + NAT Gateway |
62+
| ALB | Public subnet | Public subnet |
63+
| RDS/Aurora | Private subnet (no public IP) | Private subnet (no public IP) |
64+
| Amazon DocumentDB | Private subnet (no public IP) | Private subnet (no public IP) |
65+
| Lambda | VPC-attached if DB access needed | VPC-attached if DB access needed |
6666

6767
### Why private subnets for compute
6868

@@ -93,13 +93,13 @@ Consult `awsiac` MCP for IAM policy patterns by service.
9393

9494
## Security Groups
9595

96-
| Component | Default Inbound | Default Outbound |
97-
| ------------ | ---------------------------- | ------------------ |
98-
| ALB | 443 from 0.0.0.0/0 | Fargate SG only |
99-
| Fargate | ALB SG only (on app port) | 443 (HTTPS), DB SG |
100-
| RDS/Aurora | Fargate SG only (on DB port) | None |
101-
| DocumentDB | Fargate SG only (port 27017) | None |
102-
| Lambda (VPC) | None | 443, DB SG |
96+
| Component | Default Inbound | Default Outbound |
97+
| ----------------- | ---------------------------- | ------------------ |
98+
| ALB | 443 from 0.0.0.0/0 | Fargate SG only |
99+
| Fargate | ALB SG only (on app port) | 443 (HTTPS), DB SG |
100+
| RDS/Aurora | Fargate SG only (on DB port) | None |
101+
| Amazon DocumentDB | Fargate SG only (port 27017) | None |
102+
| Lambda (VPC) | None | 443, DB SG |
103103

104104
### Why deny-by-default
105105

@@ -156,15 +156,15 @@ Before deployment, run available checks:
156156

157157
## Logging & Monitoring
158158

159-
| Component | Default (Dev) | Default (Prod) |
160-
| --------------- | ---------------------- | -------------------------- |
161-
| CloudTrail | Account-level (shared) | Account-level (shared) |
162-
| VPC Flow Logs | Disabled | Enabled (S3 destination) |
163-
| ALB Access Logs | Disabled | Enabled (S3 destination) |
164-
| Container logs | CloudWatch Logs | CloudWatch Logs |
165-
| RDS/Aurora logs | Error log only | Error + slow query + audit |
166-
| DocumentDB logs | Profiler (slow ops) | Profiler + audit |
167-
| S3 Access Logs | Disabled | Enabled |
159+
| Component | Default (Dev) | Default (Prod) |
160+
| ---------------------- | ---------------------- | -------------------------- |
161+
| CloudTrail | Account-level (shared) | Account-level (shared) |
162+
| VPC Flow Logs | Disabled | Enabled (S3 destination) |
163+
| ALB Access Logs | Disabled | Enabled (S3 destination) |
164+
| Container logs | CloudWatch Logs | CloudWatch Logs |
165+
| RDS/Aurora logs | Error log only | Error + slow query + audit |
166+
| Amazon DocumentDB logs | Profiler (slow ops) | Profiler + audit |
167+
| S3 Access Logs | Disabled | Enabled |
168168

169169
### Why minimal logging in dev
170170

@@ -180,7 +180,7 @@ When user requests "production" or "prod", additionally enable:
180180
- [ ] ALB Access Logs
181181
- [ ] S3 Access Logs
182182
- [ ] RDS Performance Insights
183-
- [ ] DocumentDB profiler + audit logs exported to CloudWatch Logs
183+
- [ ] Amazon DocumentDB profiler + audit logs exported to CloudWatch Logs
184184
- [ ] AWS WAF on ALB (if public-facing web app)
185185
- [ ] GuardDuty (recommend, don't auto-enable)
186186
- [ ] Run `checkov` or `cfn-nag` before deployment

0 commit comments

Comments
 (0)