mirror of
https://github.com/anthropics/claude-code.git
synced 2026-08-19 14:43:32 +00:00
843297f6b1
Reference artifacts accompanying the Gateway-on-AWS walkthrough (https://code.claude.com/docs/en/claude-apps-gateway-on-aws), sibling to the existing examples/gateway/gcp assets: - setup.sh: scripts the walkthrough end to end via the aws CLI (security groups, IAM roles, ECR image build/push with gateway.yaml baked in, private-subnet RDS for PostgreSQL, Secrets Manager secrets, ECS Fargate service behind an internal ALB) - Dockerfile: distroless runtime image for the gateway; the Claude Code release binary is verified against an operator-supplied sha256 - gateway.yaml.example: config template (Bedrock upstream, Okta IdP) - terraform/: module provisioning the same architecture (ECS track) Provided as a working example to adapt, not a supported production deployment.
35 lines
1.1 KiB
HCL
35 lines
1.1 KiB
HCL
output "alb_dns_name" {
|
|
description = "Internal ALB DNS name. Alias your gateway hostname (the host in gateway.yaml's public_url) to this in a Route 53 private hosted zone — the *.elb.amazonaws.com name itself can't carry your ACM certificate."
|
|
value = aws_lb.gateway.dns_name
|
|
}
|
|
|
|
output "alb_zone_id" {
|
|
description = "ALB hosted zone ID, for the Route 53 alias record."
|
|
value = aws_lb.gateway.zone_id
|
|
}
|
|
|
|
output "image" {
|
|
description = "Image the service runs (build/push this separately — see README)."
|
|
value = local.image
|
|
}
|
|
|
|
output "ecr_repository_url" {
|
|
description = "ECR repository URL to push the gateway image to."
|
|
value = aws_ecr_repository.repo.repository_url
|
|
}
|
|
|
|
output "task_role_arn" {
|
|
description = "Gateway runtime task role (Bedrock invoke)."
|
|
value = aws_iam_role.task.arn
|
|
}
|
|
|
|
output "execution_role_arn" {
|
|
description = "ECS execution role (image pull + secret injection)."
|
|
value = aws_iam_role.execution.arn
|
|
}
|
|
|
|
output "db_endpoint" {
|
|
description = "RDS private endpoint (host only; the connection string lives in the gateway-postgres-url secret)."
|
|
value = aws_db_instance.db.address
|
|
}
|