Infrastructure

Ollie is deployed on AWS using Terraform. All infrastructure is defined in deploy/ and managed per-environment (test, prod). The application identifier is ollie.

Lambda Functions

Function Trigger Timeout Memory Key IAM Permissions

prod-ollie-api

API Gateway (prod-ollie, AWS IAM)

300s

default

execute-api:Invoke (User Service, Underwriting Service, LOC Service); Secrets Manager GetSecretValue (Zendesk credentials, Datadog API key)

Secrets Manager

All secrets are namespaced by environment (site/…​).

Secret Path Purpose

site/zendesk

Zendesk automation account email and API token used to create tickets, manage users, and apply macros

site/datadog

Datadog API key for Lambda layer instrumentation, referenced by ARN via DD_API_KEY_SECRET_ARN

API Gateway

Gateway Auth Purpose

prod-ollie

AWS IAM (SigV4)

Internal HTTP API. All routes (ANY /{proxy+}) forward to the prod-ollie-api Lambda. Accessed by FloatMe backend services and the mobile gateway.

Monitoring

Datadog SLOs are defined for the prod-ollie-api Lambda:

  • Error SLO — 99.9% target / 99.99% warning over 7-day and 30-day windows

Terraform Structure

All infrastructure is defined in deploy/:

File Contents

main.tf

AWS provider config, locals for derived names, and data sources for external resources

api.tf

prod-ollie-api Lambda and prod-ollie API Gateway v2 definition

variables.tf

All configurable parameters: environment, application, Zendesk credentials, Datadog keys, and service version

datadog.tf

Datadog SLO definitions and the Datadog service catalog entry (dd-service: ollie)

Related Pages