Team1 (하닉없음) — AWS Infrastructure

727646470302 · ap-northeast-2 · vpc-0550e9c9b61d67293 (10.4.0.0/16)
live · 2026-07-27 14:59:50 UTC
CLIENT (BROWSER)
DNSRoute 53jhyang.click · Z02664203AD2MVF7427GE
api.jhyang.click→dualstack.k8s-team1shared-8cd80ddf48-432736844.ap-northeast-2.elb.amazonaws.com
diagram.jhyang.click→d-p0k4aursp7.execute-api.ap-northeast-2.amazonaws.com
grafana.jhyang.click→dualstack.k8s-team1shared-8cd80ddf48-432736844.ap-northeast-2.elb.amazonaws.com
monitor.jhyang.click→dualstack.k8s-team1shared-8cd80ddf48-432736844.ap-northeast-2.elb.amazonaws.com
omok.jhyang.click→d1iaf8z86m6g2i.cloudfront.net
omok.*
api.* / monitor.* / grafana.*
CDNCloudFront
E2DY5SXDS0HIEB
omok.jhyang.click · origin team1-s3-frontend.s3.ap-northeast-2.amazonaws.com
OAC
S3team1-s3-frontend
React build
VPC team1-vpc · 10.4.0.0/16
IGW team1-vpc-igw · EKS team1-eks 1.36 · 노드그룹 4대 (min1/max4)  LIVEcluster nodes 4 · running pods 43 · avg node CPU 5% / Mem 40%
ALBinternet-facing
k8s-team1shared-8cd80ddf48
api.jhyang.click → k8s-default-team1bac-9987a7c31e:8080
monitor.jhyang.click → k8s-default-team1mon-858213a466:8080
grafana.jhyang.click → k8s-monitori-kubeprom-9c0622d614:1
LIVEWorkloads Container Insights, replicas
team1-backend desired 2 / ready 2
team1-monitor desired 1 / ready 1
grafana desired 1 / ready 1
AZ ap-northeast-2a
public · 10.4.1.0/24
NAT GWteam1-ngw-a
private · 10.4.2.0/24
EC2t3.medium ×2
avg CPU 6% · avg Mem 51% · ready 2/2
data (isolated) · 10.4.5.0/24
ElastiCacheredis 7.1.0
team1-elasticache-redis-v2-001 · cache.t3.micro
AZ ap-northeast-2b
public · 10.4.3.0/24
NAT GWteam1-ngw-b
private · 10.4.4.0/24
EC2t3.medium ×2
avg CPU 4% · avg Mem 29% · ready 2/2
data (isolated) · 10.4.6.0/24
ElastiCacheredis 7.1.0
team1-elasticache-redis-v2-002, team1-elasticache-redis-v2-003 · cache.t3.micro
RDSmysql 8.4.9
team1-rds-data · db.t3.micro
Regional
ACMdiagram.jhyang.click, jhyang.click
ECRregistry
team1/ecr : prod-e2f8518
team1/monitor : latest
tag: 최근 push 기준, 배포본과 별개
Secrets & access IRSA
team1/backend/secrets
team1/monitoring/grafana-admin
IAM: team1-alb-controller-irsa, team1-backend-irsa, team1-ebs-csi-irsa, team1-grafana-irsa, team1-monitoring-secrets-irsa
S3team1-s3-profile
CWCloudWatch
team1-backend-overview

IAM / Secrets 접근 경로 (출처: IAM Role trust policy + 첨부 정책, 실시간 조회)

K8s ServiceAccount (OIDC sub)IAM Role접근 가능 리소스
system:serviceaccount:kube-system:aws-load-balancer-controllerteam1-alb-controller-irsa*, *, *, *
system:serviceaccount:default:team1-backend-sateam1-backend-irsa*, secrets-9Nd1bh, *, team1-s3-profile
system:serviceaccount:kube-system:ebs-csi-controller-sateam1-ebs-csi-irsa*, *, *, *
system:serviceaccount:monitoring:grafanateam1-grafana-irsa*
system:serviceaccount:monitoring:monitoring-secrets-sateam1-monitoring-secrets-irsagrafana-admin-OrswhC

CloudWatch · team1-backend-overview

ALB → EKS → RDS → ElastiCache → CloudFront → error logs

Scope