dependencies.mmd
Part of the StackToIT package, published unchanged. A file of a proposal: nothing here is approved or applied.
%% PROPOSAL — generated by StackToIT Assess. Architect review required before any decision.
%% Run `f6267c3f-2848-4aa5-89df-5fee8b15b3b9` · source digest `sha256:812c5ae3f6cc8530163abbf5b6fbe305ed3b363c4886ec6b87623db857ea0c70`
flowchart LR
subgraph CURRENT["Current (source)"]
n0_c["module.dependencies.module.dynamodb_carts.aws_dynamodb_table.this<br/><small>aws_dynamodb_table</small>"]:::redesign
n1_c["module.retail_app_ecs.aws_cloudwatch_log_group.ecs_tasks<br/><small>aws_cloudwatch_log_group</small>"]:::reconfigure
n2_c["module.retail_app_ecs.aws_ecs_cluster.cluster<br/><small>aws_ecs_cluster</small>"]:::replatform
n3_c["module.retail_app_ecs.aws_kms_key.cmk<br/><small>aws_kms_key</small>"]:::reconfigure
n4_c["module.retail_app_ecs.module.carts_service.aws_iam_role.task_execution_role<br/><small>aws_iam_role</small>"]:::reconfigure
n5_c["module.retail_app_ecs.module.checkout_service.aws_iam_role.task_execution_role<br/><small>aws_iam_role</small>"]:::reconfigure
n6_c["module.retail_app_ecs.module.ui_service.aws_iam_role.task_execution_role<br/><small>aws_iam_role</small>"]:::reconfigure
n7_c["module.vpc.module.vpc.aws_eip.nat<br/><small>aws_eip</small>"]:::reconfigure
n8_c["module.vpc.module.vpc.aws_vpc.this<br/><small>aws_vpc</small>"]:::reconfigure
n9_c["module.retail_app_ecs.aws_secretsmanager_secret.catalog_opensearch<br/><small>aws_secretsmanager_secret</small>"]:::reconfigure
n10_c["module.retail_app_ecs.module.alb.aws_security_group.this<br/><small>aws_security_group</small>"]:::reconfigure
n11_c["module.retail_app_ecs.module.alb_sg.aws_security_group.this_name_prefix<br/><small>aws_security_group</small>"]:::reconfigure
n12_c["module.retail_app_ecs.module.carts_service.aws_iam_role.task_role<br/><small>aws_iam_role</small>"]:::reconfigure
n13_c["module.retail_app_ecs.module.carts_service.aws_security_group.this<br/><small>aws_security_group</small>"]:::reconfigure
n14_c["module.retail_app_ecs.module.catalog_service.aws_iam_role.task_role<br/><small>aws_iam_role</small>"]:::reconfigure
n15_c["module.retail_app_ecs.module.catalog_service.aws_security_group.this<br/><small>aws_security_group</small>"]:::reconfigure
n16_c["module.retail_app_ecs.module.checkout_service.aws_iam_role.task_role<br/><small>aws_iam_role</small>"]:::reconfigure
n17_c["module.retail_app_ecs.module.checkout_service.aws_security_group.this<br/><small>aws_security_group</small>"]:::reconfigure
n18_c["module.retail_app_ecs.module.orders_service.aws_iam_role.task_role<br/><small>aws_iam_role</small>"]:::reconfigure
n19_c["module.retail_app_ecs.module.orders_service.aws_security_group.this<br/><small>aws_security_group</small>"]:::reconfigure
n20_c["module.retail_app_ecs.module.ui_service.aws_iam_role.task_role<br/><small>aws_iam_role</small>"]:::reconfigure
n21_c["module.retail_app_ecs.module.ui_service.aws_security_group.this<br/><small>aws_security_group</small>"]:::reconfigure
n22_c["module.vpc.module.vpc.aws_nat_gateway.this<br/><small>aws_nat_gateway</small>"]:::reconfigure
n23_c["module.dependencies.aws_security_group.catalog_opensearch_sg<br/><small>aws_security_group</small>"]:::reconfigure
n24_c["module.dependencies.aws_security_group.mq<br/><small>aws_security_group</small>"]:::reconfigure
n25_c["module.dependencies.module.catalog_rds.aws_security_group.this<br/><small>aws_security_group</small>"]:::reconfigure
n26_c["module.dependencies.module.checkout_elasticache_redis.module.aws_security_group.aws_security_group.cbd<br/><small>aws_security_group</small>"]:::reconfigure
n27_c["module.dependencies.module.orders_rds.aws_security_group.this<br/><small>aws_security_group</small>"]:::reconfigure
n28_c["module.retail_app_ecs.module.alb.aws_lb.this<br/><small>aws_lb</small>"]:::reconfigure
n29_c["module.retail_app_ecs.module.carts_service.aws_ecs_service.this<br/><small>aws_ecs_service</small>"]:::replatform
n30_c["module.dependencies.aws_mq_broker.mq<br/><small>aws_mq_broker</small>"]:::reconfigure
n31_c["module.dependencies.module.catalog_opensearch.aws_opensearch_domain.this<br/><small>aws_opensearch_domain</small>"]:::replatform
n32_c["module.dependencies.module.catalog_rds.aws_rds_cluster.this<br/><small>aws_rds_cluster</small>"]:::replatform
n33_c["module.dependencies.module.checkout_elasticache_redis.aws_elasticache_replication_group.default<br/><small>aws_elasticache_replication_group</small>"]:::reconfigure
n34_c["module.dependencies.module.orders_rds.aws_rds_cluster.this<br/><small>aws_rds_cluster</small>"]:::replatform
n35_c["module.retail_app_ecs.aws_secretsmanager_secret.catalog_db<br/><small>aws_secretsmanager_secret</small>"]:::reconfigure
n36_c["module.retail_app_ecs.aws_secretsmanager_secret.mq<br/><small>aws_secretsmanager_secret</small>"]:::reconfigure
n37_c["module.retail_app_ecs.aws_secretsmanager_secret.orders_db<br/><small>aws_secretsmanager_secret</small>"]:::reconfigure
n38_c["module.retail_app_ecs.module.catalog_service.aws_iam_role.task_execution_role<br/><small>aws_iam_role</small>"]:::reconfigure
n39_c["module.retail_app_ecs.module.orders_service.aws_iam_role.task_execution_role<br/><small>aws_iam_role</small>"]:::reconfigure
n40_c["module.retail_app_ecs.module.catalog_service.aws_ecs_service.this<br/><small>aws_ecs_service</small>"]:::replatform
n41_c["module.retail_app_ecs.module.orders_service.aws_ecs_service.this<br/><small>aws_ecs_service</small>"]:::replatform
n42_c["module.retail_app_ecs.module.checkout_service.aws_ecs_service.this<br/><small>aws_ecs_service</small>"]:::replatform
n43_c["module.retail_app_ecs.module.ui_service.aws_ecs_service.this<br/><small>aws_ecs_service</small>"]:::replatform
n44_c["module.vpc.module.vpc.aws_internet_gateway.this<br/><small>aws_internet_gateway</small>"]:::reconfigure
n45_c["module.vpc.module.vpc.aws_route_table.private<br/><small>aws_route_table</small>"]:::reconfigure
n46_c["module.vpc.module.vpc.aws_route_table.public<br/><small>aws_route_table</small>"]:::reconfigure
n47_c["module.vpc.module.vpc.aws_subnet.private<br/><small>aws_subnet</small>"]:::reconfigure
n48_c["module.vpc.module.vpc.aws_subnet.public<br/><small>aws_subnet</small>"]:::reconfigure
end
subgraph TARGET["Proposed STACKIT target — PROPOSAL, architect review required"]
n0_t["STACKIT MongoDB Flex (alternative — data-model redesign; PostgreSQL Flex JSONB is the other option)<br/><small>REDESIGN · MEDIUM</small>"]:::redesign
n1_t["STACKIT Logs<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n2_t["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · MEDIUM</small>"]:::replatform
n3_t["STACKIT KMS<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n4_t["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n5_t["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n6_t["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n7_t["implicit (belongs to the NAT gateway)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n8_t["STACKIT project networking / Network Area (SNA)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n9_t["STACKIT Secrets Manager<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n10_t["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n11_t["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n12_t["STACKIT service account for the workload<br/><small>RECONFIGURE · LOW</small>"]:::reconfigure
n13_t["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n14_t["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n15_t["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n16_t["STACKIT service account for the workload<br/><small>RECONFIGURE · LOW</small>"]:::reconfigure
n17_t["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n18_t["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n19_t["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n20_t["STACKIT service account for the workload<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n21_t["STACKIT security group<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n22_t["implicit outbound (STACKIT network)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n23_t["not written by this draft (stackit_security_group, stackit_security_group_rule)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n24_t["not written by this draft (stackit_security_group, stackit_security_group_rule)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n25_t["not written by this draft (stackit_security_group, stackit_security_group_rule)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n26_t["not written by this draft (stackit_security_group, stackit_security_group_rule)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n27_t["not written by this draft (stackit_security_group, stackit_security_group_rule)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n28_t["STACKIT Application Load Balancer<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n29_t["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · LOW</small>"]:::replatform
n30_t["STACKIT RabbitMQ<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n31_t["STACKIT OpenSearch<br/><small>REPLATFORM · LOW</small>"]:::replatform
n32_t["STACKIT MariaDB<br/><small>REPLATFORM · LOW</small>"]:::replatform
n33_t["STACKIT Key Value Store (Valkey)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n34_t["STACKIT PostgreSQL Flex<br/><small>REPLATFORM · MEDIUM</small>"]:::replatform
n35_t["STACKIT Secrets Manager<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n36_t["STACKIT Secrets Manager<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n37_t["STACKIT Secrets Manager<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n38_t["STACKIT service account for the workload<br/><small>RECONFIGURE · LOW</small>"]:::reconfigure
n39_t["STACKIT service account for the workload<br/><small>RECONFIGURE · LOW</small>"]:::reconfigure
n40_t["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · LOW</small>"]:::replatform
n41_t["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · LOW</small>"]:::replatform
n42_t["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · MEDIUM</small>"]:::replatform
n43_t["STACKIT Kubernetes Engine (SKE)<br/><small>REPLATFORM · MEDIUM</small>"]:::replatform
n44_t["implicit (STACKIT network default gateway)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n45_t["implicit (STACKIT network default routing)<br/><small>RECONFIGURE · LOW</small>"]:::reconfigure
n46_t["implicit (STACKIT network default routing)<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n47_t["STACKIT network<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
n48_t["STACKIT network<br/><small>RECONFIGURE · MEDIUM</small>"]:::reconfigure
end
n7_c --> n44_c
n7_t --> n44_t
n9_c --> n3_c
n9_t --> n3_t
n10_c --> n8_c
n10_t --> n8_t
n11_c --> n8_c
n11_t --> n8_t
n12_c --> n0_c
n12_t --> n0_t
n12_c --> n1_c
n12_t --> n1_t
n13_c --> n8_c
n13_t --> n8_t
n14_c --> n1_c
n14_t --> n1_t
n15_c --> n8_c
n15_t --> n8_t
n16_c --> n0_c
n16_t --> n0_t
n16_c --> n1_c
n16_t --> n1_t
n17_c --> n8_c
n17_t --> n8_t
n18_c --> n1_c
n18_t --> n1_t
n19_c --> n8_c
n19_t --> n8_t
n20_c --> n1_c
n20_t --> n1_t
n21_c --> n8_c
n21_t --> n8_t
n22_c --> n7_c
n22_t --> n7_t
n22_c --> n44_c
n22_t --> n44_t
n22_c --> n48_c
n22_t --> n48_t
n23_c --> n15_c
n23_t --> n15_t
n23_c --> n8_c
n23_t --> n8_t
n24_c --> n19_c
n24_t --> n19_t
n24_c --> n8_c
n24_t --> n8_t
n25_c --> n15_c
n25_t --> n15_t
n25_c --> n8_c
n25_t --> n8_t
n26_c --> n17_c
n26_t --> n17_t
n26_c --> n8_c
n26_t --> n8_t
n27_c --> n19_c
n27_t --> n19_t
n27_c --> n8_c
n27_t --> n8_t
n28_c --> n10_c
n28_t --> n10_t
n28_c --> n11_c
n28_t --> n11_t
n28_c --> n48_c
n28_t --> n48_t
n28_c --> n8_c
n28_t --> n8_t
n29_c --> n0_c
n29_t --> n0_t
n29_c --> n1_c
n29_t --> n1_t
n29_c --> n2_c
n29_t --> n2_t
n29_c --> n4_c
n29_t --> n4_t
n29_c --> n12_c
n29_t --> n12_t
n29_c --> n13_c
n29_t --> n13_t
n29_c --> n47_c
n29_t --> n47_t
n29_c --> n8_c
n29_t --> n8_t
n30_c --> n24_c
n30_t --> n24_t
n30_c --> n47_c
n30_t --> n47_t
n31_c --> n23_c
n31_t --> n23_t
n31_c --> n47_c
n31_t --> n47_t
n32_c --> n25_c
n32_t --> n25_t
n32_c --> n47_c
n32_t --> n47_t
n33_c --> n26_c
n33_t --> n26_t
n33_c --> n47_c
n33_t --> n47_t
n34_c --> n27_c
n34_t --> n27_t
n34_c --> n47_c
n34_t --> n47_t
n35_c --> n32_c
n35_t --> n32_t
n35_c --> n3_c
n35_t --> n3_t
n36_c --> n30_c
n36_t --> n30_t
n37_c --> n34_c
n37_t --> n34_t
n38_c --> n3_c
n38_t --> n3_t
n38_c --> n35_c
n38_t --> n35_t
n38_c --> n9_c
n38_t --> n9_t
n39_c --> n3_c
n39_t --> n3_t
n39_c --> n36_c
n39_t --> n36_t
n39_c --> n37_c
n39_t --> n37_t
n40_c --> n31_c
n40_t --> n31_t
n40_c --> n1_c
n40_t --> n1_t
n40_c --> n2_c
n40_t --> n2_t
n40_c --> n35_c
n40_t --> n35_t
n40_c --> n9_c
n40_t --> n9_t
n40_c --> n38_c
n40_t --> n38_t
n40_c --> n14_c
n40_t --> n14_t
n40_c --> n15_c
n40_t --> n15_t
n40_c --> n47_c
n40_t --> n47_t
n40_c --> n8_c
n40_t --> n8_t
n41_c --> n1_c
n41_t --> n1_t
n41_c --> n2_c
n41_t --> n2_t
n41_c --> n36_c
n41_t --> n36_t
n41_c --> n37_c
n41_t --> n37_t
n41_c --> n39_c
n41_t --> n39_t
n41_c --> n18_c
n41_t --> n18_t
n41_c --> n19_c
n41_t --> n19_t
n41_c --> n47_c
n41_t --> n47_t
n41_c --> n8_c
n41_t --> n8_t
n42_c --> n33_c
n42_t --> n33_t
n42_c --> n1_c
n42_t --> n1_t
n42_c --> n2_c
n42_t --> n2_t
n42_c --> n5_c
n42_t --> n5_t
n42_c --> n16_c
n42_t --> n16_t
n42_c --> n17_c
n42_t --> n17_t
n42_c --> n41_c
n42_t --> n41_t
n42_c --> n47_c
n42_t --> n47_t
n42_c --> n8_c
n42_t --> n8_t
n43_c --> n1_c
n43_t --> n1_t
n43_c --> n2_c
n43_t --> n2_t
n43_c --> n29_c
n43_t --> n29_t
n43_c --> n40_c
n43_t --> n40_t
n43_c --> n42_c
n43_t --> n42_t
n43_c --> n41_c
n43_t --> n41_t
n43_c --> n6_c
n43_t --> n6_t
n43_c --> n20_c
n43_t --> n20_t
n43_c --> n21_c
n43_t --> n21_t
n43_c --> n47_c
n43_t --> n47_t
n43_c --> n8_c
n43_t --> n8_t
n44_c --> n8_c
n44_t --> n8_t
n45_c --> n22_c
n45_t --> n22_t
n45_c --> n47_c
n45_t --> n47_t
n45_c --> n8_c
n45_t --> n8_t
n46_c --> n44_c
n46_t --> n44_t
n46_c --> n48_c
n46_t --> n48_t
n46_c --> n8_c
n46_t --> n8_t
n47_c --> n8_c
n47_t --> n8_t
n48_c --> n8_c
n48_t --> n8_t
classDef direct fill:#ffffff,stroke:#10201d
classDef reconfigure fill:#fbe8bd,stroke:#a8700f
classDef replatform fill:#d8e5fa,stroke:#2f5fb3
classDef containerize fill:#cde9f5,stroke:#1b6e96
classDef redesign fill:#fbdad3,stroke:#c0392b
classDef manual fill:#f6d6e0,stroke:#a23a62,stroke-dasharray:4 3
classDef blocked fill:#f1b7ae,stroke:#8e1b10