Environments are secure by default
All security best practices like Encryption, SSL certs, Role based access are pre-configured by default
Private Networking is On
Exclusive network and cluster for each environment
Each environment you spin up gets its own VPC and Kubernetes cluster to isolate stage and production workload.
Private network and private IPs only
All your services running within an environment, run only within a virtual private network (VPC in aws) that is exclusive to the environment.
Outbound calls using NAT gateway
NAT gateway is configured by default in each environment. So any outbound call that your code makes to the internet uses the NAT gateway’s IP.
Inbound calls using load balancer
Any in-bound call from the internet to your public-facing services flow through a defined AWS managed network load balancer.
