About This Architecture

Multi-AZ EKS cluster with Python containers establishing secure outbound SFTP connections to three external servers while retrieving credentials from Secrets Manager and encryption keys from KMS. EKS nodes in private subnets route traffic through NAT Gateways and Network Firewall to reach external SFTP servers, with all credential management handled by Secrets Manager and Systems Manager Parameter Store. Aurora PostgreSQL primary-replica pair in separate AZs provides persistent data storage for the containerized workloads, while CloudWatch and CloudTrail capture processing and audit logs. Fork this diagram to customize NAT Gateway placement, add additional SFTP endpoints, or modify security group rules for your organization's outbound connectivity requirements.

People also ask

How do I securely configure EKS containers to connect to external SFTP servers while managing credentials with Secrets Manager?

This diagram shows a production-ready pattern where EKS nodes in private subnets retrieve SFTP credentials from Secrets Manager (encrypted with KMS), then route outbound traffic through NAT Gateways and Network Firewall to reach external SFTP servers. Aurora PostgreSQL provides persistent storage across AZs, while CloudWatch and CloudTrail enable observability and compliance auditing.