About This Architecture
Multi-stage CI/CD pipeline for Yoma Bank deploying seven microservices to AWS EKS across dev, staging, and prod namespaces using GitHub Actions runners, Docker containerization, and ECR artifact storage. Security scanning spans SAST (CodeQL), SCA (Dependabot/Snyk), container (Trivy), secrets (Gitleaks), IaC (Checkov), and DAST (OWASP ZAP) gates before testing with Bedrock AI assistance and code coverage validation. Approval workflows enforce auto-approval for dev, manual gates for staging and prod, with full observability via CloudWatch, X-Ray, Grafana, and AWS security services (GuardDuty, Security Hub, CloudTrail). Fork this diagram to customize approval policies, add additional namespaces, or integrate alternative scanning tools into your own enterprise deployment pipeline. The architecture demonstrates defense-in-depth security posture with shift-left scanning, AI-assisted testing, and comprehensive audit logging across all deployment stages.