Create a second Target Group

[jameslaneovermind]

No description provided.

[github-actions]

Expected Changes

No expected changes found.

Blast Radius

Items	Edges
0	0

Open in Overmind

Risks

Potential Port 80 Conflict [Medium]

When creating a new target group that listens on port 80, there is a risk of port conflict if other services within the same VPC are configured to use the same port. Given the assumption that the current infrastructure is working correctly, if other services are already using port 80 effectively, this indicates that the network is properly segmented, or the services are already designed to coexist on the same port without conflict. However, without specific details on existing network policies or configurations that allow multiple services to share port 80, this risk cannot be completely dismissed. To fully assess this risk, a review of the current network configurations, including security groups, NACLs, and existing service port mappings, is necessary.

Health Check Root Path Misconfiguration [Medium]

Configuring the new target group with a health check path set to / assumes that the application responds to root path requests with a success status. If the current state of the system indicates that applications behind target groups are designed to respond to root path health checks, this might mitigate the risk. However, without explicit confirmation that the specific application being routed to by the new target group supports this configuration, there's a potential risk of misconfiguration. This can lead to instances being inaccurately marked as unhealthy, affecting traffic routing and availability. Validation of the application's health check endpoint response is required to mitigate this risk.

Impact of Adding Archive Provider [Low]

Introducing a new Terraform provider (archive) does not directly impact the existing infrastructure or the proposed changes to the target group setup. Assuming that current Terraform configurations and the state of the system are working as expected, this addition is unlikely to pose a significant risk to the infrastructure deployment process. Nonetheless, it's prudent to test Terraform plan and apply operations in a controlled environment to confirm that the introduction of a new provider does not introduce unforeseen issues.