docker-compose.prod.scaling.yaml

services:
  backend:
    cap_add: 
      - SYS_PTRACE
    deploy:
      replicas: 2
      # resources:
      #   limits:
      #     memory: 2Gb
      #     cpus: '0.5'
      x-aws-autoscaling:
          min: 1
          max: 10 #required
          cpu: 75

x-aws-cloudformation:
  Transform: AWS::SecretsManager-2020-07-23
  Outputs:
    MySQL:
      Description: RDSInstance Endpoint
      Value: 
        Fn::GetAtt : 
        - MySQL
        - Endpoint.Address
  Resources:
    DBSecurityGroup:
      Type: AWS::EC2::SecurityGroup
      Properties: 
        SecurityGroupIngress: 
          - IpProtocol: "-1"
            CidrIp : 172.31.0.0/16
        GroupDescription: "Ingress Rule for DBSecurity"
    RDSInstanceSecret:
      Type: AWS::SecretsManager::Secret
      Properties:
        Description: 'This is the secret for my RDS instance'
        Name: RDSInstanceSecret
        GenerateSecretString:
            SecretStringTemplate: '{"username": "admin"}'
            GenerateStringKey: 'password'
            PasswordLength: 16
            ExcludeCharacters: '"@/\'
    MySQL:
      Type: AWS::RDS::DBInstance
      DependsOn: RDSInstanceSecret
      Properties:
        VPCSecurityGroups:
          - Fn::GetAtt : 
            - DBSecurityGroup
            - GroupId
        DBName: workshop
        DBInstanceClass: db.t2.micro
        AllocatedStorage: 20
        Engine: MySQL
        EngineVersion: 8.0.16
        MasterUsername: '{{resolve:secretsmanager:RDSInstanceSecret:SecretString:username}}'
        MasterUserPassword: '{{resolve:secretsmanager:RDSInstanceSecret:SecretString:password}}'