AWS Infrastructure

Full AWS infrastructure overview for Grouple

Architecture

GitHub (groupleindia org)
        ↓ auto-deploy
AWS Amplify ──────────────────────────── grouple.pro
        ↓ (frontend)
Route 53
  ├── grouple.pro → Amplify
  └── api.grouple.pro → Application Load Balancer
                              ↓
                    SSL Termination (ACM Certificate)
                              ↓
                    ECS Cluster (grouple-api-cluster)
                      └── Auto Scaling Group
                          ├── EC2 Instance
                          └── EC2 Instance
                              └── ECS Tasks
                                  └── API Containers (Docker)
                                      ← ECR (grouple-api)

AWS Secrets Manager → injects credentials into ECS + EC2

Dedicated EC2 Instance (PM2 AI Workers)
  ├── AI Proposal Worker
  └── PDF Extract Worker
      ↓ both call
Amazon Bedrock (Claude 4.6)

S3 Buckets:
  └── grouple-textract-bucket (document processing)

CloudWatch Logs (/ecs/grouple-api-task)
AWS X-Ray (distributed tracing)

Services Used

Compute

Service	Purpose
AWS Amplify	Frontend hosting + CI/CD from GitHub
ECS (grouple-api-cluster)	Containerised backend API
EC2 (Auto Scaling Group)	ECS host instances
EC2 (dedicated)	PM2 AI workers

Networking

Service	Purpose
Route 53	DNS for grouple.pro + api.grouple.pro
Application Load Balancer (grouple-api-lb)	HTTP/HTTPS routing to ECS
ACM Certificate	SSL/TLS for api.grouple.pro
CloudFront CDN	Frontend content delivery
VPC + Subnets + Security Groups	Network isolation
Elastic IPs	Fixed IPs for EC2 instances

Storage & Registry

Service	Purpose
ECR (grouple-api)	Docker image registry
S3 (grouple-textract-bucket)	Document uploads for processing

AI & ML

Service	Purpose
Amazon Bedrock (Claude 4.6)	AI proposal generation + PDF extraction
Amazon Textract	Document OCR (via grouple-textract-bucket)

Security & Config

Service	Purpose
AWS Secrets Manager	Stores and injects credentials
KMS	Encryption keys
IAM (github-actions-user)	GitHub Actions deployment permissions

Observability

Service	Purpose
CloudWatch Logs	ECS task logs
AWS X-Ray	Distributed request tracing

CI/CD Pipeline

Developer pushes to GitHub main branch
        ↓
GitHub Actions (github-actions-user IAM)
        ↓
├── Frontend: AWS Amplify auto-detects push → builds + deploys
└── Backend: GitHub Actions
    ├── Build Docker image
    ├── Push to ECR (grouple-api)
    └── ECS rolling deployment (new task definition)