Problem
Legacy on-prem builds had no repeatability, no access control and no audit trail of what shipped where.
Solution
Provisioned Jenkins controller on EC2 behind Nginx with TLS, scoped IAM instance roles, declarative Jenkinsfiles per service, credentials store for secrets, and shell-scripted backup of jobs and config to S3.
Architecture
- 01EC2 controller + ephemeral build agents
- 02Nginx reverse proxy with TLS, IAM instance profile for AWS access
- 03Declarative Jenkinsfile per service, nightly config backup to S3