CodePipeline — Main Branch Trigger
01
📝
Source
GitHub
02
🔍
Test
CodeBuild
03
🏗
Build
CodeBuild
04
🎭
Staging
ECS Blue/Green
05
Approve
Manual Gate
06
🚀
Deploy
Production
🔍Test Stage~3 min
  • Run Jest unit tests
  • ESLint + TypeScript check
  • Snyk security scan
  • npm audit --audit-level=high
🏗Build Stage~4 min
  • Docker multi-stage build
  • Tag image with git SHA
  • Push to ECR private registry
  • ECR vulnerability scan
🎭Staging Deploy~2 min
  • Update ECS task definition
  • Blue/Green swap on staging ALB
  • Run Cypress E2E smoke tests
  • Health check validation
🚀Production Deploy~5 min
  • Create new ECS task set
  • Linear 10%→100% traffic shift
  • CloudWatch alarm monitoring
  • Auto-rollback on breach

Automatic Rollback

If a CloudWatch alarm breaches during the deployment window (5 min), CodeDeploy automatically rolls back to the previous task set. No manual intervention required.