CloudForge CI Documentation
Documentation for defining, deploying, and validating application infrastructure on AWS with CloudForge. For a short introduction and quick start, see the project README.
- Getting started
- Configuration
- Applications and plugins
- Authentication
- Local emulators
- Compliance and security
- Testing and validation
- Project and release
Getting started
| Document | Description |
|---|---|
| Onboarding Quick Start | Deploy an example configuration to AWS, from development to production profiles |
| cloudforge-cli | Command-line tool for deploying and managing local emulators |
| cloudforge-localstack and cloudforge-ministack | Local emulator setup — build, start, and deploy without an AWS account |
| Compliance Quick Start | Configure compliance validation |
| Sample project | Standalone project that consumes the published artifacts |
| Sample project BOM template | POM and layout for your own project |
Configuration
| Document | Description |
|---|---|
| Advanced Guide | Full deployment-context.json reference, security profile defaults, example configurations, and command-line reference |
| Example configurations | Deployment contexts by profile and framework |
| Application examples | Deployment contexts per application |
| Security Profiles | dev, staging, and production defaults |
| IAM Rules | IAM profiles and generated permissions |
| Database Deployment Guide | RDS provisioning and remediation |
| SSM Parameter Scoping | SSM parameter naming and access scope |
Applications and plugins
| Document | Description |
|---|---|
| Application guides | Jenkins, GitLab, Grafana, Harbor, Mattermost, Metabase, Nexus, SonarQube, and others |
| CMS guides | WordPress, WooCommerce, Drupal, Magento, PrestaShop, Moodle, and the cms-service topology |
| Application catalog | Built-in application specifications |
| Application compliance | Compliance considerations per application |
| CMS applications | CMS application reference |
| Plugin Ecosystem | Built-in applications and plugin architecture |
| Plugin System Guide | Plugin architecture and development patterns |
| Application Plugin Guide | Build an application plugin |
| Compliance Plugin Guide | Build a compliance framework plugin |
Authentication
| Document | Description |
|---|---|
| OIDC Integration | ALB-level and application-level OIDC |
| Cognito MFA Setup | Cognito user pools with MFA |
| IAM Identity Center Setup | IAM Identity Center and external identity providers |
Local emulators
| Document | Description |
|---|---|
| Application compatibility | Which applications run on MiniStack and LocalStack |
| MiniStack | Setup, deployment, verification, troubleshooting |
| LocalStack | Token, adapter behavior, deployable applications |
| cloudforge-localstack and cloudforge-ministack | Local emulator quick start, hostnames, and emulator edge (nginx) setup |
Compliance and security
| Document | Description |
|---|---|
| Compliance overview | Index of compliance documentation |
| Multi-Framework Compliance | SOC 2, PCI DSS, HIPAA, and GDPR controls |
| Automated Compliance | AWS Config rules and remediation |
| Compliance Deployment Guide | Production deployment considerations |
| PCI DSS Compliance and PCI DSS Application Security | PCI DSS controls |
| S3 Versioning Remediation | S3 versioning remediation |
| AWS Config Multi-Stack | Sharing AWS Config infrastructure across stacks |
| CloudTrail Auto-Remediation | CloudTrail remediation |
| Compliance Posture | Control status and test coverage |
| Compliance Severity Levels | Severity classification |
| Auditor Compliance Mapping | Control mappings for external audits |
| Audit Readiness Guide | Preparing evidence for an audit |
| AWS Audit Manager | Audit Manager integration |
| Evidence generation example | Sample evidence output |
| Security policy | Supported versions and vulnerability reporting |
Testing and validation
| Document | Description |
|---|---|
| Extended Testing | Synthesis, validation, and benchmark scripts |
| Compliance Truth Tables | Framework and profile combination tests |
| Integration Tests | AWS integration tests |
| Test reports | Published coverage, validation, compliance, and drift reports |
Project and release
| Document | Description |
|---|---|
| Contributing | Development setup, tests, and pull requests |
| Maven Release Process | How artifacts are published |
| Documentation Maintenance | Maintaining this documentation site |
| Changelog | Release history |
| License | Business Source License 1.1 |