Fides Documentation – Ethyca

Production Terraform Deployment

This guide covers deploying Fides using Terraform for automated infrastructure provisioning on AWS Elastic Container Service (ECS).

For Kubernetes deployments, see Production Kubernetes Deployment. For Docker configuration options, see Docker Installation.

Overview Permalink for this section

The Fides team maintains a Terraform module (opens in a new tab) to assist in deploying Fides to AWS ECS with all required infrastructure components.

The Terraform module provisions:

Prerequisites Permalink for this section

Installation Permalink for this section

1. Reference the Terraform Module Permalink for this section

Create a new Terraform configuration that references the Fides module:

module "fides" {
  source = "github.com/ethyca/fides-terraform//fides-aws-ecs"

# Required variables
  aws_region = "us-east-1"

# Add your configuration here
  # See module README for all available options
}

2. Configure Module Variables Permalink for this section

Customize the deployment by setting module variables. Common configuration options include:

module "fides" {
  source = "github.com/ethyca/fides-terraform//fides-aws-ecs"

aws_region          = "us-east-1"
  environment         = "production"
  fides_image_tag     = "latest"

# Database configuration
  db_instance_class   = "db.t3.medium"

# Redis configuration
  redis_node_type     = "cache.t3.micro"

# ECS configuration
  fides_cpu           = 1024
  fides_memory        = 2048
  fides_desired_count = 2
}

3. Initialize Terraform Permalink for this section

terraform init

4. Review the Plan Permalink for this section

terraform plan

Review the resources that will be created to ensure they match your expectations.

5. Apply the Configuration Permalink for this section

terraform apply

Type yes when prompted to confirm the deployment.

Module Configuration Permalink for this section

For detailed configuration options and all available variables, refer to the Terraform module README (opens in a new tab).

Key Configuration Options Permalink for this section

Infrastructure Sizing:

Networking:

Security:

Accessing Fides Permalink for this section

After deployment completes, Terraform will output the application URL:

terraform output fides_url

Visit the URL to access the Fides Admin UI.

Updating Fides Permalink for this section

To update Fides to a new version:

  1. Update the fides_image_tag variable
  2. Run terraform apply

The ECS service will perform a rolling update with zero downtime.

Destroying Resources Permalink for this section

To remove all Fides infrastructure:

terraform destroy

⚠️

Warning: This will permanently delete all resources including the database. Ensure you have backups before destroying.

Next Steps Permalink for this section

Additional Resources Permalink for this section