We currently have a web UI configured infrastructure that I want to move to cloud formation as it is growing in complexity. We use ECS with multiple docker containers, RDS, load balancers, SNS etc.
What I would like is suggestion on where to draw the line (or where to find the information) between what should be in cloud formation and what is not. Particularly around
- IAM rules for the likes of developer permissions excluding the ones required to deploy stacks from cloud formation
- RDS databases- do you run the risk of destroying production databases and having them re-deployed without the data
- Elastic ip addresses attached to a network load balancer
Thanks in advance