Pipelines: deployment to a private vm ( aws ec2)

[Admin Admin]

Hello,

  what are the preferred methods ( patterns) to deploy in the SSO enabled multi account cloud environments, with VMs run in a private network segments?

Build deployment is once a day on average.

There are 2 workflows :

• ansible scripts that maintain vms configuration
• application builds - jave, django etc.

Here are a few options and my take on them:

1. pipeline + webhook:

 cons: constantly running vm ($) with a hole punched on the firewall for the incoming traffic.

2. pipeline + aws deploy:

 looks like a promising approach. An open question - how to connect to a vm in a private subnet

Thank you .

Additional information:

• aws /ggl
• network details: vms are behind a VPN. With routing done by a transit gateway.
• i prefer an easy to maintain, scalable (add more accounts), cheap :) solution.