ABC2 Serverless Staging

Staging Environment & Disaster Recovery

Execution Profile: Serverless On-Demand (Zero Idle Cost)

Cost Guardrail:< $0.20 / mo (Free Tier Optimized)

Problem Statement & Investigation

Validating multi-environment isolation and rollback capabilities without spinning up duplicate expensive CDN distributions and static infrastructure.

Architectural Hypothesis

Multi-tenant S3 prefix partitioning (demos/abc1 vs demos/abc2) provides complete isolation at the static layer while sharing the same high-availability CloudFront distribution and SSL certificate.

System Runtime Flow

11. Ingress Host Header Inspection

Requests to abc2.symmetriccloud.com are routed by CloudFront Function to s3://symmetriccloud.com/demos/abc2/index.html.

22. Staging API Execution

Executes against staging Lambda endpoints with segregated environment variables.

33. Isolated Persistence

Writes to staging DynamoDB partitions, ensuring zero pollution of production orders.

Architecture Decision Records (ADRs)

ADR-001: Multi-Tenant Prefix S3 PartitioningACCEPTED

Decision: Isolate staging and testing workloads into S3 bucket prefixes /demos/<tenant>/ rather than discrete buckets.

Alternatives Evaluated: Dedicated S3 buckets per environment.

Consequences: Single wildcard certificate and single distribution management; zero added AWS standing line items.

Failure-Mode & Resilience Analysis

Scenario: Staging Traffic Contention

Observed Behavior: Staging traffic is completely decoupled at the compute and data layer.

Architectural Mitigation: Separate DynamoDB partition keys and Lambda function aliases.

Key Engineering Takeaways

Multi-tenant prefix hosting allows staging environments to be spun up in seconds with zero infrastructure provisioning overhead.

Empirical Benchmarks

Staging Edge Latency0.4ms

CloudFront Function 2.0 rewrite duration

Cache Hit Ratio99.2%

Static asset CloudFront edge hit percentage

Standing Monthly Cost$0.00

Zero idle charge

Technology Primitives

frontend: React 19 + Vite
backend: Node.js 20 Lambda
database: DynamoDB (on-demand)
infra: Terraform + CloudFront + OAC

Architecture Tags

AWS LambdaDynamoDBAPI GatewayReact 19GitHub ActionsCloudFront

Security Notice

Active Live Subdomain · GitHub CI/CD Automated. Operational lifecycle commands (Deploy, Scale, Destroy) and raw cloud credentials remain sealed in the private control plane.