AWS deployment via CDK

[michaelzwang13]

Deploy AgentOS to AWS. Deferred during this session in favor of finishing features locally.

Architecture constraint

The platform spawns agent containers via the mounted Docker socket — so ECS Fargate is out. Use an EC2 host running Docker (matches the local Docker Desktop model).

Scope — CDK (TypeScript)

• EC2 (arm64 / Graviton, to match the dev setup) running Docker — platform + agent containers on the bridge network.
• ECR — registries for the platform and agent images.
• Secrets Manager — Fernet key, LLM/API keys, Supabase creds (also resolves Stop passing secrets as plaintext Docker env vars #18).
• ALB + ACM + Route53 — TLS and a domain.
• S3 + CloudFront — the static Vite frontend build.
• cdk bootstrap required. AWS account 520531809354 is authenticated.

Open question

Route53-hosted domain vs. ship HTTP-only first and add the domain later.

Estimate: ~3–4 days.