Floci AWS Services: Safety Plane and New Integrations

Floci AWS Services: Safety Plane and New Integrations An architecture diagram generated by Archify. Operator · AWS CLI profiles · Architecture component · floci-local Operator AWS CLI profiles floci-local Floci API Gateway · 127.0.0.1:4566 · Local Floci AWS emulator · ap-south-1 · account 000000000000 Floci API Gateway 127.0.0.1:4566 account 000000000000 SNS · budget-stop topic · Local Floci AWS emulator · ap-south-1 › Fail-closed safety plane · 1 topic SNS budget-stop topic 1 topic EventBridge Scheduler · TTL schedule group · Local Floci AWS emulator · ap-south-1 › Fail-closed safety plane · 0 active schedules EventBridge Scheduler TTL schedule group 0 active schedules Adapter Lambdas · budget + TTL · Local Floci AWS emulator · ap-south-1 › Fail-closed safety plane · 2 of 6 functions Adapter Lambdas budget + TTL 2 of 6 functions Step Functions · cleanup state machine · Local Floci AWS emulator · ap-south-1 › Fail-closed safety plane · 1 Standard workflow Step Functions cleanup state machine 1 Standard workflow Controller Lambdas · prepare · success · failure · Local Floci AWS emulator · ap-south-1 › Fail-closed safety plane · 3 functions Controller Lambdas prepare · success · failure 3 functions Exact Cleanup Lambda · registered object only · Local Floci AWS emulator · ap-south-1 › Fail-closed safety plane · 1 function Exact Cleanup Lambda registered object only 1 function IAM + STS · service trust + least privilege · Local Floci AWS emulator · ap-south-1 · 6 roles IAM + STS service trust + least privilege 6 roles EKS API → K3s · buffer-bibe-lab · Local Floci AWS emulator · ap-south-1 · localhost:6500 EKS API → K3s buffer-bibe-lab localhost:6500 DynamoDB · buffer-lab-runs · Local Floci AWS emulator · ap-south-1 › Fail-closed safety plane · freeze · runs · tickets DynamoDB buffer-lab-runs freeze · runs · tickets S3 · buffer-lab-artifacts · Local Floci AWS emulator · ap-south-1 › Fail-closed safety plane · evidence + exact objects S3 buffer-lab-artifacts evidence + exact objects create roles + policies EKS CreateCluster invoke budget adapter invoke TTL adapter StartExecution prepare / terminal state approved manifest freeze · lock · execution read exact manifest head + delete exact key Local Floci AWS emulator · ap-south-1 Fail-closed safety plane Legend Backend Database Cloud Security Message bus External

Retained Floci inventory

  • • 1 EKS cluster · 6 IAM roles · 6 Lambda functions · 1 Step Functions state machine
  • • 1 SNS topic · 1 DynamoDB table · 2 S3 buckets including Floci's Lambda task bucket
  • • 2 SQS queues · 3 ECR repositories · Scheduler groups with no active cleanup schedule

New OpenReview integrations

  • • Floci SQS: PR #1 transcode queue + DLQ; KEDA scales its FFmpeg worker from 0 to 2
  • • Floci ECR: 3 repositories hold exact-SHA copies for the local Docker Compose stack
  • • PR previews still pull GHCR images; ELBv2 / ALB remains unused

Important boundary

  • • These are Floci-emulated AWS APIs, not resources in Arun's real AWS account
  • • EKS is an AWS-shaped facade; the actual runtime is one local K3s control-plane node