AWS

Build and push the Docker target:

fh build --target docker --docker-build --docker-tag "$ECR_REPOSITORY:$GIT_SHA"

Run the image on ECS/Fargate, App Runner, or EKS with port 3000, NODE_ENV=production, a nonempty FABRIC_HARNESS_API_TOKEN, model credentials, and an external Postgres session store. Configure health checks at /health and readiness at /ready.

Use task roles/IRSA instead of static AWS credentials, Secrets Manager or Parameter Store for secrets, private networking and egress controls, immutable image digests, least-privilege IAM, centralized logs/traces, and separate task definitions per environment. Verify restart recovery, approval state, rate limits, and artifact access before production.