Outputs and hostnames
The root outputs are the fastest way to discover the exact URLs, names, and connection values emitted by a deployment.
Key outputs
| Output | Meaning |
|---|---|
alb_url | public ALB base URL |
alb_dns_name | ALB DNS name |
events_service_name | events ingestion ECS service name |
events_ecr_repository_url | ECR repository for the events API |
events_ingestion_url | events host routed through the ALB |
dashboard_backend_url | dashboard host routed through the ALB |
dashboard_backend_service_name | dashboard ECS service name |
dashboard_backend_ecr_repository_url | ECR repository for the dashboard backend |
dashboard_backend_secret_name | secret name used by the dashboard task |
dashboard_db_endpoint | PostgreSQL endpoint |
dashboard_db_port | PostgreSQL port |
dashboard_db_name | initial PostgreSQL database name |
scoring_internal_url | scoring Service Connect endpoint for internal callers |
scoring_service_name | scoring ECS service name |
scoring_ecr_repository_url | ECR repository for the scoring image |
scoring_secret_name | secret name used by the scoring task |
camunda_service_name | Camunda ECS service name |
camunda_secret_name | secret name used by the Camunda task |
camunda_db_endpoint | PostgreSQL endpoint for Camunda |
camunda_db_port | PostgreSQL port for Camunda |
camunda_db_name | initial PostgreSQL database name for Camunda |
msk_bootstrap_brokers_tls | internal IAM + TLS Kafka bootstrap brokers |
msk_bootstrap_brokers_public_tls | public IAM + TLS Kafka bootstrap brokers |
shared_vpc_id | shared staging VPC ID reused by staging2 |
shared_msk_bootstrap_brokers_tls | shared staging TLS bootstrap brokers reused by staging2 |
kafka_ui_url | Kafka UI hostname routed through the ALB |
clickhouse_prometheus_agent_service_name | ECS service name for the ClickHouse Prometheus agent when enabled |
clickhouse_prometheus_agent_secret_name | secret name used by the ClickHouse Prometheus agent task |
clickhouse_cloud_newrelic_dashboard_permalink | New Relic dashboard URL for ClickHouse Cloud metrics |
events_service_newrelic_dashboard_permalink | New Relic dashboard URL for the managed ECS events service dashboard |
ecs_service_newrelic_dashboard_permalinks | map of New Relic dashboard URLs for dashboard backend, scoring, Camunda, and Kafka UI |
rds_newrelic_dashboard_permalink | New Relic dashboard URL for RDS metrics |
msk_newrelic_dashboard_permalink | New Relic dashboard URL for MSK metrics |
msk_s3_sink_bucket_name | export bucket name when the sink is enabled |
msk_connect_plugin_bucket_name | plugin bucket name when created |
msk_s3_sink_connector_name | connector name when enabled |
msk_s3_sink_log_group_name | connector log group when enabled |
Frequently used commands
terraform output -raw dashboard_backend_secret_name
terraform output -raw dashboard_db_endpoint
terraform output -raw dashboard_db_port
terraform output -raw dashboard_db_name
terraform output dashboard_db_master_user_secret_arn
terraform output -raw scoring_secret_name
terraform output -raw camunda_secret_name
terraform output -raw camunda_db_endpoint
terraform output -raw camunda_db_port
terraform output -raw camunda_db_name
terraform output camunda_db_master_user_secret_arn
terraform output -raw msk_bootstrap_brokers_tls
Public hostnames
| Surface | Staging example | Production values |
|---|---|---|
| Events ingestion | atlas-ingest.twinfo.io | atlas-ingest.lifters.tech |
| Dashboard backend | atlas-back.twinfo.io | atlas-back.lifters.tech |
| Kafka UI | atlas-kafka.twinfo.io | atlas-kafka.lifters.tech |
staging2 committed examples use atlas-ingest2.twinfo.io, atlas-back2.twinfo.io, and atlas-kafka2.twinfo.io.
Internal service endpoints
| Surface | Current value |
|---|---|
| Scoring | http://scoring:8083 |
| Camunda | http://camunda:8080/engine-rest |
Notes on deprecated aliases
The roots still expose:
ecs_cluster_nameecr_repository_url
Those are deprecated aliases for the events service cluster and ECR repository. Prefer the more explicit outputs in new operator workflows.
For terraform/staging2, the events_ecr_repository_url, dashboard_backend_ecr_repository_url, and scoring_ecr_repository_url outputs intentionally remain the legacy *2 repository URLs referenced by the committed base task definitions. They document the Terraform bootstrap contract, but they are not guaranteed to match the live manually revised ECS task definitions.
Treat msk_bootstrap_brokers_tls, msk_bootstrap_brokers_public_tls, and dashboard_db_master_user_secret_arn as sensitive operational values even when Terraform prints them from outputs. In the committed roots, camunda_db_master_user_secret_arn is expected to be null because Camunda now uses a static password after preserving the current RDS-generated value.