CI/CD — build once, promote the same image

One image is built in CI and then promoted unchanged through every environment.

Continuous Integrationbuild.yml

Commit / PR GitHub AWS CodeBuild Amazon ECR · :git-sha

Continuous Deploymentdeploy.yml · promotion, no rebuild

Dev · ctio_dev Test PASS QA · ctio_stag gate Pre-Prod · ctio_stag Release tag Production · ctio_prod

Runs on

ECS Fargate (serverless) behind an ALB · Next.js frontend · secrets from AWS Secrets Manager.

Rollback

Re-promote the previous image tag — no rebuild required.

Training · ctio_stag

Provisioned in parallel for ops onboarding, off the prod path.