diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..74a7828
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,31 @@
+FROM public.ecr.aws/p9i6h6j0/aws-pdk:latest as build
+
+#install dependencies
+RUN dnf -y install rsync
+
+# Create a non-root user named 'app' and set up home directory
+RUN useradd -m app
+
+# Create an app directory and change its ownership to the 'app' user
+RUN mkdir /app && chown app:app /app
+
+# Switch to the 'app' user
+USER app
+
+# Set the working directory to the app directory
+WORKDIR /app
+
+#Copy files into the Docker image
+COPY --chown=app:app . .
+RUN ./scripts/build.sh
+
+# Stage 2: Serve the application using Nginx
+FROM nginx:alpine
+# Remove the default nginx website
+RUN rm -rf /usr/share/nginx/html/*
+# Copy the build output to the nginx html directory
+COPY --from=build /app/packages/threat-composer-app/build/website/ /usr/share/nginx/html
+# Expose port 80
+EXPOSE 80
+# Start nginx
+CMD ["nginx", "-g", "daemon off;"]