Untitled Quiz

AWS Cloud Computing Project - CIS 4403

• AWS is a global cloud platform offering Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) for various services
• The project developed a three-tier web application on AWS, focusing on reliability, security, performance, and cost-efficiency.
• The project uses AWS, AWS Academy Learner Lab, and Foundation Services to create and deploy a three-tier web application.
• It follows the AWS Well-Architected Framework's five pillars, to prevent cyberattacks and data breaches and ensures reliability to handle increased demand.

Key Components

• Two-Tier Architecture: A scalable three-layer design using web and application servers.
• Amazon VPC: A secure environment with private and public subnets managed by security groups.
• Availability Zones: Three AZs for high availability and fault tolerance.
• Amazon EC2 Instances: EC2 instances host web and application servers.
• Amazon RDS: Multi-AZ RDS for database management with high availability.
• ELB (Elastic Load Balancing): Distributes traffic for improved availability and fault tolerance.
• Auto Scaling: Adjusts EC2 instances based on traffic for efficiency and availability.
• Internet Gateway: Enables VPC communication with the internet for user access.
• NAT Gateway: Allows secure internet access for private subnet instances.
• Security Groups: Role-based access control to manage traffic flow and enhance security.

AWS Account and Users

• The AWS account involves users like Shouq, Kholoud, and Maryam.
• Different policies (EC2 view, Start, Stop, Access), (EC2 Read Only Access), (S3 Read Only Access) are assigned to each user, restricting access to specific resources.

VPC, Route Tables, and Subnets

• A VPC project_VPC was created with various subnets (us-east-1a, us-east-1b, us-east-1c) for public-facing (Web1, Web2, Web3) and private-facing (app1, app2, app3, DB1, DB2, DB3) subnets.
• Three Availability Zones provide high availability and fault tolerance.
• Route tables (e.g project_VPC-rtb-public, project_VPC-rtb-private1-us-east-1a etc.) direct network traffic to resources.
• Internet and NAT gateways enable internet communication for private instances.

Internet Gateway

• The internet gateway, igw-094849eeb3b57e0cd, connects the VPC to the wider internet.

Route Tables

• Route tables (e.g., rtb-04eaea98d95b0d876, rtb-054d7b76bbeea16ae) define how internet traffic is routed within the VPC.

NAT Gateway

• NAT gateways (e.g., nat-04314c0ecfd0aaceb) enable private instances to access the internet.

Security Groups

• Security groups (e.g., sg-019a65c81bcb0a1ef) control inbound and outbound traffic to instances.

Instance Creation

• Instances are launched using AMI (Amazon Machine Images).
• Network settings, such as VPC, subnet, and security groups, are configured for instances.
• Key pair for secure access (login)
• Additional settings like CPU, memory, OS etc. can be configured based on requirements.

Database Subnet Group

• A Database Subnet Group was created to define the subnets that the database instance will use.
  • This ensures that the database instances have access to the configured subnets.

Target Group

• A Target group, projectTarget1, was created for routing traffic.

Load Balancing

• A load balancer, ELB-project, is responsible for distributing traffic to instances.
• Load Balancing configuration includes the scheme (e.g., Internet-facing), IP address type, and subnets.

Auto Scaling

• Describes the auto-scaling group, auto-scaling-project (this section is somewhat incomplete due to the amount of information).
• Information about target groups and listeners are key in configuring Auto Scaling.

Conclusion

• The project successfully developed a three-tier web application adhering to the AWS well-architected framework's five pillars.
• This system is reliable, secure, performant, and cost-effective to meet user needs and designed for future success.