AWS 3-Tier Architecture Workshop and Terraform for Beginners

Explore manual networking and security setup with VPC, subnets, route tables, internet gateway, NAT gateway, and security groups, and compare automation with Terraform for infrastructure as code.

Create a custom vpc named edvance vpc with 10.0.0.0/16, then create six subnets across az1 and az2, three public and three private, for web, app, and db workloads.

Create an internet gateway and two NAT gateways across availability zones, each with an Elastic IP, to provide internet access from public to private subnets, using a consistent naming convention.

Create one public and two private route tables in a VPC, attach an internet gateway for the public table, add NAT gateways for private routing, and associate subnets accordingly.

Create and configure five security groups for two load balancers in an AWS 3-tier setup, enabling ports 80, 4000, and 3306 for web, app, and Aurora MySQL databases.

Create an RDS subnet group to enable multi-aged databases, choosing the VPC and two subnets in different availability zones for high availability, then proceed to create the database.

Create an Amazon Aurora database for a dev and test environment by selecting default options, configuring admin credentials, choosing a suitable instance type, and keeping it not publicly accessible.

Launch an EC2 app-tier instance, assign an IAM role, place it in the private app subnet, enable SSM login, and begin configuring the software stack in this 3-tier setup.

Connect an app server to an RDS database using ssm, install mysql, create webapp db and a transactions table, then insert and query data.

Configure app on EC2, pull code from S3, update db config to connect to RDS, install node via nvm and PM2, run the app, and verify health via curl.

Create an AMI from the app server and use it in a launch template to support internal load balancing; then configure a target group for the load balancer.

Create a target group for the app tier to route traffic to instances via an internal load balancer in the VPC, using http on port 4000 with a /health path.

Create an app tier launch template by confirming the ami, selecting the app ami, choosing a t2 micro instance, and attaching app tier security group and S3 SSM access role.

Update the web nginx.conf to proxy to the app tier via the internal load balancer, then deploy a web tier EC2 instance with Amazon Linux 2, S3 access, and SSM.

Create a web tier AMI from the web server, set up IAM for web tier, configure a launch template, auto scaling, and an external load balancer with a target group.

Configure a web tier target group under load balancing with instance targets on port 80 in the VPC, and prepare the launch template as the web AMI becomes ready.

Create an internet facing application load balancer for the web tier, attach it to the web tier target group, and prepare to create the launch template in the next lecture.

Create a web tier launch template using t2 micro instances, with no key pair or subnet, and the web tier security group, preparing for the auto scaling group.

Create a web tier auto scaling group attached to the load balancer, launching two instances across two availability zones and validating access via the load balancer DNS.

Test a three-tier architecture by simulating failures and observing auto scaling and load balancing. Use Terraform and infrastructure as code to provision web, app, and database tiers for high availability.

Map the load balancer to a domain with Route 53 by creating a hosted zone and updating GoDaddy name servers; then point www.your-domain to the load balancer.

Set the auto scaling group to zero, delete load balancers, target groups, and launch templates, remove aurora database, and clean up nat gateways, elastic ips, route tables, and the VPC.

Explore a practical three-tier web application architecture and how the app and database interact. Learn infrastructure as code with Terraform to provision resources and compare manual versus automated deployment.

Install Terraform on Windows, set up VS Code. Create an IAM user with programmatic access, install AWS CLI, run AWS configure, and test connectivity with AWS S3 ls.

Master setting up a VPC with Terraform to provision a VPC, subnet, internet gateway, route table, route table association, security group, and EC2 instance, with dynamic IDs and plan/apply workflows.

Explore how to replace hardcoded values with variables in terraform, configure VPC and EC2 using variables.tf, and retrieve public and private IP addresses with outputs.

Learn to set up an EKS Kubernetes cluster on AWS with Terraform, including VPC, subnets, security groups, IAM roles, and a node group, using Terraform modules and plan-apply workflows.

Learn how to configure an S3 remote backend for Terraform state, enable versioning and encryption, block public access, and use DynamoDB locking for collaborative team work.