Let's Build on AWS: eCommerce Application from scratch

Create a vpc with cidr 10.10.0.0/16, six subnets (two public, two private ecs, two private databases), and implement an internet gateway plus a zonal nat gateway with proper route tables.

Configure Amazon Cognito to manage user identities with sign in and sign up. Enforce password policies and secure cart and order APIs via API gateway, integrating with Active Directory.

Host the front end on a private S3 bucket behind a CloudFront distribution, with origin access control and Cognito for JWT authentication.

Deploy a frontend to S3 and serve it with CloudFront. Build and upload the build after npm install, configure index.html and custom error pages, and set up Cognito authentication.

Upload sample images to the s3 bucket and verify them, then create and load dynamodb tables e-commerce-products and e-commerce-card using scripts, updating product data with cloudfront image urls.

Configure a Postgres RDS in a private subnet within a VPC, create the initial ecommerce DB, secure access on port 5432, and store connection details in the SSM parameter store.

Create a dbsubnet group and a security group, then launch a PostgreSQL RDS database in the ecommerce app VPC with a single AZ, no public access, naming it ecommerce DB.

Create three SSM parameter store parameters to store aws region, db host endpoint, and db password for dev, with the password as a secure string and names like /e-commerce/dev.

Create four ECR repositories for the product, cart, user, and order services; build, tag, and push Docker images to each repository, guided by the backend deployment docs.

Create four ECS task definitions by configuring IAM roles, security groups, ports 8001–8004, and environment variables pulling from SSM parameter store for product, card, user, and order services.

Create a serverless ECS cluster and four ECS services behind an application load balancer, configure VPC subnets and security groups, then test connectivity from a bastion EC2.

Learn how to minimize lab costs by pausing AWS workloads: stop RDS, set ECS replicas to zero, delete NAT gateway and Elastic IP, then recreate them and restore services.

Set up an http api gateway with a vpc link to a private alb, secured by a cognito jwt authorizer and broad cors. Test with curl and plan front-end integration.

Integrate the frontend with the backend by configuring the API gateway URL, then build and deploy to S3 and invalidate CloudFront cache to support product, cart, and order workflows.