AWS Academy Cloud Architecting 2.x - Capstone Project: Environment Overview
AWS Academy Cloud Architecting 2.x - Capstone Project: Environment Overview
AWS Academy Cloud Architecting 2.x - Capstone Project: Environment Overview
Environment Overview
This environment is long-lived. When the session timer runs to 0:00, the session
will end, but any data and resources that you created in the AWS account will be
retained. Any running resources (such as an EC2 instance) will be stopped. If you
later launch a new session (for example, the next day), you will find that your
work is still in the lab environment. However, you will need to manually start any
stopped resources. You can continue to develop your solution as you progress
through the course materials.
IMPORTANT: Monitor your lab budget in the lab interface above. Whenever you
have an active lab session, the remaining budget will display at the top of this
screen. For this Capstone Project environment, the limit is $40. If you exceed
your lab budget your lab account will be disabled and all progress and
resources will be lost. Therefore, it is important for you to manage your
spending. Suggestions to avoid overspending: Launch only the number of
instances you need, sized to your requirements. Stop EC2 and RDS instances
when not in use. Delete no longer needed resources and data.
Environment Navigation
Use the Readme link above to return to these instructions at any time.
Use the AWS Details link above to access information about your environment.
After you start the lab, the AWS Details panel will display and you will need to
choose Readme to return to these instructions.
Tip: you can resize this panel at anytime by dragging the bar to the left of these
instructions to make it wider or narrower.
The terminal window to the left of these instructions can be used to run AWS CLI
commands or code such as AWS SDK for Python code (details provided below).
Access the AWS Management Console
Tip: You can refresh the session length at any time by choosing
Start Lab again before the timer reaches 0:00.
Tip: If a new browser tab does not open, a banner or icon is usually
at the top of your browser with the message that your browser is
preventing the site from opening pop-up windows. Choose the
banner or icon, and then choose Allow pop-ups.
By the end of this project, you should be able to apply the architectural design
principles that you learned in this course to:
Over the past year, Shirley’s website has grown in popularity. As a result of
increased traffic, she started receiving complaints that the site is not as
responsive as it used to be. She also experienced an attempted ransomware
security breach. The security breach was unsuccessful, but her supervisor,
Mateo Jackson, suggested that Shirley investigate new ways to host the website.
Shirley heard about Amazon Web Services (AWS), and initially moved her website
and database to an EC2 instance that runs in a public subnet. She also runs an
instance of MySQL on the same EC2 instance.
Shirley approached your team to make sure that her current design follows best
practices. She wants to make sure that she has a robust and secure website.
One of your colleagues started the process of migrating the site to a more
secure implementation, but they were reassigned to another project. Your tasks
are to complete the implementation, make sure that the website is secure, and
confirm that the website returns data from the query page.
The following summary lists the solution requirements, and provides a diagram
of the current environment.
Solution requirements
• Provide secure hosting of the MySQL database
• Provide secure access for an administrative user
• Provide anonymous access to web users
• Run the website on a t2.small EC2 instance, and provide Secure Shell (SSH)
access to administrators
• Provide high availability to the website through a load balancer
• Store database connection information in the AWS Systems Manager
Parameter Store
• Provide automatic scaling that uses a launch template
The following parameters are used by the PHP application to connect to the
database:
• /example/endpoint
• /example/username
• /example/password
• /example/database
Project deliverables
To complete this assignment, you must: