Forem: Aadit Unni

Create an advanced AWS VPC to host a fully functioning cloud native application

Aadit Unni — Tue, 11 Apr 2023 18:28:35 +0000

[100/100] #100DaysOfCloud Today, I created an advanced AWS VPC to host a fully functioning cloud native application that lets you vote your favorite programming language from a list.

The VPC will span 2 AZs, and have both public and private subnets. An internet gateway and NAT gateway will be deployed into it. Public and private route tables will be established. An application load balancer (ALB) will be installed which will load balance traffic across an auto scaling group (ASG) of Nginx web servers installed with the cloud native application frontend and API. A database instance running MongoDB will be installed in the private zone. Security groups will be created and deployed to secure all network traffic between the various components.
For demonstration purposes only - both the frontend and the API will be deployed to the same set of ASG instances - to reduce running costs.
The ALB will configured with a single listener (port 80). 2 target groups will be established. The frontend target group points to the Nginx web server (port 80). The API target group points to the custom API service (port 8080). The Web Application is a Programming Language Vote App where you can vote or your favorite language from a list.

You can try do it by yourself by following the steps from the link below: GitHub

Create a Lambda function and upload code using Ansible

Aadit Unni — Mon, 10 Apr 2023 16:56:50 +0000

[99/100] #100DaysOfCloud Today, I created a Lambda function and uploaded code of Arithmetic Operations using Ansible.

Ansible is an open-source automation tool that uses playbooks to enable you to make deployments faster and scale to various environments. Think of playbooks as recipes that lay out the steps needed to deploy policies, applications, configurations, and IT infrastructure. You can use playbooks repeatedly across multiple environments. Customers who use Ansible playbooks typically deploy periodic changes manually. As complex workloads increase, you might be looking for ways to automate them

You can try do it by yourself by following the steps from the link below: GitHub

Create security group and Key pair using Ansible

Aadit Unni — Sun, 09 Apr 2023 11:01:56 +0000

[98/100] #100DaysOfCloud Today, I created a security group with SSH access and a Key pair and saved the Key pair on your local system using Ansible.

You can try do it by yourself by following the steps from the link below: GitHub

FREE AWS Cloud Project Bootcamp Week 6 Part 5

Aadit Unni — Fri, 07 Apr 2023 17:56:22 +0000

[97/100] #100DaysOfCloud Today, I did a part of the Week 6 of the FREE AWS Cloud Project Bootcamp by Andrew Brown.

Here's what was left that I completed:

Create Services for backend that includes Service Connect.
Update RDS SG to allow access for the ECS security group.
Install Sessions Manager Plugin.
Connect to the ECS container cluster using Sessions Manager (Fargate).

By completing these, I have completed the backend portion of deploying the container.

GitHub

You can watch the Bootcamp through this YouTube playlist : FREE AWS Cloud Project Bootcamp playlist

FREE AWS Cloud Project Bootcamp Week 6 Part 4

Aadit Unni — Thu, 06 Apr 2023 18:51:32 +0000

[96/100] #100DaysOfCloud Today, I did a part of the Week 6 of the FREE AWS Cloud Project Bootcamp by Andrew Brown.

Here's what was left that I completed:

Create Task and Execution Roles for Task Definition.
- Create CruddurServiceExecutionRole role and inline CruddurServiceExecutionPolicy policy.
- Create CruddurTaskRole role.
Create Security group for Cruddur services on ECS.
Create Task definition.

GitHub

You can watch the Bootcamp through this YouTube playlist : FREE AWS Cloud Project Bootcamp playlist

FREE AWS Cloud Project Bootcamp Week 6 Part 3

Aadit Unni — Wed, 05 Apr 2023 22:07:09 +0000

[95/100] #100DaysOfCloud Today, I did a part of the Week 6 of the FREE AWS Cloud Project Bootcamp by Andrew Brown.

Here's what was left that I completed:

Create ECR repo and push image for backend-flask.
- Log in to ECR.
- Create a repo in ECR.
- Set/Export the environment variable.
- Pull the image from docker and push it to ECR backend flask repo.
Create ECR repo and push image for backend-flask.
- Create a repo in ECR.
- Set/Export the environment variable.
- Build the image and push it to ECR backend flask repo.
Deploy Backend Flask app as a service to Fargate.
Passing Sensitive Data (environment variables like Access key, Secret key, etc) to Task Definition in Parameter Store in Systems Manager.

All of them were done through the cli.

GitHub

You can watch the Bootcamp through this YouTube playlist : FREE AWS Cloud Project Bootcamp playlist

FREE AWS Cloud Project Bootcamp Week 6 Part 2

Aadit Unni — Tue, 04 Apr 2023 21:07:57 +0000

[94/100] #100DaysOfCloud Today, I did a part of the Week 6 of the FREE AWS Cloud Project Bootcamp by Andrew Brown.

Here's what was left that I completed:

Add a test script into db directory so we can easily check our connection from our container.
Create a new bin script at bin/flask/health-check for health checks.
Deploy an ECS Cluster using ECS Service Connect

All of them were done through the cli.

GitHub

You can watch the Bootcamp through this YouTube playlist : FREE AWS Cloud Project Bootcamp playlist

Deploy a static website with S3 and CloudFront using Terraform

Aadit Unni — Mon, 03 Apr 2023 15:53:13 +0000

[93/100] #100DaysOfCloud Today, I deployed a static website with S3 and CloudFront using Terraform.

I have done this using the console as well and if you would like to check it out then click here

You can try do it by yourself by following the steps from the link below: GitHub

Deploy a Highly Available Group of EC2 Instances Using Terraform

Aadit Unni — Sun, 02 Apr 2023 13:02:55 +0000

[92/100] #100DaysOfCloud Today, I deployed a highly available group of EC2 Instances with load balancer and autoscaling group using Terraform.

High Availability:
High availability (HA) refers to the continuous availability of your application and data regardless of any downtime. For example, if your web application is available 24/7 to serve your customers or clients without any downtime, it’s called a highly available web app.

High Scalability:
High Scalability refers to the ability of an application or a system to handle a huge volume of workload or expand in response to an increased demand for an application. For example, suppose you have an online shopping website running on a fleet of ten web servers and you plan for a discount sale. This sale will be going to increase the workload on your servers. So you anticipate the network traffic and you add 5 more servers to host your shopping website and avoid any downtime. Which means you have scaled your infrastructure. This ability of your application to scale is called high scalability. So the more scalable your application the more available it’s. So high scalability and high availability are correlated but not the same.

Terraform:
Terraform is an infrastructure as a code (IaC) tool. We can provision the cloud infrastructure using Terraform. It’s similar to AWS cloud-formation but it can work with almost any cloud platform. Usually, if you want to create some cloud infrastructure for example an EC2, you will go to the AWS console using your browser and then click on the launch instance button. This sounds easy and quick, but at some point, as the infrastructure gets larger and larger, it becomes difficult and tedious to manage such a large infrastructure manually by using only the AWS console. To solve this problem we can use Terraform.

You can try do it by yourself by following the steps from the link below: GitHub

Launch a NGINX server on EC2 using Terraform

Aadit Unni — Sat, 01 Apr 2023 21:27:51 +0000

[91/100] #100DaysOfCloud Today, I created a terraform template to deploy security group, use default VPC and an EC2 instance running NGINX.

Infrastructure as code (IaC) tools allow you to manage infrastructure with configuration files rather than through a graphical user interface. IaC allows you to build, change, and manage your infrastructure in a safe, consistent, and repeatable way by defining resource configurations that you can version, reuse, and share.

Terraform is HashiCorp's infrastructure as code tool. It lets you define resources and infrastructure in human-readable, declarative configuration files, and manages your infrastructure's lifecycle. Using Terraform has several advantages over manually managing your infrastructure:

Terraform can manage infrastructure on multiple cloud platforms.
The human-readable configuration language helps you write infrastructure code quickly.
Terraform's state allows you to track resource changes throughout your deployments.
You can commit your configurations to version control to safely collaborate on infrastructure.

You can try do it by yourself by following the steps from the link below: GitHub

FREE AWS Cloud Project Bootcamp Week 5 Part 6

Aadit Unni — Fri, 31 Mar 2023 20:36:21 +0000

[90/100] #100DaysOfCloud Today, I completed the Week 5 of the FREE AWS Cloud Project Bootcamp by Andrew Brown.

Here's what was left that I completed:

Implemented (Pattern E) Updating a Message Group using DynamoDB Streams. In this, I was able to start a new conversation and send a message.

This week was quite difficult and took me a lot of days to complete. I am lagging behind Week 6 as well. There was lot to implement and there were quite a lot of errors and took days to get it fixed especially because I had got help from others a bit slower. It was one hectic week. Tried solving one error and another one pops up. In the end, I am happy to complete it.

Checkout what I did for Week 5 :GitHub

You can watch the Bootcamp through this YouTube playlist : FREE AWS Cloud Project Bootcamp playlist

Layered Security in a VPC

Aadit Unni — Thu, 30 Mar 2023 20:28:29 +0000

[89/100] #100DaysOfCloud Today, I created a multi layered VPC security and launched 2 EC2 instances.

Amazon VPC allows us to launch AWS resources in an isolated network that is defined by us in a more private and secure environment. This feature enables us to increase the security level of the AWS resources. The AWS resources can be protected using multilayered VPC which includes security groups and Network Access Control list. The VPC security group provides security at instance level which acts like a firewall and controls both inbound and outbound traffic. The VPC NACL provides security at Network Level i.e subnet level which acts like a firewall for associated subnets and controls inbound and outbound traffic.

You can try do it by yourself by following the steps from the link below: GitHub