Skip to main content

MODULE 7 - Complete Web Deployment

Overview​

This module puts into practice everything you have learned by designing a complete web architecture: VPC + EC2 + Internet deployment. It integrates weeks 2 to 6.

Learning Objectives​

  • Design an end-to-end web architecture
  • Chain configurations VPC → EC2 → Security
  • Validate complete functionality
  • Identify and document risks

Target Architecture​

┌─────────────────────────────────────────────────────────────┐
│                    COMPLETE WEB ARCHITECTURE                │
├─────────────────────────────────────────────────────────────┤
│                                                              │
│                        INTERNET                              │
│                           │                                  │
│                           ▼                                  │
│              ┌────────────────────────┐                     │
│              │    Internet Gateway    │                     │
│              └───────────┬────────────┘                     │
│                          │                                   │
│   ┌──────────────────────┼──────────────────────┐          │
│   │                  VPC │(10.0.0.0/16)         │          │
│   │                      │                       │          │
│   │   ┌──────────────────┴───────────────────┐  │          │
│   │   │           Public Subnet              │  │          │
│   │   │           (10.0.1.0/24)              │  │          │
│   │   │                                       │  │          │
│   │   │   ┌───────────────────────────────┐  │  │          │
│   │   │   │    Security Group: sg-web     │  │  │          │
│   │   │   │    - HTTP 80 : 0.0.0.0/0      │  │  │          │
│   │   │   │    - HTTPS 443 : 0.0.0.0/0    │  │  │          │
│   │   │   │    - SSH 22 : My IP           │  │  │          │
│   │   │   │                               │  │  │          │
│   │   │   │   ┌───────────────────────┐   │  │  │          │
│   │   │   │   │   EC2 Instance        │   │  │  │          │
│   │   │   │   │   Type: t3.micro      │   │  │  │          │
│   │   │   │   │   OS: Amazon Linux 2  │   │  │  │          │
│   │   │   │   │   IP: 10.0.1.x        │   │  │  │          │
│   │   │   │   │   Public IP: x.x.x.x  │   │  │  │          │
│   │   │   │   │                       │   │  │  │          │
│   │   │   │   │   Apache/Nginx        │   │  │  │          │
│   │   │   │   └───────────────────────┘   │  │  │          │
│   │   │   │                               │  │  │          │
│   │   │   └───────────────────────────────┘  │  │          │
│   │   │                                       │  │          │
│   │   └───────────────────────────────────────┘  │          │
│   │                                              │          │
│   └──────────────────────────────────────────────┘          │
│                                                              │
└─────────────────────────────────────────────────────────────┘

Deployment Checklist​

1. Network (VPC)​

  • VPC created with appropriate CIDR
  • Public subnet created
  • Internet Gateway created and attached
  • Route Table configured (0.0.0.0/0 → IGW)
  • Subnet associated with the Route Table

2. Security​

  • Security Group created
  • HTTP rule (80) configured
  • HTTPS rule (443) if necessary
  • SSH rule (22) restricted
  • NACL verified (default OK)

3. Compute (EC2)​

  • AMI selected
  • Instance type chosen
  • Key pair created/selected
  • Instance launched in the correct subnet
  • Public IP assigned

4. Application​

  • Web server installed
  • Service started
  • Test page accessible
  • Logs verified

5. Validation​

  • HTTP test from the Internet
  • SSH test from authorized IP
  • CloudWatch metrics verification

End-to-End Validation​

# Validation tests

# 1. Check that the site responds
curl -I http://PUBLIC_IP

# 2. Check the content
curl http://PUBLIC_IP

# 3. Check SSH (from authorized IP)
ssh -i key.pem ec2-user@PUBLIC_IP

# 4. From the instance, check outbound connectivity
curl https://aws.amazon.com

Deliverable: Architecture Report​

1-page document including:

  1. Architecture diagram (with all components)
  2. Configuration table (CIDR, SG rules, etc.)
  3. Tests performed (with results)
  4. Identified risks (and proposed mitigations)
  5. Possible improvements (for the future)
  1. Web Architecture - AWS web architecture patterns
  2. Testing and Validation - Validation methodology
  3. Validation Quiz - 30 questions to validate your knowledge
  4. Lab: Web Deployment - Complete practical exercise

Next week: MODULE 8 - Scalability and HA