DEV Community: Brundha Rajendran

AWS-THREE TIER ARCHITECTURE

Brundha Rajendran — Mon, 31 Mar 2025 15:46:18 +0000

Three-tier architecture is a software design pattern that organizes an application into three separate layers or tiers. Each tier has a specific role, making the application easier to manage, scale, and develop.

Extract code:

Create s3 bucket

Create Role to integrate 2 services for Authentication

Steps to create three tier architecture

VPC creation
Subnet creation
Network connectivity
NAT Gateway
Routing configuration
Security Groups

Working:

1.VPC Creation

VPC only is selected, and fill out the VPC Settings with a Name tag and a CIDR range of your choice.

2.Subnet creation

Need 6 subnets for two availability zones.

az1(zone 1)

public subnet1
private subnet1
private database subnet

az2(zone 2)

public subnet2
private subnet2
private database subnet

3.Internet Connectivity

Create Internet Gateway(IG)

allocate Internet Gateway to VPC

*4.Create NAT Gateway *

NAT Gateway created to connect private subnet with internet.
Create 2 NAT Gateways-The architecture has 2 zones.
Before creating NAT Gateway we need to allocate elastic IP in Elastic IPS.

Follow the same steps for az2(zone 2)

5.Routing configuration

Improves communication, enforces security, and supports scalability by managing how data flows between layers efficiently.
Create route table for both public and private subnets

update subnet association for public and private subnets

6.Security groups

used to control traffic flow between the layers.
need to create 5 security groups.

public-internet facing load balancer
public instances in the web tier
load balancer
private instances
private database instances

** internet facing load balancer**

web tier

load balancer

private instances

** private database instances**

Creating Subnet groups

Database created!!

App Instance Deployment

Three Tier Architecture

Brundha Rajendran — Fri, 24 Jan 2025 15:58:11 +0000

Extract code:

Create s3 bucket

Create Role to integrate 2 services for Authentication

Steps to create three tier architecture

VPC creation
Subnet creation
Network connectivity
NAT Gateway
Routing configuration
Security Groups

Working:

1.VPC Creation

VPC only is selected, and fill out the VPC Settings with a Name tag and a CIDR range of your choice.

2.Subnet creation

Need 6 subnets for two availability zones.

az1(zone 1)

public subnet1
private subnet1
private database subnet

az2(zone 2)

public subnet2
private subnet2
private database subnet

3.Internet Connectivity

Create Internet Gateway(IG)

allocate Internet Gateway to VPC

*4.Create NAT Gateway *

NAT Gateway created to connect private subnet with internet.
Create 2 NAT Gateways-The architecture has 2 zones.
Before creating NAT Gateway we need to allocate elastic IP in Elastic IPS.

Follow the same steps for az2(zone 2)

5.Routing configuration

Improves communication, enforces security, and supports scalability by managing how data flows between layers efficiently.
Create route table for both public and private subnets

update subnet association for public and private subnets

6.Security groups

used to control traffic flow between the layers.
need to create 5 security groups.

public-internet facing load balancer
public instances in the web tier
load balancer
private instances
private database instances

** internet facing load balancer**

web tier

load balancer

private instances

** private database instances**

Creating Subnet groups

Database created!!

App Instance Deployment

Task-2 Interaction of 2 services

Brundha Rajendran — Thu, 23 Jan 2025 16:55:30 +0000

Step 1: Download and install PuTTY

step 2: Launch instance in AWS

AWS Documentation

Brundha Rajendran — Thu, 23 Jan 2025 08:56:52 +0000

** Deploying a React app to an Amazon S3 bucket and use Amazon CloudFront for global distribution.**
Steps:
Requirements:

A React app built with npm run build or yarn build.
An AWS account with access to S3, CloudFront, and IAM services. 1.Build the react application using "npm run build" command.

2.Build s3 Bucket

3.upload files and folders to s3

4.Enable static web hosting

5.Build cloudFront for global distribution

6.Run the URL in s3 and cloudFront

Documentation for deploying and running a React app on an Amazon S3 bucket and using CloudFront for distribution is successfully completed

AWS control tower

Brundha Rajendran — Thu, 23 Jan 2025 01:33:29 +0000

Service Name: AWS Control Tower
Logo: Service Overview

Key Features

- Automated Account ProvisioningLaunch new accounts within your organization using pre-configured blueprints.
- Guardrails for ComplianceImplement preventative and detective controls to ensure compliance with AWS best practices.
- Centralized DashboardMonitor multi-account activities and compliance from a single, user-friendly interface.
- Integrated with AWS OrganizationsLeverage seamless integration to manage organizational units (OUs) and account structures.
- Customizable BlueprintsTailor account setups with custom configurations and policies to suit your business needs.
- Audit and Reporting ToolsEnable visibility into compliance status and governance history for audits.

Technical Specifications:

Supported Regions: AWS Control Tower is available in multiple AWS regions worldwide, including North America, Europe, and Asia-Pacific.2. Compliance Frameworks: Supports frameworks like GDPR, HIPAA, and PCI DSS.
Service Integration: Works with AWS CloudTrail, AWS Config, and AWS Organizations.

Use Cases

Enterprise Account ManagementStreamline the setup and governance of AWS accounts for large organizations.
Compliance EnforcementAutomate compliance with regulatory frameworks across all accounts.
Development Environment IsolationCreate separate environments for dev, test, and production within governed guardrails.
Audit-Ready GovernanceSimplify audits with detailed governance and compliance reporting tools.

Pricing Model

AWS Control Tower does not have direct costs. Instead, you incur charges for.
AWS Services Used: Services provisioned by Control Tower, such as AWS CloudTrail and AWS Config, are billed based on their usage.
Account Resources: Resources created in managed accounts follow their respective pricing models.

Comparison with Similar Services

AWS Organizations: AWS Organizations provides multi-account management but lacks automated guardrails and governance capabilities.
Azure Landing Zones: Azure’s alternative provides blueprints for governance but may not integrate as seamlessly with other Azure services.
Google Cloud Resource Manager: Offers similar capabilities but is limited in scope compared to AWS’s broader governance tools.

Benefits and Challenges

Advantages:

Simplifies multi-account management with pre-configured governance.
Ensures consistent compliance across accounts.
Provides a single-pane-of-glass view for organizational governance.
Offers flexibility to customize policies and blueprints.

Limitations:

Limited availability in some AWS regions.
Initial learning curve for configuring and customizing guardrails.

Real-World Example or Case Study

Case Study: A global retail company leveraged AWS Control Tower to manage over 200 AWS accounts across multiple business units. By using pre-configured guardrails, the company ensured compliance with GDPR and PCI DSS standards, significantly reducing manual effort for account setup and audits. The centralized dashboard enabled quick identification and resolution of compliance issues, saving both time and resources.