DEV Community: Harun R Rayhan

First 3 things I always do after creating a new AWS account

Harun R Rayhan — Wed, 06 Jul 2022 14:24:50 +0000

As part of my job, I create AWS accounts frequently. I do lots of things depending on account needs before starting to use it. I found 3 common things I do with all of the new AWS accounts. I made a checklist. Nowadays I do these 3 things first and then everything else.

Let's make your account more secure and more protected than ever. 🔐

1. Budget with Alerts

One of the common issues with AWS is bills. People gets surprising bills because of misconfiguration or keep expensive services running unknowingly. Although, budget and alerts can NOT fix these issues but help keep bills tidy. And gives alerts if crosses the budget almost instantly.

Let's set a budget and a couple of alerts.

Go to Budget Console
Click on the "Create Budget" button.
Choose the first option, "Cost budget - Recommended" from the next page.
From the next page:
- A. Give it a name.
- B. Set the Period as Month for this demo, but you can choose any other period.
- C. Set Budget renewal type as Recurring budget
- D. Choose Fixed from the Budgeting method.
- E. Give a real budget amount to your need, mine is a demo account so $10 is fine for me. Let me iterate again, choose a real amount.
- F. From the bottom-right of the page click "Next"
From the next page, click on the "Add an alert threshold. Going to set a couple of alerts.
Let's set an actual budget alert:
- A. Choose 80 from the threshold.
- B. Select Actual from the trigger
- C. Put as many real and active emails as necessary. (⚠️ please add active email to save yourself from disaster).
- D. Let's add another one. Actual budget alert only sends notifications when you spent threshold amount. For example, it will send an email to me after spending $8 (80% of 10$). So, we need something else together with it.
Now set a forecasted budget alert:

Everything is the same as the first alert, only change Trigger to Forecasted. So, it will send you an alert if AWS forecast that you will spend more than your threshold. After configuring it, click the Next button from the bottom of the page.
Click the Next again from the next page. And then click the Create Budget button from the final page.

And you are done with, you probably going to be saved from a disaster by email notifications.

...

2. Add Multi-Factor Authentication (MFA)

You should use MFA for all IAM accounts including the root account. If not possible, at least apply it to root and privileged accounts. Login to the account (root or IAM) and let's protect it.

Go to Security Credentials of IAM Console
Click on the "Assign MFA device"
Choose Virtual MFA device from the popup
You can choose either of these apps: Authy, Duo Mobile, LastPass Authenticator, Microsoft Authenticator, Google Authenticator, Symantec VIP. My personal choice is Authy.
Click on the "Show QR code" from the next popup and scan it from your MFA app. Then enter two codes (one after another). And then click the "Assign MFA" button.

...

(bonus) Set Alias for the Account

Account ID or Alias is required to log in IAM account. Account ID is a long number. Humans are bad with a long number. A meaningful alias can save you from the trouble of remembering the account ID. Let's set an alias for your account:

Go to IAM Console after login into the root account.
You will see a Create button in the right sidebar under the account alias.
Choose a unique and memorable alias for your account and click "Save changes".

Use the alias instead of account ID next time you are logging into an IAM account.

...

3. Create IAM account(s) for Day-to-Day tasks

You need the root account for a few tasks. Other than that you should not use the Root account. Perhaps, not for day-to-day tasks, lunching, and provisioning services.

I always create an IAM account with admin permission. I do all of the tasks from this account except those tasks that require the root account. So, let's create an admin IAM account.

Go to Users page of IAM Console.
Click on the Add users button from top-right corner.
You will be in this page:
- A. Choose an username
- B. Chosse access type. I need both CLI and AWS Console access. (UPDATE: Don’t choose CLI, if not necessary. You can create different IAM users for CLI actions.)
- C. You can enter your custom password or choose auto generated.
- D. It's better to require reset password to choose it's own.
- E. Click on the Next: Permission button from the bottom-right
You are in the permission page:
- A. Choose Attach existing policies directly from the top options
- B. Search for the AdministratorAccess role
- C. Choose the AdministratorAccess role
- D. Click on the Next: Tags button
You are in the tags page. You can add you tag(s) if you want but it's optional. Click in the Next: Review button.
Take a look on everything and check if it's matches to mine. And then click on the Create user button.
Now we are in the final page:
- A. The link to login to the console
- B & C. Username & Password to login to the console
- D & E. Access key & secret to login via CLI or App
- F. You can download the .csv file with credentails. You can save it in safer place for later use.

...

Conclusion

There are more things to do to save bills and tighten security of your account. But these are the first 3 things I do and doesn't require much technical knowledge.

You can subscribe to my newsletter in my blog. Follow me on Twitter, Dev.to, and Hashnode for regular updates. Don't hesitate to show your love by clicking Like 👍 button.

Install Cloud Watch Agent in Amazon Lightsail instance for Monitoring, Logging & Debugging

Harun R Rayhan — Sat, 04 Jun 2022 04:51:10 +0000

Use the Cloud Watch agent to send logging and debugging to Cloud Watch. You can check logs without logging into instances. It's accessible even after the instance is terminated.

Life is far from perfect, and so does Amazon Lightsail instances. It can be frustrating if there is an error and you don't know how to debug it. The server itself and applications installed in it produces log files. And server stats can be helpful in monitoring, logging, and debugging.

Prerequisites

It would help if you had an existing Amazon Lightsail instance. You can create a new instance by following "Deploy WordPress App to Amazon Lightsail" or "Deploy Laravel Application to Amazon Lightsail".

Let's go 🏃‍♂️

Create an IAM User

Go to IAM Console.
Click on the Users menu from the navigation panel and then click on the Add Users button.
You will be in the Add user screen:
- A. Give it a name. For me, it's LightsailCloudWatchAgent.
- B. Check the Access key - Programmatic access option
- C. Click on the Next: Permissions button.
You will be in the Set permissions page:
- A. Select the Attach existing policies directly option.
- B. Search for CloudWatchAgentServerPolicy.
- C. Select CloudWatchAgentServerPolicy, and
- D. Click the Next: Tags button.
Tags are optional. You can choose your tags. Click on the Next: Review after you are done.
From review page you can check if everything alright and then click the Create user button.
Your account is created and you will be in this screen:
- A. & B. Copy Access Key ID and Secret access key in somewhere safe, or,
- C. Download the csv file. We will need this access later.

Configure AWS Access

Check if AWS CLI is installed by running aws --version. You should see the current version. If you get an error, CLI probably is not installed.
Ignore this if AWS CLI is already installed. Run this on ubuntu:

curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install
sudo ./aws/install --bin-dir /usr/bin --install-dir /usr/local/aws-cli --update

Follow this instruction to install on other servers.

Now, we are going to configure the AWS access generated in the last step. Run this

sudo aws configure --profile AmazonCloudWatchAgent

Enter Access Key and Secret Like this:

Install the Cloudwatch Agent

You need to SSH into your instance. Here is how you can SSH into your Amazon Lightsail Instance.
Now, let's install the agent. I'm using ubuntu, you can just run this command

# Download the agent
wget https://s3.amazonaws.com/amazoncloudwatch-agent/ubuntu/amd64/latest/amazon-cloudwatch-agent.deb
# Install the agent
sudo dpkg -i -E ./amazon-cloudwatch-agent.deb

Now run this command configure the agent.

sudo /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-config-wizard

Input your choices as I did. Check the arrow mark. You can choose your own or follow mine.

Give AWS Access to the Agent. Run this:

sudo vim /opt/aws/amazon-cloudwatch-agent/etc/common-config.toml

Paste this in the bottom of the file:

[credentials]
shared_credential_profile = "AmazonCloudWatchAgent"

Now hit ESC and then :wq!.

Start the agent:

sudo amazon-cloudwatch-agent-ctl -c file:/opt/aws/amazon-cloudwatch-agent/bin/config.json -a fetch-config -s

Check the status of the agent by using:

sudo amazon-cloudwatch-agent-ctl -a status

You should see something like this:

Verify metrics on CloudWatch

Go to the Cloudwatch Console
On the left navigation panel, choose Metrics.
Under “Custom Namespaces”, You should see a link for “CWAgent”.
Choose CWAgent.
Choose any ImageId, InstanceId, InstanceType.
Select the checkbox to display metrics on the graph. Here is mine:

Conclusion

Hope you enjoyed this article. This is the last article of the Amazon Lightsail series. You can ask me any Lightsail-related question in the comments or on social media.

You can subscribe to my newsletter to get blog updates every week. Follow me on Twitter, Dev.to, and Hashnode.

Connect Redis/Elasticache to application in Amazon Lightsail instance

Harun R Rayhan — Sat, 28 May 2022 14:32:18 +0000

You can create Redis/Elasticache even though Amazon Lightsail doesn't offer it. You can create an Elasticache for Redis cluster in AWS and connect using VPC Peering.

Prerequisites

An Amazon Lightsail instance. To create a new instance follow Deploy Laravel Application to Amazon Lightsail or Deploy WordPress App to Amazon Lightsail
Be a little familiar with AWS Console.

Create Elasticache for Redis

Go to Elasticache for Redis console. Change the region that you want to launch it. I selected us-east-1 as my Lightsail Instance(s) are there.
Click the Create Redis cluster button from the center of the page (or wherever you see it)
You will land in this screen 👇
- A. Choose Configure and create a new cluster
- B. Choose cluster mode Disabled
- C. Give it a name
- D. Uncheck Multi-AZ Enable
- E. Uncheck Auto-failover Enable
- F. Select a free-tier node type. Currently it's "cache.t3.micro" and "cache.t2.micro".
- G. Do not need any replica for this demo. Make it "0".
- H. Give subnet groups a name
- I. Select your VPC
- J. And then clieck the Next button from the bottom.
You will be on the second page. Just uncheck Enable automatic backup and click the Next button from the bottom of the page.
Review everything on the 3rd and final page. And then click the Create button from the bottom of the page.
It will take a few minutes to get created. Wait for status changes to Available.
now, click on the Cluster name. And you will be on the details page.

Copy the Primary endpoint in your clipboard or somewhere safe.

Configure Security Group for Redis cluster

Go to the Security groups of VPS Console. Make sure you are in the same region as the Redis cluster. And then click the Create security group from the top-right corner.
You are in create Security Group page
- A. Give it a name
- B. Click on the Add rule button of the Inbound rules section.
- C. Select 6379 as Custom TCP Port
- D. Add your Amazon Lightsail VPC IP range. To generate it, check your instance's Private IP address. Mine is 172.26.3.157. Replace the last two sections with 0 and add /16. So, mine became 172.26.0.0/16.
- E. Optionally, you can add a description
- F. Then hit the Create security group button from the bottom of the page.
Now go to the Network and security tab of your Redis cluster and click the Modify button from the Security groups section.
Click on the Manage button from the next screen
Select the correct security group from the pop and then click on the Choose button.
Click Modify button from the bottom of the page.

It will take a few minutes to complete the modification. Wait until the status changes to Available.

VPC Peering

The important part of this tutorial. We need to peer VPC between Lightsail and Redis cluster's VPC to connect it.

Go to the homepage of the Amazon Lightsail console. Click the Account from the Account menu dropdown.
Click on the Advanced tab from the Account settings page. You will see a list of your VPCs. Connect the one that resides in your Redis cluster. For me, it's *Virginia (us-east-1)
*.

Connect to the Redis cluster from the Lightsail instance

Using CLI

Connect to the instance using SSH. Follow this to connect to SSH.
Install Redis CLI
- A. On Amazon Linux 2

  sudo amazon-linux-extras install epel -y
  sudo yum install gcc jemalloc-devel openssl-devel tcl tcl-devel -y
  sudo wget http://download.redis.io/redis-stable.tar.gz
  sudo tar xvzf redis-stable.tar.gz
  cd redis-stable
  sudo make BUILD_TLS=yes

B. on Ubuntu

  sudo apt install redis-server

Now connect to the Redis cluster. The moment of truth.

redis-cli -h <redis_endpoint> -c -p 6379

Replace <redis_endpoint> with your Primary endpoint of Redis you copied in the clipboard. Remove port (":6379") from the endpoint URL. You will see this screen if successful 👇

You can use the ping, set, and get commands to test it out.

Connect to Application

You will get packages for most of the Applications, languages, and Frameworks. Check docs. For Laravel, you just have to configure it in the .env file.

Conclusion

Hope you enjoyed this short article. You can subscribe to my newsletter, and follow me on Twitter, Dev.to, and Hashnode.

Add Lightsail Load Balancer to Application hosted in Amazon Lightsail instance(s)

Harun R Rayhan — Sat, 28 May 2022 11:12:16 +0000

Lightsail offers Load Balancer. It's very easy to provision one and attach one or multiple instances to it. Let's create one and attach instances to it.

Prerequisites

You need one or more Amazon Lightsail instances to attach to the load balancer in the same region. You can create it by following Deploy Laravel Application to Amazon Lightsail or Deploy WordPress App to Amazon Lightsail

⚠️ Warning: Amazon Light Load Balancer going to cost you USD$18/month. It has no pre-tier available. Be sure before going to provision one. You can check the whole article before creating.

Provision a Load Balanced

Go to the homepage of the Amazon Lightsail console. Click on the Networking tab and click on the Create load balancer button.
You are in the Create a Load balancer screen like this 👇
- A. Change your region to where your instances are. My instances are in Virginia.
- B. Give it a name, and
- C. Hit the Create load balancer button from the bottom.
Load balancer will be created in a moment and you should land on the Load balancer page.

Attach instances to the Load balance

Go to the homepage again and then click the Networking tab. You should see Loadbalancer(s) including the one just created. Click on the name of the Load balancer.
Our load balancer doesn't have any attached instance(s) yet, we are going to attach one or more. Select your instance in the Target instances section.

I just have one in this region. You should see all of the instances you have in the region where the load balancer is provisioned.
Confirm the attachment of your instance
Do the same process until you attached all of your target instances.
Go to Load balancer URL (DNS name) and you should see your application.

ℹ️ If you don't see the desired page, check your application or other tools (Apache, Nginx, etc.) setting.

Add Domain or Sub-Domain

You can create DNS Zone in Lightsail for your domain and configure it. Follow this to add your domain/sub-domain.
You can add the Load balancer URL (DNS name) as A record in your domain's DNS control panel.

Enable HTTPS

Go to the Inbound traffic tab of your Load balancer setting.
- A. Create an SSL certificate for your domain by clicking the Create certificate + button.
- B. You should see all of the created certificates in the SSL/TLS certificate list and select the one you just created.
- C. Optionally, you can Redirect from HTTP to HTTPS. (After enabling the HTTPS).

Conclusion

Hope you enjoyed this short article. You can subscribe to my newsletter, and follow me on Twitter, Dev.to, and Hashnode.

Add Database to Application hosted in Amazon Lightsail

Harun R Rayhan — Mon, 23 May 2022 14:04:33 +0000

Amazon Lightsail offers dedicated Databases. You can make use of it instead of an on-instance database. It's easy, managed, secure, and most importantly it's not tied to the instance. So, your database will be safe even if instance crashes.

In "Deploy WordPress App to Amazon Lightsail, the database is installed in the instance. In this article, we are to cover the dedicated databases.

⚠️ Warning: Dedicated Lightsail Databases are going to cost $$$. It has a 3-month free tier at this time of writing. Check your plan before creating a database.

So, what are you waiting for? Let's dive right in 🏃‍♂️

Create a Database Instance

Go to your Amazon Lightsail home page. And then click on the Databases tab.
Now click on the Create database button
Now you are on the database creation page:
- (A) Select AWS Region and Availablity Zone (AZ). for me Virginia and Zone A are perfect.
- (B) Choose the Database engine and version. I selected MySQL 8.
- (C) Click on Specify login credentials, and
- (D) Click on Specify the master database name.
Scroll down a little and configure this:
- (A) Choose Database username
- (B) Password. I'm okay with the generated password, but you can choose yours.
- (C) The first/master database. You can create more later.
- (D & E) Choose your plan type and the actual plan. You can choose the free-tier option like me.
- (F) Give it a name, and
- (G) Hit the Create database button Your database should be created within a few minutes. Please wait for it until it's Running.

Database Credentials

You already know your database username and master database. For everything else, go to your database and click on the Connect tab. You should see your credentials like this:

(A) DB Username
(B) DB Password
(C) DB Endpoint
(D) DB Port

Connect to the database

Instance CLI

You can SSH into your instance.

Install MySQL using the following command:

sudo apt install mysql-server -y
sudo systemctl start mysql.service

And then connect to MySQL:

mysql --host <db_endpoint> --user <db_username> --password

You will be asked for your DB password. If successful, you will see this screen:

SQL Client App over SSH (SSH Tunneling)

Most modern SQL Client applications (ex TablePlus, MySQL Workbench) have the option to connect Database via SSH. You can connect using that option.

Add Database to your application

Laravel and NodeJS

You can update your application's .env file with Database credentials.

WordPress

Update your wp-config.php file with the database credentials.

Any other app

Update your database credential in your application's configuration and/or environment file. Check your application's documentation for that. Or it's custom, you know where to put it.

Conclusion

Thanks for reading the article. Adding dedicated databases to Amazon Lightsail instance is not that hard. You can follow me to get instant updates on my posts. You can also subscribe to my newsletter.

Deploy Laravel Application to Amazon Lightsail

Harun R Rayhan — Thu, 19 May 2022 15:06:43 +0000

Beginners friendly step-by-step guide to deploy any application to Amazon Lightsail. This article demos a Laravel app but the idea is the same for all kind of applications.

Introduction

Amazon Lightsail is a fixed monthly priced VPS service offered by AWS. Once you install the OS of your choice, you can run almost any application. In this application, I'm showing how to deploy one of my favorite backend frameworks called Laravel. Which most of you might hear of. Let's deploy it.

I don't like/know Laravel

It's totally fine if you don't like or know Laravel. Laravel is just the framework I choose to demo but it can be any app. It can be Node.js, Python, Django, Fast API, Ruby on Rails, or any other app. The idea is the same, but some of the steps in deployment will be different.

Prerequisites

You need a Laravel app to deploy. Don't worry if you don't have one, I have to best Laravel (v9) app you can find in the internet (pun intended).

Let's deploy our Laravel app. 📦👉☁️

Create Amazon Lightsail Instance

Go to Lightsail homepage. Click on the Create instance button under Instances tab.
You will land on the Create instance page. We will use Ubuntu for this demo but you are open to choosing the OS of your choice.

(A) Change the AWS Region and Availablity Zone (AZ) of your choice if not the correct one selected. (B) Select Linux/Unix platform. (C) Select Ubuntu (20.04 LTS) as OS. The blueprint should be OS Only. (D) Choose a plan. (E) Give it a name, and (F) Hit the Create instance button from the bottom of the page.
Your instance is in the Pending state. Will be Running in a few minutes.

Assign a static IP

Read how to assign a Static IP to an Amazon Lightsail Instance.

Connect to the instance using SSH

ℹ️ I described in detail How to connect to an Amazon Lightsail instance using SSH.

Go to the instance page by clicking on the name. And go to the Connect tab. We need these 3 things: (A) Public IP, (B) SSH Username, and (C) Download the SSH Key.
Change permission of Key file:

# Change "path/to/keyfile.pem" with your key file name
chmod 400 path/to/keyfile.pem

Connect to the SSH

#format 
ssh -i "path/to/keyfile.pem" <username>@<ip_address>
# Should look like this with your own value
# ssh -i "LightsailDefaultKey-us-east-1.pem" ubuntu@52.201.59.133

If you are asked to add IP to known hosts, type yes and you should be logged in.

Installing Necessary Scripts

Our server is created and it's empty. You can install any script you want, depending on what you need. In this demo, we are going to use Laravel. You can follow along even if you have a different app/stack.

Update package information

sudo apt-get update

Some packages

sudo apt install curl git unzip -y

Install PHP I love the latest PHP 8.1. It's not officially available in Ubuntu 20.04 yet. We will enable the PHP Repository to install PHP 8.1.

sudo apt install software-properties-common -y
sudo add-apt-repository ppa:ondrej/php -y
sudo apt install php8.1-fpm php8.1-cli php8.1-mysql php8.1-curl php-xml php-mbstring -y

Check php version by using php --version command. You should see something like this:

Install Composer

# Download the bin file
curl -sS https://getcomposer.org/installer | php
# Move it to correct path
sudo mv composer.phar /usr/local/bin/composer
# Make it executeable
sudo chmod +x /usr/local/bin/composer

Install Nginx & configure nginx

sudo apt install nginx -y

Clone your application repo

# go to www directory
cd /var/www/html
# clone the git repo
sudo git clone https://github.com/HarunRay/laravel-to-lightsail.git
# go to application directory
cd laravel-to-lightsail
# copy .env.example file
cp .env.example .env
# Install dependencies
sudo composer install

Create a nginx config file

sudo vim /etc/nginx/sites-available/laravel

Paste this code. Change 52.201.59.133 to your IP address and save.

server {
    listen 80;
    listen [::]:80;
    server_name 52.201.59.133;
    root /var/www/html/laravel-to-lightsail/public;

    add_header X-Frame-Options "SAMEORIGIN";
    add_header X-Content-Type-Options "nosniff";

    index index.php;

    charset utf-8;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location = /favicon.ico { access_log off; log_not_found off; }
    location = /robots.txt  { access_log off; log_not_found off; }

    error_page 404 /index.php;

    location ~ \.php$ {
        fastcgi_pass unix:/var/run/php/php8.1-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
    }

    location ~ /\.(?!well-known).* {
        deny all;
    }
}

Now, run this:

# link nginx config 
sudo ln -s /etc/nginx/sites-available/laravel /etc/nginx/sites-enabled/
sudo systemctl start nginx
sudo systemctl enable nginx

Set Laravel App Permission

# Go to your laravel app directory
cd /var/www/html/laravel-to-lightsail/
# Add files & folder www-data user & group
sudo chown -R www-data:www-data .
# Add your ubuntu to group
sudo usermod -a -G www-data ubuntu
# Set file(s) permission
sudo find . -type f -exec chmod 644 {} \;
# Set folder(s) permission
sudo find . -type d -exec chmod 755 {} \;
# Set cache directory permission
sudo chgrp -R www-data storage bootstrap/cache
sudo chmod -R ug+rwx storage bootstrap/cache

Generate app key

sudo php artisan key:generate

Update the .env file Open file

sudo vim /var/www/html/laravel-to-lightsail/.env

Now, change these values;

APP_ENV=production
# Change IP to yours
APP_URL=http://52.201.59.133

Now go to your public IP address. Mine is http://52.201.59.133. You should see this welcome page.

Congratulations, your Laravel app launched on Amazon Lightsail instance. 🚀

Conclusion

In the next few articles, we are going to configure the database, load balancer & Redis (Elasticache). Follow me and subscribe to my newsletter.

Snapshot and Restore of Lightsail Instance to Lightsail/EC2

Harun R Rayhan — Thu, 12 May 2022 14:31:04 +0000

Taking regular backup/snapshots of a production application is important. It is one of the main requirements of a disaster recovery(DR) plan. But snapshots are not only for DR, you can use them to move/clone instances to different regions or availability zone(AZ). Maybe move to a higher spec instance. Or maybe you want to move to Amazon EC2 altogether.

Prerequisites

You just need an existing Amazon Lightsail instance. Don't worry if you don't have one, follow how to Deploy WordPress App to Amazon Lightsail.

Take Snapshot (Backup)

Click on the instance name you want to take a snapshot. All of the instances are listed under the Instances tab of the home page.
Go to the Snapshots tab of your instance page.

(B) We are going to create a manual snapshot. This one will take a snapshot instantly.
(C) Optionally, you can set up an automatic snapshot too. It will take daily snapshots.

⚠️ **For production instance, always set up an automatic snapshot. **
Give it a name and click Create.

It will take some time if this is the first snapshot of the instance, size is another factor. Subsequent snapshots are faster, as it takes incremental backups, only changes from the last snapshot.
Upon completion, it will look like this:
You will find all of the snapshots in the Snapshots tab of the homepage. I have just one:

Restore to new Amazon Lightsail instance

Click on these 👇 three dots:
Click on Create new instance from this menu:

ℹ️ You can click on the second item, Copy to another Region to literally copy to another region and restore to a new instance there. Snapshot stored in an S3 bucket in the same region where the instance launched. You can't access the S3 bucket as it's managed by AWS. To restore a snapshot to a new instance in another region, you have to copy it first.
The page looks familiar, right? It's the same create instance page.

(A) You can change the availability zone(AZ) if you want. It's great if you are using multiple instances for horizontal scaling, gives high availability(HA).
(B) Choose an instance the same size or larger than the source. Choose larger for vertical scaling. If you need a larger instance than you originally have, this is the way.
(C) Give it a name, and
(D) Click the Create instance button from the bottom of the page.

Wait a moment, maybe a few minutes. Congratulations 🎉 you just restored your instance.

...

Copy to another Region

Snapshot stored in an S3 bucket in the same region where the instance launched. You can't access the S3 bucket as it's managed by AWS. To restore a snapshot to a new instance in another region, you have to copy it first. Let's copy it to another region.

Go to the Snapshots tab of the homepage. Find your instance and snapshot. Click the three dots. And then click Copy to another Region:
(A) Choose the region you want to copy the snapshot, (B) give it a name, and (C) click the Copy snapshot button from the bottom of the page.
It will take a few minutes to copy the snapshot.

...

Restore/Export to Amazon EC2 instance

Click three dots from the snapshot menu you want to restore to EC2 and click the Export to Amazon EC2 menu item
Click the Yes, continue button in the popup. Click Acknowledge in the next popup.

⚠️ If you are not in the free-tier or cross the free-tier limit, you may get charged for this. If you are not sure, don't do it. Just follow my demo.
You will see a task running like this ↓. Wait for a while to finish. A small snapshot wouldn't take much time.
After the copy task is completed, go to Snapshots of EC2 Management Console. Choose the correct region. You should see your snapshot there.
Select the snapshot and click the Create image from snapshot from the Actions menu
Give the name of the image and click the Create image button from the bottom of the page
Now go to AMIs page of EC2 Management Console. Choose the correct region, N. Virginia (us-east-1) in my case. You should see all of your AMIs.
Select the AMIs you just created and click the Lunch Instance from AMI button in the top right corner.
You will see a traditional EC2 Lunch page:

(A) Give your instance a name. (B) Choose an instance type, for my case, it's free tier eligible t2.micro. (C) Choose existing key pair or create a new one. You need it to log in via SSH. (D) Check the ports you want to open, in my case I selected all of them.

Now, click the Lunch instance button from the right sidebar. Wait for a while to instance state to become Running and Status check 2/2 checks passed.

You will see the EC2 Instances page like this: Select the instance. Copy the public IP address and try it in the browser. You should see the same page as Amazon Lightsail instance.

ℹ️ Manual snapshots will not be deleted even if you delete the instance. So, don't forget to delete unnecessary snapshots to save bills.

...

Conclusion

Hope you enjoyed this article. Ask your questions in the comment. Subscribe to my newsletter to get weekly updates.

Add (Cloudfront) CDN Distribution to WordPress Application hosted on Amazon Lightsail

Harun R Rayhan — Tue, 10 May 2022 12:15:16 +0000

It's not very hard to add CDN Distribution to a WordPress app hosted on Amazon Lightsail. But if you are new, it can be cumbersome. This article is to demonstrate how to do it easily.

Why Should I use CDN distribution?

You might hear about Content Delivery Network (CDN). If not, here is an article explaining "what is CDN?".

If you are not interested to read a long article, here is TL;DR:
In CDN, Lots of small servers run closer to your customer. Content gets cached there and served from the closer server(s) of your customer. In that way, ease the pressure from the main servers.

What is CDN Distribution?

It is the Amazon Lightsail CDN service. Under the hood, it uses Amazon Cloudfront. It has 300+ points of presence to deliver content closer to your customers. On top of that, it comes with AWS Shield, which protects infrastructure from DDoS attacks.

Are you excited to create your first CDN Distribution? Let's go 🏃‍♂️

Prerequisites

WordPress Application

You need to have an existing WordPress application for this tutorial. Don't worry if you don't have one. I covered How to Deploy WordPress Application to Amazon Lightsail in the first part of this series.

Attach a Static IP to WordPress Instance

Go to the Networking tab and then click on Create static IP
(A) Select the WP App instance. (B) Give it a meaningful name and (C) Hit Create.

Now we are ready to create our first distributions.

Create CDN Distribution

Go to home page of Lightsail. Go to Network tab again. This time hit the Create distribution button.
Select the WordPress Instance as Origin
Hit Yes, apply to apply the predefined WordPress settings
Now, (A) choose a plan. (B) Give it a name and (C) Hit Create Distribution button

Woohoo 🎉 Your first distribution is created. Wait for a while to be available. After getting done, you will see this 👇

(A) Your domain for the distribution. You can access the site using this URL.

Domain

Update the Domain in DB

Login to your WordPress application's database, you may follow this. Update the siteurl and home to your wp_options table to your distribution domain.

Bonus

You can use a custom domain instead of CloudFront's sub-domain. You may follow this tutorial.
You can add Object Storage to your WordPress app with a CDN distribution by following this tutorial.

Conclusion

Hope you enjoyed this simple article and created your first CDN distribution. Ask your questions in the comment. Subscribe to get the next blog post. Thanks 🙏

Deploy WordPress App to Amazon Lightsail

Harun R Rayhan — Sun, 08 May 2022 11:02:48 +0000

Introduction

AWS Lightsail can be the easiest entry to the AWS Cloud. It has fixed monthly pricing unlike most other services, so you don't have to worry about a huge monthly bill.

Lightsail is really great for small to medium apps. It has out-of-the-box support for WordPress, Magento, Joomla, Prestashop, Drupal, Ghost, and Django apps.

It provides pre-configured stacks like LAMP, NGINX, MEAN, and Node.js. You can also launch pre-configured Plesk, WHM & cPanel in just a few clicks.

But that's not all. You can launch any Linux-based and Windows OS instance. My personal favorites are Ubuntu and Amazon Linux 2.

Prerequisites

Need a valid AWS account to deploy the WP app. If you don't have one, just create one from here. Before starting to deploy your app read about Amazon Lightsail Pricing and Free-Tier. Don't worry, I will try to keep everything within the free tier. At this time of writing, you can run a Lightsail instance for free for 3 months.

Install WordPress App

Are you seeing this? Let's go 🏃‍♂️

Create Instance

Now click on the big Create Instance button. If you don't see one, follow this:
Let's choose Instance location, platform, and blueprint:

A. Click the link to change location and availability zone (AZ) if not what you want. I recommend selecting a location closer to your customers.
B. Choose the Linux/Unix platform.
C. Select the Apps + OS from the blueprint.
D. Now choose WordPress from the app list. Not the multisite one.
Now scroll down to Choose your instance plan section. I chose a free-tier plan and only one instance. Here is my setup:
Finally scroll to the bottom of the page and click the Create instance button. Wait for the status to become Running. Congratulations, your instance has launched 🚀

Assign a Static IP (optional)

AWS Lightsail Instance comes with public (and private) IP. Which changes every time Stop and Start the instance. My Public IP was this when I launched the instance:

After Stop and Start the instance, it got a new Public IP address:

We have to fix that. So, let's create and assign a Static IP:

Click on your application instance name to see the details of your instance.
Click on + Create static IP from here:
Add a meaningful name and click Create: > ⚠️ Warning: You are allowed to assign 5 static IPs for free. You will be charged for static IP that is not attached to a running instance.

Connect to the instance using SSH

You can connect to an instance in two ways:

Using browser

That's the easiest. Go to the Connect tab and click Connect using SSH:

Using SSH Client

Download the SSH key from here:
If you are using PuTTY you can follow this tutorial.
If you are using a terminal in macOS or Linux, run this command on where you downloaded the SSH key.

# Run for the first time to fix the permission
chmod 400 <path/to/your-lightsail-ssh-key>.pem

# Connect to your Lightsail instance
# Username and Public IP can be found in "Connect" tab
ssh -i "<path/to/your-lightsail-key>.pem" <username>@<public_ip>

Get Admin Username and Password

You can get the username from the Connect tab. The username is user for this stack.
To get the password, log in to SSH and run this command

cat bitnami_application_password

Now open a browser tab and go to http://<public_ip>/wp-admin. Enter username and password above. You should see the WP Admin dashboard like me.

Add a Domain

Go to the Home page. Click on the Networking tab and then hit Create DNS zone button
Add your domain name. Scroll to the bottom and click the Create DNS zone button
Add these name server records in your domain control panel (ex. Namecheap, GoDaddy). You might have different records than mine
Now to the good part. Click + Add Record button. Add your instance and click on tick icon to save. > ⚠️ It may take few minutes to days to propagate DNS records.
Now update the domain name in siteurl and home rows of wp_options table.

Import Existing App

Import Database

You may have an existing database. You can import your database to the Lightsail instance. You can use a Database client app like TablePlus, MySQL Workbench, or even just the terminal.

Your database credentials exist in wp-config.php file. Connect to your instance via SSH and run this command:

cat stack/wordpress/wp-config.php

Use DB credentials to connect to DB, and replace localhost with the instance's public IP. Connect to your DB via SSH (recommended) or add the 3306 port here:

ℹ️ Don't forget to change the domain name in siteurl and home rows of wp_options table.

Import existing files

Application folder located in stack/wordpress. You can upload files in two ways:

SFTP Client: You can use SFTP clients like FileZilla or Transmit to upload files. Use the same SSH credential to upload files.
Git: Connect to your instance via SSH. Install git by using this command:

sudo apt-get install git

Now pull your files from git using the git clone/pull command.

Conclusion

This is just the first step toward deploying your WordPress app to Amazon Lightsail instance. There are lot more you can do. You are welcome to ask your questions, give me feedback, or any improvement request.