DEV Community: Naveen Kumar J

Deploying a 3-tier application

Naveen Kumar J — Mon, 31 Mar 2025 18:19:32 +0000

Part I:

(1) Download code from github
(2) Create S3 bucket
(3) IAM Role creation
(4) Create VPC
(5) Create Subnets - 6
(6) Create IG - 1
(7) Create NAT GW - 2
(8) Create Route Tables (public sn, private sn - 2, private db - 2)
(9) Create Security Groups (Internet-1, Web tier-1, Internal-1, App tier-1, DB-1)
(10) Create Database
(11) Create App tier (instance)

I. connect app tier instance in session manager

II. follow the commands:
(i) sudo -su ec2-user
(ii) ping 8.8.8.8
(iii) sudo yum install mysql -y
(iv) mysql -h (CHANGE-TO-YOUR-RDS-ENDPOINT) -u (CHANGE-TO-USER-NAME) -p
(v) (TYPE DB PASSWORD)

III. type the SQL commands:
(i) CREATE DATABASE webappdb;
(ii) SHOW DATABASES;
(iii) USE webappdb;
(iv) CREATE TABLE IF NOT EXISTS transactions(id INT NOT NULL
AUTO_INCREMENT, amount DECIMAL(10,2), description
VARCHAR(100), PRIMARY KEY(id));
(v) SHOW TABLES;
(vi) INSERT INTO transactions (amount,description) VALUES
('400','groceries');
(vii) SELECT * FROM transactions;

IV. type 'exit' to exit from MySQL client

(12) modify the 'DBconfig.js' file in the app tier folder and upload the app tier folder to s3
(13) Back to the SSM, follow the commands:

curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.38.0/install.sh | bash
source ~/.bashrc
nvm install 16
nvm use 16
npm install -g pm2
cd ~/
aws s3 cp s3://BUCKET_NAME/app-tier/ app-tier --recursive
cd ~/app-tier
npm install
pm2 start index.js
pm2 list
pm2 logs
pm2 startup
pm2 save
curl http://localhost:4000/health
curl http://localhost:4000/transaction

(14) Create AMI for the App tier instance
(15) Create Target Group
(16) Create Load Balancer for App tier
(17) Launch Templates
(18) Create Auto Scaling Group
(19) update the ngnix file and upload it along with the WebApp to S3
(20) create an instance for WebApp
(21) connect the instance to SSM
(22) Create AMI for the Web tier instance
(23) Create Target Group
(24) Create Load Balancer for Web tier
(25) Launch Templates
(26) Create Auto Scaling Group

(i) Subnet Assocoations -> Edit subnet associations -> select public subnets

(ii) Subnet Assocoations -> Edit subnet associations -> select private subnets

(iii) Internet SG

AWS 101 Workshop

Naveen Kumar J — Mon, 31 Mar 2025 18:12:04 +0000

(1) Setup Networking (VPC)

Navigate to the AWS Management Console and locate the VPC service.
Click Create VPC.
Select VPC and more. This will start the VPC wizard.
Create a private and public subnet in 2 Availability Zone Each subnet is connected to a route table, which determines how network traffic is routed. The public subnets are routed to an Internet Gateway
In the NAT gateways section, select 1 per AZ.
Review the Network

(2) Resource Security (SGs)

Browse to the Security Groups part of the Amazon EC2 service.
click Create security group to define a new custom security group for our resource
In the Inbound rules section click Add rule

- Load Balancer --> HTTP TCP 80 Anywhere-IPv4 Allow HTTP inbound from Internet
- EC2 --> HTTP TCP 80 Load Balancer Security Group Allow HTTP inbound from Load Balancer
Tags are metadata labels you can apply to AWS resources for organization and cost tracking. Create a new tag for the security group by clicking Add new tag. Enter Name for Key and LoadBalancerSecurityGroup for Value.
Finalize the creation by clicking Create security group

Load Balancer:

Web Server:

(3) Access Management (IAM)

Browse to the IAM service and click create Role.
Select AWS Service. Choose EC2 for the service or use case.
Select EC2 Role for AWS Systems Manager and click Next
Confirm that the AmazonSSMManagedInstanceCore policy and AmazonS3ReadOnlyAccess Policy has been added to the role and click Next
Name the role. Scroll to the bottom and click Create role

(4) Deploy Compute (EC2)

Browse to the EC2 service.
Click Launch Instance.
Name the server and choose the created VPC, SG, add Role and paste the code then click create.

Upload the User data file:

(5) Administer Web Server (SSM)

In the Amazon EC2 dashboard, select the web server instance. You'll notice it only has a private IP address, not a public one
Select the Session Manager tab in ec2 instance and click Connect.
run the following command in the CLI by connecting the instance to the SSM

(6) Load Balancing (ALB)

Create Load Balancer:

Create Target Group:

(7) Test Web Server

Copy the DNS of the Load Balancer and paste it in a new browser tab

(8) Storage (S3)

Upload the files

Uploading objects into bucket using EC2 (putty) + IAM + S3

Naveen Kumar J — Thu, 23 Jan 2025 17:30:50 +0000

Launch an EC2 instance
Download and Install PuTTY
White wash your IP address
Edit the inbound rules
- set the protocol type to SSH
- Source to My IP
Open PuTTY configuration
- Copy and paste the public IPv4 address
- Category: Connection -> SSH -> Auth -> Credentials
- Enter the Private key file (ppk)
- Click 'Open' to open Command Line Interface
Run the Linux commands in the CLI
- echo "sample message" > sample.txt
- cat sample.txt
- touch sample.txt
- aws
create IAM role
Modify the IAM role for the instance
- connect -> security -> modify IAM role
- select the IAM role
- update IAM role
Run the following commands in the CLI upload objects into the S3 bucket
- aws s3 ls
- aws s3 cp example.txt s3://your-bucket-name/
The objects are uploaded into the S3 bucket using CLI
Terminate the Instance

Hosting a React App in AWS using CloudFront

Naveen Kumar J — Thu, 23 Jan 2025 17:30:39 +0000

Install node.js in your computer.
Create a React app in the terminal using create vite@latest
Now run the following commands:
- cd "project name"
- npm install
- npm run dev
now run the command "npm run build" to create 'dist' in the project folder to upload to the S3 bucket.
Create a bucket.
Upload the files and folders in the dist.
Enable static web hosting.
Copy the Bucket ARN and generate bucket policy by clicking "policy generator" in Edit Bucket Policy.
Copy and paste the JSON document in the policy.
Create a new distribution.
Copy the Distribution domain name and open it in a new tab.
Your react application will be hosted using AWS CloudFront.
Empty the Bucket and delete the bucket and distribution.

Amazon Rekognition

Naveen Kumar J — Thu, 23 Jan 2025 03:35:15 +0000

1. Service Overview

Amazon Rekognition

Amazon Rekognition: Cloud-based image and video analysis service to add advanced computer vision capabilities to your applications.

2. Key Features

Detect and recognize printed and handwritten text in images and videos in a variety of languages.
Detect and filter explicit, inappropriate, and violent contents.
Detect, analyze, and compare faces.
Analyze image properties like quality, color, sharpness, contrast.
Automatically identify useful segments of video.

Amazon Rekognition offers 99.999999999% data durability, supports up to 15MB image sizes and 3-hour or 50GB videos, and is available across multiple AWS regions with specific API rate limits.

3. Use Cases

Useful for building searchable image and video libraries
For identity verification in applications
With Rekognition, you can search images, stored videos, and streaming videos for faces that match those stored in a container known as a face collection
Uses labels for granular filtering based on business needs

4. Pricing Model

Amazon Rekognition follows a pay-as-you-go pricing model with specific rates for image analysis, video analysis, custom labels, and face liveness, along with a free tier for new users.

5. Comparison with Similar Services

Amazon Rekognition vs. Google Cloud Vision
Amazon Rekognition excels in object detection and facial analysis with tight AWS integration, while Google Cloud Vision offers superior OCR capabilities and strong Google ecosystem support.

6. Benefits and Challenges

Integrating powerful image and video analysis into your app
Integration with other AWS services
Low cost
Analyze and filter images based on properties
Simple customization

7. Real-World Example

In the e-commerce space, Amazon leverages Amazon Rekognition for several key applications:

Product Categorization: Automates sorting and classifying a vast array of product images accurately and efficiently.
Visual Search: Allows customers to search for products using images, enhancing the shopping experience and making it easier to find desired items.
Content Moderation: Monitors user-uploaded images and videos for inappropriate content, ensuring a safe and trustworthy marketplace environment.
Customer Sentiment Analysis: Analyzes customer images and videos to gauge their reactions and improve marketing strategies.
Fraud Detection: Identifies and mitigates fraudulent activities by analyzing images and videos for suspicious patterns