DEV Community: Parth Patel

Configure Amazon RDS Proxy

Parth Patel — Fri, 22 Mar 2024 19:20:43 +0000

Scenario

Amazon RDS Proxy can help busy online stores manage sudden traffic surges during sales events by pooling and sharing database connections. This ensures a smooth shopping experience even during peak times and helps the store recover quickly from any database failures, minimizing downtime and maintaining customer satisfaction.

This blog will cover everything we need to know about Amazon RDS Proxy and how to configure it!

What is Amazon RDS?
How does it work?
Benefits of configuring Amazon RDS Proxy
Hands-on
Conclusion

What is Amazon RDS?

Amazon RDS stands for Amazon Relational Database Service. It is a web service that makes it easier to set up, operate, and scale a relational database in the cloud. Amazon RDS manages routine database tasks such as provisioning, patching, backup, recovery, and scaling, allowing developers to focus on their applications rather than the administrative aspects of managing a database.

How does it work?

Amazon RDS Proxy simplifies connection management for Amazon RDS database instances by pooling and sharing database connections, actively handling network traffic between client applications and databases. It optimizes memory and CPU resources, reduces overhead on database servers, and improves application scalability and resilience to database failures

Benefits of Configuring RDS Proxy?

Improved Database Connection Management
Enhanced Scalability
Better Fault Tolerance
Security
Database Caching

Hands-on

Amazon RDS Database

Open the Amazon RDS service in the AWS console, choose Standard Database, and then pick the engine type that you want to use. Additionally, choose free-tier templates.

Enter your password in the settings section. Next, pick "Amazon VPC with No Public Access" under "Connectivity" and start a new security group.

finally, in additional configuration, provide a database name, make all the settings as default and create the database

AWS Secrets Manager

Enter your credentials (password and username), choose the "Credentials for Amazon RDS database" secret type, and then pick the recently created database and encryption key.

Click Next after entering your name in the Configure Secret field. once more and developed the secret manager. Please copy the Secret ARN and keep it somewhere secure.

AWS IAM Role and Policy

Make a policy that permits the use of Amazon KMS and AWS Secret Manager. It should also be connected with an IAM role that permits the use of Amazon EC2 and RDS services.

Note that the policy is below. Setting up AWS KMS has an optional setting.

{ "Version": "2012-10-17", "Statement": [ { "Sid": "GetSecretValue", "Action": [ "secretsmanager:GetSecretValue" ], "Effect": "Allow", "Resource": [ "AWS-Secret-Manager-ARN" ] }, { "Sid": "DecryptSecretValue", "Action": [ "kms:Decrypt" ], "Effect": "Allow", "Resource": [ "AWS-KMS-ARN" ], "Condition": { "StringEquals": { "kms:ViaService": "secretsmanager.ap-south-1.amazonaws.com" } } } ] }

Amazon RDS Proxy

Enter the proxy address and select Database in the target group configuration. Select the newly established Secret Manager role in Connectivty. Then, under Additional Configuration, build a new Security Group and select build Proxy.

Amazon Security Groups

Note: It is crucial that this step be configured correctly.

Allow inbound traffic from port 3306 for the rds proxy security group, which is for mysql/aurora, with the ec2 instance security group as the source.

Allow incoming traffic from the rds proxy security group and the ec2 security group for the rds security group. The EC2 security group allows port 3306, which is used for MySQL and Aurora.

Permit the post-22, or SSH, for the EC2 security group.

Amazon EC2 Instance

Launch your EC2 instance, install MySQL and execute the command
mysql -h -P 3306 -u admin -p

The connection to the Amazon RDS database is successful.

Conclusion

Finally, we have completed a hands-on exercise to gain an understanding of the Amazon RDS proxy, including its importance and the reasons to use it.

Launch an Amazon VPC and EC2 instance using Cloudformation

Parth Patel — Sat, 16 Mar 2024 14:50:28 +0000

Why AWS Cloudformation?

AWS CloudFormation is crucial for automating and managing AWS resources through code, ensuring consistent and repeatable deployments. It simplifies the deployment process, reduces manual errors, and supports team collaboration and standardization through version-controlled templates. CloudFormation integrates with other AWS services for efficient and secure deployments, making it essential for reliable, scalable, and secure cloud infrastructure deployments.

Step by Step Process

Step 1: Create a CloudFormation template in YAML or JSON format. Here is my code on Github.

Step 2: Upload your code to AWS Cloudformation, which will automatically create an S3 bucket and its object URL.

Step 3: Click "Next". Specify the stack name, and click "Next" again. Then, under the Permissions tab, remove the role and create the stack.

Step 4: Please confirm that the resources have been created successfully.

Step 5: Delete the resources.

Conclusion

Launching an Amazon VPC and EC2 instance using CloudFormation involves creating a VPC, which is a virtual network within AWS, and then deploying an EC2 instance within this network. This process is automated through CloudFormation templates, which define the resources and configurations needed for the deployment. These templates can be customized to fit specific requirements. CloudFormation simplifies the deployment process, ensuring consistency and repeatability across environments, and reducing the risk of human error.

NAT Instance Tutorial

Parth Patel — Sun, 03 Mar 2024 18:48:04 +0000

What is NAT Instance?

A NAT instance provides network address translation (NAT). You can use a NAT instance to allow resources in a private subnet to communicate with destinations outside the virtual private cloud (VPC), such as the internet or an on-premises network. The resources in the private subnet can initiate outbound IPv4 traffic to the internet, but they can't receive inbound traffic initiated on the internet.

Basic Understanding

The route table associated with the private subnet sends internet traffic from the instances in the private subnet to the NAT instance in the public subnet. The NAT instance then sends the traffic to the internet gateway. The traffic is attributed to the public IP address of the NAT instance. The NAT instance specifies a high port number for the response; if a response comes back, the NAT instance sends it to an instance in the private subnet based on the port number for the response.

Step 1: Create a VPC with Public and Private Subnets

Step 2: Create Security Groups

Step 3: Launch the Public EC2 Instance

Step 4: Connect Public Instance

Step 5: Execute these CMDs

sudo yum install iptables-services -y
sudo systemctl enable iptables
sudo systemctl start iptables
echo "net.ipv4.ip_forward=1" | sudo tee /etc/sysctl.d/custom-ip.conf
sudo sysctl -p /etc/sysctl.d/custom-ip.conf
netstat -i
sudo /sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
Note: Replace 'enX0' with the correct interface (usually eth0 or ensX)
sudo /sbin/iptables -F FORWARD
sudo service iptables save

Step 6: Create an AMI from the Public EC2 (NAT)

Step 7: Launch NAT Instance from the Image

Step 8: Disable Source/Destination Check

Step 9: Launch Private EC2 Instance

Step 10: Configure Route Tables

Step 11: Connect Private EC2 Instance

Conclusion

Setting up a NAT instance in AWS is essential for resources within a private subnet to securely access the internet or on-premises networks. By configuring a NAT instance, traffic from private subnet instances is routed through a public subnet, ensuring outbound connectivity while protecting against inbound threats. This step-by-step tutorial simplifies the process, from creating VPCs and security groups to launching and testing instances. With these fundamental concepts and practical instructions, developers can effectively leverage NAT instances to enhance network connectivity and security within their AWS environments. In conclusion, a NAT instance provides a crucial bridge and this tutorial simplifies the process making it easier for developers to implement it.

My AWS Cloud Club Journey

Parth Patel — Mon, 29 Jan 2024 14:38:45 +0000

What are AWS Cloud Clubs?

AWS Cloud Clubs are student-led organizations or chapters that focus on learning, experimenting, and networking around Amazon Web Services (AWS) and cloud computing technologies.

Who are AWS Cloud Clubs captains?

Cloud Club Captains are individuals who lead and manage these AWS Cloud Clubs. Cloud Club Captains play a crucial role in initiating and organizing club activities, such as workshops, meetups, and projects, as well as promoting the club within their educational institution or community.

Overview of how to start or transform your AWS cloud clubs

Apply to become a Cloud Club Captain through the AWS Student Hub. The application process involves submitting details about your experience and plans for starting a Cloud Club chapter.

The basic requirement for becoming a captain is that, while filling out an application, you must upload a video, and a community member recommendation must also be there.

Apply link: https://go.aws/3SBslhS

Lanching AWS Cloud Clubs

Once selected, work with the AWS Academic Advocacy team to set up the required AWS accounts and launching your Cloud Club.

Club's link: https://bit.ly/awsccmeetup

Promote the new Cloud Club within your university or region to attract members. Organize regular meetups or workshops where members can learn cloud skills together through hands-on labs and projects.

Past events link: https://bit.ly/soumeetup

Past Events

Expert session on scaling on AWS for millions of users

This session has focused on the expertise required to scale applications on Amazon Web Services (AWS) for millions of users. This includes various aspects of scaling, including infrastructure design, application architecture, and optimization techniques.

Women's Day Celebration (SHE)

"Strong Happening Empowered (SHE)" is a platform that aims to empower and uplift women by providing them with access to a roster of incredible female leaders. Through their programs, SHE offers mentorship, networking opportunities, and resources to help women grow and excel in their careers. By connecting women with successful leaders in various industries, SHE hopes to inspire and encourage them to reach their full potential.

Career Aspects with AWS

"Career Aspects with AWS" could refer to the various job roles, opportunities, and growth prospects available for professionals skilled in Amazon Web Services (AWS) technologies. With the increasing adoption of cloud computing and the rapid growth of AWS in the market, there is a high demand for AWS professionals across different industries.

Introduction to Serverless on AWS

Serverless computing on AWS is a powerful approach to building applications that eliminates the need for you to manage servers, infrastructure, and operating systems. Instead, you can focus on writing code and delivering value to your customers. Using serverless computing on AWS can help you reduce your operational costs, increase your agility, and improve your scalability.

workshops

Gujarat’s First Ever AWS DeepRacer League - Race to Top with AWS

AWS DeepRacer is an autonomous 1/18th scale race car designed to test RL models by racing on a physical track. Using cameras to view the track and a reinforcement model to control throttle and steering, the car shows how a model trained in a simulated environment can be transferred to the real world.

The World's First Ever Infrastructure Camp

This camp is intended to teach students the important role foundational infrastructure plays in the development, operation, and management of cloud solutions. It also provides an introduction to a few basic services, some helpful concepts, and an explanation of how each fits into the overall picture of cloud architecture. In addition to the basics, it challenges you to solve some additional problems designed to stretch your knowledge and understanding.

Community Events

India's First Ever AWS Student Symposium 2023

This symposium is designed to bring together students from various academic backgrounds to learn, share knowledge, and explore the latest technological advancements in Amazon Web Services (AWS). It promises to be an excellent opportunity for students to network with industry experts, gain valuable insights, and enhance their skills and knowledge in cloud computing.

Network with other Cloud Club captains, AWS community leaders, and mentors to exchange ideas and stay up-to-date on the latest resources. Attend AWS online events and conferences.

Other captain's: https://go.aws/3SBslhS
Community Builder’s: https://go.aws/4bdZkjy
AWS Heros: https://go.aws/49s9iw3

Maintain an active online presence for the club on platforms like Dev.to, LinkedIn, and Meetup to engage members and share updates. Publish learning content and technical articles written by yourself and members

Social media handles: https://bit.ly/4be07kw

Apply for AWS credits, certification vouchers, and other rewards available to recognized Cloud Clubs. Distribute these among active members.

My Experience

Being a part of AWS Cloud Clubs has been a game-changer for me as far as my technical skills and mindset are concerned. These clubs have provided me with an incredible platform to network with AWS Heroes, community builders, and user group leaders.

As a Cloud Club Captain, I have not only honed my technical skills but also gained valuable leadership, management, and public speaking abilities.

All in all, being a part of AWS Cloud Clubs has been a transformative experience for me as a cloud computing enthusiast, and I am grateful for the knowledge, skills, and opportunities it has provided me with. I look forward to being a part of this community of cloud enthusiasts for years to come.

Expressing Gratitude

I appreciate the valuable contributions of the AWS Cloud Club members at Silver Oak University. Their unwavering support has been instrumental in the success of this project. I extend our heartfelt thanks for their outstanding efforts.

I am grateful to the faculty members, authorities, and management team of Silver Oak University for their constant support and guidance. Thank you for your efforts towards our success.

Additional benefits

AWS cloud club is scouting to attend aws community days, aws student community days, aws summits, and AWS re:events

Learn with Academic advocacy

1.GitHub Learner Library: https://bit.ly/3HBcdGw

The AWS Cloud Clubs Learner Library is a resource hub where you can discover free, ungated content on AWS properties to further your learning journey.

2.Amplify Workshop: https://bit.ly/3HAxr7K

This foundational workshop introduces serverless cloud concepts, including authentication, storage, and functions.

3.Infrastructure Camp: https://bit.ly/48P7Rrx

This course is intended to teach students the important role foundational infrastructure plays in the development, operation, and management of cloud solutions.

4.Machine Learning Camp: https://bit.ly/3u0Nusi

In this introductory workshop, you'll learn how to add machine learning features to a web app using Amazon Rekognition and Amazon Textract.

More ways to learn

AWS educate: https://awseducate.instructure.com/
AWS skill builder: https://explore.skillbuilder.aws/
Build on AWS live: https://go.aws/3u7deDk/
AWS AI & ML Scholarship: https://go.aws/48ObMou/

Exciting News!

Our next AWS Cloud Club cohort begins on February 5, 2024.
Are you ready to lead?

VPC Peering across two regions

Parth Patel — Fri, 27 Oct 2023 11:38:47 +0000

Introduction

VPC peering across two AWS regions is a network connection that allows Virtual Private Clouds (VPCs) in different geographic locations to communicate securely and directly with each other, enabling seamless data transfer and resource access while maintaining the isolation and security of each VPC. This inter-region connectivity facilitates distributed application architectures, disaster recovery setups, and data replication scenarios, enhancing the versatility and global reach of AWS infrastructure for businesses and organizations.

Scenario

You have two Amazon VPCs, one located in the US East (N. Virginia) region (us-east-1) and the other in the Asia Pacific (Mumbai) region (ap-south-1). You need to establish VPC peering between these two regions to allow secure communication between resources in these VPCs while keeping them logically isolated.

Solution

To achieve VPC peering across regions, first, create the necessary VPCs in each region, ensuring they have unique CIDR blocks. Next, create VPC peering connections in both regions, accepting the peer requests. Update the route tables in each VPC to include routes for the peer VPC's CIDR block, pointing to the peering connection. Finally, configure security groups and network ACLs to allow the required traffic between the peered VPCs. This setup enables seamless and secure communication between resources in the US East and Asia Pacific South regions while maintaining network isolation.

Step-by-Step Guide:

Step 1: Create a VPC in the Asia Pacific (Mumbai) region (ap-south-1)

If you don't already have a VPC, you can create one by clicking "Your VPCs" in the VPC Dashboard.
Click the "Create VPC" button.
Fill in the VPC details, only the name, and leave the other setting as default. As, it will automatically create Subnets, Route Tables, and Internet Gateway.
Click "Create VPC."

Step 2: Launching a Windows EC2 Instance

Click the "Launch Instance" button.
Select an "Amazon Linux Server" AMI based on your requirements.
For instance, type, set as "t2.micro" is a free tier eligible.
If you already have an EC2 "key pair", select it.
If not, create a "new key pair". You'll use this key pair to securely connect to your Windows EC2 instance.
"Save the file" on your local device. Make sure it is safe.
Automatically "assigned public IP" should be "Enabled" for Private Subnet and vice-versa.
Create a "new security group" or select an "existing one".
Define rules to allow ALL ICMP (IPv4) and SSH (443) traffic for a web server.
Click "Launch" to proceed.

Repeat the above two steps in the US-East (N. Virginia) region us-east-1

Step 3: Create a VPC Peering Connection

In the VPC Dashboard, click on "Peering Connections" in the left sidebar.
Click on the "Create Peering Connection" button.
Fill in the details for the peering connection, including a name, your VPC ID (in the current region), and the peer VPC ID (in the other region).
Repeat this step in the other region to create a peering connection from the second VPC to the first VPC.

Step 4: Accept the Peering Connection

After you've created the peering connections in both regions, you'll need to accept the peering request.
In the VPC Dashboard, select "Peering Connections."
Find the pending peering request, select it, and click "Actions" -> "Accept Request" in both regions.

Step 5: Update Route Tables

To allow traffic to flow between the peered VPCs, you need to update the route tables.
In each VPC's route table, add a route to the CIDR block of the other VPC, pointing to the peering connection. This enables traffic to be routed through the peering connection.
Navigate to the "Route Tables" in the VPC Dashboard, select the route table associated with your VPC, and add a route.

Step 6: Connect to the EC2 Instance

Open a terminal or command prompt on your local machine.
Navigate to the directory where your private key (.pem) file is located.
Use the chmod command to change the permissions of the private key file to be secure: “chmod 400 your-key.pem”
Connect to your EC2 instance using SSH, replacing your-key.pem with the actual key file and your-instance-public-IP with your EC2 instance's public IP address: “ssh -i your-key.pem ec2-user@your-instance-public-ip”
If you see a message asking if you want to continue connecting, type "yes" and press Enter.
You are now connected to your EC2 instance via SSH. You should see the command prompt for your instance in your terminal.

Step 7: Ping the Peered VPC

Once connected to your EC2 instance, use the ping command to ping an EC2 instance or resource in the peered VPC.
Replace peer-instance-private-ip with the private IP address of the resource you want to ping in the other VPC: “ping peer-instance-private-ip”

Congratulations! Your VPC peering connection is now established, unlocking seamless communication between your AWS Virtual Private Clouds. Enjoy enhanced network connectivity and flexibility in your AWS architecture.

Conclusion

In conclusion, creating a VPC peering connection across two AWS regions enables secure and efficient communication between separate VPCs in different geographic locations, fostering a global network environment. By following a few straightforward steps, you can seamlessly bridge these regions, allowing resources to interact as if they were on a single network while maintaining isolation and control, enhancing the versatility and scalability of your AWS infrastructure.

VPC NAT Gateway Tutorial

Parth Patel — Sun, 08 Oct 2023 17:17:32 +0000

Introduction

A Network Address Translation (NAT) Gateway in a Virtual Private Cloud (VPC) is a service provided by cloud providers like Amazon Web Services (AWS) that allows instances in a private subnet to initiate outbound connections to the internet while keeping their private IP addresses hidden. It serves as an intermediary between your private instances and the public internet.

Scenario

Imagine you have a Virtual Private Cloud (VPC) in a cloud provider like Amazon Web Services (AWS), and within this VPC, you have several private instances that need to access the internet for software updates, downloading packages, or other web-based services. However, you want to maintain a high level of security and control over these private instances and prevent direct access to the internet. How can you achieve this while allowing your private instances to communicate with the internet?

Solution

In this scenario, you can use a NAT Gateway inside Amazon VPC to enable your private instances to access the internet securely without exposing their private IP addresses.

Prerequisite

An AWS account
Basic knowledge of AWS services
A provisioned Windows EC2 instance
Good insights for Amazon VPC, NAT Gateway, and Elastic IPs

Step-by-step Guide:

Step 1: Create a VPC

If you don't already have a VPC, you can create one by clicking "Your VPCs" in the VPC Dashboard.
Click the "Create VPC" button.
Fill in the VPC details, including the name, IPv4 CIDR block, and any other settings you require.
Click "Create VPC."

Step 2: Create subnets

In the VPC Dashboard, select "Subnets" from the left-hand navigation pane.
Click the "Create Subnet" button.
Choose the VPC you created in the previous step.
Configure the subnet details, including the name, availability zone, and IPv4 CIDR block.
Repeat this process to create both a public subnet and a private subnet.

Step 3: Create an Internet Gateway

In the VPC Dashboard, select "Internet Gateways" from the left-hand navigation pane.
Click the "Create Internet Gateway" button.

Step 4: Attach the Internet Gateway to Your VPC

Select the newly created Internet gateway.
Click the "Actions" button and choose "Attach to VPC."
Choose the VPC to which you want to attach the Internet gateway.
Click "Attach."

Step 5: Create a Custom Route Table

In the VPC Dashboard, select "Route Tables" from the left-hand navigation pane.
Click the "Create Route Table" button.
Provide a name “PublicSubnet” and “PrivateSubnet” and choose the VPC you want to associate with the new route table.
Click "Create."

Step 6: Edit the Route Table to Route Traffic to the Internet

Select the newly created custom route table.
In the "Routes" tab, click the "Edit routes" button.
Click "Add route."
In the "Destination" field, enter 0.0.0.0/0 to represent all internet-bound traffic.
In the "Target" field, select the Internet Gateway that you attached to the VPC in the previous steps.
Click "Save routes."

Step 7: Associate Subnets with the Custom Route Table

In the "Subnet associations" tab of the custom route table, click "Edit subnet associations."
Choose the subnets that you want to associate with this custom route table. Typically, these would be the public subnets and private subnets, which are associated with the public subnet and the private subnet, respectively.
Click "Save associations."

Step 8: Launching a Windows EC2 Instance

Click the "Launch Instance" button.
Select a "Windows Server" AMI based on your requirements.
For instance, type, set as "t2.micro" is a free tier eligible.

Step 9: Choose an existing key pair or create a new key team.

If you already have an EC2 "key pair", select it.
If not, create a "new key pair". You'll use this key pair to securely connect to your Windows EC2 instance.
"Save the file" on your local device. Make sure it is safe.

Step 10: Configure the Security Group and Virtual Private Cloud (VPC):

Automatically "assigned public IP" should be "disabled" for Private Subnet and vice-versa.
Create a "new security group" or select an "existing one". Define rules to allow RDP (port 3389), and HTTPS (port 443) traffic for a web server.
Click "Launch" to proceed.

Step 11: Connect your EC2 instance

In the RDP Client Tab, click on "Download Remote Desktop File" on your local machine.
Click on "Get Password" and "Upload the Private Key".
Click on "Decrypt Password", then copy your decrypted password.
Open the RDP file and "paste" your copied decrypted password.
You are successfully connected to your Windows EC2 instance.

Step 12: Create the NAT Gateway

In the "Create NAT Gateway" wizard, select the public subnet where you want to create the NAT Gateway.
Choose an Elastic IP address to associate with the NAT Gateway. If you don't have one, you can allocate a new Elastic IP.
Click the "Create NAT Gateway" button.

Step 13: Add a Route to the NAT Gateway

In the "Routes" tab, click the "Edit routes" button.
Add a new route with the destination as 0.0.0.0/0 (all internet-bound traffic) and select the NAT Gateway as the target.
Click "Save routes."

Step 14: Connect to Your Windows EC2 Instance using RDP

Open the Remote Desktop client on your Windows EC2 Server(you can find it in Windows under "Remote Desktop Connection").
In the "Computer" field, enter the Private IP address of your EC2 instance.
Click "Connect."
If prompted, enter the username and password for your Windows EC2 instance. The username is typically "Administrator."
Click "OK."

Step 15: Testing your connectivity

Open the command prompt. Run the command “ping 8.8.8.8 -t”.
The reply from the ping command is successful.

Congratulations! You've successfully established connectivity between the private subnets by attaching the NAT Gateway to the public subnet.

Step 16: Delete the NAT Gateway

With the NAT Gateway selected, click the "Actions" button at the top of the screen.
Choose "Delete NAT Gateway" from the drop-down menu.

Step 17: Release the Elastic IP

With the selected Elastic IP, click the "Actions" button at the top of the screen.
Choose "Release addresses" from the dropdown menu.

Step 18: Delete the VPC

With the selected VPC, click the "Actions" button at the top of the screen.
Choose "Delete VPC" from the dropdown menu.

Conclusion

In conclusion, the Amazon VPC NAT Gateway practical experience offers a comprehensive understanding of network architecture in the cloud. By successfully configuring and utilizing a NAT Gateway, one gains proficiency in providing secure internet access to private resources within a Virtual Private Cloud (VPC). This hands-on exercise demonstrates the importance of network isolation, security groups, and route tables, ensuring that private instances can access the internet while remaining shielded from external threats. Additionally, it highlights the significance of Elastic IP addresses for stable connectivity and paves the way for creating robust, Secure, and Scalable cloud infrastructures. This practical experience is a valuable skill set for cloud architects and administrators seeking to design and manage secure, high-performance cloud environments in AWS.

Hosting a Static Webpage on Windows Instance

Parth Patel — Tue, 12 Sep 2023 15:35:38 +0000

Introduction

Amazon Elastic Compute Cloud (Amazon EC2) provides on-demand, scalable computing capacity in the Amazon Web Services (AWS) Cloud. Using Amazon EC2 reduces hardware costs so you can develop and deploy applications faster. You can use Amazon EC2 to launch as many or as few virtual servers as you need, configure security and networking, and manage storage. You can add capacity (scale up) to handle compute-heavy tasks, such as monthly or yearly processes, or spikes in website traffic. When usage decreases, you can reduce capacity (scale down) again.

Static webpages are the simplest form of web content and a fundamental building block of the internet. Unlike dynamic webpages, which are generated on the fly in response to user interactions or database queries, static webpages consist of fixed, unchanging HTML, CSS, and JavaScript files.

Scenario:

A software development team needs a flexible environment for developing, testing and deploying Windows-based applications. They require a solution that allows them to quickly create and manage virtual machines with various Windows configurations.

Solution:

The team uses Amazon EC2 Windows instances to create development and testing environments. They can easily provision Windows instances with specific software stacks, conduct testing, and scale resources as needed. This enables efficient software development, testing, and deployment processes, accelerating time-to-market and reducing infrastructure overhead.

Prerequisites:

An AWS account
Basic knowledge of AWS services
A provisioned Windows EC2 instance

Step-by-Step Guide:

Step 1: Launching a Windows EC2 Instance

Click the "Launch Instance" button.
Select a "Windows Server" AMI based on your requirements.
In the instance type, set as "t2.micro" as a free tier eligible.

Step 2: Choose an existing key pair or create a new key pair.

If you already have an EC2 "key pair", select it.
If not, create a "new key pair". You'll use this key pair to securely connect to your Windows EC2 instance.
"Save the file" on your local device. Make sure it is safe.

Step 3: Configure the Security Group and Virtual Private Cloud (VPC):

Automatically "assigned public IP" should be "enabled".
Create a "new security group" or select an "existing one".
Define rules to allow HTTP (port 80), RDP (port 3389), and HTTPS (port 443) traffic for a web server.
Click "Launch" to proceed.

Step 4: Connect your EC2 instance.

In the RDP Client Tab, click on "Download Remote Desktop File" on your local machine.
Click on "Get Password" and "Upload the Private Key".
Click on "Decrypt Password", then copy your decrypted password.
Open the RDP file and "paste" your copied decrypted password.
You are successfully connected to your Windows EC2 instance.

Step 5: Windows Instance:

Navigate to the search bar for "Server Manager" and double-click to open.
On the dashboard, on the left panel, click on "Add Roles and Features."
Click on "next" following Server Roles."
Click on the "web server (IIS)" and click on "Add feature."
Finally, click on "Install."

Step 6: Make a webpage file

Navigate to "Local Drive (C:)" --> "inetpub" --> "wwwroot". Delete all the files.
Create a new text document and write, "This is my first static webpage."
Save it as "index.html".

Step 7: Testing Your Static Website

Copy the "public IPv4 address" and paste it into a new tab in your browser.
The static webpage has been loaded successfully and can see, "This is my first static webpage."

Congratulations! You've successfully launched a Windows EC2 instance on AWS. You can now customize and use it for various purposes, including hosting a static webpage.

Conclusion:

Hosting a static webpage on a Windows EC2 instance is a versatile and powerful solution. It provides users with control, scalability, security, and global reach. With the flexibility to configure web servers, leverage AWS's infrastructure, and ensure cost-effectiveness, Windows EC2 instances are an excellent choice for hosting static web content. By following the steps and best practices outlined in this guide, you can create a reliable web hosting environment that serves your content to a global audience efficiently. Whether you're running a personal website, a small business site, or any other static web application, AWS EC2 for Windows offers the tools and resources you need to succeed.