DEV Community: Sharvesh Waran

How to Deploy a Website on AWS

Sharvesh Waran — Mon, 31 Mar 2025 15:36:55 +0000

Navigate to the AWS Management Console and locate the VPC service.

Click Create VPC.

Select VPC and more.

In the NAT gateways section, select 1 per AZ.

We're ready to create the network. Click Create VPC.

Browse to the Security Groups part of the Amazon EC2 service.

Notice the default security group that is already present, then proceed to click Create security group to define a new custom security group for our resources.

In the Inbound rules section click Add rule

Next, repeat the process to create an Security Group

Confirm the 2 security groups have been created.

Browse to the IAM service.

To grant permissions, we create IAM policies. These policies can then be assigned to an IAM role. IAM roles can be assumed by trusted entities, such as an EC2 instance, to access permitted AWS resources. An EC2 Instance Profile is a container that holds an IAM Role and attaches it to an EC2 instance.

Create a new IAM role and associate it with the EC2 instance profile for the web server.

Select Roles, then click Create role.

Attach IAM policies to the role being created. Instead of defining the policies manually, an existing AWS managed policy will be used to save time.

Select AWS Service. Choose EC2 for the service or use case.

Select EC2 Role for AWS Systems Manager and click Next

Confirm that the AmazonSSMManagedInstanceCore policy has been added to the role and click Next

Name the role WebServerInstanceProfile . Scroll to the bottom and click Create role.

Browse to the EC2 service.

Click Launch Instance.

Name the server mywebserver

Customers have the flexibility to launch Amazon EC2 instances with a wide selection of operating systems and pre-configured images.

For our simple web server, we'll select the Amazon Linux 2023 AMI (Amazon Machine Image) in the 64-bit (x86) architecture.

Let's select the t2.micro instance type, which provides 1 vCPU and 1 GiB of memory.

Normally, you'd create a key pair to enable secure SSH access to the EC2 instance. But in this case, we'll skip the key pair since we'll be using AWS Systems Manager to connect, rather than direct SSH.

In Network settings, click the Edit button to configure the EC2 instance's networking. Associate the new instance with the Amazon VPC and private subnet we set up earlier.

For Firewall (security groups), choose Select existing security group and pick the Web Server Security Group you created earlier. This configuration will allow incoming traffic on port 80 from the public subnets.

Expand Advanced details. Under IAM instance profile, choose WebServerInstanceProfile. This is the instance profile we created earlier, which will allow us to privately connect to the server.

!/bin/bash

yum update -y

Install Session Manager agent

yum install -y https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/linux_amd64/amazon-ssm-agent.rpm
systemctl enable amazon-ssm-agent

Install and start the php web server

dnf install -y httpd wget php-json php
chkconfig httpd on
systemctl start httpd
systemctl enable httpd

Install AWS SDK for PHP

wget https://docs.aws.amazon.com/aws-sdk-php/v3/download/aws.zip
unzip aws.zip -d /var/www/html/sdk
rm aws.zip

Install the web pages for our lab

if [ ! -f /var/www/html/index.html ]; then
rm index.html
fi
cd /var/www/html
wget https://ws-assets-prod-iad-r-iad-ed304a55c2ca1aee.s3.us-east-1.amazonaws.com/2aa53d6e-6814-4705-ba90-04dfa93fc4a3/index.php

Update existing packages

dnf update -y

We want the server to run a script on boot that installs the necessary PHP web server components. We can accomplish this by specifying User data.

Enter the code above into the User data field.

Click Launch Instance to complete the configuration and launch the new web server.

Once the instance is launched, you'll see a success message. Click on the underlined Amazon EC2 instance ID to navigate back to the EC2 dashboard.

Wait until the Status check shows 2/2 checks passed.

In the Amazon EC2 dashboard, select the web server instance. You'll notice it only has a private IP address, not a public one.

Ensure the web server instance is still selected and click Connect.

Select the Session Manager tab and click Connect.

Take a moment to marvel at the web server shell, then proceed to run the following commands:

echo -n 'Private IPv4 Address: ' && ifconfig enX0 | grep -i mask | awk '{print $2}'| cut -f2 -d: && \
echo -n 'Public IPv4 Address: ' && curl checkip.amazonaws.com

Excellent, there's the private IP address you noted in step 1 This means we successfully connected to the right instance without exposing the SSH protocol. However, you'll also notice there is a Public IP address - this is the Elastic IP allocated for the NAT Gateway. The NAT Gateway allows resources in the private subnet, like our web server, to communicate with the Internet.

Browse to the EC2 service.

From the navigation menu, click on the Load Balancers link, then click Create load balancer.

The Application Load Balancer (ALB) operates at the application layer, providing advanced traffic routing capabilities, in contrast to other load balancer options like the Network Load Balancer which functions at the network layer.

Click Create under Application Load Balancer.

Configure the Application load balancer with the following basic and network settings:

In the Security Groups section, delete the default group and add the Load Balancer Security Group you created earlier. This configuration will allow incoming traffic on port 80 from the Internet.

Leave the default settings of HTTP and port 80 in the Listeners and routing section, then click Create target group.

A target group defines the targets (e.g. EC2 instances) that the load balancer will route traffic to. Configure the new target group with the following settings:

Click Next to proceed to the register targets settings.

Select mywebserver and click include as pending below. This will configure the load balancer to route web traffic from the Internet to the EC2 web server instance

Click Create target group to finalize the setup, then close the browser tab to return to the load balancer configuration

In the Listeners and routing section, click the refresh button and select the WebServerTargetGroup we just created.

Leave the remaining settings as default and click Create load balancer

Browse to the Amazon S3 service.

Click Create Bucket

Let's give the S3 bucket a fun and unique name. Think of something clever or memorable. It needs to be globally unique.

Leave the other settings as the defaults, then click Create bucket.

Click on the name of the S3 bucket you created, then click Upload.

Use the S3 console to upload the files you downloaded. Click Add files

Browse to the IAM service.

Navigate to Roles, then search for and click on the WebServerInstanceProfile role.

Under Permission policies, click Add permissions and select Attach policies

Search for s3. Select the AmazonS3ReadOnlyAccess AWS managed policy and click Add permissionsExpand the AmazonS3ReadOnlyAccess AWS managed policy attached to the role, and review the JSON policy definition.

Browse to the EC2 service.

Then, build the Auto Scaling Group, which can run alongside the existing Amazon EC2 instance without the need to delete it.

Follow image

Using load balancer DNS Link

EC2 - S3 - Putty

Sharvesh Waran — Sun, 26 Jan 2025 04:53:29 +0000

STEP 1: Create an Instance on Amazon Linux.

STEP 2: Now we want to download Putty from https://www.putty.org/ based on our windows architecture.

STEP 3: Then go to security group -> edit bound rules, in that security group type will be SSH because we are using putty and ip will be your ip and save rules.

STEP 4: Next open putty,in that paste your public ip(which is in your instance) in the host name.

STEP 5: On the left side, you can see connection -> SSH -> Auth -> Credentials.After that you want select the private key file. After select your .ppk file click open button.

STEP 6: Then the terminal will open after click the open button.In that login as ec2-user.

STEP 7: Now we run the command 'aws s3 ls'.If it shows errors,then we want create a IAM role.

STEP 8: Create a IAM role and give 'AmazonS3fullaccess' permission and create role.

STEP 9: Now go to ec2->actions->security->modify IAM role and add our newly created IAM role.

STEP 10: Run the same command,now you can see the buckets present in S3.Now create a detail.txt file move it to a random bucket without using S3 UI.There is a command,which can do this.

STEP 11: Now check our bucket for the uploaded file(detail.txt) is present.

Hosting React Application Using S3 and Cloudfront

Sharvesh Waran — Sun, 26 Jan 2025 04:43:12 +0000

STEP 1: Check node and npm is already installed in your system,if not install them.

STEP 2: Initialize a new project with the Vite build tool,Enter your project name.

STEP 3: Select a framework "REACT".

STEP 4: Select a Variant "TYPESCRIPT".

STEP 5: Now run the above three commands one by one.

STEP 6: Check localhost:5173

STEP 7: Now our react application is created successfully!

STEP 8: Open the project in vs code,then run the command "npm run build".This command compiles and bundles your source code and placed in a directory "dist\".

STEP 9: Now want to create a bucket with unique name.

STEP 10: Now enable the static web hosting.

STEP 11: Now want to add bucket policy.

STEP 12: Now upload the files and folders from the dist folder in your bucket.

STEP 13: Then go to properties,scroll down,you can find bucket website endpoint,then click it.

STEP 14: Our React application is hosted using S3.

STEP 15: Now create a cloudfront distribution for hosting a react Application.

STEP 16: Copy the distribution domain name and paste it in a new tab.Now we can see the same result.

STEP 17: And finally delete the cloudfront distribution.

AWS Fargate

Sharvesh Waran — Thu, 23 Jan 2025 04:29:26 +0000

Service Name: AWS Fargate

Logo:

Tagline "AWS Fargate: Serverless compute for containers—no infrastructure management required."

1. Key Features

- Serverless container management: Run containers without managing the underlying EC2 instances.

- Automatic scaling: Fargate automatically scales your containers based on demand.

- Integrated with Amazon ECS and EKS: Easily integrates with Amazon ECS (Elastic Container Service) and EKS (Elastic Kubernetes Service).

- Granular resource allocation: Define specific CPU and memory configurations for each container.

- Simplified deployment: No need to provision or scale clusters manually; Fargate takes care of everything.

2. Technical Specifications:

- Supported regions: Available in most AWS regions worldwide.

- Compute resources: Allocate CPU and memory resources to containers with granularity (e.g., 0.25 vCPU and 0.5 GB memory as minimum).

- Integration with IAM: Manage access permissions for containers through AWS Identity and Access Management (IAM).

- Network options:Fargate supports both VPC (Virtual Private Cloud) networking and ENI (Elastic Network Interface).

3. Use Cases

- Microservices architecture: Run containerized microservices without worrying about managing clusters.

- Batch processing: Run batch jobs in containers without manual scaling or infrastructure management.

- CI/CD pipelines: Automate your continuous integration and deployment pipelines with containerized tasks.

- Machine learning: Containerize machine learning models for scalable inference or training workloads.

4. Pricing Model

- Pay-as-you-go: Pricing is based on the amount of vCPU and memory resources allocated for each container and the duration of time your container is running.

- No upfront costs: Charges are only based on the actual usage of resources, with no need to provision EC2 instances in advance.

5. Comparison with Similar Services

- AWS Fargate vs. Amazon EC2: Fargate abstracts away infrastructure management, whereas EC2 requires you to manage the compute instances. Fargate is serverless, making it easier for containerized workloads, while EC2 offers more control over the environment.

- Fargate vs. Kubernetes (EKS): While both support containerized applications, Fargate is a simpler serverless option compared to EKS, which involves more configuration and management for Kubernetes clusters.

6. Benefits and Challenges

Advantages:

- No infrastructure management: Completely abstracts away the need to manage server clusters.

- Scalability: Automatically scales based on your application’s needs without any manual intervention.

- Cost efficiency: Pay only for the exact resources your containers use.

- Seamless integration: Works well with other AWS services, such as IAM, CloudWatch, and RDS.

Limitations or Challenges:

- Less control over infrastructure: For users who want full control over their container clusters, Fargate’s abstraction might feel limiting.

- Startup latency: The time it takes to launch new containers can sometimes cause slight delays compared to running containers on pre-provisioned instances.

7. Real-World Example

Spotify uses AWS Fargate for running backend services to scale their microservices with minimal overhead. By leveraging Fargate, they simplified container management and reduced operational complexity, allowing them to focus more on developing new features and services for their users.