Network Infrastructure Setup

Create VPC

Go to AWS Management Console

  • Find VPC
  • Select VPC

VPC

In the VPC interface

  • select Create VPC

VPC2

In the Create VPC interface

  • Select VPC and more
  • Name, enter your VPC name. In this lab, we name it WorkShop
  • IPv4 CIDR block, enter 10.0.0.0/16

VPC

Select as follows:

  • Number of AZs is 3
  • Number of public subnets is 3
  • Number of private subnets is 3
  • Nat gateways select None

VPC

  • VPC endpoints select None
  • Select Create VPC

VPC5

Perform public IP allocation.

Perform public IP allocation.

  • Select Subnets
  • Select public subnet
  • Select Edit subnet settings

ip1

Select Enable auto-assign public IPv4 address. Then Select Save

ip2

Check that the assignment was successful.

ip4

Perform the assignment for the remaining Public subnet (do the same). Next, we will create a Security group for the application.

  • In the VPC interface, select Security groups

  • Select Create security group

sg1

Configure Security Group

  • Security group name, enter FCJ-Management-SG
  • Description, enter Security Group for FCJ Management
  • VPC, then select the newly created VPC: WorkShop

sg2

Configure Inbound rules

  • First, configure SSH port 22 and Source: MyIP to be able to access the instance.
  • Next is HTTP port 80.
  • Custom TCP port 5000 for FCJ Management
  • HTTPS port 443.

ibr

Check Outbound rules and select Create security group

obr

Create Security group for Database instance

We create Security group for Database instance. To ensure security, do not configure the general Security group of the application. Configure security group

  • Security Group name, enter FCJ-Management-DB-SG
  • Description, enter Security Group for DB instance
  • Select the newly created vpc

Configure Inbound rules

  • Select Add rule
  • Select MYSQL/Aurora port 3306
  • Then select Source as FCJ-Management-SG

ibr2

Check the Outbound rules again and finally click Create security group

obr2