Project Overview
This project demonstrates an enterprise-level cloud infrastructure spanning two AWS regions (us-east-1 primary & us-west-2 DR). It includes networking, security, load balancing, auto scaling, multi-region database setup, CDN failover, DR routing, and testing. All components follow AWS Well-Architected best practices.
Architecture Diagram
Architecture Breakdown
- Network Foundation: Multi-AZ VPC, public/private subnets, NAT, IGW, custom route tables.
- Security Layers: Security Groups for ALB, EC2, RDS; IAM roles; least-privilege access.
- Compute Tier: EC2 instances with AMIs, Launch Templates, and Auto Scaling Groups.
- Load Balancing: HTTPS ALBs for frontend/backend with ACM TLS certificates.
- Data Tier: RDS MySQL Multi-AZ primary DB + cross-region read-replica.
- Global Delivery: CloudFront CDN with origin failover.
- DNS & Failover: Route 53 failover routing with health checks.
- WAF Protection: Web ACL with managed rule sets.
- DR Testing: Simulated primary region outage to validate failover.
Tools & Services
- AWS — VPC, EC2, ALB, ASG, RDS, CloudFront, WAF, Route 53, IAM, ACM
- Backend — Node.js, PM2
- Frontend — Apache/HTML
- Networking — Subnets, NAT, IGW, routing
Outcomes
Delivered a highly available, resilient infrastructure with cross-region fault tolerance. Implemented DR strategy, documented all deployment steps, tested failover, and created a cleanup guide to avoid unnecessary AWS billing.