Highly Available Web Application Deployment on AWS Using a Secure VPC Architecture 2 : Final

Designed and deployed a highly available web application infrastructure on AWS using a custom VPC with two Availability Zones. The architecture includes public and private subnets, an Internet Gateway, NAT Gateway, Application Load Balancer, Auto Scaling Group, security groups, and a bastion host. The application servers are deployed across two private subnets and managed by an Auto Scaling Group to provide scalability and high availability. An Application Load Balancer distributes incoming traffic across the application instances, while the NAT Gateway provides controlled outbound internet access from the private subnets. A bastion host is deployed in a public subnet to provide secure administrative access to the private application servers. Security groups are configured following the principle of least privilege, restricting communication between the load balancer, application servers, and administrative access. Architecture: Internet → Internet Gateway → Application Load Balancer → Private Subnets → Auto Scaling Group → Application Instances The project demonstrates practical knowledge of AWS networking, VPC design, subnetting, routing, security groups, NAT, load balancing, auto scaling, bastion-host administration, and highly available cloud infrastructure. The process is adopted mainly for these 3 reasons: 1. High Availability & Reliability Deploying application servers across two Availability Zones ensures that if one Availability Zone or instance fails, traffic can still be served by healthy instances in the other zone. 2. Security & Network Isolation Keeping application servers in private subnets prevents direct internet access. The ALB handles public traffic, while security groups, NAT Gateway, and the bastion host provide controlled communication and administrative access. 3. Scalability & Performance The Auto Scaling Group automatically adjusts the number of application instances based on demand, while the ALB distributes traffic across healthy instances to improve performance and prevent individual servers from becoming overloaded. https://github.com/Edekiagbi/highly-a...