Answer all the questions in this section.

Study the scenario and complete the question$($s$)$ that follow:

As you might be aware, architecture is the art and science of designing and building large structures.

Large systems, whether buildings, hardware or software, require architecture to manage their size and

complexity. Architecture is primarily concerned with structures and the interrelationship of the

components that are used to build those structures.

The infrastructure design of a system must follow the best practices, as having well$-$architected systems

greatly increase the possibility of business success. Furthermore, the high availability of a system is

determined by prime factors, such as fault tolerance and scalability. Referring to scalability, dynamic

scaling is one of the most powerful tools to use to take advantage of the elasticity of the cloud. These

two factors ensure a system's ability to remain operational and quickly scale resources in and out when

demand changes.You are required to explore the architectural best practices for designing and operating reliable,

secure$,$ efficient, cost$-$effective and highly available systems to:

$1\mathrm{.}1$ Improve the network diagram from the scenario above. To do that, you need to use

draw.io

$($

draw.io is a free drawing application from Google$).$

$1\mathrm{.}2$ Then, use the AWS console to create the new system as per point $1\mathrm{.}1.$

Note to Student

Your diagram should be an illustration of the improved architecture$/$network diagram.

You must deploy a custom VPC to support your solution.

Your new system must strictly enforce access and security restrictions between your load$-$

balancing layer, Web$/$application servers and databases.

If you are using a Free Tier account, the lecturer must remember to help you delete all services

created once the project is marked to avoid running out of Free Tier space.

To support this solution, here are standards to consider:

a$.$ Ensure that access to the Application servers and RDS databases from the Internet is not possible, except for the Web servers. However, Application servers and RDS databases can still access the Internet through NAT instances or NAT Gateway.Note to Student

Each layer in your architecture must have a security group applied to enforce security.

g$.$ Set up the "Average CPU utilisation" metric to $50\%$ to trigger Auto Scaling when the CPU

usage is over $50\%.$

h$.$ Use the Bootstrap script in the appendix to load and configure your server's instances

based on your architecture$/$diagram$.$

b$.$ Deploy Application servers and RDS databases in non$-$publicly accessible subnets. You must ensure that one Availability Zone $($AZ$)$ has a master RDS database and the other AZ must house a standby database for high availability.

c$.$ Deploy the required Elastic Load Balancer$($s$)$ as an entry point.

d$.$ Deploy the Auto Scaling group behind the ELB to balance servers' instances automatically

for fault tolerance and high availability.

e$.$ Each $AZ$ must keep a minimum of one server's instance, even if the average CPU utilisation decreases below $50\%.$

f$.$ Control the access between servers and subnets using inbound and outbound packet filtering provided by Network Access Control Lists $($Network ACLs$)$ and Security groups.

Note to Student

Each layer in your architecture must have a security group applied to enforce security.

g$.$ Set up the $$Average CPU utilisation$$ metric to $50\%$ to trigger Auto Scaling when the CPU

usage is over $50\%.$

h$.$ Use the Bootstrap script in the appendix to load and configure your server$$s instances based on your architecture$/$diagram$.$

Appendix

Bootstrap script for Web servers. Remember to change $01$ to $02$ for server $02.$

#$!/$bin$/$bash

yum update $-$y

yum install httpd $-$y

service httpd start

chkconfig httpd on

cd $/$var$/$www$/$html

echo $""$

i need the improved diagram drawn on draw.io$,$ the diagram you gave me is incorrect, give me a perfect diagram drawn on draw.io$,$ use shapes to draw it