Build out a highly available website according to AWS best practices and security principals. The website servs 3 different webpages based on the path specified in the URL. These webpages are served by 3 different target groups. The goal is to have the message below served by default target group at http:/// Target group 1 will serve the below message at http:///target1/ Target group 2 will serve the below message at http:///target2/ The EC2 instances are deployed in private subnets making them safe from malicious attacks from the Internet. The website is externally accessible through Application Load Balancer (ALB) deployed into public subnets. In addition to public/private subnets separation, Security Groups are designed in a way that ensures network security. The diagram below depicts the main infrastructure components and web traffic flows that are in scope of this assignment. Please note that some infrastructure pieces (such as route tables, subnet CIDR ranges and SG) are missing from the diagram below. Those are part of your assignment and are left for you to design. Infrastructure Description: Region: us-east-1 VPC CIDR: 10.1.0.0/16 (custom VPC, do not use default VPC for this assignment)

 

8 AWS, us-east-1 VPC CIDR: 10.10.0.0/16 Co Public SN1 Private SN1 Private SN3 Availability Zone us-east-la NAT GW O Web Web-ASG2 TTTTT Web-ASG1 IGW ALB 6000 Auto Scaling Auto Scaling dal LOD Co Public SN2 Private SN2 Availability Zone us-east-1b Web-ASG1 Private SN4 Bastion Web Web-ASG2