To complete this assignment, you will need to have …

• Successfully completed Assignment 1.
• Completed all Labs week (1 – 7).
• Explored how to write a PHP webpage to upload and search files.ObjectivesThis assignment will extend/modify the infrastructure and program you developed in Assignment 1. It has the following additional objectives:

1. Create IAM roles to enable an EC2 instance to access S3.
2. Create a custom AMI with User data.
3. Create a Launch Configuration based on your custom AMI.
4. Create an Autoscaling Group across two Availability Zones with rules for scaling up and down.
5. Create a Load Balancer to distribute service requests.
6. Create a cached distribution of your website using CloudFront.
7. Document the deployment of your website with CloudFormation.

AWS Accounts for Web Site deployment
You have to use the following account to complete this assignment:

COS20019 CAA Assignment 2 v2 1

Faculty of Science, Engineering and Technology Swinburne University of Technology

1. Vocareum account: A Vocareum-managed AWS environment has been created for you by your convenor to complete this assignment. The class will be named Cloud Computing Architcture. This will allow your tutor to gain access to your AWS console so your work can be marked. This class gives you US$100 AWS credit. This account is deleted at the end of semester. If you run out of your credit you can request an extra $25 through AWS educate website. Your tutors can not request that on your behalf.

Getting Help

To get help on the assignment do not email the convenor or your tutor. An Assignment 2 Discussion board has been created on Canvas.

Students are encouraged to post both questions and answers to the discussion board. Appropriate help can include identifying errors, suggesting solutions and pointing to appropriate online resources. However, do not post multi-line code solutions to the board. You can attach the code to your post. Tutors will also monitor the board and post responses as appropriate. One Q&A session is offered to help you with this assignment in lab 9 (Feel free to attend any tutorial sessions).

Requirements

Infrastructure

You will set up a VPC with the structure and services as illustrated in the diagram below.

COS20019 CAA Assignment 2 v2 2

Faculty of Science, Engineering and Technology

Swinburne University of Technology

CloudFront

NAT

AMI

Web tier

DB tier

PHP SDK

not implemen

ted

S3 Bucket for photos

\

The infrastructure you need to develop is illustrated in the diagram above. The following points should be noted:

• The VPC is as per Assignment 1B. Remember, the name of your VPC must be in the format[FirstNameInitial][LastName]VPC. For example, if your name is Bill Gates your VPC would benamed BGatesVPC.
• Region: us-east-1
• Two availability zones each with a private and public subnet with suitable CIDR.
• Associate public subnets with a route table that routes to an Internet Gateway
• The AMI you create will be based on Amazon Linux 2 AMI (HVM), SSD Volume Type
• The RDS instance is the same as Assignment 1B.
• The auto-scaling group should launch instances into the private subnets of the two AZs.
• Web servers should only accept incoming from the Elastic Load Balancer.
• Web servers need to be given permission to read and write to the S3 bucket.
• The security groups should be as follows:

SG Name

elb_sg web_tier_sg db_tier_sg

Protocols

HTTP (80)
HTTP (80), SSH (22) MySQL (3306), SSH (22)

Source

Anywhere elb_sg web_tier_sg

Web pages and Photo Storage

You can reuse the S3 bucket you created in Assignment 1 to store your photos. In this assignment, you will be required to add functionality to the PHP web page (upload.php) you created in Assignment 1A so photos can be uploaded to S3 via PHP. You will need to:

COS20019 CAA Assignment 2 v2 3

Faculty of Science, Engineering and Technology Swinburne University of Technology

1. Create an IAM role that gives permission to your EC2 web server instance to write photos to your S3 bucket.
2. Temporarily upload the photo to your web server then write it to S3 using the AWS PHP SDK.
3. Restrict access to your S3 bucket so that only web pages served from your PHP application will be able to read photos. Make the bucket private so that users can’t use a direct URL to the S3bucket to access an image there.

There are many resources on the web that explain how to upload a file from a web form to a server using PHP. The Assignment Resources in Canvas contains instructions on how to set up the appropriate policies on S3 and how to use the AWS PHP SDK.

Please note: your code and the way you implement it is flexible. You do not have to use PHP SDK.