Author: Robert Chen
-
Requirements
- Deploy mybb with cloudformation
- Address security, scalability, high availability, monitoring
-
Architecture
Architecture is as below:
The architecture is designed as an auto-scaling group for web servers, mutli-az RDS.
-
Detail design
-
Security
- Follow up with AWS security best practice, limit access as less as possible
- Only allow ssh to the public subnet
-
Only allow access from public subnets to private subnets which is for RDS, no internet traffic to private subnets
3.2 High Availability
- Follow up with AWS high availability best practice
- Web servers are in auto-scaling group with at least 2 instances running in multiple availability zones
- Multi-AZ RDS for high availability
3.3 Scalability
- Follow up with AWS high availability best practice
- Auto-scaling group will scale up or scale down based on cloudwatch alarms
3.4 Monitoring
-
Cloudwatch alarms are setup
-
SNS topic is set up to deliver notifications from three Cloudwatch alarms
-
Cloudwatch agent is installed on EC2 instances
-
The ELB for the web servers commits logs into an S3 Bucket (every 5 minutes)
The post Auto deploy MyBB with cloudformation appeared first on Robert Chen.