VPC Web App Lab

Problem

Applications need isolated network tiers, controlled ingress, and observability from the start.

Solution

Place the load balancer in public subnets, app instances in private subnets, and restrict access with security groups.

Architecture Overview

Internet traffic reaches an ALB, forwards to private EC2 targets, and sends metrics and logs to CloudWatch.

AWS Services Used

Steps Taken

• - Design the VPC CIDR and subnet layout.
• - Create route tables and internet gateway access.
• - Launch EC2 targets in private subnets.
• - Connect the ALB and verify health checks.

Screenshots

Lessons Learned

• - Network boundaries are easier to manage when named clearly.
• - Health checks reveal routing and firewall mistakes quickly.