VPC & IAM Security Lab

🛠 Lab from the Platform Engineering Bootcamp. Used in Week 10. Bootcamp landing page: https://academy.tekanaid.com/bootcamps/platform-engineering-bootcamp Parent course(s):

• Week 10: AWS Cloud Computing (slug: aws-cloud-computing)

Tasks 1-3 and 7 are standalone AWS VPC/IAM skill practice. Tasks 4-6 and 8 deploy the real TaskFlow backend, database, and frontend into the multi-tier VPC you build in this lab: Task 4 packages the images (built from the bootcamp's private canonical repo) as S3 artifacts and creates the deployment IAM role, Task 5 deploys the database tier (RDS in the dedicated database subnets), Task 6 launches the EC2 instances with that role attached (no GitHub credentials on the instances themselves), and Task 8 fronts the web tier with an Application Load Balancer so the frontend instance no longer needs a public IP.

This lab grew from 6 to 8 tasks to cover the full production pattern end to end (dedicated database tier, load-balanced frontend); expect ~3 hours rather than the shorter single-session labs elsewhere in this bootcamp.

Design and implement production-grade AWS network architecture and security using VPC and IAM. Create custom VPC with public and private subnets, configure routing with Internet Gateway and NAT Gateway, implement security zones for multi-tier applications, design IAM roles and policies following least-privilege principles, and test security policies comprehensively.