S.SAFAYET / CLOUD LABExplore project ↗
AWS HANDS-ON INFRASTRUCTURE PROJECT 2026

From a single server
to a scalable cloud.

An end-to-end AWS deployment built with Nginx, an Application Load Balancer, CloudFront, Route 53, HTTPS, and EC2 Auto Scaling.

Explore architecture ↗View AWS modules →
07+AWS COMPONENTS
443HTTPS ENFORCED
2–4AUTO SCALING CAPACITY
SYSTEM DESIGNap-southeast-1 / SG
◎
Route 53DNS routing
DNS
☁
CloudFrontGlobal content delivery
TLS
⇄
Application Load BalancerHTTPS termination · health checks
443
▣
EC2 + NginxWeb target group · HTTP 80
WEB
Reference architecture01 / 01
INFRASTRUCTURE STACKAmazon EC2Elastic Load BalancingCloudFrontRoute 53ACMAuto Scaling
01 / ARCHITECTURE

One request. Multiple layers.

Every layer has a defined responsibility—from DNS resolution and edge delivery to secure load balancing and web serving.

01
◎

Route 53

Resolves safayet.sudip.site to the CloudFront distribution.

DNS
02
☁

CloudFront

Delivers content through AWS edge locations and redirects HTTP viewers to HTTPS.

EDGE + TLS
03
⇄

Application Load Balancer

Receives HTTPS on port 443, performs health checks, and forwards to the web target group.

TRAFFIC
04
▣

EC2 + Nginx

Serves the website on port 80. Auto Scaling can maintain 2–4 identical instances.

COMPUTE
↳
Request path

Browser → Route 53 DNS resolution → CloudFront (HTTPS) → ALB (HTTPS) → Nginx on EC2 (HTTP inside VPC)

SECURE EDGE
02 / AWS MODULES

What's under the hood.

The AWS services, configurations, and practical skills covered throughout this project.

01▣

Amazon EC2 & Nginx

Launch an Ubuntu instance, configure security groups, install Nginx, and publish a custom webpage.

UbuntuPort 80Security Groups
02⇄

Application Load Balancer

Create an HTTP target group, configure health checks, and use HTTP-to-HTTPS listener redirection.

Target GroupsListenersHealth Checks
03◇

AWS Certificate Manager

Issue DNS-validated certificates for ALB in Singapore and CloudFront in N. Virginia.

ACMTLSDNS Validation
04☁

Amazon CloudFront

Configure the ALB as an HTTPS origin, enforce HTTPS for viewers, and manage origin request headers.

CDNHTTPS OnlyAllViewer
05◎

Amazon Route 53

Connect the custom subdomain to CloudFront using an alias A record.

Hosted ZoneAlias ADNS
06↗

EC2 Auto Scaling

Create an AMI and launch template, attach the ASG to the target group, and scale using CPU metrics.

AMILaunch Template2–4 Instances
03 / IMPLEMENTATION

Build sequence. Step by step.

A practical deployment roadmap. These are project tasks—not a live report of resources deployed in your AWS account.

01

Deploy the web server

Launch public EC2, install Nginx, configure HTTP 80, and verify the website.

COMPUTE
02

Introduce load balancing

Create one web target group and an internet-facing ALB across two Availability Zones.

NETWORK
03

Enforce encrypted traffic

Validate ACM certificates, add HTTPS 443, and redirect ALB HTTP 80 to HTTPS.

SECURITY
04

Enable global delivery

Create CloudFront with the ALB DNS origin, HTTPS-only origin protocol, and forwarded viewer Host header.

EDGE
05

Connect the domain

Create a Route 53 alias for safayet.sudip.site and test HTTPS end to end.

DNS
06

Scale the application

Capture an AMI, create a launch template, and configure ASG desired 2 / minimum 2 / maximum 4.

SCALING
BUILT TO UNDERSTAND THE CLOUD

Infrastructure is more than launching instances.

This lab connects compute, networking, certificates, content delivery, DNS, and elasticity into one coherent AWS deployment.

Back to top ↑