Version A Project Specification Faculty Information Technology Module Name ITVWA0/ITCFA0 Module Code Cloud Foundations (AWS) Project Title Architecture Improvement Total Marks 100 Copy Editor Ms Nicole Stern This project contributes 10% towards the final mark. Instructions to Student 1. This is not a group project; it can only be done individually. 2. Upon completion of this project, a presentation of the project results should be done using Microsoft Teams and a design solution given to your lecturer. 3. 10% will be deducted from this project if it is handed back for resubmission due to plagiarism. Requirements • You may reference the module’s learning material on myLMS. • The submission must consist of a neat design solution illustrating the result from the AWS management console. • Your name, student number, project number and date of presentation must be included on the design solution document’s cover page. • You may use the tool of your choice to create the infrastructure diagrams. • You must create and use an AWS Free Tier account to complete this project. • By default, the region is the United States but you must change it to the South African region to avoid being charged on certain AWS services. ITVWA0 – Version A Project Specification 2021 | V1.0 Page 1 of 8 Eduvos (Pty) Ltd. (formerly Pearson Institute of Higher Education) is registered with the Department of Higher Education and Training as a private higher education institution under the Higher Education Act, 101, of 1997. Registration Certificate number: 2001/HE07/008 Plagiarism and Referencing Consult the section at the end of this document, which outlines how negative marking will be applied as well as the way in which it will affect the assignment mark. ITVWA0 – Version A Project Specification 2021 | V1.0 Page 2 of 8 Section A Question 1 100 Marks Answer all the questions in this section. Study the scenario and complete the question(s) that follow: As you might be aware, architecture is the art and science of designing and building large structures. Large systems, whether buildings, hardware or software, require architecture to manage their size and complexity. Architecture is primarily concerned with structures and the interrelationship of the components that are used to build those structures. The infrastructure design of a system must follow the best practices, as having well-architected systems greatly increase the possibility of business success. Furthermore, the high availability of a system is determined by prime factors, such as fault tolerance and scalability. Referring to scalability, dynamic scaling is one of the most powerful tools to use to take advantage of the elasticity of the cloud. These two factors ensure a system’s ability to remain operational and quickly scale resources in and out when demand changes. Figure 1: Infrastructure diagram Source: AWS. 2018. Propose Architecture Diagram [PowerPoint Presentation]. Amazon Web Services Inc. ITVWA0 – Version A Project Specification 2021 | V1.0 Page 3 of 8 You are required to explore the architectural best practices for designing and operating reliable, secure, efficient, cost-effective and highly available systems to: 1.1 Improve the network diagram from the scenario above. To do that, you need to use draw.io (draw.io is a free drawing application from Google). 1.2 Then, use the AWS console to create the new system as per point 1.1. Note to Student • Your diagram should be an illustration of the improved architecture/network diagram. • You must deploy a custom VPC to support your solution. • Your new system must strictly enforce access and security restrictions between your loadbalancing layer, Web/application servers and databases. • If you are using a Free Tier account, the lecturer must remember to help you delete all services created once the project is marked to avoid running out of Free Tier space. To support this solution, here are standards to consider: a. Ensure that access to the Application servers and RDS databases from the Internet is not possible, except for the Web servers. However, Application servers and RDS databases can still access the Internet through NAT instances or NAT Gateway. b. Deploy Application servers and RDS databases in non-publicly accessible subnets. You must ensure that one Availability Zone (AZ) has a master RDS database and the other AZ must house a standby database for high availability. c. Deploy the required Elastic Load Balancer(s) as an entry point. d. Deploy the Auto Scaling group behind the ELB to balance servers’ instances automatically for fault tolerance and high availability. e. Each AZ must keep a minimum of one server’s instance, even if the average CPU utilisation decreases below 50%. f. Control the access between servers and subnets using inbound and outbound packet filtering provided by Network Access Control Lists (Network ACLs) and Security groups. Note to Student Each layer in your architecture must have a security group applied to enforce security. g. Set up the “Average CPU utilisation” metric to 50% to trigger Auto Scaling when the CPU usage is over 50%. ITVWA0 – Version A Project Specification 2021 | V1.0 Page 4 of 8 h. Use the Bootstrap script in the appendix to load and configure your server’s instances based on your architecture/diagram. End of Question 1 ITVWA0 – Version A Project Specification 2021 | V1.0 Page 5 of 8 Section B Plagiarism and Referencing Eduvos places high importance on honesty in academic work submitted by students, and adopts a policy of zero tolerance on cheating and plagiarism. In academic writing, any source material e.g. journal articles, books, magazines, newspapers, reference material (dictionaries), online resources (websites, electronic journals or online newspaper articles), must be properly acknowledged. Failure to acknowledge such material is considered plagiarism; this is deemed an attempt to mislead and deceive the reader, and is unacceptable. Eduvos adopts a zero tolerance policy on plagiarism, therefore, any submitted assessment that has been plagiarised will be subject to severe penalties. Students who are found guilty of plagiarism may be subject to disciplinary procedures and outcomes may include suspension from Eduvos or even expulsion. Therefore, students are strongly encouraged to familiarise themselves with referencing techniques for academic work. Students can access the Guide to Referencing on myLMS ITVWA0 – Version A Project Specification 2021 | V1.0 Page 6 of 8 Negative Marking At the discretion of the marker, if a student has committed plagiarism, an immediate 0% will be awarded for the project and 10% will be deducted from their next submission. ITVWA0 – Version A Project Specification 2021 | V1.0 Page 7 of 8 Appendix Bootstrap script for Web servers. Remember to change 01 to 02 for server 02. #!/bin/bash yum update -y yum install httpd -y service httpd start chkconfig httpd on cd /var/www/html echo "<html><h1>This is our Web server 01 </h1></html>" > index.html Use this Bootstrap script for the ASG: #!/bin/bash yum update -y yum install httpd -y service httpd start chkconfig httpd on cd /var/www/html echo "<html><h1>Welcome to the EC2 Instance Fleet! </h1></html>" > index.html Application Server: Bootstrap script #!/bin/bash # Install Apache Web Server and PHP yum install -y httpd mysql php # Download Lab files wget https://us-east-1-tcprod.s3.amazonaws.com/courses/ILT-CUR-100ACFNDS/v1.0.18/acf-lab3-vpc/scripts/lab-app.zip unzip lab-app.zip -d /var/www/html/ # Turn on web server chkconfig httpd on service httpd start ITVWA0 – Version A Project Specification 2021 | V1.0 Page 8 of 8