azon Route 53 routes end-user requests resolving Domain Name Service (DNS). Amazon CloudFront caches content and accelerates delivery, leveraging global points of presence. CloudFront also handles SSL ending, integrating with Amazon Certificate Manager, which automatically creates and renews SSL certificates with no cost. AWS Web Application Firewall integration with CloudFrontand Application Load Balancer mitigates OWASP top 10 application vulnerabilities. The Application Load Balancer routes HTTP/S requests to EC2 instances running on private subnets. An AmazonLinux 2 AMIcontains the PHP and other needed binaries, such as the AWS SDK for PHP. The Amazon CloudWatch Agent installed on the Amazon Linux 2AMIstreams application logs, additional host-level metrics, and custom business metrics. Amazon EC2 Auto Scaling manages the instance launch based on metrics such as CPU and memory. It uses Amazon Graviton instances for cost optimization. Using Systems Manager Session Manager, connect to EC2 instances with web-based sessions on the AWS Console. There is no need for key pairs of SSH ports to be open. Database credentials are securely stored on AWS Secrets Manager. Using the AWS SDK for PHP, the application code retrieves the credentials stored on Secrets Manager though an IAMRole. Application code is safely stored on AWS CodeCommit using the familiarGit command line interface (CLI). AWS CodePipeline implements continuous integration and continuous deployment (CI/CD), orchestrating code deployment using an AWS CodeDeploy hook that triggers when new EC2instances are launched. Amazon ElastiCache for Redis caches session data. Amazon Aurora Multi-AZ enables high-availability. Application connects via DNS endpoint that handles failover automatically in case of failure. The Aurorareader endpoint handles read operations, offloading Aurorawriter instance load. Amazon Elastic File System (Amazon EFS) stores and shares web content with the Auto Scaling group. 1
