Security Groups

Before setting up any infrastructure, we're going to setup some security groups. This will make it a little bit simpler and we can pre plan how everything will be able to talk to each other.

We will setup 4 security groups:

• Traffic will come in from the internet to the load balancer
• The load balancer will talk to the application servers
• The application servers will talk to the database

We're defining exactly how different parts of the infrastructure can talk to each other.

There's also a bastion host in there. This is just a special server that we can use to access some of the private infrastructure. A bastion host will exist in the public subnet, so that we can still access it. Then we can use it to connect to private instances or databases.

Load Balancer

step 1:

Click on EC2

step 2:

Click on Security Groups

step 3:

Click on Create security group

step 4:

Name is qr-load-balancer, give it a description, and select the qr app vpc