1. Goal
2. Pre-Requisites
3. Pre-Deployment
4. VPC Deployment
5. Maven (Build)
6. 3-Tier Architecture
7. Application Deployment
8. Post-Deployment
9. Validation

1. Create AWS Free Tier account
2. Create Bitbucket account and create repository to keep Java source code.
3. Migrate Java Source Code to your own Bitbucket repository – Refer
4. Create account in Sonarcloud.
5. Create account in Jfrog cloud.

1. Create Global AMI
   a. AWS CLI
   b. Cloudwatch agent
   c. Install AWS SSM agent
2. Create Golden AMI using Global AMI for Nginx application
   a. Install Nginx
   b. Push custom memory metrics to Cloudwatch.
3. Create Golden AMI using Global AMI for Apache Tomcat application
   a. Install Apache Tomcat
   b. Configure Tomcat as Systemd service
   c. Install JDK 11
   d. Push custom memory metrics to Cloudwatch.
4. Create Golden AMI using Global AMI for Apache Maven Build Tool
   a. Install Apache Maven
   b. Install Git
   c. Install JDK 11
   d. Update Maven Home to the system PATH environment variable

  Deploy AWS Infrastructure resources as shown in the above architecture.

1. Build VPC network ( 192.168.0.0/16 ) for Bastion Host deployment as per the architecture shown above.
2. Build VPC network ( 172.32.0.0/16 ) for deploying Highly Available and Auto Scalable application servers as per the architecture shown above.
3. Create NAT Gateway in Public Subnet and update Private Subnet associated Route Table accordingly to route the default traffic to NAT for outbound internet connection.
4. Create Transit Gateway and associate both VPCs to the Transit Gateway  for private communication.
5. Create Internet Gateway for each VPC and update Public Subnet associated Route Table accordingly to route the default traffic to IGW for inbound/outbound internet connection.

1. Deploy Bastion Host in the Public Subnet with EIP associated.
2. Create Security Group allowing port 22 from public internet.

1. Create EC2 instance using Maven Golden AMI
2. Clone Bitbucket repository to VSCode and update the pom.xml with Sonar and JFROG deployment details.
3. Add settings.xml file to the root folder of the repository with the JFROG credentials and JFROG repo to resolve the dependencies.
4. Update application.properties file with JDBC connection string to authenticate with MySQL.
5. Push the code changes to feature branch of Bitbucket repository
6. Raise Pull Request to approve the PR and Merge the changes to Master branch.
7. Login to EC2 instance and clone the Bitbucket repository
8. Build the source code using  maven arguments “-s settings.xml”
9. Integrate Maven build with Sonar Cloud and generate analysis dashboard with default Quality Gate profile.

1. Create private facing Network Load Balancer and Target Group.
2. Create Launch Configuration with below configuration.
    a. Tomcat Golden AMI
    b. User Data to deploy .war artifact from JFROG into webapps folder.
    c. Security Group allowing Port 22 from Bastion Host and Port 8080 from private NLB.
3. Create Auto Scaling Group.

1. Create public facing Network Load Balancer and Target Group.
2. Create Launch Configuration with below configuration
   a. Nginx Golden AMI
   b. User Data to update proxy_pass rules in nginx.conf file and reload nginx service.
   c. Security Group allowing Port 22 from Bastion Host and Port 80 from Public NLB.
3. Create Auto Scaling Group

1. Artifact deployment taken care by User Data script during  Application tier EC2 instance launch process.
2. Login to MySQL database from Application Server using MySQL CLI client and create database and table schema to store the user login data (Instructions are update in README.md file in the Bitbucket repo)

1. Configure Cronjob to push the Tomcat Application log data to S3 bucket and also rotate the log data to remove the log data on the server after the data pushed to S3 Bucket.
2. Configure Cloudwatch alarms to send E-Mail notification when database connections are more than 100 threshold.

1. Verify you as an administrator able to login to EC2 instances from session manager & from Bastion Host.
2. Verify if you as an end user able to access application from public internet browser.