Aliu2211/azubi_capsotone_project

Capstone project repository for Azubi Africa, showcasing end-to-end practical work, implementation details, and project deliverables. # ☁️ End-to-End AWS Cloud Architecture (Group 3) Welcome to the **Group 3 Capstone Project**! This repository holds the code and documentation for a highly available, secure, and fully automated web application deployed on AWS. We built this project to demonstrate how to deploy a modern cloud infrastructure using **enterprise-grade security** and **automated CI/CD pipelines** while staying within the AWS Free Tier. If you are a junior engineer looking to replicate a real-world cloud deployment, you are in the right place. Follow this guide step-by-step! --- ## 🏗️ Architecture Overview Our architecture separates the computing layer (EC2) from the static asset delivery layer (S3) and protects everything behind a global CDN (CloudFront). ### **How the Traffic Flows:** 1. A user visits `cloud.badexhq.com`. 2. **Cloudflare (DNS)** securely routes the request to **Amazon CloudFront**. 3. **CloudFront (CDN)** acts as the smart router: - If the user asks for images, CSS, or JS files, CloudFront fetches them directly from a private **Amazon S3** bucket using Origin Access Control (OAC). - If the user asks for the HTML page, CloudFront forwards the request to the **Application Load Balancer (ALB)**. 4. The **ALB** routes the traffic to healthy **EC2 Instances** sitting inside an **Auto Scaling Group**. 5. When developers push new code to the `main` branch, **GitHub Actions** uses AWS Systems Manager (SSM) to automatically deploy the code to all running instances without needing SSH! --- ## 🛠️ The Tech Stack * **Compute:** Amazon EC2, Auto Scaling Groups (ASG), Application Load Balancer (ALB) * **Storage & CDN:** Amazon S3, Amazon CloudFront * **Security & Identity:** AWS IAM, AWS Certificate Manager (ACM), Security Group Prefix Lists, Origin Access Control (OAC) * **CI/CD & Automation:** GitHub Actions, AWS Systems Manager (SSM), Bash User Data Scripts * **Monitoring & Cost:** Amazon CloudWatch (Logs & Alarms), AWS Budgets * **DNS:** Cloudflare --- ## 🚀 …