DevOps Bootcamp Final Project End State

DevOps Bootcamp Final Project End State An architecture diagram generated by Archify. User · browser · Architecture component User browser Cloudflare DNS · web + monitoring domains · Architecture component Cloudflare DNS web + monitoring domains GitHub Repo · devops-bootcamp-project · Architecture component GitHub Repo devops-bootcamp-project Terraform · provisions AWS · AWS ap-southeast-1 Terraform provisions AWS S3 State Bucket · remote Terraform state · AWS ap-southeast-1 S3 State Bucket remote Terraform state ECR Registry · devops-bootcamp/final-project-<nama> · AWS ap-southeast-1 ECR Registry devops-bootcamp/final-project-<nama> Web EC2 · 10.0.0.5 + Elastic IP :80 · AWS ap-southeast-1 › devops-vpc 10.0.0.0/24 › Public subnet 10.0.0.0/25 / devops-public-sg · public subnet Web EC2 10.0.0.5 + Elastic IP :80 public subnet Dockerized App · container from ECR · AWS ap-southeast-1 › devops-vpc 10.0.0.0/24 › Public subnet 10.0.0.0/25 / devops-public-sg Dockerized App container from ECR Ansible Controller · 10.0.0.135 · AWS ap-southeast-1 › devops-vpc 10.0.0.0/24 › Private subnet 10.0.0.128/25 / devops-private-sg · private subnet Ansible Controller 10.0.0.135 private subnet Monitoring EC2 · 10.0.0.136 · AWS ap-southeast-1 › devops-vpc 10.0.0.0/24 › Private subnet 10.0.0.128/25 / devops-private-sg · private subnet Monitoring EC2 10.0.0.136 private subnet Prometheus · scrapes metrics · AWS ap-southeast-1 › devops-vpc 10.0.0.0/24 › Private subnet 10.0.0.128/25 / devops-private-sg Prometheus scrapes metrics Grafana · dashboard UI · AWS ap-southeast-1 › devops-vpc 10.0.0.0/24 › Private subnet 10.0.0.128/25 / devops-private-sg Grafana dashboard UI Infisical Cloud · secrets store (/ansible) · Architecture component Infisical Cloud secrets store (/ansible) web.infratify.com HTTP :80 via Elastic IP image pull IaC source state creates infra configures Docker host configures monitoring AWS IAM auth / secrets runs scrapes metrics queries monitoring.infratify.com AWS ap-southeast-1 devops-vpc 10.0.0.0/24 Public subnet 10.0.0.0/25 / devops-public-sg Private subnet 10.0.0.128/25 / devops-private-sg Legend Frontend Backend Database Cloud Security External

Public Entry

  • • Cloudflare resolves the public web and monitoring names
  • • Elastic IP exposes the web server on port 80

Provision and Configure

  • • Terraform creates network, compute, ECR, and S3 state resources
  • • Infisical injects secrets via IAM; Ansible configures hosts

Observe

  • • Prometheus scrapes the deployed service
  • • Grafana presents the final monitoring dashboard