how to design the architecture for hosting app on AWS

Question

Hi:
I plan to host an app on AWS, with some features:
 1, the app and data should be separated due to privacy(app maintenance, such as fixing crashes, is independent of data ).
 2, the app will upload the picture to the AWS, and some Python programs will process the pic and send results to the app
3, the app will also pass on some user information to the server, and the server will run some python programs according to the user information, and send results to the app.
Currently, looks like we should host app on Ec2, data to then use lambda to S3? run python on lambda? I am very new, please  suggest your ideas, also any very related background I should learn asap? thanks

Accepted Answer

**Tier 1: Web Tier**

-   **[AWS Elastic Beanstalk](https://aws.amazon.com/elasticbeanstalk/?gclid=Cj0KCQjwwMqvBhCtARIsAIXsZpbgSIt7hCfkOvLzUxHvt3DPu8_r89J46VLpvUsBBpVKbLVgQZUpTRkaAoKuEALw_wcB&trk=3f9fabd5-1409-48b0-a0d7-eed573be21d0&sc_channel=ps&ef_id=Cj0KCQjwwMqvBhCtARIsAIXsZpbgSIt7hCfkOvLzUxHvt3DPu8_r89J46VLpvUsBBpVKbLVgQZUpTRkaAoKuEALw_wcB:G:s&s_kwcid=AL!4422!3!651612449174!e!!g!!elastic%20beanstalk!19835790842!148728882204)**: You can use AWS Elastic Beanstalk to deploy and manage your web application's front-end code. Elastic Beanstalk automatically provisions and configures the necessary resources, such as [EC2 instances](https://aws.amazon.com/ec2/?nc1=h_ls), load balancing, and auto-scaling, making it easier to deploy and manage your web application.
-   **[Elastic Load Balancing](https://aws.amazon.com/es/elasticloadbalancing/)**: Elastic Beanstalk automatically sets up an Elastic Load Balancer (ELB) to distribute incoming traffic across multiple EC2 instances. This ensures high availability and fault tolerance for your web application.

**Tier 2: Application Tier**

-   **[AWS Lambda](https://aws.amazon.com/lambda/?nc1=h_ls)**: You can use AWS Lambda to run your Python programs and business logic. Lambda functions can be triggered by events from other AWS services, such as API Gateway or S3.
-   [**Amazon API Gateway**:](https://aws.amazon.com/api-gateway/?nc1=h_ls) API Gateway can be used to create and manage APIs that your web application can call to send user information and receive results from the Lambda functions.

**Tier 3: Data Tier**

-   **[Amazon S3](https://aws.amazon.com/s3/?nc1=h_ls)**: As mentioned earlier, you can use S3 to store user data and uploaded images securely.
-   **[Amazon RDS](https://aws.amazon.com/rds/?nc1=h_ls) or [DynamoDB](https://aws.amazon.com/dynamodb/?nc1=h_ls)**: If your application requires a relational database, you can use Amazon Relational Database Service (RDS) to provision and manage a database instance. Alternatively, if you need a NoSQL database, you can use Amazon DynamoDB, a fully managed NoSQL database service.

I recommend you to follow[ this workshop](https://catalog.us-east-1.prod.workshops.aws/workshops/85cd2bb2-7f79-4e96-bdee-8078e469752a/en-US) for a Hands On experience with these services.

Answer

a new question, since App UI is developed by another company A, I will put my algorithm and Python functions on lambda to calculate the pics passed by the App. The trick thing is: that my algorithms are confidential,  company A needs to access EC2 and S3 for hosting the app, but I need to block their access to lambda functions, what is the best strategy here?

how to design the architecture for hosting app on AWS

관련 콘텐츠