AWS Environment Setup Specialist

I’m spinning up a brand-new AWS environment and want it built right the first time. The core stack must include secure EC2 instances running a database server workload, S3 buckets for object storage, and at least one RDS database instance. This deployment will host banking-related data, so tight network segmentation, encryption at rest and in transit, and granular IAM policies are mandatory. My preference is to have everything created with infrastructure-as-code (CloudFormation or Terraform) to keep future changes controlled and auditable, but I’m open to your recommended tooling if it speeds delivery without sacrificing reliability. Deliverables • VPC design and implementation with public/private subnets, route tables, NAT, and security groups suitable for a production database tier • EC2 launch configuration (or an Auto Scaling group) tuned for a database server workload, including OS hardening and encrypted EBS volumes • RDS instance (engine of your choice, justify) with automated snapshots, multi-AZ fail-over, and parameter groups set to best practices for banking data • S3 buckets configured for least-privilege access, server-side encryption (SSE-KMS), versioning, and lifecycle policies • IAM roles, policies, and user groups that enforce MFA and principle of least privilege • Documentation and hand-off call walking me through the stack, costs, and next steps Acceptance Criteria 1. All resources deploy successfully from code into my AWS account without manual tweaks. 2. CIS benchmark or AWS Well-Architected checks report no high-severity issues. 3. I can restore the database from a snapshot and retrieve versioned objects from S3. 4. Clear, concise documentation accompanies the code. If you’re confident you can stand up this environment quickly and securely, let’s talk timelines and get started.

Projektin tunnus (ID): 40163339