Cloud security practical demonstration using aws academy

I need a hands-on walkthrough that shows, step by step, how to build a secure cloud architecture for a web application inside the AWS Academy environment. My main goal is to demonstrate best-practice design rather than spin up a finished production stack, so the focus stays on core security concepts and the reasoning behind each service choice. Scope • Start with a high-level diagram of the target architecture, then move into an AWS Academy lab where you actually provision the components. • Incorporate essential services such as VPCs with public/private subnets, Application Load Balancer, Auto Scaling groups, RDS/Aurora in a private subnet, and AWS WAF/Shield for edge protection. • Highlight how each layer—network isolation, identity management (IAM roles/policies), logging (CloudTrail, VPC Flow Logs), and threat detection (GuardDuty)—comes together to protect the application. • Record the entire session (screen + audio) or supply a richly annotated PDF with console screenshots so I can replay or reuse the material in future classes. Deliverables 1. Architecture diagram (editable format). 2. Lab guide or video tutorial that recreates the environment in AWS Academy. 3. Terraform, CloudFormation, or AWS CDK templates used during the demo. 4. Brief write-up (1–2 pages) summarising key security takeaways and next steps for students. Acceptance Criteria • Every component must deploy successfully in an AWS Academy learner lab. • Least-privilege IAM policies are evident and justifiable. • All security controls are traceable back to AWS Well-Architected Framework (Security Pillar) recommendations. • I can repeat the deployment from scratch using only the provided assets.

Project ID: 40570882