Manual Steps

Security Group

• Steps:
  
  
• Create a vpc with six subnets in two AZs
• Create a web security group
  • Allow all ssh from anywhere (TCP 22 , 0.0.0.0/0)
  • Allow http from anywhere (TCP 80, 0.0.0.0/0)
  • Allow https from anywhere (TCP 443, 0.0.0.0/0)
• Create an app security group
  • Allow ssh from vpc cidr (TCP 22, <192.168.0.0/16>)
  • Allow tcp 8080 from vpc cidr
• Created the stack from the template Refer Here for the changeset created
  
• Lets create internet gateway and attach to the vpc
• Lets update the stack to push the new changes
  
  
• In AWS we have route tables (equivalent to routers). When we create a vpc aws by default creates a default route table
• Lets create a public route table associated to web1, web2 and private route table associated to other subnets. public route table will have route to internet gateway for any ip address
• Refer Here for the changes and update the stack