Architecture View

AWS Architecture (Left Side)

1. Networking & Subnets

• VPC spans two availability zones: us-east-1a and us-east-1b
• Subnet design:
  • Public subnets: 192.168.0.0/24 and 192.168.1.0/24 with NAT Gateways
  • Private subnets: 192.168.2.0/24 in both zones (used by EKS Worker Nodes)
  • Route tables configured accordingly for internet and internal traffic

2. EKS Cluster

• EKS control plane (managed by AWS) orchestrates containers
• Two sets of Worker Nodes (A and B) in private subnets behind an Auto Scaling Group
• NLB (Network Load Balancer) exposes services as needed

3. Add-ons

• cert-manager and Let's Encrypt: for TLS certificate automation
• nginx-controller: to route traffic within Kubernetes
• Argo: likely for CI/CD pipelines
• Hosted zone with Namecheap: for domain/DNS integration

4. VPN Connection

• AWS VPN Gateway connects to Azure via an AWS Customer VPN Gateway
• Two tunnels (Tunnel 01 & Tunnel 02) ensure high availability