Thank you for your feedback. Yes, I wanted to ensure that anyone viewing this tutorial can easily learn how to deploy a multi-tier application stack using AWS Elastic Beanstalk. Best wishes
Great explanation of concept AWS ebs , vpc subnets public ,app and db, rotation of db secrets and lambda functions , Load balancer and security group, instances profile and inline policy....🔥🔥🔥🔥🔥🔥🔥🔥
I am new to application deployment, especially AWS, and this is the best introduction I have found so far. In the first hour, I understood EBS better than going through AWS documentation. I am looking forward to your next tutorial. Excellent content and instruction. Thank you for sharing your knowledge.
I am really glad to hear that you found the AWS Elastic Beanstalk tutorial useful. We will be producing more in the upcoming weeks and I hope you will continue to visit us for more training tutorials. Best wishes
Hi, Thank you for your valuable feedback and I am glad to hear that you found the tutorial on AWS Elastic Beanstalk useful. Its an excellent tool to get started with deploying Apps on AWS. We are planning additional step-by-step guides around Amazon ECS and Serverless Architectures so do watch out for them Best wishes
Thank you for your feedback. We are creating an alternative video for deploying the same multi-tier application but this time with container services, so do look out for that one. Best wishes
Excellent tutorial! Much appreciated! It was very difficult learning from AWS documentation. This tutorial explained everything very clearly. One question - what is the best way to pause or stop an environment? Would be nice to do that during development, so that we can keep costs low. Thanks!
Hello! This video has been great for helping me set up a new VPC for my Elastic Beanstalk Java application. We were using the default VPC which I quickly found out to be insecure. I have a question about the NAT Gateways which you mentioned at 51:36 in the video. If I make 2 NAT Gateways for my 2 public subnets which are in different availability zones, how do I go about creating a route to the internet (0.0.0.0/0) for both NAT gateways on the main route table? It will only allow me to create one route to the internet for one of the NAT gateways (like you do in the video), which makes sense. Do I need to create another route table for my second NAT gateway? My confusion here is the route you created for the NAT gateway is on the Main Route table, and there can only be one Main Route Table.
Hi Thank you for your message. Yes, in the video tutorial, I only use 1 NAT Gateway because since it was a LAB, I did not want to create additional NAT Gateways as they are a chargeable service and do not fall within Free Tier, If you need to deploy two NAT Gateways, one in each public subnet, then you will need to also create an additional route table. Normally your private subnet attach themselves to the Main Route Table as a default behavior. If you plan to use two NAT Gateways, then it also means you should create at least two Route tables - one for each Private Subnet hosting your EC2 instances which Elastic Beanstalk will deploy. Then you can configure each route table to point to the NAT Gateway target for Internet Access (0.0.0.0/0). You would then need to disassociate those pirvate app subnets from the main route table and attach them to the two new route tables you created. This means that only the database subnets will be attached to the main route table. This way the instances in each private app subnet will now access the Internet via their relevant NAT Gateways in their availability zones. Adding two NAT gateways offers redundancy and is good practices for production environments, Hope this helps... Rajesh
Hello! This video has been great for helping me create elastic beanstalk, but i am facing server error "100.0 % of the requests are failing with HTTP 5xx. Process default has been unhealthy for 1 hour 17 minutes (Target.ResponseCodeMismatch).1 hour" every thing is properly setup please help me out. Thank you so much.
Thank you for the wonderful video. I followed the same steps however I am getting a 5XX error. I used the same file you provided. could you please let me know how to debug and fix PHP errors?
Hi Bharat I think there was some issue with the code. I have re-uploaded the correct code zip file which you saw in the video. The file name eb-rds-todo-app-code-v2 (1).zip Also uploaded a sample JSON file for the IAM policy that needs the Secret ARN. I have retested today using this code and its works well. Please note that the code is designed to run in us-east-1. It has been tested in this region and works there. The code would need a change if you run in other regions in the server.php file. Try the updated code... hope this helps Best wishes Rajesh
@@awstraining Thank you for sharing the updated application code. I selected PHP 8.3, which was not compatible and gave a 5XX error, so I created another application using PHP 8.1, and it worked fine.
Hi Divya, as discussed, this is likely to be an issue with a misconfiguration of the Environmental variables where a misspelled variable prevented the code from running. When we checked the health check file itself, that seems to be in the right location anyway. Hope this helps.
I am using AWS Elastic Beanstalk and I need to deploy my Appliactio using Load balanced (Not in a single instance). But I got these two errors. "Stack named 'awseb-e-seqmhv7s3e-stack' aborted operation. Current state: 'CREATE_FAILED' Reason: The following resource(s) failed to create: [AWSEBInstanceLaunchWaitCondition]." After this error events show this error. "LaunchWaitCondition failed. The expected number of EC2 instances were not initialized within the given time. Rebuild the environment. If this persists, contact support." Can you help me to fix this error, please?
Hi, Thank you for your message. So there are could a number of reasons why the stack failed to create. It could be a network issue (missing or misconfigured NACLs or Security Groups, issues with IGW or NATGW). It could also be related to permissions and IAM Policies not being configured correctly or your IAM role associated with the EC2 instance profile. Finally, it could also be due to an issue with the runtime. I would suggest if you still have the deployment in a failed state, to check the AWS CloudFormation console. AWS CloudFormation is actually used to build your application infrastructure stack and sits behind Elastic Beanstalk. In the CloudFormation console, have a review of the events and see where it is failing - that might give you some clue as to what is happening and we can investigate from there... Hope this helps
How do I use AWS Secrets Manager within my nodejs application on elastic beanstalk? I would like to retrieve a secret I stored on Secrets manager and use it in EB instead of using Environment Variables.
You would need to build your application to directly interface with Secrets Manager. There is a version 3 of the application code in the GitHub repo that you could use.
Hello sir. I watched your tutorial and it was amazing. I followed each and every step but still it shows an error message for creating the environment. Please help.
Hi Rashmi, As per our LinkedIn Chat, please check the configuration for your VPC, specifically if your NAT Gateway/IGW are correctly defined and the route tables are have the correct routes. Also, please check the Security Groups. In addition, you want to ensure that your EC2 instances IAM Role has the policies that allow Elastic Beanstalk services. Feel free to message me on LinkedIn with any screenshots etc and I'd be happy to help further...
Thank you for this tutorial, very clear. I tried to replicate in my zone (eu-south-1) following all steps: at the end it seems the app is not working resulting into HTTP 500 error. The only change I did is in server.php file, where I changed the region of secret manager, setting it to 'region' => 'eu-south-1'. May be I should do this change somewhere else? Thanks
Thank you for your valuable feedback. I presume that the region is enabled for your account. The change to the server.php file for the region for secret manager should not give such an error. The secret simply enables the application to authenticate against the database and perform CRUD operations. You should still be able to access the front website. It is more likely to be an issue with the network configuration such as security groups, IGW or NAT or the route tables not been properly configured. It could also be that the server did not install the application as it did not have the right IAM role attached to it. Could I request you to check these parameters and let me know if that helps... let me know how you get on. Best wishes Rajesh
@@awstraining , thanks for your response. I tried to segment the code to isolate the error and I cam to the conclusion that the problem id db connect (server.php line 38 - $db = mysqli_connect(DB_SERVER, DB_USERNAME ...). Commenting it (and doing small modifications to avoid php error on missing $db variable) the application works (of course user can't do any action, the db is missing !). "devdb" is not accessible using usual tools, so I can't check if it exists, the same for "devdb" schema; again, error_log messages are not included int EBS logs, so I can just guess ... I also re-create the db following the tutorial, but nothing change. Any suggestion ?
Just to confirm are you using the same server.php file provided in the GitHub repo -I only ask because my line 38 is different. $result = $client->getSecretValue([ 'SecretId' => $_ENV["SECRET_NAME"], ]); // result contains a few key-value about that secret. // The key named SecretString has the username and password encoded as a plain json string // Decode the json using json_decode function to get username and password $myJSON = json_decode($result['SecretString']); define('DB_SERVER', $_ENV["DB_ENDPOINT"]); define('DB_USERNAME', $myJSON->username); define('DB_PASSWORD', $myJSON->password); define('DB_DATABASE', $_ENV["DB_NAME"]); $db = mysqli_connect(DB_SERVER, DB_USERNAME, DB_PASSWORD, DB_DATABASE); $table = "user"; Also did you create the secret in Secret Manager..? Would you be able to share any screenshots?
@@awstraining I just dropped some empty line, so the connect has changed position. Sorry. I also confirm that all resources are in eu-south-1 zone. Please, Here blow two links to secret and db screenshot drive.google.com/file/d/17ZgmWSXLYIt3kdU4YrQFIV4MwNtYERI1/view?usp=sharing, drive.google.com/file/d/1B4iTMACOIk-RKVejhZRzM1NOkKmesjPD/view?usp=sharing
