AssetVault is a production-style web application deployed on AWS that demonstrates secure, real-world cloud architecture and backend practices.
- Application Load Balancer (public)
- EC2 application server in private subnet
- PostgreSQL (RDS) in private subnet
- AWS Systems Manager Parameter Store for secret management
- IAM-based access control
- Gunicorn + systemd for production process management
Internet ↓ ALB (HTTP 80) ↓ EC2 (Flask + Gunicorn) ↓ RDS PostgreSQL (SSL)
- Secure multi-tier AWS architecture
- No secrets stored in source code
- IAM-based access to encrypted parameters
- PostgreSQL persistence with automatic schema initialization
- Health checks for load balancer integration
- Python (Flask)
- PostgreSQL (Amazon RDS)
- AWS EC2, ALB, VPC, IAM
- AWS SSM Parameter Store
- Gunicorn + systemd
This application is designed to run in a private AWS VPC.
Database credentials are retrieved at runtime from AWS SSM Parameter Store.
The app is served using Gunicorn behind an Application Load Balancer.
- No hardcoded credentials
- Encrypted database connections (SSL)
- Private subnets for application and database tiers
- Least-privilege IAM permissions
James Bilis