{"version":"1.0","provider_name":"Ichwan Chandra","provider_url":"https:\/\/ichwanchandra.com\/blog","title":"AWS Solutions Architect Project (Security Pillar) \u2013 Secure Application Deployment \u2013 Part 3 - Ichwan Chandra","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"92PA1oH0mT\"><a href=\"https:\/\/ichwanchandra.com\/blog\/aws-solutions-architect-project-security-pillar-part-3\/\">AWS Solutions Architect Project (Security Pillar) \u2013 Secure Application Deployment \u2013 Part 3<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/ichwanchandra.com\/blog\/aws-solutions-architect-project-security-pillar-part-3\/embed\/#?secret=92PA1oH0mT\" width=\"600\" height=\"338\" title=\"&#8220;AWS Solutions Architect Project (Security Pillar) \u2013 Secure Application Deployment \u2013 Part 3&#8221; &#8212; Ichwan Chandra\" data-secret=\"92PA1oH0mT\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script type=\"text\/javascript\">\n\/* <![CDATA[ *\/\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/ichwanchandra.com\/blog\/wp-includes\/js\/wp-embed.min.js\n\/* ]]> *\/\n<\/script>\n","thumbnail_url":"https:\/\/ichwanchandra.com\/blog\/wp-content\/uploads\/2026\/06\/aws-solutions-architect-project-security-pillar-part-3-1024x572.png","thumbnail_width":1024,"thumbnail_height":572,"description":"In order to run the application backend in a secure way, we'll deploy the EC2 instance inside a private subnet of the secured VPC. There will be a Bastion Host deployed in the public subnet for administrative access only. Last but not least, we'll securely route the inbound traffic via Application Load Balancer (ALB) hosted on the public subnet."}