Setup Complete AWS Leaner Lab VPC

I use the AWS Learner Lab to setup an environment with the following features:

An S3 bucket using policy to host a public website
A VPC with 3 subnets (2 private, 1 public)
A NAT instance giving internet access to EC2 instances in private subnets
A MariaDB (MySQL compatible) database server
A Linux server running Docker to host WordPress
A Windows Server running Active Directory Domain Services
A Windows Server sharing files using SMB
The Windows file server is connected to the Windows domain

There are some limitations of the current environment. The security groups could have been refined to be more restrictive. I only had one domain controller--ideally there would have been 2 in separate availability zones. I never changed the Windows Server administrative credentials created by AWS. The database and other credentials should be stored in a secret manager. Etc. The main purpose was to show how all of these services interact, so don't take every configuration in this video as a best practice.