{"id":18363058,"url":"https://github.com/javiervolpe/cloudsecurity-finalproject","last_synced_at":"2025-04-10T06:03:46.224Z","repository":{"id":261316456,"uuid":"862265818","full_name":"JavierVolpe/CloudSecurity-FinalProject","owner":"JavierVolpe","description":"Cloud Security Final Project ITTEK KEA","archived":false,"fork":false,"pushed_at":"2024-11-05T21:24:05.000Z","size":23,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-02-15T19:37:25.949Z","etag":null,"topics":["azure","cloud","powershell"],"latest_commit_sha":null,"homepage":"","language":"PowerShell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/JavierVolpe.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-09-24T10:08:16.000Z","updated_at":"2024-11-05T21:24:09.000Z","dependencies_parsed_at":"2024-11-05T22:30:29.666Z","dependency_job_id":"7f17c977-4626-43bd-af65-4c4ce4899471","html_url":"https://github.com/JavierVolpe/CloudSecurity-FinalProject","commit_stats":null,"previous_names":["javiervolpe/cloudsecurity-finalproject"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JavierVolpe%2FCloudSecurity-FinalProject","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JavierVolpe%2FCloudSecurity-FinalProject/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JavierVolpe%2FCloudSecurity-FinalProject/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JavierVolpe%2FCloudSecurity-FinalProject/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/JavierVolpe","download_url":"https://codeload.github.com/JavierVolpe/CloudSecurity-FinalProject/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248166936,"owners_count":21058481,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["azure","cloud","powershell"],"created_at":"2024-11-05T23:04:40.716Z","updated_at":"2025-04-10T06:03:46.178Z","avatar_url":"https://github.com/JavierVolpe.png","language":"PowerShell","funding_links":[],"categories":[],"sub_categories":[],"readme":"Azure Three-Tier Load Balancing Infrastructure Deployment Script\n================================================================\n*This script was developed as part of the \"Cloud Security\" course final project.*\n\nThis repository contains a PowerShell script that automates the deployment of a secure, three-tier infrastructure on Microsoft Azure. The infrastructure includes:\n\n-   **Three Subnets**: Web, App, and Data tiers.\n-   **External Load Balancer**: Distributes incoming web traffic to two web servers.\n-   **Internal Load Balancer**: Distributes traffic to two application servers.\n-   **Virtual Machines**: Four Linux VMs (2 for Web tier, 2 for App tier).\n-   **Network Security Groups (NSGs)**: Controls inbound and outbound traffic.\n-   **Automated Configuration**: Installs and configures Apache2, PHP, and MySQL on the respective VMs.\n\nTable of Contents\n-----------------\n\n-   [Architecture Overview](#architecture-overview)\n-   [Prerequisites](#prerequisites)\n-   [Deployment Instructions](#deployment-instructions)\n-   [Security Features](#security-features)\n-   [Cleanup](#cleanup)\n-   [Notes](#notes)\n-   [License](#license)\n\nArchitecture Overview\n---------------------\n\nThe script sets up the following components:\n\n-   **Web Tier**: Two Ubuntu VMs (`WebVM1`, `WebVM2`) behind an **External Load Balancer**.\n-   **App Tier**: Two Ubuntu VMs (`AppVM1`, `AppVM2`) behind an **Internal Load Balancer**.\n-   **Data Tier**: MySQL databases running on the App VMs.\n-   **Network Security Groups**: Applied to control traffic between subnets and to the internet.\n\nPrerequisites\n-------------\n\n-   **Azure Subscription**: Active subscription to deploy resources.\n\n-   **Azure PowerShell Module**: Installed and configured. You can install it using:\n\n    powershell\n\n    Copy code\n\n    `Install-Module -Name Az -AllowClobber -Scope CurrentUser`\n\n-   **Permissions**: Ensure you have the necessary permissions to create resources in the Azure subscription.\n\nDeployment Instructions\n-----------------------\n\n1.  **Clone the Repository**:\n\n    bash\n\n    Copy code\n\n    `git clone https://github.com/JavierVolpe/CloudSecurity-FinalProject/blob/main/.git\n    cd azure-three-tier-infrastructure`\n\n2.  **Login to Azure**:\n\n    Open PowerShell and run:\n\n    powershell\n\n    Copy code\n\n    `Connect-AzAccount`\n\n3.  **Run the Deployment Script**:\n\n    Execute the script to deploy the infrastructure:\n\n    powershell\n\n    Copy code\n\n    `.\\cloud_sikkerhed_project.ps1`\n\n    \u003e **Note**: You may need to adjust execution policies to run the script:\n\n    powershell\n\n    Copy code\n\n    `Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser`\n\n4.  **Monitor the Deployment**:\n\n    The script will output the progress. Deployment may take several minutes.\n\nSecurity Features\n-----------------\n\n-   **Network Security Groups (NSGs)**: Configured to allow only necessary traffic.\n    -   Allows HTTP traffic on port 80 to the Web tier.\n    -   Allows MySQL traffic on port 3306 between Web and App tiers.\n-   **Least Privilege Principle**: Access controls are set to minimize exposure.\n-   **Private Subnets**: App and Data tiers are isolated in private subnets.\n-   **No Public IPs on VMs**: VMs do not have public IP addresses to reduce attack surface.\n-   **Strong Passwords**: Uses complex passwords for administrative accounts.\n\nCleanup\n-------\n\nTo avoid incurring charges, remove the resource group and all associated resources:\n\n\n`Remove-AzResourceGroup -Name \"MyResourceGroup\" -Force`\n\nNotes\n-----\n\n-   **Data Tier**: In this script, the data tier is implemented using MySQL on the App VMs. For production scenarios, consider using Azure SQL Database with failover groups for high availability.\n-   **Additional Security Services**: While this script includes NSGs, you can enhance security by adding:\n    -   **Azure Key Vault**: For managing secrets and keys.\n    -   **Azure Bastion**: For secure remote management.\n    -   **Resource Locks**: To prevent accidental deletion of critical resources.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjaviervolpe%2Fcloudsecurity-finalproject","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjaviervolpe%2Fcloudsecurity-finalproject","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjaviervolpe%2Fcloudsecurity-finalproject/lists"}