Designing our first cloud penetration testing lab environment

In Chapter 1, Getting Started with Penetration Testing Labs in the Cloud, we discussed how modern cloud applications are designed, developed, and deployed. We took a closer look at how distributed multi-tier architectures and horizontal scaling strategies make it possible to independently scale specific tiers to handle increased user traffic:

Figure 2.1 – Generic multi-tiered architecture diagram from Chapter 1

Here, we have designed the system to have separate tiers for the web servers, application servers, and databases. Given that this is one of the common cloud architecture implementations, you might be wondering, how would this look like when implemented on a cloud platform such as AWS? The answer to this question is simple! It would look more or less the same when implemented on AWS! For one thing, the resources in Figure 2.1 would simply have their own corresponding set of resources...