Editing Hosting A PHP Web Application On AWS (section)

=== More configuration options ===

Click '''"Configure more options''' button to define additional properties for the web server.

For example, to create a database, or to define security properties for the EC2 instance linked to the web server. 

==== Security ====

This panel controls key pairs for SSH access. 

'''Virtual machine permissions''' > '''EC2 key pair''' > choose an existing key pair. (This is created via '''AWS Management Console''' > '''EC2''' > '''Network & Security''' > '''Key Pairs''')

When connecting to the EC2 instance via ssh, it's necessary that an inbound rule exists for ssh for the EC2 instance's security group. Under instance details, click on the security group > '''Inbound''' tab > '''Edit''' button. There should be a rule for SSH for the IP address of the machine that is used to ssh to the EC2 instance.

==== Instances (EC2) ====

Control over '''instance type''' and '''security types'''.

Once the environment is launched a url will be available that can be used to view the web site.

==== Database ====

Either select an existing snapshot, or create a new database. 

For example, MariaDB is not available from the list of database types when creating a new database. In order to link the EBS to a MariaDB database, first create the MariaDB instance in the AWS RDS Management Console. Then create a snapshot of the database. Then select that snapshot when selecting a database for the EBS.

Security group rules must be configured to allow the EB instance to make connections to the RDS database. 

* '''AWS Management Console''' > '''RDS''' > '''Instances''' > ''my instance'' > click for details
* Scroll down to the '''Connect''' pane to view a list of '''Security groups'''
* An inbound rule needs to exist for the VPC that was created for the EB instance.
* Scroll farther down on the RDS instance details page for the '''Details''' pane > '''Security and network''' > '''VPC''' > click on the VPC name to view its details, e.g. its IPv4 CIDR.
* Click on a '''CIDR/IP - Inbound''' security group to edit its settings.
* '''Security Groups listings''' page > Click on the row for the RDS's security group > '''Inbound''' tab > '''Edit''' button
** '''Type:''' e.g. MYSQL/Aurora, or appropriate database type
** '''Protocol:''' TCP
** '''Port range:''' 3306
** '''Source:''' VPC IPv4 CIDR value