1. VPC (with subnets, igw, ngw, route tables, eips) (az a, b) 2. EC2 Bastion Instance (subnet-public-a) (associate elastic ip) 3. Launch Template (80, custom 0:0.0.0.0) 4. Auto Scailing Group