Workshop Overview
5.1 Cloud-Native Fitness App Deployment on AWS
This workshop guides you through deploying and validating Cloud-Native Fitness App Deployment on AWS.
Project overview
MyFit is a cloud-native fitness platform for health tracking, workout planning, nutrition logging, and AI-assisted coaching.
The system includes:
- Frontend application for user interaction and progress tracking.
- Backend API for business logic and secure data processing.
- AWS infrastructure for managed deployment, scaling, and monitoring.
How this project is deployed on AWS
Deployment follows a container-based CI/CD flow:
- Developer pushes source code to GitHub.
- GitHub Actions builds backend container image.
- Image is pushed to Amazon ECR.
- Amazon ECS Fargate service is updated with rolling deployment.
- Traffic is routed through CloudFront to S3 (frontend) and ALB/ECS (API).
Architecture diagram

AWS service selection
| Service | Why it is used |
|---|
| CloudFront | Low-latency global delivery and unified public entry point |
| S3 | Static frontend hosting and media storage |
| ALB | HTTP/HTTPS load balancing to ECS services |
| ECS Fargate | Managed container runtime with auto scaling |
| RDS PostgreSQL | Managed relational database for transactional data |
| Cognito | Authentication and identity management |
| ECR | Container image registry |
| CloudWatch | Centralized logging and monitoring |
| Route 53 + ACM | DNS and TLS certificate management |
| Secrets Manager | Secure secret storage for runtime configuration |
Goal
Build a production-style stack with:
- VPC and networking foundation
- PostgreSQL database on RDS
- Containerized backend on ECS Fargate
- Frontend on S3 + CloudFront
- Authentication with Cognito
- Bedrock API integration through Secrets Manager
Architecture summary
- Frontend traffic goes to CloudFront and S3.
- API traffic goes from CloudFront to ALB and ECS service.
- ECS backend connects to RDS and S3.
- Cognito is used for authentication.
- Optional Bedrock key is injected from Secrets Manager.
Workshop structure
- 5.2 Prerequisite - IAM roles and policy baseline
- 5.3 Phase-based step-by-step
- 5.4 App Result
- 5.5 CloudFormation Deploy with CDK and Script
- 5.6 Clean Up Resource
Source of truth