Back to blogs
Cloud & DevOpsAWSEC2RDSIAMInfrastructure

Practical AWS Architecture for Small Engineering Teams

How to build a cost-effective, production-ready AWS setup for a startup or small team — covering EC2, RDS, S3, IAM, and the monitoring stack that actually matters.

Doni Putra PurbawaDoni Putra Purbawa
January 10, 202412 min read

Most AWS architecture guides assume you have a DevOps team and a large budget. This guide is for small engineering teams who need to run production workloads reliably without burning money on over-engineered infrastructure.

Start Simple, Scale Intentionally

The biggest mistake I see small teams make is copying enterprise architecture patterns before they have enterprise-scale problems.

For a typical early-stage product, this is enough:

├── VPC (single region, 2 AZs)
│   ├── Public Subnets
│   │   └── ALB (Application Load Balancer)
│   └── Private Subnets
│       ├── EC2 Auto Scaling Group
│       └── RDS PostgreSQL (Multi-AZ when ready)
├── S3 (static assets, backups)
├── CloudFront (CDN for static assets)
└── Route 53 (DNS)

IAM: The Foundation You Can't Skip

Proper IAM from day one saves enormous pain later. Never use root credentials. Create per-service IAM roles with least privilege.

Cost Optimization Without Sacrificing Reliability

On a t3.nano or t3.micro: configure swap space, limit Node.js heap, use PM2 cluster mode judiciously, and monitor memory with CloudWatch custom metrics.

The key insight: monitoring is not optional, it's how you sleep at night.

Doni Putra Purbawa

Doni Putra Purbawa

Cloud Architect & Senior Backend Engineer | AWS, Fintech, Cloud & AI

Designing reliable AWS cloud architecture, fintech platforms, and AI-powered backend systems. Based in Indonesia, open to Japan relocation.

View full profile →

1 Comment

Y
Yuki TanakaJanuary 12, 2024

The point about not copying enterprise patterns before you have enterprise problems really resonated.

Leave a Comment

Comments are moderated and will appear after approval.