AWS Setup for Mobile App's Backend Services

Job ID: 30677967

Budget: $10 – $30 USD

Have a clean new FREE TIER AWS environment for a new mobile app backend set of resources as listed below. Need someone to quickly set up the services like a sys admin for AWS:

VPC with 2 private subnets, one for Bastion Host (EC2) with Internet connectivity and one for the MariaDB RDS database where Lambda can be deployed to reach the database,
Email MX records setup for Cognito verification emails
Certificate for https secure API Gateway
Route53 Zone

Open to recommendations to keep things FREE for the first year for example just one EC2 for now for the database but securing it sufficiently during the build process versus having one instance for dev, one for QA and one for Production up front. Is it possible to move the database to the secured subnet AFTER setup, development and test so the Bastion Host would not be required until closer to production?