Secure Scalable AWS Setup

I need a DevOps-savvy cloud engineer to stand up a fresh AWS environment that cleanly hosts a Node.js (Fastify/Express) API, a PostgreSQL RDS instance, and an S3 bucket dedicated to test artifacts and screenshots. The emphasis is on security best-practice, tidy networking, and a foundation I can grow over time.

Here’s what matters:
• The stack should sit inside its own VPC with public and private subnets, security groups, and routing configured for tight traffic control.
• IAM must be role-based and least-privilege; use managed policies wherever practical.
• I prefer manual scaling for now, so size the compute layer with right-sized instances and leave headroom for future Auto Scaling Groups once traffic justifies it.
• Please wire everything into CloudWatch so I get metrics, logs, and basic alarms out of the box.
• S3 encryption at rest, RDS storage encryption, and HTTPS endpoints are mandatory.
• A concise hand-off document is needed showing what was created, how to reproduce it, and where to tweak capacity later.

I’ll supply a written setup guide outlining naming conventions and any account specifics—you translate that into a working environment and verify that the API can connect to RDS and write files to S3.

Deliverables
1. Fully provisioned AWS resources in my account (API host, RDS PostgreSQL, S3 bucket, VPC, IAM, CloudWatch).
2. Connection tests proving the API reads/writes to the database and S3.
3. Architecture diagram + hand-off guide covering manual scaling steps and security notes.
4. Important. Video recording of all the setup when creating it and short video capturing of each feature is working.

If this sounds straightforward to you, let’s get it launched.