Create a dedicated VPC and all the components. Create security groups (ALB-->EC2-->RDS).

Create an S3 Bucket. Pick the right AWS region and VPC and subnets to deploy auto-scaling
groups. The instances would be placed in 2 private subnets, each in a different availability zone.
An application load balancer spreads HTTP and HTTPS traffic across registered instances
equally. It takes traffic from the public internet and then distributes the load across the EC2
instances in the private subnets. This ensures greater security.
RDS database should be in private subnet.EC2 instances that has ALB security group can access
RDS. RDS is located on private groups.
All internet traffic has to go through the load balancer, which would then distribute the traffic
evenly between the EC2 instances. HTTP and HTTPS traffic from any source would be allowed.
The host would accept SSH traffic from IP address and have outbound rules to the EC2
instances. The EC2 instances would accept inbound traffic from the load balancer and from the
RDS instance. The RDS instance would only accept traffic from the EC2 instances and would only
send information to the EC2 instances.