Introduction

Project Overview

Rookwork is an integrated, multi-platform team collaboration management software (browser and desktop app) designed to facilitate real-time project management and team synchronization. The system utilizes a modern Client-Server architecture, featuring a React 19 frontend and a robust Spring Boot backend. To ensure high availability (HA), security, and seamless content delivery, the entire infrastructure is deployed on AWS Cloud. This section provides a comprehensive look at how these AWS services are architected to support the application’s core workflows, from networking and compute to database storage and shared services.

System Architecture

The system operates through the following main processing flows:

1 DNS Resolution & CDN:

• Route 53 resolves the domain name and routes users to the system.
• CloudFront distributes the static frontend from FE Static S3, combined with AWS WAF to protect against web exploits.

2 Routing & Compute Backend:

• API traffic flows through the Internet Gateway → ALB (Application Load Balancer) → load-balanced to EC2 instances placed inside Private Subnets.
• EC2 accesses the internet for outbound calls via the NAT Gateway (step 6.1 — Route to Internet).

3 Database & Storage:

• Business data is stored on Amazon RDS PostgreSQL, deployed in a Multi-AZ setup (step 7 — DB Replication) for disaster recovery.
• File attachments are written by EC2 to Amazon S3 via the S3 Gateway Endpoint using Internal Routing (steps 8 & 9) — bypassing the public internet and reducing internal bandwidth costs to zero.
• Users download files directly via Direct File Access (step 10).

4 Shared Services:

• Amazon SES delivers email notifications (e.g., workspace invitations) triggered from EC2 (steps 6.2 & 6.3).
• AWS Certificate Manager (ACM) manages SSL/TLS certificates, and AWS IAM controls system-wide permissions.

After understanding the system architecture, proceed to 5.2 — Prerequisite to configure the required tools.