# Bookstack Wiki Architecture
# 1. Bookstack infra with default auth
#### 1. Bookstack infra with default auth, on default VPC, RDS AutoBackup Off, Single-AZ, EC2. ≈$45.40
This **BookStack** infrastructure is **optimized for cost efficiency** by utilizing an **existing VPC** instead of provisioning a new one. **AWS Cognito** authentication **is** **disabled**, relying on **standard** **authentication** mechanisms. The database is hosted on **RDS** with a **Single-AZ deployment**, and **AutoBackup** is **disabled** to minimize costs. Additionally, the infrastructure includes an **EC2** **instance**, **EFS Backup** for persistent storage, **Secrets Manager** and **Systems Manager** for secure configuration management, and **CloudWatch** **Logs** for monitoring and troubleshooting.
[](https://devsecopsinc-bookstack.s3.us-east-1.amazonaws.com/Diagram/Bookstack+infra-1.jpeg "Bookstack infra-1.jpeg")
#### You can always update the current stack using a **Change Set** to enable:
• **RDS Multi-AZ** (`MultiAZ=true`) for high availability,
• **RDS AutoBackup** (`AutoBackup=true`) for automatic backups,
• **RDS Deletion Protection** (`DeletionProtection=true`) to prevent accidental deletion.
However, **you cannot switch from the default VPC to a custom one** because the **CIDR block differs**, preventing the stack from being updated.
For instructions on updating the stack using a **Change Set**, please refer to the [**dedicated guide**](https://wiki.devsecopsinc.io/books/updating-the-stack-using-a-change-set/page/how-to-update-stack-parameters-using-a-change-set "wiki.devsecopsinc.io").
# 2. Bookstack infra with Google auth, on default VPC
#### 2. Bookstack infra with Google auth, on default VPC, RDS AutoBackup Off, Single-AZ, EC2. ≈$51.40
**Balanced BookStack deployment** utilizing an **existing** **VPC** with **AWS** **Cognito** for **authentication**. **RDS** **Single-AZ** with **AutoBackup** **disabled** ensures **cost efficiency**, while **EFS** **Backup**, **Secrets Manager**, **Systems Manager**, **EC2**, and **CloudWatch** **Logs** provide security and monitoring.
[](https://devsecopsinc-bookstack.s3.us-east-1.amazonaws.com/Diagram/Bookstack+infra-2.png "Bookstack infra-2.png")
#### You can always update the current stack using a **Change Set** to enable:
• **RDS Multi-AZ** (`MultiAZ=true`) for high availability,
• **RDS AutoBackup** (`AutoBackup=true`) for automatic backups,
• **RDS Deletion Protection** (`DeletionProtection=true`) to prevent accidental deletion.
However, **you cannot switch from the default VPC to a custom one** because the **CIDR block differs**, preventing the stack from being updated.
For instructions on updating the stack using a **Change Set**, please refer to the [**dedicated guide**](https://wiki.devsecopsinc.io/books/updating-the-stack-using-a-change-set/page/how-to-update-stack-parameters-using-a-change-set "wiki.devsecopsinc.io").
# 3. Bookstack infra with Google auth, custom VPC
#### 3. Bookstack infra with Google auth, custom VPC, RDS AutoBackup Off, Single-AZ, EC2. ≈$84.25
The **BookStack** **infrastructure** is designed **for a scalable and secure deployment**. It utilizes a **new** **VPC** for network isolation, **AWS** **Cognito** for **authentication**, and **RDS** for database management in a **Single**-**AZ** configuration with **AutoBackup** **disabled** **to optimize costs**. An **EC2** **instance** powers the application, while **EFS** **Backup** ensures data persistence. **Secrets** **Manager** and **Systems** **Manager** enhance configuration security, and **CloudWatch** **Logs** provide real-time monitoring and troubleshooting capabilities.
[](https://devsecopsinc-bookstack.s3.us-east-1.amazonaws.com/Diagram/Bookstack+infra-3.png "Bookstack infra-3.png")
#### You can always update the current stack using a **Change Set** to enable:
• **RDS Multi-AZ** (`MultiAZ=true`) for high availability,
• **RDS AutoBackup** (`AutoBackup=true`) for automatic backups,
• **RDS Deletion Protection** (`DeletionProtection=true`) to prevent accidental deletion.
However, **you cannot switch from the default VPC to a custom one** because the **CIDR block differs**, preventing the stack from being updated.
For instructions on updating the stack using a **Change Set**, please refer to the **[dedicated guide](https://wiki.devsecopsinc.io/books/updating-the-stack-using-a-change-set/page/how-to-update-stack-parameters-using-a-change-set "wiki.devsecopsinc.io").**