# 1. Bookstack infra with default auth

#### 1. Bookstack infra with default auth, on default VPC, RDS AutoBackup Off, Single-AZ, EC2. ≈$45.40

This **BookStack** infrastructure is <span style="text-decoration: underline;">**optimized for cost efficiency**</span> by utilizing an **existing VPC** instead of provisioning a new one. **AWS Cognito** authentication **is** **disabled**, relying on **standard** **authentication** mechanisms. The database is hosted on **RDS** with a **Single-AZ deployment**, and **AutoBackup** is **disabled** to minimize costs. Additionally, the infrastructure includes an **EC2** **instance**, **EFS Backup** for persistent storage, **Secrets Manager** and **Systems Manager** for secure configuration management, and **CloudWatch** **Logs** for monitoring and troubleshooting.

[![Bookstack infra-1.jpeg](https://devsecopsinc-bookstack.s3.us-east-1.amazonaws.com/Diagram/Bookstack+infra-1.jpeg)](https://devsecopsinc-bookstack.s3.us-east-1.amazonaws.com/Diagram/Bookstack+infra-1.jpeg "Bookstack infra-1.jpeg")

#### You can always update the current stack using a <span class="s1">**Change Set**</span> to enable:

• <span class="s1">**RDS Multi-AZ**</span> (`<span class="s2">MultiAZ=true</span>`) for high availability,

• <span class="s1">**RDS AutoBackup**</span> (`<span class="s2">AutoBackup=true</span>`) for automatic backups,

• <span class="s1">**RDS Deletion Protection**</span> (`<span class="s2">DeletionProtection=true</span>`) to prevent accidental deletion.

<span class="s3">However, </span>**you cannot switch from the default VPC to a custom one**<span class="s3"> because the </span>**CIDR block differs**<span class="s3">, preventing the stack from being updated.</span>

For instructions on updating the stack using a <span class="s1">**Change Set**</span>, please refer to the [<span class="s1">**dedicated guide**</span>](https://wiki.devsecopsinc.io/books/updating-the-stack-using-a-change-set/page/how-to-update-stack-parameters-using-a-change-set "wiki.devsecopsinc.io").