# 2. Bookstack infra with Google auth, on default VPC

#### 2. Bookstack infra with Google auth, on default VPC, RDS AutoBackup Off, Single-AZ, EC2. ≈$51.40

<span style="text-decoration: underline;">**Balanced BookStack deployment**</span> utilizing an **existing** **VPC** with **AWS** **Cognito** for **authentication**. **RDS** **Single-AZ** with **AutoBackup** **disabled** ensures **cost efficiency**, while **EFS** **Backup**, **Secrets Manager**, **Systems Manager**, **EC2**, and **CloudWatch** **Logs** provide security and monitoring.

[![Bookstack infra-2.png](https://devsecopsinc-bookstack.s3.us-east-1.amazonaws.com/Diagram/Bookstack+infra-2.png)](https://devsecopsinc-bookstack.s3.us-east-1.amazonaws.com/Diagram/Bookstack+infra-2.png "Bookstack infra-2.png")

#### You can always update the current stack using a <span class="s1">**Change Set**</span> to enable:

• <span class="s1">**RDS Multi-AZ**</span> (`<span class="s2">MultiAZ=true</span>`) for high availability,

• <span class="s1">**RDS AutoBackup**</span> (`<span class="s2">AutoBackup=true</span>`) for automatic backups,

• <span class="s1">**RDS Deletion Protection**</span> (`<span class="s2">DeletionProtection=true</span>`) to prevent accidental deletion.

<span class="s3">However, </span>**you cannot switch from the default VPC to a custom one**<span class="s3"> because the </span>**CIDR block differs**<span class="s3">, preventing the stack from being updated.</span>

For instructions on updating the stack using a <span class="s1">**Change Set**</span>, please refer to the [<span class="s1">**dedicated guide**</span>](https://wiki.devsecopsinc.io/books/updating-the-stack-using-a-change-set/page/how-to-update-stack-parameters-using-a-change-set "wiki.devsecopsinc.io").