2. Bookstack infra with Google auth, on default VPC 2. Bookstack infra with Google auth, on default VPC, RDS AutoBackup Off, Single-AZ, EC2. ≈$51.40 Balanced BookStack deployment utilizing an existing VPC with AWS Cognito for authentication . RDS Single-AZ with AutoBackup disabled ensures cost efficiency , while EFS Backup , Secrets Manager , Systems Manager , EC2 , and CloudWatch Logs provide security and monitoring. You can always update the current stack using a Change Set to enable: • RDS Multi-AZ ( MultiAZ=true ) for high availability, • RDS AutoBackup ( AutoBackup=true ) for automatic backups, • RDS Deletion Protection ( DeletionProtection=true ) to prevent accidental deletion. However, you cannot switch from the default VPC to a custom one because the CIDR block differs , preventing the stack from being updated. For instructions on updating the stack using a  Change Set , please refer to the dedicated guide .