Ravi Sir's Cyber Security Cards › Revision Cards
Project Overview and Architecture
Project Overview and Architecture The plan for a “reels” video app: users upload videos, others watch them. Browser → EC2 (Nginx + PHP) → videos in S3 , data in RDS MySQL. The browser is never trusted. Only EC2 may write to S3 and talk to RDS. S3 and RDS are never public. Writing code first. Draw th
Read card text
What this card says
What it is
The plan for a “reels” video app: users upload videos, others watch them.
How it fits
Browser → EC2 (Nginx + PHP) → videos in S3, data in RDS MySQL.
Why it matters for security
The browser is never trusted.
Only EC2 may write to S3 and talk to RDS. S3 and RDS are never public.
Common mistake
Writing code first. Draw the plan first, then build.
| Flow | What happens |
|---|---|
| Upload | Browser POSTs the video to upload.php → PHP checks size and… |
| Feed | reels.js calls feed.php → PHP reads 5 posts from RDS → for… |
| Playback | The |
| Like | reels.js POSTs to like.php with a CSRF token → a row in… |
Learn more in the lesson: 16.1 Project Overview and Architecture