EG334S . HyEnt Multi-Cloud Project

On-prem VPC ↔ AWS public VPC ↔ Azure VNet, joined by two IPSec tunnels

Decommission deadline
.
Sun 30 Aug 2026, 23:59 SGT
Project week
./ 5
.
Milestones done
0/ 6
Tick them below to update
Overall progress
0%

Critical path . protect this chain, cut everything else first

Team & responsibilities . proposed split, swap freely

Casper
Team Lead . Cloud Architect
Overall architecture, exec summary, conclusion. Owns the CIDR decision sign-off.
Chief Editor . §1, §7
Jeff
Network Engineer
VPC/VNet build + both IPSec tunnels. VGW in Ireland, customer gateway for Virginia.
Editor . §3, §5
Bernard PM
Technical PM + Security/Monitoring
Runs delivery, critical path, risks & teardown. Owns CloudWatch, CloudTrail, VPC Flow Logs as individual technical slice.
PM . Editor §3, §5.1
Adeline
Web & Database Engineer
IP addressing scheme, routing, web-server instance in the public subnet.
Editor . §4
Soo Fern
DC Ops Manager
EC2 instances (Virginia private server), DNS/DHCP, problems & solutions log.
Researcher / Editor . §2, §6

PM cockpit

Bernard

Blockers & dependencies . clear top-down

Everythingwaits onCIDR locked (M1)Casper / team
Compute + VPNwait onNetworks live (M2)Jeff
Integration testwaits onVPN #1 up (M3)Jeff
Monitoring + bonuswait onMulti-cloud (M4)Bernard
Reportwaits onEvidence capturedSoo Fern / all

Teardown checklist . run in EVERY region before 30 Aug 23:59

On-prem sim

AWS . us-east-1
0 / 6 cleared

AWS public

AWS . eu-west-1
0 / 6 cleared

Azure

North Europe
0 / 6 cleared
Every session
60-sec standup: done / doing / blocked. Log blockers above.
Mid-week
Critical-path check vs the plan. Flag slippage early, while it's cheap.
Weekly
Walk the risk watch. Update the decision log (CIDR, regions, roles).
Demo day
Rehearse. Make sure each member can defend their own section.

Milestones

Grade weighting

30%
30%
20%
20%
Checkpoint . individual Presentation . individual System demo . team Report . group
60% individual (Checkpoint + Presentation)
40% team / group (Demo + Report)

Architecture . 3 cells, 2 tunnels

On-prem DC
AWS VPC 1 . us-east-1
N. Virginia . 10.0.0.0/16
🔒IPSec S2S
cross-region
AWS public
AWS VPC 2 . eu-west-1
Ireland . 10.1.0.0/16
🔒IPSec
Azure VNet
N. Europe (TBC)
Ireland . 10.2.0.0/16

Cross-region: the on-prem↔public tunnel spans us-east-1 and eu-west-1. Suggest Azure North Europe (Ireland) beside the public cell. CIDRs illustrative . lock non-overlapping ranges at M1. Teardown must clear both AWS regions + Azure.

5-week plan . back-planned from teardown

Risk watch . the things that actually bite

!
Overlapping CIDR ranges . #1 cause of "tunnel up, traffic won't route". Lock non-overlapping ranges at M1.
!
Decommission slippage . real mark penalty if resources run past 30 Aug 23:59. Rehearse teardown via CloudFormation delete-stack.
!
Cross-region teardown . you span us-east-1 + eu-west-1 + Azure. Resources are per-region . decommission each one separately or orphans survive past 30 Aug and cost marks. Also mind inter-region data-transfer cost.
▲
Gold-plating . don't start bonus (HA, auto-scaling, monitoring) until M4 is done.
▲
Evidence debt . screenshot + save YAML as you build. You can't capture a resource after teardown.