The market moves from a bucket to a server. Build it end to end; the script is in ~/web.sh and the EC2 trust document in ~/ec2-trust.json.

1. A security group market-web-1w8y8f6 that allows TCP 80 from anywhere and nothing else inbound.
2. A role market-ssm-1w8y8f6 trusted by EC2 with AmazonSSMManagedInstanceCore, in an instance profile of the same name.
3. A t3.micro named market-web-1w8y8f6 from the current Amazon Linux 2023 image, launched with that group, that profile and web.sh as user data.
4. An Elastic IP associated with it, and termination protection on.
5. The page answering with the Monster Market heading on the Elastic IP.

curl -s http://<elastic ip>/
aws ssm start-session --target <id>

Finish from inside the instance: read its own instance id from the metadata service with a token.