The group web-sg-rilzi (port 80 open) and the instance profile ssm-profile-rilzi already exist. The script is in ~/web.sh; read it, then launch:
sh
AMI=$(aws ssm get-parameter --name /aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64 --query Parameter.Value --output text)
SG=$(aws ec2 describe-security-groups --group-names web-sg-rilzi --query "SecurityGroups[0].GroupId" --output text)
aws ec2 run-instances --image-id $AMI --instance-type t3.micro --security-group-ids $SG --iam-instance-profile Name=ssm-profile-rilzi --user-data file://web.sh --tag-specifications 'ResourceType=instance,Tags=[{Key=Name,Value=app-rilzi}]'Give it a minute, curl its public IP, then start a session and read /var/log/cloud-init-output.log and the metadata service.