Fichas
AWS CCP
Fichas del conjunto (119)
- 15 Characteristics of Cloud ComputingBOMUR
Broad Network Access Anywhere
On-Demand Self-Service
Multi-tenancy and resource sharing
Usage measured service
Rapid elasticity & scalability - 26 Advantages of CLoud ComputingGETSSS
Go Global fast
Economies of scale
Trade CAPEX for OPEX
Speed and Agility
Stop guessing capacity
Stop spending on running data centres - 3Private Cloud== On-Prem [ but less managed ]
1 Org, High security, Complete Control - 4Public CloudCloud owned & operated by 3rd party
Adv of Cloud - 5HybridControl over sensitive info
On-prem + cloud - 6Types of Cloud ComputingIaaS
PaaS
SaaS - 7IaaSManage ADRMO
Apps, data, runtime, middleware, OS - 8PaaSManage AD
Apps & Data - 9SaaSDon't manage :D
- 10CloudShellBrowser-based CLI
- 11U2F Security KeySupports multiple root & IAM key
- 12Snow FamilySnowmobile > Snowball Edge > Showcone
- 13Data Migration MethodsDMS
Snow Family - 14Edge ComputingProcess data while being created on edge location [limited compute, remote, no wifi]
Snowball Edge / Snowcone - 15Storage GatewayBridge between on-prem & S3
- 16RDBs CharacteristicsUse SQL to lookup
Scale vertically, hard to scale horizontally - 17NoSQL DBHigh performance
Highly functional (types optimized for model)
More flexibility to evolve data model
Easy to horizontally scale - 18RDB exampleRDS
Aurora
Redshift - 19NoSQL exampleDynamoDB, DocumentsDB
- 20RDSMulti-AZ for disaster recovery
Cannot ssh onto instance
Storage w/ EBS
Supports Postgres, MySQL, MariaDB, Oracle, MS SQL Server, Aurora - 21RDS DeploymentsRead Replicas [scale read workload]
Multi-AZ [High availability + failover w/ cross-AZ replica]
Multi-Region - 22Multi-Region RDSHigh availability
Disaster Recovery
Low latency
More expensive - 23ElastiCacheManaged memory structure store
Caches in-memory DB for faster read/write performance - 24DynamoDBHigh Availability
NoSQL
High performance
Serverless - 25DynamoDB DeploymentsAccelerator DAX [in-mem cache for low latency]
Global Tables [low latency, accesible, active-active replication] - 26RedShiftUse: PostgreSQL, OLAP
Data load 1x/h
PB of data
Columnar data storage
Massively Parallel Query Execution
Pay as you go
BI tools + SQL interface - 27Elastic MapReduceHadoop clusters
Big Data, Apache Spark, HBase, Presto
Auto-scales + integration w/ Spot - 28AthenaServerless SQL query for analytics w/ S3 objects
- 29QuickSightBI service + interactive dashboards
- 30DocumentDBMongoDB [NoSQL DB]
Highly Available - 31NeptuneGraphDB
Social network, graphs - 32QLDB Quantum Ledger DatabaseBlockchain w/ no decentralisation
Immutable, Crypt verifiable - 33Amazon Managed BlockchainBlockchain WITH decentralisation
- 34Glueserverless ETL service
- 35DMSSecurely migrate DB to AWS
Source DB available during migration - 36ECSElastic Container Service
Unmanaged Docker launcher w/ EC2 instances - 37FargateServerless managed Docker launcher
- 38ECRElastic Container Registry
Private Docker Registry for Docker images - 39AWS LambdaVirtual functions
Time and memory-limited
On-demand run
Event-Driven
Pay per request + compute time - 40API GatewayServerless API
Exposes lambda funcs to public web - 41BatchBatch processing
via apps defined as docker images, run on ECS on a self-provisioned EC2
Optimize cost - 42LightsailAWS Lite
No cloud exp needed
Simplifies everything
No autoscaling
HIgh availability - 43CloudFormationInfrastructure as code
Provides cost granularity and estimation
Create same AWS infra across different regions - 44Cloud Development KitDefine cloud infra in chosen language to be compiled into CloudFormation template
- 45BeanstalkPaaS
APP DEPLOYMENT
Use for 3-tier web app [with ec2, rds & user] - 46Beanstalk architecture modelsSingle Instance - dev
LB + ASG - prod/pre-prod web app
ASG only - non-web apps in prod - 47CodeDeployDeploy app automatically for on-prem or EC2 servers
- 48CodeBuildCode compiler
Runs tests + proudce packages to be deployed - 49CodePipelineOrchestration of pipeline, CICD
Defines code pipeline [code -> build -> test -> provision -> deploy] - 50CodeArtifactStore + retrieve code dependencies
Artifact Management - 51ArtifactCode dependency
- 52CodeStarBasically combines all of the Code** services into 1 UI for a SWE project
- 53Cloud9IDE
- 54AWS Systems Manager SSMManage EC2 + on-prem sys at scale
AUto-patching + configuration - 55OpsWorksChef & Puppet
repetitive actions [config]
Alternative to SSM - 56SSM Session ManagerStart secure shell on EC2 + On-prem w/o SSH keys
Better security - 57Route53Route users to closest deployment + lowest latency
Global targets
Availability Protection - 58CloudFrontS3 bucket serves as a cache for AWS Edge location
Setup once for global access
[compare w/ S3 Cross-Region Replication]
Availability Protection - 59S3 Transfer AccelerationFaster up/down loads into S3 globally
- 60AWS Global AcceleratorFaster app availability + perf
No caching
HTTP w/ static IP + required deterministic fast regional failover - 61OutpostAWS servers but on-prem.
Basically take cloud to on-prem
Responsible for physical security
Fully managed - 62WaveLengthInfra deployment for 5G
Low-latency app w/o connection to AWS
Can connect securely w/ high BW to parent Region - 63AWS Local ZonesExtend VPC to more locations
resources closer to end users so lower latency - 64AWS Local Zone types1Reg1AZ
1RegMultiAZ
MultiReg Active-Passive
MultiReg Active-Active - 65Active-active replicationRead/write to all regions
- 66EventBridgeSChema REgistry
- 67CloudTrailGovernance, compliance + audit
History of events/APIs by console - 68X-RayVISUAL analysis of apps & dependencies
- 69CodeGuruReviewer - problems with code, security vulnerabilities, bugs
Profiler - runtime + performance - 70Health DashboardService History - of AWS services
of our own services - 71Elastic IPGive an EC2 instance a fixed public IP address
- 72VPCDeploy regional resources across AZ
- 73SubnetParititions network inside VPC
Can be public - 74NAT GatewayAWS-Managed service to allow private subnet to access the internet
- 75NAT InstanceSelf-managed service to allow private subnets to access internet
- 76Network ACLFirewall to subnet
Only IP address rules
[vs Security Groups - EC2 lvl] - 77VPC Flow LogsLog IP traffic in VPC
- 78VPC PeeringConnect 2 VPC privately w/ AWS' Network
- 79VPC EndpointsConnect to AWS services w/ private network
Gateway for S3 + DynamoDB
Interface for all others - 80VPC Endpoint TypesPrivateLink
Site to Site VPN
DirectConnect [DX]
AWS ClientVPN
Transit Gateway - 81PRivate LInkMOst secure - 1000s of VPCs
Need Network Load balancer [SERVICE + CUSTOMER VPC] - 82Site2Site VPNOn-Prem to AWS
Public internet, less secure
Customer Gateway on-prem + virtual private Gateway on AWS
[alt to DirectConnect] - 83DirectConnectOn-prem to AWS
Physical connection w/ private network
1 month to establish - 84AWS Client VPNconnect to EC2 over private IP as if on private VPC via public internet
- 85Transit GatewayTransitive peering between 1000s of VPC + on-prem. Works w/ Direct Connect
- 86AWS Shield StandardDDOS
Free - 87Shield Advanced24/7 premium DDoS
Response team against layer 4 TCP
Paid - 88WAF Web App FirewallControl traffic by rules
geo-match, IP type,
Layer 7 = HTTP
Deploy on App Load Balancer, API Gateway, CloudFront - 89DDoS Security OpitonsWAF
Shield
Shield Advanced
CloudFront
Route 53
Pen-testing - 90Pen Testsw/o approval for
EC2/NAT/ELBs
RDS
Aurora
API Gateway
Beanstalk
CloudFront
Lightsail
Lambda - 91Key Management Service KMSAWS manages encryption keys for us
- 92CloudHSMAWS provisions dedicated tamper-resistant encryption hardware
We manage keys - 93Types of CloudHSM CMKAWS-managed
Customer-managed
AWS-owned
CloudHSM Keys Custom Keystore - 94AWS managed CMKCreated managed & used on behalf by AWS services
- 95Customer managedWe do all that
Can BYOKey, define rotation policy
More control - 96AWS Owned CMKAWS owns & uses across accounts
Protects resources in acc
Cannot view keys - 97CloudHSM Keys [custom Keystore]Keys generated from CloudHSM device
- 98EncryptionKMS
CloudHSM
Cert Manager [ssl/tls certs, https] - 99AWS ArtifactOn-demand compliance docs, AWS agreements
for internal audit/compliance - 100GuardDutyML threat discovery based on logs
Good against Cryptocurrency - 101InspectorAutomated security assessments w/ risk score
EC2, Container Imgs, ECR, lambda
Report to Security Hub + EventBridge
Gives - 102ConfigRegional
Auditing & recording compliacne of resource
Records configs & changes over time - 103MacieData security for sensitive data
- 104Security HubManage security for several AWS accounts
Automate security checks - 105DetectiveFinds root cause of security issues from VPC flow logs
Visualization of details - 106AWS AbuseReport abusive/prohibited behaviours
- 107Root User PrivilegesChange account settings [close AWS acc, change support plan]
Enable MFA on S3 bucket
View tax invoices
Register as seller in Reserved Instance Marketplace - 108IAM Access AnalyzerSee which resources shared externally
- 109RekognitionImage classification & segmentation
- 110TranscribeSpeech to text
- 111PollyText to Speech
- 112LexChatbot
Powers Alexa - 113ConnectReceive calls
Virtual contact centre - 114ComprehendNLP
- 115ForecastTime Series Prediction
- 116KendraDocument search
- 117PersonalizeRec system
- 118TextractText extraction from scans
- 119Control TowerAutomate setup, policies and compliance with a dashboard
Información
- Descripción
- Fichas sobre AWS CCP, creado por Emily Widjaja el 17/03/2023.
- Creado por
- Emily Widjaja
- Visitas
- 0
- Valoración