AWS developer

AWS developer

1. Authentication / Access management

   • Cognito
     • simple user identity and data synchronization service that helps you securely manage and synchronize app data for your users across their mobile devices.
   • Security Groups
     • acts as a virtual firewall for your EC2 instances to control incoming and outgoing traffic. Both inbound and outbound rules control the flow of traffic to and traffic from your instance, respectively.
   • IAM
     • enables you to manage access to AWS services and resources securely. Using IAM, you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.
     • permissions
       • common permissions needed for accessing various AWS services

2. Data storage

   • Parameter Store
     • AWS service that stores strings. It can store secret data and non-secret data alike. Secrets stored in Parameter Store are secure strings, encrypted with a customer-specific AWS KMS key.
   • DynamoDB
     • fully managed proprietary NoSQL database service that supports key–value and document data structures and is offered by Amazon.com as part of the Amazon Web Services portfolio. DynamoDB exposes a similar data model to and derives its name from Dynamo, but has a different underlying implementation.
   • RDS
     • distributed relational database service by Amazon Web Services. It is a web service running "in the cloud" designed to simplify the setup, operation, and scaling of a relational database for use in applications.
   • Aurora
     • MySQL and PostgreSQL-compatible relational database built for the cloud, that combines the performance and availability of traditional enterprise databases with the simplicity and cost-effectiveness of open source databases. Amazon Aurora is up to five times faster than standard MySQL databases and three times faster than standard PostgreSQL databases.
   • s3
     • object storage through a web service interface. Amazon S3 uses the same scalable storage infrastructure that Amazon.com uses to run its global e-commerce network.
       • replication
   • elasticache
     • in-memory data store and cache service by Amazon Web Services. The service improves the performance of web applications by retrieving infor

3. Infrastructure

   • containers
     • Elastic Container Service
       • managed container orchestration service that helps you easily deploy, manage, and scale containerized applications.
     • Fargate
       • serverless compute engine for containers that works with both Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS)
     • Docker
   • servers
     • Elastic Beanstalk
       • service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, ...
     • EC2
       • web service that provides secure, resizable compute capacity in the cloud. It is designed to make web-scale​
     • Auto Scaling Groups
       • collection of Amazon EC2 instances that are treated as a logical grouping for the purposes of automatic scaling and management. An Auto Scaling group also enables you to use Amazon EC2 Auto Scaling features such as health check replacements and scaling policies.
     • CloudFront
       • content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment.
     • API gateway
       • create, publish, maintain, monitor, and secure APIs at any scale. APIs act as the "front door" for applications to access data, business logic, or functionality from your backend services. Using API Gateway, you can create RESTful APIs and WebSocket APIs that enable real-time two-way communication applications. API Gateway supports containerized and serverless workloads, as well as web applications.
     • lambda
       • event-driven, serverless computing platform provided by Amazon as a part of Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code.
   • managers
     • CDK
       • open source software development framework to define your cloud application resources using familiar programming languages.
     • CloudFormation
       • service that gives developers and businesses an easy way to create a collection of related AWS and third-party resources, and provision and manage them in an orderly and predictable fashion.
     • SAM
       • Serverless Application Model (SAM) is an open-source framework for building serverless applications. It provides shorthand syntax to express functions, APIs, databases, and event source mappings. With just a few lines per resource, you can define the application you want and model it using YAML.

4. Secrets management

   • ACM
     • Private Certificate Authority (CA) is a managed private CA service that helps you easily and securely manage the lifecycle of your private certificates.
   • KMS
     • makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications
   • Secrets Manager
     • helps you protect secrets needed to access your applications, services, and IT resources. The service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.

5. Data processing

   • SNS
     • notification service provided as part of Amazon Web Services since 2010. It provides a low-cost infrastructure for the mass delivery of messages, predominantly to mobile users.
   • SQS
     • distributed message queuing service introduced by Amazon.com in late 2004. It supports programmatic sending of messages via web service applications as a way to communicate over the Internet.
   • Knesis
     • real-time, fully managed, and scalable platform for streaming data on Amazon Web Services.It has multiple functionality, allowing one to perform various tasks – such as ingesting and processing real-time data, and developing custom streaming applications for specific requirements.

6. Cost estimation

7. Monitoring

   • X-Ray
     • service that helps developers analyze and debug distributed applications. Customers use X-Ray to monitor application traces, including the performance of calls to other downstream components or services, in either cloud-hosted applications or from their own machines during development.
   • CloudTrail
     • service that enables governance, compliance, operational auditing, and risk auditing of your AWS account.

8. networking

   • Route53
     • scalable and highly available Domain Name System service. Released on December 5, 2010, it is part of Amazon.com's cloud computing platform, Amazon Web Services. The name is a possible reference to U.S. Routes and 53 is a reference to the TCP/UDP port 53, where DNS server requests are addressed.
   • VPC
     • VPC Endpoints
       • enables private connections between your VPC and supported AWS services and VPC endpoint services powered by AWS PrivateLink.
     • VPC Flow Logs
       • feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow log data can be published to Amazon CloudWatch Logs or Amazon S3. After you've created a flow log, you can retrieve and view its data in the chosen destination.
   • ELB
   • NACLs
     • a network ACL (or NACL) controls traffic to or from a subnet according to a set of inbound and outbound rules. This means it represents network level security.

9. tools

   • CI / CD
     • CodeCommit
       • secure, highly scalable, managed source control service that hosts private Git repositories
     • CodeBuild
       • managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy. With CodeBuild, you don't need to provision, manage, and scale your own build servers.
     • CodeDeploy
       • managed deployment service that automates software deployments to a variety of compute services such as Amazon EC2, AWS Fargate, AWS Lambda, and your on-premises servers.
   • interaction
     • API
     • SDK
     • CLI

10. Security

11. help

12. other

    • directory service
      • AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft Active Directory (AD), enables your directory-aware workloads and AWS resources to use managed Active Directory (AD) in AWS. AWS Managed Microsoft AD is built on actual Microsoft AD and does not require you to synchronize or replicate data from your existing Active Directory to the cloud.

13. logging

    • cloudwatch
      • collect, access, and correlate this data on a single platform from across all your AWS resources, applications, and services