RoninBlog

AWS

4/1/2023

# AWS-CCP(Certified Cloud Practitioner)

image-20230331211230314

# 【01】Basis

# Types of Cloud Computing

image-20230401215411006

# Pricing of the Cloud

image-20230401215454600

# Regions

image-20230409144524130

image-20230401215535631

image-20230401220144386

region > availability zone > data center

image-20230409144833484

href (opens new window)

# SRM

image-20230401220637247

# 【02】IAM

# user & groups

image-20230401230046022

# policies inheritance

image-20230401233955916

# policies structure(json)

image-20230401234809205

# Roles

image-20230405124100286

# security tools

image-20230406111325369

# SRM for IAM

image-20230406111346351

# Summary

image-20230406111609383

# 【03】MFA

image-20230405112619612

# Access AWS

image-20230405114542201

# CLI(Command Line Interface)

aws --version
aws configure //输入Access key和Secret access key
1
2
aws iam list-users
1

# CloudShell

image-20230405123347615

Tips: if you new a file, next time you login, it'll still stay.

image-20230405123643228

# 【04】EC2(Elastic compute cloud)

image-20230407104532026 image-20230407104839995

That script is only run once at the instance first start

image-20230407105250578

href (opens new window)

# Security Groups

image-20230407105741385

  • Security groups are acting as a “firewall” on EC2 instances

  • They regulate:

    • Access to Ports
    • Authorised IP ranges – IPv4 and IPv6
    • Control of inbound network (from other to the instance)
    • Control of outbound network (from the instance to other)
image-20230407110214015 image-20230407110858843

# Classic Ports

image-20230407111040151

# Operating System SSH

SSH is one of the most important function. It allows you to control a remote machine, all using the command line.

# SSH - Windows 10

ssh
cd ...  //enter the folder which contains XX.pem
ssh -i  .\XX.pem EC2-user@3.250.26.200
exit
1
2
3
4
image-20230407113008645 image-20230407113529149

make sure you are the owner of the file

change permission: properties --> Security --> ...

# Browser SSH

# Still needs ssh

image-20230407114745257

# EC2 Instance Connect

need the port 22

image-20230407114324140 image-20230407114417772

# IAM roles assigned to EC2

Never enter your accesskey in EC2 instances.

What you need to do is to assign IAM roles to instances.

First to create an IAM role, and then assign to the instance.

image-20230407115643627

image-20230407115921607

# EC2 Instances Purchasing Options

image-20230407121921440

# on demand

image-20230407122136605

# reserved

image-20230407122343258

# saving plans

image-20230407122437657

# spot instances

image-20230407122607360

# dedicated hosts

image-20230407122632050

# dedicated instances

image-20230407122649360

# capacity reservations

image-20230407122800755 image-20230407122826510

# SRM for EC2

image-20230409124708407

# Summary

image-20230407121408029

# 【05】EC2 Instance Storage

# Elastic Block Store(EBS)

image-20230409114251148

They can only be mounted to one instance at a time (at the CCP level)

image-20230409114429436

# EBS Snapshots

image-20230409114531365 image-20230409114714348

# AMI

image-20230409114827123 image-20230409114911464

# EC2 Image Builder

image-20230409122959249

# EC2 Instance Store

image-20230409124856117

# Elastic File System(EFS)

image-20230409125002966 image-20230409125118323 image-20230409125025271

# SRM for EC2 storage

image-20230409124613198

# FSx

image-20230409143249459 image-20230409143319546
  • SMB协议（Server Message Block Protocol）是一种用于在网络上传输文件、打印文档、远程命令等信息的协议。
image-20230409143356829

# Summary

image-20230409143421090

# 【06】Elastic Load Balancing & Auto Scaling Groups

# Scalability & Availability & Elasticity & Agility

image-20230411092322775

Vertical Scalability

  • Vertical Scalability means increasing the size of the instance

  • Vertical scalability is very common for non distributed systems, such as a database

Horizontal Scalability

  • Horizontal Scalability means increasing the number of instances / systems for your application
  • Horizontal scaling implies distributed systems
  • This is very common for web applications / modern applications

High Availability

  • High Availability usually goes hand in hand with horizontal scaling
  • High availability means running your application / system in at least 2 Availability Zones
  • The goal of high availability is to survive a data center loss (disaster)

image-20230411093101735

image-20230411093326067

# Elastic Load Balancer(ELB)

image-20230411093836025

image-20230411094007680

# Auto Scaling Group(ASG)

image-20230411094124541

image-20230411094206859

image-20230411094257061

image-20230411095744492

# Summary

image-20230411100142654

# 【07】Amazon S3

image-20230411100733141

# Buckets

image-20230411101951516

# Objects

image-20230411102545821

# Security

image-20230411103253768

# Policies

image-20230411103342289

# Versioning

image-20230411104326517

# Replication

image-20230411104508402

# Classes

image-20230411104823535

image-20230509123218086

image-20230509123245106

image-20230509123305259

image-20230509123337169

# Durability & Availability

image-20230411105044901

# Encryption

image-20230411110107726

# SRM for S3

image-20230411110138031

# Summary

image-20230411124756795

# 【08】Snow Family

image-20230411123724494

# Data migration

# Snowcone

image-20230411123928735

# SnowBall Edge

TB

image-20230411123908499

# snowmobile

PB

image-20230411124007098

# Comparison

image-20230411124130437

# Usage Process

image-20230411124221719

# Edge Computing

image-20230411124335139

# AWS OpsHub

image-20230411124455193

# Hybrid Cloud

image-20230411124547637

image-20230411124631136

# Storage Gateway

image-20230411124648907

# Summary

image-20230411124814542

# 【09】Databases

image-20230412213749366

# Relational Databases & NoSQL Databases

image-20230412214023632

# DB & Shared Responsibility

image-20230412214507298

# Relational DB Service(RDS)

image-20230412215802912

image-20230412220041500

image-20230412220324141

image-20230412221047270

image-20230412221206008

# Aurora

image-20230412220608334

# ElastiCache

image-20230412221446874

image-20230412221515982

# DynamoDB

image-20230412222551666

image-20230412222647108

image-20230412222758707

image-20230412222846913

# Redshift

image-20230509142359750

# Elastic MapReduce(EMR)

image-20230412225928867

# Athena

image-20230412230149279

# QuickSight

image-20230412230425008

# DocumentDB

image-20230412230556938

# Neptune

image-20230412230803290

# Quantum Ledger DB(QLDB)

image-20230412235246195

# Managed Blockchain

image-20230412235423289

# Glue

image-20230412235526064

# DB Migration Service(DMS)

image-20230412235614395

# Summary

image-20230412235650973

# 【10】Other Compute Services

# Docker

image-20230414113512544

image-20230414113556256

image-20230414113729168

# Elastic Container Service

image-20230414113829170

# Fargate

image-20230414113952989

# Elastic Container Registry

image-20230414114051230

# Lambda

image-20230414114328920

# Benefits

image-20230414114534191

# Pricing

  • per call

  • per duration

# API Gateway

  • expose Lambda functions as HTTP API

image-20230414115142980

  • use AWS WAF

# Batch

image-20230414115901673

image-20230414120026350

# Batch VS Lambda

image-20230414120125314

# Lightsail

image-20230414120231491

# Summary

image-20230414120527074

image-20230414120516662

# 【11】Deploying and Managing Infrastructure at Scale

# CloudFormation

image-20230415115538839

# Benefits

  • Infrastructure as a code
    • No resources are manually created
  • Supports (almost) all AWS resources
  • Cost
    • Each resources within the stack is tagged with an identifier so you can easily see how much a stack costs you
    • You can estimate the costs of your resources using the CloudFormation template
    • Savings strategy
  • Productivity
    • Ability to destroy and re-create
    • Automated generation of Diagram for your templates
    • Declarative programming
  • Don’t re-invent the wheel

# CloudFormation Stack Designer

image-20230415120509953

# Elastic Beanstalk

  • It uses CloudFormation to create resources.

image-20230415121831366

image-20230415122129296

Health-monitoring

  • Health agent pushes metrics to CloudWatch
  • Checks for app health, publishes health events

image-20230415122259292

# Cloud Development Kit (CDK)

image-20230415121224261

# CodeCommit

image-20230415122723858

# CodeBulid

image-20230415122943693

# CodeDeploy

image-20230415122453062

# CodePipeline

image-20230415123312380

# CodeArtifact

image-20230415123616267

# CodeStar

image-20230415123729839

# Cloud9

image-20230415123845521

# Systems Manager（SSM）

image-20230415124013282

image-20230415124118991

# SSM Session Manager

image-20230415124221779

# OpsWorks

image-20230415124501860

image-20230415124732583

# Summary

image-20230415124833880

image-20230415124922983

# 【12】Global Infrastructure

image-20230417115551884

image-20230417120226820

href (opens new window)

# Route 53

image-20230417120945631

an example for A record

image-20230417121208470

# Routing Policies

image-20230417121324229

image-20230417121411631

# CloudFront

image-20230417121558660

image-20230417121920177

image-20230417122011466

# CloudFront VS S3 Cross Region Replication

image-20230417122427367

# S3 Transfer Acceleration

image-20230417122747032

href (opens new window)

# Global Accelerator

image-20230417122952983

comparison

image-20230417123107270AWS Global Accelerator Speed Comparison (opens new window)

# Global Accelerator VS CloudFront

image-20230417123442207

# Outposts

image-20230417123759722

"server racks" 服务器货架（如图）

image-20230417124129325

# WaveLength

image-20230417124316980

# Local Zones

image-20230417124427570

# Global Applications Architecture

image-20230417124513238

image-20230417124540498

# Summary

image-20230417124816320

image-20230417124928330

# 【13】Cloud Integration

image-20230420115550586

image-20230420115714044

# Simple Queue Service(SQS)

image-20230420115746217

image-20230420120638202

image-20230420120839360

# Kinesis

image-20230420121100936

image-20230420121143137

# Simple Notification Service(SNS)

image-20230420121230917

image-20230420121433170

# MQ

image-20230420121620312

broker 代理人、中间人

# Summary

image-20230420121741214

# 【14】Cloud Monitoring

# CloudWatch Metrics

image-20230421122816130

image-20230421122847585

# CloudWatch Alarms

image-20230421122922040

# CloudWatch Logs

image-20230421123225246

image-20230421123359217

# EventBridge

image-20230421123551710

image-20230421123636386

image-20230421123917966

# CloudTrail

image-20230421124120181

image-20230421124146105

# X-Ray

image-20230421124303585

image-20230421124339478

  • Trace user requests through your application

# CodeGuru

image-20230421124930466

# Health Dashboard

image-20230421125058235

image-20230421125257619

  • Global service

# Summary

image-20230421125434712

# 【15】Virtual Private Cloud(VPC)

image-20230423122235855

# IP Address

image-20230423122630779

# VPC & Subnets

image-20230423122803409

image-20230423122818468

  • A VPC can span all Availability Zones within an AWS Region.

# Internet / NAT Gateways

Network Address Translation (NAT)

image-20230423123200001

# Network Access Control List(NACL) & Security Groups

image-20230423123437610

image-20230423123637733

NACL:

They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.

# VPC Flow Logs

image-20230423123956320

# VPC Peering

image-20230423124058914

# VPC Endpoints

image-20230423124151211

image-20230423124241500

# Site to Site VPN & Direct Connect

image-20230423124518250

image-20230423124646406

# Client VPN

image-20230423124726947

# Transit Gateway

image-20230423124813036

# Summary

image-20230423124844857

image-20230423124858745

# 【16】Security & Compliance

# DDOS Protection

image-20230425122320480

DDOS(Distributed Denial-of-Service)

image-20230425122223639

# Shield

image-20230425122547511

# Web Application Firewall(WAF)

image-20230425122839190

  • AWS WAF helps protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection and cross-site scripting.

# Penetration Testing

image-20230425123132685

image-20230425123237865

# Data at rest / in transit

image-20230425123357093

# Key Management Service(KMS)

image-20230425123647615

# CloudHSM

image-20230425123923924

image-20230425124006419

# Customer Master Keys(CMK)

image-20230425124141591

# Certificate Manager

image-20230425124352417

# Secrets Manager

image-20230425124724922

# Artifact

image-20230425124758621

# GuardDuty

image-20230425125021186

image-20230425125103612

# Inspector

image-20230619164636001

image-20230619164716715

# AWS Config

image-20230425125447524

image-20230425125508024

# Macie

image-20230425125556209

# Security Hub

image-20230425125708307

image-20230425125722406

# Detective

image-20230425125820524

# Abuse

image-20230425125844635

# Root User Privileges

image-20230425125912267

# IAM Access Analyzer

image-20230425125941367

# Summary

image-20230425130151196

image-20230425130327362

# 【17】Machine Learning

# Rekognition

image-20230426114301749

href (opens new window)

  • organize, characterize, and search large numbers of images

# Transcribe

image-20230426114806012

# Polly

image-20230426114828816

# Translate

image-20230426114945184

# Lex & Connect

image-20230426120154174

# Comprehend

image-20230426120338054

# SageMaker

image-20230426121010462

# Forecast

image-20230426120745705

# Kendra

image-20230426120923476

# Personalize

image-20230426121121504

# Textract

image-20230426121143207

# Summary

image-20230426121202848

# 【18】Account Management, Billing & Support

# Organizations

image-20230428125143079

# Multi Account Strategies

image-20230428125414678

# Service Control Policies(SCP)

image-20230428125706213

OU: Organization Unit

image-20230428130328430

# Control Tower

image-20230428141204846

# Service Catalog

image-20230428141347779

image-20230428141447507

# Pricing Models

image-20230428141643729

# free services & tier

image-20230428141906065

href (opens new window)

# [+]Pricing

# EC2

image-20230429124534228

image-20230429125024565

# Lambda & ECS

image-20230429125347975

# S3

image-20230429125557614

# EBS

image-20230429125639847

# RDS

image-20230430102327402

image-20230430102344994

# CloudFront

image-20230430102416910

# Networking Costs

image-20230430102458301

# Savings Plan

image-20230430102744589

href (opens new window)

# Compute Optimizer

image-20230430102917638

# [+]Billing and Costing Tools

image-20230430103022529

# Pricing Calculator

image-20230430103209210

href (opens new window)

# Billing Dashboard

image-20230430104153915

# Free Tier Dashboard

image-20230430104222584

# Cost Allocation Tags

image-20230430104301209

# Tagging and Resource Groups

image-20230430104518466

# Cost and Usage Reports

image-20230430104641237

image-20230430104657710

# Cost Explorer

image-20230430104800187

image-20230430104811844

image-20230430104823527

image-20230430104835382

image-20230430104843181

# Billing Alarms in CloudWatch

image-20230430104940254

# Budgets

image-20230430105059052

# Cost Anomaly Detection

image-20230430105148810

# Service Quotas

image-20230430105410372

# Trusted Advisor

image-20230430105532375

# Trusted Advisor - Support Plans

image-20230430105737929

# Support Plans Pricing

image-20230430110000339

# Basic

image-20230430110014994

# Developer

image-20230430110031011

# Business

image-20230430110041196

# Enterprise On-Ramp

image-20230430110055281

# Enterprise

image-20230430110107969

# Summary

image-20230430110322704

image-20230430110649269

# 【19】Advanced Identity

# Security Token Service(STS)

image-20230501123802747

# Cognito

image-20230501124854287

# Directory Services

image-20230501125340231

# IAM Identity Center(Single Sign-On)

image-20230501125458690

image-20230501125751471

# Summary

image-20230501125801403

# 【20】Other AWS Services

# WorkSpaces

image-20230501130542539

  • multiple regions

# AppStream 2.0

image-20230501131107381

image-20230502111919964

# IoT Core

image-20230501131224042

# Elastic Transcoder

image-20230501131257159

# AppSync

image-20230502112152498

# DataSync

image-20230502113508618

image-20230502113702232

# Amplify

image-20230502112307759

# Device Farm

image-20230502112441485

# Backup

image-20230502112658312

image-20230502112838745

# Disaster Recovery Strategies

image-20230502112859969

image-20230502112934501

image-20230502113153140

# Elastic Disaster Recovery(DRS)

image-20230502113357836

# Application Discovery Service

image-20230502114130378

# Application Migration Service

image-20230502114532716

# Fault Injection Simulator(FIS)

image-20230502114955808

# Step Functions

image-20230502115118981

# Ground Station

image-20230502115220768

# Pinpoint

image-20230502115417470

# 【21】AWS Architecting & Ecosystem Section

# 6 Pillars

image-20230504123521369

# 1) Operational Excellence

image-20230504123826229

image-20230504124001713

# 2) Security

image-20230504123902481

image-20230504124016061

# 3) Reliability

image-20230504123915053

image-20230504124049129

# 4) Performance Efficiency

image-20230504124100556

image-20230504124113029

# 5) Cost Optimization

image-20230504124123606

image-20230504124134509

# 6) Sustainability

image-20230504124157077

image-20230504124212804

# Well-Architected Tool

image-20230504124439004

# Right Sizing

image-20230504124717297

# AWS Ecosystem – Free resources

AWS Blogs: https://aws.amazon.com/blogs/aws/

AWS Forums (community): https://forums.aws.amazon.com/index.jspa

AWS Whitepapers & Guides: https://aws.amazon.com/whitepapers

AWS Quick Starts: https://aws.amazon.com/quickstart/

  • Automated, gold-standard deployments in the AWS Cloud

  • Build your production environment quickly with templates

  • Example: WordPress on AWS https://fwd.aws/P3yyv?did=qs_card&trk=qs_card

  • Leverages CloudFormation

AWS Solutions: https://aws.amazon.com/solutions/

  • Vetted Technology Solutions for the AWS Cloud

  • Example - AWS Landing Zone: secure, multi-account AWS environment

    • https://aws.amazon.com/solutions/implementations/aws-landing-zone/

    • “Replaced” by AWS Control Tower

# AWS Support

image-20230504125156838

# Marketplace

image-20230504125242519

# Training

image-20230504125356003

# Professional Services & Partner Network

image-20230504125554103

# Knowledge Center

image-20230504125606565

href (opens new window)

# IQ

image-20230504125706735

# re:Post

image-20230504141500897

# AWS Managed Service(AMS)

image-20230504141617254

image-20230504141728192

# Practice Exam

# Benefits of migrating to / using AWS

image-20230524121906862

Top 10 Benefits of Migrating to AWS Cloud | easydeploy.io (opens new window)

image-20230607114139669

image-20230524122949478

# advantages of using AWS

image-20230525155307524

image-20230525155318841

# economies of scale

image-20230529125749831

买的越多，平均价格越低

# benefit of using serverless computing

image-20230531230646187

Management of infrastructure is offloaded to AWS.

基础设施的管理被转移到AWS。

# EC2

# advantages of using EC2 to host apps

image-20230524184238010

# disaster recovery for EC2

image-20230524122645114

image-20230524122628221

# CloudWatch initiates EC2 auto scaling

image-20230530121159307

  • Amazon EC2 Auto Scaling enables you to automatically launch or terminate Amazon EC2 instances based on user-defined policies, health status checks, and schedules. You can use a CloudWatch alarm with Amazon EC2 Auto Scaling to scale your EC2 instances based on demand. For more information, see Dynamic Scaling (opens new window) in the Amazon EC2 Auto Scaling User Guide.

# applying latest security updates and patches

image-20230619233245801

# AWS Management Console

AWS Management Console is a web-based graphical user interface (GUI) that allows users to access and manage AWS services using a web browser.

# Lacks expertise

image-20230524184034803

# Service Quotas

Service Quotas enables you to manage your AWS service quotas from one central location. In addition to viewing service quota values, you can easily request and track quota increases. For supported services, you can proactively manage your quotas by configuring Amazon CloudWatch alarms that monitor usage and alert you to approaching quotas.

# AWS Artifact

AWS Artifact is a web service that enables you to download AWS security and compliance documents such as AWS ISO certifications, Payment Card Industry (PCI), and Service Organization Control (SOC) reports.

# Responsibility

# responsibility of customer

image-20230525173753574

# responsibility of AWS

image-20230525143637350

firmware - 固件

# shared responsibility

image-20230525152043824

image-20230525152022209

# AWS patch the host OS

image-20230525172306389

image-20230525172330280

# when hosting DB on EC2

image-20230529120057501

# company's direct responsibility

image-20230530120148351

Cost of power for the AWS servers

AWS服务器的电力成本

# backup of RDS instances

image-20230531114207096

# security measures

image-20230601105803872

# customer always responsible for

image-20230606120128835

# company's responsibility

image-20230619225331731

C - AWS

# CloudTrail

# determine modified

image-20230524184424298

# audit API calls

image-20230531124240246

  • Audit Manager is integrated with CloudTrail, a service that provides a record of actions taken by a user, role, or an AWS service in Audit Manager. CloudTrail captures all API calls for Audit Manager as events. The calls captured include calls from the Audit Manager console and code calls to the Audit Manager API operations.

# environment changed - Config

image-20230601113555985

# AWS Support Plans

AWS Support Plan Comparison | Developer, Business, Enterprise, Enterprise On-Ramp | AWS Support (amazon.com) (opens new window)

img

  • Developer: Business hours email access to Cloud Support engineers.

image-20230529125051977

image-20230530104751130

image-20230531122149782

image-20230601121839562

# Concierge Support team

image-20230529101234001

# TAM

image-20230525145025275

# support API

image-20230602144652276

# Global accelerator

image-20230525145546157

# static IP address

image-20230531122732857

  • AWS Global Accelerator provides you with a set of static IP addresses that can map to multiple application endpoints across AWS Regions, to improve redundancy.

# AWS infrastructure event management

image-20230525150155461

AWS Infrastructure Event Management (IEM) offers architecture and scaling guidance and operational support during the preparation and execution of planned events, such as shopping holidays, product launches, and migrations.

# AWS Fargate

image-20230525153422495

# IAM and Identity

# IAM Access Analyzer

image-20230525154140832

image-20230525154128665

# information in IAM credential report

  • password_last_used
  • mfa_active
  • ...

image-20230530114658815

# IAM user change pwd

image-20230531115808559

image-20230531115830597

# lose secret access key

image-20230601115428852

image-20230601115406825

# Storage Gateway

image-20230525160751012

extend the tape library's capacity

# global infrastructure

image-20230525165057877

# Organizations

image-20230525165625395

centrally manage billing and allow controlled access

image-20230606124037174

# Trusted Advisor

image-20230525171345713

  • proactively monitor and plan for service quotas

This solution helps you proactively track your resource usage and sends email or Slack notifications when you approach quotas. Tracking your usage against AWS service quotas helps you plan for requesting a quota increase before you exceed it. This solution leverages AWS Trusted Advisor and Service Quotas to monitor AWS resource usage and raise alerts. You can use this solution in any AWS Region, including AWS GovCloud (US) Regions.

image-20230606122602290

# VPC endpoints - private network

image-20230525171942271

image-20230525172033528

# Well-Architected

image-20230525173359499

# X-Ray

image-20230529103213796

trace user requests

# No charge

image-20230529104343537

# Inspector

image-20230530094556225

# DataSync

image-20230530103259294

# CodeCommit

# private version control system

image-20230530121553890

# S3

# host static websites

image-20230530121748040

# core functionality

image-20230531233218151

# WAF

# injection attacks and cross-site scripting

image-20230530122616695

image-20230530122638393

# which services can use WAF

image-20230531122412481

# DB

# RDS

# patch / backup

image-20230530123643686

# DynamoDB

# global tables

image-20230530095705556

Global tables build on the global Amazon DynamoDB footprint to provide you with a fully managed, multi-Region, and multi-active database that delivers fast, local, read and write performance for massively scaled, global applications. Global tables replicate your DynamoDB tables automatically across your choice of AWS Regions.

# single-digit milliseconds

image-20230606125313653

  • Amazon DynamoDB is a key-value and document database that delivers single-digit millisecond performance at any scale.

# Doesn't change the queries

image-20230606123134756

  • Aurora - user has to change queries referring Aurora Database Endpoint for each query.

# Serverless services on AWS

image-20230531113530045

# compute

image-20230531113935781

# Application integration

image-20230531113836195

# Data store

image-20230531113857557

image-20230531113906096

# Local Zones / Region

# local zones

image-20230531121304806

granular 颗粒的

# region

image-20230531225456412

# AWS services

# compute services

Compute Services - Overview of Amazon Web Services (opens new window)

image-20230531123644036

# VPN

image-20230531125016053

# Price

# pricing calculator

image-20230531230933294

# FSx

image-20230601121242120

  • Amazon FSx for Windows File Server provides fully managed, highly reliable, and scalable file storage that is accessible over the industry-standard Server Message Block (SMB) protocol.

# CloudWatch

image-20230602154141929

# Automatically / By default

  • backup

    • RDS

    • Aurora

      • Amazon Aurora is fully managed by Amazon Relational Database Service (Amazon RDS), which automates time-consuming administration tasks such as hardware provisioning, database setup, patching, and backups.

  • data encryption

    • S3 Glacier
    • Storage Gateway

  • high availability (across multiple AZ)

    • EFS
    • S3

# Require the use of VPC

image-20230605122041329

# AWS Connect

# provide contact center

image-20230606104722606

  • Amazon Connect is an omnichannel cloud contact center. You can set up a contact center in a few steps, add agents who are located anywhere, and start engaging with your customers.

# contact flows

image-20230606123800491

# root user

# access key

image-20230606113747071

# AWS Network Firewall

web filtering

image-20230619231511638

image-20230619231643045

# Udemy Practice Exam

image-20230603120647827

  • relational database - schema
  • NoSQL database - schemaless

image-20230603121122758

  • AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you. With Personal Health Dashboard, alerts are triggered by changes in the health of your AWS resources, giving you event visibility, and guidance to help quickly diagnose and resolve issues.
  • CloudWatch cannot provide the status of your AWS resources.

Exam Alert:

While the Service Health Dashboard displays the general status of AWS services, Personal Health Dashboard gives you a personalized view of the performance and availability of the AWS services underlying your AWS resources.

image-20230603115947748

  • APN Consulting Partner - APN Consulting Partners are professional services firms that help customers of all types and sizes design, architect, build, migrate, and manage their workloads and applications on AWS, accelerating their migration to AWS cloud.
  • APN Technology Partner - APN Technology Partners provide hardware, connectivity services, or software solutions that are either hosted on or integrated with, the AWS Cloud. APN Technology Partners cannot help in migrating to AWS and managing applications on AWS Cloud.
  • Concierge Support Team - The Concierge Support Team are AWS billing and account experts that specialize in working with enterprise accounts. They will quickly and efficiently assist you with your billing and account inquiries. The Concierge Support Team is only available for the Enterprise Support plan. Concierge Support Team cannot help in migrating to AWS and managing applications on AWS Cloud.

image-20230603120444066

image-20230603234949030

image-20230603235104326

  • AWS Systems Manager Session Manager

    AWS SSM Session Manager is a fully-managed service that provides you with an interactive browser-based shell and CLI experience. It helps provide secure and auditable instance management without the need to open inbound ports, maintain bastion hosts, and manage SSH keys. Session Manager helps to enable compliance with corporate policies that require controlled access to instances, increase security and auditability of access to the instances while providing simplicity and cross-platform instance access to end-users.

  • Amazon EC2 Instance Connect - Instance Connect will need port 22 to be open for traffic.

image-20230603235842343

  • Amazon S3 Glacier - Amazon S3 Glacier (S3 Glacier), is a storage service optimized for infrequently used data, or "cold data. Data at rest stored in S3 Glacier is automatically server-side encrypted using 256-bit Advanced Encryption Standard (AES-256) with keys maintained by AWS.

  • AWS Storage Gateway - AWS Storage Gateway is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage. All data transferred between the gateway and AWS storage is encrypted using SSL (for all three types of gateways - File, Volume and Tape Gateways).

Incorrect options:

  • Amazon EBS volumes - Amazon EBS volumes are not encrypted, by default. You can configure your AWS account to enforce the encryption of the new EBS volumes and snapshot copies that you create.

  • Amazon Redshift - Encryption is an optional setting in Amazon Redshift. When you enable encryption for a cluster, the data-blocks and system metadata are encrypted for the cluster and its snapshots.

  • Amazon EFS drives - Encryption is not a default setting, but an optional configuration for EFS drives. Amazon EFS supports two forms of encryption for file systems, encryption of data in transit and encryption at rest.

image-20230604001224346

AWS X-Ray - You can use AWS X-Ray to analyze and debug serverless and distributed applications such as those built using a microservices architecture. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.

AWS Trusted Advisor - AWS Trusted Advisor is an online tool that provides you real-time guidance to help you provision your resources following AWS best practices on cost optimization, security, fault tolerance, service limits and performance improvement. Whether establishing new workflows, developing applications, or as part of ongoing improvement, recommendations provided by Trusted Advisor regularly help keep your solutions provisioned optimally. Trusted Advisor cannot be used to debug performance issues for this serverless application built using a microservices architecture.

image-20230604110933067

image-20230604111939235

image-20230604111854893

image-20230604112502400

  • U2F security key - Universal 2nd Factor (U2F) Security Key is a device that you can plug into a USB port on your computer.

image-20230604112629945

  • Virtual MFA device - software app generates a six-digit numeric code.

  • Hardware MFA device - hardware device generates a six-digit numeric code

  • SMS text message-based MFA - When the user signs in, AWS sends a six-digit numeric code by SMS text message to the user's mobile device.

image-20230604115125164

Exam Alert:

You may see use-cases asking you to select one of CloudWatch vs CloudTrail vs Config.

Just remember this thumb rule ------

Think resource performance monitoring, events, and alerts; think CloudWatch.

Think account-specific activity and audit; think CloudTrail.

Think resource-specific change history, audit, and compliance; think Config.

image-20230604165319896

image-20230604165501310

image-20230604165858103

It means versioning, not availability.

image-20230604170759330

off-the-shelf 现成的

image-20230604171044079

  • AWS Systems Manager - AWS Systems Manager allows you to centralize operational data from multiple AWS services and automate tasks across your AWS resources. Systems Manager provides a central place to view and manage your AWS resources, so you can have complete visibility and control over your operations.

  • AWS Personal Health Dashboard - AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that might affect you. It is not used to get operational insights of AWS resources.

image-20230604174234046

  • AWS Marketplace offers two ways for sellers to deliver software to customers: Amazon Machine Image (AMI) and Software as a Service (SaaS).

    • Amazon Machine Image (AMI): Offering an AMI is the preferred option for listing products in AWS Marketplace. Partners have the option for free or paid products. Partners can offer paid products charged by the hour or month. Bring Your Own License (BYOL) is also available and enables customers with existing software licenses to easily migrate to AWS.

    • Software as a Service (SaaS): If you offer a SaaS solution running on AWS (and are unable to build your product into an AMI) the SaaS listing offers our partners a way to market their software to customers.

  • Buy Amazon EC2 Standard Reserved Instances - Amazon EC2 Standard Reserved Instances can be bought from the Amazon EC2 console at https://console.aws.amazon.com/ec2/

  • Raise request for purchasing AWS Direct Connect connection - AWS Direct Connect connection can be raised from the AWS management console at https://console.aws.amazon.com/directconnect/v2/home

image-20230604175105322

  • 60 seconds - There is a one-minute minimum charge for Linux based EC2 instances, so this is the correct option.

image-20230604175238156

Elastic Load Balancing offers three types of load balancers that all feature the high availability, automatic scaling, and robust security necessary to make your applications fault-tolerant.

image-20230604175643189

  • AWS Acceptable Use Policy - The Acceptable Use Policy describes prohibited uses of the web services offered by Amazon Web Services, Inc. and its affiliates (the “Services”) and the website located at http://aws.amazon.com (the “AWS Site”). This policy is present at https://aws.amazon.com/aup/ and is updated on a need basis by AWS.

  • AWS Fair Use Policy - This is a made-up option and has been added as a distractor.

  • AWS Applicable Use Policy - This is a made-up option and has been added as a distractor.

image-20230604180053370

  • AWS Fargate - AWS Fargate is a serverless compute engine for containers.

image-20230604180407929

AWS Compute Optimizer delivers recommendations for selected types of EC2 instances, EC2 Auto Scaling groups, EBS volumes, and Lambda functions.

image-20230604180538631

  • AWS Quick Starts references

    Quick Starts are built by AWS solutions architects and partners to help you deploy popular technologies on AWS, based on AWS best practices for security and high availability. These accelerators reduce hundreds of manual procedures into just a few steps, so you can build your production environment quickly and start using it immediately.

  • AWS CodeDeploy

    AWS CodeDeploy is a service that automates code deployments to any instance, including EC2 instances and instances running on-premises. It is not suited to rapidly deploy popular technologies on AWS ready to used immediately.

image-20230604180939067

  • AWS Service Health Dashboard

    AWS Service Health Dashboard offers the possibility to subscribe to an RSS feed to be notified of interruptions to each service.

  • AWS Personal Health Dashboard

    AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you. It does not provide updates about the general status for all AWS services.

image-20230604181225526

AWS Elastic Beanstalk is a Platform as a Service (PaaS) which allows you to deploy and scale web applications and services.

AWS CloudFormation allows you to model and provision resources needed for an application.

# AWS official questions

image-20230620124037484

Which Amazon EC2 pricing model adjusts based on supply and demand of EC2 instances?

  • spot instances

Which Amazon EC2 pricing model adjusts based on supply and demand of EC2 instances?

  • Volume pricing qualification
红色高跟鞋
峰源萨克斯