Learning AWS by Shah, Amit -- Read -- Imperial Library of Trantor

Index

Learning AWS

Table of Contents Learning AWS Credits About the Authors About the Reviewers www.PacktPub.com

Support files, eBooks, discount offers, and more

Why subscribe? Free access for Packt account holders Instant updates on new Packt books

Preface

What this book covers What you need for this book Who this book is for Conventions Reader feedback Customer support

Errata Piracy Questions

1. Cloud 101 – Understanding the Basics

What is cloud computing? Public, private, and hybrid clouds Cloud service models – IaaS, PaaS, and SaaS Setting up your AWS account The AWS management console Summary

2. Designing Cloud Applications – An Architect's Perspective

Multi-tier architecture Designing for multi-tenancy

Data security Data extensibility Application multi-tenancy

Designing for scale Automating infrastructure Designing for failure Designing for parallel processing Designing for performance Designing for eventual consistency Estimating your cloud computing costs A typical e-commerce web application Setting up our development environment

Running the application Building a WAR file for deployment

Summary

3. AWS Components, Cost Model, and Application Development Environments

AWS components

Amazon Elastic Compute Cloud (EC2) Amazon S3 Amazon EBS Amazon CloudFront Amazon Glacier Amazon RDS Amazon DynamoDB Amazon ElastiCache Amazon Simple Queue Service Amazon Simple Notification Service Amazon Virtual Private Cloud Amazon Route 53 AWS Identity and Access Management Amazon CloudWatch Other AWS services

Optimizing cloud infrastructure costs

Choosing the right EC2 instance Turn-off unused instances Use auto scaling Use reserved instances Use spot instances Use Amazon S3 storage classes Reducing database costs Using AWS services Cost monitoring and analysis

Application development environments

Development environments QA/Test environment Staging environment Production environment

Setting up the AWS infrastructure

The AWS cloud deployment architecture AWS cloud construction

Creating security groups Creating EC2 instance key pairs Creating Roles Creating an EC2 Instance Elastic IPs (EIP) Amazon Relational Database Service Software stack installation

Summary

4. Designing for and Implementing Scalability

Defining scalability objectives Designing scalable application architectures

Using AWS services for out-of-the-box scalability Using a scale-out approach Implement loosely coupled components Implement asynchronous processing

Leveraging AWS infrastructure services for scalability

Using AWS CloudFront to distribute content Using AWS ELB to scale without service interruptions Implementing auto scaling using AWS CloudWatch Scaling data services Scaling proactively

Setting up auto scaling

AWS auto scaling construction

Creating an AMI Creating Elastic Load Balancer Creating a launch configuration Creating an auto scaling group Testing auto scaling group

Scripting auto scaling

Creating an AMI Creating an Elastic Load Balancer Creating launch configuration Creating an auto scaling group

Summary

5. Designing for and Implementing High Availability

Defining availability objectives The nature of failures

Setting up VPC for high availability Using ELB and Route 53 for high availability

Instance availability Zonal availability or availability zone redundancy Regional availability or regional redundancy

Setting up high availability for application and data layers Implementing high availability in the application

Using AWS for disaster recovery

Using a backup and restore DR strategy Using a Pilot Light architecture for DR Using a warm standby architecture for DR Using a multi-site architecture for DR Testing a disaster recovery strategy

Setting up high availability

The AWS high availability architecture HA support for auto scaling groups HA support for ELB HA support for RDS

Summary

6. Designing for and Implementing Security

Defining security objectives Understanding security responsibilities Best practices in implementing AWS security

Implementing identity lifecycle management Tracking the AWS API activity using CloudTrail Logging for security analysis Using third-party security solutions Reviewing and auditing security configuration

Setting up security

AWS IAM – Securing your Infrastructure

IAM roles AWS Key Management Service

Creating the KMS key

Using the KMS key

Application security

Transport security

Generating self-signed certificates Configure ELB for SSL

Secure data-at-rest

Secure data on S3

Using the S3 console for server-side encryption Using Java SDK for server-side encryption

Secure data on RDS

Summary

7. Deploying to Production and Going Live

Managing infrastructure, deployments, and support at scale

Creating and managing AWS environments using CloudFormation Creating CloudFormation templates Building a DevOps pipeline with CloudFormation Updating stacks Extending CloudFormation

Using CloudWatch for monitoring Using AWS solutions for backup and archiving Planning for production go-live activities Setting up for production

The AWS production deployment architecture

VPC subnets

Private subnet Bastion subnet

Bastion host Security groups

Infrastructure as code

Setting up CloudFormation Executing the CloudFormation script

Via the command line Via the Amazon web console

Centralized logging

Setting up CloudWatch

Summary

Index

← Prev
Back
Next →

← Prev
Back
Next →