SlideShare ist ein Scribd-Unternehmen logo
1 von 130
Copyright © 2013, 2014 Amazon Web Services, Inc. 
and its affiliates. All rights reserved. 
This work may not be reproduced or redistributed, in whole or in 
part, without prior written permission from Amazon Web Services, 
Inc. 
Commercial copying, lending, or selling is prohibited. 
Corrections or feedback on this course? 
Email aws-course-feedback@amazon.com 
Other questions? Email us at aws-training-info@amazon.com.
Location
AWS Essentials 
Mark Fei 
Senior Technical Trainer 
Copyright © 2013, 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. 
This work may not be reproduced or redistributed, in whole or in part, without prior written permission from Amazon 
Web Services, Inc. 
Commercial copying, lending, or selling is prohibited. 
Questions? Email us at aws-training-info@amazon.com.
Introduction and Logistics | Welcome 
Class Introductions 
Student Guide and qwikLab 
Logistics, Bathrooms, Breaks 
Participation 
Parking Lot
Course Overview | Training Agenda 
1 
AWS 
Introduction 
2 
AWS Storage 
3 
AWS Compute 
& Networking 
5 
Deployment & 
Management 
4 
Managed 
Services & 
Database
Introduction to AWS
Introduction to AWS | Overview 
Module Overview 
This module describes the history and fundamental elements of Amazon 
Web Services (AWS), as well as how to navigate the AWS Management 
Console. It discusses the AWS Global Infrastructure, security measures 
provided by AWS and basic principles of deploying on AWS.
Introduction to AWS | Learning Objectives 
By the end of this module you will be able to: 
1 Navigate the AWS Management Console. 
2 Recognize AWS Global Infrastructure. 
Describe the security measures AWS provides. 3
Introduction to AWS | Cloud Computing 
Compute 
Security 
Storage 
Scaling 
CDN Backup 
Database 
Monitoring 
Workflow 
Networking 
Messaging 
DNS 
Load Balancing
AWS History
Introduction to AWS | Amazon History 
Amazon.com 
Launched 
Online Bookstore Amazon 
Publishing 
Kindle 
Launches 
Amazon 
Games 
Jeff Bezos 
Incorporated 
the Company 
Amazon Web 
Services 
Launched 
1994 1995 2002 2005 2007 2012 
2013 
Amazon Art
Introduction to AWS | History of Amazon Web Services
Introduction to AWS | AWS Cloud Computing 
On Demand} Uniform 
Pay As You Go 
Available 
Compute 
Security 
Storage 
Scaling 
CDN Backup 
Database 
Monitoring 
Workflow 
Networking 
Messaging 
DNS 
Load Balancing
Introduction to AWS | AWS Infrastructure and Services
Introduction to AWS | Amazon Web Services
Introduction to AWS | Amazon Web Services 
AWS Management Console 
Demonstration
Global Infrastructure
Introduction to AWS | Regions and Edge Locations
Introduction to AWS | AWS Regions & Availability Zones
Introduction to AWS | Achieving High Availability using 
Multi-AZ
Security
Introduction to AWS | Shared Responsibility
Introduction to AWS | Physical Security 
24x7 trained security guards 
Locations in nondescript, undisclosed facilities 
Two-factor authentication for ingress 
Authorization for data center access
Introduction to AWS | Hardware, Software and Network 
Automated change control process 
Bastion servers that record all 
access attempts 
Firewall and other boundary devices 
AWS monitoring tools
Introduction to AWS | Security & Compliance Resources 
Secure API access points for 
encrypted transmission over HTTPS 
using SSL 
Cryptographic keys and certificates 
are required for any user or software 
program to access an AWS API 
Security Groups to let you control 
external access to your instances
Introduction to AWS | SSL Endpoints 
IAM 
User Accounts 
Create individual 
AWS Identity and 
Access Management 
(IAM) user accounts 
so that each user 
managing AWS has 
their own security 
credentials 
VPC 
Subnet Control 
In your Virtual 
Private Cloud, create 
low level networking 
constraints for 
resource access, 
such as public and 
private subnets, 
internet gateways, 
and NATs 
SSL Endpoints 
Secure 
Transmission 
Establish secure 
communication 
sessions (HTTPS) 
using SSL 
Security Groups 
Instance Firewalls 
Configure firewall 
rule for instances 
and load balancers 
using Security 
Groups
Introduction to AWS | Security Groups 
SSL Endpoints 
Secure 
Transmission 
Establish secure 
communication 
sessions (HTTPS) 
using SSL 
Security Groups 
Instance Firewalls 
Configure firewall 
rule for instances 
and load balancers 
using Security 
Groups 
IAM 
User Accounts 
Create individual 
AWS Identity and 
Access Management 
(IAM) user accounts 
so that each user 
managing AWS has 
their own security 
credentials 
VPC 
Subnet Control 
In your Virtual 
Private Cloud, create 
low level networking 
constraints for 
resource access, 
such as public and 
private subnets, 
internet gateways, 
and NATs
Introduction to AWS | AWS Multi-tier Security Groups
Introduction to AWS | Identity and Access Management 
(IAM) 
SSL Endpoints 
Secure 
Transmission 
Establish secure 
communication 
sessions (HTTPS) 
using SSL 
Security Groups IAM 
Instance Firewalls 
Configure firewall 
rule for instances 
and load balancers 
using Security 
Groups 
User Accounts 
Create individual 
AWS Identity and 
Access Management 
(IAM) user accounts 
so that each user 
managing AWS has 
their own security 
credentials 
VPC 
Subnet Control 
In your Virtual 
Private Cloud, create 
low level networking 
constraints for 
resource access, 
such as public and 
private subnets, 
internet gateways, 
and NATs
Introduction to AWS | Account Control 
AWS Identify and Access Management (IAM) 
AWS Identity and Access Management (IAM) enables you to securely control 
access to AWS services and resources for your users. Using IAM, you can 
create and manage AWS users and groups and use permissions to allow and 
deny their permissions to AWS resources. If you are new to IAM, read the 
IAM Top 10 Best Practices. 
Note: Master IAM accounts should not be used for production systems!!!
Introduction to AWS | Virtual Private Cloud (VPC) 
VPC 
SSL Endpoints 
Secure 
transmission 
Establish secure 
communication 
sessions (HTTPS) 
using SSL 
Security Groups 
Instance firewalls 
Configure firewall 
rule for instances 
and load balancers 
using Security 
Groups 
IAM 
User Accounts 
Create individual 
AWS Identity and 
Access Management 
(IAM) user accounts 
so that each user 
managing AWS has 
their own security 
credentials 
Subnet Control 
In your Virtual 
Private Cloud, create 
low level networking 
constraints for 
resource access, 
such as public and 
private subnets, 
internet gateways, 
and NATs
Introduction to AWS | Certifications and Accreditations 
AWS publishes SOC 1 Type II, SOC 2 Type II and SOC 3 reports 
AWS is PCI DSS Level 1 compliant and ISO 27001 certified 
AWS has achieved FedRAMP compliance, received authorization from 
the U.S. Government 
FISMA Moderate level 
Authorities to Operate (ATOs) under the Defense Information 
Assurance Certification and Accreditation Program (DIACAP)
Introduction to AWS | Additional Resources 
Additional Resources 
Here are some additional resources: 
More details and up to date information on Global Infrastructure can be found 
online: http://aws.amazon.com/about-aws/globalinfrastructure/ 
AWS Management Console: https://console.aws.amazon.com/console/home. 
AWS Security Assurance and Compliance Programs: 
https://aws.amazon.com/compliance/ 
Security Center: http://aws.amazon.com/security 
IAM Best Practices: 
http://docs.aws.amazon.com/IAM/latest/UserGuide/IAMBestPractices.html
Introduction to AWS | Module Completion and Summary 
Summary 
You have reached the end of this training module. In summary, you have learned: 
• How to navigate the AWS Management Console 
• What is the AWS Global Infrastructure 
• Describe the security measures AWS provides
AWS Storage
AWS Storage | Overview 
Module Overview 
This module describes the fundamental elements of AWS Storage with a 
focus on Amazon Simple Storage Service (S3) and Amazon Elastic Block 
Store (EBS).
AWS Storage | Learning Objectives 
By the end of this training you will be able to: 
1 Identify key AWS storage options. 
2 Describe Amazon Elastic Block Store (EBS). 
Create an Amazon S3 Bucket and manage associated objects. 3
AWS Storage | AWS Storage Products and Services 
Amazon 
Simple 
Storage 
Service 
Amazon 
Glacier 
AWS Storage 
Gateway 
Amazon 
Import/Export 
Amazon 
Elastic Block 
Store
AWS Storage | Amazon Simple Storage Service (S3) 
Storage for the Internet. Natively online, 
HTTP access 
Store and retrieve any amount of data, 
any time, from anywhere on the web 
Highly scalable, reliable, fast 
and durable 
Amazon 
Simple 
Storage 
Service
AWS Storage | Amazon S3 Storage Concepts 
Amazon S3 Concepts 
Amazon 
S3 
Bucket 
with 
Objects 
Bucket 
Objec 
t 
Amazon S3 stores data as 
objects within buckets 
An object is comprised of a file 
and optionally any metadata that 
describes that file 
You can have up to 100 buckets 
in each account 
You can control access to the 
bucket and its objects
AWS Storage | Amazon S3 Concepts - Buckets 
Amazon S3 Buckets 
Objects are stored in Buckets. 
Objects can be accessed via a URL: 
http://johnsmith.s3.amazonaws.com/photos/puppy.jpg 
• Organize Amazon S3 namespace at highest level 
• Identify account – storage and data transfer charges 
• Access Control 
• Unit of aggregation for usage reporting 
Amazon S3 Bucket 
Bucket Object
AWS Storage | Amazon S3 Concepts - Objects 
Amazon S3 Objects 
Objects are the fundamental entities stored in Amazon S3. When using the 
console, you can think of them as being files. Objects consist of data 
and metadata. The data portion is opaque to Amazon S3. The metadata is 
a set of name-value pairs that describe the object. 
• Default metadata such as the date last modified 
• Standard HTTP metadata such as Content-Type 
• Custom metadata at the time the object is stored 
• An object is uniquely identified within a bucket by a key (name) 
Object Bucket w/Objects
AWS Storage | Amazon S3 Object Lifecycle 
Lifecycle Management 
Lifecycle management defines how Amazon S3 manages objects during their 
lifetime. Some objects that you store in an Amazon S3 bucket might have a well-defined 
lifecycle: 
• Log files 
• Archive documents 
• Digital media archives 
• Financial and healthcare records 
• Raw genomics sequence data 
• Long-term database backups 
• Data that must be retained for regulatory compliance
AWS Storage | Amazon S3 Pricing 
Pricing 
• Pay only for what you use 
• No minimum fee 
• Prices based on location of your Amazon S3 bucket 
• Estimate monthly bill using the AWS Simple Monthly Calculator
AWS Storage | Amazon S3 Facts 
Facts 
• Able to store unlimited number of Objects in a Bucket 
• Objects up to 5TB; no bucket size limit 
• Designed for 99.999999999% durability and 99.99% availability of objects 
over a given year 
• HTTP/S endpoint to store and retrieve any amount of data, at any time, 
from anywhere on the web 
• Highly scalable, reliable, fast, and inexpensive 
• Server-side Encryption using AES 256-bit symmetric keys 
• Access Logs for auditing 
• Provides standards-based REST and SOAP interfaces
AWS Storage | Amazon Glacier 
Amazon 
Glacier Extremely low-cost storage 
Secure, durable storage for 
data archiving and backup 
Optimized for data that is 
infrequently accessed
AWS Storage | Amazon Glacier Storage Facts 
Facts 
Offload the administrative burdens of operating and scaling archival 
storage to AWS, and make retaining data for long periods, whether 
measured in years or decades, especially simple. 
Optimized for data that is infrequently accessed and for which retrieval 
time of several hours are suitable. 
• No limit to the amount of data you can store in Amazon Glacier. 
• Automatic Server-side Encryption using AES 256-bit symmetric keys. 
• Average annual durability of 99.999999999% for an archive.
AWS Storage | Amazon Elastic Block Store (EBS) 
Amazon 
Elastic Block 
Store 
Persistent block level 
storage volumes for 
use with Amazon EC2 
instances 
Attach to running instance and 
expose as a block device 
Snapshots stored 
durably in Amazon S3
AWS Storage | Amazon EBS Lifecycle
AWS Storage | Amazon EBS Facts 
Facts about Amazon EBS 
• Use for persistent storage 
• Can use to create RAID configuration for a server 
• Off-instance block storage that persists independently 
• Volumes behave like unformatted block devices for Linux or Windows instances
AWS Storage | Amazon EBS Use Case 
Use Cases 
OS Boot device / root file system; secondary volumes/filesystems 
Typical basis for database storage 
Raw block devices for RAID, some databases
AWS Storage | Amazon EBS Pricing 
Pay for what you Provision 
• Pricing based on Region 
• AWS GovCloud (US) Pricing page 
• Review Pricing Calculator online 
* Check Amazon EBS Pricing page for current pricing for all regions.
AWS Storage | Amazon EBS Best Practices 
Amazon EBS Volumes are in a Single Availability Zone 
EBS Volume 1 
Availability Zone A 
EBS Volume 2 
Availability Zone B 
Volume data is replicated across multiple servers in an Availability Zone.
AWS Storage | Amazon EBS and Amazon S3 
Amazon EBS Amazon S3 
Paradigm File system Object store 
Performance Very fast Fast 
Redundancy Across multiple servers in an 
Availability Zone 
Across multiple facilities and on 
multiple devices within each facility 
Security Visible only to your 
Amazon EC2 
Public Key / Private Key 
Access from 
the Internet? 
No (1) Yes (2) 
Typical use 
case 
Its a disk drive Write once, read many 
(1) Accessible from Internet if mounted to server and set up as FTP, etc. 
(2) Only with proper credentials, unless ACLs are world-readable
AWS Storage | AWS Storage Gateway 
AWS Storage 
Gateway 
Mirror your on-premises data 
to Amazon EC2 instances 
Connect an on-premises 
software appliance with 
cloud-based storage 
Securely upload data to the AWS 
cloud for cost effective backup and 
rapid disaster recovery
AWS Storage | Gateway-Cached Volume Architecture
AWS Storage | AWS Storage Gateway Virtual Tape 
Library
AWS Storage | Amazon Import/Export 
Amazon 
Import/Export 
Accelerates moving large 
amounts of data into and out of 
Amazon S3 or Amazon EBS 
Transfers your data directly onto 
and off of storage devices 
Uses Amazon high-speed 
internal network
AWS Storage | AWS Import/Export Support 
Import/Export Support 
• Accelerates moving large amounts of data into and out of Amazon S3 or Amazon EBS 
• Transfers your data directly onto and off of storage devices 
• Uses AWS high-speed internal network
AWS Storage | Additional Resources 
Additional Resources 
Here are some additional resources: 
Yelp Amazon Case Study: http://aws.amazon.com/solutions/case-studies/yelp/ 
Getting Started with Amazon S3 Video: 
http://www.youtube.com/watch?v=1qrjFb0ZTm8&feature=youtu.be 
Online Pricing Calculator: http://calculator.s3.amazonaws.com/calc5.html 
Glacier: http://aws.amazon.com/glacier/ 
Introduction to Amazon EBS Video: https://us-east-1-aws-training. 
s3.amazonaws.com/intro/elb.html
AWS Storage | Module Completion 
Summary 
You have reached the end of this training module. In summary, you have learned: 
• The key AWS storage options 
• What is an Amazon Elastic Block Store 
• How to create an Amazon S3 bucket and manage associated objects
Compute Services & Networking
Compute Services & Networking | Overview 
Module Overview 
This module describes the fundamental elements of AWS Compute and 
Networking, with a focus on Amazon Elastic Compute Cloud (EC2). This 
module will build off what you learned in Module 2 by verifying how to use 
Amazon Elastic Block Storage.
Compute Services & Networking | Learning Objectives 
By the end of this training you will be able to: 
1 Identify the different AWS compute and networking options. 
2 Describe what is Amazon Virtual Private Cloud (VPC). 
Create an Amazon Elastic Compute Cloud (EC2) Instance. 3 
4 Verify how to use Amazon Elastic Block Storage.
Compute Services & Networking | AWS Compute 
Products and Services 
Amazon Elastic 
Compute Cloud 
(EC2) 
Amazon Elastic 
MapReduce 
(EMR) 
Auto Scaling
Compute Services & Networking | Amazon Elastic 
Compute Cloud (EC2) 
Resizable compute capacity 
Complete control of your 
computing resources 
Reduces the time required to obtain and 
boot new server instances to minutes 
Amazon Elastic 
Compute Cloud 
(EC2)
Compute Services & Networking | Amazon EC2 Facts 
Facts about Amazon EC2 
Resizable compute capacity with many instance types 
Reduces the time required to obtain and boot new server instances to minutes 
or seconds 
Scale capacity as your computing requirements change 
Pay only for capacity that you actually use 
Choose Linux or Windows 
Deploy across Regions and Availability Zones for reliability
Compute Services & Networking | Using Amazon EC2 
How to Use Amazon EC2 
Select a pre-configured, Amazon Machine Image (AMI) to get up and running 
immediately. Or create an AMI containing your applications, libraries, data, and 
associated configuration settings. 
Configure security and network access on your Amazon EC2 instance. 
Choose which instance type(s) you want, then start, terminate, and monitor as 
many instances of your AMI as needed, using the web service APIs or the 
variety of management tools provided. 
Determine whether you want to run in multiple locations, utilize static IP 
endpoints, or attach persistent block storage to your instances. 
Pay only for the resources that you actually consume, like instance-hours 
or data transfer.
Compute Services & Networking | Amazon Machine 
Images (AMI) 
AMIs 
Building blocks of Amazon EC2 Instances 
An AMI is a template of a computer's root volume 
Can be public or private 
Create “gold Images” of your Amazon EC2 infrastructure 
AMI
Compute Services & Networking | Infrastructure and 
Applications 
Infrastructure and Applications 
Oracle 
SAP 
Microsoft 
AWS Marketplace
Compute Services & Networking | Amazon EC2 
Instances
Compute Services & Networking | Choosing the 
Right Instance 
Your choice of Amazon EC2 instances matters… 
A larger compute instance will sometimes save you not only time but money 
too. Paying more per hour for a shorter amount of time can be less expensive. 
Instances come in multiple sizes, allowing you to optimally scale resources to 
the requirements of your workload. As you choose an instance type, consider 
the following: 
– Core count 
– Memory size 
– Storage size & type 
– Network performance
Compute Services & Networking | Amazon EC2 
Instances with Intel®
Compute Services & Networking | Choosing the 
Right Instance
Compute Services & Networking | Instances with 
Intel®
Compute Services & Networking | Leverage all 3 
Instances
Compute Services & Networking | Amazon EC2 
Instances Pricing
Compute Services & Networking | Compute Example
Compute Services & Networking | Amazon Virtual 
Private Cloud (VPC)
Compute Services & Networking | Amazon EC2 
Security Groups 
Public Amazon EC2 Virtual Private Cloud 
Inbound Only Inbound and Outbound 
TCP, UDP, ICMP only Any Internet Protocol 
Assigned at launch Can be assigned or removed at 
anytime, including when running 
Modify anytime Modify anytime
Compute Services & Networking | Amazon Elastic 
MapReduce (EMR) 
Easily and cost-effectively 
process 
vast amounts of data 
Utilizes a hosted 
Hadoop framework 
Highly scalable 
Amazon Elastic 
MapReduce 
(EMR)
Compute Services & Networking | Amazon EMR 
Example 
The Amazon EMR 
job flow runs on a 
cluster of Amazon 
EC2 Instances 
Amazon EMR 
Job Flow 
Amazon Simple 
Storage Service (S3) 
Amazon 
CloudWatch 
Amazon EC2 Instance 
Input Data 
Output Results 
Metrics
Compute Services & Networking | Amazon Auto 
Scaling 
Auto Scaling 
Scale your Amazon EC2 
capacity automatically 
Well-suited for applications 
that experience variability 
Available at no 
additional charge 
in usage
Compute Services & Networking | Amazon Auto 
Scaling Cont. 
1 
Elastic Capacity 
2 
Ease of Use 
3 
Cost Savings 
5 
Actions 
4 
Geographic
Compute Services & Networking | Trinity of Services
Networking
Compute Services & Networking | AWS Networking 
Products & Services 
Amazon Virtual 
Private Cloud 
Amazon 
Route 53 
AWS Direct 
Connect 
Elastic Load 
Balancing
Compute Services & Networking | Amazon Virtual 
Private Cloud (VPC) 
Amazon 
Virtual Private 
Cloud 
Provision a private, isolated section of the 
AWS Cloud where you can launch AWS 
resources in a virtual network that you define 
Define a virtual network topology that closely 
resembles a traditional network that you 
might operate in your own datacenter 
You have complete control over your virtual networking 
environment: selection of IP address range, creation of 
subnets, configuration of route tables, and network gateways
Compute Services & Networking | Amazon VPC
Compute Services & Networking | AWS Direct 
Connect 
AWS Direct 
Connect 
All AWS services, including 
Amazon EC2 and Amazon 
S3 can be used with AWS 
Direct Connect 
Virtual interfaces can be 
reconfigured at any time 
Use the same connection to access public 
resources such as objects stored in Amazon S3
Compute Services & Networking | Networking 
AWS Direct Connect 
AWS Direct Connect establishes a 
dedicated network connection from your 
premises to AWS. 
Establish private connectivity between 
AWS and your datacenter, office, or 
colocation environment. 
Create multiple virtual interfaces to use 
the same connection to access public 
resources such as Amazon S3 and 
private resources such as Amazon EC2 
instances running within a VPC.
Compute Services & Networking | Amazon Route 53 
Amazon 
Route 53 
Route end users to 
Internet applications 
Provides secure and reliable 
routing to your application instances 
Answers DNS queries 
with low latency by 
using a global network 
of DNS servers
Compute Services & Networking | Networking with 
Amazon Route 53 
Amazon Route 53 
Answers DNS queries with low latency by using a global network of DNS servers. 
Queries for your domain are automatically routed to the nearest DNS server, 
and thus answered with the best possible performance. 
You pay only for managing domains through the service and the number of queries 
that the service answers.
Compute Services & Networking | Elastic Load 
Balancing (ELB) 
Elastic Load 
Balancing 
Dynamically grows and 
shrinks required resources 
based on traffic 
Supports health checks 
to ensure detect and 
remove failing instances 
Supports the routing and load balancing of 
HTTP, HTTPS, and TCP traffic to Amazon 
EC2 instances
Compute Services & Networking | Elastic Load 
Balancing Diagram
Compute Services & Networking | Additional Resources 
Additional Resources 
Here are some additional resources: 
Amazon EC2 Instance Types: http://aws.amazon.com/ec2/instance-types/ 
Service Documentation: http://aws.amazon.com/documentation 
White Papers: http://aws.amazon.com/whitepapers 
AWS Free Usage Tier: http://aws.amazon.com/free/ 
AWS Support: http://aws.amazon.com/premiumsupport/ 
APN Partners supporting AWS Direct Connect: 
http://aws.amazon.com/directconnect/partners/ 
AWS Security Process: 
http://d36cz9buwru1tt.cloudfront.net/pdf/AWS_Security_Whitepaper.pdf
Compute Services & Networking | Module Completion 
Summary 
You have reached the end of this training module. In summary, you have learned: 
Amazon Virtual Private Cloud lets you provision a logically isolated section with 
complete control over your virtual networking environment, including IP address range, 
creation of subnets, and configuration of route tables and network gateways 
VPN and Direct Connect allows you to leverage the AWS cloud as an extension of 
your corporate datacenter 
Elastic Load Balancing service provides load balancing across multiple instances in a 
region 
Amazon Route 53 is a highly available scalable Domain Name System (DNS) web 
service
Managed Services 
& Database
Managed Services & Database | Overview 
Module Overview 
This module describes the fundamental elements of AWS Managed Services 
and Databases. This module will focus on key aspects of Amazon Relational 
Database Service (RDS) and how to execute Amazon RDS.
Managed Services & Database | Learning Objectives 
By the end of this training you will be able to: 
1 Describe Amazon DynamoDB. 
2 Verify the key aspects of Amazon Relational Database Service (RDS). 
Execute Amazon Relational Database Service. 3
Managed Services & Database | Product and Services 
Amazon 
ElastiCache 
Amazon 
Relational 
Database 
Service 
Amazon 
DynamoDB 
Amazon Redshift
Managed Services & Database | Amazon Relational 
Database Service 
Cost-efficient and resizable capacity 
Manages time-consuming 
database administration tasks 
Access to the full capabilities of familiar MySQL, 
PostgreSQL, Oracle and SQL Server databases 
Amazon 
Relational 
Database 
Service
Managed Services & Database | Amazon RDS 
Amazon Relational Database Services (RDS) 
Easy to set up, operate, and scale a relational database in the cloud 
Cost-efficient and resizable capacity while managing time-consuming database 
administration tasks 
Access to the full capabilities of a familiar SQL database 
Automatically patches the database software and backs up your database 
Ability to scale the compute resources or storage capacity associated with 
your relational database instance via a single API call
Managed Services & Database | Amazon RDS & VPC 
Amazon RDS & VPC 
You can select your own IP address range. 
Create subnets, and configure routing and access control lists. 
The basic functionality of Amazon RDS is the same whether it is running in a 
VPC or not: Amazon RDS manages backups, software patching, automatic 
failure detection, and recovery. 
There is no additional cost to run your DB instance in a VPC.
Managed Services & Database | Amazon DynamoDB 
Store any amount of 
data – no limits 
Fast, predictable performance 
Easily provision and change the request 
capacity needed for each table 
using SSDs 
Amazon 
DynamoDB
Course Overview | Training Agenda 
If You Need Consider Using 
A relational database service 
with minimal administration 
Amazon RDS, a fully managed service that 
offers a choice of MySQL, Oracle or SQL Server 
database engines, scale compute & storage, 
Multi-AZ availability and more. 
A fast, highly scalable NoSQL 
database service 
Amazon DynamoDB, a fully managed service 
that offers extremely fast performance, seamless 
scalability and reliability, low cost and more. 
A relational database you can 
manage on your own 
Your choice of relational AMIs on Amazon EC2 
and Amazon EBS that provide scale compute & 
storage, complete control over instances, and more.
Managed Services & Database | Amazon RDS and 
DynamoDB
Managed Services & Database | Amazon ElastiCache 
Amazon 
ElastiCache 
Seamlessly caches 
in front of Amazon 
RDS instances 
Manages patching, cache node 
failure detection and recovery 
Memcached and Redis compliant 
cache cluster on-demand
Managed Services & Database | Amazon ElastiCache 
Security Groups
Managed Services & Database | Amazon Redshift 
Amazon Redshift 
Petabyte-scale service that manages all 
the work need to set up, operate, and scale 
a data warehouse cluster 
Dramatically reduces IO 
Continuously monitors the health of the 
cluster and replaces any component
Managed Services & Database | Amazon Redshift 
Facts 
Amazon Redshift 
Amazon Redshift manages all the work needed to set up, operate, and scale a 
data warehouse cluster, from provisioning capacity to monitoring and backing 
up the cluster, to applying patches and upgrades. Scaling a cluster to improve 
performance or increase capacity is simple and incurs no downtime. The service 
continuously monitors the health of the cluster and automatically replaces any 
component, if needed. 
Redshift 
Redshift 
Redshift
Managed Services & Database | Additional Resources 
Additional Resources 
Here are some additional resources: 
Service Documentation: http://aws.amazon.com/documentation 
Pricing Calculator: http://aws.amazon.com/calculator/ 
Economics: http://aws.amazon.com/economics/ 
Pricing details for all services: http://aws.amazon.com/pricing/ 
Solutions Case Studies: http://aws.amazon.com/solutions/case-studies 
Marketing Overview Materials: http://aws.amazon.com 
Videos & Webinars: http://www.youtube.com/AmazonWebServices 
AWS Blog: http://aws.typepad.com/
Managed Services & Database | Module Completion 
Summary 
You have reached the end of this training module. In summary, you have learned: 
• Describe Amazon DynamoDB 
• Verify key aspects of Amazon Relational Database Service (RDS) 
• How to execute Amazon RDS
Deployment & Management
Deployment & Management | Overview 
Module Overview 
This module describes the fundamental elements of AWS Deployment & 
Management products and services.
Deployment & Management | Learning Objectives 
By the end of this training you will be able to: 
1 Identify AWS CloudFormation. 
2 Describe Amazon CloudWatch metrics and alarms. 
Describe Amazon Identity and Access Management (IAM). 3
Deployment & Management | Product and Services 
AWS Identity and 
Access 
Management 
Amazon 
CloudWatch 
Amazon 
Elastic 
Beanstalk 
Amazon 
CloudFormation
Deployment & Management | AWS Identity and Access 
Management (IAM) 
AWS Identity and 
Access 
Management 
(IAM) 
Create and manage AWS users and groups 
and use permissions to allow and deny their 
permissions to AWS resources 
Enables identity federation between 
your corporate directory and AWS 
services 
Use existing corporate identities to grant 
secure access to AWS resources, such as 
Amazon S3 buckets, without creating new 
AWS identities for those users
Deployment & Management | Using AWS IAM
Deployment & Management | Amazon CloudWatch 
Amazon 
CloudWatch 
Visibility into resource 
utilization, operational 
performance, and overall 
demand patterns 
Accessible via AWS Management 
Console, APIs, SDK, or CLI 
Custom application-specific 
metrics of your own
Deployment & Management | AWS CloudWatch Facts 
AWS CloudWatch 
• Visibility into resource utilization, operational performance, and overall 
demand patterns 
• Metrics including CPU utilization, disk reads and writes, and network traffic 
• Custom application-specific metrics of your own 
• Accessible via AWS Management Console, APIs, SDK, or CLI
Deployment & Management | Amazon Elastic Beanstalk 
Amazon 
Elastic 
Beanstalk 
Simply upload your 
application 
Automatically handles the 
deployment details of capacity 
provisioning, load balancing, auto 
scaling, and application health 
monitoring 
Retain full control over the 
AWS resources powering 
your application
Deployment & Management | AWS Elastic Beanstalk 
Facts 
AWS Elastic Beanstalk 
• Quickly deploy and manage applications in the AWS cloud without worrying 
about the infrastructure that runs those applications. 
• Reduce management complexity without restricting choice or control.
Deployment & Management | Amazon 
CloudFormation 
Create templates of stack 
of resources 
Deploy stack from template 
with runtime parameters 
Amazon 
CloudFormation 
Use templates as a starting 
point or create your own
Deployment & Management | Deployment & Management 
Amazon CloudFormation Deployment and Management 
• Templates are simple JSON formatted text files 
• CloudFormer supports generating templates from running environments 
"Resources" : { 
"Ec2Instance" : { 
"Type" : "AWS::EC2::Instance", 
"Properties" : { 
"SecurityGroups" : [ { "Ref" : "InstanceSecurityGroup" } ], 
"ImageId" : { "Fn::FindInMap" : [ "RegionMap", { "Ref" : "AWS::Region" }, "AMI" 
]}, 
"Tags" : [{ 
"Key" : "MyTag", 
"Value" : "TagValue" 
}] 
} 
},
Deployment & Management | Deployment & Management
Deployment & Management | Additional Resources 
Additional Resources 
Here are some additional resources: 
AWS CloudFormation Sample Templates: 
https://aws.amazon.com/cloudformation/aws-cloudformation-templates/ 
AWS User Groups: http://aws.amazon.com/usergroups/ 
Introduction to AWS IAM Training Video: https://us-east-1-aws-training. 
s3.amazonaws.com/intro/iam.html
Deployment & Management | Module Completion 
Summary 
You have reached the end of this training module. In summary, you have learned: 
• The key fundamental elements of AWS Deployment & Management 
products and services.
Completion | Training Next Steps
Aw some day_essentials3.2ish_072214

Weitere ähnliche Inhalte

Was ist angesagt?

Aws security best practices
Aws security best practicesAws security best practices
Aws security best practicesSundeep Roxx
 
Hands-on Setup and Overview of AWS Console, AWS CLI, AWS SDK, Boto 3
Hands-on Setup and Overview of AWS Console, AWS CLI, AWS SDK, Boto 3Hands-on Setup and Overview of AWS Console, AWS CLI, AWS SDK, Boto 3
Hands-on Setup and Overview of AWS Console, AWS CLI, AWS SDK, Boto 3Amazon Web Services
 
AWS business essentials - Toronto
AWS   business essentials - TorontoAWS   business essentials - Toronto
AWS business essentials - TorontoAmazon Web Services
 
Securing Your AWS Infrastructure with Edge Services
Securing Your AWS Infrastructure with Edge ServicesSecuring Your AWS Infrastructure with Edge Services
Securing Your AWS Infrastructure with Edge ServicesAmazon Web Services
 
Access Control for the Cloud: AWS Identity and Access Management (IAM) (SEC20...
Access Control for the Cloud: AWS Identity and Access Management (IAM) (SEC20...Access Control for the Cloud: AWS Identity and Access Management (IAM) (SEC20...
Access Control for the Cloud: AWS Identity and Access Management (IAM) (SEC20...Amazon Web Services
 
AWS Certified Solutions Architect Professional Course S6-S9
AWS Certified Solutions Architect Professional Course S6-S9AWS Certified Solutions Architect Professional Course S6-S9
AWS Certified Solutions Architect Professional Course S6-S9Neal Davis
 
AWS Certified Solutions Architect Professional Course S1-S5
AWS Certified Solutions Architect Professional Course S1-S5AWS Certified Solutions Architect Professional Course S1-S5
AWS Certified Solutions Architect Professional Course S1-S5Neal Davis
 
Detective Controls: Gain Visibility and Record Change
Detective Controls: Gain Visibility and Record ChangeDetective Controls: Gain Visibility and Record Change
Detective Controls: Gain Visibility and Record ChangeAmazon Web Services
 
Best Practices for Active Directory with AWS Workloads
Best Practices for Active Directory with AWS WorkloadsBest Practices for Active Directory with AWS Workloads
Best Practices for Active Directory with AWS WorkloadsAmazon Web Services
 
The AWS Shared Security Responsibility Model in Practice
The AWS Shared Security Responsibility Model in PracticeThe AWS Shared Security Responsibility Model in Practice
The AWS Shared Security Responsibility Model in PracticeAmazon Web Services
 
Data Protection in Transit and at Rest
Data Protection in Transit and at RestData Protection in Transit and at Rest
Data Protection in Transit and at RestAmazon Web Services
 
Introduction to the Security Perspective of the Cloud Adoption Framework (CAF)
 Introduction to the Security Perspective of the Cloud Adoption Framework (CAF) Introduction to the Security Perspective of the Cloud Adoption Framework (CAF)
Introduction to the Security Perspective of the Cloud Adoption Framework (CAF)Amazon Web Services
 
AWS Security: A Practitioner's Perspective
AWS Security: A Practitioner's PerspectiveAWS Security: A Practitioner's Perspective
AWS Security: A Practitioner's PerspectiveJason Chan
 
Datensicherheit mit AWS - AWS Security Web Day
Datensicherheit mit AWS - AWS Security Web DayDatensicherheit mit AWS - AWS Security Web Day
Datensicherheit mit AWS - AWS Security Web DayAWS Germany
 

Was ist angesagt? (20)

Intro to AWS Security
Intro to AWS SecurityIntro to AWS Security
Intro to AWS Security
 
Aws security best practices
Aws security best practicesAws security best practices
Aws security best practices
 
Hands-on Setup and Overview of AWS Console, AWS CLI, AWS SDK, Boto 3
Hands-on Setup and Overview of AWS Console, AWS CLI, AWS SDK, Boto 3Hands-on Setup and Overview of AWS Console, AWS CLI, AWS SDK, Boto 3
Hands-on Setup and Overview of AWS Console, AWS CLI, AWS SDK, Boto 3
 
AWS business essentials - Toronto
AWS   business essentials - TorontoAWS   business essentials - Toronto
AWS business essentials - Toronto
 
AWS_Security_Essentials
AWS_Security_EssentialsAWS_Security_Essentials
AWS_Security_Essentials
 
Securing Your AWS Infrastructure with Edge Services
Securing Your AWS Infrastructure with Edge ServicesSecuring Your AWS Infrastructure with Edge Services
Securing Your AWS Infrastructure with Edge Services
 
Networking and Security
Networking and SecurityNetworking and Security
Networking and Security
 
Access Control for the Cloud: AWS Identity and Access Management (IAM) (SEC20...
Access Control for the Cloud: AWS Identity and Access Management (IAM) (SEC20...Access Control for the Cloud: AWS Identity and Access Management (IAM) (SEC20...
Access Control for the Cloud: AWS Identity and Access Management (IAM) (SEC20...
 
AWS Certified Solutions Architect Professional Course S6-S9
AWS Certified Solutions Architect Professional Course S6-S9AWS Certified Solutions Architect Professional Course S6-S9
AWS Certified Solutions Architect Professional Course S6-S9
 
AWS Certified Solutions Architect Professional Course S1-S5
AWS Certified Solutions Architect Professional Course S1-S5AWS Certified Solutions Architect Professional Course S1-S5
AWS Certified Solutions Architect Professional Course S1-S5
 
Detective Controls: Gain Visibility and Record Change
Detective Controls: Gain Visibility and Record ChangeDetective Controls: Gain Visibility and Record Change
Detective Controls: Gain Visibility and Record Change
 
Understanding AWS Security
Understanding AWS SecurityUnderstanding AWS Security
Understanding AWS Security
 
AWS core services
AWS core servicesAWS core services
AWS core services
 
Best Practices for Active Directory with AWS Workloads
Best Practices for Active Directory with AWS WorkloadsBest Practices for Active Directory with AWS Workloads
Best Practices for Active Directory with AWS Workloads
 
The AWS Shared Security Responsibility Model in Practice
The AWS Shared Security Responsibility Model in PracticeThe AWS Shared Security Responsibility Model in Practice
The AWS Shared Security Responsibility Model in Practice
 
AWSome Day | Tech Track
AWSome Day | Tech TrackAWSome Day | Tech Track
AWSome Day | Tech Track
 
Data Protection in Transit and at Rest
Data Protection in Transit and at RestData Protection in Transit and at Rest
Data Protection in Transit and at Rest
 
Introduction to the Security Perspective of the Cloud Adoption Framework (CAF)
 Introduction to the Security Perspective of the Cloud Adoption Framework (CAF) Introduction to the Security Perspective of the Cloud Adoption Framework (CAF)
Introduction to the Security Perspective of the Cloud Adoption Framework (CAF)
 
AWS Security: A Practitioner's Perspective
AWS Security: A Practitioner's PerspectiveAWS Security: A Practitioner's Perspective
AWS Security: A Practitioner's Perspective
 
Datensicherheit mit AWS - AWS Security Web Day
Datensicherheit mit AWS - AWS Security Web DayDatensicherheit mit AWS - AWS Security Web Day
Datensicherheit mit AWS - AWS Security Web Day
 

Andere mochten auch

Bootstrapping a Solution Design in the Cloud - Session Sponsored by Ajilon
Bootstrapping a Solution Design in the Cloud - Session Sponsored by AjilonBootstrapping a Solution Design in the Cloud - Session Sponsored by Ajilon
Bootstrapping a Solution Design in the Cloud - Session Sponsored by AjilonAmazon Web Services
 
Day 2 - Delivering Media Mobile Apps Using the AWS Mobile & Javascript SDKs
Day 2 - Delivering Media Mobile Apps Using the AWS Mobile & Javascript SDKsDay 2 - Delivering Media Mobile Apps Using the AWS Mobile & Javascript SDKs
Day 2 - Delivering Media Mobile Apps Using the AWS Mobile & Javascript SDKsAmazon Web Services
 
(SPOT302) Under the Covers of AWS: Core Distributed Systems Primitives That P...
(SPOT302) Under the Covers of AWS: Core Distributed Systems Primitives That P...(SPOT302) Under the Covers of AWS: Core Distributed Systems Primitives That P...
(SPOT302) Under the Covers of AWS: Core Distributed Systems Primitives That P...Amazon Web Services
 
amazon s3-connector and api architecture_kishore.pptx
amazon s3-connector and api architecture_kishore.pptxamazon s3-connector and api architecture_kishore.pptx
amazon s3-connector and api architecture_kishore.pptxkishore ippili
 
(APP204) NEW LAUNCH: Introduction to AWS Service Catalog | AWS re:Invent 2014
(APP204) NEW LAUNCH: Introduction to AWS Service Catalog | AWS re:Invent 2014(APP204) NEW LAUNCH: Introduction to AWS Service Catalog | AWS re:Invent 2014
(APP204) NEW LAUNCH: Introduction to AWS Service Catalog | AWS re:Invent 2014Amazon Web Services
 
APN Partner Webinar - Having Effective and Critical TCO Conversations
APN Partner Webinar - Having Effective and Critical TCO ConversationsAPN Partner Webinar - Having Effective and Critical TCO Conversations
APN Partner Webinar - Having Effective and Critical TCO ConversationsAmazon Web Services
 
(BAC307) The Cold Data Playbook: Building the Ultimate Archive Solution in Am...
(BAC307) The Cold Data Playbook: Building the Ultimate Archive Solution in Am...(BAC307) The Cold Data Playbook: Building the Ultimate Archive Solution in Am...
(BAC307) The Cold Data Playbook: Building the Ultimate Archive Solution in Am...Amazon Web Services
 
SV Forum Platform Architecture SIG - Netflix Open Source Platform
SV Forum Platform Architecture SIG - Netflix Open Source PlatformSV Forum Platform Architecture SIG - Netflix Open Source Platform
SV Forum Platform Architecture SIG - Netflix Open Source PlatformAdrian Cockcroft
 
AWS Public Sector Symposium 2014 Canberra | Big Data in the Cloud: Accelerati...
AWS Public Sector Symposium 2014 Canberra | Big Data in the Cloud: Accelerati...AWS Public Sector Symposium 2014 Canberra | Big Data in the Cloud: Accelerati...
AWS Public Sector Symposium 2014 Canberra | Big Data in the Cloud: Accelerati...Amazon Web Services
 
Secuencia narrativa personajes
Secuencia narrativa personajesSecuencia narrativa personajes
Secuencia narrativa personajesAdriana Solimano
 
Castrol EDGE - Ogilvy Internship Project
Castrol EDGE - Ogilvy Internship ProjectCastrol EDGE - Ogilvy Internship Project
Castrol EDGE - Ogilvy Internship ProjectGabbi Baker
 
Intro to AWS: EC2 & Compute Services
Intro to AWS: EC2 & Compute ServicesIntro to AWS: EC2 & Compute Services
Intro to AWS: EC2 & Compute ServicesAmazon Web Services
 
AWSome Day 2016 - Module 1: AWS Introduction and History
AWSome Day 2016 - Module 1: AWS Introduction and HistoryAWSome Day 2016 - Module 1: AWS Introduction and History
AWSome Day 2016 - Module 1: AWS Introduction and HistoryAmazon Web Services
 
Amazon.com History, Facts n lots more
Amazon.com History, Facts n lots moreAmazon.com History, Facts n lots more
Amazon.com History, Facts n lots moreMVIT
 
Amazon 06 - Innovation Strategy
Amazon 06 - Innovation StrategyAmazon 06 - Innovation Strategy
Amazon 06 - Innovation StrategyPere Joan
 
Strategy Presentation on Amazon
Strategy Presentation on AmazonStrategy Presentation on Amazon
Strategy Presentation on AmazonGabbi Baker
 

Andere mochten auch (20)

Bootstrapping a Solution Design in the Cloud - Session Sponsored by Ajilon
Bootstrapping a Solution Design in the Cloud - Session Sponsored by AjilonBootstrapping a Solution Design in the Cloud - Session Sponsored by Ajilon
Bootstrapping a Solution Design in the Cloud - Session Sponsored by Ajilon
 
Day 2 - Delivering Media Mobile Apps Using the AWS Mobile & Javascript SDKs
Day 2 - Delivering Media Mobile Apps Using the AWS Mobile & Javascript SDKsDay 2 - Delivering Media Mobile Apps Using the AWS Mobile & Javascript SDKs
Day 2 - Delivering Media Mobile Apps Using the AWS Mobile & Javascript SDKs
 
News UK - Our Journey to Cloud
News UK - Our Journey to CloudNews UK - Our Journey to Cloud
News UK - Our Journey to Cloud
 
(SPOT302) Under the Covers of AWS: Core Distributed Systems Primitives That P...
(SPOT302) Under the Covers of AWS: Core Distributed Systems Primitives That P...(SPOT302) Under the Covers of AWS: Core Distributed Systems Primitives That P...
(SPOT302) Under the Covers of AWS: Core Distributed Systems Primitives That P...
 
amazon s3-connector and api architecture_kishore.pptx
amazon s3-connector and api architecture_kishore.pptxamazon s3-connector and api architecture_kishore.pptx
amazon s3-connector and api architecture_kishore.pptx
 
(APP204) NEW LAUNCH: Introduction to AWS Service Catalog | AWS re:Invent 2014
(APP204) NEW LAUNCH: Introduction to AWS Service Catalog | AWS re:Invent 2014(APP204) NEW LAUNCH: Introduction to AWS Service Catalog | AWS re:Invent 2014
(APP204) NEW LAUNCH: Introduction to AWS Service Catalog | AWS re:Invent 2014
 
APN Partner Webinar - Having Effective and Critical TCO Conversations
APN Partner Webinar - Having Effective and Critical TCO ConversationsAPN Partner Webinar - Having Effective and Critical TCO Conversations
APN Partner Webinar - Having Effective and Critical TCO Conversations
 
(BAC307) The Cold Data Playbook: Building the Ultimate Archive Solution in Am...
(BAC307) The Cold Data Playbook: Building the Ultimate Archive Solution in Am...(BAC307) The Cold Data Playbook: Building the Ultimate Archive Solution in Am...
(BAC307) The Cold Data Playbook: Building the Ultimate Archive Solution in Am...
 
SV Forum Platform Architecture SIG - Netflix Open Source Platform
SV Forum Platform Architecture SIG - Netflix Open Source PlatformSV Forum Platform Architecture SIG - Netflix Open Source Platform
SV Forum Platform Architecture SIG - Netflix Open Source Platform
 
AWS Public Sector Symposium 2014 Canberra | Big Data in the Cloud: Accelerati...
AWS Public Sector Symposium 2014 Canberra | Big Data in the Cloud: Accelerati...AWS Public Sector Symposium 2014 Canberra | Big Data in the Cloud: Accelerati...
AWS Public Sector Symposium 2014 Canberra | Big Data in the Cloud: Accelerati...
 
Secuencia narrativa personajes
Secuencia narrativa personajesSecuencia narrativa personajes
Secuencia narrativa personajes
 
Castrol EDGE - Ogilvy Internship Project
Castrol EDGE - Ogilvy Internship ProjectCastrol EDGE - Ogilvy Internship Project
Castrol EDGE - Ogilvy Internship Project
 
Biography of a giant - Amazon.com
Biography of a giant - Amazon.comBiography of a giant - Amazon.com
Biography of a giant - Amazon.com
 
Amazon distribution channel
Amazon distribution channelAmazon distribution channel
Amazon distribution channel
 
Intro to AWS: EC2 & Compute Services
Intro to AWS: EC2 & Compute ServicesIntro to AWS: EC2 & Compute Services
Intro to AWS: EC2 & Compute Services
 
Amazon Business Model
Amazon Business ModelAmazon Business Model
Amazon Business Model
 
AWSome Day 2016 - Module 1: AWS Introduction and History
AWSome Day 2016 - Module 1: AWS Introduction and HistoryAWSome Day 2016 - Module 1: AWS Introduction and History
AWSome Day 2016 - Module 1: AWS Introduction and History
 
Amazon.com History, Facts n lots more
Amazon.com History, Facts n lots moreAmazon.com History, Facts n lots more
Amazon.com History, Facts n lots more
 
Amazon 06 - Innovation Strategy
Amazon 06 - Innovation StrategyAmazon 06 - Innovation Strategy
Amazon 06 - Innovation Strategy
 
Strategy Presentation on Amazon
Strategy Presentation on AmazonStrategy Presentation on Amazon
Strategy Presentation on Amazon
 

Ähnlich wie Aw some day_essentials3.2ish_072214

AWS re:Invent 2016: Enabling Enterprise Migrations: Creating an AWS Landing Z...
AWS re:Invent 2016: Enabling Enterprise Migrations: Creating an AWS Landing Z...AWS re:Invent 2016: Enabling Enterprise Migrations: Creating an AWS Landing Z...
AWS re:Invent 2016: Enabling Enterprise Migrations: Creating an AWS Landing Z...Amazon Web Services
 
Security Best Practices - Hebrew Webinar
Security Best Practices - Hebrew WebinarSecurity Best Practices - Hebrew Webinar
Security Best Practices - Hebrew WebinarAmazon Web Services
 
Journey Through The Cloud - Security Best Practices
Journey Through The Cloud - Security Best Practices Journey Through The Cloud - Security Best Practices
Journey Through The Cloud - Security Best Practices Amazon Web Services
 
Security Best Practices
Security Best PracticesSecurity Best Practices
Security Best PracticesIan Massingham
 
Security Best Practices: AWS AWSome Day Management Track
Security Best Practices: AWS AWSome Day Management TrackSecurity Best Practices: AWS AWSome Day Management Track
Security Best Practices: AWS AWSome Day Management TrackIan Massingham
 
The AWS Shared Responsibility Model in Practice
The AWS Shared Responsibility Model in PracticeThe AWS Shared Responsibility Model in Practice
The AWS Shared Responsibility Model in PracticeAlert Logic
 
awsomedaymodules14gettingstartedwithaws161013161135convertedpptx__2022_01_10_...
awsomedaymodules14gettingstartedwithaws161013161135convertedpptx__2022_01_10_...awsomedaymodules14gettingstartedwithaws161013161135convertedpptx__2022_01_10_...
awsomedaymodules14gettingstartedwithaws161013161135convertedpptx__2022_01_10_...himanipatel524244
 
Best Practices for Security at Scale
Best Practices for Security at ScaleBest Practices for Security at Scale
Best Practices for Security at ScaleAmazon Web Services
 
AWS Presentation-1.ppt
AWS Presentation-1.pptAWS Presentation-1.ppt
AWS Presentation-1.pptusmanEhsan8
 
Network Security and Access Control within AWS
Network Security and Access Control within AWS Network Security and Access Control within AWS
Network Security and Access Control within AWS Amazon Web Services
 

Ähnlich wie Aw some day_essentials3.2ish_072214 (20)

Advanced AWS Security Workshop
Advanced AWS Security WorkshopAdvanced AWS Security Workshop
Advanced AWS Security Workshop
 
Security Best Practices
Security Best PracticesSecurity Best Practices
Security Best Practices
 
AWS re:Invent 2016: Enabling Enterprise Migrations: Creating an AWS Landing Z...
AWS re:Invent 2016: Enabling Enterprise Migrations: Creating an AWS Landing Z...AWS re:Invent 2016: Enabling Enterprise Migrations: Creating an AWS Landing Z...
AWS re:Invent 2016: Enabling Enterprise Migrations: Creating an AWS Landing Z...
 
Security best practices
Security best practices Security best practices
Security best practices
 
Security Best Practices - Hebrew Webinar
Security Best Practices - Hebrew WebinarSecurity Best Practices - Hebrew Webinar
Security Best Practices - Hebrew Webinar
 
Journey Through The Cloud - Security Best Practices
Journey Through The Cloud - Security Best Practices Journey Through The Cloud - Security Best Practices
Journey Through The Cloud - Security Best Practices
 
Security Best Practices
Security Best PracticesSecurity Best Practices
Security Best Practices
 
Security Best Practices: AWS AWSome Day Management Track
Security Best Practices: AWS AWSome Day Management TrackSecurity Best Practices: AWS AWSome Day Management Track
Security Best Practices: AWS AWSome Day Management Track
 
Security & Compliance (Part 1)
Security & Compliance (Part 1)Security & Compliance (Part 1)
Security & Compliance (Part 1)
 
Security Best Practices
Security Best PracticesSecurity Best Practices
Security Best Practices
 
The AWS Shared Responsibility Model in Practice
The AWS Shared Responsibility Model in PracticeThe AWS Shared Responsibility Model in Practice
The AWS Shared Responsibility Model in Practice
 
awsomedaymodules14gettingstartedwithaws161013161135convertedpptx__2022_01_10_...
awsomedaymodules14gettingstartedwithaws161013161135convertedpptx__2022_01_10_...awsomedaymodules14gettingstartedwithaws161013161135convertedpptx__2022_01_10_...
awsomedaymodules14gettingstartedwithaws161013161135convertedpptx__2022_01_10_...
 
Understanding AWS Security
Understanding AWS SecurityUnderstanding AWS Security
Understanding AWS Security
 
Best Practices for Security at Scale
Best Practices for Security at ScaleBest Practices for Security at Scale
Best Practices for Security at Scale
 
Security & Compliance
Security & Compliance Security & Compliance
Security & Compliance
 
Getting Started on AWS
Getting Started on AWSGetting Started on AWS
Getting Started on AWS
 
Technical Track
Technical TrackTechnical Track
Technical Track
 
Getting Started with AWS
Getting Started with AWSGetting Started with AWS
Getting Started with AWS
 
AWS Presentation-1.ppt
AWS Presentation-1.pptAWS Presentation-1.ppt
AWS Presentation-1.ppt
 
Network Security and Access Control within AWS
Network Security and Access Control within AWS Network Security and Access Control within AWS
Network Security and Access Control within AWS
 

Mehr von Amazon Web Services

Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...
Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...
Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...Amazon Web Services
 
Big Data per le Startup: come creare applicazioni Big Data in modalità Server...
Big Data per le Startup: come creare applicazioni Big Data in modalità Server...Big Data per le Startup: come creare applicazioni Big Data in modalità Server...
Big Data per le Startup: come creare applicazioni Big Data in modalità Server...Amazon Web Services
 
Esegui pod serverless con Amazon EKS e AWS Fargate
Esegui pod serverless con Amazon EKS e AWS FargateEsegui pod serverless con Amazon EKS e AWS Fargate
Esegui pod serverless con Amazon EKS e AWS FargateAmazon Web Services
 
Costruire Applicazioni Moderne con AWS
Costruire Applicazioni Moderne con AWSCostruire Applicazioni Moderne con AWS
Costruire Applicazioni Moderne con AWSAmazon Web Services
 
Come spendere fino al 90% in meno con i container e le istanze spot
Come spendere fino al 90% in meno con i container e le istanze spot Come spendere fino al 90% in meno con i container e le istanze spot
Come spendere fino al 90% in meno con i container e le istanze spot Amazon Web Services
 
Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...
Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...
Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...Amazon Web Services
 
OpsWorks Configuration Management: automatizza la gestione e i deployment del...
OpsWorks Configuration Management: automatizza la gestione e i deployment del...OpsWorks Configuration Management: automatizza la gestione e i deployment del...
OpsWorks Configuration Management: automatizza la gestione e i deployment del...Amazon Web Services
 
Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads
Microsoft Active Directory su AWS per supportare i tuoi Windows WorkloadsMicrosoft Active Directory su AWS per supportare i tuoi Windows Workloads
Microsoft Active Directory su AWS per supportare i tuoi Windows WorkloadsAmazon Web Services
 
Database Oracle e VMware Cloud on AWS i miti da sfatare
Database Oracle e VMware Cloud on AWS i miti da sfatareDatabase Oracle e VMware Cloud on AWS i miti da sfatare
Database Oracle e VMware Cloud on AWS i miti da sfatareAmazon Web Services
 
Crea la tua prima serverless ledger-based app con QLDB e NodeJS
Crea la tua prima serverless ledger-based app con QLDB e NodeJSCrea la tua prima serverless ledger-based app con QLDB e NodeJS
Crea la tua prima serverless ledger-based app con QLDB e NodeJSAmazon Web Services
 
API moderne real-time per applicazioni mobili e web
API moderne real-time per applicazioni mobili e webAPI moderne real-time per applicazioni mobili e web
API moderne real-time per applicazioni mobili e webAmazon Web Services
 
Database Oracle e VMware Cloud™ on AWS: i miti da sfatare
Database Oracle e VMware Cloud™ on AWS: i miti da sfatareDatabase Oracle e VMware Cloud™ on AWS: i miti da sfatare
Database Oracle e VMware Cloud™ on AWS: i miti da sfatareAmazon Web Services
 
Tools for building your MVP on AWS
Tools for building your MVP on AWSTools for building your MVP on AWS
Tools for building your MVP on AWSAmazon Web Services
 
How to Build a Winning Pitch Deck
How to Build a Winning Pitch DeckHow to Build a Winning Pitch Deck
How to Build a Winning Pitch DeckAmazon Web Services
 
Building a web application without servers
Building a web application without serversBuilding a web application without servers
Building a web application without serversAmazon Web Services
 
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...AWS_HK_StartupDay_Building Interactive websites while automating for efficien...
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...Amazon Web Services
 
Introduzione a Amazon Elastic Container Service
Introduzione a Amazon Elastic Container ServiceIntroduzione a Amazon Elastic Container Service
Introduzione a Amazon Elastic Container ServiceAmazon Web Services
 

Mehr von Amazon Web Services (20)

Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...
Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...
Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...
 
Big Data per le Startup: come creare applicazioni Big Data in modalità Server...
Big Data per le Startup: come creare applicazioni Big Data in modalità Server...Big Data per le Startup: come creare applicazioni Big Data in modalità Server...
Big Data per le Startup: come creare applicazioni Big Data in modalità Server...
 
Esegui pod serverless con Amazon EKS e AWS Fargate
Esegui pod serverless con Amazon EKS e AWS FargateEsegui pod serverless con Amazon EKS e AWS Fargate
Esegui pod serverless con Amazon EKS e AWS Fargate
 
Costruire Applicazioni Moderne con AWS
Costruire Applicazioni Moderne con AWSCostruire Applicazioni Moderne con AWS
Costruire Applicazioni Moderne con AWS
 
Come spendere fino al 90% in meno con i container e le istanze spot
Come spendere fino al 90% in meno con i container e le istanze spot Come spendere fino al 90% in meno con i container e le istanze spot
Come spendere fino al 90% in meno con i container e le istanze spot
 
Open banking as a service
Open banking as a serviceOpen banking as a service
Open banking as a service
 
Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...
Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...
Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...
 
OpsWorks Configuration Management: automatizza la gestione e i deployment del...
OpsWorks Configuration Management: automatizza la gestione e i deployment del...OpsWorks Configuration Management: automatizza la gestione e i deployment del...
OpsWorks Configuration Management: automatizza la gestione e i deployment del...
 
Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads
Microsoft Active Directory su AWS per supportare i tuoi Windows WorkloadsMicrosoft Active Directory su AWS per supportare i tuoi Windows Workloads
Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads
 
Computer Vision con AWS
Computer Vision con AWSComputer Vision con AWS
Computer Vision con AWS
 
Database Oracle e VMware Cloud on AWS i miti da sfatare
Database Oracle e VMware Cloud on AWS i miti da sfatareDatabase Oracle e VMware Cloud on AWS i miti da sfatare
Database Oracle e VMware Cloud on AWS i miti da sfatare
 
Crea la tua prima serverless ledger-based app con QLDB e NodeJS
Crea la tua prima serverless ledger-based app con QLDB e NodeJSCrea la tua prima serverless ledger-based app con QLDB e NodeJS
Crea la tua prima serverless ledger-based app con QLDB e NodeJS
 
API moderne real-time per applicazioni mobili e web
API moderne real-time per applicazioni mobili e webAPI moderne real-time per applicazioni mobili e web
API moderne real-time per applicazioni mobili e web
 
Database Oracle e VMware Cloud™ on AWS: i miti da sfatare
Database Oracle e VMware Cloud™ on AWS: i miti da sfatareDatabase Oracle e VMware Cloud™ on AWS: i miti da sfatare
Database Oracle e VMware Cloud™ on AWS: i miti da sfatare
 
Tools for building your MVP on AWS
Tools for building your MVP on AWSTools for building your MVP on AWS
Tools for building your MVP on AWS
 
How to Build a Winning Pitch Deck
How to Build a Winning Pitch DeckHow to Build a Winning Pitch Deck
How to Build a Winning Pitch Deck
 
Building a web application without servers
Building a web application without serversBuilding a web application without servers
Building a web application without servers
 
Fundraising Essentials
Fundraising EssentialsFundraising Essentials
Fundraising Essentials
 
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...AWS_HK_StartupDay_Building Interactive websites while automating for efficien...
AWS_HK_StartupDay_Building Interactive websites while automating for efficien...
 
Introduzione a Amazon Elastic Container Service
Introduzione a Amazon Elastic Container ServiceIntroduzione a Amazon Elastic Container Service
Introduzione a Amazon Elastic Container Service
 

Aw some day_essentials3.2ish_072214

  • 1. Copyright © 2013, 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. This work may not be reproduced or redistributed, in whole or in part, without prior written permission from Amazon Web Services, Inc. Commercial copying, lending, or selling is prohibited. Corrections or feedback on this course? Email aws-course-feedback@amazon.com Other questions? Email us at aws-training-info@amazon.com.
  • 3. AWS Essentials Mark Fei Senior Technical Trainer Copyright © 2013, 2014 Amazon Web Services, Inc. and its affiliates. All rights reserved. This work may not be reproduced or redistributed, in whole or in part, without prior written permission from Amazon Web Services, Inc. Commercial copying, lending, or selling is prohibited. Questions? Email us at aws-training-info@amazon.com.
  • 4. Introduction and Logistics | Welcome Class Introductions Student Guide and qwikLab Logistics, Bathrooms, Breaks Participation Parking Lot
  • 5. Course Overview | Training Agenda 1 AWS Introduction 2 AWS Storage 3 AWS Compute & Networking 5 Deployment & Management 4 Managed Services & Database
  • 7. Introduction to AWS | Overview Module Overview This module describes the history and fundamental elements of Amazon Web Services (AWS), as well as how to navigate the AWS Management Console. It discusses the AWS Global Infrastructure, security measures provided by AWS and basic principles of deploying on AWS.
  • 8. Introduction to AWS | Learning Objectives By the end of this module you will be able to: 1 Navigate the AWS Management Console. 2 Recognize AWS Global Infrastructure. Describe the security measures AWS provides. 3
  • 9. Introduction to AWS | Cloud Computing Compute Security Storage Scaling CDN Backup Database Monitoring Workflow Networking Messaging DNS Load Balancing
  • 11. Introduction to AWS | Amazon History Amazon.com Launched Online Bookstore Amazon Publishing Kindle Launches Amazon Games Jeff Bezos Incorporated the Company Amazon Web Services Launched 1994 1995 2002 2005 2007 2012 2013 Amazon Art
  • 12. Introduction to AWS | History of Amazon Web Services
  • 13. Introduction to AWS | AWS Cloud Computing On Demand} Uniform Pay As You Go Available Compute Security Storage Scaling CDN Backup Database Monitoring Workflow Networking Messaging DNS Load Balancing
  • 14. Introduction to AWS | AWS Infrastructure and Services
  • 15. Introduction to AWS | Amazon Web Services
  • 16. Introduction to AWS | Amazon Web Services AWS Management Console Demonstration
  • 18. Introduction to AWS | Regions and Edge Locations
  • 19. Introduction to AWS | AWS Regions & Availability Zones
  • 20. Introduction to AWS | Achieving High Availability using Multi-AZ
  • 22. Introduction to AWS | Shared Responsibility
  • 23. Introduction to AWS | Physical Security 24x7 trained security guards Locations in nondescript, undisclosed facilities Two-factor authentication for ingress Authorization for data center access
  • 24. Introduction to AWS | Hardware, Software and Network Automated change control process Bastion servers that record all access attempts Firewall and other boundary devices AWS monitoring tools
  • 25. Introduction to AWS | Security & Compliance Resources Secure API access points for encrypted transmission over HTTPS using SSL Cryptographic keys and certificates are required for any user or software program to access an AWS API Security Groups to let you control external access to your instances
  • 26. Introduction to AWS | SSL Endpoints IAM User Accounts Create individual AWS Identity and Access Management (IAM) user accounts so that each user managing AWS has their own security credentials VPC Subnet Control In your Virtual Private Cloud, create low level networking constraints for resource access, such as public and private subnets, internet gateways, and NATs SSL Endpoints Secure Transmission Establish secure communication sessions (HTTPS) using SSL Security Groups Instance Firewalls Configure firewall rule for instances and load balancers using Security Groups
  • 27. Introduction to AWS | Security Groups SSL Endpoints Secure Transmission Establish secure communication sessions (HTTPS) using SSL Security Groups Instance Firewalls Configure firewall rule for instances and load balancers using Security Groups IAM User Accounts Create individual AWS Identity and Access Management (IAM) user accounts so that each user managing AWS has their own security credentials VPC Subnet Control In your Virtual Private Cloud, create low level networking constraints for resource access, such as public and private subnets, internet gateways, and NATs
  • 28. Introduction to AWS | AWS Multi-tier Security Groups
  • 29. Introduction to AWS | Identity and Access Management (IAM) SSL Endpoints Secure Transmission Establish secure communication sessions (HTTPS) using SSL Security Groups IAM Instance Firewalls Configure firewall rule for instances and load balancers using Security Groups User Accounts Create individual AWS Identity and Access Management (IAM) user accounts so that each user managing AWS has their own security credentials VPC Subnet Control In your Virtual Private Cloud, create low level networking constraints for resource access, such as public and private subnets, internet gateways, and NATs
  • 30. Introduction to AWS | Account Control AWS Identify and Access Management (IAM) AWS Identity and Access Management (IAM) enables you to securely control access to AWS services and resources for your users. Using IAM, you can create and manage AWS users and groups and use permissions to allow and deny their permissions to AWS resources. If you are new to IAM, read the IAM Top 10 Best Practices. Note: Master IAM accounts should not be used for production systems!!!
  • 31. Introduction to AWS | Virtual Private Cloud (VPC) VPC SSL Endpoints Secure transmission Establish secure communication sessions (HTTPS) using SSL Security Groups Instance firewalls Configure firewall rule for instances and load balancers using Security Groups IAM User Accounts Create individual AWS Identity and Access Management (IAM) user accounts so that each user managing AWS has their own security credentials Subnet Control In your Virtual Private Cloud, create low level networking constraints for resource access, such as public and private subnets, internet gateways, and NATs
  • 32. Introduction to AWS | Certifications and Accreditations AWS publishes SOC 1 Type II, SOC 2 Type II and SOC 3 reports AWS is PCI DSS Level 1 compliant and ISO 27001 certified AWS has achieved FedRAMP compliance, received authorization from the U.S. Government FISMA Moderate level Authorities to Operate (ATOs) under the Defense Information Assurance Certification and Accreditation Program (DIACAP)
  • 33. Introduction to AWS | Additional Resources Additional Resources Here are some additional resources: More details and up to date information on Global Infrastructure can be found online: http://aws.amazon.com/about-aws/globalinfrastructure/ AWS Management Console: https://console.aws.amazon.com/console/home. AWS Security Assurance and Compliance Programs: https://aws.amazon.com/compliance/ Security Center: http://aws.amazon.com/security IAM Best Practices: http://docs.aws.amazon.com/IAM/latest/UserGuide/IAMBestPractices.html
  • 34. Introduction to AWS | Module Completion and Summary Summary You have reached the end of this training module. In summary, you have learned: • How to navigate the AWS Management Console • What is the AWS Global Infrastructure • Describe the security measures AWS provides
  • 36. AWS Storage | Overview Module Overview This module describes the fundamental elements of AWS Storage with a focus on Amazon Simple Storage Service (S3) and Amazon Elastic Block Store (EBS).
  • 37. AWS Storage | Learning Objectives By the end of this training you will be able to: 1 Identify key AWS storage options. 2 Describe Amazon Elastic Block Store (EBS). Create an Amazon S3 Bucket and manage associated objects. 3
  • 38. AWS Storage | AWS Storage Products and Services Amazon Simple Storage Service Amazon Glacier AWS Storage Gateway Amazon Import/Export Amazon Elastic Block Store
  • 39. AWS Storage | Amazon Simple Storage Service (S3) Storage for the Internet. Natively online, HTTP access Store and retrieve any amount of data, any time, from anywhere on the web Highly scalable, reliable, fast and durable Amazon Simple Storage Service
  • 40. AWS Storage | Amazon S3 Storage Concepts Amazon S3 Concepts Amazon S3 Bucket with Objects Bucket Objec t Amazon S3 stores data as objects within buckets An object is comprised of a file and optionally any metadata that describes that file You can have up to 100 buckets in each account You can control access to the bucket and its objects
  • 41. AWS Storage | Amazon S3 Concepts - Buckets Amazon S3 Buckets Objects are stored in Buckets. Objects can be accessed via a URL: http://johnsmith.s3.amazonaws.com/photos/puppy.jpg • Organize Amazon S3 namespace at highest level • Identify account – storage and data transfer charges • Access Control • Unit of aggregation for usage reporting Amazon S3 Bucket Bucket Object
  • 42. AWS Storage | Amazon S3 Concepts - Objects Amazon S3 Objects Objects are the fundamental entities stored in Amazon S3. When using the console, you can think of them as being files. Objects consist of data and metadata. The data portion is opaque to Amazon S3. The metadata is a set of name-value pairs that describe the object. • Default metadata such as the date last modified • Standard HTTP metadata such as Content-Type • Custom metadata at the time the object is stored • An object is uniquely identified within a bucket by a key (name) Object Bucket w/Objects
  • 43. AWS Storage | Amazon S3 Object Lifecycle Lifecycle Management Lifecycle management defines how Amazon S3 manages objects during their lifetime. Some objects that you store in an Amazon S3 bucket might have a well-defined lifecycle: • Log files • Archive documents • Digital media archives • Financial and healthcare records • Raw genomics sequence data • Long-term database backups • Data that must be retained for regulatory compliance
  • 44. AWS Storage | Amazon S3 Pricing Pricing • Pay only for what you use • No minimum fee • Prices based on location of your Amazon S3 bucket • Estimate monthly bill using the AWS Simple Monthly Calculator
  • 45. AWS Storage | Amazon S3 Facts Facts • Able to store unlimited number of Objects in a Bucket • Objects up to 5TB; no bucket size limit • Designed for 99.999999999% durability and 99.99% availability of objects over a given year • HTTP/S endpoint to store and retrieve any amount of data, at any time, from anywhere on the web • Highly scalable, reliable, fast, and inexpensive • Server-side Encryption using AES 256-bit symmetric keys • Access Logs for auditing • Provides standards-based REST and SOAP interfaces
  • 46. AWS Storage | Amazon Glacier Amazon Glacier Extremely low-cost storage Secure, durable storage for data archiving and backup Optimized for data that is infrequently accessed
  • 47. AWS Storage | Amazon Glacier Storage Facts Facts Offload the administrative burdens of operating and scaling archival storage to AWS, and make retaining data for long periods, whether measured in years or decades, especially simple. Optimized for data that is infrequently accessed and for which retrieval time of several hours are suitable. • No limit to the amount of data you can store in Amazon Glacier. • Automatic Server-side Encryption using AES 256-bit symmetric keys. • Average annual durability of 99.999999999% for an archive.
  • 48. AWS Storage | Amazon Elastic Block Store (EBS) Amazon Elastic Block Store Persistent block level storage volumes for use with Amazon EC2 instances Attach to running instance and expose as a block device Snapshots stored durably in Amazon S3
  • 49. AWS Storage | Amazon EBS Lifecycle
  • 50. AWS Storage | Amazon EBS Facts Facts about Amazon EBS • Use for persistent storage • Can use to create RAID configuration for a server • Off-instance block storage that persists independently • Volumes behave like unformatted block devices for Linux or Windows instances
  • 51. AWS Storage | Amazon EBS Use Case Use Cases OS Boot device / root file system; secondary volumes/filesystems Typical basis for database storage Raw block devices for RAID, some databases
  • 52. AWS Storage | Amazon EBS Pricing Pay for what you Provision • Pricing based on Region • AWS GovCloud (US) Pricing page • Review Pricing Calculator online * Check Amazon EBS Pricing page for current pricing for all regions.
  • 53. AWS Storage | Amazon EBS Best Practices Amazon EBS Volumes are in a Single Availability Zone EBS Volume 1 Availability Zone A EBS Volume 2 Availability Zone B Volume data is replicated across multiple servers in an Availability Zone.
  • 54. AWS Storage | Amazon EBS and Amazon S3 Amazon EBS Amazon S3 Paradigm File system Object store Performance Very fast Fast Redundancy Across multiple servers in an Availability Zone Across multiple facilities and on multiple devices within each facility Security Visible only to your Amazon EC2 Public Key / Private Key Access from the Internet? No (1) Yes (2) Typical use case Its a disk drive Write once, read many (1) Accessible from Internet if mounted to server and set up as FTP, etc. (2) Only with proper credentials, unless ACLs are world-readable
  • 55. AWS Storage | AWS Storage Gateway AWS Storage Gateway Mirror your on-premises data to Amazon EC2 instances Connect an on-premises software appliance with cloud-based storage Securely upload data to the AWS cloud for cost effective backup and rapid disaster recovery
  • 56. AWS Storage | Gateway-Cached Volume Architecture
  • 57. AWS Storage | AWS Storage Gateway Virtual Tape Library
  • 58. AWS Storage | Amazon Import/Export Amazon Import/Export Accelerates moving large amounts of data into and out of Amazon S3 or Amazon EBS Transfers your data directly onto and off of storage devices Uses Amazon high-speed internal network
  • 59. AWS Storage | AWS Import/Export Support Import/Export Support • Accelerates moving large amounts of data into and out of Amazon S3 or Amazon EBS • Transfers your data directly onto and off of storage devices • Uses AWS high-speed internal network
  • 60. AWS Storage | Additional Resources Additional Resources Here are some additional resources: Yelp Amazon Case Study: http://aws.amazon.com/solutions/case-studies/yelp/ Getting Started with Amazon S3 Video: http://www.youtube.com/watch?v=1qrjFb0ZTm8&feature=youtu.be Online Pricing Calculator: http://calculator.s3.amazonaws.com/calc5.html Glacier: http://aws.amazon.com/glacier/ Introduction to Amazon EBS Video: https://us-east-1-aws-training. s3.amazonaws.com/intro/elb.html
  • 61. AWS Storage | Module Completion Summary You have reached the end of this training module. In summary, you have learned: • The key AWS storage options • What is an Amazon Elastic Block Store • How to create an Amazon S3 bucket and manage associated objects
  • 62. Compute Services & Networking
  • 63. Compute Services & Networking | Overview Module Overview This module describes the fundamental elements of AWS Compute and Networking, with a focus on Amazon Elastic Compute Cloud (EC2). This module will build off what you learned in Module 2 by verifying how to use Amazon Elastic Block Storage.
  • 64. Compute Services & Networking | Learning Objectives By the end of this training you will be able to: 1 Identify the different AWS compute and networking options. 2 Describe what is Amazon Virtual Private Cloud (VPC). Create an Amazon Elastic Compute Cloud (EC2) Instance. 3 4 Verify how to use Amazon Elastic Block Storage.
  • 65. Compute Services & Networking | AWS Compute Products and Services Amazon Elastic Compute Cloud (EC2) Amazon Elastic MapReduce (EMR) Auto Scaling
  • 66. Compute Services & Networking | Amazon Elastic Compute Cloud (EC2) Resizable compute capacity Complete control of your computing resources Reduces the time required to obtain and boot new server instances to minutes Amazon Elastic Compute Cloud (EC2)
  • 67. Compute Services & Networking | Amazon EC2 Facts Facts about Amazon EC2 Resizable compute capacity with many instance types Reduces the time required to obtain and boot new server instances to minutes or seconds Scale capacity as your computing requirements change Pay only for capacity that you actually use Choose Linux or Windows Deploy across Regions and Availability Zones for reliability
  • 68. Compute Services & Networking | Using Amazon EC2 How to Use Amazon EC2 Select a pre-configured, Amazon Machine Image (AMI) to get up and running immediately. Or create an AMI containing your applications, libraries, data, and associated configuration settings. Configure security and network access on your Amazon EC2 instance. Choose which instance type(s) you want, then start, terminate, and monitor as many instances of your AMI as needed, using the web service APIs or the variety of management tools provided. Determine whether you want to run in multiple locations, utilize static IP endpoints, or attach persistent block storage to your instances. Pay only for the resources that you actually consume, like instance-hours or data transfer.
  • 69. Compute Services & Networking | Amazon Machine Images (AMI) AMIs Building blocks of Amazon EC2 Instances An AMI is a template of a computer's root volume Can be public or private Create “gold Images” of your Amazon EC2 infrastructure AMI
  • 70. Compute Services & Networking | Infrastructure and Applications Infrastructure and Applications Oracle SAP Microsoft AWS Marketplace
  • 71. Compute Services & Networking | Amazon EC2 Instances
  • 72. Compute Services & Networking | Choosing the Right Instance Your choice of Amazon EC2 instances matters… A larger compute instance will sometimes save you not only time but money too. Paying more per hour for a shorter amount of time can be less expensive. Instances come in multiple sizes, allowing you to optimally scale resources to the requirements of your workload. As you choose an instance type, consider the following: – Core count – Memory size – Storage size & type – Network performance
  • 73. Compute Services & Networking | Amazon EC2 Instances with Intel®
  • 74. Compute Services & Networking | Choosing the Right Instance
  • 75. Compute Services & Networking | Instances with Intel®
  • 76. Compute Services & Networking | Leverage all 3 Instances
  • 77. Compute Services & Networking | Amazon EC2 Instances Pricing
  • 78. Compute Services & Networking | Compute Example
  • 79. Compute Services & Networking | Amazon Virtual Private Cloud (VPC)
  • 80. Compute Services & Networking | Amazon EC2 Security Groups Public Amazon EC2 Virtual Private Cloud Inbound Only Inbound and Outbound TCP, UDP, ICMP only Any Internet Protocol Assigned at launch Can be assigned or removed at anytime, including when running Modify anytime Modify anytime
  • 81. Compute Services & Networking | Amazon Elastic MapReduce (EMR) Easily and cost-effectively process vast amounts of data Utilizes a hosted Hadoop framework Highly scalable Amazon Elastic MapReduce (EMR)
  • 82. Compute Services & Networking | Amazon EMR Example The Amazon EMR job flow runs on a cluster of Amazon EC2 Instances Amazon EMR Job Flow Amazon Simple Storage Service (S3) Amazon CloudWatch Amazon EC2 Instance Input Data Output Results Metrics
  • 83. Compute Services & Networking | Amazon Auto Scaling Auto Scaling Scale your Amazon EC2 capacity automatically Well-suited for applications that experience variability Available at no additional charge in usage
  • 84. Compute Services & Networking | Amazon Auto Scaling Cont. 1 Elastic Capacity 2 Ease of Use 3 Cost Savings 5 Actions 4 Geographic
  • 85. Compute Services & Networking | Trinity of Services
  • 87. Compute Services & Networking | AWS Networking Products & Services Amazon Virtual Private Cloud Amazon Route 53 AWS Direct Connect Elastic Load Balancing
  • 88. Compute Services & Networking | Amazon Virtual Private Cloud (VPC) Amazon Virtual Private Cloud Provision a private, isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define Define a virtual network topology that closely resembles a traditional network that you might operate in your own datacenter You have complete control over your virtual networking environment: selection of IP address range, creation of subnets, configuration of route tables, and network gateways
  • 89. Compute Services & Networking | Amazon VPC
  • 90. Compute Services & Networking | AWS Direct Connect AWS Direct Connect All AWS services, including Amazon EC2 and Amazon S3 can be used with AWS Direct Connect Virtual interfaces can be reconfigured at any time Use the same connection to access public resources such as objects stored in Amazon S3
  • 91. Compute Services & Networking | Networking AWS Direct Connect AWS Direct Connect establishes a dedicated network connection from your premises to AWS. Establish private connectivity between AWS and your datacenter, office, or colocation environment. Create multiple virtual interfaces to use the same connection to access public resources such as Amazon S3 and private resources such as Amazon EC2 instances running within a VPC.
  • 92. Compute Services & Networking | Amazon Route 53 Amazon Route 53 Route end users to Internet applications Provides secure and reliable routing to your application instances Answers DNS queries with low latency by using a global network of DNS servers
  • 93. Compute Services & Networking | Networking with Amazon Route 53 Amazon Route 53 Answers DNS queries with low latency by using a global network of DNS servers. Queries for your domain are automatically routed to the nearest DNS server, and thus answered with the best possible performance. You pay only for managing domains through the service and the number of queries that the service answers.
  • 94. Compute Services & Networking | Elastic Load Balancing (ELB) Elastic Load Balancing Dynamically grows and shrinks required resources based on traffic Supports health checks to ensure detect and remove failing instances Supports the routing and load balancing of HTTP, HTTPS, and TCP traffic to Amazon EC2 instances
  • 95. Compute Services & Networking | Elastic Load Balancing Diagram
  • 96. Compute Services & Networking | Additional Resources Additional Resources Here are some additional resources: Amazon EC2 Instance Types: http://aws.amazon.com/ec2/instance-types/ Service Documentation: http://aws.amazon.com/documentation White Papers: http://aws.amazon.com/whitepapers AWS Free Usage Tier: http://aws.amazon.com/free/ AWS Support: http://aws.amazon.com/premiumsupport/ APN Partners supporting AWS Direct Connect: http://aws.amazon.com/directconnect/partners/ AWS Security Process: http://d36cz9buwru1tt.cloudfront.net/pdf/AWS_Security_Whitepaper.pdf
  • 97. Compute Services & Networking | Module Completion Summary You have reached the end of this training module. In summary, you have learned: Amazon Virtual Private Cloud lets you provision a logically isolated section with complete control over your virtual networking environment, including IP address range, creation of subnets, and configuration of route tables and network gateways VPN and Direct Connect allows you to leverage the AWS cloud as an extension of your corporate datacenter Elastic Load Balancing service provides load balancing across multiple instances in a region Amazon Route 53 is a highly available scalable Domain Name System (DNS) web service
  • 98. Managed Services & Database
  • 99. Managed Services & Database | Overview Module Overview This module describes the fundamental elements of AWS Managed Services and Databases. This module will focus on key aspects of Amazon Relational Database Service (RDS) and how to execute Amazon RDS.
  • 100. Managed Services & Database | Learning Objectives By the end of this training you will be able to: 1 Describe Amazon DynamoDB. 2 Verify the key aspects of Amazon Relational Database Service (RDS). Execute Amazon Relational Database Service. 3
  • 101. Managed Services & Database | Product and Services Amazon ElastiCache Amazon Relational Database Service Amazon DynamoDB Amazon Redshift
  • 102. Managed Services & Database | Amazon Relational Database Service Cost-efficient and resizable capacity Manages time-consuming database administration tasks Access to the full capabilities of familiar MySQL, PostgreSQL, Oracle and SQL Server databases Amazon Relational Database Service
  • 103. Managed Services & Database | Amazon RDS Amazon Relational Database Services (RDS) Easy to set up, operate, and scale a relational database in the cloud Cost-efficient and resizable capacity while managing time-consuming database administration tasks Access to the full capabilities of a familiar SQL database Automatically patches the database software and backs up your database Ability to scale the compute resources or storage capacity associated with your relational database instance via a single API call
  • 104. Managed Services & Database | Amazon RDS & VPC Amazon RDS & VPC You can select your own IP address range. Create subnets, and configure routing and access control lists. The basic functionality of Amazon RDS is the same whether it is running in a VPC or not: Amazon RDS manages backups, software patching, automatic failure detection, and recovery. There is no additional cost to run your DB instance in a VPC.
  • 105. Managed Services & Database | Amazon DynamoDB Store any amount of data – no limits Fast, predictable performance Easily provision and change the request capacity needed for each table using SSDs Amazon DynamoDB
  • 106. Course Overview | Training Agenda If You Need Consider Using A relational database service with minimal administration Amazon RDS, a fully managed service that offers a choice of MySQL, Oracle or SQL Server database engines, scale compute & storage, Multi-AZ availability and more. A fast, highly scalable NoSQL database service Amazon DynamoDB, a fully managed service that offers extremely fast performance, seamless scalability and reliability, low cost and more. A relational database you can manage on your own Your choice of relational AMIs on Amazon EC2 and Amazon EBS that provide scale compute & storage, complete control over instances, and more.
  • 107. Managed Services & Database | Amazon RDS and DynamoDB
  • 108. Managed Services & Database | Amazon ElastiCache Amazon ElastiCache Seamlessly caches in front of Amazon RDS instances Manages patching, cache node failure detection and recovery Memcached and Redis compliant cache cluster on-demand
  • 109. Managed Services & Database | Amazon ElastiCache Security Groups
  • 110. Managed Services & Database | Amazon Redshift Amazon Redshift Petabyte-scale service that manages all the work need to set up, operate, and scale a data warehouse cluster Dramatically reduces IO Continuously monitors the health of the cluster and replaces any component
  • 111. Managed Services & Database | Amazon Redshift Facts Amazon Redshift Amazon Redshift manages all the work needed to set up, operate, and scale a data warehouse cluster, from provisioning capacity to monitoring and backing up the cluster, to applying patches and upgrades. Scaling a cluster to improve performance or increase capacity is simple and incurs no downtime. The service continuously monitors the health of the cluster and automatically replaces any component, if needed. Redshift Redshift Redshift
  • 112. Managed Services & Database | Additional Resources Additional Resources Here are some additional resources: Service Documentation: http://aws.amazon.com/documentation Pricing Calculator: http://aws.amazon.com/calculator/ Economics: http://aws.amazon.com/economics/ Pricing details for all services: http://aws.amazon.com/pricing/ Solutions Case Studies: http://aws.amazon.com/solutions/case-studies Marketing Overview Materials: http://aws.amazon.com Videos & Webinars: http://www.youtube.com/AmazonWebServices AWS Blog: http://aws.typepad.com/
  • 113. Managed Services & Database | Module Completion Summary You have reached the end of this training module. In summary, you have learned: • Describe Amazon DynamoDB • Verify key aspects of Amazon Relational Database Service (RDS) • How to execute Amazon RDS
  • 115. Deployment & Management | Overview Module Overview This module describes the fundamental elements of AWS Deployment & Management products and services.
  • 116. Deployment & Management | Learning Objectives By the end of this training you will be able to: 1 Identify AWS CloudFormation. 2 Describe Amazon CloudWatch metrics and alarms. Describe Amazon Identity and Access Management (IAM). 3
  • 117. Deployment & Management | Product and Services AWS Identity and Access Management Amazon CloudWatch Amazon Elastic Beanstalk Amazon CloudFormation
  • 118. Deployment & Management | AWS Identity and Access Management (IAM) AWS Identity and Access Management (IAM) Create and manage AWS users and groups and use permissions to allow and deny their permissions to AWS resources Enables identity federation between your corporate directory and AWS services Use existing corporate identities to grant secure access to AWS resources, such as Amazon S3 buckets, without creating new AWS identities for those users
  • 119. Deployment & Management | Using AWS IAM
  • 120. Deployment & Management | Amazon CloudWatch Amazon CloudWatch Visibility into resource utilization, operational performance, and overall demand patterns Accessible via AWS Management Console, APIs, SDK, or CLI Custom application-specific metrics of your own
  • 121. Deployment & Management | AWS CloudWatch Facts AWS CloudWatch • Visibility into resource utilization, operational performance, and overall demand patterns • Metrics including CPU utilization, disk reads and writes, and network traffic • Custom application-specific metrics of your own • Accessible via AWS Management Console, APIs, SDK, or CLI
  • 122. Deployment & Management | Amazon Elastic Beanstalk Amazon Elastic Beanstalk Simply upload your application Automatically handles the deployment details of capacity provisioning, load balancing, auto scaling, and application health monitoring Retain full control over the AWS resources powering your application
  • 123. Deployment & Management | AWS Elastic Beanstalk Facts AWS Elastic Beanstalk • Quickly deploy and manage applications in the AWS cloud without worrying about the infrastructure that runs those applications. • Reduce management complexity without restricting choice or control.
  • 124. Deployment & Management | Amazon CloudFormation Create templates of stack of resources Deploy stack from template with runtime parameters Amazon CloudFormation Use templates as a starting point or create your own
  • 125. Deployment & Management | Deployment & Management Amazon CloudFormation Deployment and Management • Templates are simple JSON formatted text files • CloudFormer supports generating templates from running environments "Resources" : { "Ec2Instance" : { "Type" : "AWS::EC2::Instance", "Properties" : { "SecurityGroups" : [ { "Ref" : "InstanceSecurityGroup" } ], "ImageId" : { "Fn::FindInMap" : [ "RegionMap", { "Ref" : "AWS::Region" }, "AMI" ]}, "Tags" : [{ "Key" : "MyTag", "Value" : "TagValue" }] } },
  • 126. Deployment & Management | Deployment & Management
  • 127. Deployment & Management | Additional Resources Additional Resources Here are some additional resources: AWS CloudFormation Sample Templates: https://aws.amazon.com/cloudformation/aws-cloudformation-templates/ AWS User Groups: http://aws.amazon.com/usergroups/ Introduction to AWS IAM Training Video: https://us-east-1-aws-training. s3.amazonaws.com/intro/iam.html
  • 128. Deployment & Management | Module Completion Summary You have reached the end of this training module. In summary, you have learned: • The key fundamental elements of AWS Deployment & Management products and services.
  • 129. Completion | Training Next Steps