6: 3 Cloud Building Blocks Flashcards
Virtualized Servers
Run in cloud data centers
Machine Image
Template of OS and other software/machine characteristics for the server being created
Instance Type
Different configurations of processor/computing details of the server being created
Security Group
Firewall rules for instance
Key pair
Key used to access the machine as it launches
Splitting user resources across zones
Insulates against failures in a single zone
Storage
Fundamental building block of cloud, stores and archives data
Block Storage
Allocate large chunk of storage and partition it (hard drive), managed by an OS
Object Storage
Stores files as individual objects managed by the cloud service provider
Price of block vs object`
Object storage is much cheaper - only pay for what you need, not what you can need
Cloud Storage Security Issues
1) Permissions properly
2) Encrypt sensitive data
3) Replicate copies of data to multiple data centers
vLAN
Virtual LAN - separate systems of differing security levels
VPC
Virtual Private Cloud - Can create instances for different security levels
VPC Endpoints
Provide secure VPC interconnection
SDN
Software Defined Networking - Automates cloud networking (integrates cloud providers API into your operations stack).
SDV
Software Defined Visibility - Uses cloud providers API to gain visibility into network traffic
Build Database on Virtualized Server
Resembles on-premises operations, requires customer managed of servers/databases, spinning up a server and installing databases on them
Using a managed database service
Request database from cloud provider using platform of choice, and then cloud provider holds maintenance (more expensive)
Using a Cloud-native database paltform
Allows use of database environments designed specifically for cloud, high degree of optimization but requires retooling of existing applications. Places management burden on the provider.
Hybrid Environments
Balancing workload between private cloud and private datacenters
Cloud orchestration
Automates cloud management
Infrastructure as Code
Admins should never build/manage resources using command line - should write code that performs such functions.
Containers
Lightweight application virtualization - so it can easily move between hardware platforms. Lightweight alternative to virtual servers, using host OS.
What do containers contain
Application code and dependencies only
What do contains run on
Containerization platforms, not hypervisor
