Account Management, Billing & Support Flashcards
AWS Organizations
• Global service
• Allows to manage multiple AWS accounts
Cost Benefits:
• Consolidated Billing
• Pricing benefits from aggregated usage
• Pooling of Reserved EC2 instances for optimal savings
• API is available to automate AWS account creation
• Restrict account privileges using Service Control Policies (SCP)
Multi Account Strategies
Create accounts per department, per cost center, per dev/test/ prod, based on regulatory restrictions (using SCP), for better resource isolation (ex: VPC), to have separate per-account service limits, isolated account for logging
Use tagging standards for billing purposes
• Enable CloudTrail on all accounts, send logs to central S3 account
• Send CloudWatch Logs to central logging account
Service Control Policies (SCP)
• Whitelist or blacklist IAM actions
• Applied at the OU or Account level
• Does not apply to the Master Account
• SCP is applied to all the Users and Roles of the Account, including Root user
• The SCP does not affect service-linked roles
• SCP must have an explicit Allow
AWS Organization – Consolidated Billing
• Combined Usage: combine the usage across all AWS accounts in the AWS Organization to share the volume pricing, Reserved Instances and Savings Plans discounts
• One Bill
• The management account can turn off Reserved Instances discount sharing
AWS Control Tower
Easy way to set up and govern a secure and compliant multi-account AWS environment based on best practices
Benefits:
• Automate the set up of your environment in a few clicks
• Automate ongoing policy management using guardrails
• Detect policy violations and remediate them
• Monitor compliance through an interactive dashboard
Pricing Models in AWS
• Pay as you go: pay for what you use, remain agile, responsive, meet scale demands
• Save when you reserve: minimize risks, predictably manage budgets, comply with long-terms requirements
• Pay less by using more: volume-based discounts
• Pay less as AWS grows
Free services & free tier in AWS
• IAM
• VPC
• Consolidated Billing
• Elastic Beanstalk
• CloudFormation
• Auto Scaling Groups
Compute Pricing – EC2
• Only charged for what you use
• Number of instances
• Instance configuration
• ELB running time and amount of data processed
• Detailed monitoring
Compute Pricing – EC2 (Instances)
On-demand instances:
• Minimum of 60s
• Pay per second (Linux/Windows) or per hour
Reserved instances:
• Up to 75% discount compared to On-demand on hourly rate
• 1- or 3-years commitment • All upfront, partial upfront, no upfront
Spot instances:
• Up to 90% discount compared to On-demand on hourly rate
• Bid for unused capacity
Dedicated Host:
• On-demand
• Reservation for 1 year or 3 years commitment
Savings plans as an alternative to save on sustained usage
Compute Pricing – Lambda / ECS / Fargate
Lambda:
• Pay per call
• Pay per duration
ECS:
• EC2 Launch Type Model: No additional fees, you pay for AWS resources stored and created in your application
Fargate:
• Fargate Launch Type Model: Pay for vCPU and memory resources allocated to your applications in your containers
Storage Pricing – S3
• Storage class: S3 Standard, S3 Infrequent Access, S3 One-Zone IA, S3 Intelligent Tiering, S3 Glacier and S3 Glacier Deep Archive
• Number and size of objects: Price can be tiered (based on volume)
• Number and type of requests
• Data transfer OUT of the S3 region
• S3 Transfer Acceleration
• Lifecycle transitions
Storage Pricing – S3
• Storage class: S3 Standard, S3 Infrequent Access, S3 One-Zone IA, S3 Intelligent Tiering, S3 Glacier and S3 Glacier Deep Archive
• Number and size of objects: Price can be tiered (based on volume)
• Number and type of requests
• Data transfer OUT of the S3 region
• S3 Transfer Acceleration
• Lifecycle transitions
Storage Pricing - EBS
• Volume type (based on performance)
• Storage volume in GB per month provisionned
• IOPS (Input/Output Operations per Second)
Snapshots:
• Added data cost per GB per month
Data transfer:
• Outbound data transfer are tiered for volume discounts
• Inbound is free
Database Pricing - RDS
• Per hour billing
• Database characteristics: Engine, Size & Memory class
Purchase type:
• On-demand
• Reserved instances with required up-front
• Backup Storage: There is no additional charge for backup storage up to 100% of your total database storage for a region.
Database Pricing - RDS 2
• Additional storage (per GB per month)
• Number of input and output requests per month
Deployment type (storage and I/O are variable):
• Single AZ • Multiple AZs
Data transfer:
• Outbound data transfer are tiered for volume discounts
• Inbound is free