Architecture & Ecosystem Flashcards
Well Architected Framework
guiding principles
- Stop guessing about capacity
- test at production scale
- automate
- Evolutionary architectures
- Data driven architectures
- game days
AWS Cloud Best Practices - Design
- scaleable (horizontal and vertical)
- Disposable resources
- Automation (serverless, IaaS, Auto scaling
- Loose coupling
- no monoliths
- failures don’t cascade across the system
- Services not servers
- not just ec2
- usage managed services
6 Pillars of WAF
1 Operational excellence
1 Security
3 Reliability
4 Performance efficiency
5 Cost optimization
6 Sustainability
WAF: Operational Excellence
run and monitor systems to deliver business value with continual improvement
- Design principles
- operations and infra as code
- annotate documentation
- small, frequent, reversible changes
- refine operations procedures often
- anticipate failure
- learn from all failures
WAF: Security design principles
protect information, systems and assets
- strong identity, least priv
- traceabbility
- security at all layers
- automate security best preactices
- proect data in transit and rest
- keep people away from data
- prepare for security events
- shared responsibility model
WAF: Reliability Design Principles
Ability of system to recover from disruptions, scale, and mitigate problems
- Test recovery procedure
- automate failure recovery
- Xc ale horizontally to increase aggregate availability
- stop guessing capacity
- Manage change in automation
WAF Performance Efficiency
Ability to use computing resources efficiently and maintain it
- Democratize advanced technologies
- Go global in minutes
- Use serverless architectures
- Experiment more often
- Machanical sympathu (be aware of all services)
WAF: Cost Optimization
Ability to run systems to deliver business value at lowest cost
- Adopt consumption model
- Use cloudwatch to measure efficiency
- Analyze and attribute expenses
- Use managed and application services to lower TCO
WAF: Sustainability
Minimize environmental impacts of cloud workloads
- Understand your impact (performance indicators)
- Establish sustainability goals, model ROI
- Maximize utilization
- Adopt more efficient tech over time
- Use managed services
- Reduce the downstream impact of your workloads (stuff under your control to fulfill)
AWS Well Architected Tool
Free tool to review architecture against 6 pillars
* answer questions
* Get advice, videos, etc.
* Enter account IDs
* Apply lenses (WAF, FTR, SAAS, Serverless, etc.)
* Report with risks, save as milestone, improvement plans
AWS CAF
Cloud Adoption Framework
(white paper)
Build and execute a comprehensive plan for digital transformation through AWS
- Created by AWS professionals using best practices
- Identifies specific organizational capabilities
- 6 perspectives
6 Perspectives of CAF
- Business
- People
- Governance
- Platform
- Security
- Operations
CAF Business perspective
Ensure cloud investments accelerate digital transformation and business outcomes
- Strategy
- portfolio
- innovation
- product
- strategic partners
- data monetization
- data science
CAF People perspective
Serves as a bridge between tech and business, accelerating the cloud journey
- transformational leadership
- culture evolution
- cloud fluency
- workforce transformation
- change acceleration
- organizational design/alignment
CAF Governance perspective
Orchestrate cloud initiatives while maximizing organizational benefits and minimizing transformation related risks
- program/project management
- benefits/risk management
- data governance & curation
- cloud finops
- application portolio management
CAF Platform perspective
Build enterprise-grade, scalable, hybrid cloud platform, modernize existing workloads, implement cloud native on new solutions
- platform architecture
- data architecture
- platform/data engineering
- provisioning and orchestration
- application development
- ci/cd
CAF Security perspective
Achieve confidentiality, integrity and availability of data and cloud workloads
- Governance & assurance
- Identity and access management
- threat detection
- vulnerability management
- infra & data protection
- application security
- incident response
CAF Operations perspective
Ensure cloud services delivered at a level that meets the business need
- observability
- event management (AIOps)
- incident and problem management
- change and release management
- performance and capacity management
- configuration management
- patch management
- availability, continuity, application management
CAF Transformation domains
- Technology use cloud to migrate and modernizing infra, apps, data, analytics
- Process
- leveraging new data & analytics
- ML
- Organization (reimagine operating model)
- organize teams around products/value streams
- use agile methods
- Product (reimagine business model creating new value props (product and services) and revenue models
CAF Transformation phases
- Envision demonstrate how cloud drives outcomes with opportunities
- Align (identify gaps across 6 CAF perspectives), get action plan
- Launch deliver pilots in production
- Scale to get desired benefits
AWS Right Sizing
Matching instance types and sizes to your workload performance and capacity at lowest cost
- Before a cloud migration
- Continuously after onboarding
AWS Partner Solutions
(FKA QuickStarts)
- Gold standard deployments in AWS
- Build prod quickly with templates
- Example: Wordpress on AWS
- Leverages cloudformation
AWS Solutions
Vetted solutions for AWS cloud
Example: landing zones, Now AWS control tower
AWS Marketplace
- Digital catalog with thousands of software listings from 3rd parties
- Examples
- customer AMI
- cloudformation templates
- SaaS
- containers
- Goes on AWS bill
- You can sell there too
APN
AWS Partner Network
Professional services organization
- Tech partners
- Consulting partners
- training partners
- competencies program
- Navigate program (to become better partners)
AWS IQ
- Find professionals (AWS certified) for help with AWS projects
- engage and pay for on-demand project work
- video, contract management, collaboration tools, and billing
AWS Repost
Q&A service with crowd-sourced, expert review answers (like stack overflow)
- part of tree tier
- community members earn reputation points
- if not answers, goes to AWS engineers (if premium)
- Not intended for time-sensitive or propriety information
AWS AMS
Amazon Managed Services
- provides infra and application support
- Team of AWS experts of manage and operate your infra
- Offload routine management tasks
- fully managed service (change requests,monitoring, patch management, etc)
- business hours 24/365
