Cloud Technology Flashcards
You manage the server that can be physical or virtual as well as the OS and the data center provider will have no access to your server.
Infrastructure As A Service (IAAS)
Amazon EC2
Someone else manages the underlying hardware and os. You just focus on your apps. - someone else worries about security patching, updates and maintenance.
Platform As A Service (PAAS)
GoDaddy - you upload a bunch of website code and point your domain name to it.
Amazon LightSail
Amazon Beanstalk
All you manage is your inbox (or the software provided to you by Google) and Google takes care of the data centers, servers, networks, storage, maintenance, patching - etc
Software As A Service (SAAS)
Gmail
EC2 and Lambda
Compute
Relational Database Service (RDS)
DynamoDZB (Non Relational Databases - NOSQL)
Databases
Simple Storage Service - S3
Glacier
Storage
VPC
Route53
Networks
Data Center
AZ
Geographical area consisting of 2 or more AZs
Region
SLA
Service Level Agreement
How do billing alarms notify you when an alarm is triggered
Simple Notification Service
SNS Topic. - via email
JSON syntax: Statement
Effect
Action
Resource
Multi-factor authentication can be set up with
Google Authenticate
IAM Best Practice: Root account should only used to create your account
Do not use it to log in
IAM Best Practice: One user should equal one real human being.
Do not create phantom users
IAM Best Practices: Always place users in groups and then apply policies to the groups
User/Group/Policies - makes management easier
IAM Best Practices: Have this policy for passwords
Strong - rotation
IAM Best Practice: where possible ALWAYS enable
MFA
IAM Best Practice: Used these to access various other AWS services.
Roles
IAM Best Practices: Use these for programatic access to AWS
Access Keys
IAM Best Practices: To audit the permissions of your users and accounts use
IAM Credential Reports
Avoid this when possible concerning policies
Granting them to individual users as this could become problematic - instead place the users into groups
IAM service that lists All Users, passwords, accesses keys and MFA of the account
Credential Report
