Deploy and Manage Infrastucture at Scale Flashcards
What is CloudFormation?
Infrastucture as Code.
It’s like a template for group of cloud services, that allows to set it’s security group for all of them and then create them in the right order and configuration per specification on the go.
What are the benefits of using CloudFormation.
No need for manual creation (excellent for control)
Changes to infrastructure can be reviewed before ‘merged’
Allows for a very good estimation of the price tag.
Allows to create, recreate and destroy whole infrastructure on the fly
Allows for use of templates from the internet
Supports almost all AWS resources.
What is Infrastructure Composer?
It allows to visualize the cloudformation stack with all it’s resources and security groups
What is Cloud Development Kit (CDK)?
Allows to define cloud infrastucture in a familiar code such as Java / Python / .NET etc.
This then gets translated to cloudformation json/yaml.
What is a 3-tier architecture?
First connects to ELB
then the auto scaling group of EC2 instances
and then Amazon RDS for a database
What is AWS Elastic Beanstalk?
It is a PaaS.
a lot of things can be configured but are taken care of by Elastic Beanstalk.
Only part we are responsible for is the code that we want to deploy.
Behind it are the same components as we saw before (EC2, ASG, ELB, RDS etc..)
Is there any Health Monitoring on Beanstalk?
Yes, underlying services update beanstalk with their health status.
What is AWS CodeDeploy?
It works with EC2 Instances and on prem servers.
It’s a hybrid service.
Used to upgrade instances from v1 to v2.
What is CodeCommit?
A competitor to github.
What is CodeBuild?
Builder Job like in pipeline
What is AWS CodePipeline?
It’s a coordinator between Git Repo, CodeBuild, CodeDeploy etc …
What is AWS CodeArtifact?
It’s like a maven repo for all needed code dependencies.
What is AWS Systems Manager (SSM)
Operational Insights about the state of your infrastructure.
Suite of 10+ products
Way to patch EC2 Instances or on-prem services this is this.
How to use SSM?
It needs to be installed on the EC2 / on prem and it’s installed by default on Amazon Linux AMI. The EC2 also need to have an IAM Role named SSMCore
With it we can run commands patch and configure our servers from the Session manager instead of ssh. (allows better security as the port 22 can be closed and no ssh keys are needed)
What is SSM Parameter Store?
Place to securely store config and secrets
