Everything Flashcards
idk i just want flashcards
IaaS
Infrastructure as a Service - Most control, most setup
PaaS
Platform as a Service - Middle ground of IaaS and SaaS
SaaS
Software as a Service - Least control, least setup
Regions
Cluster of Data Centers
Availability Zone
Each region has between 3-6, completely isolated from each other.
Shared Responsibility Model
Customer is responsible for security IN the cloud, Amazon is responsible for security of the cloud
Customer Ex: Customer data, access management (IAM), firewall configs, encryption, etc.)
Amazon Ex: Software (compute, storage, db, networking), regions, edge locations, etc.)
IAM
Identity Access Management. How you control users in your AWS account
Groups
Collection of users. Users can belong to multiple groups.
Policies
Policies are applied to users/groups that dictates what they can/can’t do
AWS Management Console
Web interface to manage AWS services and resources
AWS Command Line Interface (CLI)
Alternative to AWS Management Console
AWS Software Dev Kit (SDK)
Language specific API’s
Access Key
~= Username
Secret Access Key
~= Password
IAM Best Practices
One AWS user = one person
Assign perm’s to groups, not individuals
Strong pswd policy + MFA
Access keys for CLI/SDK. Don’t share them!
EC2
Resizable virtual serves in the cloud. Allows for customers to have serverless architecture
Instance Types
General Purpose
Compute Optimized
Memory Optimized
Storage Optimized
Security Groups
Control traffic in/out of EC2 instances (Like firewalls)
Important Ports
21 - FTP
22 - SSH, SFTP
80 - HTTP
443 - HTTPS
3389 - RDP
Reserved Instances
Bought for 1 or 3 years, long-term. Better discounts
On-demand Instances
Good for short work loads, predictable pricing
Convertable Reserved Instances
Like reserved, but can change instance type
Spot Instances
Cheap instances that can be taken over by others willing to pay more. Cheapest, but unreliable
Dedicated Host Instances
Booking an entire instance
EBS (Elastic Block Store) Volume
Block storage for EC2 Instances.
EBS Snapshots
Backup of an EBS Volume. Also how you ‘restore’ (move) EBS Volumes to other regions
AMI (Amazon Machine Image)
Customization of an EC2 instance. Add own software, config, OS, monitoring, etc.)
EC2 Image Builder
Automate creation of virtual machines or container images
EC2 Instance Store
Temporary storage for EC2, data lost on stop or terminate.
EFS (Elastic File System)
Scalable, shared file storage for EC2. Managed network file system, can be mounted to 100’s of EC2 instances ACROSS AZ’s
FSX
Windows native shared file system
Vertical Scalability
Increase size of an instance (non-distributed systems) Building tall in Civ
Horizontal Scalability
Increasing the amount of instances (distributed systems) Building wide in Civ
Elasticity
‘Auto-scaling’ to scale based on usage. Matching performance w/ needs
ELB (Elastic Load Balancer)
ELB directs traffic to available instances downstream to increase performance
4 Types of load balancers
- Applications (Layer 7)
- Network (Layer 4)
- Gateway (Layer 3)
ASG (Auto Scale Groups)
Automatically scales EC2 Instances
ASG Scaling Strategies
- Manual
- Target Tracking - ‘Want average ASG CPU @ 40%’
- Simple/Step - ‘If (x>7) add 2 units
- Scheduled - Increase capacity @ certain time
- Predictive - Uses machine learning to predict future traffic spikes/dips
S3
Scalable object storage for data.
S3 Buckets
Store objects (files) in buckets (directories/folders) on S3
S3 Objects
Files in S3
S3 Security
IAM Policies for users
Bucket policies or ACL (Access control lists) for resources
Bucket Policies
JSON Based
resource - what bucket to apply to
effect - allow/deny actions
principal - bucket to apply policy to
S3 Versioning
Save versions of files that are changed in S3
CRR (Cross-Region Replication) and SSR (Same-Region Replication)
Replicates object across/within region
S3 Storage Classes
6 Classes (Use cases listed for each)
1. General Purpose - Big data analytics, content distribution
2. Infrequent Access - Backups. Rapid access when needed
3. One Zone Infrequent - Secondary Backups
4. Glacier - Data accessed once per quarter
5. Glacier flexibile retrieval - idk
6. Glacier Deep Archive - Infrequent Access
Server-Side Encryption
Server encrypts file after receiving it (on by default)
IAM Access Analyzer for S3
Monitor bucket access
Snow Family
Portable devices to migrate data from on-premise locations to AWS.
Snowcone - Smaller
Snowball Edge - Bigger
Relational DB’s
SQL. Links between DB’s.
Non-Relational
No-SQL. Built for specific data models
RDS
Relational DB for SQL
Aurora
Cloud optimized for PostgreSQL and MySQL. More cost effective than RDS (proprietary)
ElastiCache
Managed in-memory caching service to make RDS databases run faster. Reduces load on main DB.
DynamoDB
NoSQL. Fully managed w/ replication across 3 AZ’s w/ extremely low latency
Redshift
SQL. Managed data WAREHOUSE for big data analytics.
EMR (Elastic MapReduce)
Uses HADOOP to utilize clusters of EC2 instances to analyze data
Athena
Serverless query service for S3 data using SQL.
Quicksight
Create dashboards on data for user insights
DocumentDB
Implementation for MongoDB (NoSQL)
Neptune
Used for graph db’s. (Ex: Wikipedia, social networking, etc.)
Timestream
Time series DB
Amazon QLDB
Ledger for recording financial transactions
Managed Blockchain
Hyperledger & Ethereum
Glue
ETL Service (prepare data for loading)
DMS
DB migration service, migrate DB’s to other DB’s.
Note: If you’re migrating a linux machine that has a DB on it, you wouldn’t use DMS. Instead, use application migration service. (You’re migrating the Linux machine that HAS a DB, but not a DB itself)
Docker
Software dev tool to package apps to run on any OS
ECS (Elastic Container Service)
Launch docker containers on AWS
Fargate
Launch docker containers w/o needing to provision
ECR (Elastic Container Registry)
Store docker images to be run by ECR/Fargate
EKS
Kubernetes service
Lambda
For executing individual functions. Pay per request & compute time.
API Gateway
For if you want to build a serverless HTTP API
Batch
Fully managed batch processing server (Batch = function has a start and an end, not continuous)
Light sail
Pretty much easy option for people who don’t wanna learn AWS. Servers, storage, DB’s, networking, all centralized. For quick projects