Lecture 16: Account Management and billing Flashcards
_________ is a global service that allows you to manage multiple AWS accounts
AWS organizations
- Consolidated billing across all accounts- single payment method
- Pricing benefits from aggregated usage
- Pooling of reserved EC2 instance for optimal savings
What are the cost benefits by using AWS organizations?
AWS organization also has an API available to do what?
Automate AWS account creation
With AWS organizations you can restrict account privileges using what?
Service control policies (SCP)
With AWS organizations, you can have a ________ where you create accounts per department, per cost center, per dev/ test/ prod, based on regulatory restrictions (using SCP) for better resource isolation (ex. VPC) to have separate per account service limits, isolated account for logging
Multi- account strategies
_______ allow you to whitelist or blacklist IAM actions, and its applied at the OU or account level
Service control policies (SCP)
User and roles related to SCP
SCP is applied to all the _____________ of the account, including root
- Restrict access to certain services (for example: can’t use EMR)
- Enforce PCI compliance by explicitly disabling services
What are the different use case for SCP?
When __________ is enabled it provides you with combined usage and one bill for all AWS accounts in the AWS organization
AWS- Organization consolidated billing
What is combined usage?
Combine the usage across all AWS accounts in the AWS organization to share the volume pricing, reserved instances and saving plans discounts
_________ is an easy to setup a secure and compliant multi-account AWS environment based on best practices
AWS control Tower
With __________ you can share AWS resources that you own with other AWS accounts
AWS Resources Access Manager (AWS RAM)
_________ allows you to make a quick self service portal to launch a set of authorized products pre-defined by admins
AWS service catalog
- Pay as you go- pay for what you use
- Save when you reserve- minimize risk, predictably manage budgets, comply with long term requirements
- Pay less by using more- volume based discounts
- Pay less as AWS grows
What are the 4 different pricing models in AWS?
- IAM
- VPC
-Consolidated billing - Elastic beanstalk
- ClodFormation
- Auto scaling groups
- Even though they are free you still pay for the resources created
What are the free services in AWS?
- On-demand instances (minimum of 60s, then pay per second)
- Reserved instances (up to 75% discount compared to on demand on hourly rate, 1 or 3 yr commitment, all upfront, partial upfront, no upfront)
- Spot instances (up to 90% discount compared to on demand on hourly rate, bid for unused capacity)
- Dedicated host (on demand, reservation for 1 or 3 yr commitment)
5, Saving plans ( as an alternative to save on sustained usage)
What are the different compute pricing for EC2 instances?
1 Lambda you pay per call & per duratin
- ECS - you pay for AWS resources stored & created in your application
- Fargate: pay for vCPU & memory resources allocated to your application in your containers
What is the compute pricing model for Lamdba & ECS, & fargate?
- Pay based on number & size of object (price can be tired based on volume)
- Pay for data transfer out of S3 region
- Pay for lifecycle transitions
What is the storage pricing model & EFS?
- Pricing is based on storage volume in GB per month provisioned
- Pay for snapshots
- Pay for data transfers (pay for any data transfer out but data transfer in is free)
What is the storage pricing for EBS?
- Pay per hour billing
- Pay for database characteristics (like engine, size, memory class)
- Can have on demand pricing or reserved instances pricing
- Data transfer out (any inn is free)
What is the database pricing model for RDS?
Pricing is different across different regions, & pay for any data transfer out (in is always free)
- Pay also for the number for HTTP?HTTPS requests
What is the pricing model for cloudfront?
For networking cost you should use ____________ instead of public IP for good savings and better network performance & use the same AZ for maximum saving s
Private IP
Using the ________ you commit a certain amount of money per hour for 1 or 3 yrs
Saving Plans
- EC2 saving plan (commit to usage of individual instance families in a region)
- Compute saving plan (up to 66% discount compared to on demand regardless of family, region, size, OS, tenancy, compute options
What are the different types of Saving plans?
__________ is used to reduce cost & improve performance by recommending optimal AWS resources for your workloads & it also uses machine learning to analyze your resources configurations & their utilization CloudWatch metrics
AWS compute Optimizer
- Pricing calculator (estimate the cost for your solution architecture)
What are the different tools to use to estimate cost in the cloud?
- Billing dashboard
- Cost allocation tags
- Cost & usage reports
- Cost explorer
What are the different tools used to track cost in the cloud?
- Billing alarms
2.Budgets
What are the different tools used to monitor against cost plans
___________ is used to track your AWS costs on a detailed level & can used AWS generated tags (ex. aws:createdBY) or User - defined tags (starts with prefix “user”)
Cost allocation tags
________ are used for organizing resources & can also be used to create resource groups
Tags
___________ contains the most comprehensive set of AWS cost and usage data available including additional metadata about AWS services, pricing, and reservation (ex. Amazon EC2 Reserved instances (RIs)
Cost & Usage Reports
__________ allows you forecast usage up to 12 months based on previous usage its also used to visualize, understand, & manage your AWS costs & usage over time. You can also create custom reports that analyze cost & usage data. Can use it to choose an optimal saving plan (to lower prices on your bill)
Cost explorer
Billing metric is only stored in _______________ & billing data is for overall worldwide AWS cost
CloudWatch US-East 1
__________ creates budgets & sends alarms when cost exceeds the budget
AWS budget
___________ continuously monitor your cost & usage musing ML to detect unusual spends
AWS cost Anomaly detection
Limit
A quotas is a __________
__________ notify you when you’re close to a service quota value threshold
AWS service Quotas
__________ analyze your AWS account & provides recommendations on 6 categories & to get full sets of checks you need to have a business & enterprise support plan
Trusted Advisor
With AWS basic support plan you get ___________ 24x7 access to customer service, documentation, whitepaper, and support forums & its completely free
Customer service & communities
- AWS trusted Advisor
- AWS personal health dashboard
What are other resources you get with AWS basic support plan?
Business hours email access
With AWS developer support plan you get everything on the basic plan & also __________ to cloud support associates, case severity/response time
AWS Business support plan (24/7) is used when you have ______________ & you also get full access of the trusted advisor such as full checks & API access, get access to 24/7 phone, email, & chat access to cloud support engineers, also get access to infrastructure event management for additional fee & related to case severity if you have production system impaired you’ll get a response time in less thana 4 hours & when your production system is down support response in less than 1 hour
Production workloads
AWS enterprise on- ramp support plan is used when you have _______________ & you get access to all business support plan features, access to a pool of technical account managers (TAM), concierge support team (for billing & account best practices) & infrastructure event management, well-architected & operation reviews & in terms of case severity & response time same as for business support plan but if business ciritical system is down get response in less then 30 minitues
Production or business critical workloads
AWS enterprise support plan 24/7 is used if you have ________________, get access to all business support plan, access to a designated technical account manager (TAM), concierge support team, infrastructure event management, well-architected & operations reviews & in terms of case severity if business critical system is down get response in less than 15 minutes
Mission critical workloads
____________ is an online tool that provides you real time guidance to help you provision your resources following AWS best practices, including performance, security, and fault tolerance, but also cost optimization and service limits.
AWS Trusted Advisor
Business Support Plan is the ___________ option that offers 24×7 phone, email, and chat support.
most cost-effective support plan
________ gives you the ability to set custom budgets that alert you when your Cost and usage exceeds (or are forecasted to exceed) your budgeted amount. Difference with CloudWatch Billing Alarms: CloudWatch
Billing Alarms only send alerts when your costs and usage are exceeding your budget, not when it is forecasted to exceed your budget, while AWS Budgets does both.
AWS Budgets
___________ provide the most flexibility and help to reduce your costs by up to 66% in exchange for a commitment to a consistent amount of usage for a 1 or 3 year term. These plans automatically apply to EC2 instance usage regardless of instance family, size, AZ, region, OS or tenancy, and also apply to Fargate or Lambda usage.
Compute Savings Plans
With Linux EC2 instances, you pay per __________ of compute capacity. There is also a minimum of 60s of use.
per second
___________ are available for EC2 Reserved Instances, DynamoDB Reserved Capacity, ElastiCache Reserved Nodes, RDS Reserved Instance, Redshift Reserved Nodes. ___________ allow you to minimize risks, predictably manage budgets and comply with long-term requirements.
Reservations
_________ are good and more cost-effective (up to 69% discount compared to On-demand pricing, depending on the upfront) for long workloads. You can ________ instances for 1 or 3 years in RDS.
Reserved Instances