SlideShare une entreprise Scribd logo
1  sur  124
© Digital Cloud Training | https://digitalcloud.training
SECTION 7
DNS, Elastic Load Balancing, and Auto
Scaling
© Digital Cloud Training | https://digitalcloud.training
DNS and Amazon Route 53
© Digital Cloud Training | https://digitalcloud.training
The Domain Name System (DNS)
User enters website
address in browser
Domain name is resolved
to the IP address of the
webserver
DNS Server
Name Type Value
mycompany.local A 192.168.0.1
emailserver.local A 192.168.0.2
Web Server
Computer connects to
192.168.0.1
© Digital Cloud Training | https://digitalcloud.training
Amazon Route 53
Amazon Route 53
example.com
Availability Zone
Public subnet
Region
VPC
Web Server
(8.1.2.1)
What’s the IP address
for example.com?
Address is 8.1.2.1
HTTP GET to IP address
(8.1.2.1)
A hosted zone represents a
set of records belonging to a
domain
© Digital Cloud Training | https://digitalcloud.training
Amazon Route 53 Routing Policies
Routing Policy What it does
Simple Simple DNS response providing the IP address associated with a name
Failover If primary is down (based on health checks), routes to secondary destination
Geolocation Uses geographic location you’re in (e.g. Europe) to route you to the closest
region
Geoproximity Routes you to the closest region within a geographic area
Latency Directs you based on the lowest latency route to resources
Multivalue answer Returns several IP addresses and functions as a basic load balancer
Weighted Uses the relative weights assigned to resources to determine which to route to
© Digital Cloud Training | https://digitalcloud.training
Amazon Route Features
Amazon Route 53
Hosted zone
example.com
dctlabs.com
EC2 Instances
Health Checks
Domain Registration
.net
.com
.org
Traffic Flow
© Digital Cloud Training | https://digitalcloud.training
Register Domain with Route
53 (Optional)
© Digital Cloud Training | https://digitalcloud.training
Elasticity: Scaling Up vs Out
© Digital Cloud Training | https://digitalcloud.training
Scaling Up (vertical scaling)
Application
Windows OS
© Digital Cloud Training | https://digitalcloud.training
Scaling Up (vertical scaling)
Application
Windows OS
Scaling up means
adding resources
to the instance
Limitation is that you
have a single point of
failure (SPOF)
© Digital Cloud Training | https://digitalcloud.training
Scaling Out (horizontal scaling)
Windows OS
Application
Windows OS
Application
Windows OS
Application
Windows OS
Application
Scaling out provides
greater resiliency
Scaling out can be
used to add almost
unlimited capacity
© Digital Cloud Training | https://digitalcloud.training
Scaling Up (vertical scaling)
t2.micro, 1
vCPU, 1 GB
RAM
c5.xlarge, 4
vCPU, 8 GB
RAM
© Digital Cloud Training | https://digitalcloud.training
Scaling Out (horizontal scaling)
© Digital Cloud Training | https://digitalcloud.training
Amazon EC2 Auto Scaling
© Digital Cloud Training | https://digitalcloud.training
Amazon EC2 Auto Scaling
Metric reports
CPU > 80%
Availability Zone
Public subnet
Availability Zone
Public subnet
Auto Scaling group
Metrics Metrics
EC2 Instances EC2 Instances
Amazon CloudWatch
CloudWatch
notifies Auto
Scaling to scale
EC2 Auto Scaling
launches extra
instance
EC2 Status
Checks fail
ASG replaces
failed instance
© Digital Cloud Training | https://digitalcloud.training
Amazon EC2 Auto Scaling
• EC2 Auto Scaling launches and terminates
instances dynamically
• Scaling is horizontal (scales out)
• Provides elasticity and scalability
• Responds to EC2 status checks and CloudWatch
metrics
• Can scale based on demand (performance) or on a
schedule
• Scaling policies define how to respond to changes
in demand
© Digital Cloud Training | https://digitalcloud.training
Create an Auto Scaling Group
© Digital Cloud Training | https://digitalcloud.training
Load Balancing and High
Availability
© Digital Cloud Training | https://digitalcloud.training
Load Balancing and High Availability
Cloud
Web Server 1
Web Server 2
Web Server 3
Load Balancer
User 3
User 2
User 1
Each user connects
to example.com
The load balancer
re-routes the
connection
© Digital Cloud Training | https://digitalcloud.training
Fault Tolerance
Memory (RAM)
Processor (CPU)
Hard Disk Drive
Network Card
Hard Disk Drive
Redundant components
allow the system to
continue to operate
The system may fail if
there is no built-in
redundancy
© Digital Cloud Training | https://digitalcloud.training
High Availability and Fault Tolerance
Cloud
Web Server 1
Web Server 2
Web Server 3
Load Balancer
User 3
User 2
User 1
Think of an
availability zone
as a separate
data center
Availability Zone
Availability Zone
Web Server 4
© Digital Cloud Training | https://digitalcloud.training
High Availability and Fault Tolerance
Cloud
Web Server 1
Web Server 3
Load Balancer
User 3
User 2
User 1
Auto Scaling
launches a new
web server
Availability Zone
Availability Zone
Web Server 4
Auto Scaling
Web Server 5
© Digital Cloud Training | https://digitalcloud.training
High Availability and Fault Tolerance
Cloud
Web Server 1
User 3
User 2
User 1
Availability Zone
Web Server 5
Load Balancer
© Digital Cloud Training | https://digitalcloud.training
Amazon Elastic Load
Balancer (ELB)
© Digital Cloud Training | https://digitalcloud.training
Types of Elastic Load Balancer (ELB)
Network Load Balancer
Application Load Balancer
Load Balancer Protocol:
TCP, TLS, UDP, TCP_UDP
Instance Protocol:
TCP, TCP_UDP
Load Balancer Protocol:
HTTP, HTTPS
Instance Protocol:
HTTP, HTTPS
Internet Client
Internet Client
• Operates at the connection level
• Routes connections based on IP protocol data (layer 4)
• Offers ultra high performance, low latency and TLS offloading
at scale
• Operates at the request level
• Routes based on the content of the request (layer 7)
• Supports advanced routing
Application Load Balancer
Network Load Balancer
© Digital Cloud Training | https://digitalcloud.training
Types of Elastic Load Balancer (ELB)
Classic Load Balancer
Load Balancer Protocol:
TCP, SSL, HTTP, HTTPS • Old generation; not recommended for new applications
• Performs routing at Layer 4 and Layer 7
• Use for existing applications running in EC2-Classic
Instance Protocol:
TCP, SSL, HTTP, HTTPS
Classic Load Balancer
Internet Client
Old and shouldn’t be
the exam anymore
Gateway Load Balancer
Load Balancer Protocol:
All packets on all ports • Used in front of virtual appliances such as firewalls, IDS/IPS,
and deep packet inspection systems
Appliance Protocol:
GENEVE
Gateway Load Balancer
VPC Endpoint
New and not yet
on the exam
© Digital Cloud Training | https://digitalcloud.training
Attach an Application Load
Balancer
© Digital Cloud Training | https://digitalcloud.training
Elastically Scale the
Application
© Digital Cloud Training | https://digitalcloud.training
Elastically Scale the Application
EC2
EC2
EC2
Application
Load Balancer
Launch Template
Auto Scaling Group
Target Group
A Launch Template
specifies the EC2
instance configuration
The Application Load Balancer
distributes connections between
targets (EC2 instances)
CloudWatch receives metrics
from ALB and notifies Auto
Scaling if thresholds are
breached
Amazon CloudWatch
© Digital Cloud Training | https://digitalcloud.training
Scaling Policies
© Digital Cloud Training | https://digitalcloud.training
Scaling Policies
• Target Tracking – Attempts to keep the group at or close to the
metric
• Simple Scaling – Adjust group size based on a metric
• Step Scaling – Adjust group size based on a metric – adjustments
vary based on the size of the alarm breach
• Scheduled Scaling – Adjust the group size at a specific time
© Digital Cloud Training | https://digitalcloud.training
SECTION 8
Application Services
© Digital Cloud Training | https://digitalcloud.training
Serverless Services
© Digital Cloud Training | https://digitalcloud.training
Serverless Services
Lambda Function
S3 Static Website SQS Queue
DynamoDB Table
Lambda Function
S3 Bucket
SNS Topic
User uploads a
file through a
static website
Serverless function
processes file
Processed file is
stored in a bucket
Function processes
the message and
stores information in
a database
A notification is sent
using SNS and email
© Digital Cloud Training | https://digitalcloud.training
Serverless Services
• With serverless there are no instances to manage
• You don’t need to provision hardware
• There is no management of operating systems or software
• Capacity provisioning and patching is handled automatically
• Provides automatic scaling and high availability
• Can be very cheap!
© Digital Cloud Training | https://digitalcloud.training
Serverless Services
• Serverless services include:
• AWS Lambda
• AWS Fargate
• Amazon EventBridge
• AWS Step Functions
• Amazon SQS
• Amazon SNS
• Amazon API Gateway
• Amazon S3
• Amazon DynamoDB
© Digital Cloud Training | https://digitalcloud.training
AWS Lambda Functions
© Digital Cloud Training | https://digitalcloud.training
AWS Lambda Functions
Lambda function Developer
Event occurs: Source
can be CLI, API,
SDK or a trigger
Developer uploads
some code
Code is executed
© Digital Cloud Training | https://digitalcloud.training
AWS Lambda Functions
• AWS Lambda executes code only when needed and scales
automatically
• You pay only for the compute time you consume (you pay
nothing when your code is not running)
• Benefits of AWS Lambda:
• No servers to manage
• Continuous scaling
• Millisecond billing
• Integrates with almost all other AWS services
© Digital Cloud Training | https://digitalcloud.training
AWS Lambda Functions
• Primary use cases for AWS Lambda:
• Data processing
• Real-time file processing
• Real-time stream processing
• Build serverless backends for web, mobile, IOT, and 3rd
party API requests
© Digital Cloud Training | https://digitalcloud.training
Create a Simple Lambda
Function
© Digital Cloud Training | https://digitalcloud.training
Create a Simple Lambda Function
Lambda function
Create a function
and add some code
CloudWatch
Logs
Execute function and
write event data to
CloudWatch Logs
© Digital Cloud Training | https://digitalcloud.training
Application Integration
Services
© Digital Cloud Training | https://digitalcloud.training
Amazon Simple Queue Service (SQS)
SQS Queue
Web Tier
Direct integration
Auto Scaling Group
App Tier
Auto Scaling Group
Web Tier
Auto Scaling Group
App Tier
Auto Scaling Group
Decoupled integration
EC2 instance polls
SQS
Web tier connects
directly to app tier
App tier must keep
up with workload or
failure will occur
© Digital Cloud Training | https://digitalcloud.training
Amazon SQS
• SQS offers a reliable, highly-scalable, hosted queue for
storing messages in transit between computers
• SQS is used for distributed/decoupled applications
• SQS uses a message-oriented API
• SQS uses pull based (polling) not push based
© Digital Cloud Training | https://digitalcloud.training
Amazon MQ
• Message broker service
• Similar to Amazon SQS
• Based on Apache Active MQ and RabbitMQ
• Used when customers require industry standard APIs and
protocols
• Useful when migrating existing queue-based applications
into the cloud
© Digital Cloud Training | https://digitalcloud.training
Amazon Simple Notification Service (SNS)
PUBLISHERS
SNS Topic
SNS Topic
SNS Topic
Amazon EC2
Amazon Simple Storage
Service
Amazon Simple Notification
Service
SUBSCRIBERS
Amazon Simple Queue
Service
AWS Lambda
Amazon CloudWatch
Email / SMS
© Digital Cloud Training | https://digitalcloud.training
Amazon SNS
• Amazon SNS is used for building and integrating loosely-
coupled, distributed applications
• Provides instantaneous, push-based delivery (no polling)
• Uses simple APIs and easy integration with applications
• Offered under an inexpensive, pay-as-you-go model with no
up-front costs
© Digital Cloud Training | https://digitalcloud.training
AWS Step Functions
Do Something
Check Yes/No
Create something
Wait
Completed?
Send notification
Check result
© Digital Cloud Training | https://digitalcloud.training
AWS Step Functions
• AWS Step Functions makes it easy to coordinate the
components of distributed applications as a series of steps in
a visual workflow
• You can quickly build and run state machines to execute the
steps of your application in a reliable and scalable fashion
© Digital Cloud Training | https://digitalcloud.training
AWS Simple Workflow Service (SWF)
Customer order
(start)
Verify order
Charge credit
card
Process
product
Ship Order Order complete
SWF is ideal for “human-
enabled” workflows
© Digital Cloud Training | https://digitalcloud.training
Amazon SWF
• Amazon Simple Workflow Service (SWF) is a web service that
makes it easy to coordinate work across distributed application
components
• Create distributed asynchronous systems as workflows
• Best suited for human-enabled workflows like an order fulfilment
system or for procedural requests
• AWS recommends that for new applications customers consider
Step Functions instead of SWF
© Digital Cloud Training | https://digitalcloud.training
Application Integration Services Comparison
Service What it does Example use cases
Simple Queue Service Messaging queue; store and forward
patterns
Building distributed / decoupled applications
Simple Notification Service Set up, operate, and send notifications
from the cloud
Send email notification when CloudWatch alarm is
triggered
Step Functions Out-of-the-box coordination of AWS
service components with visual
workflow
Order processing workflow
Simple Workflow Service Need to support external processes or
specialized execution logic
Human-enabled workflows like an order fulfilment
system or for procedural requests
Note: AWS recommends that for new applications
customers consider Step Functions instead of SWF
Amazon MQ Message broker service for Apache
Active MQ and RabbitMQ
Need a message queue that supports industry
standard APIs and protocols; migrate queues to AWS
© Digital Cloud Training | https://digitalcloud.training
Amazon EventBridge /
CloudWatch Events
© Digital Cloud Training | https://digitalcloud.training
Amazon EventBridge
EC2 instance
terminated event
Event Source
Event
EventBridge
event bus
Rule
Target
Send SNS
notification
EventBridge used to be
known as CloudWatch
Events
© Digital Cloud Training | https://digitalcloud.training
Amazon EventBridge
© Digital Cloud Training | https://digitalcloud.training
Create an Event-Driven
Application
© Digital Cloud Training | https://digitalcloud.training
Simple Event-Driven Application
Amazon SQS
Amazon SNS Topic
Lambda Function
Amazon CloudWatch
Event is written to
CloudWatch Logs
Lambda
target
User
Submit notification
to SNS Topic
© Digital Cloud Training | https://digitalcloud.training
Amazon API Gateway
© Digital Cloud Training | https://digitalcloud.training
Amazon API Gateway
AWS Lambda
Region
Amazon API Gateway
Mobile
client
Service
Website
VPC
Any other AWS service
REST API over
HTTPS
Public subnet
Private subnet
Lambda function
EC2 Instance
Application Load Balancer
EC2 Instance
Any public endpoint
an API that acts as a “front
door” for applications to
access data, business logic, or
functionality from your back-
end services
© Digital Cloud Training | https://digitalcloud.training
SECTION 9
Amazon VPC, Networking, and Hybrid
© Digital Cloud Training | https://digitalcloud.training
Amazon Virtual Private Cloud
(VPC)
© Digital Cloud Training | https://digitalcloud.training
Private subnet
Amazon VPC
Subnets are
created
within AZs
Region
VPC
Availability Zone
Availability Zone
Public subnet
Router Internet
gateway
Main Route Table
EC2 Instance
EC2 Instance
The route table is
used to configure
the VPC router
An Internet Gateway
is used to connect to
the Internet
You can launch EC2 instances
into your VPC subnets
Destination Target
10.0.0.0/16 Local
0.0.0.0/0 igw-id
A VPC is a logically
isolated portion of the
AWS cloud within a region
© Digital Cloud Training | https://digitalcloud.training
Amazon VPC
Region
VPC
Availability Zone
Private subnet
Public subnet
Availability Zone
Private subnet
Public subnet
VPC
Availability Zone
Private subnet
Public subnet
Availability Zone
Private subnet
Public subnet
CIDR 10.0.0.0/16 CIDR 10.1.0.0/16
Each subnet has a
block of IP addresses
from the CIDR block You can create multiple
VPCs within each region
Each VPC has a different
block of IP addresses
CIDR stands for Classless
Interdomain Routing
10.1.0.0/20 10.1.16.0/20
10.1.32.0/20 10.1.48.0/20
10.0.0.0/20 10.0.16.0/20
10.0.32.0/20 10.0.48.0/20
© Digital Cloud Training | https://digitalcloud.training
Amazon VPC
VPC Component What it is
Virtual Private Cloud (VPC) A logically isolated virtual network in the AWS cloud
Subnet A segment of a VPC’s IP address range where you can place groups of isolated resources
Internet Gateway/Egress-
only Internet Gateway
The Amazon VPC side of a connection to the public Internet for IPv4/IPv6
Router Routers interconnect subnets and direct traffic between Internet gateways, virtual private gateways,
NAT gateways, and subnets
Peering Connection Direct connection between two VPCs
VPC Endpoints Private connection to public AWS services
NAT Instance Enables Internet access for EC2 instances in private subnets managed by you)
NAT Gateway Enables Internet access for EC2 instances in private subnets (managed by AWS)
Virtual Private Gateway The Amazon VPC side of a Virtual Private Network (VPN) connection
Customer Gateway Customer side of a VPN connection
AWS Direct Connect High speed, high bandwidth, private network connection from customer to aws
Security Group Instance-level firewall
Network ACL Subnet-level firewall
© Digital Cloud Training | https://digitalcloud.training
Amazon VPC
• A virtual private cloud (VPC) is a virtual network dedicated to your AWS
account
• Analogous to having your own DC inside AWS
• It is logically isolated from other virtual networks in the AWS Cloud
• Provides complete control over the virtual networking environment including
selection of IP ranges, creation of subnets, and configuration of route tables
and gateways
• You can launch your AWS resources, such as Amazon EC2 instances, into your
VPC
© Digital Cloud Training | https://digitalcloud.training
Amazon VPC
• When you create a VPC, you must specify a range of IPv4 addresses
for the VPC in the form of a Classless Inter-Domain Routing (CIDR)
block; for example, 10.0.0.0/16
• A VPC spans all the Availability Zones in the region
• You have full control over who has access to the AWS resources
inside your VPC
• By default you can create up to 5 VPCs per region
• A default VPC is created in each region with a subnet in each AZ
© Digital Cloud Training | https://digitalcloud.training
Create a Custom VPC
© Digital Cloud Training | https://digitalcloud.training
Create a Custom VPC
Region
VPC
Availability Zone
Public subnet
Internet
gateway
Private subnet
Availability Zone
Public subnet
Private subnet
Destination Target
10.0.0.0/16 Local
0.0.0.0/0 igw-id
Main Route Table
Destination Target
10.0.0.0/16 Local
Private Route Table
10.0.3.0/24
10.0.4.0/24
10.0.1.0/24
10.0.2.0/24
Main Route table
Private Route table
CIDR 10.0.0.0/16
© Digital Cloud Training | https://digitalcloud.training
Security Groups and
Network ACLs
© Digital Cloud Training | https://digitalcloud.training
Stateful vs Stateless Firewalls
Web Server
(10.2.1.10)
Dest Port: 80
A stateful firewall
allows the return
traffic automatically
Firewall
Src Port: 65188
Src Port: 80 Dest Port: 65188
PROTOCOL SOURCE IP DESTINATION IP SOURCE PORT DESTINATION PORT
HTTP 10.1.1.1 10.2.1.10 65188 80
HTTP 10.2.1.10 10.1.1.1 80 65188
A stateless firewall
checks for an allow
rule for both
connections
Client
(10.1.1.1)
© Digital Cloud Training | https://digitalcloud.training
Security Groups and Network ACLs
VPC
Availability Zone
Public subnet
Private subnet
Security
Group A
Availability Zone
Public subnet
Private subnet
Security
Group A
Network ACL
Security
Group B
Security
Group B
Security
Group A
Router
NACLs apply at the
subnet level
Security Groups
can be applied
to instances in
any subnet
Security Groups
apply at the
Instance level
NACLs apply only to
traffic entering /
exiting the subnet
Network ACL
Network ACL
Network ACL
© Digital Cloud Training | https://digitalcloud.training
Security Group Rules
Security groups support
allow rules only
A source can be an IP
address or security
group ID
Separate rules
are defined for
outbound traffic
© Digital Cloud Training | https://digitalcloud.training
Network ACLs
Inbound Rules
Outbound Rules NACLs have an
explicit deny
Rules are processed
in order
© Digital Cloud Training | https://digitalcloud.training
Configure Security Groups
and NACLs
© Digital Cloud Training | https://digitalcloud.training
Public, Private and Elastic IP
Addresses
© Digital Cloud Training | https://digitalcloud.training
Public, Private and Elastic IP addresses
Name Description
Public IP address Lost when the instance is stopped
Used in Public Subnets
No charge
Associated with a private IP address on the instance
Cannot be moved between instances
Private IP address Retained when the instance is stopped
Used in Public and Private Subnets
Elastic IP address Static Public IP address
You are charged if not used
Associated with a private IP address on the instance
Can be moved between instances and Elastic Network Adapters
© Digital Cloud Training | https://digitalcloud.training
Working with IP Addresses
© Digital Cloud Training | https://digitalcloud.training
NAT Gateways and NAT
Instances
© Digital Cloud Training | https://digitalcloud.training
NAT Gateways
Private subnet
Region
VPC
Availability Zone
Public subnet
Internet
gateway
EC2 Instance
Destination Target
10.0.0.0/16 Local
0.0.0.0/0 igw-id
Main Route Table
Private Route Table
NAT gateway
Destination Target
10.0.0.0/16 Local
0.0.0.0/0 nat-gateway-id
Private-IP
Private-IP
Elastic-IP
The NAT gateway ID
must be specified in the
private subnet RT
The NAT gateway is created
in the public subnet
© Digital Cloud Training | https://digitalcloud.training
NAT Instances
Private subnet
Region
VPC
Availability Zone
Public subnet
Internet
gateway
EC2 Instance
Destination Target
10.0.0.0/16 Local
0.0.0.0/0 igw-id
Main Route Table
Private Route Table
NAT Instance
Destination Target
10.0.0.0/16 Local
0.0.0.0/0 nat-instance-id
Private-IP
Private-IP
Elastic-IP
The NAT instance ID must
be specified in the private
subnet RT
© Digital Cloud Training | https://digitalcloud.training
NAT Instance vs NAT Gateway
NAT Instance NAT Gateway
Managed by you (e.g. software updates) Managed by AWS
Scale up (instance type) manually and use
enhanced networking
Elastic scalability up to 45 Gbps
No high availability – scripted/auto-scaled
HA possible using multiple NATs in multiple
subnets
Provides automatic high availability within an AZ
and can be placed in multiple AZs
© Digital Cloud Training | https://digitalcloud.training
Deploy a NAT Gateway
© Digital Cloud Training | https://digitalcloud.training
NAT Gateways
Private subnet
Region
VPC
Availability Zone
Public subnet
Internet
gateway
EC2 Instance
Destination Target
10.0.0.0/16 Local
0.0.0.0/0 igw-id
Main Route Table
Private Route Table
NAT gateway
Destination Target
10.0.0.0/16 Local
0.0.0.0/0 nat-gateway-id
Private-IP
Private-IP
Elastic-IP
The NAT gateway ID
must be specified in the
private subnet RT
The NAT gateway is created
in the public subnet
EC2 Instance
Bastion/Jump
host
© Digital Cloud Training | https://digitalcloud.training
Amazon VPC Peering
© Digital Cloud Training | https://digitalcloud.training
VPC Peering
VPC A VPC B
VPC C VPC D
VPC Peering
connections are
NOT transitive –
full mesh required
10.1.0.0/16 10.2.0.0/16
10.3.0.0/16 10.4.0.0/16
CIDR blocks
cannot overlap
VPC Peering
enables routing
using private IPv4
or IPv6 addresses
VPCs can be in
different accounts
and Regions
© Digital Cloud Training | https://digitalcloud.training
Amazon VPN and AWS Direct
Connect
© Digital Cloud Training | https://digitalcloud.training
AWS Site-to-Site VPN
VPC
Private subnet
Public subnet
VPN connection
Virtual Private
Gateway (VGW)
Corporate data center
CIDR: 10.0.0.0/16
CIDR: 192.168.0.0/16
A customer gateway is
deployed on the
customer side
A VGW is
deployed on
the AWS site
AWS VPN is a managed
IPSec VPN
Customer
gateway
© Digital Cloud Training | https://digitalcloud.training
AWS VPN CloudHub
VPC
Private subnet
Public subnet
Virtual Private
Gateway (VGW)
Customer office
Customer office
Customer office
Customer gateway
A VGW is
deployed on
the AWS site
Remote offices
connect to the
VGW in a hub-and-
spoke model
Customer gateway
Customer gateway
© Digital Cloud Training | https://digitalcloud.training
AWS Direct Connect
Corporate data center
AWS Direct Connect location
AWS cage Customer /
partner cage
AWS Direct
Connect
endpoint
Customer /
partner router
Region
Customer
Router
VPC
Private subnet
Public subnet
• Private connectivity between AWS and your data center / office
• Consistent network experience – increased speed/latency &
bandwidth/throughput
• Lower costs for organizations that transfer large volumes of data
© Digital Cloud Training | https://digitalcloud.training
AWS Transit Gateway
© Digital Cloud Training | https://digitalcloud.training
AWS Transit Gateway
VPC A VPC B
VPC C VPC D
CGW
Transit Gateway is a network
transit hub that interconnects
VPCs and on-premises networks
Corporate office
Subnet
Subnet
Subnet
Subnet
Subnet
Subnet
Subnet
Subnet
VPCs are attached
to Transit Gateway
TGWs can be attached to
VPNs, Direct Connect
Gateways, 3rd party
appliances and TGWs in
other Regions/accounts
© Digital Cloud Training | https://digitalcloud.training
AWS Outposts
© Digital Cloud Training | https://digitalcloud.training
AWS Outposts
Corporate
data center
AWS Cloud
VPC
Private subnet Private subnet
Communication with
private IP addresses
© Digital Cloud Training | https://digitalcloud.training
AWS Outposts
Services you can run on AWS Outposts include:
• Amazon EC2
• Amazon EBS
• Amazon S3
• Amazon VPC
• Amazon ECS/EKS
• Amazon RDS
• Amazon EMR
© Digital Cloud Training | https://digitalcloud.training
SECTION 10
Deployment and Automation
© Digital Cloud Training | https://digitalcloud.training
Caching and Amazon
CloudFront
© Digital Cloud Training | https://digitalcloud.training
Amazon CloudFront
Users
Edge location
Region
Amazon EC2
Amazon S3
CloudFront Origins
Edge location
Edge location
Edge location
Edge location
Edge location
Edge location
Users
Users
Users
Users
Users
Users
Content is pushed
from the origin and
cached
Edge locations
are distributed
around the world
Users are directed
to the nearest
edge location
© Digital Cloud Training | https://digitalcloud.training
S3 Static Website with
CloudFront
© Digital Cloud Training | https://digitalcloud.training
AWS Global Accelerator
© Digital Cloud Training | https://digitalcloud.training
AWS Global Accelerator
Users in US
Edge location
Addresses:
51.45.2.12
53.58.31.89
us-east-1 ap-southeast-2
AWS Global Network
Global Accelerator
Users are
redirected to
another endpoint
Static anycast
IP addresses
Requests are
routed to the
optimal endpoint
User traffic ingresses
using the closest Edge
Location
Traffic
traverses the
AWS global
network
Connect via Edge Location
© Digital Cloud Training | https://digitalcloud.training
AWS Global Accelerator vs CloudFront
• Both use the AWS global network and edge
locations
• CloudFront improves performance for
cacheable content and dynamic content
• GA improves performance for a wide range of
applications over TCP and UDP
• GA proxies connections to applications in one
or more AWS Regions
• GA provides failover between AWS Regions
© Digital Cloud Training | https://digitalcloud.training
AWS CloudFormation
© Digital Cloud Training | https://digitalcloud.training
AWS CloudFormation
Infrastructure patterns are
defined in a template file
using code
VPC
Public subnet
Public subnet
AWS CloudFormation
Auto Scaling
group
CloudFormation builds
your infrastructure
according to the template
© Digital Cloud Training | https://digitalcloud.training
AWS CloudFormation
• Infrastructure is provisioned consistently, with fewer mistakes
(human error)
• Less time and effort than configuring resources manually
• Free to use (you're only charged for the resources provisioned)
• A template is a YAML or JSON template used to describe the end-
state of the infrastructure you are either provisioning or changing
• CloudFormation creates a Stack based on the template
• Can easily rollback and delete the entire stack as well
© Digital Cloud Training | https://digitalcloud.training
Create CloudFormation Stack
© Digital Cloud Training | https://digitalcloud.training
AWS Cloud Development Kit
(CDK)
© Digital Cloud Training | https://digitalcloud.training
AWS Cloud Development Kit
• Open-source software development framework to
define your cloud application resources using familiar
programming languages
• Preconfigures cloud resources with proven defaults
using constructs
• Provisions your resources using AWS CloudFormation
• Enables you to model application infrastructure using
TypeScript, Python, Java, and .NET
• Use existing IDE, testing tools, and workflow patterns
Download pre-
configured
application
components
Model infrastructure
using a programming
language
Deploy with
CloudFormation
© Digital Cloud Training | https://digitalcloud.training
AWS Elastic Beanstalk
© Digital Cloud Training | https://digitalcloud.training
AWS Elastic Beanstalk
Region
VPC
Availability Zone
Public subnet
Availability Zone
Public subnet
Application
Load
Balancer
Instance
Auto Scaling
group
Elastic Beanstalk environment
AWS Elastic Beanstalk Developer
Client
Instance
Everything within
the EB environment
is launched and
managed by EB
Upload source
code in ZIP file
Can launch and manage
EC2 instances or Docker
containers on ECS
© Digital Cloud Training | https://digitalcloud.training
AWS Elastic Beanstalk
• Supports Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker
web applications
• Integrates with VPC
• Integrates with IAM
• Can provision most database instances
• Allows full control of the underlying resources
• Code is deployed using a WAR file or Git repository
© Digital Cloud Training | https://digitalcloud.training
AWS Elastic Beanstalk
CloudFormation Elastic Beanstalk
“Template-driven provisioning” “Web apps made easy"
Deploys infrastructure using code Deploys applications on EC2 (PaaS)
Can be used to deploy almost any AWS service Deploys web applications based on Java, .NET, PHP, Node.js,
Python, Ruby, Go, and Docker
Uses JSON or YAML template files Uses ZIP or WAR files (or Git)
Similar to Terraform Similar to Google App Engine
© Digital Cloud Training | https://digitalcloud.training
Deploy a Web Application
© Digital Cloud Training | https://digitalcloud.training
AWS Developer Tools
(Code*)
© Digital Cloud Training | https://digitalcloud.training
Continuous Integration
AWS CodeBuild
AWS CodeCommit
Developer
commits code
Build servers build
and test code
Results returned to
Developer
Code repository
could be GitHub,
CodeCommit etc.
© Digital Cloud Training | https://digitalcloud.training
Continuous Integration and Continuous Delivery
AWS CodeBuild
AWS CodeCommit
Developer
commits code
Build servers build
and test code
Results returned to
Developer
AWS CodeDeploy
Code released for
deployment
Code deployed
to application
Application Application
© Digital Cloud Training | https://digitalcloud.training
Continuous Integration and Continuous Delivery
AWS CodeBuild
AWS CodeCommit AWS CodeDeploy
AWS CodePipeline
CODE BUILD & TEST DEPLOY
© Digital Cloud Training | https://digitalcloud.training
AWS CodeStar
AWS CodeStar
AWS CodeBuild
AWS CodeCommit AWS CodeDeploy
AWS CloudFormation
Developers
IDE connects to
CodeStar
API Endpoint
Bucket Lambda function
© Digital Cloud Training | https://digitalcloud.training
AWS CodeStar
© Digital Cloud Training | https://digitalcloud.training
AWS X-Ray
© Digital Cloud Training | https://digitalcloud.training
AWS X-Ray
Records latency writing
to a DynamoDB table
Records latency
from client to
application
© Digital Cloud Training | https://digitalcloud.training
AWS X-Ray
• AWS X-Ray helps developers analyze and debug production,
distributed applications, such as those built using a microservices
architecture
• AWS X-Ray supports applications running on:
• Amazon EC2
• Amazon ECS
• AWS Lambda
• AWS Elastic Beanstalk
• Need to integrate the X-Ray SDK with your application and install the
X-Ray agent
© Digital Cloud Training | https://digitalcloud.training
AWS OpsWorks
© Digital Cloud Training | https://digitalcloud.training
AWS OpsWorks
• AWS OpsWorks is a configuration management service that provides managed
instances of Chef and Puppet
• Updates include patching, updating, backup, configuration and compliance
management
AWS OpsWorks
Instance
Instance
Instance
Instance
SysOps Admin
Instances are
configured by
OpsWorks using
Chef/Puppet
Configuration changes
are submitted to
OpsWorks

Contenu connexe

Tendances

An Overview of Best Practices for Large Scale Migrations - AWS Transformation...
An Overview of Best Practices for Large Scale Migrations - AWS Transformation...An Overview of Best Practices for Large Scale Migrations - AWS Transformation...
An Overview of Best Practices for Large Scale Migrations - AWS Transformation...Amazon Web Services
 
Jump-start your application migration to AWS with CloudEndure - STG305 - New ...
Jump-start your application migration to AWS with CloudEndure - STG305 - New ...Jump-start your application migration to AWS with CloudEndure - STG305 - New ...
Jump-start your application migration to AWS with CloudEndure - STG305 - New ...Amazon Web Services
 
AWS Control Tower
AWS Control TowerAWS Control Tower
AWS Control TowerCloudHesive
 
Azure Cloud Adoption Framework + Governance - Sana Khan and Jay Kumar
Azure Cloud Adoption Framework + Governance - Sana Khan and Jay Kumar Azure Cloud Adoption Framework + Governance - Sana Khan and Jay Kumar
Azure Cloud Adoption Framework + Governance - Sana Khan and Jay Kumar Timothy McAliley
 
Emerging Trends in Hybrid-Cloud & Multi-Cloud Strategies
Emerging Trends in Hybrid-Cloud & Multi-Cloud StrategiesEmerging Trends in Hybrid-Cloud & Multi-Cloud Strategies
Emerging Trends in Hybrid-Cloud & Multi-Cloud StrategiesChaitanya Atreya
 
AWS Certified Solutions Architect Professional Course S15-S18
AWS Certified Solutions Architect Professional Course S15-S18AWS Certified Solutions Architect Professional Course S15-S18
AWS Certified Solutions Architect Professional Course S15-S18Neal Davis
 
Microsoft Cloud Adoption Framework for Azure: Thru Partner Governance Workshop
Microsoft Cloud Adoption Framework for Azure: Thru Partner Governance WorkshopMicrosoft Cloud Adoption Framework for Azure: Thru Partner Governance Workshop
Microsoft Cloud Adoption Framework for Azure: Thru Partner Governance WorkshopNicholas Vossburg
 
Cloud Governance and Provisioning Management using AWS Management Tools and S...
Cloud Governance and Provisioning Management using AWS Management Tools and S...Cloud Governance and Provisioning Management using AWS Management Tools and S...
Cloud Governance and Provisioning Management using AWS Management Tools and S...Amazon Web Services
 
Deploy and Govern at Scale with AWS Control Tower
Deploy and Govern at Scale with AWS Control TowerDeploy and Govern at Scale with AWS Control Tower
Deploy and Govern at Scale with AWS Control TowerAmazon Web Services
 
RMG203 Cloud Infrastructure and Application Monitoring with Amazon CloudWatch...
RMG203 Cloud Infrastructure and Application Monitoring with Amazon CloudWatch...RMG203 Cloud Infrastructure and Application Monitoring with Amazon CloudWatch...
RMG203 Cloud Infrastructure and Application Monitoring with Amazon CloudWatch...Amazon Web Services
 
Getting started on your AWS migration journey
Getting started on your AWS migration journeyGetting started on your AWS migration journey
Getting started on your AWS migration journeyAmazon Web Services
 
VMware Cloud on AWS - 100819.pdf
VMware Cloud on AWS - 100819.pdfVMware Cloud on AWS - 100819.pdf
VMware Cloud on AWS - 100819.pdfAmazon Web Services
 
Why a Multi-cloud Strategy is Essential
Why a Multi-cloud Strategy is EssentialWhy a Multi-cloud Strategy is Essential
Why a Multi-cloud Strategy is EssentialAlibaba Cloud
 
Migrate to Azure with Confidence - Inovar Consulting
Migrate to Azure with Confidence - Inovar ConsultingMigrate to Azure with Confidence - Inovar Consulting
Migrate to Azure with Confidence - Inovar ConsultingInovar Tech
 
Cloud Adoption Framework Phase one-moving to the cloud
Cloud Adoption Framework Phase one-moving to the cloudCloud Adoption Framework Phase one-moving to the cloud
Cloud Adoption Framework Phase one-moving to the cloudAnthony Clendenen
 
Considerations for your Cloud Journey
Considerations for your Cloud JourneyConsiderations for your Cloud Journey
Considerations for your Cloud JourneyAmazon Web Services
 
AWS Cloud Computing Tutorial | Migrating on Premise VM to AWS Cloud | AWS Tra...
AWS Cloud Computing Tutorial | Migrating on Premise VM to AWS Cloud | AWS Tra...AWS Cloud Computing Tutorial | Migrating on Premise VM to AWS Cloud | AWS Tra...
AWS Cloud Computing Tutorial | Migrating on Premise VM to AWS Cloud | AWS Tra...Edureka!
 

Tendances (20)

An Overview of Best Practices for Large Scale Migrations - AWS Transformation...
An Overview of Best Practices for Large Scale Migrations - AWS Transformation...An Overview of Best Practices for Large Scale Migrations - AWS Transformation...
An Overview of Best Practices for Large Scale Migrations - AWS Transformation...
 
App Modernization with Microsoft Azure
App Modernization with Microsoft AzureApp Modernization with Microsoft Azure
App Modernization with Microsoft Azure
 
Jump-start your application migration to AWS with CloudEndure - STG305 - New ...
Jump-start your application migration to AWS with CloudEndure - STG305 - New ...Jump-start your application migration to AWS with CloudEndure - STG305 - New ...
Jump-start your application migration to AWS with CloudEndure - STG305 - New ...
 
AWS Control Tower
AWS Control TowerAWS Control Tower
AWS Control Tower
 
Azure Cloud Adoption Framework + Governance - Sana Khan and Jay Kumar
Azure Cloud Adoption Framework + Governance - Sana Khan and Jay Kumar Azure Cloud Adoption Framework + Governance - Sana Khan and Jay Kumar
Azure Cloud Adoption Framework + Governance - Sana Khan and Jay Kumar
 
Emerging Trends in Hybrid-Cloud & Multi-Cloud Strategies
Emerging Trends in Hybrid-Cloud & Multi-Cloud StrategiesEmerging Trends in Hybrid-Cloud & Multi-Cloud Strategies
Emerging Trends in Hybrid-Cloud & Multi-Cloud Strategies
 
AWS Certified Solutions Architect Professional Course S15-S18
AWS Certified Solutions Architect Professional Course S15-S18AWS Certified Solutions Architect Professional Course S15-S18
AWS Certified Solutions Architect Professional Course S15-S18
 
Microsoft Cloud Adoption Framework for Azure: Thru Partner Governance Workshop
Microsoft Cloud Adoption Framework for Azure: Thru Partner Governance WorkshopMicrosoft Cloud Adoption Framework for Azure: Thru Partner Governance Workshop
Microsoft Cloud Adoption Framework for Azure: Thru Partner Governance Workshop
 
Cloud Governance and Provisioning Management using AWS Management Tools and S...
Cloud Governance and Provisioning Management using AWS Management Tools and S...Cloud Governance and Provisioning Management using AWS Management Tools and S...
Cloud Governance and Provisioning Management using AWS Management Tools and S...
 
Deploy and Govern at Scale with AWS Control Tower
Deploy and Govern at Scale with AWS Control TowerDeploy and Govern at Scale with AWS Control Tower
Deploy and Govern at Scale with AWS Control Tower
 
RMG203 Cloud Infrastructure and Application Monitoring with Amazon CloudWatch...
RMG203 Cloud Infrastructure and Application Monitoring with Amazon CloudWatch...RMG203 Cloud Infrastructure and Application Monitoring with Amazon CloudWatch...
RMG203 Cloud Infrastructure and Application Monitoring with Amazon CloudWatch...
 
Getting started on your AWS migration journey
Getting started on your AWS migration journeyGetting started on your AWS migration journey
Getting started on your AWS migration journey
 
VMware Cloud on AWS - 100819.pdf
VMware Cloud on AWS - 100819.pdfVMware Cloud on AWS - 100819.pdf
VMware Cloud on AWS - 100819.pdf
 
Cloud Migration Workshop
Cloud Migration WorkshopCloud Migration Workshop
Cloud Migration Workshop
 
Why a Multi-cloud Strategy is Essential
Why a Multi-cloud Strategy is EssentialWhy a Multi-cloud Strategy is Essential
Why a Multi-cloud Strategy is Essential
 
Migrate to Azure with Confidence - Inovar Consulting
Migrate to Azure with Confidence - Inovar ConsultingMigrate to Azure with Confidence - Inovar Consulting
Migrate to Azure with Confidence - Inovar Consulting
 
Cloud Adoption Framework Phase one-moving to the cloud
Cloud Adoption Framework Phase one-moving to the cloudCloud Adoption Framework Phase one-moving to the cloud
Cloud Adoption Framework Phase one-moving to the cloud
 
Considerations for your Cloud Journey
Considerations for your Cloud JourneyConsiderations for your Cloud Journey
Considerations for your Cloud Journey
 
SMS-and-CloudEndure-Module4
SMS-and-CloudEndure-Module4SMS-and-CloudEndure-Module4
SMS-and-CloudEndure-Module4
 
AWS Cloud Computing Tutorial | Migrating on Premise VM to AWS Cloud | AWS Tra...
AWS Cloud Computing Tutorial | Migrating on Premise VM to AWS Cloud | AWS Tra...AWS Cloud Computing Tutorial | Migrating on Premise VM to AWS Cloud | AWS Tra...
AWS Cloud Computing Tutorial | Migrating on Premise VM to AWS Cloud | AWS Tra...
 

Similaire à AWS Certified Cloud Practitioner Course S7-S10

How to Bring Microsoft Apps to AWS - AWS Online Tech Talks
How to Bring Microsoft Apps to AWS - AWS Online Tech TalksHow to Bring Microsoft Apps to AWS - AWS Online Tech Talks
How to Bring Microsoft Apps to AWS - AWS Online Tech TalksAmazon Web Services
 
Accelerating Public Cloud Migration with Multi-Cloud Load Balancing
Accelerating Public Cloud Migration with Multi-Cloud Load BalancingAccelerating Public Cloud Migration with Multi-Cloud Load Balancing
Accelerating Public Cloud Migration with Multi-Cloud Load BalancingAvi Networks
 
Azure Cloud Application Development Workshop - UGIdotNET
Azure Cloud Application Development Workshop - UGIdotNETAzure Cloud Application Development Workshop - UGIdotNET
Azure Cloud Application Development Workshop - UGIdotNETLorenzo Barbieri
 
Getting Started With AWS Security
Getting Started With AWS SecurityGetting Started With AWS Security
Getting Started With AWS SecurityAmazon Web Services
 
REAN Cloud DevOps Accelerators
REAN Cloud DevOps AcceleratorsREAN Cloud DevOps Accelerators
REAN Cloud DevOps AcceleratorsREAN Cloud
 
GigaSpaces CCF 4 Xap
GigaSpaces CCF 4 XapGigaSpaces CCF 4 Xap
GigaSpaces CCF 4 XapShay Hassidim
 
Going Cloud Native with IBM Cloud and NetflixOSS for Dev@Pulse
Going Cloud Native with IBM Cloud and NetflixOSS for Dev@PulseGoing Cloud Native with IBM Cloud and NetflixOSS for Dev@Pulse
Going Cloud Native with IBM Cloud and NetflixOSS for Dev@Pulseaspyker
 
Selecting the Best VPC Network Architecture (CPN208) | AWS re:Invent 2013
Selecting the Best VPC Network Architecture (CPN208) | AWS re:Invent 2013Selecting the Best VPC Network Architecture (CPN208) | AWS re:Invent 2013
Selecting the Best VPC Network Architecture (CPN208) | AWS re:Invent 2013Amazon Web Services
 
20151019 v mworld2015-recap-02
20151019 v mworld2015-recap-0220151019 v mworld2015-recap-02
20151019 v mworld2015-recap-02Kevin Groat
 
Deploying couchbaseserverazure cihanbiyikoglu_microsoft
Deploying couchbaseserverazure cihanbiyikoglu_microsoftDeploying couchbaseserverazure cihanbiyikoglu_microsoft
Deploying couchbaseserverazure cihanbiyikoglu_microsoftCihan Biyikoglu
 
Pragmatic Approach to Workload Migrations - London Summit Enteprise Track RePlay
Pragmatic Approach to Workload Migrations - London Summit Enteprise Track RePlayPragmatic Approach to Workload Migrations - London Summit Enteprise Track RePlay
Pragmatic Approach to Workload Migrations - London Summit Enteprise Track RePlayAmazon Web Services
 
Cloud Computing & Sun Vision 03262009
Cloud Computing & Sun Vision 03262009Cloud Computing & Sun Vision 03262009
Cloud Computing & Sun Vision 03262009guest829442
 
One And Done Multi-Cloud Load Balancing Done Right.pptx
One And Done Multi-Cloud Load Balancing Done Right.pptxOne And Done Multi-Cloud Load Balancing Done Right.pptx
One And Done Multi-Cloud Load Balancing Done Right.pptxAvi Networks
 
Serverless Streaming Architectures and Algorithms for the Enterprise
Serverless Streaming Architectures and Algorithms for the EnterpriseServerless Streaming Architectures and Algorithms for the Enterprise
Serverless Streaming Architectures and Algorithms for the EnterpriseArun Kejariwal
 
.NET Cloud-Native Bootcamp- Los Angeles
.NET Cloud-Native Bootcamp- Los Angeles.NET Cloud-Native Bootcamp- Los Angeles
.NET Cloud-Native Bootcamp- Los AngelesVMware Tanzu
 
Tour de France Azure PaaS 2/7 Exécuter une application
Tour de France Azure PaaS 2/7 Exécuter une applicationTour de France Azure PaaS 2/7 Exécuter une application
Tour de France Azure PaaS 2/7 Exécuter une applicationAlex Danvy
 
Introduction to AWS
Introduction to AWSIntroduction to AWS
Introduction to AWSOSSCube
 
XCloudLabs- AWS Overview
XCloudLabs- AWS Overview XCloudLabs- AWS Overview
XCloudLabs- AWS Overview sangam biradar
 

Similaire à AWS Certified Cloud Practitioner Course S7-S10 (20)

How to Bring Microsoft Apps to AWS - AWS Online Tech Talks
How to Bring Microsoft Apps to AWS - AWS Online Tech TalksHow to Bring Microsoft Apps to AWS - AWS Online Tech Talks
How to Bring Microsoft Apps to AWS - AWS Online Tech Talks
 
Accelerating Public Cloud Migration with Multi-Cloud Load Balancing
Accelerating Public Cloud Migration with Multi-Cloud Load BalancingAccelerating Public Cloud Migration with Multi-Cloud Load Balancing
Accelerating Public Cloud Migration with Multi-Cloud Load Balancing
 
Azure Cloud Application Development Workshop - UGIdotNET
Azure Cloud Application Development Workshop - UGIdotNETAzure Cloud Application Development Workshop - UGIdotNET
Azure Cloud Application Development Workshop - UGIdotNET
 
Getting Started With AWS Security
Getting Started With AWS SecurityGetting Started With AWS Security
Getting Started With AWS Security
 
REAN Cloud DevOps Accelerators
REAN Cloud DevOps AcceleratorsREAN Cloud DevOps Accelerators
REAN Cloud DevOps Accelerators
 
GigaSpaces CCF 4 Xap
GigaSpaces CCF 4 XapGigaSpaces CCF 4 Xap
GigaSpaces CCF 4 Xap
 
Going Cloud Native with IBM Cloud and NetflixOSS for Dev@Pulse
Going Cloud Native with IBM Cloud and NetflixOSS for Dev@PulseGoing Cloud Native with IBM Cloud and NetflixOSS for Dev@Pulse
Going Cloud Native with IBM Cloud and NetflixOSS for Dev@Pulse
 
Selecting the Best VPC Network Architecture (CPN208) | AWS re:Invent 2013
Selecting the Best VPC Network Architecture (CPN208) | AWS re:Invent 2013Selecting the Best VPC Network Architecture (CPN208) | AWS re:Invent 2013
Selecting the Best VPC Network Architecture (CPN208) | AWS re:Invent 2013
 
20151019 v mworld2015-recap-02
20151019 v mworld2015-recap-0220151019 v mworld2015-recap-02
20151019 v mworld2015-recap-02
 
cc.pptx
cc.pptxcc.pptx
cc.pptx
 
Deploying couchbaseserverazure cihanbiyikoglu_microsoft
Deploying couchbaseserverazure cihanbiyikoglu_microsoftDeploying couchbaseserverazure cihanbiyikoglu_microsoft
Deploying couchbaseserverazure cihanbiyikoglu_microsoft
 
Pragmatic Approach to Workload Migrations - London Summit Enteprise Track RePlay
Pragmatic Approach to Workload Migrations - London Summit Enteprise Track RePlayPragmatic Approach to Workload Migrations - London Summit Enteprise Track RePlay
Pragmatic Approach to Workload Migrations - London Summit Enteprise Track RePlay
 
Cloud Computing & Sun Vision 03262009
Cloud Computing & Sun Vision 03262009Cloud Computing & Sun Vision 03262009
Cloud Computing & Sun Vision 03262009
 
One And Done Multi-Cloud Load Balancing Done Right.pptx
One And Done Multi-Cloud Load Balancing Done Right.pptxOne And Done Multi-Cloud Load Balancing Done Right.pptx
One And Done Multi-Cloud Load Balancing Done Right.pptx
 
Serverless Streaming Architectures and Algorithms for the Enterprise
Serverless Streaming Architectures and Algorithms for the EnterpriseServerless Streaming Architectures and Algorithms for the Enterprise
Serverless Streaming Architectures and Algorithms for the Enterprise
 
.NET Cloud-Native Bootcamp- Los Angeles
.NET Cloud-Native Bootcamp- Los Angeles.NET Cloud-Native Bootcamp- Los Angeles
.NET Cloud-Native Bootcamp- Los Angeles
 
Tour de France Azure PaaS 2/7 Exécuter une application
Tour de France Azure PaaS 2/7 Exécuter une applicationTour de France Azure PaaS 2/7 Exécuter une application
Tour de France Azure PaaS 2/7 Exécuter une application
 
Introduction to AWS
Introduction to AWSIntroduction to AWS
Introduction to AWS
 
VAS - VMware CMP
VAS - VMware CMPVAS - VMware CMP
VAS - VMware CMP
 
XCloudLabs- AWS Overview
XCloudLabs- AWS Overview XCloudLabs- AWS Overview
XCloudLabs- AWS Overview
 

Dernier

Google AI Hackathon: LLM based Evaluator for RAG
Google AI Hackathon: LLM based Evaluator for RAGGoogle AI Hackathon: LLM based Evaluator for RAG
Google AI Hackathon: LLM based Evaluator for RAGSujit Pal
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls
 
Maximizing Board Effectiveness 2024 Webinar.pptx
Maximizing Board Effectiveness 2024 Webinar.pptxMaximizing Board Effectiveness 2024 Webinar.pptx
Maximizing Board Effectiveness 2024 Webinar.pptxOnBoard
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityPrincipled Technologies
 
Presentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreterPresentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreternaman860154
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls
 
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure serviceWhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024Rafal Los
 
The Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxThe Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad
 
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | DelhiFULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhisoniya singh
 
Unblocking The Main Thread Solving ANRs and Frozen Frames
Unblocking The Main Thread Solving ANRs and Frozen FramesUnblocking The Main Thread Solving ANRs and Frozen Frames
Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationMichael W. Hawkins
 
Breaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountBreaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountPuma Security, LLC
 
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024BookNet Canada
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Drew Madelung
 
A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024Results
 
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 3652toLead Limited
 

Dernier (20)

Google AI Hackathon: LLM based Evaluator for RAG
Google AI Hackathon: LLM based Evaluator for RAGGoogle AI Hackathon: LLM based Evaluator for RAG
Google AI Hackathon: LLM based Evaluator for RAG
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
 
Maximizing Board Effectiveness 2024 Webinar.pptx
Maximizing Board Effectiveness 2024 Webinar.pptxMaximizing Board Effectiveness 2024 Webinar.pptx
Maximizing Board Effectiveness 2024 Webinar.pptx
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivity
 
Presentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreterPresentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreter
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men
 
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure serviceWhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024
 
The Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxThe Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptx
 
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | DelhiFULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi
FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi
 
Unblocking The Main Thread Solving ANRs and Frozen Frames
Unblocking The Main Thread Solving ANRs and Frozen FramesUnblocking The Main Thread Solving ANRs and Frozen Frames
Unblocking The Main Thread Solving ANRs and Frozen Frames
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
Breaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountBreaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path Mount
 
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
 
A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024
 
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
 

AWS Certified Cloud Practitioner Course S7-S10

  • 1. © Digital Cloud Training | https://digitalcloud.training SECTION 7 DNS, Elastic Load Balancing, and Auto Scaling
  • 2. © Digital Cloud Training | https://digitalcloud.training DNS and Amazon Route 53
  • 3. © Digital Cloud Training | https://digitalcloud.training The Domain Name System (DNS) User enters website address in browser Domain name is resolved to the IP address of the webserver DNS Server Name Type Value mycompany.local A 192.168.0.1 emailserver.local A 192.168.0.2 Web Server Computer connects to 192.168.0.1
  • 4. © Digital Cloud Training | https://digitalcloud.training Amazon Route 53 Amazon Route 53 example.com Availability Zone Public subnet Region VPC Web Server (8.1.2.1) What’s the IP address for example.com? Address is 8.1.2.1 HTTP GET to IP address (8.1.2.1) A hosted zone represents a set of records belonging to a domain
  • 5. © Digital Cloud Training | https://digitalcloud.training Amazon Route 53 Routing Policies Routing Policy What it does Simple Simple DNS response providing the IP address associated with a name Failover If primary is down (based on health checks), routes to secondary destination Geolocation Uses geographic location you’re in (e.g. Europe) to route you to the closest region Geoproximity Routes you to the closest region within a geographic area Latency Directs you based on the lowest latency route to resources Multivalue answer Returns several IP addresses and functions as a basic load balancer Weighted Uses the relative weights assigned to resources to determine which to route to
  • 6. © Digital Cloud Training | https://digitalcloud.training Amazon Route Features Amazon Route 53 Hosted zone example.com dctlabs.com EC2 Instances Health Checks Domain Registration .net .com .org Traffic Flow
  • 7. © Digital Cloud Training | https://digitalcloud.training Register Domain with Route 53 (Optional)
  • 8. © Digital Cloud Training | https://digitalcloud.training Elasticity: Scaling Up vs Out
  • 9. © Digital Cloud Training | https://digitalcloud.training Scaling Up (vertical scaling) Application Windows OS
  • 10. © Digital Cloud Training | https://digitalcloud.training Scaling Up (vertical scaling) Application Windows OS Scaling up means adding resources to the instance Limitation is that you have a single point of failure (SPOF)
  • 11. © Digital Cloud Training | https://digitalcloud.training Scaling Out (horizontal scaling) Windows OS Application Windows OS Application Windows OS Application Windows OS Application Scaling out provides greater resiliency Scaling out can be used to add almost unlimited capacity
  • 12. © Digital Cloud Training | https://digitalcloud.training Scaling Up (vertical scaling) t2.micro, 1 vCPU, 1 GB RAM c5.xlarge, 4 vCPU, 8 GB RAM
  • 13. © Digital Cloud Training | https://digitalcloud.training Scaling Out (horizontal scaling)
  • 14. © Digital Cloud Training | https://digitalcloud.training Amazon EC2 Auto Scaling
  • 15. © Digital Cloud Training | https://digitalcloud.training Amazon EC2 Auto Scaling Metric reports CPU > 80% Availability Zone Public subnet Availability Zone Public subnet Auto Scaling group Metrics Metrics EC2 Instances EC2 Instances Amazon CloudWatch CloudWatch notifies Auto Scaling to scale EC2 Auto Scaling launches extra instance EC2 Status Checks fail ASG replaces failed instance
  • 16. © Digital Cloud Training | https://digitalcloud.training Amazon EC2 Auto Scaling • EC2 Auto Scaling launches and terminates instances dynamically • Scaling is horizontal (scales out) • Provides elasticity and scalability • Responds to EC2 status checks and CloudWatch metrics • Can scale based on demand (performance) or on a schedule • Scaling policies define how to respond to changes in demand
  • 17. © Digital Cloud Training | https://digitalcloud.training Create an Auto Scaling Group
  • 18. © Digital Cloud Training | https://digitalcloud.training Load Balancing and High Availability
  • 19. © Digital Cloud Training | https://digitalcloud.training Load Balancing and High Availability Cloud Web Server 1 Web Server 2 Web Server 3 Load Balancer User 3 User 2 User 1 Each user connects to example.com The load balancer re-routes the connection
  • 20. © Digital Cloud Training | https://digitalcloud.training Fault Tolerance Memory (RAM) Processor (CPU) Hard Disk Drive Network Card Hard Disk Drive Redundant components allow the system to continue to operate The system may fail if there is no built-in redundancy
  • 21. © Digital Cloud Training | https://digitalcloud.training High Availability and Fault Tolerance Cloud Web Server 1 Web Server 2 Web Server 3 Load Balancer User 3 User 2 User 1 Think of an availability zone as a separate data center Availability Zone Availability Zone Web Server 4
  • 22. © Digital Cloud Training | https://digitalcloud.training High Availability and Fault Tolerance Cloud Web Server 1 Web Server 3 Load Balancer User 3 User 2 User 1 Auto Scaling launches a new web server Availability Zone Availability Zone Web Server 4 Auto Scaling Web Server 5
  • 23. © Digital Cloud Training | https://digitalcloud.training High Availability and Fault Tolerance Cloud Web Server 1 User 3 User 2 User 1 Availability Zone Web Server 5 Load Balancer
  • 24. © Digital Cloud Training | https://digitalcloud.training Amazon Elastic Load Balancer (ELB)
  • 25. © Digital Cloud Training | https://digitalcloud.training Types of Elastic Load Balancer (ELB) Network Load Balancer Application Load Balancer Load Balancer Protocol: TCP, TLS, UDP, TCP_UDP Instance Protocol: TCP, TCP_UDP Load Balancer Protocol: HTTP, HTTPS Instance Protocol: HTTP, HTTPS Internet Client Internet Client • Operates at the connection level • Routes connections based on IP protocol data (layer 4) • Offers ultra high performance, low latency and TLS offloading at scale • Operates at the request level • Routes based on the content of the request (layer 7) • Supports advanced routing Application Load Balancer Network Load Balancer
  • 26. © Digital Cloud Training | https://digitalcloud.training Types of Elastic Load Balancer (ELB) Classic Load Balancer Load Balancer Protocol: TCP, SSL, HTTP, HTTPS • Old generation; not recommended for new applications • Performs routing at Layer 4 and Layer 7 • Use for existing applications running in EC2-Classic Instance Protocol: TCP, SSL, HTTP, HTTPS Classic Load Balancer Internet Client Old and shouldn’t be the exam anymore Gateway Load Balancer Load Balancer Protocol: All packets on all ports • Used in front of virtual appliances such as firewalls, IDS/IPS, and deep packet inspection systems Appliance Protocol: GENEVE Gateway Load Balancer VPC Endpoint New and not yet on the exam
  • 27. © Digital Cloud Training | https://digitalcloud.training Attach an Application Load Balancer
  • 28. © Digital Cloud Training | https://digitalcloud.training Elastically Scale the Application
  • 29. © Digital Cloud Training | https://digitalcloud.training Elastically Scale the Application EC2 EC2 EC2 Application Load Balancer Launch Template Auto Scaling Group Target Group A Launch Template specifies the EC2 instance configuration The Application Load Balancer distributes connections between targets (EC2 instances) CloudWatch receives metrics from ALB and notifies Auto Scaling if thresholds are breached Amazon CloudWatch
  • 30. © Digital Cloud Training | https://digitalcloud.training Scaling Policies
  • 31. © Digital Cloud Training | https://digitalcloud.training Scaling Policies • Target Tracking – Attempts to keep the group at or close to the metric • Simple Scaling – Adjust group size based on a metric • Step Scaling – Adjust group size based on a metric – adjustments vary based on the size of the alarm breach • Scheduled Scaling – Adjust the group size at a specific time
  • 32. © Digital Cloud Training | https://digitalcloud.training SECTION 8 Application Services
  • 33. © Digital Cloud Training | https://digitalcloud.training Serverless Services
  • 34. © Digital Cloud Training | https://digitalcloud.training Serverless Services Lambda Function S3 Static Website SQS Queue DynamoDB Table Lambda Function S3 Bucket SNS Topic User uploads a file through a static website Serverless function processes file Processed file is stored in a bucket Function processes the message and stores information in a database A notification is sent using SNS and email
  • 35. © Digital Cloud Training | https://digitalcloud.training Serverless Services • With serverless there are no instances to manage • You don’t need to provision hardware • There is no management of operating systems or software • Capacity provisioning and patching is handled automatically • Provides automatic scaling and high availability • Can be very cheap!
  • 36. © Digital Cloud Training | https://digitalcloud.training Serverless Services • Serverless services include: • AWS Lambda • AWS Fargate • Amazon EventBridge • AWS Step Functions • Amazon SQS • Amazon SNS • Amazon API Gateway • Amazon S3 • Amazon DynamoDB
  • 37. © Digital Cloud Training | https://digitalcloud.training AWS Lambda Functions
  • 38. © Digital Cloud Training | https://digitalcloud.training AWS Lambda Functions Lambda function Developer Event occurs: Source can be CLI, API, SDK or a trigger Developer uploads some code Code is executed
  • 39. © Digital Cloud Training | https://digitalcloud.training AWS Lambda Functions • AWS Lambda executes code only when needed and scales automatically • You pay only for the compute time you consume (you pay nothing when your code is not running) • Benefits of AWS Lambda: • No servers to manage • Continuous scaling • Millisecond billing • Integrates with almost all other AWS services
  • 40. © Digital Cloud Training | https://digitalcloud.training AWS Lambda Functions • Primary use cases for AWS Lambda: • Data processing • Real-time file processing • Real-time stream processing • Build serverless backends for web, mobile, IOT, and 3rd party API requests
  • 41. © Digital Cloud Training | https://digitalcloud.training Create a Simple Lambda Function
  • 42. © Digital Cloud Training | https://digitalcloud.training Create a Simple Lambda Function Lambda function Create a function and add some code CloudWatch Logs Execute function and write event data to CloudWatch Logs
  • 43. © Digital Cloud Training | https://digitalcloud.training Application Integration Services
  • 44. © Digital Cloud Training | https://digitalcloud.training Amazon Simple Queue Service (SQS) SQS Queue Web Tier Direct integration Auto Scaling Group App Tier Auto Scaling Group Web Tier Auto Scaling Group App Tier Auto Scaling Group Decoupled integration EC2 instance polls SQS Web tier connects directly to app tier App tier must keep up with workload or failure will occur
  • 45. © Digital Cloud Training | https://digitalcloud.training Amazon SQS • SQS offers a reliable, highly-scalable, hosted queue for storing messages in transit between computers • SQS is used for distributed/decoupled applications • SQS uses a message-oriented API • SQS uses pull based (polling) not push based
  • 46. © Digital Cloud Training | https://digitalcloud.training Amazon MQ • Message broker service • Similar to Amazon SQS • Based on Apache Active MQ and RabbitMQ • Used when customers require industry standard APIs and protocols • Useful when migrating existing queue-based applications into the cloud
  • 47. © Digital Cloud Training | https://digitalcloud.training Amazon Simple Notification Service (SNS) PUBLISHERS SNS Topic SNS Topic SNS Topic Amazon EC2 Amazon Simple Storage Service Amazon Simple Notification Service SUBSCRIBERS Amazon Simple Queue Service AWS Lambda Amazon CloudWatch Email / SMS
  • 48. © Digital Cloud Training | https://digitalcloud.training Amazon SNS • Amazon SNS is used for building and integrating loosely- coupled, distributed applications • Provides instantaneous, push-based delivery (no polling) • Uses simple APIs and easy integration with applications • Offered under an inexpensive, pay-as-you-go model with no up-front costs
  • 49. © Digital Cloud Training | https://digitalcloud.training AWS Step Functions Do Something Check Yes/No Create something Wait Completed? Send notification Check result
  • 50. © Digital Cloud Training | https://digitalcloud.training AWS Step Functions • AWS Step Functions makes it easy to coordinate the components of distributed applications as a series of steps in a visual workflow • You can quickly build and run state machines to execute the steps of your application in a reliable and scalable fashion
  • 51. © Digital Cloud Training | https://digitalcloud.training AWS Simple Workflow Service (SWF) Customer order (start) Verify order Charge credit card Process product Ship Order Order complete SWF is ideal for “human- enabled” workflows
  • 52. © Digital Cloud Training | https://digitalcloud.training Amazon SWF • Amazon Simple Workflow Service (SWF) is a web service that makes it easy to coordinate work across distributed application components • Create distributed asynchronous systems as workflows • Best suited for human-enabled workflows like an order fulfilment system or for procedural requests • AWS recommends that for new applications customers consider Step Functions instead of SWF
  • 53. © Digital Cloud Training | https://digitalcloud.training Application Integration Services Comparison Service What it does Example use cases Simple Queue Service Messaging queue; store and forward patterns Building distributed / decoupled applications Simple Notification Service Set up, operate, and send notifications from the cloud Send email notification when CloudWatch alarm is triggered Step Functions Out-of-the-box coordination of AWS service components with visual workflow Order processing workflow Simple Workflow Service Need to support external processes or specialized execution logic Human-enabled workflows like an order fulfilment system or for procedural requests Note: AWS recommends that for new applications customers consider Step Functions instead of SWF Amazon MQ Message broker service for Apache Active MQ and RabbitMQ Need a message queue that supports industry standard APIs and protocols; migrate queues to AWS
  • 54. © Digital Cloud Training | https://digitalcloud.training Amazon EventBridge / CloudWatch Events
  • 55. © Digital Cloud Training | https://digitalcloud.training Amazon EventBridge EC2 instance terminated event Event Source Event EventBridge event bus Rule Target Send SNS notification EventBridge used to be known as CloudWatch Events
  • 56. © Digital Cloud Training | https://digitalcloud.training Amazon EventBridge
  • 57. © Digital Cloud Training | https://digitalcloud.training Create an Event-Driven Application
  • 58. © Digital Cloud Training | https://digitalcloud.training Simple Event-Driven Application Amazon SQS Amazon SNS Topic Lambda Function Amazon CloudWatch Event is written to CloudWatch Logs Lambda target User Submit notification to SNS Topic
  • 59. © Digital Cloud Training | https://digitalcloud.training Amazon API Gateway
  • 60. © Digital Cloud Training | https://digitalcloud.training Amazon API Gateway AWS Lambda Region Amazon API Gateway Mobile client Service Website VPC Any other AWS service REST API over HTTPS Public subnet Private subnet Lambda function EC2 Instance Application Load Balancer EC2 Instance Any public endpoint an API that acts as a “front door” for applications to access data, business logic, or functionality from your back- end services
  • 61. © Digital Cloud Training | https://digitalcloud.training SECTION 9 Amazon VPC, Networking, and Hybrid
  • 62. © Digital Cloud Training | https://digitalcloud.training Amazon Virtual Private Cloud (VPC)
  • 63. © Digital Cloud Training | https://digitalcloud.training Private subnet Amazon VPC Subnets are created within AZs Region VPC Availability Zone Availability Zone Public subnet Router Internet gateway Main Route Table EC2 Instance EC2 Instance The route table is used to configure the VPC router An Internet Gateway is used to connect to the Internet You can launch EC2 instances into your VPC subnets Destination Target 10.0.0.0/16 Local 0.0.0.0/0 igw-id A VPC is a logically isolated portion of the AWS cloud within a region
  • 64. © Digital Cloud Training | https://digitalcloud.training Amazon VPC Region VPC Availability Zone Private subnet Public subnet Availability Zone Private subnet Public subnet VPC Availability Zone Private subnet Public subnet Availability Zone Private subnet Public subnet CIDR 10.0.0.0/16 CIDR 10.1.0.0/16 Each subnet has a block of IP addresses from the CIDR block You can create multiple VPCs within each region Each VPC has a different block of IP addresses CIDR stands for Classless Interdomain Routing 10.1.0.0/20 10.1.16.0/20 10.1.32.0/20 10.1.48.0/20 10.0.0.0/20 10.0.16.0/20 10.0.32.0/20 10.0.48.0/20
  • 65. © Digital Cloud Training | https://digitalcloud.training Amazon VPC VPC Component What it is Virtual Private Cloud (VPC) A logically isolated virtual network in the AWS cloud Subnet A segment of a VPC’s IP address range where you can place groups of isolated resources Internet Gateway/Egress- only Internet Gateway The Amazon VPC side of a connection to the public Internet for IPv4/IPv6 Router Routers interconnect subnets and direct traffic between Internet gateways, virtual private gateways, NAT gateways, and subnets Peering Connection Direct connection between two VPCs VPC Endpoints Private connection to public AWS services NAT Instance Enables Internet access for EC2 instances in private subnets managed by you) NAT Gateway Enables Internet access for EC2 instances in private subnets (managed by AWS) Virtual Private Gateway The Amazon VPC side of a Virtual Private Network (VPN) connection Customer Gateway Customer side of a VPN connection AWS Direct Connect High speed, high bandwidth, private network connection from customer to aws Security Group Instance-level firewall Network ACL Subnet-level firewall
  • 66. © Digital Cloud Training | https://digitalcloud.training Amazon VPC • A virtual private cloud (VPC) is a virtual network dedicated to your AWS account • Analogous to having your own DC inside AWS • It is logically isolated from other virtual networks in the AWS Cloud • Provides complete control over the virtual networking environment including selection of IP ranges, creation of subnets, and configuration of route tables and gateways • You can launch your AWS resources, such as Amazon EC2 instances, into your VPC
  • 67. © Digital Cloud Training | https://digitalcloud.training Amazon VPC • When you create a VPC, you must specify a range of IPv4 addresses for the VPC in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16 • A VPC spans all the Availability Zones in the region • You have full control over who has access to the AWS resources inside your VPC • By default you can create up to 5 VPCs per region • A default VPC is created in each region with a subnet in each AZ
  • 68. © Digital Cloud Training | https://digitalcloud.training Create a Custom VPC
  • 69. © Digital Cloud Training | https://digitalcloud.training Create a Custom VPC Region VPC Availability Zone Public subnet Internet gateway Private subnet Availability Zone Public subnet Private subnet Destination Target 10.0.0.0/16 Local 0.0.0.0/0 igw-id Main Route Table Destination Target 10.0.0.0/16 Local Private Route Table 10.0.3.0/24 10.0.4.0/24 10.0.1.0/24 10.0.2.0/24 Main Route table Private Route table CIDR 10.0.0.0/16
  • 70. © Digital Cloud Training | https://digitalcloud.training Security Groups and Network ACLs
  • 71. © Digital Cloud Training | https://digitalcloud.training Stateful vs Stateless Firewalls Web Server (10.2.1.10) Dest Port: 80 A stateful firewall allows the return traffic automatically Firewall Src Port: 65188 Src Port: 80 Dest Port: 65188 PROTOCOL SOURCE IP DESTINATION IP SOURCE PORT DESTINATION PORT HTTP 10.1.1.1 10.2.1.10 65188 80 HTTP 10.2.1.10 10.1.1.1 80 65188 A stateless firewall checks for an allow rule for both connections Client (10.1.1.1)
  • 72. © Digital Cloud Training | https://digitalcloud.training Security Groups and Network ACLs VPC Availability Zone Public subnet Private subnet Security Group A Availability Zone Public subnet Private subnet Security Group A Network ACL Security Group B Security Group B Security Group A Router NACLs apply at the subnet level Security Groups can be applied to instances in any subnet Security Groups apply at the Instance level NACLs apply only to traffic entering / exiting the subnet Network ACL Network ACL Network ACL
  • 73. © Digital Cloud Training | https://digitalcloud.training Security Group Rules Security groups support allow rules only A source can be an IP address or security group ID Separate rules are defined for outbound traffic
  • 74. © Digital Cloud Training | https://digitalcloud.training Network ACLs Inbound Rules Outbound Rules NACLs have an explicit deny Rules are processed in order
  • 75. © Digital Cloud Training | https://digitalcloud.training Configure Security Groups and NACLs
  • 76. © Digital Cloud Training | https://digitalcloud.training Public, Private and Elastic IP Addresses
  • 77. © Digital Cloud Training | https://digitalcloud.training Public, Private and Elastic IP addresses Name Description Public IP address Lost when the instance is stopped Used in Public Subnets No charge Associated with a private IP address on the instance Cannot be moved between instances Private IP address Retained when the instance is stopped Used in Public and Private Subnets Elastic IP address Static Public IP address You are charged if not used Associated with a private IP address on the instance Can be moved between instances and Elastic Network Adapters
  • 78. © Digital Cloud Training | https://digitalcloud.training Working with IP Addresses
  • 79. © Digital Cloud Training | https://digitalcloud.training NAT Gateways and NAT Instances
  • 80. © Digital Cloud Training | https://digitalcloud.training NAT Gateways Private subnet Region VPC Availability Zone Public subnet Internet gateway EC2 Instance Destination Target 10.0.0.0/16 Local 0.0.0.0/0 igw-id Main Route Table Private Route Table NAT gateway Destination Target 10.0.0.0/16 Local 0.0.0.0/0 nat-gateway-id Private-IP Private-IP Elastic-IP The NAT gateway ID must be specified in the private subnet RT The NAT gateway is created in the public subnet
  • 81. © Digital Cloud Training | https://digitalcloud.training NAT Instances Private subnet Region VPC Availability Zone Public subnet Internet gateway EC2 Instance Destination Target 10.0.0.0/16 Local 0.0.0.0/0 igw-id Main Route Table Private Route Table NAT Instance Destination Target 10.0.0.0/16 Local 0.0.0.0/0 nat-instance-id Private-IP Private-IP Elastic-IP The NAT instance ID must be specified in the private subnet RT
  • 82. © Digital Cloud Training | https://digitalcloud.training NAT Instance vs NAT Gateway NAT Instance NAT Gateway Managed by you (e.g. software updates) Managed by AWS Scale up (instance type) manually and use enhanced networking Elastic scalability up to 45 Gbps No high availability – scripted/auto-scaled HA possible using multiple NATs in multiple subnets Provides automatic high availability within an AZ and can be placed in multiple AZs
  • 83. © Digital Cloud Training | https://digitalcloud.training Deploy a NAT Gateway
  • 84. © Digital Cloud Training | https://digitalcloud.training NAT Gateways Private subnet Region VPC Availability Zone Public subnet Internet gateway EC2 Instance Destination Target 10.0.0.0/16 Local 0.0.0.0/0 igw-id Main Route Table Private Route Table NAT gateway Destination Target 10.0.0.0/16 Local 0.0.0.0/0 nat-gateway-id Private-IP Private-IP Elastic-IP The NAT gateway ID must be specified in the private subnet RT The NAT gateway is created in the public subnet EC2 Instance Bastion/Jump host
  • 85. © Digital Cloud Training | https://digitalcloud.training Amazon VPC Peering
  • 86. © Digital Cloud Training | https://digitalcloud.training VPC Peering VPC A VPC B VPC C VPC D VPC Peering connections are NOT transitive – full mesh required 10.1.0.0/16 10.2.0.0/16 10.3.0.0/16 10.4.0.0/16 CIDR blocks cannot overlap VPC Peering enables routing using private IPv4 or IPv6 addresses VPCs can be in different accounts and Regions
  • 87. © Digital Cloud Training | https://digitalcloud.training Amazon VPN and AWS Direct Connect
  • 88. © Digital Cloud Training | https://digitalcloud.training AWS Site-to-Site VPN VPC Private subnet Public subnet VPN connection Virtual Private Gateway (VGW) Corporate data center CIDR: 10.0.0.0/16 CIDR: 192.168.0.0/16 A customer gateway is deployed on the customer side A VGW is deployed on the AWS site AWS VPN is a managed IPSec VPN Customer gateway
  • 89. © Digital Cloud Training | https://digitalcloud.training AWS VPN CloudHub VPC Private subnet Public subnet Virtual Private Gateway (VGW) Customer office Customer office Customer office Customer gateway A VGW is deployed on the AWS site Remote offices connect to the VGW in a hub-and- spoke model Customer gateway Customer gateway
  • 90. © Digital Cloud Training | https://digitalcloud.training AWS Direct Connect Corporate data center AWS Direct Connect location AWS cage Customer / partner cage AWS Direct Connect endpoint Customer / partner router Region Customer Router VPC Private subnet Public subnet • Private connectivity between AWS and your data center / office • Consistent network experience – increased speed/latency & bandwidth/throughput • Lower costs for organizations that transfer large volumes of data
  • 91. © Digital Cloud Training | https://digitalcloud.training AWS Transit Gateway
  • 92. © Digital Cloud Training | https://digitalcloud.training AWS Transit Gateway VPC A VPC B VPC C VPC D CGW Transit Gateway is a network transit hub that interconnects VPCs and on-premises networks Corporate office Subnet Subnet Subnet Subnet Subnet Subnet Subnet Subnet VPCs are attached to Transit Gateway TGWs can be attached to VPNs, Direct Connect Gateways, 3rd party appliances and TGWs in other Regions/accounts
  • 93. © Digital Cloud Training | https://digitalcloud.training AWS Outposts
  • 94. © Digital Cloud Training | https://digitalcloud.training AWS Outposts Corporate data center AWS Cloud VPC Private subnet Private subnet Communication with private IP addresses
  • 95. © Digital Cloud Training | https://digitalcloud.training AWS Outposts Services you can run on AWS Outposts include: • Amazon EC2 • Amazon EBS • Amazon S3 • Amazon VPC • Amazon ECS/EKS • Amazon RDS • Amazon EMR
  • 96. © Digital Cloud Training | https://digitalcloud.training SECTION 10 Deployment and Automation
  • 97. © Digital Cloud Training | https://digitalcloud.training Caching and Amazon CloudFront
  • 98. © Digital Cloud Training | https://digitalcloud.training Amazon CloudFront Users Edge location Region Amazon EC2 Amazon S3 CloudFront Origins Edge location Edge location Edge location Edge location Edge location Edge location Users Users Users Users Users Users Content is pushed from the origin and cached Edge locations are distributed around the world Users are directed to the nearest edge location
  • 99. © Digital Cloud Training | https://digitalcloud.training S3 Static Website with CloudFront
  • 100. © Digital Cloud Training | https://digitalcloud.training AWS Global Accelerator
  • 101. © Digital Cloud Training | https://digitalcloud.training AWS Global Accelerator Users in US Edge location Addresses: 51.45.2.12 53.58.31.89 us-east-1 ap-southeast-2 AWS Global Network Global Accelerator Users are redirected to another endpoint Static anycast IP addresses Requests are routed to the optimal endpoint User traffic ingresses using the closest Edge Location Traffic traverses the AWS global network Connect via Edge Location
  • 102. © Digital Cloud Training | https://digitalcloud.training AWS Global Accelerator vs CloudFront • Both use the AWS global network and edge locations • CloudFront improves performance for cacheable content and dynamic content • GA improves performance for a wide range of applications over TCP and UDP • GA proxies connections to applications in one or more AWS Regions • GA provides failover between AWS Regions
  • 103. © Digital Cloud Training | https://digitalcloud.training AWS CloudFormation
  • 104. © Digital Cloud Training | https://digitalcloud.training AWS CloudFormation Infrastructure patterns are defined in a template file using code VPC Public subnet Public subnet AWS CloudFormation Auto Scaling group CloudFormation builds your infrastructure according to the template
  • 105. © Digital Cloud Training | https://digitalcloud.training AWS CloudFormation • Infrastructure is provisioned consistently, with fewer mistakes (human error) • Less time and effort than configuring resources manually • Free to use (you're only charged for the resources provisioned) • A template is a YAML or JSON template used to describe the end- state of the infrastructure you are either provisioning or changing • CloudFormation creates a Stack based on the template • Can easily rollback and delete the entire stack as well
  • 106. © Digital Cloud Training | https://digitalcloud.training Create CloudFormation Stack
  • 107. © Digital Cloud Training | https://digitalcloud.training AWS Cloud Development Kit (CDK)
  • 108. © Digital Cloud Training | https://digitalcloud.training AWS Cloud Development Kit • Open-source software development framework to define your cloud application resources using familiar programming languages • Preconfigures cloud resources with proven defaults using constructs • Provisions your resources using AWS CloudFormation • Enables you to model application infrastructure using TypeScript, Python, Java, and .NET • Use existing IDE, testing tools, and workflow patterns Download pre- configured application components Model infrastructure using a programming language Deploy with CloudFormation
  • 109. © Digital Cloud Training | https://digitalcloud.training AWS Elastic Beanstalk
  • 110. © Digital Cloud Training | https://digitalcloud.training AWS Elastic Beanstalk Region VPC Availability Zone Public subnet Availability Zone Public subnet Application Load Balancer Instance Auto Scaling group Elastic Beanstalk environment AWS Elastic Beanstalk Developer Client Instance Everything within the EB environment is launched and managed by EB Upload source code in ZIP file Can launch and manage EC2 instances or Docker containers on ECS
  • 111. © Digital Cloud Training | https://digitalcloud.training AWS Elastic Beanstalk • Supports Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker web applications • Integrates with VPC • Integrates with IAM • Can provision most database instances • Allows full control of the underlying resources • Code is deployed using a WAR file or Git repository
  • 112. © Digital Cloud Training | https://digitalcloud.training AWS Elastic Beanstalk CloudFormation Elastic Beanstalk “Template-driven provisioning” “Web apps made easy" Deploys infrastructure using code Deploys applications on EC2 (PaaS) Can be used to deploy almost any AWS service Deploys web applications based on Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker Uses JSON or YAML template files Uses ZIP or WAR files (or Git) Similar to Terraform Similar to Google App Engine
  • 113. © Digital Cloud Training | https://digitalcloud.training Deploy a Web Application
  • 114. © Digital Cloud Training | https://digitalcloud.training AWS Developer Tools (Code*)
  • 115. © Digital Cloud Training | https://digitalcloud.training Continuous Integration AWS CodeBuild AWS CodeCommit Developer commits code Build servers build and test code Results returned to Developer Code repository could be GitHub, CodeCommit etc.
  • 116. © Digital Cloud Training | https://digitalcloud.training Continuous Integration and Continuous Delivery AWS CodeBuild AWS CodeCommit Developer commits code Build servers build and test code Results returned to Developer AWS CodeDeploy Code released for deployment Code deployed to application Application Application
  • 117. © Digital Cloud Training | https://digitalcloud.training Continuous Integration and Continuous Delivery AWS CodeBuild AWS CodeCommit AWS CodeDeploy AWS CodePipeline CODE BUILD & TEST DEPLOY
  • 118. © Digital Cloud Training | https://digitalcloud.training AWS CodeStar AWS CodeStar AWS CodeBuild AWS CodeCommit AWS CodeDeploy AWS CloudFormation Developers IDE connects to CodeStar API Endpoint Bucket Lambda function
  • 119. © Digital Cloud Training | https://digitalcloud.training AWS CodeStar
  • 120. © Digital Cloud Training | https://digitalcloud.training AWS X-Ray
  • 121. © Digital Cloud Training | https://digitalcloud.training AWS X-Ray Records latency writing to a DynamoDB table Records latency from client to application
  • 122. © Digital Cloud Training | https://digitalcloud.training AWS X-Ray • AWS X-Ray helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture • AWS X-Ray supports applications running on: • Amazon EC2 • Amazon ECS • AWS Lambda • AWS Elastic Beanstalk • Need to integrate the X-Ray SDK with your application and install the X-Ray agent
  • 123. © Digital Cloud Training | https://digitalcloud.training AWS OpsWorks
  • 124. © Digital Cloud Training | https://digitalcloud.training AWS OpsWorks • AWS OpsWorks is a configuration management service that provides managed instances of Chef and Puppet • Updates include patching, updating, backup, configuration and compliance management AWS OpsWorks Instance Instance Instance Instance SysOps Admin Instances are configured by OpsWorks using Chef/Puppet Configuration changes are submitted to OpsWorks