**************************28March2021**************************************
-------Ultimate AWS Certified Cloud Practitioner - 2020--------------- 40AWS
services
Root User signin
What is cloud computing?----
Private Cloud --Rackspace
Public cloud--AWS,Azure,Google Cloud
Hybrid Cloud
Five Characteristics of cloud---
On-Demand self service
Broad network access
Multi-tenancey and resource pooling:multiple customers can share the same
infrastructure and application with security and privacy
Rapid elasticity and scalability:
Measured Service
Types of cloud computing:
IAAS--Infrastructure as a Service
PAAS--
Saas-Software as a service
IAAS--Amazon EC2 on AWS,GCP,Azure,Rackspace,Digital Ocean,Linode
PAAS- Elastic Beanstalk on AWS,Heroku,Google App engine,Windows Azure
SAAS--Google Apps,Dropbox,Zoom
AWS Global services:
IAM --Identity and access management
Route 53(DNS Service)
CloudFront--Content Delivery Network
WAF--Web Application Firewall
Most AWS services are Region-Scoped-
Amazon EC2
Elastic Beanstalk
Lambda--Function as a Service
Rekognition--Software as a Service
Region specific services--and we can check if service available in our region
AWS Management Console--After login
AWS Shred responsibility Model diagram--
1.) IAM service--Its global service
IAM have users and group--hsve a JSON document policies assigned
Give a least permission for new user
Root user and IAM user to login
Administrator access policy
IAM policy,create own policy
1.2)Password Policy & MFA (Multi Factor Authentication)
Virtual MFA
Hardware MFA
1.3)AWS CLI--
Generate Access keys using--AWS Console
Access Key --like username
Secret Access key --like pwd
1.4)AWS EC2 instance roles
Lambda Function roles
Roles for cloudformation
1.5)IAM security tools
1.6)Shared Responsibility Model for IAM--
1.7)Audit--IAM Credential Reports and Iam access advisor
************04April2020*******************************************
Foundation --Cloud Practitioner
AWS Developer --Associate Developer
Containers and code for Serverless applications
Topic for Developer Exam--
Deployment 22%
Security--26%
Development with AWS services--30%
Refactoring 10%
Monitoring & Troubleshooting--12%
AWS services are EC2,S3,Beanstalk,
CodeBuild,CodeDeploy and Dynamo DB
Security services in AWS
Read AWS white papers -----Imp
Deployment----CICD,Beanstalk,Serverless
Security--each service deep-dive + dedicated section
Development with AWS Service--Serverless,API,SDK & CLI
Refactoring--Understand all the AWS services for the best migration
Monitoring & Troubleshooting --CloudWatch,CloudTrail,X-Ray
1.)AWS Fundamentals 1--IAM,EC2
--IAM --how to create users,group and policies
**************************07April2021***************************************
AWS Solution Architect Associate-------------
[Link] --AWS Certified Solutions Architect -
Associate 2020 (PASS THE EXAM!)
Design Resilient Architeture --S3,Storage,SQS,SNS,DB Layer,Load Balancing
Define Performant Architetures--DynoDb,Redshift,Caching,Elastic cache
Specify Secure Applications and Architectures --
VPC
Desgin Cost-Optimized Arch.
Define Operationally-Excellent Arch.
Whitepaper read:
AWS Well-Architected Framework
1.)Introduction to S3--Simple Storage Service
Object store from 0bytes to 5Terabytes in size
S3Object vs S3 Bucket
S3Buket--holds [Link] can also have folders which in turn hold objects
S3is universal namespace so bucket names must be unique(like having a domain name)
************************08April2021************************************************
******
Udemy Course------AWS Solution Architect Associate 2021
IAM and EC2
1) IAM -- A region is a cluster of data centers
AZ --discrete data center with redundant power,networking
EC2 instance in region specific
IAM is global service
Site--Global Infrastructure in AWS
Region Table--
IAM --stands for Identity and access management
AWS security is there:
Users
Group
Roles --Internal usage within AWS resources and services
It is center of AWS
Users must be creted with proper permissions
Policies are written in JSON
IAM has a global view
MFA--Multi factor authentication
IAM federation--SAML standard(Active directory)
IAM Role per Application
IAM user per physical person
2)EC2--Server Access
Launching Virtual machines in the cloud
Storing data in the virtual drives(EBS)
Distributing load across machines (ELB) or load balancing
Scaling the services using an auto-scaling group(ASG)
Serverless
EC2 Instance
[Link] ---Lean
implementation--
************************09June2021*************************************************
***********************
AWS Academy---------------
Module 9: Implementing Elasticity,High Availability and Monitoring----------------
---------------------------------------------
Sections:
1.) Architectural Need
2.) Scaling your compute resources
3.) Scaling your databases
4.) Designing an environment that's highly available
5.) Monitoring
Section 2: Scaling your compute resources: