CLOUD COMPUTING WITH AWS : everything you need to know to be an aws cloud practitioner

Embark on a ground-up journey to cloud computing and the Amazon Web Services (AWS) eco-system, including all the other systems, services, and the security associated with it. This book provides you with the practical know-how to become an AWS Cloud practitioner. Your exploration will take you from key fundamentals of identity and access, storage, networking, architectures, databases, security and compute services all the way through to more advanced topics. The book is organized into easy-to-follow and engaging chapters with simple examples to make complex concepts very easy to understand followed by simple step-by-step demonstrations and case studies to make you proficient in every area of AWS. You'll manage databases in your on-prem data centers and set up, operate, and scale relational database in the cloud. All the services and resources taught in this book come from the AWS Free Tier, so you will not have to pay anything to use and learn from this book. What You'll Learn Understand key concepts and benefits of cloud computing Employ key cloud computing models and services Review the concept of virtual machines in a cloud computing context Study compute services that meet your requirements Who This Book Is For IT professionals looking to change their domain to cloud computing as well as those who are looking to utilize AWS for their systems and projects. Table of Contents About the Author About the Technical Reviewers Chapter 1: Introduction to Cloud Computing Defining Cloud Computing Compute Storage Database Networking Fundamentals of the Cloud Cloud Deployment Models Private Clouds Public Clouds Hybrid Clouds Traditional Data Centers Cost Capacity Planning Staffing and Technical Skill Sets Cloud Service Models IaaS (Infrastructure as a Service) Platform as a Service (PaaS) Software as a Service (SaaS) Key Cloud Concepts Scalability Elasticity Agility High Availability Fault Tolerance The Benefits of Cloud Computing Trade Fixed Expenses for Variable Expenses Benefit from Massive Economies of Scale Stop Guessing at Capacity Increased Speed and Agility Don’t Spend Money on Running and Maintaining Data Centers Go Global in Minutes The Different Cloud Providers Summary Chapter 2: Getting Started with AWS AWS Accounts AWS Free Tier Securing an AWS Account Multi-Factor Authentication (MFA) Access Key and Secret Key Password Policy AWS Budgets and Alerts Interacting with AWS The AWS Management Console AWS CLI The Software Development Kit (SDK) Using the AWS Console Creating an Account Alias AWS Region Search AWS Services Installing the AWS CLI Using the AWS CLI The AWS Global Infrastructure AWS Regions and Availability Zones What Are Availability Zones? AWS Edge Locations Summary Chapter 3: AWS Identity and Access Management What Is Identity and Access Management? Identification Authentication Authorization A Closer Look at AWS Identity and Access Management (AWS IAM) IAM Users, Groups, and Roles Root User IAM User IAM Groups IAM Role Creating an IAM User, Group, and Role Creating Users Creating Groups Logging In with the IAM User and Creating Roles IAM Policies and Features Types of Policies Identity-Based Policy Resource-Based Policy Managed Policies AWS Managed Policy Customer-Managed Policies Inline Policy IAM Best Practices User Group Permissions Auditing Password Policy MFA Rotate Root User AWS Core Services Storage Services Compute Services Database Services Networking Services Summary Chapter 4: AWS Storage Services Overview of Amazon S3 S3 Buckets Folders S3 Objects Maximum Object Size Object Versioning Storage Class Permissions Amazon S3 Demo Availability, Durability, and Data Replication Availability Durability Data Replication Storage Classes S3 Standard Amazon S3 Intelligent-Tiering (S3 Intelligent-Tiering) Standard IA (Infrequent Access) One Zone-Infrequent Access (S3 One Zone-IA) Glacier Reduced Redundancy Summary Chapter 5: Virtual Private Cloud (VPC) What Is a VPC? Subnets, Internet Gateways, Route Tables, and NAT Gateways Public Subnet Private Subnet Internet Gateway Route Table NAT Gateway Security Groups and NACLs Inbound Traffic Outbound Traffic What Is an AWS Security Group? What Is an NACL? What Is the Difference Between a Security Group and NACL? Create a VPC, Public, and Private Subnet Summary Chapter 6: Elastic Compute Cloud (EC2) Compute Services in AWS Virtual Machines Cost Savings Agility and Speed Less Downtime Scalability Amazon Elastic Compute Cloud (EC2) Amazon EC2 Components Instances AMI (Amazon Machine Image) Key Pairs Security Groups EC2 Tags EC2 Instance Naming Conventions An AWS EC2 Instance Family An AWS EC2 Instance Generation AWS EC2 Additional Capability AWS EC2 Instance Size Instance Sizing Instance Types General-Purpose Instances Compute-Optimized Instances Memory-Optimized Instances Storage-Optimized Instances Amazon EC2 Purchase Types On-Demand Instances Paying for Compute Capacity by the Hour or Second No Long-Term Commitments No Upfront Payment, But High Cost Use Cases for On-Demand Instances Reserved Instances Reservation Periods 75 Percent Discount Compared to On-Demand Instances Reserve-Specific Instance Types Standard Reserve Instance Types Convertible Reserved Instance Types Schedule Reserve Instance Types Spot Instance Type Lost Any Time Spot Instance Type User Case The Savings Plan Significant Savings Flexible Plans Compute Savings Plan Instance Savings Plan Amazon SageMaker Savings Plan Dedicated Hosts Create an EC2 Instance Summary Chapter 7: High-Level Architecture Autoscaling What Is AWS Autoscaling? EC2 Autoscaling Group Minimum Size Desired Capacity Maximum Size EC2 Autoscaling Policies Manual Scaling Dynamic Scaling Simple/Step Scaling Target Tracking Scaling Scheduled Scaling Predictive Scaling Use Launch Configuration and Launch Template Launch Configuration Launch Template Load Balancer Elastic Load Balancer AWS Elastic Load Balancer (ELB) Using ELB and Autoscaling Together Create a Launch Template Create an Autoscaling Group Create a Scaling Policy Create an Application Load Balancer Summary Chapter 8: Databases Data Types Structured Data Unstructured Data Semi-Structured Data Relational Databases NoSQL Databases On-Premise vs Cloud Database Hosting Amazon Relational Database Service Amazon RDS Overview RDS Availability RDS Instance Type RDS Database Engine RDS Pricing Instance Cost Storage Cost Amazon DynamoDB DynamoDB Overview Create Your First Amazon RDS Database Create a Subnet Group Create an RDS Database Summary Chapter 9: Advanced AWS Services EBS Overview EBS Features Types of EBS Volumes EFS Overview DNS and Amazon Route 53 AWS VPN and AWS Direct Connect Compute Fundamentals for AWS Elastic Container Service EC2 Launch Type Fargate Launch Type AWS Elastic Beanstalk Serverless Services AWS Lambda Automatic Scaling Pay Per User Price RAM Integration Lambda Functions Introduction to Amazon ElastiCache and DynamoDB Amazon ElastiCache How ElastiCache Works ElastiCache Use Cases Amazon Redshift Amazon CloudFront Data Transfer with AWS Snowball Snowball versus Snowball Edge Devices AWS Storage Gateway Storage Gateway Use Cases Summary Chapter 10: AWS Security and Management Services AWS Security Services Overview The Shared Responsibility Model AWS Is Responsible for the Security “of” the Cloud The Customer Is Responsible for Security “in” the Cloud AWS Recap Security Compliance General Data Protection Regulation (GDPR) PCI DSS (Payment Card Industry Data Security Standard) AWS Tools and Products for Security Compliance Encryption in AWS Encryption in Transit Encryption at Rest The AWS Config Service AWS Config Rules AWS CloudTrail Enabling and Configuring CloudTrail How CloudTrail Works Amazon Trusted Advisor Amazon CloudWatch How Amazon CloudWatch Works CloudWatch Uses Cases AWS Support Plan The Basic Support Plan The Developer Support Plan The Business Support Plan The Enterprise Support Plan Summary Chapter 11: AWS Billing and Pricing AWS Pricing Principles Pay as You Go Pay Less by Using More Save When You Reserve Free Usage Tier AWS Organization Master Account Member Account Organization Unit (OU) Service Control Policy (SCP) Consolidated Billing One Bill Easy Tracking Combined Usage No Extra Fees AWS Cost Management Tool The Billing and Cost Management Console AWS Resource and Cost Allocation Tags Consolidated Billing AWS Cost Explorer AWS Budget Automated Billing AWS Pricing Calculator Summary Index