Please enable JavaScript.

Coggle requires JavaScript to display documents.

Amazon Web Services (VPC (Virtual Private Cloud) (Overview (Why have it?,…

- - - - Start Virtual Instances on Servers (similar to Digital Ocean)
      - Elastic Beanstalk spins up servers using EC2
      - Dashboard
        
        Look at instance
        
        Actions
        
        Able to close it down
      - Instance Family
        
        First letter designation for naming the instance which describes the relationship between RAM, CPU and SSD storage
        m => multi-purpose
        c => compute
        t => burst (to higher level when required by workload) - earn credits in low traffic for when get high traffic
        
        Types
        
        Storage Optimized
        
        General Purpose
        
        Memory Optimized
    - - Go to console => Compute Section => EC2 management => Launch Instance
      - Choose an Amazon Image Machine (Instance) => Operating System and Programmes installed
      - Choose Instance type -> e.g how many CPUs, RAM
        (Look at free-tier marker)
        
        Instance type with m at the start => multi-purpose (called the instance family)
        
        m4 => multi-purpose with 4 CPUs
        
        -4x => indicates ratio of RAM to CPUs
    - - Storage
        
        Not Persistent data storage on Amazon EC2 (if shut down instance data is lost)
        
        Storage config of the instance
        
        EBS (Elastic Block Storage) - Storage automatically if you shut down the instance (the data will still be in EBS)
      - Configure Instance Details e.g. number of instances, network and monitoring
      - Decide how many instances and whether to put in auto-scaling
      - Pricing
        
        Reserve an Instance (cheaper)
        
        Pay directly
        
        Request Spot instances - get an instance once it meets your bid price (good for non time critical class)
      - Network
        
        What network the instance will be part of (subnets)
        
        Assign a public IP
      - IAM role
        
        Permission User and giving other services permission
      - Tags
        
        Trace instance in AWS and manage at the same time
      - Security
        
        Have to apply security group to each instance
        
        Decide which traffic can enter and leave the instance (firewall)
        
        Don't leave source as 0.0.0.0 (everyone can access) - just use IP
        
        Make sure to allow port 80 to view in browser
    - - Press launch button
      - Prompt to select existing key pair - Need this to download this otherwise locked out of instance
      - Create new key pair
        
        assign name and download
    - - SSH (openSSH on windows)
      - Go to downloaded key-pair file via terminal
      - ssh -i /path/to/key-pair <usermame><public dns name>
      - After SSH - get warning about key file (anyone can overwrite)
        
        FIX: chmod 400 <file-name> (demo2-ec2.pem)
      - Once logged in check
        
        cd / (go to root)
        
        ls
    - - Options for Instances types (pricing, memory)
      - Security Groups
        
        Firewall settings in console
      - Elastic IP
        
        IP Changes every time shut instance down
        
        AWS allows to change and still route to Website
        
        They are fixed IPs allocated to account (limited amount) => THen assign these IPs to instances whenever you want and whenever you create them
      - Load Balancer
        
        Distribute Traffic
      - Close
        
        Rightclick instance => Terminate
- - - - Hosts Web App and manages it
      - Must edit Node command in Instance configuration - to be the same one in package.json to start Node e.g. npm start
      - Elastic Beanstalk is a wizard which makes it quick
      - Alot of config options and good prices
- - - - Configure the function using Code
      - Need to give lambda function a role/role name in order for other amazon services to interact with it
      - Default templates permissions is for log files used in CloudWatch service
      - Can set the memory for the function and timeout
- - - - Resources are URLS "/"
      - Methods are functions to run at those URLs
    - - Integration Request
      - Method Response
      - Method Request
      - Integration Response
        
        Set browser cache
      - Things to do to the request and where to pass it to
- - - - Keep root for billing and account admin
      - Create lower privilege users for web app tasks
      - Add User
        
        Set Access Type
        
        Developer Access => Programmatic Access
        
        Console Access
      - Set Permissions at Group Level
      - Activate MFA - MultiFactor Authentication
        
        Good if password stolen
    - - Rules in JSON object, Effect, Action, Resource
      - e.g. Allow service x on this user
      - Roles
        
        Default is no AWS service can access another
        
        Gives every service a role to be accessed by other services
- - - - Control access to resources (Security Group)
        
        Security Group applied on per instance level
  - - - Can redirect traffic via route table to a Nat Gateway which translates internal IPs (private) to public IPs and forwards this to internet to access internet indirectly for software updates
        
        Instances still have no public IP
  - - - CIDR block
        
        Indicates what IP addresses you can put on the subnet
      - CIDR Binary Calculator
        
        Enter IP and click calculate and you will get a binary representation of IP
        
        Binary representation will have 4 segments which equal 4 segments of IP e.g.
        
        IP Address 192.154.0.0 => four segments
        
        CIDR Notation of the above IP will be 00000.000000.01010.0000
        
        Enter a number in the subnet/netmask section of the calculator for it to calculate the ranges necessary e.g.
        
        If enter 32 - no ranges can be calculated as 32 represents whole binary string of IP
        
        If enter 24 then the first 3 sections are fixed and the last digit is floating to provide a range (similar for 16)
      - Get Range of IP addresses that you can use internally without exposing to internet
      - CIDR in Amazon is like the calculator and tells you how many internal IP addresses are available to use
  - - - Attached to VPC
      - Every new VPC will have new VPC