Please enable JavaScript.

Coggle requires JavaScript to display documents.

AWS DEV CERT (S3 (Limits (Bucket name (can contain char, number,periods,…

- - - - CORS
      - Permission on index.html
      - select make public
    - - <BUCKETNAME>.s3-website-<REGION>.amzonAWS.com
      - acme.com.s3-website-us-east-1.amazonAWS.com
  - - - read-after-write consistency
        
        immedately visible
        
        no delay
    - - eventual consistency
        
        possible delay
  - - - not enabled = null
      - older files get no version while enabling
      - version number starts with 1
  - - - most common
      - How it works
        
        each object encrypted with unique key
        
        AES 256
        
        encrypted key
        
        encrypt key itself
        
        with masterkey that it requlary rotates
      - request header
        
        x-amz-server-side-encryption :fire:
  - - - public
      - restricted
    - - AWS.Referer key
        
        access restricted to domains
      - requires a principal
    - - but owner can grant access to others
  - - - 0 Bytes to 5TB
    - - use mulitpart upload for objects > 5GB
      - max. 5GB
    - - could be increased by AWS
    - - only lowercase
      - 3-63 characters
      - can contain char, number,periods, dashes
        
        but no dash at the end
      - no underscores allowed
      - must start with letter or number
  - - - BucketAlreadyExists
      - there is a bucket with the same name
      - BucketNotEmpty
        
        while deletion
      - BucketAlreadyOwnedByYou
      - InvalidBucketState
  - - - use Multi-Object Delete
  - - - s3:ReducedRedundandancyLostObject Notification
      - use SNS with SQS subscribtion endpont with a worker instance
        
        replaces lost RRS objects
  - - - between regions
- - - - IAM role can be assumed by app that allows federated users
  - - - Boolean
      - Number
      - String
    - - global
        
        can be added anytime
        
        sort key
        
        different partition
      - local
        
        supported consistency model
        
        eventual consistent reads
        
        strong consistent reads
        
        same partition key (as base table) as primary key
  - - - ListTables
      - UpdateItem
      - UpdateTable
        
        consume no capacity units :fire:
      - CreateTable
      - Logical Operators
        
        OR
        
        NOT
        
        AND
      - PutItem (new Item)
    - - Scan
        
        eventually consistent reads by default
        
        examines every item in the table :!:
        
        use smaller page size to increase performance
        
        max. 1 MB data
      - Query
        
        eventually consistent reads by default
        
        returns the items matching the primary key search
        
        best performance
        
        searches indexes only
        
        returns all attributes on an item
        
        uses Expressions to filter
    - - returns item attributes
      - up to 1MB of data
      - up to 100 items at a time
      - retrieval of multiple items
  - - - but unlimited attributes / item
    - - 100
    - - group of items with the same partition key value
    - - not allowed to increase :fire:
      - max. 5 local
      - max 5 global
    - - could be increased by AWS
      - per account
      - per region
  - - - for consistency
      - condition must be fullfilled
      - protect while updating the same table
    - - many to few principle
        
        attributes with many values
      - alternative wording: HASH KEY
  - - - could be exceeded by a table or global secondary indexes
    - - Strongly Consistent Reads consist of 1 read per second
      - eventually Consistent Reads consist of 2 reads per second
      - round up to increments of 4 KB
    - - divide item size by 1KB (11,5:1=12)
    - - deletion
        
        delete whole tables instead of all items
- - - - application can be currently unavailable
      - receiving
      - sending
    - - but dublicates possible
  - - - 1 million requests
  - - - max. 20 Seconds
    - - timeout
      - message is available
  - - - 1.0
      - 1.1
      - 1.2
  - - - handle it programatically
- - - - Message
      - MessageId
      - Signature
      - SignatureVersion
      - SigningCertURL
      - Subject
      - Timestamp
      - TopicArn
      - Type
      - UnsubscribeURL
  - - - Submit GCM notification credentials to SNS
      - Receive Registration ID for each device
      - Pass device token to SNS
      - SNS creates mobile subscription endpoint
    - - Get set of credentials in order to be able to connect
  - - - SNS send to topic
      - topic will be replicated
      - pushed to multiple endpoints
        
        SQS queues
        
        HTTP endpoints
        
        email addresses
- - - - but not human decision task
  - - - get task
      - process tasks
      - return results
    - - controls the coordination of tasks
    - - containers to segregate application resources
      - different domains can´t communicate
- - - - better troubleshooting
      - rapidly remapping to another instance
  - - - create image
        
        2 .RegisterImage
        
        CreateImage
      - describe image
        
        DescribeImages
        
        list AMIs available in given region
      - Attach EBS volume
        
        AttachVolume
      - bundle instance
        
        BundleInstance
  - - - EC2 Instance termination = data lost
      - Reboot/stop/start = persistent
    - - can be stopped
      - can be restarted
  - - - protect with chmod 400
  - - - Instance Store backed is 10GB
    - - max. Amount listet in AWS console
      - could be increased by AWS :smiley:
- - - - contact AWS to increase :smiley:
  - - - list all resources that belongs to the Stack
    - - value of attribute from resource on template
    - - list all current stacks
    - - list all current stacks
    - - returns values of keys in two-level map (mapping section)
    - - append set of values to single value
    - - retrieve an object from set of objects
      - uses index number (starts with 0)
    - - splits a string by delimiter
    - - Information about stacks on specific filter
  - - - Resources section
        
        Access Control
        
        PublicRead
        
        mandatory section :fire:
      - Parameter section
        
        instance type
        
        allow user to specifiy PEM key-name at start time
      - Template Description Declaration
      - Template Format Version Declaration
      - Mappings section
      - Outputs section
    - - in resource properties
      - in outputs
      - in metadata attributes
      - in update policy attributes
      - get values while runtime
        
        examples
        
        Fn::Join
    - - minimum configuration
      - public IP
- - - - Web Service
      - distributed in-memory cache
        
        setup
        
        manage
        
        scale
  - - - select public network
  - - - 100 Listerner / LB
      - 5 security groups / LB
      - 1 subnet / AZ and LB
- - - - Nginx
      - Apache HTTP
    - - Apache HTTP
    - - IIS
    - - Tomcat
      - Passenger
      - Puma
    - - Apache HTTP
    - - Passanger
      - Puma
  - - - monitor application
      - scale application
      - deploy application
    - - for beginners
      - less infrastructure configuration
      - focus on components and performance
  - - - a worker application processes long-running workloads on demand or perform tasks on schedule.
  - - - can have many versions (1:M)
      - can be deployed to environments
      - are unique packages
    - - recommended: create own db instance and connect inside Elastic Beanstalk
      - Elastic Beanstalk kann provision databases, but they will be deleted if the Beanstalk instance gonna be deleted :warning:
    - - configuration update
      - application update
      - different ways
        
        1 instance at a time
        
        a % of instances
        
        immutable updates
- - - - requests from anyone denied
      - an allow overrides default denies