Please enable JavaScript.

Coggle requires JavaScript to display documents.

Pricing and Support (Free services (Amazon VPC, AWS elastic Beanstalk,…

- - - - Clock hours of server time
        
        Resources incur when running
        
        Matters elastic load IPs allocaton to de-allocation time
      - Machine configuration
        
        Physical capacity of the instance
        
        Pricing varies with region, OS, number of cores, memory
      - Machine Purchase type
        
        On Demand Instances
        
        By the hour
        
        No minimum commitment
        
        Reserved instance
        
        Low/No upfront payment
        
        Discount on hourly charge
        
        Spot instance
        
        bid for unused EC2 capacities
      - Number of Instances
        
        Provision multiple instances to handl peak loads
      - Load balancing
        
        Price contributors
        
        Number of hours runs
        
        amount of data it process
        
        Distribut load among instances
      - Detailed monitoring
        
        Users CloudWatch
        
        Basic monitoring
        
        By default
        
        No additional cost
        
        Detailed monitoring
        
        Fixed monthly rate
        
        Monitoring for every minute
        
        7 pre-selected metrics records
        
        Partial months pro-rata basis at a per instance-hour rate
      - Auto Scaling
        
        Auto adjust number of instances
        
        No additional charge for this beyon Amazon cloud fees
      - Elastic IP address(EIP)
        
        One elastic IP address associated with a running at no charge
      - OS & Software
        
        OS prices included instance prices
        
        AWS partnerships with other vendors for certain software
        Eg: Microsoft, IBM let run some commercial sw on EC2 like MS SQL on Window
        
        Other commercial sw need license from Vendors. Eg:
        
        non standard OS
        
        Oracle application
        
        Windows server applications like SharePoint, Exchage
        
        Can bring your existing license through specific Vendor program too
        
        MS Mobility through SW Assurance program
  - - - Storage Class
        
        Standard
        
        11*9 % durability - 99.999999999%
        
        99.99% availability
        
        SIA
        
        for less frequesntly access data
        
        with slightly lower level redundancy than SS3
        
        Each class with different rate. - SIA is cheaper tahn SS3
      - Storage
        
        Number & size of the object
        
        Type of storage
      - Requests
        
        Number and type of request
        
        Get requests incur different charge
        
        Other request are PUT and Copy
      - Data transafer
        
        Amount of data transferred out of the Amzaon S3 region
  - - - Volumes
        
        Charged by the amount provisioned in GB per month
      - IOPS
        (input output operstions per sec)
        
        Gereral Purpose
        
        Included in price
        
        Magnetic
        
        Charged by the number of reqeust
        
        Provisioned IOPS
        
        Charged by the amount you provision in IOPS
      - Snapshots
        
        Backup snapshots to S3 ( For durable recovery)
        
        If opt for snapshots, added cost is per GB-month of data stored
      - Data transfer
        
        Consider amount of data transferred out of the application
        
        Inbound data transfer is free
        
        Outbound data transfer charges are tiered
  - - - Clock hours of Server time
        
        Incur charges when running
      - Database Characteristics
        
        Physicala capacity of the database
        
        DB characteristics vary depend on the db engine size and memory class
      - Database purchase type
        
        For On-Demand
        
        pay compute capacity per hour
        
        No minimum commitments
        
        For Reserved
        
        low, one-time upfront payment for each DB instance reserved
        
        Reservation is for 1 year or 3 year term
        
        discounts on the hourly charge for that instance
      - Number of DB instances
        
        Can provision multiple DB instances to handle peak loads
      - Provisioned storage
        
        No charge for backup storage of up to 100% of provision db storage for active DB instance
        
        Upon DB instance termination, backup storage is billed
        
        Per gb per month
      - Additional Storage
        
        Charge for backup storage in addition to provisioned storage
        
        Billed per db per month
      - Requests
        
        Number of input and output requests of the db
      - Deployment type
        
        Can be
        
        Single or mutiple availability zones
        
        Storage & IO charges vary based on number of availability zones deployed to
      - Data Transfer
        
        Inboud data transfer is free
        
        Outbound data transfer are tiered
  - - - Traffic distribution
        
        Data transfer and request pricing vary across geographic regions
        
        Pricing is based on "edge location" by which content is served
      - Requests
        
        Number and type of quests made
        
        Geographic region in which requests are made
      - Data transfer out
        
        Amount of data transferred out of Amazon
- - - - Few Parameters
        
        Currency
        
        Environment type : On prem or Colocation
        
        Region
        
        Workload type - General or Sharepoint
        
        host type - Physical or virtual
        
        Server type - eg: db or non db
- - - - Experimenting with AWS
      - Production uses of AWS
      - Business critical of AWS
    - - Proactive guidance
        
        TAM
        ( Technical account manager)
        
        Provide guidance
        
        Architectural revie
        
        continuous ongoing communication
      - Best practices
        
        Trusted advisor
        
        Customized cloud expert
        
        Online resource check opportunities to
        
        reduce monthly expenditure
        
        increase productivity
      - Account Assistance
        
        Support concierge
        
        Billing and account expert
        
        Will provide quick and efficient analysis on the issue
        
        Addresses all non- technical billing and account level inquiries
  - - - Developer
        
        7 core check by Trusted advisor
        
        Business hours email access support
        
        Unlimited cases/ 1 primary contact
        
        General guidance <24 hours and System impared <12 hours
        
        General architectural guidance
        
        $29 per month
      - Business
        
        All above dev support
        
        Trusted advisor full set of checks
        
        Unlimited cases/ Unlimited contacts (IAM supported)
        
        Production system impared < 4 hours and Production down <1 hour
        
        Contextual to your use- cases in architectural guidance
        
        $ 100 per month
      - baisc
      - Enterprice
        
        All above Business suport
        
        Business critical system down < 15 min
        
        Consultative review and guidance based on applications
    - - https://aws.amazon.com/premiumsupport/plans/
- - - - Fault tolerance
        
        Operation during component failure
        
        Built in redundancy of components
      - High available
        
        System "always" functioning and accessble
        
        Downtime is minimized as much as possbile
        
        without human intervention
  - - - Quickly deploy new applications
      - Instantly scale up as the workload grows
      - Instantly shut donw resources that are no longer required
      - Scale down and don't pay for the infrastructure
      - Is the power to scale computing resource up or down
        
        Benefit of having 24*7 elastic infrastructure
        
        Adapt their consumption
        
        Launch new services or products
        
        user services at own pace. can plan for seasonal behavior
        
        Accommodate new strategic directions
- - - - Factors influence agility
        
        Experimentation
        
        Operation as code
        
        Safely experiment
        
        develop operations proceedures and practice failures
        eg:
        Spin up servers in minutes for experimenting or re-purpose servers for other experiments
        
        Testing using different configurations
        
        CloudFormation enables templated and controlled environments
        
        Culture of innovation
        
        More experimentation more often
        
        Lead for discovery of new configurations and innovations
        
        Experiment quickly with low cost/risk
        
        Speed
        
        Global reach with moment of notice
        
        New resource are a click away
        
        Dramatic increase in agility
- - - - Benefit for all customers
      - Provide evolving service with low or no cost for
        
        IAM
        
        logging and monitoring
        
        encryption & key management
        
        Network segmentation
        
        DDoS protection
      - Incorporate customer feedback
  - - - Higher level of security at scale
      - low cost entry to cloud and easier to operation
      - offer improved agility by providing more oversight, security control and central automation
  - - - AWS supports/promote to client by
        
        own compliance and certification programs are strength
        
        Lower cost to maintain & run specific security assurance requirements
        
        AWS & partners offer wide range of tools & features to meet security objectived
    - - Customer
        
        Security in the cloud
        
        Responsible for security of everything they put in the cloud
        
        Maintain complete control over their content
        
        Responsible for managing critical content security requirements
        
        In which location
        
        Content format and structure ( encrypted/masked/anonymized )
        
        which AWS service
        
        who has access to that content
        
        What to store
        
        Access rights
        
        Retain control of what security they choose
        
        own data, platform, applications, IAM, OS
        
        Shared Responsibility Model essentially changes depending on the AWS services the customer users
        
        "Infrastructure " services: under control of customer
        
        User AWS service catalog
        
        Create & manage catalog of IT services which have approvals
        
        VM images
        
        Servers
        
        Software
        
        DBs
        
        Benefit
        
        Achieve consistent governance
        
        Meet compliance requirements
        
        Centrally manage common IT services
        
        Quickly deploy approved IT services
      - AWS
        
        Security of the cloud
        
        Operate, manages & controls from host OS & virtualization layer down to physical security of the facilities
        
        Responsible for protecting global infrastructure - Regions, AZs, ELs
        
        Protecting the infrastructure
        
        Third-party reports
        
        Security configuration of its products that considered foundation ( managed services)
        
        Amazon DynamoDB
        
        Amazon RDS
        
        Amazon Redshift
        
        Amazon Elastic MapReduce( EMR)
        
        Amazon WorkSpaces
        
        Firewall configuration
        
        Disaster recovery
        
        OS & DB patching
        
        * Customer handles followings
        
        Logical access controls
        
        Protect account credentials
        
        Additional tasks ( db user accounts )
- - - - web service
      - Control access to AWS resources
      - Authentication
        
        Who can access resources
      - Authorization
        
        How they can use resources
      - Allow manage to access
        
        Compute
        
        Storage
        
        DB
        
        Application services
      - Activities
        
        Create/manage Users and groups
        
        Group - collection of users
        
        Provide temporary access
        
        Assign individual security credentials/access keys/password/mf authentication access
        
        User Permissions
        
        Can apply to user or groups
        
        allow or deny use AWS resources
        
        Manage roles & their permissions
        
        roles - trusted entities
        
        Manage permission
        
        which operations can be performed by the entity for AWS service
        
        Create roles
        
        Manage Federated users and therir permissions
        
        Eliminate need of create IAM user for all users
        
        Enable identities federations to allows existing identities ( users, groups, roles) from corporate directory to access AWS management console
- - - - Complement AWS features & tools
      - Partner security products
    - - Reduce your risk profile of your environment
      - Deep visibility into API calls
      - Alert notifications
      - Log aggregation & options
    - - Data Encryption
        
        AWS offer ability to add a layer of security to data at rest in the cloud
        
        AWS provide API to integrate encryption & data projection with any services develop or deployin an AWS environmtn
        
        Data Encryption capabilities for AWS storage/database services
        
        EBS
        
        S3
        
        Glacier
        
        Oracle RDS
        
        SQL server RDS
        
        Amazon Redshift
        
        Dedicated HW-based cryptographic key storage options
        
        Flexible key manage option
        
        use either AWS manage the encryption keys or maintain complete control over user keys
      - Inventory & configuration management
        
        ensure cloud resources comply with org standards
        
        & best practices
        
        Template definition & tools
        * to create standard preconfigured hardened virtual machines for EC2 instances
        
        Inventory & configuration tools
        * to identify AWS resources * track and manage changes to those resources over time
        
        Manage creation / decommissioning of AWS resources
        * with deployment tools
      - Network security
        
        DDOS mitigation
        
        as part of Auto scaling or
        
        Content delivery strategy
        
        Built-in firewalls
        
        Create private network withing AWS
        
        control network access to instances and subnets
        
        Private/dedicated connections
        
        Encryption in transit
        
        with transport layer security across all services