Please enable JavaScript.

Coggle requires JavaScript to display documents.

Solution Architect (AWS) - Coggle Diagram

- - - - IAM roles
      - IAM user
      - Grant type Permissions
        
        Identity-based policies
        
        Example: AmazonEC2StartInstances, AmazonEC2StopInstances
        
        Recourse-based policies
        
        Allow something for some user to some resource
        
        Hierarchy of permissions
        
        Explicit deny win explicit allow. Without explicit allow by default it is deny
        
        Defense in depth
        
        role permissions -> resource permissions
        
        Permissions Boundaries
- - - - Availability Zone
        
        Subnets
- - - - on demand
      - saving plans
      - spot instances
  - - - All EC2 near each other and even on one hardware
    - - Across segment and not on same hardware
    - - Logical copies on different hardware
  - - - attached to ec2 and deleted after stop or termination of ec2
- - - - Amazon S3 File Gateway
      - Amazon FSx File Gateway
      - Tape Gateway
      - Volume Gateway
- - - - built in monitoring
      - multiple AZ data replication
      - data encryption at rest and in transit
      - hardware os etc etc is responsibility of AWS
      - read replica is copy of db but read only
    - - only MySQL or Postgres
      - Benefits
        
        Perfomance
        
        Security
        
        is serverless
  - - - consistency option
      - global tables (read replica in different regions)
      - DynamoDB Accelerator
  - - - ElastiCache memcache
      - ElastiCache Radis
- - - - can be send to EventBridge, and enentbridge will raise an event
      - and can be send to SNS (simple notification service)
- - - - Scheduled
        
        Schedule scale outs and ins yourself
      - Dynamic
        
        Scale out or in depending on cloudwatch metrics (CPU usage for e.g.)
      - Predictive
        
        using machine learning tech and previous data from CloudWatch you can scale out and in
- - - - Template can create multiple independent stack of resources and we can edit some stacks if we need it
      - AWS CloudFormation Designer
- - - - AWS Fargate
    - - Amazon API Gateway
    - - Amazon SQS
        
        Fully managed service queueing service
        
        Stores messages until they are processed and deleted
        
        Acts as a buffer between senders and receivers
        
        recovers messages that are not processed
      - Amazon SNS
    - - Amazon Step Function
        
        Step Functions
    - - Amazon Kinesis Data Stream
- - - - AWS Shield defends from transport level atacks