Please enable JavaScript.

Coggle requires JavaScript to display documents.

AWS CCP 2021 - Coggle Diagram

- - - - Business
        
        Use-case guidance
        
        All AWS Trusted Advisor checks
        
        Limited support for third-party software
      - Developer
        
        Best practice guidance
        
        Client-side diagnostic tools
        
        Building-block architecture support
      - Enterprise
        
        Application architecture guidance
        
        All AWS Trusted Advisor checks
        
        Technical Account Manager (TAM)
        
        help design solutions that efficiently use multiple services together through an integrated approach
        
        primary point of contact
        
        provide guidance, architectural reviews
      - Basic
        
        free for all AWS customers
  - - - pay only for your usage
  - - - provides centralized management and consolidated billing
      - know which account spent what
      - share savings across accounts
      - simplifies billing
    - - enable to limitate what each account can use (resources)
  - - - track costs
      - set custom budgets
      - alert when usage costs exceed
      - forecast
    - - usage
      - cost
      - reservation
  - - - pay for only the compute time that you use
      - free tier
    - - free tier
        
        1 million free requests and up to 3.2 million seconds of compute time per month
  - - - short amount of time for tests purpose
- - - - managed policies
        
        created by aws
        
        reusable
        
        automatically updated
      - inline policies
        
        created by customer
      - JSON
      - effect, action and resource
      - can be attached to user, groups or roles
      - document that describes permissions
      - document that grants or denies permissions to AWS services and resources
    - - similar to users
      - allow or deny
      - associated permissions
      - assumed for temporary amounts of time
      - when assumed, it abandons all the previous permissions
      - is an identity
      - use policies
      - can be assumed by users, applications and services
    - - who is authenticated (signed in)
      - authorized (permissions)
    - - group of users
    - - groups, users and roles
      - identity represents a user
    - - authentication process that provides an extra layer of protection for your AWS account
  - - - AWS Shield
        
        managed protection service
        
        protect applications against distributed denial-of-service (DDoS) attacks
        
        Standard
        
        protects all AWS customers at no cost.
        
        most common, frequently occurring types of DDoS attacks
        
        Advanced
        
        paid service
        
        provides detailed attack diagnostics and the ability to detect and mitigate sophisticated DDoS attacks
        
        can integrate with AWS WAF
        
        protect against costs
  - - - applications layer
      - patch software
      - "in" cloud
    - - infra layer
      - hardware, software, networking, and facilities
      - "of" cloud
  - - - on-demand access to AWS security and compliance reports
    - - compliance information all in one place
  - - - organization policy
      - manage organization permissions
      - restrict access to services, resources and API Actions
      - member accounts
      - can be applied to to the organization root, an individual member account, or an OU.
  - - - rules
      - conditions
      - web acl
- - - - Private or Public
    - - group resources together
      - chunk of ip address
      - private or public
      - can communicate between them
    - - control the outbound traffic
    - - enable internet access to VPC
    - - enable internet access to subnets
    - - control access to EC2 and RDS
    - - control access to subnets
- - - - Data stored as object within buckets
      - 99.99999999% durable
      - Replicated in 3 availability zones
      - 5TB limit for single object
      - Unlimited storage
      - Lifecycle policies
        
        transition actions
        
        rules to transition the document between the classes
      - classes
        
        Standard-Infrequent Access
        
        lower storage price and higher retrieval price
        
        infrequently accessed data
        
        high availability when needed
        
        One Zone-Infrequent Access
        
        Standard
        
        Stores data in a minimum of three Availability Zones
        
        frequently accessed data
        
        high availability
        
        Intelligent-Tiering
        
        data with unknown or changing access patterns
        
        Glacier Deep Archive
        
        Low-cost storage designed for data archiving
        
        retrieve objects within 12 hours
        
        Glacier
        
        retrieve objects within a few minutes to hours
        
        Low-cost storage designed for data archiving
        
        criterias
        
        time to get the document
        
        access frequency
        
        price
      - any type of file
      - web enabled
      - serverless
      - once there is a change in a file, must upload the entire file
      - best used for occasional changes
      - link address
        
        object address
      - version ID
        
        object version
      - policies
        
        define rules to access the document
      - criptography
      - versioning
      - cross-region replication
        
        versioning must be enabled
      - transfer acceleration
        
        use edge location with cloudfront to optimize the path
        
        use case
        
        high amount of data to be sent to a long distance location
      - Bucket name must be glabally unique
      - Pricing
        
        number and size of objects
        
        number and type of requests
        
        storage class
        
        data transfer OUT
    - - scalable file system
      - use case
        
        a large number of services and resources need to access the same data at the same time
      - grows and shrinks automatically with usage
      - stores data in and across multiple Availability Zones
      - can scale on demand to petabytes
    - - snapshots
        
        backups
      - hard drive
      - can be attached to EC2 (must be in the same availability zone)
      - once there is a change in a file, just upload the "change part"
      - break files in "blocks"
      - stores data in a single Availability Zone
      - SSD
      - HDD
      - Pricing
        
        IOPS
        
        storage volume
        
        volume type
        
        snapshots
        
        data transfer OUT
  - - - content delivery service
      - CDN solution
      - Edge location
        
        used to store cached copies of content
        
        worldwide network of data centers
        
        small data centers
        
        there are more edge locations than availability zones
        
        run cloudfront
      - deliver copy of data to customers with low latency
      - It uses a network of edge locations to cache content and deliver content to customers all over the world
      - Pricing
        
        data transfer OUT
        
        number of HTTP/HTTPS requests
        
        region
    - - DNS routing
      - integrity verification
        
        health check verification
      - register domain
      - manage dns records
    - - service that enables to run infrastructure in a hybrid cloud approach
      - Extend AWS infrastructure and services to on-premises data center
  - - - Auto Scaling
        
        must have
        
        EC2 group
        
        criteria
        
        CPU
        
        trafic
      - Elastic Load Balancing (ELB)
        
        load balancing service
        
        types of balancing
        
        network
        
        layer 4
        
        application
        
        layer 7
        
        ec2, container, lambda
        
        classic
        
        ec2
      - pricing
        
        only pay for running instances
        
        billing
        
        on-demand
        
        not recommended for workloads that last a year or longer
        
        price by hour
        
        run continuously until you stop
        
        savings plans
        
        reduce compute costs by committing to a consistent amount of compute usage
        
        1-year or 3-year term
        
        savings of up to 72% over On-Demand costs
        
        reserved instances
        
        reserved by 1 or 3 years
        
        up to 75% discount
        
        billing discount applied to the use of On-Demand Instances in your account
        
        spot instances
        
        unused Amazon EC2 computing capacity
        
        savings at up to 90% off of On-Demand prices
        
        Spot Instance launches once there is capacity available
        
        instance may be interrupted
        
        for workloads with flexible start and end times
        
        dedicated hosts
        
        physical servers with Amazon EC2 instance capacity
        
        the most expensive
        
        reservation for 1 to 3 years
      - instance types
        
        compute optimized
        
        use cases
        
        compute-intensive applications servers
        
        dedicated gaming servers
        
        high-performance web servers
        
        memory optimized
        
        fast performance for workloads that process large datasets in memory
        
        use cases
        
        process large datasets in memory
        
        performing real-time processing of a large amount of unstructured data
        
        general purpose
        
        use cases
        
        gaming servers
        
        backend
        
        application servers
        
        small and medium databases
        
        storage optimized
        
        workloads that require high, sequential read and write access to large datasets on local storage
        
        use cases
        
        distributed file systems
        
        data warehousing applications
        
        high-frequency online transaction processing (OLTP) systems
        
        accelerated computing
        
        use hardware accelerators, or coprocessors, to perform some functions more efficiently than is possible in software running on CPUs
        
        use cases
        
        floating-point number calculations
        
        graphics processing
        
        data pattern matching
      - benefits
        
        cost-effective
        
        quick
        
        highly flexible
        
        resizable
        
        vertical scaling
      - multitenancy
        
        the ec2 instances shares resources
        
        the hypervisor is responsible to isolate the ec2 instances
      - Compute as a service (CaaS)
      - virtual machines
    - - pay only when executed
      - Pricing
        
        pay per call
        
        pay per duration
      - FaaS (Function as a Service)
    - - low cost
      - secure
      - docker support
      - container management
      - scalable
    - - git integration
      - PaaS
      - web app deploy
      - DevOps tool
      - scalable
      - secure
      - CI/CD tool
  - - - automated patching
      - backups
      - managed service
      - engines
        
        MySQL
        
        MariaDB
        
        PostgreSQL
        
        Oracle
        
        Aurora
        
        compatible with MySQL and PostgreSQL
        
        five times faster than standard MySQL databases
        
        three times faster than standard PostgreSQL databases
        
        use case
        
        workloads that require high availability
        
        data replication
        
        how to use
        
        serverless
        
        instance
        
        Microsoft SQL Server
      - redundancy
      - disaster recovery
      - failover
      - Read Replicas
      - Multi-AZ Deployment
      - Pricing
        
        type (on-demand/reserved instance)
        
        engine
        
        per hour billing
        
        size
        
        memory class
        
        backup storage
        
        additional storage
        
        number of input/output per month
        
        data transfer OUT
        
        deployment type (single vs multi AZ)
    - - serverless db
      - data organized into items (keys)
      - items has attributes (values)
      - nonrelational database
      - not every item in the table has to have the same attributes
      - millisecond response time
      - key-value db
      - Scaling up to 10 trillion requests per day
      - use cases
        
        mobile apps
        
        IoT
        
        games
        
        web apps
      - billing
        
        pay by usage
    - - data warehousing service
      - use case
        
        big data analytics
      - collect data from many sources and helps you to understand relationships and trends across your data
      - query and analyze data across a data warehouse
      - managed service
    - - move data between a source database and a target database
  - - - collect and track metrics and log files
      - set alarms
      - automatically react to changes
      - Monitor the resources
      - infrastructure and services visibility
      - Improve TCO
      - Reduce MTTR
      - drive optmizations
      - Configure automatic actions and alerts in response to metrics
      - monitor the performance of resources
    - - monitor and retain AWS account activity
      - Logs WHO did WHAT on WHAT resource from WHERE (IP address) and WHAT was the response and WHEN
      - use case
        
        governance
        
        register all access
        
        security
        
        audit
        
        risk analysis
        
        problem troubleshooting
      - Monitor the user activity
      - Insights
        
        allows CloudTrail to automatically detect unusual API activities in AWS account
    - - EC2, ECS, lambda and beanstalk
      - instrumentation
      - tracing tool
      - integration with AWS DB
      - latency detection from client and server side
    - - remediation guidance
- - - - AWS
  - - - 22
      - Physical Location (1 or more data centers)
      - isolated
      - choosing factors
        
        feature/service availability
        
        proximity
        
        latency
        
        compliance
        
        pricing
      - geographically isolated areas
      - contain availability zones
      - are connected to multiple Internet Service Providers (ISPs) as well as to a private global network backbone
    - - 69
      - Number of datacenters on each region
      - each region may have 2 or more availablity zone
      - single data center or a group of data centers within a Region
      - min 2 | usually 3 | max 6 per region
      - Purpose
        
        Disaster Recovery
        
        Fault Tolerance
        
        High Availability
        
        performance
    - - run cloudfront
- - - - Security
        
        protect information, systems, and assets
        
        Automate security best practices
        
        Apply security at all layers
        
        Protect data in transit and at rest
      - Reliability
        
        recovery plan
        
        Dynamically acquire computing resources to meet demand
      - Operational Excellence
        
        run and monitor systems
        
        operations as code
        
        annotating documentation
        
        anticipating failure
        
        frequently making small, reversible changes
      - Performance Efficiency
        
        use computing resources efficiently
      - Cost Optimization
        
        deliver business value at the lowest price point
        
        cost-effective
        
        using managed services to reduce the cost of ownership
    - - evaluate architecture
  - - - fargate
      - s3
      - lambda
      - EFS
      - dynamoDB
      - api gateway
      - SNS
      - step functions
      - kinesis
      - athena
  - - - performance
      - security
      - fault tolerance
      - cost optmization
      - service limits
- - - - Governance
        
        roles
      - Platform
        
        roles
      - People
        
        roles
      - Security
        
        roles
      - Business
        
        roles
      - Operations
        
        roles
  - - - devices
        
        Snowball Edge Storage Optimized
        
        S3 compatible object storage
        
        80 TB of hard disk drive (HDD)
        
        1 TB of SATA solid state drive (SSD)
        
        Snowball Edge Compute Optimized
    - - exabyte-scale data transfer service
      - move large amounts of data to AWS
      - 100 petabytes of data per Snowmobile
      - truck with container
    - - 2 CPUs, 4 GB of memory, and 8 TB of usable storage
  - - - keeping applications that are critical for the business in the source environment
      - can be migrated, or, work that can be postponed until a later time
    - - removing an application that is no longer used
      - turn off
    - - moving from a traditional license to a software-as-a-service model
    - - changing how an application is architected by using cloud-native features
    - - moving applications without changes