Please enable JavaScript.

Coggle requires JavaScript to display documents.

AWS Cloud Practitioner - Coggle Diagram

- - - - Service limit check
      - S3 bucket permisssions
      - Security Groups- Specific ports Unrestricteds
  - - - General <24
      - System impaired <12 h
    - - Service limit check
      - S3 bucket permisssions
      - Security Groups- Specific ports Unrestricteds
  - - - General <24
      - System impaired <12 h
      - Production system impaired <4h
      - Production system down <1h
  - - - General <24
      - System impaired <12 h
      - Production system impaired <4h
      - Production system down <1h
      - Busines-critical system down <15 m
- - - - Static
      - anomalie detection
      - Condition
        
        Greater
        
        Greater/equal
        
        Lower/equal
        
        Lower
- - - - Virtual MFA Device
        
        Download App Authenticator
        
        Show QR CODE
        
        Scan QR Code
        
        type code1 and code2
      - U2F security key
      - Other hardware MFA device
  - - - Programatic
      - AWS Management Console
      - Amazon SDK
    - - Add user to group
      - Copy permission from existing user
      - Attach policies to existing user
      - to set permission in Group
        
        Apply a policie
        
        Policie are Json key value pairs : name: simon
    - - Acces Key ID
      - Secret access Key
      - Password
      - User
  - - - number
      - Uppercase
      - Lowercase
      - special character
  - - - Use only for creation of AWS account.
      - Do not use for login
    - - A User per person, do not create ghost users
    - - apply policies to the groups
      - don't apply policies to individual users
    - - have a strong password rotation policies
    - - always enable MFA wherever possible
    - - use roles to access various other AWS services
    - - Use acces keys for programatic access
    - - Use IAM credential report to audit permision of user/accounts
  - - - Password
        
        is enabled?
        
        last used
        
        last changed
        
        when must be changed
      - Acces Keys
        
        is active?
        
        last used
        
        when was last rotated
        
        last service used
      - MFA
        
        is enabled?
  - - - Set Service and permissions
      - Set resource
      - Set Tag
      - Associate policie to group
  - - - Can close your account
      - Can Change email addres
      - Can modify your support plan
    - - Can perforrm administrative tasks
      - Access application code
      - Launch EC2 instances
      - Configure databases
- - - - key value store
        
        Key: name of object
        
        Value; data
        
        VersionID: version of data
        
        Metadata: about data stored
        
        Subresources: ACL, Torrent
  - - - PUTS new Object
      - inmediatly can be read
    - - Overwrites PUTS and Delete
      - take some time to propagate
  - - - Encrypt at rest
    - - ACL per file
      - Bucket Policies
  - - - Replicated in 3 or more facilities
    - - access less frecuent but rapid access when needed, replicated 3 or more zones
    - - access less frecuent but rapid access when needed, no replication, less expensive; only offer 99.5% availability
    - - Optimize cost moving automaticaly to other tier without performance impact
    - - S3 Glacier
        
        Archiving
        
        retrieval time from minutes to hours
      - Deep archive
        
        retrieval timeof 12 hours
      - fee per GB retrieval
  - - - use mfa to add a layer of securyty to deletion
  - - - Standard
      - Standard Infrequent Access
      - Glacier
        
        Deep Archive
      - Standard Intelligent tiering
      - Standard One zone Infrequent Access
    - - Size of objects
      - Number of objects
    - - Amount of data tranferred out of S3 region
      - Transfers beetwen AWS services in the same region are free
    - - Request made for data and amount of requests
- - - - used for websites
    - - for media streaming
- - - - pay a fixed rate by hour or second
    - - capacity reservation offer a discount
    - - bid whatever price you want for instace capacity
    - - phisical server dedicated
  - - - GP2 General Purpouse SSD
      - IO1 Provisioned IOPS SSD
      - magnetic (standard)
- - - - Acces Key UD
      - Secret Acces Key
- - - - MS SQL
      - PostGreSQL
      - MySQL
      - AmazonAurora
      - MariaDB
      - Oracle
    - - Multi AZ for disaster recovery
        
        Automatically redirect service in failure
      - Read Replicas for performance
        
        No automatic failure
    - - Running clock hours
      - Type of database
        
        Engine, size, memory class
      - Storage
      - Purchase type
        
        OnDemand instance
        
        Reserved instance
      - Database count
        
        number of database instances
      - API Request and calls
      - Deployment type
        
        Single availabilty zone
        
        Multiple availability zone
      - Data transfer
        
        Inbound are free
        
        Outbound is charged
  - - - OLTP
        
        Pulls, insert records numbers, names, dates, etc
  - - - OLAP
        
        Calculate Sum of fields, average, unit cost of region, etc.
      - Business Intelligence
      - Data Warehousing
  - - - redis
      - Memcached
- - - - each instance is created in diferent zones
    - - Load balancers
        
        Target Group
        
        Health Check
      - ServiceLinkRole : AWSServiceRoleForAutoScaling
    - - Define Minimum and maximum amount of instances
      - Scale Group Size
        
        Metric type for scale (CPU, RAM, etc)
        
        Target Value
        
        Set WarmUp time after scalling
- - - - Amazon S3 URL
      - Upload template file
    - - WordPressSample
      - LambdaSample
      - etc
      - Set parameters (DBs, Users, EC2 Instance, PrivateKey)
- - - - Automation of deployment managed via pipeline
  - - - Offer managed instances of chef and puppet
- - - - Consolidate billing features
        
        Enable economy of scales, volume pricing discount
        
        All linked accounts are independent
        
        Limit of 20 accounts, that can be increased
        
        When monitoring is enabled on paying account, billing data for all accounts is included
      - All features
        
        Provides single payer and centralized cost tracking
        
        Lets you create and invite AWS accounts
        
        Allows you to apply policy-based controls
        
        Helps you simplify organization-wide management of AWS services
    - - Alway enable multifactor authentication on root account
      - Always use a strong and complex password on root account
      - Paying account shoul be used for billing purpouses only. Dont deploy resources nto the paying account
    - - Allow to organize accounts
    - - By default Full AWS access is allowed
      - Allow or Deny a Services using statements
    - - Consolidate billing
      - Cost Savings
      - Account Governance
- - - - pay hourly from the time you launch a resource until the time you terminate it
      - for reservation the cost is agreed upon beforehand
    - - Pay per GB
    - - Outbound data transfer is aggregated across services and then charged at the outbound data transfer rate
      - This charge appears on the monthly statement as AWS Data Transfer Out
      - The more data you transfer, the less you pay per GB
  - - - Once you signup
    - - Offers do not expire to all customers
    - - Short term free trials starting form activation of particular service
- - - - Cost
        
        Plan how much you want to spend on a service
      - Usage
        
        Plan how much yo want to use one or more services
      - Reservation
        
        Set Reserved instances or saving plans utilizations or coverage targets
    - - Email
      - SNS
        
        Simple Notification Messages
      - CHatbot service SLACK
- - - - Log Archive account
      - Security Account
      - Shared Service Account
- - - - Design, architect, build, migrate, and manage customer workloads and applications on AWS
      - To be a Consulting Partner
        
        Select:
        
        Practioner Certs: 2
        
        Associate certs:2
        
        Profesional/Specialty Certs:2
        
        Advanced
        
        Practioner Certs: 4
        
        Associate certs:4
        
        Profesional/Specialty Certs:6
        
        Premier
        
        Practioner Certs: 10
        
        Associate certs:10
        
        Profesional/Specialty Certs:10
    - - Provide Hardware, conectivity services or software solutions hosted on or integrated with AWS cloud
- - - - Quick estimate
        
        Advanced estimate
        
        Consider details like EBS Snaphots, Data transfer cost, Workload types, etc
        
        Use when need rapid cost calculation base on minimun requirements
    - - CPU, RAM Requirements
      - AWS Select the EC2 instance type based in your requirements
    - - Pricing model
      - Reservation term
      - Payment options
    - - Select storage type
      - Storage Size
- - - - includes test invokes from console
    - - From execution start in response to events to stop time
    - - 1 million request per month
- - - - Securing their Global infraestructure
      - Building Security
      - Networking components
      - Software of its services
    - - Application Data
      - Security configuration
      - Patching
      - Indentity and access Mangement
      - Network traffic
      - Installed software
    - - You
        
        Installed applications
        
        Patching the gest OS
        
        Security controls
      - AWS
        
        EC2 Service
        
        Patching the host operative system
        
        Security of the physical server
    - - You
        
        Security of the code
        
        Storage of sensitive data
        
        IAM permisions
      - AWS
        
        Lambda service
        
        Upgrading Lambda languages
        
        Lambda endpoints
        
        Operating Systems
        
        Underlying infraestructure
        
        Software dependencies
    - - Patch management
      - Configuration Management
      - Awareness and training
    - - Contact AWS trust &Safety Team
      - abuse@@amazonaws.com
  - - - Plan for and anticipate failure
      - Script operations as code
      - Deploy smaller reversible changes
      - Learn from failure and refine
      - AWS CodeCommit
        
        version control
        
        tracking of changes
        
        version-control Cloudformation templates of infraestructure
      - Building applications that support your workloads
    - - Automate security task
      - Encrypt data in transit
      - Assign only the least privileges required
      - Track who did what and when
      - Ensure security at all application layers
      - CloudTrail
        
        Central logging of all actions performed
      - Put mechanism that protect your systems and data
    - - Multi AZ deployments
        
        Reliabilyty
        
        Availabilty
      - Designs systems that work consistenly and recovers quickly
    - - Lambda, to run code with zero administration
      - efectively use resources to meet your demand
    - - S3 Intellingent tiering to move automatically your data between tiers
      - Building resiliance systems at the least cost
- - - - Cloudfront
      - route53
      - ELB
      - AWS global acelerator
- - - - RDS
      - RedShift
      - DocumentDB