Please enable JavaScript.
Coggle requires JavaScript to display documents.
AWS Cloud Practitioner - Coggle Diagram
AWS Cloud Practitioner
IAM
Users: mapped to a physical user, has a password for AWS Console
-
-
-
-
-
-
-
-
-
-
EC2 Instance Storage
EBS volumes:
-
-
-
Storage Pricing: Volume type, Storage Volume, IOPS, Snapshots, & Data Out
-
EC2 Image Builder: automatically build, test and distribute AMIs
-
EFS: network file system, can be attached to 100s of instances in a region
-
-
-
Amazon S3
Buckets vs Objects: global unique name, tied to a region
S3 security: IAM policy, S3 Bucket Policy (public access), S3 Encryption
-
S3 Versioning: multiple versions for files, prevent accidental deletes
S3 Replication: same-region or cross-region, must enable versioning
S3 Storage Classes: Standard, IA, 1Z-IA, Intelligent, Glacier (Instant, Flexible, Deep)
Snow Family: import data onto S3 through a physical device, edge computing
-
-
-
Databases & Analytics
-
Differences between Multi-AZ, Read Replicas, Multi-Region
-
-
-
-
-
-
-
Amazon QLDB: Financial Transactions Ledger (immutable journal, cryptographically verifiable)
-
-
-
-
DR strategy
Backup and restore: Provision all required application resources in the DR Region and restore the database from a copied snapshot.
Pilot light: Provision a copy of your application infrastructure and switch the resources in the application stack off.
Warm standby: Provision a copy of the entire application infrastructure in the DR Region, but keep the copy scaled down. The DR Region will be able to accept traffic at a smaller volume compared with the primary Region.
Multi-site or active/active: Provision a complete copy of your infrastructure into the DR Region. All resources in the DR Region = to the resources in the primary Region.
Pricing
-
Database: Engine, Size and Memory class
-
-
-
-
-
Other Compute
-
-
-
-
-
-
Step Functions: visual workflow service that helps developers use AWS services to build distributed applications
Lambda
Lambda is Serverless, Function as a Service, seamless scaling, reactive
-
-
-
-
-
-
Deployment
-
Beanstalk: (AWS only)
• Platform as a Service (PaaS), limited to certain programming languages or Docker
• Deploy code consistently with a known architecture: ex, ALB + EC2 + RDS :
-
Systems Manager (hybrid): patch, configure and run commands at scale
-
Global Applications
-
-
-
AWS Global Accelerator:Improve global application availability and performance using the AWS global
network
-
-
AWS Local Zones: Bring AWS resources (compute, database, storage, …) closer to your users. Good for latency-sensitive applications
Monitoring
CloudWatch
-
• Alarms: automate notification, perform EC2 action, notify to SNS based on metric
• Logs: collect log files from EC2 instances, servers, Lambda functions…
• Events (or EventBridge): react to events in AWS, or trigger a rule on a schedule
-
-
-
-
-
-
Integration
SQS
-
• Multiple Producers, messages are kept up to 14 days
-
-
SNS
-
• Subscribers: Email, Lambda, SQS, HTTP, Mobile…
• Multiple Subscribers, send all messages to all of them
-
Kinesis: real-time data streaming, persistence and analysis
Amazon MQ: managed message broker for ActiveMQ and RabbitMQ in the
cloud (MQTT, AMQP.. protocols)
VPC
Subnets – Tied to an AZ, network partition of the VPC
Internet Gateway – at the VPC level, provide Internet Access
-
NACL – Stateless, subnet rules for inbound and outbound. 1 per Subnet
Security Groups – Stateful, operate at the EC2 instance/resource level or ENI. Multiple per resource
VPC Peering – Connect two VPC with non overlapping IP ranges,
nontransitive
Elastic IP –fixed public IPv4, ongoing cost if not in-use
-
-
-
-
-
-
-
Security & Compliance
-
-
-
-
CloudHSM: Hardware encryption, we manage encryption keys
AWS Certificate Manager: provision, manage, and deploy SSL/TLS Certificates
Artifact: Get access to compliance reports such as PCI, ISO, etc…
GuardDuty: Find malicious behavior with VPC, DNS & CloudTrail Logs
Inspector: find software vulnerabilities in EC2, ECR Images, and Lambda functions
-
-
-
-
-
-
-
AWS Machine Learning
Rekognition: face detection, labeling, celebrity recognition
-
-
-
-
-
-
-
-
-
-
-
Account Best Practices
-
-
-
-
IAM guidelines: MFA, least-privilege, password policy, password rotation
-
-
Trusted Advisor to get insights, Support Plan adapted to your needs
-
-
-
-
-
-
-
If your Account is compromised: change the root password, delete and rotate all passwords / keys, contact the AWS support
-
-
-
AWS Support
-
BUSINESS
24x7 phone, email, and chat access to Cloud Support Engineers
-
-
-