Please enable JavaScript.

Coggle requires JavaScript to display documents.

AWS Cloud Practitioner - Coggle Diagram

- - - - Framework Overview
        
        "AWS Well-Architected helps cloud architects and developers build secure, high-performing, resilient, and efficient infrastructure for a variety of applications and workloads. Built around six pillars"
      - Pillars
        
        Operational Excellence
        
        Security
        
        Reliability
        
        Performance Efficiency
        
        Cost Optimization
        
        Sustainability
- - - - Data in transit (moves)
      - Data at rest (stored)
    - - Amazon CloudWatch: Monitoring (data generated by resources) and observability (Reports). Operational Insights about your AWS resources and solutions: Ex.: Overloaded ec2 issue or unusually high number of requests hitting an Elastic Load Balancer
      - AWS CloudTrail: Logging AWS account activity (log events related to AWS resource creation and management )
      - AWS Config: Configuration auditing and inventory, check if resource maintain correct configuration
      - AWS Inspector: É um serviço de avaliação de segurança automatizada que ajuda a melhorar a segurança e conformidade de aplicativos implantados em suas instâncias Amazon EC2
  - - - AWS Account root user
        
        Complete and unrestricted access
        
        :warning:Protect it
        
        MFA - Multi-factor authentication
        
        securely locking away the root user credentials
        
        rotating access keys and password
        
        Simply not using this root user for daily tasks
      - IAM features
        
        Users
        
        Have associated user names and passwords
        
        Access keys for programmatic access
        
        MFA enabled for their login
        
        Enforce password complexity
        
        Access key and password rotation
        
        Groups
        
        How permission work in general
        
        Roles
        
        Assumed identities that provide temporary credentials
        
        Use case:
        
        User can assume a role to gain temporary access to permissions
        
        A program can assume role to gain access to AWS credentials to make AWS API calls
        
        Use roles for cross-account access
        
        Polices
        
        Managed
        
        AWS is responsible to create
        
        Unmanaged
        
        Customer is responsible
        
        Attach to AWS Entities (IAM Users, groups or roles)
        
        Determine action that can or cannot be taken
  - - - Security groups
        
        Instance level firewalls
        
        Allow a request to access an EC2 instance
        
        Port
        
        Protocol
        
        Source or destination
      - Network access control lists (network ACLs)
        
        Allow or deny traffic
        
        Traffic
        
        port
        
        protocol
        
        source or destination
        
        Subnet level firewalls
      - AWS Web Application Firewall (WAF)
        
        Firewall that can filter out trafic based on any part of the request
        
        IP address
        
        HTTP body
        
        HTTP headers
        
        URI strings
    - - AWS Knowledge Center
      - Security Center
      - Security blog
      - AWS security forum
- - - - EC2
      - Lambda
      - Elastic BeanStalk
      - ECS
    - - S3
      - EBS
      - EFS
    - - VPC
      - VPN
      - AWS DirectConnect
      - AWS Route53
    - - RDS
      - DynamoDB
      - Redshift
  - - - Virtual Private Network (VPN)
      - AWS Direct Connect
      - Public Internet