Please enable JavaScript.

Coggle requires JavaScript to display documents.

AWS Developer 2 - Coggle Diagram

- - - - control traffic from, come
      - ALLOW, DENY rule
      - attach subnet level
      - rule only IP addr
      - stateless
  - - - VPC flow logs
      - Subnet flow logs
      - Elastic network interface flow logs
    - - monitor & troubleshoot issue
      - capture network informationENI, EC, RDS, Aurora...
    - - S3, ...
  - - - connect two private VPC in AWS
        
        CIDR not overlap
  - - - lower latency to AWS service
  - - - use VPN
    - - physical connection
      - take >= 1 monto eo establish
- - - - IANA
    - - Domain registrar
    - - ICAM
  - - - change DNS record
  - - - A: hostname -> IPv4,
        AAAA: hostname -> IPv6
      - CNAME: hostname -> hostname
      - NS: name server
  - - - private
      - public
    - - $0.5 / month / zone
  - - - any other host
      - only for non-root domain
    - - hostname -> aws resources
      - root & non-root domain
      - free of charge
      - native health check
      - target
        
        ELB
        
        Cloudfront
        
        API gateway
        
        Beanstalk
        
        S3
        
        VPC
        
        Global accerlarator
        
        Route53 some hosted zone
        
        cannot set for Ec2 dns name
  - - - single resource
      - multiple value (new line)-> random one by client
      - alias enable -> 1 resource only
      - can't health check
    - - % request to each resource
      - can > 100
      - record: must same name & type
      - can be assoc health check
      - use case: load balance region, test new app version
      - 0: stop sending traffic to resource
    - - can assoc health check
    - - primary -> secondary
    - - based on user location
      - can assoc health check
      - should create default when no match
    - - must use Route53 traffic flow
      - allow shift more traffic to resource
        based on bias
      - bias: 1-99: expand, -1--99: shrink
    - - characteristics
        
        based on client IP
        
        provide CIDR block
    - - can assoc health check
      - <= 8 each multi-value query
      - not replace for ELB
  - - - endpoint
      - other health check
      - health check cloudwatch alarm
      - check
        
        15 global health check
        
        18% report OK -> healthy
        
        2xx, 3xx -> success
        
        can based on text first 5120 byte of response
        
        config firewall allow
    - - OR, AND, NOT, at least
      - <= 256
    - - route53 outside vpc
      - can't access private aws
      - need create clouwatch metric & alarm ot health check
  - - - create hosted zone
      - update NS record -> route53