Please enable JavaScript.

Coggle requires JavaScript to display documents.

Cloud Practitioner - Coggle Diagram

- - - - A (IPV4)
      - AAAA (IPV6)
      - CNAME (hostname to hostname)
      - Alias
    - - Simple - No check
      - Weighted - Distributed at different locations based on %
      - Failover - Disaster Recovery
      - Latency - Routing towards locations with lowest latency
  - - - Improve global application availability
      - Improve performance
      - Can be tested to see if it is worth using
    - - Accelerate Global Uploads & Downloads
      - Specifically for S3 Buckets
- - - - Beanstalk, RDS, Lambda, API Gateway
    - - Workmail, Quicksight
    - - EC2, EBS, VPC, S3
- - - - find software vulnerabilities in EC2, ECR Images, and Lambda functions
    - - Find Malicious Activity
      - Uses VPC, DNS & CloudTrail Logs
    - - Find Sensitive Data in S3
      - Remediate Security Risks
      - encrypt data
      - generates logs on risk
    - - ETL for Big Data
      - Processes data in real-time from Kinesis and MSK
      - Can work in conjunction with Macie as Glue Catalogs and can be used as a cross reference
  - - - Hardware Encryption management
    - - Automatic DDoS Protection
    - - Encryption Keys managed by AWS
    - - Firewall to filter incoming requests based on rules
    - - provision, manage, and deploy public and private SSL/TLS certificates with AWS services
  - - - Allow Only
      - Stateful
      - Instance Level
    - - Stateless
      - Inbound and Outbound Rules
      - Subnet Level
      - Default Allow all inbound & outbound
- - - - Instance Types
        
        General Purpose
        
        Compute Optimized
        
        Batches
        
        Transcoding
        
        High Performance Computing
        
        Machine Learning
        
        Gaming Server
        
        Memory Optimized
        
        Business Intelligence Optimized
        
        High Performance RDS
        
        Storage Optimized
        
        Relational & NoSQL Databases
        
        Online Transaction Processing
        
        Data Warehouse
    - - On-Demand - Short Workloads
      - Reserved (1& 3 Years) Long Workloads
      - Savings Plan (1& 3 years)
        Usage Commit
      - Spot Instances - cheap but can lose
      - Dedicated
  - - - Node.js
      - Python
      - Java
      - C#
      - Ruby
  - - - Private Docker Registry on AWS
      - Store Docker Images for ECS or Fargate
    - - Launch Containers on AWS
      - Must maintain EC2 Instances
      - Application Load Balancer Integration
    - - Launch Docker Containers on AWS
      - Serverless Offering
      - No need to manage EC2 Instances
    - - Open Source System
      - Management, deployment, scaling of containerized apps
      - Cloud Agnostic
  - - - TCP/UDP Protocols (Layer 4)
    - - Protocols on IP Packets (Layer 3)
    - - HTTP/HTTPs protocols (Layer 7)
- - - - Storage - S3, EBS, EFS
      - Database - RDS, DynamoDB, Aurora
      - Transfer Acceleration
      - Data Transferred Out (S3, EC2, CloudFront, RDS, EFS, ELB)
      - Compute -- EC2 is billed by 1 sec but charged per 60 sec (on-demand & Reserved while Lambda per request
    - - Developer
        
        Business Hours Email Access to Cloud Support
        
        Unlimited Cases/Unlimited Contacts
        
        Response time general <24h system impaired <12h
      - Business
        
        Production workloads
        
        Trusted Advisor
        
        24/7 phone, email, chat
        
        Response Time <4h Production Impaired Production Down <1h
      - Basic
      - Enterprise
        
        TAM -Technical Account Manager
        
        Concierge Support Team
        
        Infrastructure Event Management included
        
        On-Ramp -Business or Production Critical Workloads <30min business critical
        
        Enterprise Support Plan - Mission Critical Workloads -Business Critical <15min
    - - Pay Less by Using More
      - Save when you Commit (1yr/3yr)
      - Free Tier
      - Pay as you Go
    - - Compute Optimizer
        
        Underutilized EC2
        
        Optimization
        
        Performance Recommendations
      - AWS Budgets
        
        Set Thresholds
        
        Notifications for Over The Limit
        
        Will you go over budget?
      - AWS Pricing Calculator
        
        Before Launch
        
        What-If
        
        Estimate Monthly Cost
      - AWS Cost Explorer
        
        Analyze Past to predict future cost
        
        Historical Usage and trends
    - - Consolidated Billing - Volume Discounts
      - Service Control Policy (SCP) - Restrict User Privileges
        
        Sets Permission Boundaries and works with IAM
        
        SCP is the Builders Boundaries for an entire Dept
        
        IAM cannot override SCP
        
        Explicit Allow
      - Tag - designate depts
      - Manage Multiple AWS Accounts
  - - - Inspect
      - Best Practices
        
        Cost
        
        Optimization
        
        Performance
        
        Security
        
        Fault Tolerance
        
        Service Limit
    - - Infrastructure as a Code
      - templates
    - - Records Configuration and Compliance over time
      - Download Compliance Reports with AWS Artifact
    - - MONITORING
    - - AUDIT
      - API activity
      - Event History
      - Governance
    - - AWS CLI - Command Line Interface
      - AWS Management Console (Web Based)
      - AWS SDKs - Programming Libraries
    - - Patches
      - Automation
      - Scripts or Run Command
- - - - Infrastructure as a CODE JSON or YAML
      - Repeat Across Regions & Accounts
      - Templates to define desired infrastructure
    - - pre-configured deployment templates
    - - Mentioned using Puppet or Chef
    - - Manage services for Developers
        
        Specifically for APIs
        Application Programming Interface
        
        Serverless and Scalable
        
        Create, Maintain, Publish, Monitor, and Secure
    - - Platform as a Service
      - Developer centric view of Deploying an Application on AWS
      - Managed Service
        
        Supports Docker, Go, Java, Node.JS, PHP, Python, Ruby
      - Code Deployment, Monitoring, and Scaling
      - DevOps Workflow Support
  - - - Build & Test Code
    - - Automate & Deploy Applications
    - - GitHub Repository
    - - Automatically push code to production
        Works with other AWS services like CodeCommit, Beanstalk, CodeBuild
    - - Analyze & Debug Applications
    - - Artifact Repository Service
        store, share, and manage software packages used in their deploy proecess
- - - - One Instance at a time
      - Specific Availability Zone (AZ)
      - Network Storage that hooks up to the Virtual Machine (EC2)
      - Retains Data not located on the Root Volume unless set otherwise
      - used for operating systems, databases, and file systems
      - Encrypted by Default
    - - Network File System -Mount to 100s of EC2
      - Linux EC2 instances in multi-AZ
      - Highly available, scalable, expensive, pay per use
    - - Use Cases
        
        Backup Storage Disaster Recovery Archive
        
        Application & Media Hosting, Static Website
        
        Data Analytics Software Delivery
      - Objects (files) Buckets (Directories)
      - Storage Classes
        
        1 Storage AZ
        
        S3 One Zone-IA (infrequently Accessed)
        
        3 Storage AZ
        
        Intelligent Tiering
        
        Monitoring Fee
        
        Transfer Data to storage class based on use
        
        Standard-IA
        
        Standard
        
        Glacier
        
        Archive-like
        
        Deep Archival Takes the longest to retrieve 12-48hrs
        
        Flexible = lower cost & faster retrieval
      - Serverless
  - - - Portable Device used to collect and process data
      - Offline Transfer service especially for areas that are out of reach
      - Snowball Edge
        
        Compute Optimized (104vCPUs)
        
        Storage Optimized (210TB)
    - - AWS Direct Connect
        
        Private
        
        Connection between Offices and AWS Datacenters
      - AWS DataSync
        
        Data Transfer Service from On-premise to AWS
        
        Install an Agent on premises
        
        Run Task - Data Encrypted in Transit
      - DMS Database Migration Service
        
        Live Replications
        
        Minimal downtime
        
        Homogeneous migration
        
        Change Data Capture
        
        Schema Conversion
        
        Phases
        
        Full Load
        
        CDC - Syncs Changes after Full Load
        
        Cutover - Final Switch from source to target DB
    - - Rehost
        
        Lift and Shift
      - Replatform
        
        Lift, Tinker, Shift
      - Repurchase
        
        Drop & Shop
      - Refactor/Re-Artifact
        
        rethinking & redesigning applications to fully optimize for the cloud
        
        Most Expensive
      - Retire
        
        Decommission application
      - Retain
        
        Keep on-premises
      - Replicate
        
        Create a copy on the cloud
    - - migrate applications to AWS from Any source infrastructure
      - Think those that do not qualify for DB Migration Services (such as DBs in EC2)
      - large & complex migrations
      - Key Concepts
        
        Replications
        
        Cutover
        
        Rehosting
        
        Automated Migration
- - - - decoupling
      - async communication
      - First in First Out
      - Message Queue
    - - pub/sub messaging and push notifications to distributed systems and endpoints
      - publish/subscribe
      - notifications
      - mobile push, email, SMS
    - - Apache Active & Rabbit
      - Setup and operate open-source message Brokers