AWS Flashcards
CloudWatch Event Rules
Respond to system events and changes in your AWS environment.
Ex: Trigger AWS lambda functions or other AWS services based on scheduled events (like a cron job)
SAM
Serverless Application Model
Created to simplify the development, deployment and management of serverless applications.
Designed to specifically work with Lambda
Allows you to define serverless resources and their configs using a simple YAML template
Example of Simplified Infra as Code
Batch computing jobs
automated programs that run on a computer without human interaction
ex: repetitive data tasks that are compute intensive like filtering, sorting, and backups.
Often schedules to run when the computer is idle like during the weekend or overnight
Batch computing jobs characteristics
- Scheduled: run at regularly scheduled times
- Automated: automated processes that perform similiar tasks without user interaction
- Cost effective: good way to handle large amounts of data at once
- Chained: multiple batch jobs can be chained together to form a group of jobs called a batch job chain
- Resource provisions:
AWS Batch Job
fully managed service that allows users to run batch computing jobs on AWS Cloud without having to install or manage batch computing software or server clusters
- Plans, schedules and runs jobs, manages infra for users too
Cloudwatch
a monitoring and management service provided by AWS.
Helps you keep track and collect metrics, monitor log files, set alarms and automatically react to changes in your AWS resources.
Helps you keep an eye on your AWS resources
CI/CD
An automated series of steps used by software development teams to continuously integrate, build, test and deploy code changes
Continuous Integration / Continuous Delivery
Typical stages of CI/CD pipeline
Source code retrieval (fetches the latest code from repo)
Build (compiling the code into an executable format)
Unit testing (running automated tests)
Integration testing
Deployment
AWS SDK
Software Development Kit
- A collection of tools and libraries that allow devs to easily interact with various AWS services by providing pre-built code to make API calls and manage their cloud infra
IAM Role
Like a job title that can be assumed by different entities like users, applications or services
IAM Policy
Outlines the specific tasks allowed within the job title (aka IAM role)
SNS
Simple Notification Service
Makes it easy to set up, operate and send notifications from the cloud.
When using ECS you can
Choose to run your containers either on a cluster of EC2 instances or on AWS Fargate
EC2
lets users run virtual machines in the cloud
ECS
fully managed container orchestration service that helps you easily deploy, manage and scale containerized applications.
Fargate
serverless compute engine that lets you run containers without managing servers
benefits
- scalability
- cost
- speed
Lambda
Runs code in response to events like on user actions
how it works
- function: code that performs the task
- configuration: specifies how the function is executed
- event source: event that triggers the function
Common Lambda Use Cases
- real time data processing
- API backend
- Scheduled tasks and cron jobs
Lambda Benefits
- Scales an app backend up and down quickly
- Parallelizes CPU bound workloads
- Provisioned concurrency allows functions to be available immediately avoiding latency issues
ALB
Application Load Balancer
- Distributes incoming traffic to multiple targets
- Are part of Elastic Load Balancing and are used to improve the performance and availability of web applications
Security groups
used to control traffic to and from containers
Lambda Service Role
Also known as execution role
- An AWS IAM role assigned to a Lambda function that defines the permissions it has to access other AWS services and resources
- Basically controls what the Lambda function can do with your AWS accounts when it needs to interact with other services
IAM
Identity and Access Management
-
IAM RestrictAccessToAllowedRoles
Denies access to the AWS service and its content unless the request is made by an allowed role
