Domain 3: Deployment, Provision and Automation

Question 1

Bastion Host Tips

Answer 1

Connect to Private Instances. A bastion host enables you to connect to private instances in your VPC from an unstrusted network using SSH or RDP.

. A bastion host is in a public subnet and is reachable from the internet.

. You need to configure the security group associated with the private subnet to enable SSH / RDP access from the bastion

Question 2

EC2 Image Builder

Answer 2

. Automates the process of creating and maintaining AMI and Container Images.

. Select a base OS image, customize by adding software, test, and distribute to your chosen region.

Question 3

Load Balancers

Answer 3

.Application Load Balancers: HTTP/HTTPS. Intelligent load balancing. Route requests to a specific web server based on the type of the request.

. Network load balancer: It provides high-performance balancing TCP traffic.

. Classic load balancer: The legacy option that supports both HTTP/HTTPS and TCP.

. Gateway Load Balancer: Provides load balancing for third-party virtual appliances, like firewalls, intrusion detection and Prevention Systems.

. X-Forwarded-For: if you need the IPV4 address of your and user, look for the X-Forwarded-For header.