Everything Flashcards
(140 cards)
Region
A cluster of data centers
Availability Zones
Each region has many AZs. Each AZ has one or more discrete data centers with redundant power, networking, and connectivity.
3 Options to access AWS:
1) AWS Console - protected by password and MFA
2) (CLI) Command Line Interface - protected by access keys
3) (SDK) Software Developer Kit - for CODE, protected by access keys
AWS Cloudshell
(Account- Level)
Way to access AWS. An alternative to installing CLI is Cloudshell.
Quicker & easier.
Allows you to run AWS commands from the browser
IAM Credentials Report
audit permissions of your account
report lists users and status of credentials
IAM Access Advisor
(User-Level)
Shows the service permissions granted to a user and when those services were last accessed (can use this info to revise policies)
Is EC2 PaaS, Iaas, or Saas?
IaaS - Infrastructure as a service.
EC2
Renting virtual machines (BRAIN)
EBS Volumes
“Elastic Block Storage”
Storing data on virtual network drives
(STORAGE for EC2)
Network drive you can attach to your instances while they run & allows you instance to persist data
- One instance at a time (2 EBS can be on 1 instance)(they can also standalone/not attached at all)
- One AZ
ELB
Distributing loads across machines
(Scalability) Horizontal
ELBs are servers that forward internet traffic to multiple servers (EC2 instances) downstream
ASG
Scaling the services using auto-scaling groups
Horizontal scalability
EC2 Reserved Instances
*Like a “soft” version of a dedicated host
75% discount compared to on-demand
reserve a specific instance type
recommended for steady-state usage applications (like databases)
EC2 Dedicated Hosts
a PYSICAL server with EC2 instance capacity dedicated to your use
- helps address compliance requirements
- (BYOL) Bring your own license
- more expensive $
- 3 years
Security Groups
firewall attached to the EC2 instance
Snapshot
To move an EBS volume from one AZ to another, you first have to snapshot it
It’s for a backup anytime you want
JSON Documents
IAM - can be assigned to users and groups allowing users to use certain services in AWS
*policies define the permissions to users
AMI
“Amazon Machine Image”
A CUSTOMIZATION of an EC2 instance - create ready to use EC2 instances with our customizations
built region specific (1 region)
EC2 Image Builder
used to automate the creation of Virtual Machines or container images
Automatically build, test, and distribute AMIs in multiple regions
Free service
Allows to be truly global
EFS
“Elastic File System”
NETWORK/Shared file system
Storage that can be mounted to HUNDREDS of instances at a time
Multiple AZs
Highly scalable. No capacity planning
EC2 Instance Store
Storage for EC2
High performance hardware disk attached to our EC2 instance
lost if the EC2 instance is stopped/terminated
Vertical Scalability
increase the size of the instance
ex: change from t2.micro –> t2.large
Usually a limit on how much you can vertically scale b/c of HARDWARE
Horizontal Scalability
increase the NUMBER of instance for an application (rather than size)
ex: auto-scaling group (ASG) & load balancer (ELB)
High Availability
Multi-AZs
Goal to survive a data center loss (Disaster)
Scalability
ability to accommodate a larger load by making the HARDWARE stronger (scale up) or by adding nodes (scale out)