The magical keyword in the Information Technology industry is the ‘Cloud’ and Amazon Web Services (AWS) is definitely leading the game. Globally distributed organizations require high-available and fault-tolerant services that are possible with AWS. The pay-as-you-go option from AWS is another reason for organizations to subscribe to AWS services.
Amazon Web Services (AWS)
Fortune 500 companies are preferring Amazon Web Services (AWS) in addition to their traditional data centers and original applications. Seamless integration with existing systems is a major plus for AWS. The elasticity and scalability of the AWS help organizations build cost-effective cloud computing services. The on-demand delivery of IT resources and applications via the Internet with pay-as-you-go options is the key advantage of AWS. Agility, reliability, and elasticity are the benefits of AWS.
Access
Users can create an AWS account via there corporate or personal email. AWS services can be accessed via the AWS Management Console, AWS Command Line Interface (CLI), or AWS Software Development Kit (SDK). Users can subscribe or core services and integrated services and create instances. AWS Cloud Practitioner Certification will help to better understand the AWS and learn/share best practices with the community.
Core Services
- EC2 – Elastic Cloud Compute: Cloud storage for storing your applications and data
- EBS – Elastic Block Storage: Add on storage volumes with pay-as-you-go options
- S3 – Simple Storage Service: Managed Storage Service that is scalable for high volumes. Stores application data
- AWS Global Infrastructure: Regions, Availability Zones, Edge locations to facilitate provision in multiple locations
- VPC – Virtual Private Cloud: Private network with configuration, security control, subnets, route tables, and Internet Gateway
- AWS Security Groups: Has builtin firewalls and to specify which traffic to allow
Integrated Services
- Application Load Balancer (ALB): Enables routing of instances
- Auto Scaling: Automatically adjusts instances based on conditions and capacity management
- Route 53: DNS resolution strategies and routing
- RDS – Relational Database Services: Managed service to provide relational database services on Cloud.
- Lambda: Compute service without provisioning. Create an environment, routines, and functions. ETL and REST API
- BeanStalk: Platform-as-a-service for quick deployment of applications. Supports all programming languages
- SNS – Simple Notification Service: Send emails/alerts/mobile communications for alerting users
- Amazon Cloud Watch: Monitor AWS applications/services and set alarms
- Amazon Cloud Front: Content Delivery Network that has local caching and scale out options
- Amazon Cloud Formation: Infrasructure-as-a-service; Template with a resource stalk
Five Pillars of AWS Architecture
AWS Architecture and design principles are based on the five pillars for your systems:
- Security: Identify Access Management(IAM), Data protection, incident response, traceability, security at all levels
- Reliability: Ability to recover from disruption, Scale horizontally
- Performance Efficiency: Virtualize resources, deploy in multiple regions, serverless architecture
- Cost-Optimization: Maximize ROI, Optimization over time, Match supply with demand, Measure overall efficiency
- Operational Excellence: Fault-tolerant and high availability systems
High Availability Systems
The following are the services that support high availability systems through AWS:
- Elastic Load Balancer
- Route 53
- Amazon Cloud Watch
- Elastic IP Address
- AutoScaling
Fault-Tolerant Systems
The following are the services that support fault-tolerant systems through AWS:
- Amazon Simple Queue Service
- Amazon Simple Storage Service
- Amazon Relational Database Service
Amazon Shared Responsibility
Under AWS Shared Responsibility model, the user is responsible for user data, application, and guest operating system. AWS is responsible for managing Hypervisor, network, and physical resources.
- User Data
- Application
- Guest Operating System
- Hypervisor
- Network
- Physical
Identity and Access Management (IAM)
Identity and Access Management (IAM) in AWS is possible with users, groups, roles, and policy documents.
- User: Every user is given permanent credentials also with multi-factor authentication.
- Group: Multiple users are categorized into Groups.
- Role: Temporary credentials are given to roles based on the users and groups.
- Policy Documents: Policy documents establish rules for providing or denying access to the users/groups/roles.
AWS Security
AWS has a resilient infrastructure with high security and strong safeguards. Compliance management and cloud-based governance are possible with AWS Security. Distributed Denial of Service (DDoS), data encryption, key management service, hardware-based key storage, access control and management, and multi-factor authentication are some other features of AWS Security.
AWS Security also passed compliance requirements from many government authorities. Users can run their own scans on top of the AWS Security for compliance.
- Amazon Inspector: A tool to improve security and automated security assessment
- AWS Shield: Managed Distributed Denial of Service that safeguards applications. The basic AWS Shield is free for all users and the Advanced AWS Shield can be purchased.
AWS Pricing
AWS Pricing has multiple payment options for users. There are pay-as-you-consume or Pay per GB options. Users can pay less when they use more or pay less when paid all upfront. There are monthly payment options for users. Pricing Dashboard, Simple monthly calculator, and TCO calculator assist users in determining the services and duration.
Users can get discounts for reserved instances and there is no charge for inbound data transfer. The AWS free tier provides access for 12 months to try out their services. Users can map usage to pricing and see their pricing on the Consolidated Pricing dashboard.
AWS Support Plans
Amazon Trusted Advisor is a service to advise customers on fault-tolerance, security, performance, and cost-optimization. Users can view recommendations, weekly notifications, and download reports.
AWS Support Plans exist for Basic, Developer, Business, or Enterprise. Technical Account Manager, Trusted Advisor, and Account Assistance is available to users.
Constant Learning
AWS is an ocean and how users can best use those services for their business is constant learning. Good luck on your AWS journey!