Accessing S3 ObjectsIf you didn’t think you’d ever need your data, you wouldn’t go to the trouble of saving it to S3. So, you’ll need to understand how to access your S3-hosted objects and, just as important, how to restrict access to only those requests that match your business and security needs. Access ControlOut of …
Amazon Simple Storage Service and Amazon Glacier Storage-2 Read More »
S3 Service Architecture You organize your S3 files into buckets. By default, you’re allowed to create as many as 100 buckets for each of your AWS accounts. As with other AWS services, you can ask AWS to raise that limit. Although an S3 bucket and its contents exist within only a single AWS region, the …
Amazon Simple Storage Service and Amazon Glacier Storage-1 Read More »
Instance Lifecycle The state of a running EC2 instance can be managed in a number of ways. Terminating the instance will shut it down and cause its resources to be reallocated to the general AWS pool. This will, in most cases, destroy all data kept on the primary storage. The exception to this would be …
Amazon Elastic Compute Cloud and Amazon Elastic Block Store-3 Read More »
The cloud is where much of the serious technology innovation and growth happens these days, and Amazon Web Services (AWS), more than any other, is the platform of choice for business and institutional workloads. If you want to be successful as an AWS solutions architect, you’ll first need to make sure you understand what the …
Network Address Translation DevicesAlthough network address translation occurs at the Internet gateway, there are two other resources that can also perform NAT.■ NAT gateway■ NAT instanceAWS calls these NAT devices. The purpose of a NAT device is to allow an instance to access the Internet while preventing hosts on the Internet from reaching the instance …
VPC CIDR Blocks Like a traditional network, a VPC consists of at least one range of contiguous IP addresses. This address range is represented as a Classless interdomain routing (CIDR) block. The CIDR block determines which IP addresses may be assigned to instances and otherresources within the VPC. You must assign a primary CIDR block …
Securing Your EC2 Instance You are responsible for configuring appropriate and effective access controls to protect your EC2 instances from unauthorized use. Broadly speaking, AWS provides four tools to help you with this task: security groups, Identity and Access Management (IAM) roles, network address translation (NAT) instances, and key pairs. Security Groups An EC2 security …
Amazon Elastic Compute Cloud and Amazon Elastic Block Store-4 Read More »
Configuring an Environment for Your Instance Deciding where your EC2 instance will live is as important as choosing performance configuration. Here, there are three primary details to get right: geographic region, virtual private cloud (VPC), and tenancy model. AWS Regions As you learned earlier, AWS servers are housed in data centers around the world and …
Amazon Elastic Compute Cloud and Amazon Elastic Block Store-2 Read More »
EC2 Instances An EC2 instance may only be a virtualized and abstracted subset of a physical server, but it behaves just like the real thing. It’ll have access to storage, memory, and a network interface, and its primary drive will come with a fresh and clean operating system running. It’s up to you to decide …
Amazon Elastic Compute Cloud and Amazon Elastic Block Store-1 Read More »
Cloud Computing and VirtualizationThe technology that lies at the core of all cloud operations is virtualization. As illustrated inFigure 1.1, virtualization lets you divide the hardware resources of a single physical serverinto smaller units. That physical server could therefore host multiple virtual machines running their own complete operating systems, each with its own memory, storage, …
