Learning AWS

Aurobindo Sarkar, Amit Shah

• Publisher: Packt Publishing
• Year: 2015
• eBook ISBN: 9781784394639
• Edition: 1
• Topic: Computer Science
• Subtopic: Cloud Computing
• Index: Computer Science

This book is targeted at expert programmers and architects wanting to learn AWS. Some familiarity with Spring, MySQL, and RESTful web services is assumed.

Learning AWS

---

Table of Contents

Learning AWS

Credits

About the Authors

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers, and more

Why subscribe?

Free access for Packt account holders

Instant updates on new Packt books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. Cloud 101 – Understanding the Basics

What is cloud computing?

Public, private, and hybrid clouds

Cloud service models – IaaS, PaaS, and SaaS

Setting up your AWS account

The AWS management console

Summary

2. Designing Cloud Applications – An Architect's Perspective

Multi-tier architecture

Designing for multi-tenancy

Data security

Data extensibility

Application multi-tenancy

Designing for scale

Automating infrastructure

Designing for failure

Designing for parallel processing

Designing for performance

Designing for eventual consistency

Estimating your cloud computing costs

A typical e-commerce web application

Setting up our development environment

Running the application

Building a WAR file for deployment

Summary

3. AWS Components, Cost Model, and Application Development Environments

AWS components

Amazon Elastic Compute Cloud (EC2)

Amazon S3

Amazon EBS

Amazon CloudFront

Amazon Glacier

Amazon RDS

Amazon DynamoDB

Amazon ElastiCache

Amazon Simple Queue Service

Amazon Simple Notification Service

Amazon Virtual Private Cloud

Amazon Route 53

AWS Identity and Access Management

Amazon CloudWatch

Other AWS services

Optimizing cloud infrastructure costs

Choosing the right EC2 instance

Turn-off unused instances

Use auto scaling

Use reserved instances

Use spot instances

Use Amazon S3 storage classes

Reducing database costs

Using AWS services

Cost monitoring and analysis

Application development environments

Development environments

QA/Test environment

Staging environment

Production environment

Setting up the AWS infrastructure

The AWS cloud deployment architecture

AWS cloud construction

Creating security groups

Creating EC2 instance key pairs

Creating Roles

Creating an EC2 Instance

Elastic IPs (EIP)

Amazon Relational Database Service

Software stack installation

Summary

4. Designing for and Implementing Scalability

Defining scalability objectives

Designing scalable application architectures

Using AWS services for out-of-the-box scalability

Using a scale-out approach

Implement loosely coupled components

Implement asynchronous processing

Leveraging AWS infrastructure services for scalability

Using AWS CloudFront to distribute content

Using AWS ELB to scale without service interruptions

Implementing auto scaling using AWS CloudWatch

Scaling data services

Scaling proactively

Setting up auto scaling

AWS auto scaling construction

Creating an AMI

Creating Elastic Load Balancer

Creating a launch configuration

Creating an auto scaling group

Testing auto scaling group

Scripting auto scaling

Creating an AMI

Creating an Elastic Load Balancer

Creating launch configuration

Creating an auto scaling group

Summary

5. Designing for and Implementing High Availability

Defining availability objectives

The nature of failures

Setting up VPC for high availability

Using ELB and Route 53 for high availability

Instance availability

Zonal availability or availability zone redundancy

Regional availability or regional redundancy

Setting up high availability for application and data layers

Implementing high availability in the application

Using AWS for disaster recovery

Using a backup and restore DR strategy

Using a Pilot Light architecture for DR

Using a warm standby architecture for DR

Using a multi-site architecture for DR

Testing a disaster recovery strategy

Setting up high availability

The AWS high availability architecture

HA support for auto scaling groups

HA support for ELB

HA support for RDS

Summary

6. Designing for and Implementing Security

Defining security objectives

Understanding security responsibilities

Best practices in implementing AWS security

Implementing identity lifecycle management

Tracking the AWS API activity using CloudTrail

Logging for security analysis

Using third-party security solutions

Reviewing and auditing security configuration

Setting up security

AWS IAM – Securing your Infrastructure

IAM roles

AWS Key Management Service

Creating the KMS key

Using the KMS key

Application security

Transport security

Generating self-signed certificates

Configure ELB for SSL

Secure data-at-rest

Secure data on S3

Using the S3 console for server-side encryption

Using Java SDK for server-side encryption

Secure data on RDS

Summary

7. Deploying to Production and Going Live

Managing infrastructure, deployments, and support at scale

Creating and managing AWS environments using CloudFormation

Creating CloudFormation templates

Building a DevOps pipeline with CloudFormation

Updating stacks

Extending CloudFormation

Using CloudWatch for monitoring

Using AWS solutions for backup and archiving

Planning for production go-live activities

Setting up for production

The AWS production deployment architecture

VPC subnets

Private subnet

Bastion subnet

Bastion host

Security groups

Infrastructure as code

Setting up CloudFormation

Executing the CloudFormation script

Via the command line

Via the Amazon web console

Centralized logging

Setting up CloudWatch

Summary

Index

Learning AWS

Copyright © 2015 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: July 2015

Production reference: 1280715

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham B3 2PB, UK.

ISBN 978-1-78439-463-9

www.packtpub.com

Credits

Authors

Aurobindo Sarkar

Amit Shah

Reviewers

Jiří Činčura

Brian C. Galura

Mark Takacs

Robert Williamson

Commissioning Editor

Edward Bowkett

Acquisition Editor

Larissa Pinto

Content Development Editor

Anish Sukumaran

Technical Editor

Bharat Patil

Copy Editor

Merilyn Pereira

Project Coordinator

Mary Alex

Proofreader

Safis Editing

Indexer

Tejal Soni

Graphics

Sheetal Aute

Production Coordinator

Manu...

Table of contents

• Learning AWS