Learning AWS电子书

Learning AWS

Table of Contents

Learning AWS

Credits

About the Authors

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers, and more

Why subscribe?

Free access for Packt account holders

Instant updates on new Packt books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. Cloud 101 – Understanding the Basics

What is cloud computing?

Public, private, and hybrid clouds

Cloud service models – IaaS, PaaS, and SaaS

Setting up your AWS account

The AWS management console

Summary

2. Designing Cloud Applications – An Architect's Perspective

Multi-tier architecture

Designing for multi-tenancy

Data security

Data extensibility

Application multi-tenancy

Designing for scale

Automating infrastructure

Designing for failure

Designing for parallel processing

Designing for performance

Designing for eventual consistency

Estimating your cloud computing costs

A typical e-commerce web application

Setting up our development environment

Running the application

Building a WAR file for deployment

Summary

3. AWS Components, Cost Model, and Application Development Environments

AWS components

Amazon Elastic Compute Cloud (EC2)

Amazon S3

Amazon EBS

Amazon CloudFront

Amazon Glacier

Amazon RDS

Amazon DynamoDB

Amazon ElastiCache

Amazon Simple Queue Service

Amazon Simple Notification Service

Amazon Virtual Private Cloud

Amazon Route 53

AWS Identity and Access Management

Amazon CloudWatch

Other AWS services

Optimizing cloud infrastructure costs

Choosing the right EC2 instance

Turn-off unused instances

Use auto scaling

Use reserved instances

Use spot instances

Use Amazon S3 storage classes

Reducing database costs

Using AWS services

Cost monitoring and analysis

Application development environments

Development environments

QA/Test environment

Staging environment

Production environment

Setting up the AWS infrastructure

The AWS cloud deployment architecture

AWS cloud construction

Creating security groups

Creating EC2 instance key pairs

Creating Roles

Creating an EC2 Instance

Elastic IPs (EIP)

Amazon Relational Database Service

Software stack installation

Summary

4. Designing for and Implementing Scalability

Defining scalability objectives

Designing scalable application architectures

Using AWS services for out-of-the-box scalability

Using a scale-out approach

Implement loosely coupled components

Implement asynchronous processing

Leveraging AWS infrastructure services for scalability

Using AWS CloudFront to distribute content

Using AWS ELB to scale without service interruptions

Implementing auto scaling using AWS CloudWatch

Scaling data services

Scaling proactively

Setting up auto scaling

AWS auto scaling construction

Creating an AMI

Creating Elastic Load Balancer

Creating a launch configuration

Creating an auto scaling group

Testing auto scaling group

Scripting auto scaling

Creating an AMI

Creating an Elastic Load Balancer

Creating launch configuration

Creating an auto scaling group

Summary

5. Designing for and Implementing High Availability

Defining availability objectives

The nature of failures

Setting up VPC for high availability

Using ELB and Route 53 for high availability

Instance availability

Zonal availability or availability zone redundancy

Regional availability or regional redundancy

Setting up high availability for application and data layers

Implementing high availability in the application

Using AWS for disaster recovery

Using a backup and restore DR strategy

Using a Pilot Light architecture for DR

Using a warm standby architecture for DR

Using a multi-site architecture for DR

Testing a disaster recovery strategy

Setting up high availability

The AWS high availability architecture

HA support for auto scaling groups

HA support for ELB

HA support for RDS

Summary

6. Designing for and Implementing Security

Defining security objectives

Understanding security responsibilities

Best practices in implementing AWS security

Implementing identity lifecycle management

Tracking the AWS API activity using CloudTrail

Logging for security analysis

Using third-party security solutions

Reviewing and auditing security configuration

Setting up security

AWS IAM – Securing your Infrastructure

IAM roles

AWS Key Management Service

Creating the KMS key

Using the KMS key

Application security

Transport security

Generating self-signed certificates

Configure ELB for SSL

Secure data-at-rest

Secure data on S3

Using the S3 console for server-side encryption

Using Java SDK for server-side encryption

Secure data on RDS

Summary

7. Deploying to Production and Going Live

Managing infrastructure, deployments, and support at scale

Creating and managing AWS environments using CloudFormation

Creating CloudFormation templates

Building a DevOps pipeline with CloudFormation

Updating stacks

Extending CloudFormation

Using CloudWatch for monitoring

Using AWS solutions for backup and archiving

Planning for production go-live activities

Setting up for production

The AWS production deployment architecture

VPC subnets

Private subnet

Bastion subnet

Bastion host

Security groups

Infrastructure as code

Setting up CloudFormation

Executing the CloudFormation script

Via the command line

Via the Amazon web console

Centralized logging

Setting up CloudWatch

Summary

Index