AWS Administration Cookbook电子书

Credits

About the Authors

About the Reviewer

www.PacktPub.com

Customer Feedback

Preface

What this book covers

What you need for this book

Who this book is for

Sections

Getting ready

How to do it…

How it works…

There's more…

See also

Conventions

Reader feedback

Customer support

Downloading the example code

Errata

Piracy

Questions

AWS Fundamentals

Introduction

Creating an account

Regions and Availability Zones

The AWS web console

CloudFormation templates

Infrastructure as Code

Visibility

Consistency

Troubleshooting

Scale

Costs

DevOps

Server configuration

IaC on AWS

CloudFormation

What is CloudFormation?

Why is CloudFormation important?

The layer cake

CloudFormation templates

YAML versus JSON

A closer look at CloudFormation templates

Parameters

Resources

Outputs

Mappings

Dependencies and ordering

Functions

Fn::Join

Fn::Sub

Conditionals

Permissions and service roles

Custom resources

Cross-stack references

Updating resources

Change sets

Other things to know

Name collisions

Rollback

Limits

Circular dependencies

DSLs and generators

Credentials

Stack policies

The command-line interface tool

Installation

Upgrade

Configuration

Default profile

Named profiles

Environment variables

Instance roles

Usage

Commands

Subcommands

Options

Output

JSON

Table

Text

Querying

Generate CLI skeleton

Input

Output

Pagination

Autocomplete

Related tools

jq

Managing AWS Accounts

Introduction

Setting up a master account

How to do it...

How it works...

There's more...

Multi-factor authentication

Using the CLI

See also

Creating a member account

Getting ready

How to do it...

How it works...

There's more...

Accessing the member account

Service control policies

Root credentials

Deleting accounts

See also

Inviting an account

Getting ready

How to do it...

How it works...

There's more...

Removing accounts

Consolidated billing

See also

Managing your accounts

Getting ready

How to do it...

Getting the root ID for your organization

Creating an OU

Getting the ID of an OU

Adding an account to an OU

Removing an account from an OU

Deleting an OU

How it works...

There's more...

See also

Adding a service control policy

Getting ready

How to do it...

How it works...

There's more...

See also

Storage and Content Delivery

Introduction

Storage

Elastic Block Store

Elastic File System

Simple Storage Service

Glacier

Content delivery

Hosting a static website

How to do it...

Creating S3 buckets and hosting content

Creating a hosted zone

Creating DNS records

Uploading website content

How it works...

There's more...

Delegating your domain to AWS

Cross-origin resource sharing

Caching a website

Getting ready

About dynamic content

Configuring CloudFront distributions

How to do it...

Working with network storage

Getting ready

How to do it...

How it works...

There's more...

Backing up data for compliance

How to do it...

How it works...

Using AWS Compute

Introduction

Creating a key pair

Getting ready

How to do it...

How it works...

Launching an instance

Getting ready

How to do it...

How it works...

There's more...

See also

Attaching storage

Getting ready

How to do it...

How it works...

See also

Securely accessing private instances

Getting ready

How to do it...

Configuration

How it works...

There's more...

Auto scaling an application server

Getting ready

How to do it...

How it works...

Scaling policies

Alarms

Creating machine images

Getting ready

How to do it...

How it works...

Template

Validate the template

Build the AMI

There's more...

Debugging

Orphaned resources

Deregistering AMIs

Other platforms

Creating security groups

Getting ready

How to do it...

There's more...

Differences from traditional firewalls

Creating a load balancer

How to do it...

How it works...

There's more...

HTTPS/SSL

Path-based routing

Management Tools

Introduction

Auditing your AWS account

How to do it...

How it works...

There's more...

Recommendations with Trusted Advisor

How to do it...

How it works...

There's more...

Creating e-mail alarms

How to do it...

How it works...

There's more...

Existing topics

Other subscriptions

See also

Publishing custom metrics in CloudWatch

Getting ready

How to do it...

How it works...

There's more...

Cron

Auto scaling

Backfilling

See also

Creating monitoring dashboards

Getting ready

How to do it...

There's more...

Widget types

See also

Creating a budget

Getting ready

How to do it...

How it works...

Feeding log files into CloudWatch logs

Getting ready

How to do it...

How it works...

There's more...

Database Services

Introduction

Creating a database with automatic failover

Getting ready

How to do it...

How it works...

There's more...

Creating a NAT gateway

Getting ready

How to do it...

How it works...

See also

Creating a database read-replica

Getting ready

How to do it...

How it works...

There's more...

Promoting a read-replica to master

Getting ready

How to do it...

Creating a one-time database backup

Getting ready

How to do it...

Restoring a database from a snapshot

Getting ready

How to do it...

There's more...

Migrating a database

Getting ready

How to do it...

How it works...

There's more...

Database engines

Ongoing replication

Multi-AZ

Calculating DyanmoDB performance

Getting ready

How to do it...

How it works...

There's more...

Burst capacity

Metrics

Eventually consistent reads

Networking

Introduction

Building a secure network

Getting ready

How to do it...

How it works...

There's more...

See also...

Creating a NAT gateway

Getting ready

How to do it...

How it works...

See also

Canary deployment via DNS

Getting ready

How to do it...

How it works...

Hosting a domain

Getting ready

How to do it...

How it works...

There's more...

See also...

Routing based on location with failover

Getting ready

How to do it...

How it works...

Normal operation (geolocation routing)

Region A failure

Region B failure

There's more...

See also...

Network logging and troubleshooting

Getting ready

How to do it...

How it works...

There's more...

Log format

Updates

Omissions

See also

Security and Identity

Introduction

Federating with your AWS account

Getting ready

How to do it...

Active Directory configuration

Auth Account policy configuration

Auth Account role configuration

Simple AD configuration

App Account role configuration

How it works...

There's more...

See also

Creating SSL certificates

How to do it...

How it works...

There's more...

EC2 instances

Importing certificates

CloudFormation

Active Directory as a service

Getting ready

How to do it...

How it works...

There's more...

See also

Creating users

Getting ready

How to do it...

There's more...

See also

Creating instance roles

How to do it...

How it works...

There's more...

See also

Cross-account user roles

Getting ready

How to do it...

How it works...

There's more...

AWS CLI profiles

See also

Storing secrets

Getting ready

How to do it...

How it works...

There's more...

Key aliases

Secret reader role

Secret writer role

The put-file command

Versioning

See also

Estimating Costs

Introduction

Calculating costs

Getting ready

How to do it...

How it works...

See also

Estimating CloudFormation template costs

Getting ready

How to do it...

How it works...

See also

Purchasing reserved instances

Getting ready

How to do it...

How it works...

There's more...

Estimating total cost of ownership

Getting ready

How to do it...

How it works...

There's more...

See also