AWS Tools for PowerShell 6电子书

Title Page

Copyright

AWS Tools for PowerShell 6

Credits

About the Author

About the Reviewer

www.PacktPub.com

Why subscribe?

Customer Feedback

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Downloading the color images of this book

Errata

Piracy

Questions

PowerShell Essentials

Why PowerShell?

Running PowerShell

Reading the PowerShell language

Getting and exploring help options

Discovering cmdlets and aliases

Learning cmdlets

Risk mitigation parameters

Working with output

Running PowerShell remotely

Building parameterized script

Comment-based help

Summary

The AWS Overview

Disruptive innovations - AWS Cloud

The benefits of AWS cloud computing

Common challenges of shifting to the cloud

The AWS global infrastructure

Security and compliance

AWS services

Virtual Private Cloud

Elastic Compute Cloud

Simple Storage Service

Glacier

CloudWatch

Simple Notification Service

Relational Database Service

CloudFormation

Identify and Access Management

CloudTrail

AWS Config

AWS Elastic Beanstalk

Laying out foundations

The AWS sign up

The organization provided AWS account

Get supported

Summary

Installing PowerShell Core and AWS Tools

AWS Tools for PowerShell

Installing PowerShell 6 On Windows

Installing PowerShell 6 on Linux

Prerequisites for AWS Tools

Downloading and installing AWS Tools

Enabling script execution

Finding the AWS Tool version

Updating AWS Tools for PowerShell

Summary

AWS Identity and Access Management

The AWS-shared responsibility model

Setting up AWS Tools for access

Managing AWS credentials

The AWS credential search order

Creating IAM users

Creating IAM groups

Accessing the AWS console

Accessing AWS via CLI

Removing a policy from the group

Revoking a policy from the user

What are IAM roles?

IAM policies

Dropping groups, roles, and users

Dropping PowerShell AWS profiles

The use case - access key rotation

Summary

AWS Virtual Private Cloud

Laying the foundation

Virtual Private Cloud

Internet Gateways

Route Tables

Subnets

NAT Gateway

Network Access List

Security Groups

Summary

AWS Elastic Compute Cloud

The characteristics of AWS EC2

The EC2 instance purchasing options

On-demand

Reserved

Spot

Dedicated

Understanding IP addresses on EC2

Storage options on EC2

Instance storage

Elastic Block Storage

Spinning up an EC2 instance

Accessing the EC2 instance

The EC2 instance metadata service

Stopping the EC2 instance

Starting the EC2 instance

The Elastic IP address

Terminating the EC2 instance

Placement Groups

Assigning an IAM role to the EC2 instance

The types of EBS

EBS SSD backed volumes

EBS HDD backed volumes

Amazon Machine Images

EBS snapshots

Summary

AWS Simple Storage Service

AWS Glacier

Storage classes on S3

The S3 bucket

Folders and objects

Downloading folders and objects from the S3 bucket

Managing S3 permissions

IAM policies

Bucket policies

Access Control Lists

Building S3 VPC endpoints

S3 Transfer Acceleration

S3 versioning

S3 lifecycle policies

Cross-region replication

Removing the S3 bucket

Summary

Elastic Load Balancer

Why load balancer?

Types of Elastic Load Balancers

Classic Load Balancer

Application Load Balancer

Application Load Balancer components

Creating Classic Load Balancer

Creating Application Load Balancer

Deleting Elastic Load Balancer

Summary

Auto Scaling

Auto Scaling components

Auto Scaling lifecycle

Fleet management

Dynamic scaling

Creating launch configuration

Creating an Auto Scaling Group

Increasing a fleet manually

Scaling-Out and Scaling-In dynamically

Scaling on schedule

Lifecycle hooks and cooldown

Termination policies

Termination protection

Suspending the Auto Scaling process

Standby mode

Deleting an Auto Scaling Group

Summary

Laying Foundation for RDS Databases

Database engines on RDS

Deployment consideration

DB instance classes

Multi-AZ and standby

Read replicas

Compliance

Data encryption

Database access and IAM

DB Security Groups

DB Subnet Groups

DB Parameter Groups

DB Option Groups

Summary

DB Instance Administration and Management

RDS storage type

Licensing models on RDS

Understanding maintenance windows

Spinning up RDS DB instances

Multi-AZ deployment

Enabling encryption on RDS

Connecting to an RDS instance with and without SSL

Stop, start, and restart of a DB instance

Adding space to a DB instance

RDS backup

RDS restore

Manual snapshot of the RDS instance

Deleting an RDS instance

Checking account limit and attributes

Summary

Working with RDS Read Replicas

Creating read replicas

Rebooting read replicas

Connecting to a read replica

Promoting read replicas to primary

Deleting read replicas

Use case - balancing traffic between read replicas

Summary

AWS Elastic Beanstalk

What is Elastic Beanstalk?

Elastic Beanstalk components

Environment types

Understanding deployment models on Elastic Beanstalk

Creating application

Creating a configuration template

Creating an environment

Deploying a popular WordPress application

Cloning an environment

Swapping an environment CNAME

Deleting an environment and application

Summary

AWS CloudFormation

What is CloudFormation?

Authoring and template anatomy

Intrinsic functions

Cross stack references

Creating a base network using CloudFormation

Validating a base network template

Running a base network template

Creating an EC2 instance using CloudFormation

Nested stack

Stack policies

Helper scripts

Dropping the template

Summary

AWS CloudWatch

CloudWatch

Types of CloudWatch monitoring

CloudWatch alarm states

Simple Notification Service

Creating SNS topics

Subscribing to the topic

Monitoring EC2 instances

Creating an alarm for an EC2 instance

Custom monitoring for an EC2 instance

Monitoring RDS DB instances

CloudWatch logs

Summary

AWS Resource Auditing

Introduction to CloudTrail

Why CloudTrail?

CloudTrail events

Create CloudTrail

Enabling CloudTrail

AWS Config

Enabling Config

Removing the delivery channel and recorder

Summary