AWS Certification Prep

Regions are encompass available zones. Choose based on: 1) Comply, 2) Proximity, 3) Features, and 4) Price. Physical region, each with 3+ areas.

High Availability = multiple available zones

We responsible for OS patches + configuration + managing OS + network + client encryption. AWS responsible for physical defense of data centers.

Client/Server = client request and server responds.

EC2 multi-tenancy = each VM is isolated but shares host resources. Multiple users sharing same EC2 instances while isolated.

AWS CLI advantages = scripting

Memory Optimized = real time, large data set

Storage Optimized = high-disk throughput & low latency. Data analysis.

Dedicated Host = full machine + physical server

Spot Instance = Batch operations w/ savings

On Demand = w/o commitment

Reserved Instances = predictable work + cost savings

General Purpose Instances = cost effective + flexible

Savings Plan = critical steady state.  Spot Instances = batch.

A. Machine Image = fires EC2 instances with consistent image  and focuses on OS + software setup.

EC2 instance requires AMI, Instance Type, + Storage

Elastic Load Balancing = distributes across EC2 instances by: 1) Round Robin, 2) Least Connections, 3) IP Hash, and 4) Least Response Time.

A. Event Bridge = event routing + store events

A. Simple Queue Service = message queuing service

A. Simple Notification Service = pub/sub service that stores until 2nd service is up. Real time. Multi-target simultaneous. 

Lambda = serverless compute service runs code responding to events. auto scales. We manage rights via IAM, our code, triggering event, and run times. Event driven.

AWS Mgmt. Console = GUI tool

Accelerated computing = GPU acceleration

Serverless = We only code + deploy.

AWS elasticity + auto scaling = grow/shrink dynamically

Elastic = up/down resources

EC2 auto scaling = auto add/remove instances

Containers = faster and lighter than VMs

A. Elastic Container Service = full control over infrastructure, small to mid

ECS + Fargate = serverless w/ variable traffic

A. Elastic Kubernetes Service = fully managed 

EKS + EC2 = full infrastructure control

EKS + Fargate = K w/o managing servers

A. Elastic Container Registry = store, hold and manage, deploy containers. Open container initiative.

Elastic Beanstalk = deploy, manage, scale web apps. Sets up infrastructure, load balancing + app health.

AWS Batch = batch workloads. auto schedule, manages + scales. Parallel work. Compute.

A. Lightsail = virtual private servers, storage, DBs + networking for small biz. No need for Mgmt console. Blogs, etc.

AWS Outposts = fully managed hybrid w/ on premise.

Cloud Formation = I as code, create template.

Endpoints = cache resources such as images.

Networking = infrastructure and services working together to host your apps, data, and resources .

A. Virtual Private Cloud launch AWS resources in virtual network you define. organize and hold public or private resources.

Virtual private gateway allows protected internet traffic to enter into the VPC. For hybrid. However, does not have large bandwidth.

Virtual private network encrypts your internet traffic.

Subnet = sub of VPC, group resources based on security or operational needs. Subnets can be public or private. A private subnet has no direct route to the internet.

AWS Client VPN is a cloud based, networking service for remote workers. Fully managed, elastic VPN that auto scales up or down.  connect your remote workers and on-premises networks to the cloud. Advanced authentication, and elastic and remote access in a fully managed service.

Site-to-Site VPN creates a secure connection between your data center or branch offices and your AWS Cloud resources. cost-effective. Doesn't improve bandwidth.

AWS Private Link is a highly available, scalable technology that you can use to privately connect your VPC to services and resources as if they were in your VPC.

AWS Direct Connect is a service that makes dedicated private connection between you and VPC. Large bandwidth and good security.

The customer is responsible for securing the network traffic. They can do this using security groups and network ACLs:

Network Access Control Lists perform stateless packet checking. Remember nothing. Subnet level. allow and deny type rules.

Security groups are stateful at instance level and only allow type rules.

A. Route 53 is a DNS that provides a reliable and cost-effective way to route end users to internet applications (so domain names).

CloudFront is a content delivery network (CDN) service that delivers your content (such as media) with faster loading times, cost savings, and reliability.

AWS Global Accelerator uses intelligent traffic routing and fast failover. Handles static IP addresses, directing traffic over the AWS global network, and routing to optimal endpoints based on health, user location, and policies.

Amazon EC2 instance store for temp memory-based storage for buffers, caches, and scratch data. Cost-effective, fast, auto-available.

Amazon Elastic Block Store = Persists after instance. works with different EC2 instances. Data migration, instance type changes, disaster recovery, cost-optimization, performance tuning. Consistent and low-latency access. EBS volumes are Region-specific. Manual set of volume size. High availability and durability by auto replicating volumes in the same Availability Zone.