Learning Amazon Web Services

Length: 448 pages
Edition: 1
Language: English
Publisher: Addison-Wesley Professional
Publication Date: 2019-07-13
ISBN-10: 0135298342
ISBN-13: 9780135298343
Sales Rank: #732863 (See Top 100 Books)

The Practical, Foundational Technical Introduction to the World’s #1 Cloud Platform

Includes access to several hours of online training video: Mark Wilkins’ expert training video library guides you through setting up core services and prepares you to deploy your own apps and resources.

Learning Amazon Web Services (AWS) is the perfect foundational resource for all administrators, developers, project managers, and other IT professionals who want to plan and deploy AWS services and/or earn AWS certification.

Top cloud trainer and evangelist Mark Wilkins teaches best practices that align with Amazon’s Well-Architected Framework, introduces key concepts in the context of a running case study, carefully explains how core AWS services operate and integrate, and offers extensively tested tips for maximizing flexibility, security, and value. Companion online videos guide you step-by-step through setting AWS compute, storage, networking, scale, security, automation, and more.

Balance cost, compliance, and latency in your service designs
Choose the right networking options for your virtual private cloud (VPC)
Build, host, launch, manage, and budget for EC2 compute services
Plan for scale and resiliency, and make informed decisions about AWS storage
Enforce strict security, and automate to improve operational efficiency

This book with companion training videos is a valuable learning tool for anyone seeking to demonstrate expertise through formal certification.

WEB EDITION: All buyers of the book or ebook can register your book for access to a free online Web Edition of this title, which included videos embedded within the text, plus updates as they become available.

Cover
About This E-Book
Half Title
Title Page
Copyright Page
Accessing the Web Edition
Contents at a Glance
Table of Contents
Companion Videos List
Preface
About the Author
Acknowledgments
1. Learning AWS
    About This Book
    Trying to Define the Cloud
    Moving to AWS
    Essential Characteristics of AWS Cloud Computing
    Operational Benefits of AWS
    Cloud Provider Limitations
    Data Security at AWS
    Network Security at AWS
    Application Security at AWS
    Compliance in the AWS Cloud
    Migrating Applications
    The Well-Architected Framework
    The Well-Architected Tool
    In Conclusion
2. Designing with AWS Global Services
    Considering Location
    AWS Regions
    Availability Zones
    Multiple Availability Zones
    What’s the AWS Service-Level Agreement?
    Global Edge Services
    Choosing a Region
    AWS and Compliance
    Latency Concerns
    Services Offered at Each Region
    Calculating Costs
    Management Service Costs
    AWS Compute Costs
    Storage Costs
    Data Transfer Costs
    Optimizing Costs at AWS
    Tools for Analyzing Costs at AWS
    AWS Simple Monthly Calculator
    In Conclusion
    Top 10 Big-Picture Discussion Points: Compliance, Governance, Latency, and Failover Considerations
3. AWS Networking Services
    VPC Networking
    What’s Behind the Networking Curtain?
    Creating Your First VPC
    How Many VPCs?
    Creating the VPC CIDR Block
    The Default VPC
    Revisiting Availability Zones
    Creating Subnets
    Working with Route Tables
    Private IPV4 Addresses
    Elastic IP Addresses
    Bring Your Own IP (BYOIP)
    IPv6 Addresses
    Security Groups
    Network ACLs
    Understanding Ephemeral Ports
    Peering VPCs
    Gateway VPC Endpoints
    VPC Connectivity
    VPN Connections
    VPN Connections
    Understanding Route Propagation
    Direct Connect
    Route 53
    Using DNS with a VPC: Private DNS Zones
    In Conclusion
    Top 10 Discussion Points: Networking Considerations for Security, Failover, and Connectivity
4. Compute Services: AWS EC2 Instances
    A Short History of EC2 Virtualization
    The Nitro System
    EC2 Instances
    Instance Families
    What’s a vCPU?
    EC2 Instance Choices
    Instances Designed to Burst
    EC2 Network Performance
    Amazon Machine Images (AMIs)
    Choosing an AMI
    Creating a Custom AMI
    Custom Instance Store AMIs
    Proper AMI Design
    EC2 Pricing
    Reserved Instances (RI)
    Spot Fleet
    EC2 Fleet
    EC2 Instance Storage Options
    EC2 Auto Recovery
    Ordering an Instance
    Migrating to AWS
    Other Ways to Host Workloads at AWS
    In Conclusion
    Top 10 Big-Picture Discussion Points: Migration and Planning Considerations
5. Planning for Scale and Resiliency
    The Concept of Monitoring
    What Is CloudWatch?
    Planning for Monitoring
    CloudWatch Integration
    CloudWatch Terminology
    Using the Dashboard
    Monitoring EC2 Instances
    Elastic Load Balancing Services
    Additional ELB Features
    Application Load Balancer (ALB)
    Configuring Health Checks
    Network Load Balancer
    Scaling Applications
    Launch Templates
    Scaling Options for Auto Scaling Groups
    AWS Auto Scaling
    In Conclusion
    Top 10 Big-Picture Discussion Points: Scale, Availability, and Monitoring Decisions
6. Cloud Storage
    Cloud Storage
    EBS Block Storage
    EBS Snapshots
    S3 Storage
    S3 Management
    S3 Bucket Security
    Amazon S3 Glacier Archive Storage
    Shared File Systems at AWS
    Elastic File System (EFS)
    Storage Performance Compared
    Amazon FSx for Windows File Server
    Relational Database Service (RDS)
    Big-Picture RDS Installation Steps
    Aurora
    DynamoDB
    DynamoDB Tables
    ElastiCache
    AWS Data Transfer Options
    The Snow Family
    AWS Storage Gateway Family
    In Conclusion
    Top 10 Big-Picture Discussion Points: Storage Options and Considerations
7. Security Services
    Identity and Access Management
    IAM Users
    Creating an IAM User
    Using Multifactor Authentication (MFA)
    IAM Policy Types
    IAM Policy Creation
    Reading a Simple JSON Policy
    Policy Actions
    Reviewing the Policy Permissions Applied
    Using Tags with IAM Identities
    IAM Roles
    Cross-Account Access to AWS Resources
    The AWS Security Token Service (STS)
    Identity Federation
    IAM Best Practices
    IAM Security Tools
    Creating a CloudWatch Trail Event
    Other AWS Security Services
    In Conclusion
    Top 10 Big-Picture Security Discussion Points
8. Automating AWS Infrastructure
    Automating with AWS
    From Manual to Automated Infrastructure with CloudFormation
    CloudFormation Components
    Creating an EC2 Instance with ElP
    Updating with Change Sets
    AWS Service Catalog
    The 12-Factor Methodology
    Elastic Beanstalk
    CodePipeline
    Serviceless Computing with Lambda
    API Gateway
    Building a Serverless Web App
    In Conclusion
    Top 10 Big-Picture Discussion Points: Moving Toward Stateless Design
Index
Code Snippets