What is Cloud Service Model (IAAS, PAAS, SAAS) and Cloud Deployment model (Public Cloud, Private Cloud and Hybrid Cloud)

Read More

Understand What is AWS Cloud Computing Solution Architect?

 

Read More

What is AWS - Elastic Compute Cloud

Amazon EC2 (Elastic Compute Cloud) is a web service interface that provides resizable compute capacity in the AWS cloud. It is designed for developers to have complete control over web-scaling and computing resources.

EC2 instances can be resized and the number of instances scaled up or down as per our requirement. These instances can be launched in one or more geographical locations or regions, and Availability Zones (AZs). Each region comprises of several AZs at distinct locations, connected by low latency networks in the same region.

EC2 Components

In AWS EC2, the users must be aware about the EC2 components, their operating systems support, security measures, pricing structures, etc.

Operating System Support

Amazon EC2 supports multiple OS in which we need to pay additional licensing fees like: Red Hat Enterprise, SUSE Enterprise and Oracle Enterprise Linux, UNIX, Windows Server, etc. These OS needs to be implemented in conjunction with Amazon Virtual Private Cloud (VPC).

Security

Users have complete control over the visibility of their AWS account. In AWS EC2, the security systems allow create groups and place running instances into it as per the requirement. You can specify the groups with which other groups may communicate, as well as the groups with which IP subnets on the Internet may talk.

Pricing

AWS offers a variety of pricing options, depending on the type of resources, types of applications and database. It allows the users to configure their resources and compute the charges accordingly.

Fault tolerance

Amazon EC2 allows the users to access its resources to design fault-tolerant applications. EC2 also comprises geographic regions and isolated locations known as availability zones for fault tolerance and stability. It doesnt share the exact locations of regional data centers for security reasons.

When the users launch an instance, they must select an AMI that's in the same region where the instance will run. Instances are distributed across multiple availability zones to provide continuous services in failures, and Elastic IP (EIPs) addresses are used to quickly map failed instance addresses to concurrent running instances in other zones to avoid delay in services.

Migration

This service allows the users to move existing applications into EC2. It costs $80.00 per storage device and $2.49 per hour for data loading. This service suits those users having large amount of data to move.

Features of EC2

Here is a list of some of the prominent features of EC2 −

• Reliable − Amazon EC2 offers a highly reliable environment where replacement of instances is rapidly possible. Service Level Agreement commitment is 99.9% availability for each Amazon EC2 region.
• Designed for Amazon Web Services − Amazon EC2 works fine with Amazon services like Amazon S3, Amazon RDS, Amazon DynamoDB, and Amazon SQS. It provides a complete solution for computing, query processing, and storage across a wide range of applications.
• Secure − Amazon EC2 works in Amazon Virtual Private Cloud to provide a secure and robust network to resources.
• Flexible Tools − Amazon EC2 provides the tools for developers and system administrators to build failure applications and isolate themselves from common failure situations.
• Inexpensive − Amazon EC2 wants us to pay only for the resources that we use. It includes multiple purchase plans such as On-Demand Instances, Reserved Instances, Spot Instances, etc. which we can choose as per our requirement.

How to Use AWS EC2

Step 1 − Sign-in to AWS account and open IAM console by using the following link

Step 2 − In the navigation Panel, create/view groups and follow the instructions.

Step 3 − Create IAM user. Choose users in the navigation pane. Then create new users and add users to the groups.

Step 4 − Create a Virtual Private Cloud using the following instructions.

• Open the Amazon VPC console by using the following link −
• Select VPC from the navigation panel. Then select the same region in which we have created key-pair.
• Select start VPC wizard on VPC dashboard.
• Select VPC configuration page and make sure that VPC with single subnet is selected. The choose Select.
• VPC with a single public subnet page will open. Enter the VPC name in the name field and leave other configurations as default.
• Select create VPC, then select Ok.

Step 5 − Create WebServerSG security groups and add rules using the following instructions.

• On the VPC console, select Security groups in the navigation panel.
• Select create security group and fill the required details like group name, name tag, etc.
• Select your VPC ID from the menu. Then select yes, create button.
• Now a group is created. Select the edit option in the inbound rules tab to create rules.

Step 6 − Launch EC2 instance into VPC using the following instructions.

• Open EC2 console by using the following link −
• Select launch instance option in the dashboard.
• A new page will open. Choose Instance Type and provide the configuration. Then select Next: Configure Instance Details.
• A new page will open. Select VPC from the network list. Select subnet from the subnet list and leave the other settings as default.
• Click Next until the Tag Instances page appears.

Step 7 − On the Tag Instances page, provide a tag with a name to the instances. Select Next: Configure Security Group.

Step 8 − On the Configure Security Group page, choose the Select an existing security group option. Select the WebServerSG group that we created previously, and then choose Review and Launch.

Step 9 − Check Instance details on Review Instance Launch page then click the Launch button.

Step 10 − A pop up dialog box will open. Select an existing key pair or create a new key pair. Then select the acknowledgement check box and click the Launch Instances button.

Read More

What is Amazon Web Services - Account

How to Use AWS Account?

Following are the steps to access AWS services −

• Create an AWS account.
• Sign-up for AWS services.
• Create your password and access your account credentials.
• Activate your services in credits section.

Create an AWS Account

Amazon provides a fully functional free account for one year for users to use and learn the different components of AWS. You get access to AWS services like EC2, S3, DynamoDB, etc. for free. However, there are certain limitations based on the resources consumed.

Step 1 − To create an AWS account, open this link and sign-up for new account and enter the required details.

If we already have an account, then we can sign-in using the existing AWS password.

Step 2 − After providing an email-address, complete this form. Amazon uses this information for billing, invoicing and identifying the account. After creating the account, sign-up for the services needed.

Step 3 − To sign-up for the services, enter the payment information. Amazon executes a minimal amount transaction against the card on the file to check that it is valid. This charge varies with the region.

Step 4 − Next, is the identity verification. Amazon does a call back to verify the provided contact number.

Step 5 − Choose a support plan. Subscribe to one of the plans like Basic, Developer, Business, or Enterprise. The basic plan costs nothing and has limited resources, which is good to get familiar with AWS.

Step 6 − The final step is confirmation. Click the link to login again and it redirects to AWS management console.

Now the account is created and can be used to avail AWS services.

AWS Account Identifiers

AWS assigns two unique IDs to each AWS account.

• An AWS account ID
• A conical user ID

AWS Account ID

It is a 12-digit number like 123456789000 and is used to construct Amazon Resource Names (ARN). This ID helps to distinguish our resources from resources in other AWS accounts.

To know the AWS account number, click Support on the upper right side of the navigation bar in AWS management console as shown in the following screenshot.

Conical String User ID

It is a long string of alphanumeric characters like 1234abcdef1234. This ID is used in Amazon S3 bucket policy for cross-account access, i.e. to access resources in another AWS account.

Account Alias

Account alias is the URL for your sign-in page and contains the account ID by default. We can customize this URL with the company name and even overwrite the previous one.

How to Create/Delete Your Own AWS Account Alias?

Step 1 − Sign in to the AWS management console and open the IAM console using the following link

Step 2 − Select the customize link and create an alias of choice.

Step 3 − To delete the alias, click the customize link, then click the Yes, Delete button. This deletes the alias and it reverts to the Account ID.

Multi Factor Authentication

Multi Factor Authentication (MFA) provides additional security by authenticating the users to enter a unique authentication code from an approved authentication device or SMS text message when they access AWS websites or services. If the MFA code is correct, then only the user can access AWS services or else not.

Requirements

To use MFA services, the user has to assign a device (hardware or virtual) to IAM user or AWS root account. Each MFA device assigned to the user must be unique, i.e. the user cannot enter a code from another user's device to authenticate.

How to Enable MFA Device?

Step 1 − Open the following link, https:// console.aws.amazon.com/iam/

Step 2 − On the web page, choose users from the navigation pane on the right side to view the list of user name.

Step 3 − Scroll down to security credentials and choose MFA. Click activate MFA.

Step 4 − Follow the instructions and the MFA device will get activated with the account.

There are 3 ways to enable a MFA device −

SMS MFA Device

In this method, MFA requires us to configure the IAM user with the phone number of the user's SMS-compatible mobile device. When the user signs in, AWS sends a six-digit code by SMS text message to the user's mobile device. The user is required to enter the same code on a second web page during sign-in to authenticate the right user. This SMS-based MFA cannot be used with AWS root account.

Hardware MFA Device

In this method, MFA requires us to assign an MFA device (hardware) to the IAM user or the AWS root account. The device generates a six-digit numeric code based upon a time synchronized one-time password algorithm. The user has to enter the same code from the device on a second web page during sign-in to authenticate the right user.

Virtual MFA Device

In this method, MFA requires us to assign an MFA device (virtual) to the IAM user or the AWS root account. A virtual device is a software application (mobile app) running on a mobile device that emulates a physical device. The device generates a six-digit numeric code based upon a time-synchronized one-time password algorithm. The user has to enter the same code from the device on a second web page during sign-in to authenticate the right user.

AWS Identity & Access Management (IAM)

IAM is a user entity which we create in AWS to represent a person that uses it with limited access to resources. Hence, we do not have to use the root account in our day-to-day activities as the root account has unrestricted access to our AWS resources.

How to Create Users in IAM?

Step 1 − Open the link to sign-in to AWS Management console.

Step 2 − Select the Users option on the left navigation pane to open the list of all users.

Step 3 − We can also create New Users using the Create New Users option, a new window will open. Enter the user-name which we want to create. Select the create option and a new user will be created.

Step 4 − We can also see Access Key IDs and secret keys by selecting Show Users Security Credentials link. We can also save these details on the computer using the Download Credentials option.

Step 5 − We can manage the users own security credentials like creating password, managing MFA devices, managing security certificates, creating/deleting access keys, adding user to groups, etc.

There are many more features that are optional and are available on the web page.

Read More

What is Amazon Web Services - Console Mobile App

The AWS Console mobile app, provided by Amazon Web Services, allows its users to view resources for select services and also supports a limited set of management functions for select resource types.

Following are the various services and supported functions that can be accessed using the mobile app.

EC2 (Elastic Compute Cloud)

• Browse, filter and search instances.
• View configuration details.
• Check status of CloudWatch metrics and alarms.
• Perform operations over instances like start, stop, reboot, termination.
• Manage security group rules.
• Manage Elastic IP Addresses.
• View block devices.

Elastic Load Balancing

• Browse, filter and search load balancers.
• View configuration details of attached instances.
• Add and remove instances from load balancers.

S3

• Browse buckets and view their properties.
• View properties of objects.

Route 53

• Browse and view hosted zones.
• Browse and view details of record sets.

RDS (Relational Database Service)

• Browse, filter, search and reboot instances.
• View configuration details, security and network settings.

Auto Scaling

• View group details, policies, metrics and alarms.
• Manage the number of instances as per the situation.

Elastic Beanstalk

• View applications and events.
• View environment configuration and swap environment CNAMEs.
• Restart app servers.

DynamoDB

• View tables and their details like metrics, index, alarms, etc.

CloudFormation

• View stack status, tags, parameters, output, events, and resources.

OpsWorks

• View configuration details of stack, layers, instances and applications.
• View instances, its logs, and reboot them.

CloudWatch

• View CloudWatch graphs of resources.
• List CloudWatch alarms by status and time.
• Action configurations for alarms.

Services Dashboard

• Provides information of available services and their status.
• All information related to the billing of the user.
• Switch the users to see the resources in multiple accounts.

Features of AWS Mobile App

To have access to the AWS Mobile App, we must have an existing AWS account. Simply create an identity using the account credentials and select the region in the menu. This app allows us to stay signed in to multiple identities at the same time.

For security reasons, it is recommended to secure the device with a passcode and to use an IAM user's credentials to log in to the app. In case the device is lost, then the IAM user can be deactivated to prevent unauthorized access.

Root accounts cannot be deactivated via mobile console. While using AWS Multi-Factor Authentication (MFA), it is recommended to use either a hardware MFA device or a virtual MFA on a separate mobile device for account security reasons.

The latest version is 1.14. There is a feedback link in the App's menu to share our experiences and for any queries.

Read More

What is computer memory?

What is Memory?

For kind you guys please Subscribe my Youtube Channel watch regular videos for latest updates and also follow my Blog so that get the every updates notifications Thanks My YouTube 👇 https://www.youtube.com/user/skm8609 My Blog 👇 http://shailendramishraatg.blogspot.com Pinterest 👇 https://www.pinterest.ca/mishraatg/

Read More