Skip to content

Latest commit

 

History

History
149 lines (101 loc) · 12 KB

100-ACCLFO-20-EN-M03SG.md

File metadata and controls

149 lines (101 loc) · 12 KB

Module 3 - AWS Global Infrastructure Overview

Slides

Objectives / Topics

  • Identify the difference between AWS Regions, Availability Zones, and edge locations
  • Identify AWS service and service categories

Labs / Activities


Section 1: AWS Global Infrastructure

The AWS Global Infrastructure is designed and built to deliver a flexible, reliable, scalable, and secure cloud computing environment with high-quality global network performance.

AWS Regions

An AWS Region is a geographical area.

  • Data replication across Regions is controlled by you.
  • Communication between Regions uses AWS backbone network infrastructure.
  • Each Region provides full redundancy and connectivity to the network.
  • A Region typically consists of two or more Availability Zones

When selecting a region consider the following:

  • Laws - Data governance and legal requirements
  • Proximity - Select regions close to your customers for reduced latency
  • Availability - Some services are region locked
  • Cost - Cost varies by region

Each Availability Zone is a fully isolated partition of the AWS infrastructure. There are currently 69 Availability Zones worldwide.

  • Availability Zones consist of discrete data centers
  • They are interconnected with other Availability Zones by using high-speed private networking
  • They are designed for fault isolation
  • You choose your Availability Zones but AWS recommends replicating data and resources across Availability Zones for resiliency.

AWS Data Centers

  • AWS data centers are designed for security. Each data center has redundant power, networking, and connectivity, and is housed in a separate facility.
  • Data centers are where the data resides and data processing occurs. A data center typically has 50,000 to 80,000 physical servers

AWS provides a global network of 187 Points of Presence locations:

  • Consists of 176 edge locations - where end users access services located at AWS
  • 11 Regional edge caches - cache copies of your infrequent content close to your users
  • Used with Amazon CloudFront - a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment.

AWS Infrastructure Features:

  1. Elasticity and scalability - dynamically adapts to capacity and growth needs
  2. Fault-tolerance - Continues operating properly in the presence of a failure due to built-in redundancy of components
  3. High availability - High operational performance with minimized downtime and no human intervention

Section 2: AWS Services and Service Category Overview

Foundation Services

  • Compute
  • Networking
  • Storage

Service Categories

23 different product or service categories, and each category consists of one or more services. The course covers the most common categories and the ones likely to be on the foundations exam.

AWS Storage Services

AWS Compute Services

  • Amazon EC2 - A web service that provides secure, resizable compute capacity in the cloud.
  • Amazon EC2 Auto Scaling - Helps to maintain application availability and allows you to automatically add or remove EC2 instances according to conditions you define.
  • Amazon Elastic Container Services (ECS) - A fully managed container orchestration service.
  • Amazon EC2 Container Registry (ECR) - A fully-managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images.
  • AWS Elastic Beanstalk - An easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.
  • AWS Lambda - Lets you run code without provisioning or managing servers.
  • Amazon Elastic Kubernetes Services (EKS) - A fully managed Kubernetes service.
  • AWS Fargate - A serverless compute engine for containers that works with both Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS).

AWS Database Services

  • Amazon Relational Database Service (RDS) - Makes it easy to set up, operate, and scale a relational database in the cloud.
  • Amazon Aurora - A MySQL and PostgreSQL compatible relational database built for the cloud, that combines the performance and availability of traditional enterprise databases with the simplicity and cost-effectiveness of open source databases.
  • Amazon Redshift - A fully managed, petabyte-scale data warehouse service in the cloud.
  • Amazon DynamoDB - A key value and document database that delivers single-digit millisecond performance at any scale.

Networking and Content Delivery Services

  • Amazon VPC - Lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define.
  • Elastic Load Balancing - Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.
  • Amazon CloudFront - A fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment.
  • AWS Transit Gateway - A service that enables customers to connect their Amazon Virtual Private Clouds (VPCs) and their on-premises networks to a single gateway.
  • Amazon Route 53 - A highly available and scalable cloud Domain Name System (DNS) web service.
  • AWS Direct Connect - A cloud service solution that makes it easy to establish a dedicated network connection from your premises to AWS.
  • AWS VPN - Lets you establish a secure and private encrypted tunnel from your network or device to the AWS global network.

Security, Identity, and Compliance Services

  • AWS Identity and Access Management (IAM) - Enables you to manage access to AWS services and resources securely. You can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources. IAM is a feature of your AWS account offered at no additional charge.
  • AWS Organizations - helps you centrally govern your environment as you grow and scale your workloads on AWS.
  • Amazon Cognito - Lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily.
  • AWS Artifact - A central resource for compliance related information that matters to you.
  • AWS Key Management Service (KMS) - Makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications.
  • AWS Shield - A managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS.

Cost Management Services

  • AWS Cost and Usage Report - contains the most comprehensive set of AWS cost and usage data available, including additional metadata about AWS services, pricing, and reservations (e.g., Amazon EC2 Reserved Instances (RIs)).
  • AWS Budgets - gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount.
  • AWS Cost Explorer - an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time.

AWS Management and Governance Services

  • AWS Management Console - A secure, easy-to-access, web-based portal for AWS.
  • AWS Config - A service that enables you to assess, audit, and evaluate the configurations of your AWS resources.
  • Amazon CloudWatch - A monitoring and observability service that provides you with data and actionable insights to monitor your applications, respond to system-wide performance changes, optimize resource utilization, and get a unified view of operational health. You can use it to detect anomalous behavior in your environments, set alarms, visualize logs and metrics side by side, take automated actions, troubleshoot issues, and discover insights.
  • AWS Auto Scaling - monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost.
  • AWS Command Line Interface (CLI) - a unified tool to manage your AWS services. With just one tool to download and configure, you can control multiple AWS services from the command line and automate them through scripts.
  • AWS Trusted Advisor - An online tool that provides you real time guidance to help you provision your resources following AWS best practices.
  • AWS Well-Architected Tool - Helps you review the state of your workloads and compares them to the latest AWS architectural best practices.
  • AWS CloudTrail - A service that enables governance, compliance, operational auditing, and risk auditing of your AWS account.



Knowledge Check

Lab: AWS Management Console (Use Sandbox) -- Labs Instructions

AWS Global Infrastructure Activity