- Identify the difference between AWS Regions, Availability Zones, and edge locations
- Identify AWS service and service categories
- Knowledge Check
- Lab: AWS Management Console (Use Sandbox) -- Labs Instructions
- AWS Global Infrastructure Activity
The AWS Global Infrastructure is designed and built to deliver a flexible, reliable, scalable, and secure cloud computing environment with high-quality global network performance.
An AWS Region is a geographical area.
- Data replication across Regions is controlled by you.
- Communication between Regions uses AWS backbone network infrastructure.
- Each Region provides full redundancy and connectivity to the network.
- A Region typically consists of two or more Availability Zones
When selecting a region consider the following:
- Laws - Data governance and legal requirements
- Proximity - Select regions close to your customers for reduced latency
- Availability - Some services are region locked
- Cost - Cost varies by region
Each Availability Zone is a fully isolated partition of the AWS infrastructure. There are currently 69 Availability Zones worldwide.
- Availability Zones consist of discrete data centers
- They are interconnected with other Availability Zones by using high-speed private networking
- They are designed for fault isolation
- You choose your Availability Zones but AWS recommends replicating data and resources across Availability Zones for resiliency.
- AWS data centers are designed for security. Each data center has redundant power, networking, and connectivity, and is housed in a separate facility.
- Data centers are where the data resides and data processing occurs. A data center typically has 50,000 to 80,000 physical servers
AWS provides a global network of 187 Points of Presence locations:
- Consists of 176 edge locations - where end users access services located at AWS
- 11 Regional edge caches - cache copies of your infrequent content close to your users
- Used with Amazon CloudFront - a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment.
AWS Infrastructure Features:
- Elasticity and scalability - dynamically adapts to capacity and growth needs
- Fault-tolerance - Continues operating properly in the presence of a failure due to built-in redundancy of components
- High availability - High operational performance with minimized downtime and no human intervention
- Compute
- Networking
- Storage
23 different product or service categories, and each category consists of one or more services. The course covers the most common categories and the ones likely to be on the foundations exam.
- Amazon Simple Storage Services (S3) - Object storage service that offers industry-leading scalability, data availability, security, and performance.
- Amazon Elastic Block Storage (EBS) - An easy to use, high performance block storage service designed for use with Amazon Elastic Compute Cloud (EC2) for both throughput and transaction intensive workloads at any scale.
- Amazon Elastic File System (EFS) - A simple, scalable, fully managed elastic NFS file system for use with AWS Cloud services and on-premises resources.
- Amazon Simple Storage Service Glacier - A secure, durable, and extremely low-cost Amazon S3 cloud storage classes for data archiving and long-term backup.
- Amazon EC2 - A web service that provides secure, resizable compute capacity in the cloud.
- Amazon EC2 Auto Scaling - Helps to maintain application availability and allows you to automatically add or remove EC2 instances according to conditions you define.
- Amazon Elastic Container Services (ECS) - A fully managed container orchestration service.
- Amazon EC2 Container Registry (ECR) - A fully-managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images.
- AWS Elastic Beanstalk - An easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.
- AWS Lambda - Lets you run code without provisioning or managing servers.
- Amazon Elastic Kubernetes Services (EKS) - A fully managed Kubernetes service.
- AWS Fargate - A serverless compute engine for containers that works with both Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS).
- Amazon Relational Database Service (RDS) - Makes it easy to set up, operate, and scale a relational database in the cloud.
- Amazon Aurora - A MySQL and PostgreSQL compatible relational database built for the cloud, that combines the performance and availability of traditional enterprise databases with the simplicity and cost-effectiveness of open source databases.
- Amazon Redshift - A fully managed, petabyte-scale data warehouse service in the cloud.
- Amazon DynamoDB - A key value and document database that delivers single-digit millisecond performance at any scale.
- Amazon VPC - Lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define.
- Elastic Load Balancing - Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.
- Amazon CloudFront - A fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment.
- AWS Transit Gateway - A service that enables customers to connect their Amazon Virtual Private Clouds (VPCs) and their on-premises networks to a single gateway.
- Amazon Route 53 - A highly available and scalable cloud Domain Name System (DNS) web service.
- AWS Direct Connect - A cloud service solution that makes it easy to establish a dedicated network connection from your premises to AWS.
- AWS VPN - Lets you establish a secure and private encrypted tunnel from your network or device to the AWS global network.
- AWS Identity and Access Management (IAM) - Enables you to manage access to AWS services and resources securely. You can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources. IAM is a feature of your AWS account offered at no additional charge.
- AWS Organizations - helps you centrally govern your environment as you grow and scale your workloads on AWS.
- Amazon Cognito - Lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily.
- AWS Artifact - A central resource for compliance related information that matters to you.
- AWS Key Management Service (KMS) - Makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications.
- AWS Shield - A managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS.
- AWS Cost and Usage Report - contains the most comprehensive set of AWS cost and usage data available, including additional metadata about AWS services, pricing, and reservations (e.g., Amazon EC2 Reserved Instances (RIs)).
- AWS Budgets - gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount.
- AWS Cost Explorer - an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time.
- AWS Management Console - A secure, easy-to-access, web-based portal for AWS.
- AWS Config - A service that enables you to assess, audit, and evaluate the configurations of your AWS resources.
- Amazon CloudWatch - A monitoring and observability service that provides you with data and actionable insights to monitor your applications, respond to system-wide performance changes, optimize resource utilization, and get a unified view of operational health. You can use it to detect anomalous behavior in your environments, set alarms, visualize logs and metrics side by side, take automated actions, troubleshoot issues, and discover insights.
- AWS Auto Scaling - monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost.
- AWS Command Line Interface (CLI) - a unified tool to manage your AWS services. With just one tool to download and configure, you can control multiple AWS services from the command line and automate them through scripts.
- AWS Trusted Advisor - An online tool that provides you real time guidance to help you provision your resources following AWS best practices.
- AWS Well-Architected Tool - Helps you review the state of your workloads and compares them to the latest AWS architectural best practices.
- AWS CloudTrail - A service that enables governance, compliance, operational auditing, and risk auditing of your AWS account.
Lab: AWS Management Console (Use Sandbox) -- Labs Instructions