Introduction to AWS

Atul Kumar Aryan

Author & Cloud Expert AWS Expert
 Atul Kumar

⮚ 20 Years working on Oracle as Certified Cloud Architect

⮚ Help Customers Migrating to Cloud & Integrations
⮚ Author & Speaker
⮚ Oracle ACE since 2006
⮚ Helped thousands of individuals to learn Cloud

https://k21academy.com/youtube © Copyright 2020| K21 Academy | All Rights Reserved

2
2
 Aryan: AWS Expert

⮚ Working on AWS since 2013

⮚ Certified AWS Architect
⮚ Work for the Top Cloud Professional Services
provider in the world as AWS Solution Architect &
AWS DevOps Professionals.

https://k21academy.com/youtube © Copyright 2020| K21 Academy | All Rights Reserved

3
 Making Most Of Training

https://k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved

 Getting Help

support@k21academy.com

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

5
 Making Best of Your Training

➢ Live Interactive Session

➢ FREE Unlimited Retake for Next 1 Years
➢ FREE On-Job Support for next 1 Years
➢ Ask Questions & Make Session Interactive
➢ Add Yourself in WhatsApp Group
➢ Live Session Details http://k21academy.com/live
➢ Ask as Many Questions as you can & make session interactive
➢ Do Lots of Hands-On
➢ Learn at your own Pace & Look How Far You have come
➢ Share WIN

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

6
AWS SAA-C02
Module Agenda
 Agenda: Module
➢ Cloud service model
➢ AWS Introduction
➢ AWS Global Infrastructure
➢ AWS Region
➢ Replication Of Data Between Regions
➢ AWS Availability Zones
➢ AWS Services
➢ Ways To Access Services

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

8
Cloud Service
Model
 What is Cloud ?
➢ "The cloud" refers to servers that are accessed over the Internet, and the software and
databases.
➢ Cloud servers are located in data centers all over the world.

➢ By using cloud computing, users and

companies don't have to manage physical
servers.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

10
 What Is Cloud Service Model?
There are 3 Cloud Service models
➢ Infrastructure-as-a-Service
(IaaS)
➢ Platform-as-a-Service (PaaS)
➢ Software-as-a-Service (SaaS)

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

11
 Infrastructure-as-a-Service (IaaS)
➢ In this model, a company rents the servers and storage
they need from a cloud provider. They then use that
Managed
cloud infrastructure to build their applications. By User

➢ IaaS is like a company leasing a plot of land on which

they can build whatever they want – but they need to
provide their own building equipment and materials.
Managed
By AWS

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

12
 Platform-as-a-Service (PaaS)
➢ In this model, companies don't pay for hosted
applications; instead they pay for the things they need to Managed
By User
build their own applications.
➢ PaaS vendors offer everything necessary for building an
application, including development tools, infrastructure,
and operating systems, over the Internet.
Managed
➢ PaaS can be compared to renting all the tools and By AWS

equipment necessary for building a house, instead of

renting the house itself.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

13
 Software-as-a-Service (SaaS)
➢ Applications are hosted on cloud servers, and Managed
By User
users access them over the Internet.
➢ SaaS is like renting a house: the landlord
maintains the house, but the tenant mostly gets
Managed
to use it as if they owned it. By AWS
➢ Examples of SaaS applications include Salesforce,
MailChimp, and Slack.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

14
Introduction
 Amazon Web Services (AWS)
➢ Amazon Web Services (AWS) AWS is a secure cloud service platform which
offers compute power, database storage, content delivery and other
functionality to help the business scale and grow.
➢ All over the world AWS technology is implemented at various server farms
and is maintained by Amazon.
➢ It provides 90 plus services.
➢ Here the user is charged per hour only for the resources which he is using
amazon web services

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

16
 Market Survey Of AWS

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

17
 Service Comparison: AWS, Azure And
GCP

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

18
 Benefits Of AWS

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

19
 Global
Infrastructure
 AWS global Infrastructure

AWS global Infrastructure Consists of:

➢ Region
&
➢ Availability Zone

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

21
 AWS global Infrastructure
With millions of active customers and tens of thousands of partners globally, AWS has the largest and most
dynamic ecosystem. Customers across virtually every industry and of every size, including start-ups,
enterprises, and public sector organizations, are running every imaginable use case on AWS.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

22
 AWS Global Infrastructure
AWS now spans 77 Availability Zones within 24 geographic regions around the world, and has announced
plans for nine more Availability Zones and three more AWS Regions in Indonesia, Japan, and Spain.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

23
Regions
 AWS Region
➢ Using Amazon RDS you can store data in multiple locations.
➢ These locations are called as Availability zones (AZ).
➢ AWS Region is a separate geographic area with a set of Availability zones.
➢ It helps to isolate critical workload to avoid traffic in a location.

Note: AWS services are spread across the globe in 21 geographical regions

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

25
 How To Choose a Region
➢ Amazon Web Services run on servers
in data centers around the world.
➢ Data centers are organized by
geographical region. When you
launch an Amazon EMR cluster, you
must specify a region.
➢ You might choose a region to reduce
latency, minimize costs, or address
regulatory requirements.
➢ For best performance, you should
launch the cluster in the same region
as your data.
https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

26
 How To Choose a Region

Sao Paul is 56% costlier than N. Virginia N

Virginia is the cheapest one among all

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

27
 How To Choose a Region
➢ Proximity: Choose a region closest to your location and your customers’ location to
optimize network latency.
➢ Services: Try and think about what are your most needed services. Usually, the
newest services start on a few main regions then pop up in other regions later.
➢ Cost: Certain regions will cost more than others, so use built-in AWS calculators to do
rough cost estimates to inform your choices.
➢ Service Level Agreement (SLA): Just as with cost, your SLA details will vary by region,
so be sure to be aware of what your needs are and if they’re being met.
➢ Compliance: You may need to meet regulatory compliance needs such as GDPR by
hosting your deployment in a specific — or multiple regions.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

28
Replication Of
Data Between
Regions
 Replication Of Data Between Regions
➢ An AWS Local Region is a single datacenter.
➢ AWS Local Region is used by the customers who need to replicate their data or application over
greater geographic region.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

30
Availability Zones
 Availability Zone
➢ An AWS Availability Zone (AZ) is the logical
building block that makes up an AWS Region.
➢ There are currently 69 AZs, which are isolated
locations— data centers — within a region.
➢ Each region has multiple AZs and when you
design your infrastructure to have backups of
data in other AZs you are building a very
efficient model of resiliency.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

32
 Advice for using AWS Availability Zones
➢ If you distribute your instances across multiple
Availability Zones and one instance fails, you
can design your application so that an instance
in another Availability Zone can handle
requests.
➢ This is like an emergency load balancer
without using an actual load balancer.
➢ In general, AWS Availability Zones give you the
flexibility to launch production apps and
resources that are highly available,
resilient/fault-tolerant, and scalable as
compared to using a single data center.
➢ Having more options and backups is better!

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

33
 What is High Availability
➢ High availability refers to a system or component that is operational without interruption for
long periods of time.
➢ High availability is measured as a percentage, with a 100% percent system indicating a
service that experiences zero downtime.

➢ High-Availability consists of different aspects:

➢ Fault-tolerance: it refers to the ability of a system of not suffering downtime even in case of
failures.
➢ Warranty on service provided: services must be always available, also applies to systems
breakdown.
➢ Data security: integrity of data contained in the infrastructure is ensured, and they must be
reachable also in the case of malfunctions to people or processes.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

34
 Why High Availability is Essential?
➢ A single point of failure is any component of the system which would cause the rest of the
system to fail if that individual component failed.
➢ This would be a system that never fails. It’s pretty rare with complex systems.
➢ Most cloud vendors offer some type of Service Level Agreement around availability.
➢ Amazon set their cloud SLAs at 99.9%. The industry generally recognizes this as very reliable
uptime. A step above, 99.99%, or “four nines,” as is considered excellent uptime.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

35
Services
 AWS Services

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

37
 AWS Compute Components
➢ Building and running your organization starts with
compute, whether you are building enterprise, cloud-
native or mobile apps, or running massive clusters to
sequence the human genome.
➢ AWS offers a comprehensive portfolio of compute
services allowing you to develop, deploy, run, and scale
your applications and workloads in the world’s most
powerful, secure and innovative compute cloud.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

38
 AWS Compute Components
Virtual Machine
➢ Amazon EC2: Secure and resizable compute capacity (virtual
servers) in the cloud.
➢ Amazon Lighsail: Easy-to-use cloud platform that offers you
everything you need to build an application or website.
Serverless
➢ Amazon Lambda: Run code without thinking about servers. Pay
only for the compute time you consume.
Container
➢ Amazon ECS: Highly secure, reliable, and scalable way to run
containers.
Cost and capacity management
➢ AWS Elastic Beanstalk: Easy-to-use service for deploying and
scaling web applications and services
➢ Amazon Batch: Fully managed batch processing at any scale
https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

39
 AWS Storage Components
➢Amazon S3: Durable Object storage for all types of data.
Economical Pay as you go, No upfront investment, No commitment.

➢Amazon Glacier: Archival storage for infrequently accessed data.

Easy to Use: Self service administration, SDKs for simple integration.

➢Amazon EBS: Block storage for use with Amazon EC2.

Reduce risk: Durable and Secure, Avoid risks of physical media
handling.

➢Amazon EFS: File storage for use with Amazon EC2.

Agility, Scale: Reduce time to market, Focus on your business, not your
infrastructure.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

40
 AWS Database Components
➢Amazon RDS: Amazon Relational Database Service makes it easy to set up,
operate, and scale a relational database in the cloud..
➢Amazon Dynamo DB: Key-value and document database that delivers single-
digit millisecond performance at any scale. It's a fully managed, multiregional,
multi-master and durable database.
➢Amazon Redshift: Redshift makes it simple and cost effective to run high
performance queries on petabytes of structured data so that you can build
powerful reports and dashboards using your existing business intelligence tools.
➢Amazon ElastiCache: Its is a in memory database that provides sub-millisecond
latency to power internet-scale real-time applications.
➢Amazon Aurora: MySQL and PostgreSQL-compatible relational database built
for the cloud, that combines the performance and availability of traditional
enterprise databases with the simplicity and cost-effectiveness of open source
databases.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

41
 AWS Network Components
➢Amazon ELB: Elastic Load Balancing is an Networking Architecture that
automatically distributes incoming application traffic across multiple
targets, such as Amazon EC2 instances, containers, IP addresses, and
Lambda functions.
➢Amazon Route 53: highly available and scalable cloud Domain Name
System (DNS) web service. Route 53 effectively connects user requests
to infrastructure running in AWS
➢Amazon CloudFront: Fast content delivery network (CDN) service that
securely delivers data, videos, applications, and APIs to customers
globally with low latency, high transfer speeds, all within a developer-
friendly environment.
➢Amazon Direct Connect: Direct Connect is a cloud service solution
that makes it easy to establish a dedicated network connection from
your premises to AWS.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

42
Ways To Access
Services
 Ways to Access AWS Resources
To Access AWS Resources

Console CLI SDK

➢ Simple web-based user interface ➢ Tool used to manage AWS resources ➢ All major programming
➢ AWS has a different GUI for android and automates service management languages has compatibility
and iOS to access some of the with scripts with AWS SDK, including
services like EC2, DynamoDB, LB, ➢ Mac, Linux and Windows OS supports Java, .Net, PHP, Ruby,
Beanstalk, CloudWatch and many CLI Python, Go, C++, Node.js and
more ➢ AWS SDKs provides an easy to use many more
GUI to access and administer AWS
infrastructure

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

44
 Find Us

https://www.facebook.com/K21Academy

http://twitter.com/k21Academy

https://www.linkedin.com/company/k21academy

https://www.youtube.com/k21academy

www.k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved

 Security
Management In AWS

Atul Kumar Aryan

Author & Cloud Expert AWS Expert
 Atul Kumar

⮚ 20 Years working on Oracle as Certified Cloud Architect

⮚ Help Customers Migrating to Cloud & Integrations
⮚ Author & Speaker
⮚ Oracle ACE since 2006
⮚ Helped thousands of individuals to learn Cloud

https://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

2
2
 Aryan: AWS Expert

⮚Working on AWS since 2013

⮚Certified AWS Architect
⮚Work for the Top Cloud Professional Services
provider in the world as AWS Solution Architect &
AWS DevOps Professionals.

https://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

3
 Making Most Of Training

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Getting Help

support@k21academy.com

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

5
 Making Best of Your Training

⮚ Live Interactive Session

⮚ FREE Unlimited Retake for Next 1 Years
⮚ FREE On-Job Support for next 1 Years
⮚ Ask Questions & Make Session Interactive
⮚ Add Yourself in WhatsApp Group
⮚ Live Session Details http://k21academy.com/live
⮚ Ask as Many Questions as you can & make session interactive
⮚ Do Lots of Hands-On
⮚ Learn at your own Pace & Look How Far You have come
⮚ Share WIN

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

6
AWS SAA-C02
Module Agenda
 Agenda: Module
⮚ AWS Identity & Access Management
⮚ IAM Components
⮚ IAM User Group and Permission
⮚ IAM Policy
⮚ Best Practices for IAM
⮚ KMS
⮚ Accessing Billing
⮚ AWS Alerts
⮚ AWS budget

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

8
Identity & Access
Management
 What is IAM ?
⮚ IAM is a preventative security control.
⮚ It can create and manage AWS users and groups
and use permissions to allow and deny access to
AWS resources
⮚ IAM deals with 4 terms such as users, groups, Roles
and Policies.
⮚ It controls both centralized and fine grained-API
resources plus management console.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

10
 Why Use IAM?
⮚ You can specify permissions to control which operations a user or
role can perform on AWS resources
⮚ IAM service provides access to the AWS Management Console,
AWS API, and AWS Command-Line Interface (CLI)

Note: IAM does not provide authentication for your OS or

application

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

11
IAM Components
 IAM Components

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

13
 IAM Users
⮚ IAM users can be an individual, system, or application requiring access to AWS services
⮚ A user account consists of a unique name and security credentials such as a password,
access key, and/or multi-factor authentication (MFA)
⮚ IAM users only need passwords when they access the AWS Management Console

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

14
 IAM Groups
⮚ IAM Groups are a way to assign permissions to logical and functional units of your organization
⮚ IAM groups are a tool to help with operational efficiency
⮚ Bulk permissions management (scalable)
⮚ Easy to change permissions as individuals change teams (portable)
⮚ A group can contain many users, and a user can belong to multiple groups.
⮚ Groups can't be nested; they can contain only users, not other groups.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

15
 Why Should We use Groups?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

16
 How To Manage Permissions With
Groups?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

17
 IAM Policies
⮚ IAM policies are JSON-based statements that define access control and permissions.
⮚ IAM policies can be “inline” or “managed” and can be attached to a user or a group
⮚ Inline policies - policies that you create and manage, and that are embedded directly into a
single user, group, or role.
⮚ Managed policies - standalone policies that you can manage separately from the IAM users,
groups, or roles to which they are attached.
⮚ AWS managed policies
⮚ Customer managed policies

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

18
 Elements of An IAM Policy
⮚ Version – Specifies current version of the policy language.
⮚ Statement – Contain array of elements.
⮚ Effect – Whether the statement will result in an allow or an explicit deny.
⮚ Action – Describes the specific action or actions that will be allowed or denied.
⮚ Resource – Specifies the object or objects that the statement covers.
⮚ Principal – Principal element specifies the identity.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

19
 Elements of IAM Policy - Example
⮚ Sample JSON

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

20
 IAM Roles
⮚ An IAM role is like a user, in that it is an AWS identity with permission policies that determine
what the identity can and cannot do in AWS.
⮚ You can authorize roles to be assumed by humans, Amazon EC2 instances, custom code, or
other AWS services for specific access to services.
⮚ Roles do not have standard long-term credentials such as password or access keys associated to
it, instead when you assume a role, it provides you with temporary security credentials for your
role session.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

21
 IAM
Best Practices
 IAM Best Practices
⮚ Lock away your AWS account (root) access keys
⮚ Create individual IAM users
⮚ Use groups to assign permissions to IAM users
⮚ Grant least privilege
⮚ Configure a strong policy for your users
⮚ Enable MFA for privileged users

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

23
 IAM Best Practices
⮚ Use roles for applications that run on Amazon EC2 instances
⮚ Delegate by using roles instead of by sharing credentials
⮚ Rotate credentials regularly
⮚ Remove unnecessary credentials
⮚ Use policy conditions for extra security
⮚ Monitor activity in your AWS Account

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

24
 IAM Best Practices

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

25
 IAM
Delegation And Audit
 Delegation And Audit

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

27
Identity and Credit
Management
 Identity and Credit Management
⮚ Why Create Individual user
Benefits How to Do it

Unique set of credential Create IAM user for yourself Create

Individual permission individual users for others
Granular control
Easy to revoke access

⮚ Why configure a Strong Password Policy

Benefits How to Do it

Ensures your user and data are protected Requires password expiration of 90 days
Easy to enforce password complexity Requires complex password Required
requirements password rotation policy
Increase account resilience against brute
force login attempts

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

29
 Identity and Credit Management

Enabling credential rotation for IAM users (Enable access key rotation
sample policy) policy.

The Root account holder as well as IAM users in the account should
regularly change their passwords and access keys to analyze if a
password or access key is compromised without owners knowledge

For this you can even set password policies and determine the
duration of credentials validity to use resources

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

30
KMS
 Key Management System KMS

KMS is a managed encryption service that enables user to easily encrypt user data

• Creates keys with unique alias and description KMS

• Allows to Import your own keys
• Defines which IAM users and roles can manage keys
• Defines which IAM users and roles can use keys to encrypt and decrypt data
• Disable and enable keys as per requirement
• Audit use of keys by inspecting logs in AWS CloudTrail
• It provides a highly available key storage, management, and auditing solution for you to
encrypt your data across AWS services

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

32
 Who Can Use KMS?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

33
Accessing Billing
 AWS Billings
➢ AWS Billing is the service that you use to pay your AWS bill, monitor your usage, and
analyze and control your costs.
➢ AWS automatically charges the
credit card or debit card that
you provided when you signed
up for a new account
with AWS. Charges appear on
your monthly card bill.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

35
AWS Alerts
 What Are AWS Alerts?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

37
 Find Us

https://www.facebook.com/K21Academy
http://twitter.com/k21Academy

https://www.linkedin.com/company/k21academy

https://www.youtube.com/k21academy

https://www.instagram.com/k21academy

https://k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved

38
 Object Storage
options In AWS

Atul Kumar Aryan

Author & Cloud Expert AWS Expert
 Atul Kumar

⮚ 20 Years working on Oracle as Certified Cloud Architect

⮚ Help Customers Migrating to Cloud & Integrations
⮚ Author & Speaker
⮚ Oracle ACE since 2006
⮚ Helped thousands of individuals to learn Cloud

https://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

2
2
 Aryan: AWS Expert

⮚ Working on AWS since 2013

⮚ Certified AWS Architect
⮚ Work for the Top Cloud Professional Services
provider in the world as AWS Solution Architect &
AWS DevOps Professionals.

https://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

3
 Making Most Of Training

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Getting Help

support@k21academy.com

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

5
 Making Best of Your Training

⮚ Live Interactive Session

⮚ FREE Unlimited Retake for Next 1 Years
⮚ FREE On-Job Support for next 1 Years
⮚ Ask Questions & Make Session Interactive
⮚ Add Yourself in WhatsApp Group
⮚ Live Session Details http://k21academy.com/live
⮚ Ask as Many Questions as you can & make session interactive
⮚ Do Lots of Hands-On
⮚ Learn at your own Pace & Look How Far You have come
⮚ Share WIN

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

6
AWS SAA-C02
Module Agenda
 Agenda: Module
➢ Traditional Storage ➢ Amazon S3 Transfer Acceleration

➢ Need To Move To The Cloud Storage ➢ Choice of Storage Classes on S3

➢ Traditional Vs Cloud Storage Cost ➢ Life Cycle Policy Of S3 Bucket

➢ Cloud Storage ➢ Access S3 And Glacier

➢ Different Storage Options Available On AWS ➢ Cost Optimization Of S3

➢ Simple Storage Service (S3) and its components ➢ Upload A File To AWS S3 Through A Website

➢ Working Of S3 ➢ Cloud Front And Snowball

➢ Difference Between S3, EBS, And EFS ➢ Storage Gateway

➢ Bucket Policy ➢ Different modes of Gateway: File, Volume and Tape

➢ Access Control List(ACL) Gateway

➢ Hosting A Static Website On Amazon S3

➢ Versioning

➢ Cross-Region Replication (CRR) and its Use case

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved
8
Traditional Storage
 Volume And Vault Storage

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

10
 Traditional Storage Tier’s

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

11
 Why We Need To Move To The Cloud Storage?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

12
 Traditional Vs Cloud Storage Cost

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

13
 AWS
Cloud Storage
 What Is Cloud Storage?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

15
 Different Storage Options Available On AWS

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

16
 Storage Services

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

17
 Cloud Data Migration
➢ Cloud Data Migration is a storage system which connects an on-premises software appliance
with cloud-based storage
➢ Data can be transferred through internet also but it will be slow and costly

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

18
S3 (Simple Storage
Service)
What Is S3(Simple Storage Service)?
➢S3 is an interface that help to store and retrieve any amount of data, at any point of time, from
anywhere through internet.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

20
 Component Of S3 - Objects

➢Fundamental entities stored in Amazon S3

➢Each Amazon S3 object has data, a key, and metadata
➢Additional information that is used to refers the data like the name, format
and the time at which they the file have been added is known as metadata
➢Object can be Uniquely identified within a bucket by a key(name) and a
version ID
➢Each object can contain up to 5 TB of data

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

21
 Component Of S3 - Objects

➢ Used to store objects, which consist of data and metadata

➢ The bucket can be configured and created in any specific
region
➢When an object is added to the bucket, Amazon S3 generates
a unique version ID and assigns it to the object.
➢By default, only 100 buckets can be created in each AWS
accounts
➢It provides the unlimited storage of data

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

22
 Working Of S3

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

23
 Difference Between EFS, EBS and S3

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

24
 Bucket Policy
➢ Bucket policy allows users to authorize policies which either grant or deny access to any number
of accounts and across a range or set of keys
➢ It allows centralized management of permission that is the security rule is applied to all
the files within the bucket

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

25
 Amazon S3 – Access Control List (ACL)

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

26
 Access Control List (ACL)

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

27
AWS Object Storage
Options
Versioning
 Versioning

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

29
S3 Cross-Region
Replication (CRR)
 Cross-Region Replication (CRR)
➢ It is a bucket-level feature that enables automatic, asynchronous copying of objects across bucket
➢ In the object replicas in destination bucket = replicas of the objects in the source bucket

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

31
 Use Case Of CRR

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

32
Transfer Acceleration In
AWS S3
 Amazon S3 Transfer Acceleration

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

34
Choice Of Storage
Classes On S3
 Choice Of Storage Classes On S3

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

36
 S3 Standard

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

37
 S3 Infrequent Access

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

38
 Amazon Glacier

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

39
 Glacier – Stored Data

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

40
 Type Of S3 Storage Classes

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

41
 Life Cycle Policy Of S3 Bucket
➢Life Cycle policy is a set of rules that automate the defined actions (transition or expiration) on
the group of objects present in S3
➢ Helps to manage the storage space and saves the cost
➢ It can be applied to all the object in the bucket or the subset of objects in the bucket
➢ Also, be applied to the versions of the object

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

42
 Access S3 And Glacier

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

43
S3 Cost Optimization
 Cost Optimization Of S3

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

45
 CloudFront
Content Delivery
Network (CDN)
 CloudFront

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

47
AWS Snowball
 Snowball

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

49
 Snowball: How Does It Work?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

50
 Snowball: Benefits

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

51
AWS Storage Gateway
 What Is Storage Gateway?
➢ Acts as a bridge between on-premises software appliance and cloud-based storage
➢ It brings the cloud storage to your application through standard protocol and interface
➢There are three different modes of gateway: file, volume and tape gateway

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

53
 File Gateway
➢ File gateway provides a virtual file server, which enables you to store and retrieve Amazon S3
objects through standard file storage protocols (Network File system (NFS) or Server Message
Block (5MB))
➢ It is mounted to your on-premise server through NFS client
➢The gateway translates these file operations into object requests on your S3 buckets
➢Can use all the S3 capabilities (lifecycle policy, versioning and CRR) as here the files are mapped
to objects

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

54
 Volume Gateway
➢ Volume gateway is mounted to your on-premise application servers through Internet Small Computer System
Interface (iSCSI) devices iSCSI devices enable you to access the network drive remotely through your system
➢The data in the drive, is taken as a snapshot and stored in the S3
➢We make use of this snapshots to create a volume and attached to the instance or an on-premise server
➢Different configuration of Volume gateway are: stored mode and cached mode

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

55
 Volume Gateway – Storage Mode

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

56
 Volume Gateway – Cached Mode

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

57
 Tape Gateway
➢Tape Gateway provides a cost-effective and durable solution to archive the data
➢ It is mounted to your on-premise application servers through ISCSI devices,
which Is preconfigured with tape drive and media changer
➢ Tape drive helps to perform the I/O and seek permission operation on tape
➢ Media changer helps to manage the tapes in Virtual Tape library (VTL)
➢ It can use all the capabilities (lifecycle policy, versioning and CRR) of S3

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

58
 Uses Of Storage Gateway

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

59
 Find Us

https://www.facebook.com/K21Academy
http://twitter.com/k21Academy

https://www.linkedin.com/company/k21academy

https://www.youtube.com/k21academy

https://www.instagram.com/k21academy

https://k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved

60
 Amazon EC2

Atul Kumar Aryan

Author & Cloud Expert AWS Expert
 Atul Kumar

⮚ 20 Years working on Oracle as Certified Cloud Architect

⮚ Help Customers Migrating to Cloud & Integrations
⮚ Author & Speaker
⮚ Oracle ACE since 2006
⮚ Helped thousands of individuals to learn Cloud

https://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

2
2
 Aryan: AWS Expert

⮚ Working on AWS since 2013

⮚ Certified AWS Architect
⮚ Work for the Top Cloud Professional Services
provider in the world as AWS Solution Architect &
AWS DevOps Professionals.

https://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

3
 Making Most Of Training

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Getting Help

support@k21academy.com

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

5
 Making Best of Your Training
⮚ Live Interactive Session
⮚ FREE Unlimited Retake for Next 1 Years
⮚ FREE On-Job Support for next 1 Years
⮚ Ask Questions & Make Session Interactive
⮚ Add Yourself in WhatsApp Group
⮚ Live Session Details http://k21academy.com/live
⮚ Ask as Many Questions as you can & make session interactive
⮚ Do Lots of Hands-On
⮚ Learn at your own Pace & Look How Far You have come
⮚ Share WIN

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

6
AWS SAA-C02
Module Agenda
 Agenda: Module
➢ Amazon Elastic Compute Cloud (EC2) and its benefits ➢ Instance Store

➢ Amazon Machine Image (AMI) Security Groups In AWS ➢ Elastic Block Store (EBS), its features and Volume types

➢ Authentication Through Key-Pair ➢ Solid State Drive: General Purpose SSD and Provisioned

➢ Hosting a Website inside EC2 lOPS

➢ Creating A Custom AMI ➢ Hard Disk Drive: Throughput Optimized HDD and Cold

➢ Hardware Tenancy — Shared v/s Dedicated HOD

➢ Networking Layer In EC2: VPC ➢ Snapshots

➢ Elastic Network Interface and Its Attributes ➢ Elastic File System (EFS) and its Features

➢ Different Categories Of IP Address ➢ EBS v/s EFS

➢ Public IP v/s Elastic IP ➢ Cost Optimization

➢ AWS Storage Services and How to select them

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

8
What Is EC2?
 What Is EC2?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

10
 Benefits Of EC2

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

11
What Is AMI?
 What Is AMI?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

13
 AWS
Security Groups
 Security Groups In AWS

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

15
Authentication Through
Key-Pair
What Is A Key Pair?
➢Public key + Private Key = Key Pair
➢ Amazon EC2 uses public and private key cryptography to encrypt and decrypt information while connecting
to EC2
➢ Public key is used to encrypt a data, while the recipient uses a private key to decrypt the same
➢ AWS issues .pem file, a client needs to convert it to a format which is recognized by client software

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

17
 EC2
Hardware Tenancy
 Hardware Tenancy- Shared Vs Dedicated
➢ Tenancy determines the owner of a resource
➢ AWS provides two types of the tenancy to comply with your Organization Regulatory Security

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

19
 Hardware Tenancy- Dedicated

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

20
 Hardware Tenancy- Shared

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

21
 EC2
Networking Layer
 Networking Layer In EC2

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

23
 AWS VPC

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

24
 What Is An Elastic Network Interface?
An Elastic Network Interface (ENI) is a virtual network interface which acts as a point of interface between
VM and network by attaching a public IP, private IP, security groups and many more to your instance

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

25
 Attributes Of Elastic Network Interface (ENI)

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

26
 Elastic Network Interface

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

27
 Why It Is Elastic?
➢Virtual network interface can be attached to multiple instance in a VPC
➢An ENI detached from an EC2 instance can be attached to another instance
➢Can be created using the Amazon EC2 console or the command line

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

28
 Different Category Of IP Address
In AWS, specific IP Address is given to each Instance which helps to communicate it to the
server and to establish the connection between the machines

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

29
Difference Between
Public And Elastic IP
 Public IP Vs Elastic IP

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

31
 Elastic IP Address

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

32
 AWS
Storage Services
 AWS Storage Services

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

34
 Storage Services

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

35
 How To Select The Storage Service?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

36
 Instance Storage

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

37
 Instance Storage

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

38
Elastic Block Storage
 What Is EBS?
➢EBS is the logical volumes to use it with the EC2 instances
➢This type of storage is used, when the data needs to be accessed quickly and required for the
long time
➢Lifetime of the EBS is not dependent on the EC2 instance
➢Volume and instance must be in the same Availability Zone

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

40
 EBS
➢A volume can be attached with only one instance at a time
➢It can be detached and attached between the instances in the same Availability Zone

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

41
 EBS
➢Any number of EBS volume can be attached with EC2 instance

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

42
 EBS Features

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

43
 EBS Volume Types

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

44
Solid State Drive And
It’s Types
Solid State Drive (SSD)

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

46
General Purpose SSD (gp2)

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

47
Provisioned IOPS (io1)

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

48
Hard Disk Drive And It’s
Types
 Hard Disk Drive (HDD)

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

50
 Throughput Optimized HDD (st1)

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

51
 Cold HDD (sc1)

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

52
 EC2
Snapshots
 Snapshots

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

54
 Create A Snapshot

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

55
 EFS
Elastic File System
 Disadvantage Of On-Premise File Storage

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

57
 What Is Amazon EFS?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

58
 EFS Features

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

59
 EFS Features

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

60
 EFS Features

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

61
 EFS Features

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

62
Difference Between EFS
And EBS
 EFS Vs EBS

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

64
 EC2
Cost Optimization
 Cost Optimization

➢Instance are provided here On demand

➢Pay only for EC2 instance you use
➢There will not be any upfront charges
➢Prices will be decided by AWS and it will be displayed on the AWS
Website
➢It is charged in hours or seconds for the services you are using
➢It frees you from the planning, purchasing and maintaining hardware

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

66
 Cost Optimization

➢Capacity reservation for EC2 instance is done priory

➢The reserved Instance is for customers with predictable workloads
➢Payment option available in reserved instance: all upfront, partial up
front or no upfront
➢It is 75% cheaper than On-Demand Instance
➢Price of the reserved instance varies with the Availability Zone

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

67
 Cost Optimization

➢In spot instance, the spot price that is in effect for the time period your
instances are running is paid
➢The spot instances offer spare Compute capacity that optimizes your cost
and scales your application throughput up to 10x in the same budget
➢This is suitable for the workloads which are not critical and are tolerant
of interruption

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

68
 Find Us

https://www.facebook.com/K21Academy
http://twitter.com/k21Academy

https://www.linkedin.com/company/k21academy

https://www.youtube.com/k21academy

https://www.instagram.com/k21academy

https://k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved

69
Load Balancing Auto
Scaling And Route 53

Atul Kumar Aryan

Author & Cloud Expert AWS Expert
 Atul Kumar

⮚ 20 Years working on Oracle as Certified Cloud Architect

⮚ Help Customers Migrating to Cloud & Integrations
⮚ Author & Speaker
⮚ Helped thousands of individuals to learn Cloud

https://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

2
2
 Aryan: AWS Expert

⮚ Working on AWS since 2013

⮚ Certified AWS Architect
⮚ Work for the Top Cloud Professional Services
provider in the world as AWS Solution Architect &
AWS DevOps Professionals.

https://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

3
 Making Most Of Training

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Getting Help

support@k21academy.com

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

5
 Making Best of Your Training

➢ Live Interactive Session

➢ FREE Unlimited Retake for Next 1 Years
➢ FREE On-Job Support for next 1 Years
➢ Ask Questions & Make Session Interactive
➢ Add Yourself in WhatsApp Group
➢ Live Session Details http://k21academy.com/live
➢ Ask as Many Questions as you can & make session interactive
➢ Do Lots of Hands-On
➢ Learn at your own Pace & Look How Far You have come
➢ Share WIN

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

6
AWS SAA-C02
Module Agenda
 Agenda: Module
➢ AWS Load Balancer ➢ Various Routing Policies
➢ AWS Load Balancer Types
➢ Components Of Application Load
Balancer
➢ Comparison of Classic V/S
Application V/S Network Load
Balancer
➢ Load Balancer Troubleshoot
➢ AWS Auto - Scaling
➢ AWS Auto - Scaling Components
➢ Life Cycle of Auto Scaling
➢ Auto Scaling Policy
➢ Route 53
https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

8
Load Balancer
 Load Balancer
➢ Elastic Load Balancer distributes and
manages the incoming traffic load
among several devices to improve
network performance.

➢ Distributes Client traffic across servers.

➢ Improves the performance of

applications.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Types Of
Load Balancer
 Types Of Load Balancers

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 What is a Classic Load Balancer
➢ The Load Balancer which balances the traffic across multiple
instances in multiple availability zones is called a Classic Load
Balancer.
➢ It supports both EC2 Classic EC2-VPC.
➢ Increases availability of your application by sending traffic to
healthy Insatnce.
➢ Supports HTTP, HTTPS, TCP and SSL listeners.
➢ Supports sticky sessions.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Limitation: Classic Load Balancer

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 What is Network Load balancer
➢ Network Load Balancer handles sudden and
violates traffic across the EC2 Instances in order
to avoid any latency.

➢ New layer 4 load balancing platform.

➢ Connection base load Balancing.

➢ Supports TCP protocol.

➢ Can handle millions of requests/ seconds.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Limitation: Network Load Balancer

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 What is Application Load balancer

➢ The Load Balancer that distributes the traffic to appropriate target groups
on the basis of content is called Application Load Balancer.

➢ New feature rich, layer 7 load balancing platform.

➢ Reduces hourly cost.

➢ Supports web sockets, HTTP and HTTPS.

➢ Supports micro services and container based application, including deep

integration with EC2 container service.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Limitations Of Application Load Balancer

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Key Benefits of Application Load Balancer

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

Components Of
Application Load
Balancer
 Components of Application Load Balancer

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Comparison
Classic, Application And
Network Load Balancer
 Application V/S Classic V/S Network

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Application V/S Classic V/S Network

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

Load Balancer
Troubleshoot
 Load Balancer Troubleshoot
➢ Under the following circumstances you will not be able
to connect to your Load Balancer.
➢ The registered target is not service.
➢ Client cannot connect to Load Balancer having Internet
facing configured.
➢ Load Balancer sending requests to unhealthy instances.
➢ Load Balancer generates HTTP error.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Load Balancer Troubleshoot

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

Auto-Scaling
 What is Auto Scaling
➢ Auto Scaling is an AWS computing Service
that automatically scales up or down
compute resources as per their usage.
➢ Collection of EC2 instances is called Auto
Scaling Groups.
➢ With Auto Scaling our application has right
resource at right time.
➢ Auto Scaling, AWS Cloud Watch, AWS ELB
work in union.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Auto Scaling Benefits

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

Auto-Scaling
Components
 Auto Scaling Components

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Groups

➢ Groups are the sets in EC2 instances that run a Launch Configuration.

➢ They are the logical units for scaling and management.

➢ Here minimum, maximum and desired number of EC32 instances can be specified.

➢ It maintains the number of instances by performing the periodic health checks on the

Instance in the Groups

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Launch Configuration

➢ Launch Configuration is a template that defines the parameters passed to launch

EC2instances in the Groups.

➢ It specifies AMI ID, instance type, key pair, security groups and block device for

mapping the EC2 Instances.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Scaling Option

➢ Fixed: To maintain the same number of Instances all the time.

➢ Manual: Can specify the change in the minimum, maximum and desired capacity of an

Auto Scaling Groups.

➢ Scheduled: Actions are performed automatically as a function of time and date.

➢ Dynamic: At any time you can change the size of an Auto Scaling Group by updating the

desired capacity or updating the instances that are attached to the Auto Scaling Group
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved
Life Cycle Of
Auto-Scaling
 Life Cycle of Auto Scaling

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Life Cycle of Auto Scaling
➢ Scale Out is the process of launching an EC2
instance via Launch Configuration.

➢ These launched Instances enter the pending

state.

➢ When all the Instances are configured

completely then they enter the In-service
state.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Life Cycle of Auto Scaling

➢ Life Cycle Hook can be added to Auto

Scaling Group to perform the custom
actions at the time of launch or
termination of Instance.

➢ With the help of Life cycle Hook , you can

install or configure software or newly
launched Instances .

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Life Cycle of Auto Scaling

➢ Scale In is process which ensure resources

attached to your application match the demands.

➢ It can terminate one or more instances.

➢ The Auto Scaling group using the termination

policy determines which instances are to be

terminated.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Life Cycle of Auto Scaling
➢ Instance Protection does not work in the following state.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Life Cycle of Auto Scaling

➢ Instances in the Stand By state continue to

be managed by the Auto Scaling Group until

they are not put back into the service, they

will not be active part of application.

➢ Stand By state can be used to update,

modify or troubleshoot instances

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Life Cycle of Auto Scaling

➢ Detaching State is used for architectural

change or update, to find the best fit for the

application.

➢ After the instances are detached they can be

moved separately from a Auto Scaling or

attached to a different Auto Scaling Group.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Life Cycle of Auto Scaling

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

Auto Scaling Policy
 Auto Scaling Policy
➢ Scaling Policy is a set of Instructions for Auto Scaling that tells the service how to
respond to AWS CloudWatch Alarm mistakes.

➢ It specifies whether to scale the Auto Scaling group up or down by how much.

➢ It adjusts the number of instances present in the Auto Scaling Group according to
the specified criteria.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Limitations of Auto Scaling

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 AWS
Route 53
 Why is DNS Used
➢ DNS Translates host name into a computer friendly IP address.

➢ DNS is used for managing the public names of websites and other domains.

www.example.com

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Why Do We Need Route 53
➢ For hosting website we need domain name
and domain name system to be accessed by www.example.com www.example.com

any user.

➢ The IP address of your local DNS will be

searched at your ISP.

➢ If the website is not listed in your local DNS, it

will find on other DNS until it finds the match.

➢ To reduce the Hops Route 53 was introduced.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Why Do We Need Route 53
➢ AWS named it as Route 53 as all the requests are handled through Port 53.

➢ Route 53 is a reliable and cost effective way too route end users to the internet

applications.

➢ Connects user requests to infrastructure running in and outside AWS.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Working of Route 53
www.example.com
➢ When the request is made in the
browser, it is routed to the DNS resolver. www.example.com

➢ DNS resolver is managed by the ISP to

accept the DNS name and corresponding
IP of it.

➢ Then the DNS resolver forwards it to the

root name server to find the root of DNS
like .com, .net, .org etc

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Working of Route 53
www.example.com

➢ The DNS Resolver now sends the request

www.example.com

to one of the top level domains.

www.example.com
➢ It responds with the four Route 53 servers

which are associated with it.

➢ DNS resolver caches the name for 2 days

to reduce the latency.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Working of Route 53
www.example.com
➢ DNS Resolver now chooses a Route 53 name
www.example.com
server and forwards the request of the

www.example.com. www.example.com

➢ The Route 53 name server now looks into

the example.com hosted zone for the

www.example.com
www.example.com record and gets the

associated IP address of it and returns it to

DNS Resolver.
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved
 Working of Route 53
www.example.com

www.example.com
➢ The DNS Resolver finally sends the IP
www.example.com
address to the browser.

➢ Browser now sends the request for

www.example.com

www.example.com to the

corresponding IP address that it got

http://www.example.com

from the DNS Resolver. Web page for www.example.com

Web Server for
www.example.com

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Various
Routing Policies
 Various Routing Policies

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Simple Routing Policy

➢ Ideal for single resource application.

➢ No special routing configuration is required for simple routing policy.

➢ It uses Simple Round Robin policy technique.

➢ Responds to the DNS queries based on the values in the resource record set of
Route 53.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Weighted Routing Policy

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Latency Based Routing (LBR) Policy

➢ Sends traffic to the server which has lowest network latency.

➢ Used when there are multiple resources performing same action.

➢ For the same geographical location, it does not guarantee users to be served from
same location.

➢ Latency between servers can change over time which results change in network
connectivity and routing.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Geo-location Routing Policy

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Failover Routing Policy

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Find Us

https://www.facebook.com/K21Academy
http://twitter.com/k21Academy

https://www.linkedin.com/company/k21academy

https://www.youtube.com/k21academy

https://www.instagram.com/k21academy

https://k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved

63
 Networking And
Monitoring Services

Atul Kumar Aryan

Author & Cloud Expert AWS Expert
 Atul Kumar

⮚ 20 Years working on Oracle as Certified Cloud Architect

⮚ Help Customers Migrating to Cloud & Integrations
⮚ Author & Speaker
⮚ Helped thousands of individuals to learn Cloud

www.k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

2
2
 Aryan: AWS Expert

⮚ Working on AWS since 2013

⮚ Certified AWS Architect
⮚ Work for the Top Cloud Professional Services
provider in the world as AWS Solution Architect &
AWS DevOps Professionals.

www.k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

3
 Making Most Of Training

https://k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved

 Getting Help

support@k21academy.com

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

5
 Making Best of Your Training

⮚ Live Interactive Session

⮚ FREE Unlimited Retake for Next 1 Years
⮚ FREE On-Job Support for next 1 Years
⮚ Ask Questions & Make Session Interactive
⮚ Add Yourself in WhatsApp Group
⮚ Live Session Details http://k21academy.com/live
⮚ Ask as Many Questions as you can & make session interactive
⮚ Do Lots of Hands-On
⮚ Learn at your own Pace & Look How Far You have come
⮚ Share WIN

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

6
AWS SAA-C02
Module Agenda
 Agenda: Module
➢ Virtual Private Cloud (VPC) and its benefits ➢ Access Control List. NACL & Security Group
➢ Default And Non-Default VPC ➢ NAT Devices
➢ IP address ➢ NAT Gateway And NAT Instance
➢ CIDR- Classless Inter-domain Routing ➢ VPC Peering and it's working
➢ Subnet ➢ VPN and Direct Connect
➢ Subnet Mask and Subnet Mask Classes ➢ Need for Monitoring Services
➢ Private And Public Subnet ➢ AWS Cloud Watch and it's working
➢ lPv4 v/s lPv6 — As In AWS Infrastructure ➢ CloudTrail, it's working and use case
➢ Internet Gateway and Route Tables ➢ Trusted Advisor
➢ Security Group With VPC ➢ Functioning Of AWS Trusted Advisor
➢ Default Security Group Rules
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved
8
Virtual Private Cloud
(VPC)
 What Is Virtual Private Cloud (VPC)?
➢VPC is a logically isolated network from other virtual network in the AWS cloud where
you can launch AWS resources

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

10
 AWS VPC

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

11
 Benefit Of Using VPC

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

12
 Default And Non-Default VPC

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

13
 Component Of VPC

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

14
 IP Address
➢IP address are the unique logical numerical label assigned to each device in a network

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

15
 CIDR- Classless Inter-Domain Routing

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

16
 Example- IPV4 Address

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

17
 Example- IPV6 Address

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

18
 What Is A Subnet?

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

19
 What Is A Subnet Mask?

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

20
 Subnet Mask Classes
➢The IPV4 address is divided into 5 sub-classes

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

21
IPv4 vs IPv6 – As In AWS Infrastructure

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

22
 Private And Public Subnet
Private Subnet
➢Resources are not exposed to the outer
world
➢They make use of only Private IPs
➢Mainly used for Databases and application
Services
Public Subnet
➢Resources are exposed to Internet through
internet gateway
➢They make use of both public and private IPs
➢Mainly used for external facing application
like web servers

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

23
 Internet Gateway
A component in VPC that helps to communicate between the instance and Internet by providing the
targets in the route table

➢ Instance that needs to have an internet

access must have a global IP (Elastic IP,
public lPv4 or lPv6 address) and relevant
security groups
➢The Route Table of the subnet in which
the instance is present must point to the
internet gateway
➢Subnet which are attached with the
internet gateway is called Public subnet

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

24
 Route Tables
Route Tables are the set of rules, that is used to determine where the network traffic has to be
directed

➢Route table specifies the destination

(IP address) and target (where do you
want to send the traffic of that
destination)
➢Target can be Internet gateway, NAT
gateway, Virtual private gateway, VPC
peering connection, etc

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

25
 Route Tables

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

26
 Security Group With VPC

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

27
 Default Security Group Rules

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

28
 Access Control Lists (ACL)

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

29
NACL And Security Group

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

30
Network Address
Translation (NAT)
 NAT Device
NAT devices enables instances in the private subnet to access the internet or other AWS
resources, but prevents the internet from initiating connections to the instances

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

32
 Type Of NAT Device

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

33
NAT Gateway
➢Used when higher bandwidth,
availability with lesser administrative
effort is required
➢NAT gateway always resides inside the
public subnet of an Availability Zone
➢Update the route table of the private
subnet such that it sends the traffic to the
NAT
gateway
➢Elastic IP must be attached to the NAT
gateway while creating
➢It supports only TCP, UDP and ICMP
protocols
➢Attach NACL to the subnet to control the
traffic as security groups cannot be
attached to it
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

34
NAT Instance
➢Used when the servers with the
minimum access to the internet is
required
➢NAT instance will always reside inside
the public subnet of an Availability zone
➢Assign a private IP address from the
subnet IP address
➢ Can use both elastic IP or the public IP
to communicate with the Internet
Gateway
➢After creating the NAT instance, update
the route table of the private subnet such
that it sends the traffic to the NAT
gateway
➢Security groups can be attached to it
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

35
NAT Gateway And NAT Instance

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

36
VPC Peering
 VPC Peering

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

38
 Working Of VPC Peering
➢ Update the security
group to ensure the
traffic to and from
the VPC peer are
not restricted

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

39
 Working Of VPC Peering

➢A VPC peering
request is initiated at
this stage to the owner
of the accepter VPC
➢The request can be in
the state of failed or
pending acceptance

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

40
 Working Of VPC Peering
➢To activate the VPC
peering connection, the
acceptor must accept the
peering request
➢The request expires
after 7days, if there is no
action taken on the
request

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

41
 Working Of VPC Peering

➢Update the route table

of both the VPCs to
enable the
flow of traffic between
them

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

42
VPC And Direct Connect
 Virtual Private Network (VPN)
VPN is a service that helps to connect your VPC to your data centre through IPsec (Internet
Protocol security) protocol
➢Two VPN tunnels per VPC to improve
the fault tolerance by terminating them
at different availability zone
➢Endpoints of the tunnel: Customer
Gateway and Virtual private gateway
Charged 0.05$ per hour
➢Types of routing: static and dynamic
Static routing: Routing table is manually
configured
➢Dynamic routing: Uses the Border
Gateway Protocol (BGP) to configure the
route table
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

44
 Direct Connect
A network service that provide a dedicated network connection from your on-premises to AWS
without using internet

➢They use standard Ethernet fiber-

optic cable of 1GB or 10GB to connect
to direct connect locations
➢Increase bandwidth, reduce costs
and provide a more consistent
network
➢Virtual Interface enables you to
access the AWS services

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

45
 AWS Direct Connect Benefits

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

46
 VPN v/s Direct Connect

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

47
CloudWatch
Why Do We Need A Monitoring Service?

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

49
 What Is AWS CloudWatch?
AWS CloudWatch is a monitoring service which is used to monitor AWS resources and application
running on AWS in real time
➢Cloud Watch is used to collect and track metrics, which are
variables used to measure your resources and application
➢Based on rules that you define, Cloud Watch alarm sends
notification or automatically makes changes to the resources
you are monitoring
➢It offers two level of monitoring: Basic (free) and Detailed
➢Basic monitoring is available automatically for a few resource
➢Detailed monitoring charges user $3.5 USD per instance per
month

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

50
 What Does Amazon CloudWatch Do?

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

51
 Resource Managed By CloudWatch

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

52
 How Does CloudWatch Work?

➢It collects metrics and logs from all the AWS resources and application
➢Uses them to visualize your application on the AWS CloudWatch Dashboard
➢Changes made in AWS environment is sensed by Cloud Watch and in response it take some
corrective action by sending notifications
➢It provides you a real time analysis by using Cloud Watch metric math
➢Working this way CloudWatch provides you with system wide visibility, resource optimization
and health monitoring
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

53
Monitoring EC2 Instance
Via CloudWatch
 Monitoring Your Instance Using
CloudWatch

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

55
CloudTrail
 What Is AWS CloudTrail?
AWS CloudTrail is a web service that records activity made on your account and delivers log file to your S3
bucket

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

57
 How Does AWS CloudTrail Work?
➢ When User makes an API call to any of the AWS
services CloudTrail continuously records these
API calls and delivers them in form of log files
into S3 bucket
➢ You can store these log files to meet compliance
related needs
➢ These API records can also used to troubleshoot
operational issues
➢ CloudTrail can integrate with CloudWatch so that
you can monitor and receive alarms as per need

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

58
 Where Can We Use CloudTrail?

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

59
 CloudTrail Limits

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

60
Trusted Advisor
 AWS Trusted Advisor

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

62
 Trusted Advisor: Categories

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

63
Functioning Of AWS Trusted Advisor

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

64
 Find Us

https://www.facebook.com/K21Academy

http://twitter.com/k21Academy

https://www.linkedin.com/company/k21academy

https://www.youtube.com/k21academy

www.k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved

 Database Services
And Analytics

Atul Kumar Aryan

Author & Cloud Expert AWS Expert
 Atul Kumar

⮚ 20 Years working on Oracle as Certified Cloud Architect

⮚ Help Customers Migrating to Cloud & Integrations
⮚ Author & Speaker
⮚ Helped thousands of individuals to learn Cloud

https://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

2
2
 Aryan: AWS Expert

⮚ Working on AWS since 2013

⮚ Certified AWS Architect
⮚ Work for the Top Cloud Professional Services
provider in the world as AWS Solution Architect &
AWS DevOps Professionals.

https://k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

3
 Making Most Of Training

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Getting Help

support@k21academy.com

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

5
 Making Best of Your Training

➢ Live Interactive Session

➢ FREE Unlimited Retake for Next 1 Years
➢ FREE On-Job Support for next 1 Years
➢ Ask Questions & Make Session Interactive
➢ Add Yourself in WhatsApp Group
➢ Live Session Details http://k21academy.com/live
➢ Ask as Many Questions as you can & make session interactive
➢ Do Lots of Hands-On
➢ Learn at your own Pace & Look How Far You have come
➢ Share WIN

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

6
AWS SAA-C02
Module Agenda
 Agenda: Module
➢ What Is Database ➢ Read Consistency In DynamoDB
➢ Types Of AWS Database Services ➢ Types Of AWS Database Services: Amazon ElastiCache
➢ Types Of AWS Database Services: Amazon RDS ➢ Amazon ElastiCache: Memcached
➢ RDS DB Engines ➢ Amazon ElastiCache: Redis
➢ RDS DB Instances ➢ Memcached V/S Redis
➢ Amazon RDS : Read Replica ➢ Types Of AWS Database Services: Amazon Redshift
➢ DB Instance Regions and Availability Zones ➢ Analytics- AWS Kinesis
➢ RDS Backup And Restore
➢ Types of AWS Database Services: Amazon Aurora
➢ Storage And I/O Traffic Aurora
➢ Cash Recovery In AWS Aurora
➢ Types Of AWS Database Services: Amazon DynamoDB
➢ DynamoDB API
https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

8
What Is A Database
 What Is A Database?
➢ A collection of individual data items which is stored in a highly
structured manner is called a Database.
➢ It provides the ability to store large amount of information.
➢ Allows quick Access to information.
➢ It ensures security of data.
➢ Database is classified as Relational and Non-Relational Database.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

10
 Types Of AWS
Database Services
 Types of AWS Database Services
)

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

12
Types of AWS Database
Services: Amazon RDS
 Why Managed Database Services?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

14
 Why Managed Database Services?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

15
 Why Managed Database Services?

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

16
 Amazon RDS
➢ Amazon RDS is relational database management
service which manages relational database for users.
➢ The role of RDS is to look after software patching,
updates, backups, recovery and automatic failure
detection.
➢ You can either create a backup via Snapshot or can
have an automated backup performed.
➢ It is mainly used to manage data of E- Commerce,
Gaming, Apps, Websites and many more.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

17
 Amazon RDS Benefits

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

18
RDS Database Engines
 Amazon RDS Database Engines

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

20
 Database Schemas With DB Engines

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

21
 Database Engine Versions Supported

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

22
RDS Database Instances
 Amazon RDS : DB Instance
➢ Database Instance is a set of memory structures that
manages the database.
➢ It is the basic building block of RDS which runs on DB
engine.
➢ Each DB Instance runs on a DB engine.
➢ By default customer can have 40 RDS Instances

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

24
 Amazon RDS : DB Instance Class
➢ The Computation and memory capacity of DB Instance is decided by the DB Instance
Class.
➢ The necessity of DB Instance Class depends on users processing power and memory
requirement.
➢ It supports mainly three types of resources : Magnetic, General Purpose and
Provisioned IOPS
➢ Instance Class offered by AWS RDS are:

Standard Memory Burstable

Optimized Performance
db.m4,db.m3,db.m1 db.r4 and db.r3 db.t2

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

25
Amazon RDS: Read
Replica
 What Is Read Replica?
➢ Read replica database is the copy of master
database which reflects changes done to the
master database system.
➢ Read Replica reduces the load on DB Instance.
➢ By taking the Snapshot of Source DB Instance,
Amazon RDS creates Read Only Instance from
the snapshots.
➢ The Read Replica allows only read
connections.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

27
 DB Instance Regions
And Availability Zones
 DB Instance Region And Availability Zones
➢ An Amazon RDS activity initiated
runs only in your current default
region.
➢ The default region can be changed in
the console, by setting the EC2
region environment variable.
➢ Amazon RDS provides high
availability and failover support for
DB Instances by maintaining
asynchronous standby replica in
Multi availability zone deployments.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

29
 DB Instance Failover Scenarios

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

30
RDS Backup And
Restore
 RDS Backup And Restore

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

32
 Billing Of Amazon RDS

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

33
Types of AWS Database
Services: Amazon
Aurora
 What Is Amazon Aurora?
➢ Amazon Aurora is Relational Database which is managed by AWS

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

35
Storage and I/O Traffic
In Aurora
 Amazon Aurora Storage Engine

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

37
 I/O Traffic In Aurora
➢ In each of the storage node the record first enters an in-
memory queue.
➢ Persisted record is carried to update the queue and
primary Instance is acknowledged.
➢ The records are acknowledged and sort groups identifies
gaps in logs.
➢ If Log sequence number or the storage node is lost then
they are retrieved from other nodes via Gossip Protocol.
➢ The log records are backed asynchronously to Amazon
S3.
➢ Periodically garbage collects older versions and current
records are stored in Data Blocks.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

38
Cache Recovery In AWS
Aurora
 Cache Recovery : Traditional DB V/S Aurora

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

40
 Types Of AWS
Database Service:
Amazon DynamoDB
 Difference Between SQL And NoSQL DB

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

42
 Amazon DynamoDB
➢ DynamoDB is fully managed NoSQL database service offered by
AWS.
➢ The record in every row is known as Item.
➢ Here you can set TTL (Time To Leave) to delete items automatically
in the table once they expire.
➢ Operation like create, insert, update, query, scan and delete are
performed in a table via appropriate API.
➢ For faster performance and data durability the table data is stored
in SSD link and can be spread across servers in different availability
zones.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

43
 Data Structure In DynamoDB

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

44
DynamoDB API
 Control Plane
➢Control Plane lets you create and manage DynamoDB Table.
➢Create Table: Lets you create a table which includes table name, primary key,
throughput settings.
➢Describe Table: Used to view the details of the table.
➢Update Table: Used to modify settings of table.
➢Delete Table: Used to remove unused table.
➢List Table: Used to return the names of DynamoDB table for the current AWS
account and region.
➢Describe Limits: It returns the current read and write capacity limits for the
current AWS account and region.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

46
 Data Plan
➢Data Plan lets you perform CRUD action on data in a table.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

47
 DynamoDB Streams
➢ DynamoDB streams is used to replicate the data from a table to table in
other region.
API’s used are:
➢ List Stream: retrieves a list of stream descriptors for the current account
and endpoint.
➢ Describe Stream: retrieves detailed information about a given stream.
➢ Get Shard Iterator: retrieves shard iterator, which describes a location
within the shard.
➢ Get Records: retrieves the stream records within a given shard.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

Read Consistency In
DynamoDB
 Read Consistency In DynamoDB
➢ DynamoDB supports both Eventually Consistent Reads and Strongly Consistent
Reads.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

50
 Throughput Capacity

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

51
 Amazon DynamoDB Benefits

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

52
 Amazon DynamoDB- Use Case

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

53
 How DynamoDB Works

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

54
 Types Of Amazon
Database Services:
Amazon ElastiCache
 What Is An ElastiCache
➢ ElastiCache is a cache-in environment used to
cache results in order to reduce overhead and
latency on database.
➢ It is a service which helps to improve the
performance web applications by allowing user
to retrieve information from fast, managed in-
memory caches.
➢ It helps to set up, manage and scale distributed
in-memory cache environment in the cloud.
➢ It supports two open source in-memory
engines: Redis and Memcached

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

56
Amazon ElastiCache-
Memcached
 Memcached Cache
➢ Memcached is general purpose distributed memory
caching system used to speed up the dynamic data
driven websites.
➢ Memcached is simple to use and multi thread.
➢ Memcached cluster can have a maximum 100 nodes in
a region.
➢ It supports both horizontal and vertical scaling.
➢ It is instantly fast and well established.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

58
Amazon ElastiCache-
Redis
 Amazon ElastiCache- Redis

➢ Redis is an In-memory data structure store,

used as database, cache and message broker.
➢ It is single threaded, and its read replicas are
synced asynchronously.
➢ Collection of 1 to 6 Redis nodes is called as
Shard.
➢ Backups are stored in S3 with a backup
period of 35 days.
https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

60
Memcached V/S Redis
 Memcached V/S Redis

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

62
 Popular Use Cases of ElastiCache

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

63
Types Of Amazon
Database services:
Amazon Redshift
 What Is A Data Warehouse
➢ Data Warehouse is a repository where data
generated by different sources is collected, stored,
and transformed for organization's decision-making
process.
➢ It reduces total turnaround time required for
analysis and reporting.
➢ It is also used to store historical data which helps
users while analyzing data.
➢ It provides different time periods and trends to make
future predictions

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

65
 AWS Redshift
➢ Redshift is fully managed peta-byte scale Data Warehouse Service by AWS to do
analysis on data.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

66
 Why Amazon Redshift

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

67
 Amazon Redshift Features

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

68
 Amazon Redshift Architecture

➢ AWS Redshift is a collection of computing resources

known as Nodes, where nodes are organized to form
a Cluster.
➢ Client Applications are the tools to work with
Redshift e.g. SQL, Workbench etc.
➢ Client Applications connect to Redshift Cluster via
JDBC or ODBC drivers.
➢ The Lead Node communicates with client application
and compute Nodes.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

69
 Amazon Redshift Architecture

➢ Each compute node has its own CPU, memory

and attached storage.
➢ There are two types of Nodes: Dense
Compute(SSD Based) and Dense Storage.(HDD
Based)
➢ All the user data gets stored in compute node.
➢ It performs the function as load, backup and
restore via Amazon S3, DynamoDB and SSH.
https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

70
 Amazon Redshift Architecture

➢ Node Slice is mainly used for the distribution

of data within the node.
➢ Each slice is allocated a piece of node memory
and disk space, where it processes the portion
of workload assigned to its node.
➢ Once the leader node assigns the operations
to the slices then these slices work in parallel
to complete the operation.
https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

71
Analytics – AWS Kinesis
 What Is Streaming Data
➢ Streaming Data is a data which is generated
from thousand of sources.
➢ The Sources send data in small sizes i.e.
Kilobytes.
➢ The data is processed sequentially and
incrementally on record basis and used for
wide range of analytics.
➢ Companies like Flipkart, Uber use Streaming
Data.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

73
 What Is Kinesis
➢ Kinesis is a data analysis service by Amazon which
provides an easy way to collect, process and analyze
real- time streaming data to get time insights so as to
provide quick response to the information.
➢ Kinesis Video Stream is used to capture, process and
analyze video stream for machine learning and
Analytics.
➢ Kinesis Data Firehose is used to load data into AWS
data Stores.
➢ Kinesis Data Analytics is an easy way to process data
stream with SQL.

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

74
 Features of Kinesis

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

75
 Benefits Of Kinesis Stream

➢ Easy to provision, deploy and manage.

➢ Elastically scalable and serverless.

➢ Reduce Latencies.

➢ Pay as you go, no upfront costs.

➢ Right services for your specific use cases

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

76
 Find Us

https://www.facebook.com/K21Academy

http://twitter.com/k21Academy

https://www.linkedin.com/company/k21academy

https://www.youtube.com/k21academy

www.k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved

Application Services
And AWS Lambda

Atul Kumar Aryan

Author & Cloud Expert AWS Expert
 Atul Kumar

⮚ 20 Years working on Oracle as Certified Cloud Architect

⮚ Help Customers Migrating to Cloud & Integrations
⮚ Author & Speaker
⮚ Helped thousands of individuals to learn Cloud

www.k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

2
2
 Aryan: AWS Expert

⮚ Working on AWS since 2013

⮚ Certified AWS Architect
⮚ Work for the Top Cloud Professional Services
provider in the world as AWS Solution Architect &
AWS DevOps Professionals.

www.k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

3
 Making Most Of Training

https://k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Getting Help

support@k21academy.com

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

5
 Making Best of Your Training
➢ Live Interactive Session
➢ FREE Unlimited Retake for Next 1 Years
➢ FREE On-Job Support for next 1 Years
➢ Ask Questions & Make Session Interactive
➢ Add Yourself in WhatsApp Group
➢ Live Session Details http://k21academy.com/live
➢ Ask as Many Questions as you can & make session interactive
➢ Do Lots of Hands-On
➢ Learn at your own Pace & Look How Far You have come
➢ Share WIN

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

6
AWS SAA-C02
Module Agenda
 Agenda: Module
➢ Application Services
➢ Amazon Simple Email Service (SES)
➢ Amazon Simple Notification Service (SNS)
➢ Demo - Send A Notification Through SNS
➢ Amazon Simple Queue Service (SQS)
➢ Simple Workflow Service (SWF)
➢ What Is Serverless Computing
➢ AWS Lambda

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

8
Application Services
 Application Services
➢ AWS provides different managed Application
Services to coordinate between your
distributed applications. They are:
➢ Simple Email Service (SES)
➢ Simple Notification Service (SNS)
➢ Simple Queue Service (SQS)
➢ Simple Workflow Service (SWF)

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

10
Amazon Simple Email
Service (SES)
 Amazon Simple Email Service
➢ SES is highly scalable and cost-effective platform for sending and
receiving email.
➢ It reduces the complexity of building an in-house email solution and
installing and operating a third-party email solution.
➢ Pay only for the messages you send and receive.
➢ Use Cases: Digital Marketing Organizations, Application Developers
and Online Retailers.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

12
 Why SES
➢ Scalable: Can increase the size from zero to millions in a day without any additional cost.
➢ Seamless Integration: As it can be easily integrated with other services like S3, SNS,
CloudWatch and Lambda.
➢ High Performance: Can quickly send millions of emails in few hours.
➢ Reliable e-mail delivery: Uses in house content filtering to ensure that it meets the
standard of ISP.
➢ Cost Effective: The amount you pay depends on the volume and the number of messages
you send or receive through it.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

13
 Sending Email With Amazon SES

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

14
 To Receive An Email
➢ Verify your domain: The verification process with SES ensures that you own that domain.
➢ Publish MX record: it specifies which mail server can accept the mail sent to your domain.
➢ Give Permission: To enable SES to push a SNS, topic or write email to S3, attach policies to
the resources.
➢ IP Address Filter: It helps to reject or accept the mails originating from a specific IP
address.
➢ Receipt Rule: It defines what has to be done when an email has been sent to your
domain.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

15
 Common Use Cases
➢ Marketing Emails: To promote products and services to your customers as
advertisements.
➢ Transactional Emails: Sends automated emails that keep your customers
informed like status, update and order confirmation.
➢ Notifications: Sends out Notifications for any event that requires reporting.
➢ Receiving Emails: Receive emails and deliver it to S3 bucket, Push
notification through SNS and call custom code to AWS Lambda Function.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

16
 Operations Done By SES After It Receives Email

➢ Refer to your active receipt rule set.

➢ If there are not any matches it rejects the email.
➢ Perform virus scan on the mail to ensure they are virus free.
➢ SES accepts the mail from recipients in your domain and applies that are
defined.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

17
 Limitations In SES

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

18
 Amazon Simple
Notification Service
(SNS)
 Simple Notification Service (SNS)

➢ SNS is managed service of AWS which is used to deliver the

push messages from the application to the subscribing ends
or other applications.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

20
 Working of SNS
➢ Creates a topic which acts as an access point.
➢ Set policies to limit the access to either publish the message or subscribe to
notification and also specify which protocols to be supported.
➢ Either you subscribe to the topic or get subscribed by the topic owner.
➢ Publish the message to a topic.
➢ Deliver the message to all the subscribed owners.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

21
 Benefits of SNS
➢ Send message to individual or broadcast.
➢ Instantaneous push-based delivery.
➢ Easy integrations with applications.
➢ Point and click interface.
➢ Multiple transport protocols.
➢ Pay as you go model.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

22
 SNS Mobile Push
➢ SNS helps you send notification to the apps on your mobile through push mechanism
without opening your application.
➢ Lets you push notifications to Apple, Fire OS, Google, Windows and Android devices with
Baidu Cloud Push.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

23
Amazon Simple Queue
Service (SQS)
 Simple Queue Service (SQS)
➢ SQS is a messaging queue service, which
handles messages or workflows between
other components in a system.
➢ It provides highly available, scalable, reliable
and managed queues for storing messages
as they travel between systems.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

25
 Long Polling
➢ Long Polling helps you to achieve higher performance as it eliminates the number of empty
requests by waiting till the message is available at the queue or polls time out

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

26
 SQS Visibility Time Out
➢ A period of time that prevents other
consumers from processing the message is
called SQS Visibility Time Out.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

27
 Dead Letter Queues
➢ Dead Letter Queue helps in handling message failure as it isolates the failure messages
such that we can determine why the processing did not succeed.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

28
 SQS Features
➢ Reliable: It runs in Amazons high availability data center.
➢ Message Batching: Message batching for higher throughput and reduced cost.
➢ Scalable: Automatically scales for unlimited queue and message available.
➢ Hold Message: It holds the message until you explicitly delete them.
➢ Flexible: Standard queues for high throughput and FIFO queues for strict ordering.
➢ Fan-out: When it is combined with SNS it can send multiple copies of messages to multiple
queries parallely.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

29
 Types Of SQS

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

30
Simple Workflow
Service(SWF)
 What Is AWS SWF?
➢ SWF is a flow framework that helps to build the workflow
among the distributed applications.
➢ It mainly coordinates the task such as execution of
dependencies, scheduling and concurrency as per logical
flow of the application.
➢ The developer has full control over implementing process
steps and coordinating the task that drives them.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

32
 Why AWS SWF?
➢ Many applications rely on Asynchronous and distributed
processing because of its features like scalability, availability
and deployment flexibility.
➢ SWF provides a programming infrastructure and model for
coordinating distributed components along with state of
execution.
➢ This in turn helps you focus in building different aspects of
your application.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

33
 Workflow of SWF
➢ Workflow is a set of activities that coordinates with each other to achieve objective.
➢ Define and register all activities with SWF to create a Workflow.
➢ Application to start for Workflow: Workflow Starter.
➢ Activity Task List contain task that are to be performed again and again.
➢ Activity Worker is the program which receives, programs and provides the result of
Activity Task.
➢ Decider is software program that includes the coordination logic to run a workflow.
➢ SWF is the place where data gets exchanged between activity and decider task list and
history is maintained.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

34
 SWF Architecture
➢ Workflow starter initiates the application.
➢ Decider schedules activity tasks.
➢ Provides input data to the activity workers.
➢ Processes events that arrive while the workflow is in
progress.
➢ Finally ends the workflow when the objective has been
complete.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

35
 Use Cases of SWF
➢ Upload a chunk to EC2.
➢ Encode the chunk.
➢ Decider determines whether the
encoding is passes or failed.
➢ Download the chunks in other S3.
➢ Combine the file to a single chunk
and upload it back to S3.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

36
What Is Serverless
Computing
 What Is Serverless Computing?
➢ Serverless computing enables you to build and run
application without worrying about Servers, as the
server in which its running is fully managed,
provisioned and scaled by AWS.
➢ Scale with usage.
➢ No server to provision or manage.
➢ Never pay for idle.
➢ Less components.
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

38
AWS Lambda
 AWS Lambda
➢ Lambda is serverless compute platform where you can run a code
for any type of backend service in response to events.
➢ Compute Service: Run attributes without managing servers.
➢ Event Driven: The codes run when there is a need to run.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

40
 How AWS Lambda Works
➢ Upload your code to AWS Lambda.
➢ Set up you code to trigger from other AWS services, HTTP endpoint
or in app activity.
➢ Lambda runs your code only when triggered, using only the
compute resources needed.
➢ Pay as you go.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

41
 Benefits of AWS Lambda
➢ No server to manage: It automatically runs the code without managing servers
➢ Continuous Scaling: Automatically scales and runs the code in parallel for each
individual trigger.
➢ Sub Second Billing: Charged for every 100ms the code executes and the number of
times the code is triggered.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

42
 Event Sources- Can Be Integrated With Lambda

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

43
 Use Cases of AWS Lambda
➢ Data processing.
➢ App Backend development.
➢ Control System.
➢ Serverless Websites.
➢ Security Updates.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

44
 Limitations of AWS Lambda

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

45
 Find Us

https://www.facebook.com/K21Academy

http://twitter.com/k21Academy

https://www.linkedin.com/company/k21academy

https://www.youtube.com/k21academy

www.k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved

 AWS Architectural
Designs

Atul Kumar Aryan

Author & Cloud Expert AWS Expert
 Atul Kumar

⮚ 20 Years working on Oracle as Certified Cloud Architect

⮚ Help Customers Migrating to Cloud & Integrations
⮚ Author & Speaker
⮚ Helped thousands of individuals to learn Cloud

www.k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

2
2
 Aryan: AWS Expert

➢ Working on AWS since 2013

➢ Certified AWS Architect
➢ Work for the Top Cloud Professional Services
provider in the world as AWS Solution Architect &
AWS DevOps Professionals.

www.k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

3
 Making Most Of Training

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Getting Help

support@k21academy.com

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

5
 Making Best of YourTraining

➢ Live Interactive Session

➢ FREE Unlimited Retake for Next 1 Years
➢ FREE On-Job Support for next 1 Years
➢ Ask Questions & Make Session Interactive
➢ Add Yourself in WhatsAppGroup
➢ Live Session Details http://k21academy.com/live
➢ Ask as Many Questions as you can & make session interactive
➢ Do Lots of Hands-On
➢ Learn at your own Pace & Look How Far You have come
➢ Share WIN

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

6
AWS SAA-C02
Module Agenda
 Agenda: Module
➢ Let Us First Understand Why Do We Need Well- Architected Framework
➢ Design Resilient Architecture
➢ Resources Used To Handle The Failure
➢ Resilient Storage
➢ Decoupling Services
➢ Design Multi-Tier Application
➢ Disaster Recovery
➢ Design Performance Architecture
➢ Caching
➢ Memcached Cache
➢ Redis Cache
➢ Design Solution For Elasticity And Scalability
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

8
Let Us First understand
Why Do We Need Well-
Architected Framework
 Why To Build Well - Architected Framework?

Well Architected Framework helps the cloud architect to

build applications which are:
➢ Most Secure
➢ High Performing
➢ Resilient
➢ Efficient in Infrastructure

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

10
 How To Build Well Architected
Framework?
Aspects to be considered to build Well Architected Frameworkare:
➢ Build and Deploy Faster: Testssystem regularly, use automation cloud native
architecture’s help experiments.
➢ Risk Mitigation:Understand risks in architecture and address them before
deploying.
➢ Make InformedDecisions: Determine pros and cons of architectural decisions
for performance and availability of your application and business outcomes.

➢ Learn and Practices: Refer thousands of customers architecture and training.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

11
 Pillars Of Well Architected Framework
The AWS Well Architected Framework is based on five pillars:
➢ Resilience
➢ High Performance
➢ Efficiency
➢ Security
➢ Excellence in Operation

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

12
Design Resilient
Architecture
 What is Resilience?
➢ Resilience is also calledRecoverability.
➢ It is the capacity to adopt to changing conditions.
➢ Quickly maintain regainfunctionality.
➢ A software is reliable, if it is able to quickly move from failure.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

14
 How Resilient Architecture Overcomes
Failure
➢ AWS provides multiple geographical regionsto
host your application.
➢ Each region has multiple availabilityzones to
increase the fault-tolerance.
➢ Resilient architecture deals with failure through
high availability and fault-tolerance.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

15
 How to Measure Availability?

➢ Downtime per year (hours) = (1 – Uptime ratio) *365*24

➢ Uptime ratio or Availability = MTBF/(MTBF + MTTR)
➢ MTBF = Mean Time Between Failure
➢ MTTR =Mean Time To Repair
➢ MTBF = Hours In Year / No. Of Failure
➢ MTTR = (No. of Device Failures * Time to Repair device) / Total No. of Failures

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

16
Resource Used To
Handle The Failure
 Resources Used To Handle The Failure
Allthese resources provide high availability
and handle failure ofapplication.
➢ ELB
➢ Auto Scaling
➢ Route 53
➢ RDS

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

18
 How To Use Resources - ELB
➢ Use At Regional Level : Combination of Auto Scaling and ELB will
balance traffic and resource capacity across availability zones.
➢ Within AWS VPC : Used to balance load between application tiers
in availability zones.
➢ Instance Migration : You can easily move instances from dev
environment to test environment using ELB.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

19
 How To Use Resources - Route 53
➢ Leverage SLA : Amazon Route 53 Service level agreement is a policy
governing the use of Amazon Route 53, it ensures application
reliability with Route 53.
➢ Weighted Routing : Moves a part of traffic to new infrastructure
based on analysis.

➢ Control Updates : It takes full control of DNS updates for more

decisive system updates.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

20
 How To Use Resources - RDS
➢ Scale DB Without Admin Overhead : Choose instance size for DB
and scale up or out overtime.
➢ Achieve High Availability From Manage : Create multi-AZ
Deployment and Read Replicas. AWS takes care of failover and
recreation of new standby in case Master DB goes down.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

21
 How To Use Resources – Auto Scaling
➢ Dynamically Scale Resources With Cost Control:
Provides only the resources that are required with
scale up and scale down policies as per the
demand.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

22
 Design Resilient Architecture
➢ Replicating data in Multi-AZ will always make data
available even if master DB is not responding.
➢ ELB will distribute the traffic based on the load on
instances.
➢ ELB with Multi-AZ will redirect request to available
server in case there is a natural calamities in one
AZ.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

23
 Design Resilient Architecture
➢ Implement elasticity by vertically scaling DB’s and
horizontally scaling web servers.
➢ Use Auto Scaling for Horizontal Scaling the web
servers.
➢ Auto Scaling will add remove instances based on
the traffic.
➢ It ensures that at any point of time there would be
a server to serve the request.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

24
Resilient Storage
 Why Do We Need Resilient Storage
➢ To analyse big data .
➢ To archive data.
➢ To manage data in Data Warehouse.
➢ Backup, Restore and Recover data from any
disaster

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

26
 Storage Options In AWS
➢ Simple Storage Service
➢ Elastic Block Storage
➢ Elastic File System
➢ Amazon Glacier
➢ Snowball
➢ Amazon Storage Gateway

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

27
 How To Make Storages Resilient?
Example
➢ S3 is used for storing object which 99.9999%
available.
➢ Multi AZ-RDS with Master and Replica Server
makes application highly available.

➢ DynamoDB is used to store schema less data which

is highly available.
➢ Glacier is used to archive object data.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

28
Decoupling Service
 What Is A Decoupled System?
➢ Decoupled system is a system where the components have little or
no knowledge of other components.
➢ Decoupling isolates the components of a system and eliminates
internal dependence so that the failure of a single component is
unknown by the other components.

➢ They are mainly used to create a more resilient system in the case
of the failure of any component.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

30
 Advantages Of Decoupling Services
➢ Ensure highly available synchronous and asynchronous
communication between services.
➢ Helps to achieve data so as to separate concerns in the application.
➢ Gives high throughput of services.
➢ Easier management on adding features.
➢ Helps to customize needs by praising and enriching data through
stream/ pipeline.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

31
 Decoupling Services By AWS
AWS cloud provides services for synchronous and asynchronous
communication.
➢ Asynchronous Communication : SQS, SNS, Kinesis
➢ Synchronous Communication : Classic Load Balancer, Application
Load Balancer, Auto Scaling

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

32
 Decoupling Services - Synchronous
Synchronous Decoupling requires both receiver
and sender side system to be always available.
➢ Synchronous Decoupling can be achieved by
having an ELB application.
➢ ELB is used for distributing incoming
application traffic across multiple EC2
Instances present in multiple availability
zones.
➢ You can add and remove instances from the
Load Balancer, as per your needs without
disrupting the overall flow of requests to your
application.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

33
 Decoupling Services - Asynchronous
In Asynchronous Decoupling communication is
achieved even if the receiver is not available.
➢ For it, SQS is used to send messages to
and forth between different services in
distributed components.
➢ These components perform different tasks
without losing messages or requiring each
component to be always available.
➢ Kinesis service is used for streaming and
processing real time data

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

34
Design Multi-Tier
Application
 What is Multi - Tier Application?
➢ Multi-Tier application is very popular in user
facing application.
➢ Mostly it contains web, logic and database
layer.
➢ Presentation Layer contains Web pages,
Mobile App UI etc.
➢ Logic Layer Transforms presentation layer to
functionality behaviour of the application.
➢ Database layer stores all the requirements
about the application.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

36
 Serverless Multi-Tier Architecture - Components
Amazon API Gateway
➢ API gateway allows you to securely connect mobile and web
applications to business logic hosted on AWS Lambda.
➢ It provides a fully configured HTTPS API.
Lambda
➢ Business logic can be put in Lambda function.
➢ Lambda function can be made more secure by integrating it with
IAM policies.
➢ Security Group and NACL will help to access or deny traffic from
various sources.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

37
 Serverless Multi- Tier Architecture - Components

VPC
➢ Created dedicated VPC and subnets for Lambda and database will
make the application more diverse.

➢ Web Servers are hosted in Public Subnet.

➢ Application Server and Database are hosted in private subnet.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

38
 Multi – Tier Application With VPC
➢ VPC has private and public subnets in the
availability zones.
➢ Web Servers are hosted in public subnet.
➢ App Servers are hosted in private subnet.
➢ All traffic from internet goes through ELB which
distributes traffic in multiple web servers.
➢ Internet ELB is there to distribute traffic from web
servers to Multiple app Server.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

39
 Design Serverless Multi- Tier Architecture
➢ Multi- Tier Serverless architecture in AWS can be achieved through API
Gateway, Lambda and Database.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

40
Disaster Recovery
 Disaster Recovery
➢ Disaster Recovery is about preparing for and recovering from the disaster.
➢ Recovery Time Objective : The time taken to restore a Business process to
service level after disruption taken place.
➢ Recovery Point Objective : The acceptable amount of data loss measured in
time.

➢ A company decision on RTO and RPO based on the financial impact that the
company would face when the systems are unavailable.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

42
 Options To Implement DRPlans
➢ Backup and restore.
➢ Pilot light.
➢ Warm Standby.
➢ Multi Site Solution Deployment.
➢ AWS production to DR using multiple AWS regions.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

43
 Measure To Improve Your DR Plan
➢ Testing : AWS gives you the access to perform frequent DR tests without
needing your DR infrastructure to be always on.
➢ Monitoring & Alerting : Set monitoring and alerting mechanism when your
DR environment faces server failure.

➢ Backups : Take regular backups after you have switched to DR environment.

➢ User Access : Secure access to DR environment resource via IAM to segregate
user responsibilities.
➢ Automation : Automate you deployments with CloudFormation or AWS
OpsWorks.
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

44
Design Performance
Architecture
 What is Performance Storage?
Storage performance is the measure of how well storage devices perform ,
especially hard drive. Common metrics are :

➢ Input Output Operations per second (IOPS).

➢ Percent Utilization.
➢ Read/Write Speed.
➢ Response Time.
➢ MTBF
➢ MTTF
➢ Transaction processing workload
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

46
 Provisioned IOPS SSD(i01)Volumes
➢ Provisioned IOPS SSD volumes are backed by SSD, and is the highest
performance EBS storage option designed for critical, I/O intensive database
and application overloads.
➢ An i01 volume size ranges from 4GiB to 16TiB and this can be provisioned from
upto 100 to 32000 IOPS per volume.
➢ Any volume greater or equal to 640GiB size allows provisioning upto the 32000
IOPS maximum.(50 * 640GiB = 32000)

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

47
Caching
 What Is Caching?
➢ Cache is a specialized data store that
keeps frequently accessed data in
memory.
➢ It is one of the fastest medium to
access data quickly.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

49
 Why Use A Cache?
➢ To handle hot data. Hot data is the most frequently used data.
➢ To handle data spike.
➢ To reduce load on backend.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

50
 Characteristics Of Cache
➢ Persistence
➢ Scalability
➢ Data Model

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

51
 Amazon ElastiCache
➢ Amazon ElastiCache is a service that lets you
easily create and use cache clusters in the cloud.
➢ Memcached and Redis compatible.
➢ Managed, Scalable and Secure.
➢ Pay-as-you-go and flexible, so you can add
capacity when you need it.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

52
Memcached Cache
 Memcached Cache
➢ Memcached is general purpose distributed memory
caching system used to speed up the dynamic data
driven websites.
➢ Memcached is simple to use and multi thread.
➢ Memcached cluster can have a maximum 100 nodes in
a region.
➢ It supports both horizontal and vertical scaling.
➢ It is instantly fast and well established.
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

54
Redis Cache
 Redis - Cache
➢ Redis is an In-memory data structure store,
used as database, cache and message broker.
➢ It is single threaded and its read replicas are
synced asynchronously.
➢ Collection of 1 to 6 Redis nodes is called as
Shard.
➢ Backups are stored in S3 with a backup
period of 35 days.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

56
Design Solution For
Elasticity And
Scalability
 Design Solution For Elasticity And
Scalability
An application uses Elastic Load Balancer for elasticity
and Auto Scaling for scalability to improve the
performance.
➢ ELB distributes the traffic only to the healthy
instances.
➢ Auto Scaling scales in or out the instances as per
the available traffic.
➢ On Scaling ELB service updates the DNS record for
load balancer so that the new resources have their
registered IP addresses registered in DNS.
➢ ELB can be figured to use sticky session to bind a
users session to an instance and ensure that all
requests are sent to the same instance.
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

58
 Which Resources UseScaling Plans
Through simple and powerful user interface you can
build scaling plans for resource including below:
➢ Amazon EC2 Instance and Spot Fleets.
➢ Amazon ECS Task.
➢ Amazon DynamoDB tables and indexes.
➢ Amazon Aurora Replicas.

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

59
 Find Us

https://www.facebook.com/K21Academy

http://twitter.com/k21Academy

https://www.linkedin.com/company/k21academy

https://www.youtube.com/k21academy

www.k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved

 AWS Architect
Certification Training

Atul Kumar Aryan

Author & Cloud Expert AWS Expert
 Atul Kumar

⮚ 20 Years working on Oracle as Certified Cloud Architect

⮚ Help Customers Migrating to Cloud & Integrations
⮚ Author & Speaker
⮚ Helped thousands of individuals to learn Cloud

www.k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

2
2
 Aryan: AWS Expert

⮚ Working on AWS since 2013

⮚ Certified AWS Architect
⮚ Work for the Top Cloud Professional Services
provider in the world as AWS Solution Architect &
AWS DevOps Professionals.

www.k21academy.com/youtube © Copyright 2021| K21 Academy | All Rights Reserved

3
 Making Most Of Training

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

 Getting Help

support@k21academy.com

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

5
 Making Best of Your Training

➢ Live Interactive Session

➢ FREE Unlimited Retake for Next 1 Years
➢ FREE On-Job Support for next 1 Years
➢ Ask Questions & Make Session Interactive
➢ Add Yourself in WhatsApp Group
➢ Live Session Details http://k21academy.com/live
➢ Ask as Many Questions as you can & make session interactive
➢ Do Lots of Hands-On
➢ Learn at your own Pace & Look How Far You have come
➢ Share WIN

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

6
AWS SAA-C02
Module Agenda
 Agenda: Module
➢ Cloud Security ➢ AWS Security and Compliance Centre
➢ lAM ➢ Cost Optimization
➢ How lAM Secures your Resources ➢ Cost Optimization Design Principles
➢ Identity and Federation ➢ Cost Effective Resources
➢ Shared Responsibility Model ➢ Operationally — Excellent Architecture
➢ Shared Responsibility Model for Infrastructure Services ➢ AWS Services to understand operational health
➢ Shared Responsibility Model for Container Services ➢ Responding To Events Via AWS Services
➢ Shared Responsibility Model for Abstraction Services ➢ Best Practices For Operational Excellent Application
➢ Network Security Layer ➢ Tagging Categories
➢ Multilayer Architecture With Network Security ➢ Whitepapers Published By AWS
➢ AWS HSM and Its working
➢ AWS S3 Security
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

8
Secure Application And
Architecture
 What Is Cloud Security?
Protecting your critical data from theft, leakage and deletion is called cloud security

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

10
Implementing Of IAM
User
 Identity Access Management(IAM)
➢ lAM helps you to secure your resources by:
▪ Creating users and groups within Accounts
▪ Each group will have different set of roles to
control AWS resources
▪ Enable Multi Factor Authentication for each
user
▪ Enable password rotation policy for users

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

12
 How IAM Secure Your Resources?

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

13
 Identity Federation
➢ Using Federation you can access to your AWS Cloud
resources centrally
➢ You can use single sign-on (SSO) to access your AWS
accounts using credentials from your corporate
directory
➢ Federation uses open standards, such as Security
Assertion Markup Language (SAML), to exchange
identity and security information between an
Identity provider (ldP) and an application
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

14
Shared Responsibility
Model
 Shared Responsibility Model

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

16
 Shared Responsibility Model For Infrastructure
Services
➢ It mainly includes the infrastructure related services such as EC2, Amazon EBS, Auto scaling and VPC

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

17
 Shared Responsibility Model For Container Services
➢ It mainly includes the container services such as RDS, EMR and Elastic Beanstalk

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

18
 Shared Responsibility Model For Abstracted
Services
➢ It only includes high level storage, database and messaging services, such as Amazon S3, Glacier, DynamoDB and SQS

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

19
Network Security Layer
 Network Security Layer
➢ Well Architected Network Security Layers are-

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

21
 Well Architected Network Security Layer

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

22
 Multi Layer Architecture With Network Security

➢Here applications are hosted in different

instances in multiple available zones and
subnets
➢But there is no security layer to protect
your application from unauthorized access

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

23
 Multi Layer Architecture With Network Security
➢Having proper Security group in EC2
instances will protect your application and
provides access to desired client
➢Here all Web Servers, Application Servers
and Database Servers are hosted in
different EC2 instances
➢Web Server accepts request only from
ELB
➢App Server accepts request only from
Web Server
➢Database Server accept request only from
App Server

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

24
 Multi Layer Architecture With Network Security

Any direct request to Application Server or

Database server from client will be denied
by Security Group

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

25
 Multi Layer Architecture With Network Security

Summary of working in Multi Layer

Architecture With Network Security

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

26
AWS HSM
 AWS HSM

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

28
 Working Of AWS HSM
➢ Here user creates a CIoudHSM Cluster
➢ Clusters contains multiple HSM instances, spread
across multiple Availability Zones in a region
➢ HSM instances in a cluster are automatically
synchronized and load-balanced
➢ User gets dedicated, single-tenant access to each
HSM instance.
➢ Each HSM instance appears as a network resource in
your VPC. Adding and removing HSMs from Cluster is
done by AWS CloudHSM API (or on the command line
using the AWS CLI)
➢ After creating and initializing a CIoudHSM Cluster,
configure a client on EC2 instance that allows user’s
application to use the cluster over a secure,
authenticated network connection
www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

29
Securing The Data
 AWS S3 Security

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

31
 AWS Security And Compliance Center
➢https://aws.amazon.com/security/ has Answers to many security and privacy
questions
➢Security Whitepaper
➢Risk and compliance whitepaper
➢Security bulletins
➢Customer Penetration testing
➢Security Best Practices
➢Gives information on AWS lAM and AWS MFA

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

32
AWS Cost Optimized
Architecture
 What Is Cost Optimization?

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

34
 Cost Optimization : Design Principles

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

35
 Cost Effective Resources

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

36
Appropriate provisioning To Reduce Cost

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

37
Right Sizing: Right Type Of EC2 Instance

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

38
Compatibility For Resizing Instances

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

39
Purchasing Options
AWS provides different purchasing options model to fulfill your business requirement in
an effective way

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

40
Geographic Selection

www.k21academy.com/youtube © Copyright 2020 | K21 Academy | All Rights Reserved

41
Managed Services By AWS

www.k21academy.com/youtube © Copyright 2020 | K21 Academy | All Rights Reserved

42
 Use AWS S3 Storage

https://k21academy.com/testimonials © Copyright 2020 | K21 Academy | All Rights Reserved

43
Operationally Excellent
Architectures
 Operationally-Excellent Architecture

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

45
Operationally Excellent Architecture- Design

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

46
 How To Response To The Event?

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

47
 Response To The Event Via AWS Services

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

48
 Best Practices For Operational Excellent
Application

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

49
 Best Practices For Operational Excellent
Application

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

50
Tagging Categories
 Tagging Categories

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

52
 Technical Tag And Automation Tag
Technical tag contains: Automation tag contains:
➢ Name : Identify resource. ➢Date Time : Identify when application needs
➢ Application ID: Used to identify resource for to be started, stopped and deleted
an application ➢Opt in/out: Identify whether this needs to be
➢ Application Role: Describe function of included during automation of activities like
resource. E.g. Web Server App Server, etc. start, stop
➢ Cluster: Basically tells a configuration being ➢Security: Describe what security feature is
shared across a network required
➢ Environment: Distinguish DEV, TEST and PROD
environment
➢ Version: Tells application version

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

53
 Business Tag And Security Tag
Business tag contains: Security tag contains:
• Owner: Identify the owner of resource • Confidentiality: Identify specific data
• Cost center: Identify the business unit confidentially being supported for resources
• Customer: Describe who is target client • Compliance: Specifies what compliance is
• Project: Identify which project supports this required for this resource
resource

www.k21academy.com/youtube © Copyright 2021 | K21 Academy | All Rights Reserved

54
 Find Us

https://www.facebook.com/K21Academy

http://twitter.com/k21Academy

https://www.linkedin.com/company/k21academy

https://www.youtube.com/k21academy

www.k21academy.com/community © Copyright 2021 | K21 Academy | All Rights Reserved