Podcast
Questions and Answers
Which of the following is NOT a type of IAM policy supported by AWS?
Which of the following is NOT a type of IAM policy supported by AWS?
What is the primary purpose of a NAT gateway in AWS?
What is the primary purpose of a NAT gateway in AWS?
Which instance type is specifically designed for general-purpose workloads in AWS EC2?
Which instance type is specifically designed for general-purpose workloads in AWS EC2?
What is the main function of an Internet Gateway in AWS?
What is the main function of an Internet Gateway in AWS?
Signup and view all the answers
Which of the following is a characteristic of Elastic Load Balancers in AWS?
Which of the following is a characteristic of Elastic Load Balancers in AWS?
Signup and view all the answers
Study Notes
Cloud Deployment Models
-
Public Cloud: Cloud services offered by third-party providers such as AWS, Google Cloud, and Azure. Provides scalability, flexibility and cost-effectiveness.
-
Private Cloud: Cloud services deployed within an organization's own data centers. Provides more control over data and security but requires significant investment.
-
Hybrid Cloud: Combines elements of both public and private clouds, allowing organizations to leverage the benefits of both. Offers flexibility and cost-optimization.
-
Multi-Cloud: Using multiple cloud service providers simultaneously. Provides greater flexibility and reduces vendor lock-in. Requires advanced management.
AWS Regions and Availability Zones
-
AWS Regions: Geographical locations where AWS data centers are located. Each region is designed to be isolated and independent from other regions.
-
Availability Zones: Distinct locations within a region which are physically separate. Each AZ has its own power, cooling, and networking infrastructure.
IAM Policy Types
-
User Policy: Grants permissions to individual users.
-
Group Policy: Applies to groups of users.
-
Role Policy: Defines permissions for AWS roles.
-
Resource Policy: Controls access to specific resources.
-
Service-Linked Role Policy: Grants permissions to AWS services acting on your behalf.
EC2 Instance Types
- General Purpose: Instances designed for a wide range of workloads.
- Compute Optimized: Instances that provide high CPU performance.
- Memory Optimized: Instances with large amounts of memory for demanding applications.
- Storage Optimized: Instances with large storage capacity.
- Accelerated Computing: Instances that feature GPUs, FPGAs, or other hardware accelerators.
- Specialized: Instances designed for specific purposes such as high-performance computing.
Steps Involved in Creating an AWS EC2 Instance
- Launch an EC2 Instance: In the AWS Management Console, navigate to the EC2 dashboard and click "Launch Instance."
- Choose an AMI: Select an Amazon Machine Image (AMI) for your instance.
- Select Instance Type: Choose an instance type based on your requirements.
- Configure Instance Details: Configure settings such as network, storage, and security groups.
- Add Storage: Choose a storage type and size for your instance.
- Tag Your Instance: Add tags for organization and identification.
- Configure Security Group: Define rules to allow inbound and outbound traffic to your instance.
- Review and Launch: Review the instance details and launch the instance.
- Connect to Your Instance: Use an SSH client to connect to the instance.
VPC
- Virtual Private Cloud (VPC): A private network within AWS that is logically isolated from other VPCs. It provides more control over your network environment.
Internet Gateway
- Internet Gateway: A gateway that connects your VPC to the internet. It allows your instances to communicate with the internet.
Bastion Host
- Bastion Host: A secure server located within a VPC that allows you to access other servers in the VPC securely. It acts as a gateway between the internet and the private network.
NAT Gateway
- NAT Gateway: A service that provides NAT (Network Address Translation) for your instances. It allows instances in your private subnet to access the internet without having public IP addresses.
Subnet
- Subnet: A range of IP addresses within a VPC. They are used to segment your VPC into smaller, more manageable networks.
Steps to Create a VPC Peering Connection
- Create a VPC: Create the first VPC in your account.
- Create a VPC: Create the second VPC in your account.
- Create a Peering Connection: In the AWS Management Console, navigate to the VPC dashboard and click "Peering Connections."
- Configure the Peering Connection: Provide information about the two VPCs involved.
- Accept the Connection: Accept the connection to establish the peering connection.
Elastic Load Balancers Types
- Application Load Balancer (ALB): Handles HTTP and HTTPS traffic based on application-level information. Features include traffic routing, load balancing, and health checking.
- Network Load Balancer (NLB): Handles TCP and UDP traffic based on the IP address and port. Provides low latency and high throughput.
- Classic Load Balancer: An older load balancer that distributes traffic across instances in a single Availability Zone.
- Global Accelerator: A service that improves latency and availability for applications with global users.
Amazon RDS Database Engines
- MySQL: Open-source relational database management system.
- PostgreSQL: Another open-source, object-relational database system.
- Oracle: A commercial relational database management system.
- SQL Server: A commercial relational database management system developed by Microsoft.
- MariaDB: A fork of the MySQL database.
- Amazon Aurora: AWS’s own relational database system, designed for high performance and scalability, compatible with MySQL and PostgreSQL.
Steps to Configure an Amazon S3 Bucket for Static Website Hosting
- Create an S3 Bucket: Create an S3 bucket in the AWS Management Console.
- Create an Index Document: Place an index.html (or other specified index document) in the root directory of your bucket.
- Configure Website Hosting: Go to the bucket's properties and select the "Static Website Hosting" option.
- Enable Website Hosting: Enable website hosting and specify the index document.
- Set Permissions: Set permissions on the bucket to allow public access.
- Upload Content: Upload your website files to the bucket.
- Get Your Bucket URL: Retrieve the bucket URL to access your website.
Amazon S3 Object-Level Storage Classes
- Standard: The most common storage class, it offers high availability and durability with an optimal balance between performance and cost.
- Standard-IA: Ideal for infrequently accessed data, offering lower cost than Standard, but with slightly higher retrieval cost.
- Reduced Redundancy Storage (RRS): A storage class with lower cost compared with Standard, suitable for data with lower durability requirements.
- Glacier: Designed for archival data, it offers the lowest cost but with higher retrieval latency.
- Glacier Deep Archive: The lowest cost option but with the longest retrieval time, good for data that is rarely accessed.
- Intelligent Tiering: A storage class that automatically selects the best pricing tier based on access patterns.
AWS Terminologies
- Bucket: A container that stores objects in Amazon S3.
- Key: A unique identifier for an object within a bucket.
- Versioning: A feature that allows you to create and store multiple versions of an object.
- Object: A file or binary data stored in an S3 bucket.
- Bucket Policy: A JSON document that defines access control policies for a specific S3 bucket.
Content Delivery Network (CDN)
- Definition: A network of servers distributed geographically which store copies of your content, enabling delivery to users with low latency.
-
Advantages:
- Improved Performance: Caching content closer to users reduces latency.
- Reduced Bandwidth Costs: Caching content reduces the load on your origin server.
- Increased Reliability: CDN servers provide redundancy and improve availability.
- Global Reach: CDN servers can deliver content to users worldwide.
- Enhanced Security: CDNs can help mitigate DDoS attacks.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Description
Explore the various cloud deployment models including public, private, hybrid, and multi-cloud approaches. Additionally, learn about AWS regions and availability zones and their roles in cloud infrastructure. This quiz is essential for understanding contemporary cloud computing concepts.