5 CORE AWS SERVICES Overview AWS offers 3 foundational services, but there is a long list of other services and technologies that AWS offers to give its clients the best experience. The foundational services offered by AWS include: Compute Networking Storage Besides the above 3 foundational services are the following services that are equally key to AWS IAM Databases
5 CORE AWS SERVICES COMPUTE AWS offers the following flavors of compute: Virtual Machines (EC2) Containers Serverless
5 CORE AWS SERVICES What is compute? A compute in the cloud is a virtual package of the following: Hardware with the following resources CPU Memory Network card Operating System Windows Linux Ubuntu MacOS Etc.
5 CORE AWS SERVICES Compute Flavors Explained AWS offers the following flavors of compute: Virtual Machines (EC2) Virtual servers in the cloud Containers A package of an application and all dependent software/libraries Serverless A managed version of compute No provisioning, configuration and maintenance required of client You only worry about your application
5 CORE AWS SERVICES Key EC2 Features Auto Scaling Load balancing Autoscaling Auto scaling aims to 2 main things: Ensuring that there is sufficient server capacity to meet fluctuating demand Automating the provisioning of EC2 instances on demand To achieve the above goals, autoscaling does 2 things: Scales out Add more ec2 instances on demand Scales in Terminates some ec2 instances when triggered
5 CORE AWS SERVICES Key EC2 Features Autoscaling Load balancing Autoscaling Auto scaling aims to 2 main things: Ensuring that there is sufficient server capacity to meet fluctuating demand Automating the provisioning of EC2 instances on demand To achieve the above goals, autoscaling does 2 things: Scales out Add more ec2 instances on demand Scales in Terminates some ec2 instances when triggered
5 CORE AWS SERVICES Key EC2 Features Autoscaling Load balancing Load Balancer Load balancer aims at distributing customer traffic across available servers It distributes the traffic across the servers evenly to avoid one servers from being overburdened and fail. AWS offers 3 types of load balancers Application Load Balancer Network Load Balancer Gateway Load Balancer
5 CORE AWS SERVICES Application Load Balancer This is an external facing load balancer This load balancer receives traffic from the internet It unencrypts traffic Interprets traffic Distributes traffic It can also encrypt traffic Network Load Balancer This is an internal load balancer This load balancers distributes traffic across internal systems Unless configures for: It unencrypt It does not interpret It does not encrypt It just distributes – thus it is referred to as a pass through load balancer iii. Gateway Load Balancer This distributes traffic across third party appliances These are non-AWS built tools that clients bring into the cloud
5 CORE AWS SERVICES NETWORKING AWS Operates a private network from the public network (internet) to keep its client technologies secured. AWS further partitions this their global network into smaller units and assign to their clients as required. These smaller units of network is referred to as Virtual Private Cloud VPC. The VPC can be partitioned to even much smaller networks called subnets.
5 CORE AWS SERVICES Virtual Private Cloud This virtual network is apportioned to AWS accounts A client’s virtual network is private to his resources only unless he/she configures it otherwise Key VPC Features Internet Gateway Virtual Private Gateway VPC Peering Transit Gateway
5 CORE AWS SERVICES Internet Gateway This is a doorway between you Virtual Private Network and the public internet. The client of a company live in the public internet For them to access the applications in your network, they need pass through the door called the internet gateway Virtual Private Gateway This is a doorway between your Virtual Private Cloud and your datacenter Data center refers to your IT resources housed within your private network not in the cloud.
5 CORE AWS SERVICES VPC Peering For security reasons, clients might decide to house their resources is multiple private networks. The resources in these networks however, need to talk with each other. For this to be possible, the networks need to be connected to each other. VPC peering is one of the options which AWS has made available for peering the networks. Limitations of VPC Peering Does not support transitive peering. For every 2 VPCs to talk to each other, they must both have their own independent peering connection which can lead to a very complex meshwork in event of multiple VPCs.
5 CORE AWS SERVICES Transit Gateway Just like VPC peering, the purpose of the Transit Gateway is to enable connectivity between multiple VPC. However instead of individual stand alone connection, Transit Gateway serves as a centralized router via which traffic from various networks are routed to the appropriate destinations. It allows transitive routing
5 CORE AWS SERVICES STORAGE AWS offers 3 flavors of storage for your systems. These include: Block storage File storage Object Storage
5 CORE AWS SERVICES Block storage This storage type partitions your data and stores it in blocks AWS offers 2 options for blocks storage Instance Store Think about this like a physical hard drive installed on a computer hardware The life of the storage is tied to the life of the ec2 Elastic Block store (EBS) Think about this like a flash drive that is attached to a computer. The life of the storage is not tied to the life of the instance. Generally an EBS volume can be attached to only 1 server at a time – Like a flash drive can be attached to only 1 compute at a time Cannot be used for shared storage. Use cases : - Mainly for booting operating systems
5 CORE AWS SERVICES File Storage With this option, data is stored as a single piece of information in a folder AWS offers 2 options for file storage: Elastic File System (EFS) Compatible with Linux instances Windows File Server ( FSx ) Compatible with Windows instances Use Case : - Mainly used as shared storage for multiple servers and applications
5 CORE AWS SERVICES Object Storage This storage is designed is store any type of data including but not limited to: Audio Video Spreadsheet Files AWS offering for object storage is Simple Storage Services (S3) Use Case : - Data lake and media hosting
5 CORE AWS SERVICES Object Storage This storage is designed is store any type of data including but not limited to: Audio Video Spreadsheet Files AWS offering for object storage is Simple Storage Services (S3) Use Case : - Data lake and media hosting
5 CORE AWS SERVICES DATABASES There are primarily 2 database options Relational Database Stores data in tables Rows and columns Its called relational because it works by linking data in multiple tables together through the use of keys Primary and foreign keys Non-Relational Database Stores data but not in tables No rows and columns No relationships in this database type
5 CORE AWS SERVICES 5. IDENTITY AND ACCESS MANAGEMENT (IAM) IAM aims at addressing 2 main concepts: Authentication - Identity Authentication governs the following Who are you? Are you who say you are? Authentication aims at verifying the identity of the user or resource trying to access something Authorization – Access Management What are you allowed to? What are you allowed to access?
3 Tier Architecture Web-Tier This is where information is presented App-Tier This tier processes your request Database-Tier This tier stores the data