AWS Notes
1. Types of Cloud Computing
1.1. IaaS - Infrastructure as a Service
-
Provides building blocks for cloud IT.
-
Provides networking, computers, and data storage space.
-
Highest level of flexibility.
-
Easy to make parallels with traditional on-premise IT.
1.2. PaaS - Platform as a Service
-
No need to manage underlying infrastructure.
-
Focus on the deployment and management of your applications.
1.4. Cloud Computing Summary
-
The following Table summarizes on-premise vs the various types of cloud computing platforms:
Function On-Premise IaaS PaaS SaaS Applications
Managed by You
Managed by You
Managed by You
Managed by AWS
Data
Managed by You
Managed by You
Managed by You
Managed by AWS
Runtime
Managed by You
Managed by You
Managed by AWS
Managed by AWS
Middleware
Managed by You
Managed by You
Managed by AWS
Managed by AWS
OS
Managed by You
Managed by You
Managed by AWS
Managed by AWS
Virtualization
Managed by You
Managed by AWS
Managed by AWS
Managed by AWS
Servers
Managed by You
Managed by AWS
Managed by AWS
Managed by AWS
Storage
Managed by You
Managed by AWS
Managed by AWS
Managed by AWS
Networking
Managed by You
Managed by AWS
Managed by AWS
Managed by AWS
2. AWS Regions
-
Regions are world-wide.
-
Not all regions offer all AWS Services.
-
Pricing of AWS Services differs per region.
-
Each region consists of cluster of data centers named availability zones (AZ).
3. AWS Availability Zones
-
Each Availability Zone (AZ) is isolated from each other so that a disaster at one AZ will not affect any other.
-
Each AZ is connected to the other via high bandwidth ultra-low latency networking.
4. AWS Services
4.1. Network and Content Delivery Services
4.2. Compute Services
4.3. Container Services
4.3.1. ECS (Elastic Container Service)
-
Fully managed container orchestration service.
-
Launches your containers in your own Amazon VPC, allowing you to use your VPC security groups and network ACLs. No compute resources are shared with other customers.
-
You can also assign granular access permissions for each of your containers using IAM to restrict access to each service and what resources a container can access.
-
This high level of isolation helps you use ECS to build highly secure applications.
-
Run ECS clusters using
AWS Fargate, which is server-less compute for containers.-
removes the need to provision and manage servers.
-
lets you specify and pay for resources per application. and improves security through application isolation by design.
-
4.3.2. EKS (Elastic Container Service for Kubernetes)
-
Deploy, manage, and scale containerized applications using Kubernetes.
-
Since EKS is a Kubernetes-as-a-service (KaaS) offering for AWS, it can be run on any infrastructure, meaning that it’s much easier to run on-premises or with a different service provider.
-
If you’re looking to run container deployments across multiple infrastructure providers and need additional flexibility provided by Kubernetes, Amazon EKS offers more versatility.
4.4. Storage Services
4.4.1. S3 (Simple Storage Service)
-
Virtual disk to store objects such as files which are word docs, text files, pictures, movies.
-
Applications and DB are not stored here but in block based storage.