Introduction to
Amazon Web Services
Module 1
3
Units OVERVIEW : MODULE 01
1.1 Introduction to AWS Cloud
1.2 AWS Identity Access Management (IAM)
Introduction to Amazon Web Services
1.3 Hands-on Lab
Learning Outcomes
• Define Amazon Web Services (AWS) and its role in the cloud computing industry
• Understand the global infrastructure of AWS, including regions and availability zones
• Recognize fundamental concepts that underpin AWS Cloud
• Articulate the importance of AWS IAM in managing secure access to AWS resources
• Explain essential IAM concepts, such as users, groups, roles, policies, and permissions
• Understand the purpose and advantages of IAM groups for effective user management
• Grasp the concept of IAM roles and their application in delegating permissions
• Apply IAM knowledge to enhance security and access control within the AWS service
• Apply theoretical knowledge gained in the IAM module through practical, hands-on lab exercises.
• Develop confidence in utilizing IAM for secure access control within AWS
4
Lesson Learning Outcomes LESSON OVERVIEW
✓ Understand the concept of cloud
computing MODULE 1 INTRODUCTION TO AMAZON WEB SERVICES
✓ Define key characteristics of cloud
computing, such as on-demand self- Lesson 1.1 Introduction to AWS Cloud
service, broad network access, resource
pooling, rapid elasticity, and measured
service
✓ Explain an overview of Amazon Web • Cloud Definition
Services (AWS) and its role in providing • What is AWS Cloud
cloud computing services
✓ Understand about the global • AWS Global Infrastructure
infrastructure of AWS, including the
concept of regions and availability zones
5
1.1
Introduction to AWS Cloud
Amazon Web Services offers a broad set of global cloud-based products including computing, storage,
databases, analytics, networking, mobile, developer tools, management tools, IoT, security, and
enterprise applications: on-demand, available in seconds, with pay-as-you-go pricing
6
Introduction to AWS Cloud
Definition of Cloud Computing
According to Forrester, Cloud Computing is:
“A form of standardized IT-based capabilities, such as Internet-
based services, software, or IT infrastructure offered by a service provider
that is accessible via Internet Protocols from any computer, is
always available and scales automatically to adjust to demand, is pay-per-use,
has Web- or programmatic-based control interfaces, and enable full customer
self-service.”
7
Introduction to AWS Cloud
Definition of Cloud Computing
National Institute of Standards and Technology (NIST)
A model for enabling ubiquitous, convenient, on-demand network
access to a shared pool of configurable computing resources that
can be rapidly provisioned and released with minimal management
effort or service provider interaction. This cloud model comprises
five essential characteristics, three service, and four deployment
models.
8
Introduction to AWS Cloud
What is AWS Cloud
Amazon Web Services, Inc. is a subsidiary of Amazon that
provides on-demand cloud computing platforms and APIs to
individuals, companies, and governments, on a metered pay-
as-you-go basis. These cloud computing web services
provide distributed computing processing capacity and
software tools via AWS server farms.
9
Introduction to AWS Cloud
AWS Global Infrastructure
10
Introduction to AWS Cloud
AWS Global Infrastructure
What is AWS Availably Zone?
Think Availably Zone as a data center. An Availability Zone may have multiple
data centers but because they are close together, they count as 1 Availability
Zone.
What is the AWS Region?
The region is a separate geographic area. Each Region consists 2 or More
Availability Zones.
11
Introduction to AWS Cloud
AWS Global Infrastructure
Edge Locations
Edge Locations are part of AWS's CDN service, Amazon CloudFront. CloudFront
uses a network of edge locations to cache and deliver content to users with
lower latency by serving content from the edge location closest to the user.
12
Introduction to AWS Cloud
SUMMARY
✓ Key characteristics of cloud computing: on-demand self- ✓ Introduction to AWS regions and availability zones
service, broad network access, resource pooling, rapid ✓ Explanation of AWS's distributed data center model for
elasticity, and measured service reliability, scalability, and fault tolerance
✓ Understanding the concept of cloud computing and its
implications
✓ Overview of Amazon Web Services (AWS) and its role in the
cloud computing industry
✓ Exploration of various AWS services, covering computing
power, storage, databases, machine learning, analytics, and
more
13
Introduction to AWS Cloud
Resources
• [Link]
v14_fig1_295090956
• [Link]
• [Link]
14
Lesson Learning Outcomes LESSON OVERVIEW
✓ Articulate the role of AWS IAM in managing
access to AWS resources MODULE 1 INTRODUCTION TO AMAZON WEB SERVICES
✓ Explain key IAM concepts, including users,
groups, roles, policies, and permissions Lesson 1.2 AWS Identity Access Management (IAM)
✓ Identify and describe security features
offered by IAM, such as MFA and identity
federation
✓ Understand the purpose and benefits of
• IAM Overview
IAM groups for user management • IAM Features
✓ Grasp the concept of IAM roles and their
application in permission delegation • IAM User, Group and Role
✓ Create IAM policies and associate them • IAM Policy and Permission
with users, groups, and roles
✓ Apply IAM knowledge to enhance security
and access control within AWS services
15
1.2
AWS Identity Access Management (IAM)
AWS Identity and Access Management (IAM) is a web service provided by Amazon Web Services (AWS)
that allows you to manage access to AWS resources securely.
16
AWS Identity Access Management (IAM)
IAM Overview
AWS IAM
IAM allows you to manage users and their level of access to the AWS Console. It
is important to understand IAM and how it works. Both for the exam and for
administrating a company’s AWS account in real life.
17
AWS Identity Access Management (IAM)
IAM Features
AWS IAM offers the following features:
● User Management
● Group Management
● Role Management
● Policy Management
● Granular Permissions
● Access Key Rotation
● Multi-Factor Authentication (MFA)
● Identity Federation
18
AWS Identity Access Management (IAM)
IAM User, Group, Role and Policies
IAM Users IAM Groups IAM Policies IAM Roles
An Individual who has A Collection of IAM IAM Policies IAM Roles define set of
set of permissions is an users is called as Specifies those permissions for making
IAM User IAM Groups permissions that you AWS service Requests
want to acquire
Users have credentials to All the IAM users in a
make API calls in order to group can access the IAM Roles are basically
communicate with AWS permissions assigned to assigned to the
resources that group applications
19
AWS Identity Access Management (IAM)
IAM Policy and Permission
IAM policies in AWS are JSON documents that define permissions. These policies are attached to IAM identities (users, groups, or roles).
Policy Structure:
IAM policies have a JSON structure. A policy consists of one or more statements. Each statement has an "Effect" (Allow or Deny), "Action“ (the
AWS API actions), and "Resource" (the AWS resources affected by the actions).
20
AWS Identity Access Management (IAM)
IAM Policy and Permission
21
AWS Identity Access Management (IAM)
IAM Policy and Permission
22
AWS Identity Access Management (IAM)
SUMMARY
✓ Recognizing IAM as AWS's identity management service for ✓ Comprehending the advantages and purpose of IAM groups for
secure access control to AWS services and resources effective user management
✓ Key Concepts: fundamental IAM concepts, including users, ✓ Gaining hands-on experience in crafting IAM policies to define
groups, roles, policies, and permissions granular permissions
✓ Understanding IAM's security features, such as multi-factor ✓ Understanding how permissions are associated with IAM
authentication (MFA) and identity federation users, groups, and roles
✓ Exploring IAM's integration with other AWS services and its role
in enhancing security practices
✓ Understanding the lifecycle of IAM users, from creation to
deletion
23
AWS Identity Access Management (IAM)
Resources
• [Link]
• [Link]
24
1.3
Hands-On Lab
Introduction to AWS Identity and Access Management (IAM)
25
