CCP Notes Module-2
CCP Notes Module-2
Module-2
Dr. Bhupendra Singh
1
Amity School of Engineering & Technology
You can use Amazon EC2 to launch as many or as few virtual servers as
you need, configure security and networking, and manage storage.
2
Amity School of Engineering & Technology
Secure login information for your instances using key pairs (AWS stores
the public key, and you store the private key in a secure place)
3
Amity School of Engineering & Technology
Persistent storage volumes for your data using Amazon Elastic Block Store
(Amazon EBS), known as Amazon EBS volumes.
A firewall that enables you to specify the protocols, ports, and source IP
ranges that can reach your instances using security groups.
Metadata, known as tags, that you can create and assign to your Amazon
EC2 resources. 4
Amity School of Engineering & Technology
5
Amity School of Engineering & Technology
6
Amity School of Engineering & Technology
7
Amity School of Engineering & Technology
After you launch an instance, it looks like a traditional host, and you can
interact with it as you would any computer. You have complete control of
your instances; you can use sudo to run commands that require root
privileges.
8
Amity School of Engineering & Technology
Your instance may include local storage volumes, known as instance store
volumes, which you can configure at launch time with block device
mapping. For more information, see Block device mapping. After these
volumes have been added to and mapped on your instance, they are
available for you to mount and use. If your instance fails, or if your
instance is stopped or terminated, the data on these volumes is lost;
therefore, these volumes are best used for temporary data. To keep
important data safe, you should use a replication strategy across multiple
instances, or store your persistent data in Amazon S3 or Amazon EBS
volumes.
9
Amity School of Engineering & Technology
Review the rules in your security groups regularly, and ensure that you
apply the principle of least privilege—only open up permissions that you
require. You can also create different security groups to deal with instances
that have different security requirements.
10
Amity School of Engineering & Technology
11
Amity School of Engineering & Technology
Stop an instance
You are not charged for additional instance usage while the instance is in a
stopped state. A minimum of one minute is charged for every transition
from a stopped state to a running state. If the instance type was changed
while the instance was stopped, you will be charged the rate for the new
instance type after the instance is started. All of the associated Amazon
EBS usage of your instance, including root device usage, is billed using 12
typical Amazon Elastic Block Store (EBS) prices.
Amity School of Engineering & Technology
14
Amity School of Engineering & Technology
15
Amity School of Engineering & Technology
All AMIs are categorized as either backed by Amazon EBS, which means
that the root device for an instance launched from the AMI is an Amazon
EBS volume, or backed by instance store, which means that the root device
for an instance launched from the AMI is an instance store volume created
from a template stored in Amazon Simple Storage Service (S3).
The description of an AMI indicates the type of root device (either ebs or
instance store). This is important because there are significant differences
in what you can do with each type of AMI.
You can deregister an AMI when you have finished using it. After you
deregister an AMI, you can't use it to launch new instances. Existing
instances launched from the AMI are not affected. Therefore, if you are
also finished with the instances launched from these AMIs, you should 16
terminate them.
Amity School of Engineering & Technology
EBS volumes are replicated within an Availability Zone (AZ) and can
easily scale to petabytes of data. Also, you can use EBS Snapshots with
automated lifecycle policies to back up your volumes in Amazon S3, while
ensuring geographic protection of your data and business continuity.
17
Amity School of Engineering & Technology
18
Amity School of Engineering & Technology
19
Amity School of Engineering & Technology
Easy to Use: Amazon EBS volumes are easy to create, use, encrypt, and
protect. Elastic Volumes capability allows you to increase storage, tune
performance up and down, and change volume types without any
disruption to your workloads. EBS Snapshots allow you to easily take
backups of your volumes for geographic protection of your data.
20
Amity School of Engineering & Technology
You can use EBS volumes as primary storage for data that requires
frequent updates, such as the system drive for an instance or storage for a
database application. You can also use them for throughput-intensive
applications that perform continuous disk scans. EBS volumes persist
independently from the running life of an EC2 instance
21
Amity School of Engineering & Technology
This volume type is suitable for the most demanding I/O intensive,
transactional workloads and large relational, EMR and Hadoop workloads,
etc. By default, IOPS SSD supports 30 IOPS/GB means 10GB volume will
give 300 IOPS. Its storage capacity of one volume ranges from 10GB to
1TB. The cost of one volume is $0.125 per GB for one month for 22
provisioned storage and $0.10 per provisioned IOPS for one month.
Amity School of Engineering & Technology
23
Amity School of Engineering & Technology
AWS Snapshots
Amazon EBS snapshots provide long-term data protection and durability
for data held on EBS volumes and can also be used for replicating data
across various AWS regions as well as starting new Amazon EBS
volumes. The AWS architecture ensures that these copy-on-write
snapshots contain all the incremental changes as well as all the metadata
required within the same snapshot itself. During an EBS snapshot creation
process, snapshot data is transferred in to Amazon S3 storage buckets
(managed by AWS & Not visible to the end user) as an automated
background task.
AWS Snapshots
Disaster recovery: Amazon EBS snapshots can be leveraged to enable
data replication to various other AWS regions in order to provide a DR
capability for the Amazon EC2 instances using the snapshot copy
capability.
25
Amity School of Engineering & Technology
You can deploy applications without ever having to use elastic beanstalk
but that would mean having to choose the appropriate service from the vast
array of services offered by AWS, manually provisioning these AWS
resources, and stitching them up together to form a complete web
application. Elastic Beanstalk abstracts the underlying configuration work
and allows you as a user to focus on more pressing matters.
26
Amity School of Engineering & Technology
27
Amity School of Engineering & Technology
28
Amity School of Engineering & Technology
30
Amity School of Engineering & Technology
Elastic Beanstalk can integrate with databases such as Mysql, Oracle, and
Microsoft SQL Server.
Access control via AWS Identity and Access Management and built-in
security features like SSL/TLS encryption are provided by Elastic
Beanstalk (IAM).
31
Amity School of Engineering & Technology
Elastic Load Balancing: All the web requests to the application are not
directly relayed to application instances. They first hit the Elastic Load
Balancer (ELB), which, as the name suggests, balances the load across all
the application instances.
33
Amity School of Engineering & Technology
Impossible to Outgrow: AWS claims that since Elastic Beanstalk uses the
Auto Scaling feature it can, in theory, handle any amount of internet
traffic.
34
Amity School of Engineering & Technology
AWS LAMBDA
Play the video
35
Amity School of Engineering & Technology
This means customers of all sizes and industries can use it to store and protect
any amount of data for a range of use cases, such as data lakes, websites,
mobile applications, backup and restore, archive, enterprise applications, IoT
devices, and big data analytics.
36
Amity School of Engineering & Technology
37
Amity School of Engineering & Technology
S3 Intelligent- Tiering is most suitable for data with access needs that are either
changing or unknown. S3 Intelligent-Tiering has four different access tiers:
Frequent Access, Infrequent Access (IA), Archive and Deep Archive. Data is
automatically moved to the most inexpensive storage tier according to customer
access patterns.
S3 Standard- IA offers a lower storage price for data that is needed less often
but that must be quickly accessible. This tier can be used for backups, DR and
long-term data storage. 38
Amity School of Engineering & Technology
S3 Glacier is the least expensive storage option in S3, but it is strictly designed
for archival storage because it takes longer to access the data. Glacier offers
variable retrieval rates that range from minutes to hours.
S3 Glacier Deep Archive has the lowest price option for S3 storage. S3
Glacier Deep Archive is designed to retain data that only needs to be accessed
once or twice a year.
S3 buckets are kept private from public access by default, but an administrator
can choose to make them publicly accessible. A user can also encrypt data prior
to storage. Rights may be specified for individual users, who will then need
approved AWS credentials to download or access a file in S3. 40
Amity School of Engineering & Technology
Competitor services
42
Amity School of Engineering & Technology
Assignment
Clearly bring the difference between :
A. EBS and S3
43
Amity School of Engineering & Technology
It can handle the varying load of your application traffic in a single Availability
Zone or across multiple Availability Zones.
Elastic Load Balancing offers four types of load balancers that all feature the
high availability, automatic scaling, and robust security necessary to make your
applications fault tolerant.
44
Amity School of Engineering & Technology
45
Amity School of Engineering & Technology
AWS Management Console— Provides a web interface that you can use to
access Elastic Load Balancing.
AWS Command Line Interface (AWS CLI) — Provides commands for a broad
set of AWS services, including Elastic Load Balancing. The AWS CLI is
supported on Windows, macOS, and Linux. For more information, see AWS
Command Line Interface.
AWS SDKs — Provide language-specific APIs and take care of many of the
connection details, such as calculating signatures, handling request retries, and
error handling. For more information, see AWS SDKs.
46
Amity School of Engineering & Technology
47
Amity School of Engineering & Technology
Improve hybrid cloud network scalability : Load balance across AWS and
on-premises resources using a single load balancer.
48
Amity School of Engineering & Technology
You can add and remove compute resources from your load balancer as your
needs change, without disrupting the overall flow of requests to your
applications.
49
Amity School of Engineering & Technology
CloudWatch
Amazon CloudWatch is a monitoring and observability service built for
DevOps engineers, developers, site reliability engineers (SREs), and IT
managers. CloudWatch provides you with data and actionable insights to
monitor your applications, respond to system-wide performance changes,
optimize resource utilization, and get a unified view of operational health.
50
Amity School of Engineering & Technology
CloudWatch
51
Amity School of Engineering & Technology
Amazon CloudWatch
52
Amity School of Engineering & Technology
Amazon CloudWatch
53
Amity School of Engineering & Technology
Amazon CloudWatch
54
Amity School of Engineering & Technology
CloudWatch Working
55
Amity School of Engineering & Technology
Amazon CloudWatch
56
Amity School of Engineering & Technology
CloudWatch Working
Amazon CloudWatch is basically a metrics repository. An AWS service—such
as Amazon EC2—puts metrics into the repository, and you retrieve statistics
based on those metrics. If you put your own custom metrics into the repository,
you can retrieve statistics on these metrics as well.
You can use metrics to calculate statistics and then present the data graphically
in the CloudWatch console.
You can configure alarm actions to stop, start, or terminate an Amazon EC2
instance when certain criteria are met. In addition, you can create alarms that
initiate Amazon EC2 Auto Scaling and Amazon Simple Notification Service
(Amazon SNS) actions on your behalf.
AWS Cloud computing resources are housed in highly available data center
facilities. To provide additional scalability and reliability, each data center
facility is located in a specific geographical area, known as a Region.
57
Amity School of Engineering & Technology
CloudWatch Working
Each Region is designed to be completely isolated from the other Regions, to
achieve the greatest possible failure isolation and stability. Metrics are stored
separately in Regions, but you can use CloudWatch cross-Region functionality
to aggregate statistics from different Regions.
For Group by, choose Usage Type. You can also group your results by other
categories, such as the following:
API Operation – See which API operations generated the most costs.
Like other cloud services, the paid tier follows a pay-as-you-go pricing
structure that is billed monthly. Pricing is based on the quantity of metrics,
APIs and metric streams used.
59
Amity School of Engineering & Technology
CloudWatch-Benefits
Observability on a single platform across applications and infrastructure.
60
Amity School of Engineering & Technology
to help fix operational issues and optimize performance using log analytics
61
Amity School of Engineering & Technology
Challenges of CloudWatch
costs more than most third-party monitoring and log tools.
many standard AWS metrics cannot be seen in units smaller than one-minute
intervals.
62
Amity School of Engineering & Technology
Amazon CloudWatch
63
Amity School of Engineering & Technology
Amazon CloudWatch
64
Amity School of Engineering & Technology
Amazon CloudWatch
65
Amity School of Engineering & Technology
66
Amity School of Engineering & Technology
67
Amity School of Engineering & Technology
You can simply upload your code and Elastic Beanstalk automatically handles
the deployment, from capacity provisioning, load balancing, auto-scaling to
application health monitoring.
68
Amity School of Engineering & Technology
69