Introduction to
Cloud - AWS
- Kumar Balasundaram
Before cloud
2
What is cloud ?
★ Data centers that are available to users over the internet.
★ Infrastructure as a service (IaaS):
○ Programmatic access to the basic building blocks of IT: compute, storage and networking.
★ Information and data is stored on physical or virtual servers, which are maintained and controlled by a
cloud computing provider.
○ Top Cloud providers
■ AWS(Amazon) - Mar 2006
■ Azure(Microsoft) - Feb 2010
■ GCP (Google) - Apr 2008
3
Cloud Evolution
4
Benefits of Cloud
❖ Speed to Market
❖ Reduced IT costs
❖ Scalability
❖ Availability
❖ Business Agility & Continuity
❖ Efficiency
❖ Disaster Recovery
❖ Loss Prevention
❖ Capacity
❖ Automatic Software Updates
5
AWS - Amazon Web Services
Officially launched in 2006
Amazon.com - all in - moved over to AWS in 2010
Market leader in cloud computing
AWS provides a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of
thousands of businesses in 190 countries around the world
Over 140 AWS services are available
6
AWS - Platform
AWS Global Infrastructure
Networking & Content Delivery
Compute
Storage
Databases
Migration
Security & Identity
Application Services
Management tool
Messaging
IOT
Machine Learning
Developer Tools
Analytics
Mobile
Robotics
7
AWS Global Infrastructure
Regions
● Geographical area
● Multiple, isolated locations known as Availability Zones (2 or more Availability Zones)
● ~20 regions
● North America, South America, Europe, Middle-East, Canada, Asia Pacific, China
● North America
○ Us-east-1 - Northern Virginia
○ Us-east-2 - Ohio
○ Us-west-1 - Northern California
○ Us-west-2 - Oregon
○ AWS GovCloud (US-West & US-east)
8
9
AWS Global Infrastructure
Availability Zones
● Physical data centers placed within few hundred miles
● High availability
● ~50 AZ’s
Edge Location
● Content Delivery Network endpoint for cloud front
● ~100 edge locations - most of the major cities
● Reduced latencies to end users
10
Networking - Virtual Private Cloud (VPC)
● Virtual network that user defines to deploy the assets
● Logically isolated from other virtual networks in the AWS Cloud
● Inter-region VPC Peering
● Default VPC
● Route table
○ set of rules, called routes, that are used to determine where network traffic is directed.
Subnets:
○ A subnet is a range of IP addresses in your VPC.
○ Public subnet to connect to the internet
○ Private subnet for resources that won't be connected to the internet.
○ Should be attached to a route table 11
VPC continued..
Security Groups:
- Virtual firewall
- Controls inbound and outbound traffic
- Default security group
- Each instance could belong to a
different set of security groups
Network access control lists (ACLs):
- Controls both inbound and outbound
traffic at the subnet level
12
Networking - Route 53 & CloudFront
Route 53
● Highly available and scalable Domain Name System (DNS) web service
● Domain registration
● DNS routing
● Health checking
CloudFront:
Globally-distributed network of proxy servers which cache content, such as web videos or other bulky
media, more locally to consumers, thus improving access speed for downloading the content
13
Compute
Elastic Compute Cloud - EC2
● A web service that provides secure, resizable compute capacity in the cloud.
● Designed to make web-scale computing easier for developers
● On-Demand (pay for compute capacity by the hour), Reserved & Spot Instances
Elastic Container Service - ECS
● A highly scalable, high-performance container orchestration service that supports Docker containers
● Run and scale containerized applications on AWS
14
Compute...
Elastic Kubernetes Service
● Deploy, manage, and scale containerized applications using Kubernetes on AWS
● Runs the Kubernetes management infrastructure for you across multiple AWS availability zones to eliminate a single
point of failure
● Applications running on any standard Kubernetes environment are fully compatible and can be easily migrated
AWS Batch
● Efficiently run hundreds of thousands of batch computing jobs on AWS
● Dynamically provisions the optimal quantity and type of compute resources (e.g., CPU or memory-optimized
instances) based on the volume and specific resource requirements of the batch jobs submitted
15
Compute...
AWS Fargate
● Compute engine for Amazon ECS that allows you to run containers without having to manage servers or clusters.
● With AWS Fargate, you no longer have to provision, configure, and scale clusters of virtual machines to run
containers
Elastic Beanstalk
● Easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP,
Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and Internet
Information Services (IIS)
● Automatically handles the deployment, from capacity provisioning, load balancing, and auto scaling to application
health monitoring
16
Compute...
AWS Lambda (Serverless)
run code without provisioning or managing servers
pay only for the compute time you consume—there is no charge when your code is not running
With Lambda, you can run code for virtually any type of application or backend service—all with zero administration
Automatic triggers ( Timed or Event based)
17
Load Balancers
A load balancer serves as the single point of contact for clients
Different types
Application Load Balancers
Network Load Balancers
Classic Load Balancers
18
Storage
Simple storage service (S3)
● Object storage service that offers industry-leading scalability, data availability, security, and
performance
● 11 9’s durability - 99.999999999%
● lifecycle configuration rules for objects
Amazon S3 Glacier
● Secure, durable, and extremely low-cost storage service for data archiving and long-term backup
19
Databases
Relational Database Service
● Web service that makes it easier to set up, operate, and scale a relational database in the AWS
Cloud
● High availability and durability
● Replication ( Cross - region)
● MySQL, Postgres, Maria, Microsoft SQL Server, Oracle
● RDS API’s
● Monitoring
20
Databases...
Aurora
● Fully managed relational database engine
● MySQL, Postgres
● Aurora can deliver up to five times the throughput of MySQL and up to three times the throughput of PostgreSQL
● Failover is automatic with no data loss
Aurora Serverless
● On-demand, auto-scaling configuration for Aurora (MySQL-compatible and PostgreSQL-compatible editions),
● Database will automatically start up, shut down, and scale capacity up or down based on your application's needs.
● Run your database in the cloud without managing any database instances.
● It's a simple, cost-effective option for infrequent, intermittent, or unpredictable workloads.
21
Databases...
Dynamo DB - No SQL
● Key-value and document database that delivers single-digit millisecond performance
● Fully managed, multiregion, multimaster, durable database
● Can handle more than 10 trillion requests per day
● Can support peaks of more than 20 million requests per second
Redshift
● Data warehousing system on AWS
● Amazon Redshift allows you to query data in your data lake without moving it or transforming it into a set
schema
22
Application Integration
Step Functions
● Lets you coordinate multiple AWS services into
serverless workflows
● Step wise results & processing on the results
● Orchestration of different components
Lambda/ECS based on steps
23
Application Integration
Simple Notification Service
● Highly available, durable, secure, fully managed pub/sub messaging service
● Publish push messages to a variety of endpoint types subscribed to one or many Amazon SNS topics
● Interface with other AWS services - Lambda, HTTP/S endpoints, SQS queues
Simple Queue Service
● Fully managed message queuing service
● Decouple and scale microservices, distributed systems, and serverless applications in the cloud.
● Send, store, and receive messages between software components at any volume, without losing messages
24
Security & Identity
IAM - Identity and Access Management
● Manage access to AWS services and resources securely
● Create and manage AWS users and groups
● Permissions to allow and deny access to AWS resources
● Multi-factor authentication for highly privileged users
● Provides applications federated access to the AWS Management Console and AWS service APIs
25
Security & Identity
WAF - Web Application Firewall
● Firewall helps protect your web applications from common web exploits
● Create custom rules that block common attack patterns, such as SQL injection or cross-site scripting
● A full-featured API that you can use to automate the creation, deployment, and maintenance of web security rules
● Can deploy on
○ Amazon CloudFront as part of your CDN solution,
○ Application Load Balancer (ALB) that fronts your web servers
○ origin servers running on EC2
○ Amazon API Gateway for your APIs
26
Management Tools
CloudWatch:
● A monitoring and observability service
● Provides you with data and actionable insights to monitor your applications
● Collects monitoring and operational data in the form of logs, metrics, and events & provides a unified view
● Alarms, Event triggers
CloudFormation
common language for you to describe and provision all the infrastructure resources in your cloud environment
CloudTrail
Service that enables governance, compliance, operational auditing, and risk auditing of your AWS account
27
Developer tools
AWS CodeBuild - fully managed continuous integration service that compiles source code, runs tests, and produces
software packages that are ready to deploy
AWS CodeCommit - a fully-managed source control service that hosts secure Git-based repositories
AWS CodeDeploy - a fully managed deployment service that automates software deployments to a variety of compute
services
AWS CodePipeline is a fully managed continuous delivery service that helps you automate your release pipelines for fast
and reliable application and infrastructure updates
AWS X-Ray - helps developers analyze and debug production, distributed applications, such as those built using a
microservices architecture
28
Time for discussion?
29

Introduction to AWS & Cloud Services

  • 1.
    Introduction to Cloud -AWS - Kumar Balasundaram
  • 2.
  • 3.
    What is cloud? ★ Data centers that are available to users over the internet. ★ Infrastructure as a service (IaaS): ○ Programmatic access to the basic building blocks of IT: compute, storage and networking. ★ Information and data is stored on physical or virtual servers, which are maintained and controlled by a cloud computing provider. ○ Top Cloud providers ■ AWS(Amazon) - Mar 2006 ■ Azure(Microsoft) - Feb 2010 ■ GCP (Google) - Apr 2008 3
  • 4.
  • 5.
    Benefits of Cloud ❖Speed to Market ❖ Reduced IT costs ❖ Scalability ❖ Availability ❖ Business Agility & Continuity ❖ Efficiency ❖ Disaster Recovery ❖ Loss Prevention ❖ Capacity ❖ Automatic Software Updates 5
  • 6.
    AWS - AmazonWeb Services Officially launched in 2006 Amazon.com - all in - moved over to AWS in 2010 Market leader in cloud computing AWS provides a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of thousands of businesses in 190 countries around the world Over 140 AWS services are available 6
  • 7.
    AWS - Platform AWSGlobal Infrastructure Networking & Content Delivery Compute Storage Databases Migration Security & Identity Application Services Management tool Messaging IOT Machine Learning Developer Tools Analytics Mobile Robotics 7
  • 8.
    AWS Global Infrastructure Regions ●Geographical area ● Multiple, isolated locations known as Availability Zones (2 or more Availability Zones) ● ~20 regions ● North America, South America, Europe, Middle-East, Canada, Asia Pacific, China ● North America ○ Us-east-1 - Northern Virginia ○ Us-east-2 - Ohio ○ Us-west-1 - Northern California ○ Us-west-2 - Oregon ○ AWS GovCloud (US-West & US-east) 8
  • 9.
  • 10.
    AWS Global Infrastructure AvailabilityZones ● Physical data centers placed within few hundred miles ● High availability ● ~50 AZ’s Edge Location ● Content Delivery Network endpoint for cloud front ● ~100 edge locations - most of the major cities ● Reduced latencies to end users 10
  • 11.
    Networking - VirtualPrivate Cloud (VPC) ● Virtual network that user defines to deploy the assets ● Logically isolated from other virtual networks in the AWS Cloud ● Inter-region VPC Peering ● Default VPC ● Route table ○ set of rules, called routes, that are used to determine where network traffic is directed. Subnets: ○ A subnet is a range of IP addresses in your VPC. ○ Public subnet to connect to the internet ○ Private subnet for resources that won't be connected to the internet. ○ Should be attached to a route table 11
  • 12.
    VPC continued.. Security Groups: -Virtual firewall - Controls inbound and outbound traffic - Default security group - Each instance could belong to a different set of security groups Network access control lists (ACLs): - Controls both inbound and outbound traffic at the subnet level 12
  • 13.
    Networking - Route53 & CloudFront Route 53 ● Highly available and scalable Domain Name System (DNS) web service ● Domain registration ● DNS routing ● Health checking CloudFront: Globally-distributed network of proxy servers which cache content, such as web videos or other bulky media, more locally to consumers, thus improving access speed for downloading the content 13
  • 14.
    Compute Elastic Compute Cloud- EC2 ● A web service that provides secure, resizable compute capacity in the cloud. ● Designed to make web-scale computing easier for developers ● On-Demand (pay for compute capacity by the hour), Reserved & Spot Instances Elastic Container Service - ECS ● A highly scalable, high-performance container orchestration service that supports Docker containers ● Run and scale containerized applications on AWS 14
  • 15.
    Compute... Elastic Kubernetes Service ●Deploy, manage, and scale containerized applications using Kubernetes on AWS ● Runs the Kubernetes management infrastructure for you across multiple AWS availability zones to eliminate a single point of failure ● Applications running on any standard Kubernetes environment are fully compatible and can be easily migrated AWS Batch ● Efficiently run hundreds of thousands of batch computing jobs on AWS ● Dynamically provisions the optimal quantity and type of compute resources (e.g., CPU or memory-optimized instances) based on the volume and specific resource requirements of the batch jobs submitted 15
  • 16.
    Compute... AWS Fargate ● Computeengine for Amazon ECS that allows you to run containers without having to manage servers or clusters. ● With AWS Fargate, you no longer have to provision, configure, and scale clusters of virtual machines to run containers Elastic Beanstalk ● Easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and Internet Information Services (IIS) ● Automatically handles the deployment, from capacity provisioning, load balancing, and auto scaling to application health monitoring 16
  • 17.
    Compute... AWS Lambda (Serverless) runcode without provisioning or managing servers pay only for the compute time you consume—there is no charge when your code is not running With Lambda, you can run code for virtually any type of application or backend service—all with zero administration Automatic triggers ( Timed or Event based) 17
  • 18.
    Load Balancers A loadbalancer serves as the single point of contact for clients Different types Application Load Balancers Network Load Balancers Classic Load Balancers 18
  • 19.
    Storage Simple storage service(S3) ● Object storage service that offers industry-leading scalability, data availability, security, and performance ● 11 9’s durability - 99.999999999% ● lifecycle configuration rules for objects Amazon S3 Glacier ● Secure, durable, and extremely low-cost storage service for data archiving and long-term backup 19
  • 20.
    Databases Relational Database Service ●Web service that makes it easier to set up, operate, and scale a relational database in the AWS Cloud ● High availability and durability ● Replication ( Cross - region) ● MySQL, Postgres, Maria, Microsoft SQL Server, Oracle ● RDS API’s ● Monitoring 20
  • 21.
    Databases... Aurora ● Fully managedrelational database engine ● MySQL, Postgres ● Aurora can deliver up to five times the throughput of MySQL and up to three times the throughput of PostgreSQL ● Failover is automatic with no data loss Aurora Serverless ● On-demand, auto-scaling configuration for Aurora (MySQL-compatible and PostgreSQL-compatible editions), ● Database will automatically start up, shut down, and scale capacity up or down based on your application's needs. ● Run your database in the cloud without managing any database instances. ● It's a simple, cost-effective option for infrequent, intermittent, or unpredictable workloads. 21
  • 22.
    Databases... Dynamo DB -No SQL ● Key-value and document database that delivers single-digit millisecond performance ● Fully managed, multiregion, multimaster, durable database ● Can handle more than 10 trillion requests per day ● Can support peaks of more than 20 million requests per second Redshift ● Data warehousing system on AWS ● Amazon Redshift allows you to query data in your data lake without moving it or transforming it into a set schema 22
  • 23.
    Application Integration Step Functions ●Lets you coordinate multiple AWS services into serverless workflows ● Step wise results & processing on the results ● Orchestration of different components Lambda/ECS based on steps 23
  • 24.
    Application Integration Simple NotificationService ● Highly available, durable, secure, fully managed pub/sub messaging service ● Publish push messages to a variety of endpoint types subscribed to one or many Amazon SNS topics ● Interface with other AWS services - Lambda, HTTP/S endpoints, SQS queues Simple Queue Service ● Fully managed message queuing service ● Decouple and scale microservices, distributed systems, and serverless applications in the cloud. ● Send, store, and receive messages between software components at any volume, without losing messages 24
  • 25.
    Security & Identity IAM- Identity and Access Management ● Manage access to AWS services and resources securely ● Create and manage AWS users and groups ● Permissions to allow and deny access to AWS resources ● Multi-factor authentication for highly privileged users ● Provides applications federated access to the AWS Management Console and AWS service APIs 25
  • 26.
    Security & Identity WAF- Web Application Firewall ● Firewall helps protect your web applications from common web exploits ● Create custom rules that block common attack patterns, such as SQL injection or cross-site scripting ● A full-featured API that you can use to automate the creation, deployment, and maintenance of web security rules ● Can deploy on ○ Amazon CloudFront as part of your CDN solution, ○ Application Load Balancer (ALB) that fronts your web servers ○ origin servers running on EC2 ○ Amazon API Gateway for your APIs 26
  • 27.
    Management Tools CloudWatch: ● Amonitoring and observability service ● Provides you with data and actionable insights to monitor your applications ● Collects monitoring and operational data in the form of logs, metrics, and events & provides a unified view ● Alarms, Event triggers CloudFormation common language for you to describe and provision all the infrastructure resources in your cloud environment CloudTrail Service that enables governance, compliance, operational auditing, and risk auditing of your AWS account 27
  • 28.
    Developer tools AWS CodeBuild- fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy AWS CodeCommit - a fully-managed source control service that hosts secure Git-based repositories AWS CodeDeploy - a fully managed deployment service that automates software deployments to a variety of compute services AWS CodePipeline is a fully managed continuous delivery service that helps you automate your release pipelines for fast and reliable application and infrastructure updates AWS X-Ray - helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture 28
  • 29.