Dit is een samenvatting van het cursus “Engineering Cloud Solution” aan de Hogeschool Utrecht, maar kan ook gebruikt worden om te certificeren voor AWS Cloud Practitioner.
Na het maken/doornemen van deze samenvatting heb ik mij gecertificeerd voor AWS Cloud Practitioner met een score van 880.
Copyright: Delen zonder voorgaande
toestemming is niet toegestaan
,Inhoudsopgave
Het AWS-certificeringstraject .................................................................................................................. 8
Wat is cloud computing? ......................................................................................................................... 8
De implementatiemodellen van de cloud ............................................................................................... 9
Private Cloud: ...................................................................................................................................... 9
Public Cloud: ........................................................................................................................................ 9
Hybrid cloud: ....................................................................................................................................... 9
De vijf kenmerken van cloud computing................................................................................................. 9
Six Advantages of Cloud Computing ..................................................................................................... 10
Problemen die worden opgelost door de Cloud ................................................................................... 10
Soorten Cloud Computing ..................................................................................................................... 10
Voorbeelden van Cloud Computing Types ............................................................................................ 11
Prijzen van de cloud – een snel overzicht ............................................................................................. 11
AWS Global (wereldwijde) infrastructuur ............................................................................................. 12
AWS Regions...................................................................................................................................... 12
AWS Availability Zones ...................................................................................................................... 13
Rondleiding door de AWS-console .................................................................................................... 14
Shared Responsibility Model Diagram .................................................................................................. 14
IAM ........................................................................................................................................................ 15
IAM: gebruikers en groepen .............................................................................................................. 15
IAM: Permissies ................................................................................................................................. 15
IAM – Password Policy ...................................................................................................................... 16
Multi Factor Authentication - MFA ................................................................................................... 16
MFA device opties in AWS................................................................................................................. 16
Hoe kunnen gebruikers toegang krijgen tot AWS? ........................................................................... 17
Voorbeeld van (Fake) Access Keys .................................................................................................... 17
IAM Roles voor Services .................................................................................................................... 17
IAM Security Tools ............................................................................................................................. 17
IAM Guidelines & Best Practices ....................................................................................................... 18
Shared Responsibility Model for IAM................................................................................................ 18
IAM – Samenvatting .......................................................................................................................... 19
EC2 Section ............................................................................................................................................ 19
EC2 sizing & configuration opties ...................................................................................................... 19
EC2 instance types: voorbeeld .......................................................................................................... 20
1
, Introduction to Security Groups ........................................................................................................ 20
Security Groups Deeper Dive ............................................................................................................ 20
Security Groups Diagram................................................................................................................... 21
Classic Ports (herhaling, maar handig) .............................................................................................. 21
EC2 Instance Connect ........................................................................................................................ 21
EC2 Instances Purchasing Options .................................................................................................... 21
EC2 On Demand................................................................................................................................. 22
EC2 Reserved Instances ..................................................................................................................... 22
EC2 Spot Instances ........................................................................................................................... 22
EC2 Dedicated Hosts ......................................................................................................................... 23
EC2 Dedicated Instances ................................................................................................................... 23
Shared Responsibility Model for EC2 ................................................................................................ 23
EC2-sectie – Samenvatting ................................................................................................................ 24
EC2 Instance Storage Section ............................................................................................................ 24
Wat is een EBS Volume?.................................................................................................................... 24
EBS-volume........................................................................................................................................ 24
AMI Overzicht .................................................................................................................................... 25
EC2 Instance Store............................................................................................................................. 26
EFS - Elastic File System ......................................................................................................................... 26
EBS versus EFS ................................................................................................................................... 26
Shared Responsibility Model voor EC2 Storage ................................................................................ 27
Elastic Load Balancing & Auto Scaling Groups Section ......................................................................... 27
Scalability & High Availability ............................................................................................................ 27
Verticale scalability............................................................................................................................ 28
Horizontale scalability ....................................................................................................................... 28
High Availability ................................................................................................................................. 28
High Availability & Scalability voor EC2 ............................................................................................. 28
Scalability versus Elasticity (versus Agility) ....................................................................................... 29
Wat is Load Balancing? ...................................................................................................................... 29
Waarom een load balancer gebruiken? ............................................................................................ 29
Waarom een Elastic Load Balancer gebruiken? ................................................................................ 29
Wat is een Auto Scaling Group? ........................................................................................................ 30
Auto Scaling Group in AWS ............................................................................................................... 30
Auto Scaling Group in AWS met Load Balancer ................................................................................ 30
Amazon S3 Section ................................................................................................................................ 31
Section introduction .......................................................................................................................... 31
2
, Amazon S3 Overzicht – Buckets ........................................................................................................ 31
Amazon S3 Overzicht – Objecten ...................................................................................................... 31
S3 Security ......................................................................................................................................... 32
Voorbeeld: Public Access - Het gebruik van Bucket Policy ............................................................... 32
Voorbeeld: Gebruikerstoegang tot S3 – IAM permissies .................................................................. 32
Voorbeeld: EC2 instance access – Het gebruik van IAM Roles.......................................................... 33
Geavanceerd: Cross-Account Access – Het gebruik van Bucket Policy ............................................ 33
S3 Bucket Policies .............................................................................................................................. 33
Amazon S3 – Versioning .................................................................................................................... 34
S3 Access Logs ................................................................................................................................... 34
S3 Replication (CRR & SRR)................................................................................................................ 34
S3 Durability en Availability ............................................................................................................... 35
S3 Standard – General Purposes ....................................................................................................... 35
S3 Standard – Infrequent Access (IA) ................................................................................................ 35
S3 Intelligent-Tiering ......................................................................................................................... 35
S3 One Zone - Infrequent Access (IA) ................................................................................................ 36
Amazon Glacier & Glacier Deep Archive ........................................................................................... 36
S3 Storage Classes Comparison (vergelijking) ................................................................................... 36
Shared Responsibility Model for S3 .................................................................................................. 37
Snowball ............................................................................................................................................ 37
Snowball Process ............................................................................................................................... 37
Snowball Edge ................................................................................................................................... 38
AWS Storage Cloud Native Options................................................................................................... 38
Databases & Shared Responsibility in AWS .......................................................................................... 39
AWS RDS Overzicht............................................................................................................................ 39
Voordeel RDS versus deploying DB op EC2 ....................................................................................... 39
RDS Solution Architectuur ................................................................................................................. 40
Amazon Aurora.................................................................................................................................. 40
Amazon ElastiCache Overzicht .......................................................................................................... 40
ElastiCache Solution Architectuur – Cache ....................................................................................... 41
DynamoDB ......................................................................................................................................... 41
DynamoDB – type data...................................................................................................................... 41
Redshift Overview ............................................................................................................................. 42
Amazon EMR ..................................................................................................................................... 42
Athena Overzicht ............................................................................................................................... 42
AWS Glue ........................................................................................................................................... 43
3
, DMS – Database Migration Service ................................................................................................... 43
Databases & Analytics samenvatting in AWS .................................................................................... 43
Containers ............................................................................................................................................. 44
Docker versus Virtual Machines ........................................................................................................ 44
ECS ..................................................................................................................................................... 44
Fargate............................................................................................................................................... 44
ECR..................................................................................................................................................... 44
Wat is serverless? .............................................................................................................................. 45
Voordelen van AWS Lambda ............................................................................................................. 46
AWS Lambda language support ........................................................................................................ 46
Voorbeeld: Serverless Thumbnail creation ....................................................................................... 46
Voorbeeld: Serverless CRON job ....................................................................................................... 46
AWS Lambda Pricing: voorbeeld ....................................................................................................... 47
AWS Batch ......................................................................................................................................... 47
AWS Batch - Vereenvoudigd voorbeeld ............................................................................................ 47
Amazon Lightsail................................................................................................................................ 48
Deploying and Managing Infrastructure at Scale .................................................................................. 48
Wat is CloudFormation...................................................................................................................... 48
Voordelen van AWS CloudFormation................................................................................................ 48
Typical architecture: Web App 3-tier ................................................................................................ 49
AWS Elastic Beanstalk Overzicht ....................................................................................................... 50
Elastic Beanstalk ................................................................................................................................ 50
AWS CodeDeploy............................................................................................................................... 50
AWS Systems Manager (SSM) ........................................................................................................... 51
Hoe Systems Manager werkt ............................................................................................................ 51
AWS OpsWorks.................................................................................................................................. 51
OpsWorks architectuur ..................................................................................................................... 52
Global Infrastructure ............................................................................................................................. 52
Global Applications in AWS ............................................................................................................... 53
Amazon Route 53 Overzicht .............................................................................................................. 53
Route 53 – Diagram for A Record ...................................................................................................... 53
Route 53 Routing Policies .................................................................................................................. 54
AWS CloudFront ................................................................................................................................ 54
CloudFront - Origins .......................................................................................................................... 55
CloudFront at a high level ................................................................................................................. 55
CloudFront – S3 as an Origin ............................................................................................................. 55
4
, S3 Transfer Acceleration (Overdrachtversnelling ............................................................................. 56
AWS Global Accelerator .................................................................................................................... 56
AWS Global Accelerator vs CloudFront ............................................................................................. 57
Cloud Integration............................................................................................................................... 57
Amazon SQS – Simple Queue Service – Wat is een queue?.............................................................. 58
SQS om te decouplen tussen application tiers .................................................................................. 58
Amazon SNS....................................................................................................................................... 59
Cloud Monitoring .................................................................................................................................. 59
Amazon CloudWatch Metrics ............................................................................................................ 59
Voorbeeld: CloudWatch Billing metric (us-east-1) ............................................................................ 60
Belangrijke Metrics ............................................................................................................................ 60
Amazon CloudWatch Alarms ............................................................................................................. 60
Amazon CloudWatch Logs ................................................................................................................. 61
CloudWatch Logs voor EC2................................................................................................................ 61
Amazon CloudWatch Event ............................................................................................................... 61
Amazon EventBridge ......................................................................................................................... 62
AWS CloudTrail .................................................................................................................................. 62
AWS X-Ray ......................................................................................................................................... 63
AWS X-Ray voordelen ........................................................................................................................ 63
AWS Status - Service Health Dashboard ........................................................................................... 63
AWS Personal Health Dashboard ...................................................................................................... 64
Monitoring samenvatting (in het kort).............................................................................................. 64
VPC ........................................................................................................................................................ 65
VPC – Crash Course ........................................................................................................................... 65
VPC & Subnets Primer ....................................................................................................................... 65
VPC Diagram ...................................................................................................................................... 65
Internet Gateway en NAT Gateways ................................................................................................. 66
Network ACLs vs Security Groups ..................................................................................................... 66
VPC Flow Logs .................................................................................................................................... 66
VPC Peering ....................................................................................................................................... 67
Site to site VPN en Direct Connect .................................................................................................... 67
Site-to-Site VPN ................................................................................................................................. 67
Transit Gateway................................................................................................................................. 68
Security & Compliance .......................................................................................................................... 68
AWS Shared Responsibility Model .................................................................................................... 68
Voorbeeld voor RDS (verantwoordelijkheden) ................................................................................ 68
, Networking Costs in AWS per GB – Vereenvoudigd ......................................................................... 81
Billing and Costing Tools.................................................................................................................... 81
AWS Total Cost of Ownership (TCO) Calculators .............................................................................. 82
Cost Allocation Tags .......................................................................................................................... 82
Cost and Usage Reports .................................................................................................................... 82
Cost Explorer ..................................................................................................................................... 83
AWS Budgets ..................................................................................................................................... 83
Trusted Advisor ................................................................................................................................. 83
AWS Basic Support Plan .................................................................................................................... 84
AWS Developer Support Plan ............................................................................................................ 84
AWS Business Support Plan (24/7) .................................................................................................... 84
AWS Enterprise Support Plan (24/7) ................................................................................................. 85
AWS Architecting & Ecosystem Section ................................................................................................ 85
Well Architected Framework General Guiding Principles ................................................................. 85
AWS Cloud Best Practices – Design Principles .................................................................................. 85
Well Architected Framework 5 Pillars ............................................................................................... 86
Operational Excellence ...................................................................................................................... 86
Security .............................................................................................................................................. 87
Reliability ........................................................................................................................................... 88
Performance Efficiency...................................................................................................................... 89
Cost Optimization .............................................................................................................................. 89
AWS Marketplace .............................................................................................................................. 90
AWS Professional Services & Partner Network ................................................................................. 90
Tip & tricks voor het examen ............................................................................................................ 91
7
,Samevatting AWS - AWS-gecertificeerde cloud Practitioner cursus CLF-C01
Het AWS-certificeringstraject
Wat is cloud computing?
• Cloud computing is on-demand delivery (de levering op aanvraag ) van compute power
(rekenkracht), databas storage, applicaties en andere IT resources (bronnen).
• Via een cloudserviceplatform met pay-as-you-go pricing
• U kunt precies het juiste type en de juiste grootte van computer resources leveren die je
nodig hebt
• Je hebt vrijwel onmiddellijk toegang tot resources (wanneer dat nodig is)
• Eenvoudige manier om toegang te krijgen tot servers, opslag, databases en een reeks
applicatie services
* Amazon Web Services bezit en onderhoudt de op het netwerk aangesloten hardware vereist voor
deze applicatie services, terwijl je voorziet en gebruikt wat je nodig hebt via een webapplicatie
8
, De implementatiemodellen van de cloud
Private Cloud:
• Clouddiensten die worden gebruikt door een enkele
organisatie, niet blootgesteld aan het publiek.
• Volledige controle
• Beveiliging voor gevoelige toepassingen
• Ontmoet specifieke business-behoeften
Public Cloud:
• Cloud resources eigendom dat wordt beheerd door
een derde partij cloud service provider geleverd via
het internet.
• Zes voordelen van gebruik Cloud Computing
Hybrid cloud:
• Laat sommige servers in on-premises en breid enkele
mogelijkheden uit naar de Cloud
• Controle over gevoelig activa in jouw private
infrastructuur
• Flexibiliteit en kosteneffectiviteit van de Public Cloud.
De vijf kenmerken van cloud computing
• On-demand self service:
o Gebruikers kunnen middelen ter beschikking stellen en deze gebruiken zonder
menselijke tussenkomst van de serviceprovider
• Broad network access:
o Middelen die beschikbaar zijn via het netwerk en toegankelijk zijn voor verschillende
clientplatforms
• Multi-tenancy and resource pooling:
o Meerdere klanten kunnen dezelfde infrastructuur en applicaties delen met
beveiliging en privacy
o Meerdere klanten worden bediend met dezelfde fysieke resources
• Rapid elasticity and scalability:
o Automatisch en snel middelen verwerven en/of verwijderen wanneer dat nodig is
Snel en eenvoudig schaalbaar op basis van (aan)vraag, on-demand.
• Measured service:
o Het gebruik wordt gemeten, gebruikers betalen correct voor wat ze hebben verbruikt
9
Voordelen van het kopen van samenvattingen bij Stuvia op een rij:
Verzekerd van kwaliteit door reviews
Stuvia-klanten hebben meer dan 700.000 samenvattingen beoordeeld. Zo weet je zeker dat je de beste documenten koopt!
Snel en makkelijk kopen
Je betaalt supersnel en eenmalig met iDeal, creditcard of Stuvia-tegoed voor de samenvatting. Zonder lidmaatschap.
Focus op de essentie
Samenvattingen worden geschreven voor en door anderen. Daarom zijn de samenvattingen altijd betrouwbaar en actueel. Zo kom je snel tot de kern!
Veelgestelde vragen
Wat krijg ik als ik dit document koop?
Je krijgt een PDF, die direct beschikbaar is na je aankoop. Het gekochte document is altijd, overal en oneindig toegankelijk via je profiel.
Tevredenheidsgarantie: hoe werkt dat?
Onze tevredenheidsgarantie zorgt ervoor dat je altijd een studiedocument vindt dat goed bij je past. Je vult een formulier in en onze klantenservice regelt de rest.
Van wie koop ik deze samenvatting?
Stuvia is een marktplaats, je koop dit document dus niet van ons, maar van verkoper qamar. Stuvia faciliteert de betaling aan de verkoper.
Zit ik meteen vast aan een abonnement?
Nee, je koopt alleen deze samenvatting voor €8,99. Je zit daarna nergens aan vast.
