#AWS

Deploy Django app on AWS

Deploy and host a django application on AWS EC2 instance using Nginx as the webserver and Gunicorn as WSGI

Nginx is an open-source web server that, since its success as a web server, is now also used as a reverse proxy , HTTP cache, and load balancer.

WSGI used to forward request from a web server to a python backend.

# Topic covered
* Cloud computing and types
  * Software as a Service(SaaS)
  * Platform as a Service(Paas)
  * Infrastructure as a Service(IaaS)
* Why cloud computing?

# Topic covered

Amazon EC2

What is EC2

• Amazon Elastic Compute Cloud
• Deployment of servers
• Amazon EC2 is a web service that provides resizable compute capacity in the cloud.
• Highly scalable & pay-as-you-go model
• EC2 is not a Global service, it is specific to a Region

AWS Storage

• If can install an OS on an storage then it is called as Block storage (EBS)
• If can’t install os then called as Other storage (S3, EFS)

5.1 What is S3?

• S3 stands for Simple Storage Service.
• Those Storage when created are called S3 Bucket
• It’s not Block storage
• It’s a Global service

Databases

• Relational DB
  • RDS
• Non-relational DB
  • DynamoDB

Amazon VPC

• Amazon Virtual Private Cloud
• A VPC is an isolated portion of the AWS Cloud
• i.e define and launch AWS resources in a logically isolated virtual network

Elastic Load Balancing

• Elastic Load Balancing automatically distributes your incoming traffic across multiple targets
• Such as EC2 instances, containers, and IP addresses, in one or more Availability Zones.
• EC2 > Load Balancing

Process and Migrate Data

Kinesis

• Collect, process, and analyze data streams in real time.
• Features
  • K data Stream
    • Real-time data capture –> Collect streaming data with a data stream
  • K Data Firehose
    • Process and deliver streaming data with data delivery stream.
    • Load streaming data into data lakes, data stores, and analytics tools for:
  • K Data Analytics
    • Get insights in real time –> Analyze streaming data with data analytics application.

Amazon Elastic MapReduce(EMR)

• Managed Hadoop Framework
• Easily run and scale Apache Spark, Hive, Presto, and other big data workloads

Amazon Athena

• Amazon Athena is an interactive query service that makes it easy to analyze data directly in Amazon S3 using standard SQL

AWS Glue

• AWS Glue is a fully managed ETL (extract, transform, and load) service that makes it simple and cost-effective to categorize your data, clean it, enrich it, and move it reliably between various data stores and data streams.

AWS Database Migration Service(DMS)

• The quickest and easiest way to migrate databases to AWS with low cost and minimal downtime.
• Fee
  • AWS Database Migration Service (DMS) offers free use for 6 months per instance
  • if you’re migrating to Amazon Aurora, Amazon Redshift or Amazon DynamoDB.

Security, Identity, and Compliance

• Compliances
  • FIPS –> Pederal Information Processing standard publication
  • PCIDSS –> Payment Card Industry Data Security Standard
  • HIPAA –> Health Insurance Portability and Accountability Act
  • SOX –> Sarbames Oxley Act
• Security
  • IAM, Keys, WAF, docs
• AWS Key Managememt Service(AWS KMS)
  • Customer Managed Keys –> View and Manage
  • AWS Managed Keys –> View Only
  • AWS owned keys –> None
• AWS CloudHSM

WAF & Shield

• AWS WAF
  • Web Application Firewall that helps protect web applications from attacks
• AWS Shield
  • Managed DDoS protection service.
  • AWS Shield offers two tiers of protection - Standard and Advanced
• AWS Firewall Manager
  • Centralized security management

Active Directory

• Directory Service Solutions for Microsoft Active Directory
• Migrate from Microsoft Active Directory (AD) to AWS by
  • AWS Managed Microsoft AD
    • Used managed actual Microsoft Active Directory in the AWS Cloud
  • Simple AD
    • Simple AD is a standalone managed directory that is powered by a Linux-Samba Active Directory compatible server.
  • AD Connector
    • AD Connector is a proxy for redirecting directory requests to your existing Microsoft Active Directory without caching any information in the cloud
  • Amazon Cognito User pools

Cognito

• Amazon Cognito offers user pools and identity pools.
• User pools are user directories that provide sign-up and sign-in options for your app users.
• Identity pools provide AWS credentials to grant your users access to other AWS services.

AWS Single Sign-on(SSO)

• It a cloud-based single sign-on (SSO) service that makes it easy to centrally manage SSO access to all of your AWS accounts and cloud applications