What is AWS ?

Cloud computing is the on-demand delivery of IT resources over the internet with pay-as-you-go pricing. AWS simply just provides cloud computing services.

Benefits of Cloud Computing

• Pay as you go. Instead of investing in data centers and hardware before you know how you are going to use them, you pay only when you use computing resources, and pay only for how much you use.

• Increase speed and agility. IT resources are only a click away, which means that you reduce the time to make those resources available to your developers from weeks to just minutes. This results in a dramatic increase in agility for the organization since the cost and time it takes to experiment and develop is significantly lower.

• Stop spending money running and maintaining data centers. Focus on projects that differentiate your business, not the infrastructure. Cloud computing lets you focus on your customers, rather than on the heavy lifting of racking, stacking, and powering physical infrastructure. This is often referred to as undifferentiated heavy lifting.

• Go global in minutes. Easily deploy your application in multiple Regions around the world with just a few clicks. This means you can provide lower latency and a better experience for your customers at a minimal cost.

AWS Global Infrastructure

Regions

Regions are geographic locations worldwide where AWS hosts its data centers. AWS Regions are named after the location where they reside. For example, in the United States, there is a Region in Northern Virginia called the Northern Virginia Region and a Region in Oregon called the Oregon Region. There are Regions in Asia Pacific, Canada, Europe, the Middle East, and South America, and AWS continues to expand to meet the needs of its customers.

Consider four main aspects when deciding which AWS Region to host your applications and workloads:

• Latency, If your application is sensitive to latency, choose a Region that is close to your user base.

• Price, Due to the local economy and the physical nature of operating data centers, prices may vary from one Region to another.

• Service availability, Some services may not be available in some Regions. The AWS documentation provides a table containing the Regions and the available services within each one.

• Compliance, Enterprise companies often need to comply with regulations that require customer data to be stored in a specific geographic territory. If applicable, you should choose a Region that meets your compliance requirements.

Availability Zones

Inside every Region is a cluster of Availability Zones (AZ). An AZ consists of one or more data centers with redundant power, networking, and connectivity.

AZs also have a code name. Since they’re located inside Regions, they can be addressed by appending a letter to the end of the Region code name. For example:

• us-east-1a: an AZ in us-east-1 (Northern Virginia Region)
• sa-east-1b: an AZ in sa-east-1 (São Paulo Region in South America)

Maintain Resiliency

To keep your application available, you need to maintain high availability and resiliency. A well-known best practice for cloud architecture is to use Region-scoped, managed services. These services come with availability and resiliency built in.

The AWS Management Console

Every action you make in AWS is an API call that is authenticated and authorized. In AWS, you can make API calls to services and resources through the AWS Management Console, the AWS Command Line Interface (CLI), or the AWS Software Development Kits (SDKs).

One way to manage cloud resources is through the web-based console, where you log in and click on the desired service.

Security AWS

Managing security and compliance is a shared responsibility between AWS and you. To depict this shared responsibility, AWS created the shared responsibility model.

What Is AWS Responsible For?

AWS is responsible for security of the cloud. This means AWS is required to protect and secure the infrastructure that runs all the services offered in the AWS Cloud. AWS is responsible for:

• Protecting and securing AWS Regions, Availability Zones, and data centers, down to the physical security of the buildings.

• Managing the hardware, software, and networking components that run AWS services, such as the physical server, host operating systems, virtualization layers, and AWS networking components.

What Is the Customer Responsible For?

You’re responsible for security in the cloud. When using any AWS service, you’re responsible for properly configuring the service and your applications, as well as ensuring your data is secure.

• Choosing a Region for AWS resources in accordance with data sovereignty regulations.

• Implementing data protection mechanisms, such as encryption and managing backups.

• Using access control to limit who has access to your data and AWS resources.

AWS Root User

Cloud Computing Models

Basic services AWS (IAM, EC2, EBS, S3, VPC)

IAM
EC2
EBS
S3
VPC