VPC Security by Default In every AWS account, a default VPC is automatically created in every region. This default VPC makes experimentation and initial tasks easy. But beware because the default VPC has very permissive security settings. By default, public access to and from the Internet is not blocked by the network ACLs associated with […]

VPN CloudHub The AWS VPN CloudHub is an architecture for the AWS site-to-site VPN service. However, it’s not an actual service that you can find in the console. CloudHub uses a VPG in a VPC to connect multiple remote sites each using a site-to-site VPN connection. Building on the AWS managed VPN options described previously, […]

Introducing the learning journey Throughout this book, the certification learning journey will be broken down into the theory and the designer parts of the exam. The theory will align closely with the curriculum that’s described in the exam guide, with the designer section dedicated to learning about the practical concepts referenced in the theory – […]

Update: Used to modify existing records in the database. // Example List of Strings List<String> fruitNames = new List<String>{‘Apple’, ‘Banana’, ‘Orange’, ‘Grapes’}; // Create a list to store Account records List<Account> fruitAccountsList = [SELECT Id, Name FROM Account WHERE Name IN :fruitNames]; } if (!fruitAccountsList.isEmpty()) { update fruitAccountsList; // Iterate over the updated records to […]

Compute Selection Start by reviewing the available choices for compute resources on AWS. They fall under three subcategories: virtual instances with Amazon Elastic Cloud Compute (EC2), containers with Amazon Elastic Container Service (ECS) or Amazon Elastic Kubernetes Service (EKS), and functions with AWS Lambda. The following sections discuss each of them. EC2 Instances With Amazon […]

Packages As you saw in the previous example, Java classes are grouped into packages. The import statement tells the compiler which package to look in to find a class. This is similar to how mailing a letter works. Imagine you are mailing a letter to 123 Main Street, Apartment 9. The mail carrier first brings […]

CloudWatch Dashboards While the collection of metrics generating lines and lines of information on disparate files serves a purpose for tracking particular indicators, tracking a number of these over time is much easier in a graphical format. AWS CloudWatch dashboards allow you to create customizable, real-time visualizations of your metrics, resources, and applications. You can […]

Virtual Private Gateway The AWS virtual private gateway is a virtual VPN endpoint that terminates a site-to-site VPN connection that attaches to a single VPC. A maximum of 10 external VPN tunnels that are not VPC networking locations per virtual private gateway are supported, and each of the tunnels connects using the IPSec protocol. A […]

Principle #4 – Experiment More Often On AWS, you have instant access to all these advanced, serverless, and many other services. Therefore, you should feel encouraged to experiment with them, either to validate a concept or simply to test different configurations (compute, storage, and others) until you find the one that helps your solution deliver […]

Cram Quiz Answer these questions. The answers follow the last question. If you cannot answer these questions correctly, consider reading this section again until you can. 1. You are examining a route table in your VPC and find the following route entry: “Destination : 10.0.0.0/24 and Target : Local”. What type of route is this? A. […]