Security The application load balancer will terminate all encrypted TLS/SSL connections and allow end-to-end encryption between the client and target server. The incoming TLS session will be terminated on the ALB for inspection and processing. There will be a second connection created on the backend between the ALB and the target. In this case, the […]

Using Highly Available Network Connectivity for Your Public Endpoints Starting from the assumption that your internet-facing endpoints must be highly available, you have to make sure that whichever component you lay on their path is also highly available, whether it is a DNS service, a content delivery network (CDN), a load-balancing capability, or a gateway […]

Enabling AWS Security Hub AWS Security Hub can be enabled from the AWS Management Console. However, because Security Hub needs to have the AWS Config service enabled (and prefers to have it fully enabled, watching all resources), you will follow the following steps via CloudFormation in this walk-through as well – all via the Management […]

Visualizing distributions in your data Exploring the distribution of your feature is very important to understand some key characteristics of it, such as its skewness, mean, median, and quantiles. You can easily visualize skewness by plotting a histogram. This type of chart groups your data into bins or buckets and performs counts on top of […]

ExamAlert Expect to see at least a handful of CLI questions on the exam. Some of these questions might focus on just the syntax of AWS CLI commands, but there can be some resource-specific questions. If you want to review CLI commands for a specific resource, visit the following reference: https://awscli.amazonaws.com/v2/documentation/api/latest/reference/index.html. The AWS CLI can […]

Classic Load Balancing For completeness, and to avoid any confusion if you come across the classic load balancer (CLB), it will be briefly mentioned here. The classic load balancer was the first offering within the ELB family of load balancers from AWS. The CLB was deployed to balance EC2 instances before VPCs came into existence. […]

Foundational Requirements First things first, it’s essential to consider your foundations, that is, your AWS environment, which must be able to accommodate the workload requirements. Two elements in particular must be tackled as they could impact the reliability of any workload: resource constraints and network topology. Resource Constraints Resource constraints can be further split into […]

Security Alerting with AWS Security Hub With so many security tools available in both AWS and from third-party providers, those that are responsible for managing the alerts need a single pane of glass to centralize all the alerts and notifications coming in. AWS Security Hub helps you consolidate many of your security findings, alerts, and […]

Visualizing comparisons in your data Comparisons are very common in data analysis and there are different ways to present them. Starting with the bar chart, you must have seen many reports that have used this type of visualization. Bar charts can be used to compare one variable among different classes – for example, a car’s […]

This chapter covers the following official AWS Certified SysOps Administrator – Associate (SOA-C02) exam domain: Domain 3: Deployment, Provisioning, and Automation (For more information on the official AWS Certified SysOps Administrator – Associate [SOA-C02] exam topics, see the Introduction.) As you can probably imagine, provisioning resources in AWS is a major responsibility within an organization. […]