One Bill or Multiple Bills By default, when you create a standalone AWS account, you must provide a payment method (for instance, a credit card). For large organizations, it usually doesn’t make sense for them to receive as many bills as they have AWS accounts. They usually demand a consolidated bill across all the accounts […]

Using AWS Web Application Firewall as a Response to Attacks One of the primary purposes of a denial-of-service attack is to make the system being attacked unresponsive. Assets will be protected if you place your applications and web services, along with corresponding load balancers and Content Delivery Networks (CDNs), such as CloudFront, behind a Web […]

Answers 1. Answer: Both the web and database layers are scalable. The application layer is limited in elasticity due to the persistence of the session data on the EC2 instances. Session data should be moved off the EC2 instances. 2. Answer: The bulk image uploads seem to exceed the capacity of the ECS cluster. The application needs […]

Exam Readiness Drill For the first three attempts, don’t worry about the time limit. ATTEMPT 1 The first time, aim for at least 40%. Look at the answers you got wrong and read the relevant sections in the chapter again to fix your learning gaps. ATTEMPT 2 The second time, aim for at least 60%. […]

DDoS Attack Patterns There are many different DDoS attacks that can be used to achieve the end goal of disruption. The following subsections explain a couple of these at a high level to help you understand the principles of DDoS attacks. Note The exam will not test you on the different types of attacks and […]

Account An AWS account (an account, in short) is a virtual environment where you access AWS services and deploy and use AWS resources. The resources you deploy in one account are isolated from the resources deployed in any other account unless you explicitly provide cross-account access (for more on cross-account access, see Chapter 1, Determining […]

Amazon DynamoDB for NoSQL Database-as-a-Service Amazon DynamoDB is a NoSQL database-as-a-service product within AWS. It’s a fully managed key/value and document database. Accessing DynamoDB is easy via its endpoint. The input and output throughputs can be managed or scaled manually or automatically. It also supports data backup, point-in-time recovery, and data encryption. One example where […]

DNS Hierarchy DNS is a highly distributed database that contains a hierarchy that flows from very general information at the top of the stack to specific host information at the bottom, as shown in Figure 2.2. Distributed root servers are at the top of the DNS hierarchy and are used to direct queries to the top-level […]

Further Reading You can check out the following links for more information about the topics that were covered in this chapter: . Chapter 3 Designing a Multi-Account AWS Environment for Complex Organizations Determining a strategy to deploy your resources across multiple Amazon Web Services (AWS) accounts is essential for governance purposes. This can bring benefits not […]

Vulnerable AWS Credentials Another significant vulnerability for identity and access management is access credentials (specifically, an access key and secret access key) that are not rotated in a programmatic manner. These credentials are tied to a specific user and any capabilities or access that that user has been granted. Mitigation of Vulnerable AWS Credentials Create […]