Infrastructure Issues Generally, you should follow AWS best practices and deploy any unmanaged system across two availability zones, as discussed in Chapter 1, “Introduction to AWS.” Anytime you deploy, you expect the infrastructure to just work. If you have a deployment issue, you can easily resolve the issue by trying a redeployment. We call this […]

Volume Gateway Volume Gateway allows you to create storage volumes on S3 that offer a block storage interface accessible from your on-premises environment through the standard Internet Small Computer Systems Interface (iSCSI) protocol. Concretely, Volume Gateway comes either as a preset hardware appliance or as a software appliance that you deploy in your on-premises environment. […]

Applying encryption to buckets You also need to understand how enabling versioning on a bucket would help. There are use cases where a file is updated regularly, and versions will be created for the same file. To simulate this scenario, try the following example: $ echo “Version-1″>version-doc.txt$ aws s3 cp version-doc.txt s3://version-demo-mlpractice$ aws s3 cp […]

API Gateway Caching To reduce the number of calls to the endpoints and improve response times, caching can be configured to locally store frequent requests on the gateway. API Gateway will cache response for the TTL period. API Gateway will then first check the cache for the response before making an endpoint request if there […]

FSx File Gateway Amazon FSx File Gateway is a recent addition to the AWS Storage Gateway family to provide access to Amazon FSx for Windows File Server file shares on AWS from your on-premises environment. The idea is very similar to S3 File Gateway, which is that you can access the data on AWS through […]

API Gateway When trying to build RESTful and WebSocket APIs, AWS creates a fully managed service that is built around a simple interface. API Gateway can act as the entrance to other AWS services, such as data stored on RDS, or compute calls made by the EC2 or Lambda services, just as examples. API Gateway […]

This chapter covers the following official AWS Certified SysOps Administrator – Associate (SOA-C02) exam domains: Domain 1: Monitoring, Logging, and Remediation Domain 4: Security and Compliance (For more information on the official AWS Certified SysOps Administrator – Associate [SOA-C02] exam topics, see the Introduction.) As a general rule, you should consider the services, instances, and […]

REST API REST stands for Representational State Transfer. The REST architecture, or RESTful API, is a well-defined schema that allows dissimilar devices and services to interact with each other. The REST API makes calls to the API gateway, which, in turn, proxies the request to backend services in any format required. The REST API’s main […]

CramSaver If you can correctly answer these questions before going through this section, save time by completing the Cram Quiz at the end of the section. 1. What information is captured in a CloudTrail log? 2. What is the default retention of the default CloudTrail trail? Answers 1. Answer: CloudTrail logs record information about who requested the action, […]

Protecting data on Amazon S3 In this section, you will learn how to record every version of an object. Along with durability, Amazon provides several techniques to secure the data in S3. Some of those techniques involve enabling versioning and encrypting the objects. Versioning helps you to roll back to a previous version if any […]