Book Image

AWS Certified SysOps Administrator ??? Associate Guide

By : Marko Sluga
Book Image

AWS Certified SysOps Administrator ??? Associate Guide

By: Marko Sluga

Overview of this book

AWS certifications are becoming one of the must have certifications for any IT professional working on an AWS Cloud platform. This book will act as your one stop preparation guide to validate your technical expertise in deployment, management, and operations on the AWS platform. Along with exam specific content this book will also deep dive into real world scenarios and hands-on instructions. This book will revolve around concepts like teaching you to deploy, manage, and operate scalable, highly available, and fault tolerant systems on AWS. You will also learn to migrate an existing on-premises application to AWS. You get hands-on experience in selecting the appropriate AWS service based on compute, data, or security requirements. This book will also get you well versed with estimating AWS usage costs and identifying operational cost control mechanisms. By the end of this book, you will be all prepared to implement and manage resources efficiently on the AWS cloud along with confidently passing the AWS Certified SysOps Administrator – Associate exam.
Table of Contents (26 chapters)

Network security in the VPC

There are two ways to provide network security to instances running in a VPC, which are as follows:

  • Security groups
  • NACLs

Security groups

The first layer of defense for our instances is the security group. A security group always needs to be applied or created when we spawn a new instance in the AWS EC2 service. The security group acts like a personal stateful firewall sitting right in front of the instance and it provides stateful port filtering capabilities. For instance, when we start a Linux web server, we want to do the following:

  • Access the console by establishing an SSH connection on port 22 with the system
  • Accept connections on the HTTPS port 443 so secure communication without web server...