Book Image

Optimizing Your Modernization Journey with AWS

By : Mridula Grandhi
Book Image

Optimizing Your Modernization Journey with AWS

By: Mridula Grandhi

Overview of this book

AWS cloud technologies help businesses scale and innovate, however, adopting modern architecture and applications can be a real challenge. This book is a comprehensive guide that ensures your switch to AWS services is smooth and hitch-free. It will enable you to make optimal decisions to bring out the best ROI from AWS cloud adoption. Beginning with nuances of cloud transformation on AWS, you’ll be able to plan and implement the migration steps. The book will facilitate your system modernization journey by getting you acquainted with various technical domains, namely, applications, databases, big data, analytics, networking, and security. Once you’ve learned about the different operations, budgeting, and management best practices such as the 6 Rs of migration approaches and the AWS Well-Architected Framework, you’ll be able to achieve operational excellence in cloud adoption. You’ll also learn how to deploy some of the important AWS tools and services with real-life case studies and use cases. By the end of this book, you’ll be able to successfully implement cloud migration and modernization on AWS and make decisions that best suit your organization.
Table of Contents (20 chapters)
1
Part 1: Migrating to the Cloud
6
Part 2: Cloud Modernization – Application, Data, Analytics, and IT
12
Part 3: Security and Networking Transformation
15
Part 4: Cloud Economics, Compliance, and Governance

Identity and access management using AWS

AWS IAM securely controls access to your resources on AWS. Among various security services that AWS offers to operate your applications on a secure platform, IAM is a critical service. When you deploy applications on AWS, IAM can be used to create, manage, and control access to the AWS resources shown in the following diagram:

Figure 10.4 – AWS IAM

Figure 10.4 – AWS IAM

With IAM, you get to provide the following capabilities centrally within your organization:

  • Manage users and their access: You can create IAM users, assign credentials, and manage the permissions to specific operations that a user can perform.
  • Manage roles and their permissions: You can create IAM roles and manage permissions to specific operations. Operations include any action that can be performed by the users/entity/AWS service that assumes the role.
  • Manage federated users and their permissions: You can enable identity federation and allow the...