Book Image

VMware Cloud on AWS Blueprint

By : Oleg Ulyanov, Michael Schwartzman, Harsha Sanku
Book Image

VMware Cloud on AWS Blueprint

By: Oleg Ulyanov, Michael Schwartzman, Harsha Sanku

Overview of this book

If you’re looking to effortlessly transition from on-premises VMware vSphere environments or capital expenditure (CAPEX) to an agile operational expenditure (OPEX) model, trust the VMware Cloud (VMC) on AWS platform for swift re-platforming of legacy applications into cloud-native framework. This comprehensive guide addresses hybrid cloud challenges, offering detailed solutions within the VMware Cloud on AWS ecosystem. Covering the foundational architecture, software-defined data center (SDDC) components of VMware Cloud on AWS, network and security configurations, and AWS service integrations, this book lays the foundation for you to advance to vCenter management, vSAN storage policies, NSX architecture, compute policies, SDDC console management, and the EDRS mechanism for cluster scaling. You’ll also explore integrated services such as VMware HCX for migration, VMware Aria suite, Tanzu Managed Kubernetes, and disaster recovery. Further, the book takes you through VMware Cloud APIs and guides you in managing workloads with VMware Cloud on AWS Outposts. With the help of practical insights, configuration tips, and best practices, you’ll unlock the full potential of VMC on AWS. By the end of this book, you’ll be equipped to successfully architect and manage VMware Cloud on AWS SDDCs, handling day-to-day operations expertly.
Table of Contents (18 chapters)
1
Part 1:VMware Cloud on AWS Foundations and VMware HCX as a Migration Tool
5
Part 2: Configuration, Maintenance, and Troubleshooting on VMware Cloud on AWS
13
Part 3: Leveraging Design Considerations and Best Practices

Exploring NSX and AWS security architecture and capabilities

In the following section, we’ll describe the firewalling and security capabilities of a VMware Cloud on AWS SDDC and AWS.

AWS security groups

An AWS security group regulates all the incoming and outgoing traffic of the resources. These resources can include Amazon EC2, elastic network interfaces, Amazon Elastic File System (EFS), and Amazon FSx filesystems. A security group is associated with resources within the VPC it was created for. Unlike Network Access Control Lists (NACLs), which are applied to VPC subnets, a security group is tied to individual resources. Additionally, security groups are stateful, which means they are bidirectional. In other words, if inbound traffic is permitted, the corresponding response packets in the opposite direction are always allowed by default.

The AWS security groups control the traffic flow from and to the connected VPC. The security groups control traffic on the AWS side...