Book Overview & Buying
Table Of Contents

AWS SysOps Cookbook - Second Edition

By : Eric Z. Beard , Udell, Chan

5 (3)

Buy this Book

AWS SysOps Cookbook

5 (3)

By: Eric Z. Beard , Udell, Chan

Buy this Book

Overview of this book

AWS is an on-demand remote computing service providing cloud infrastructure over the internet with storage, bandwidth, and customized support for APIs. This updated second edition will help you implement these services and efficiently administer your AWS environment. You will start with the AWS fundamentals and then understand how to manage multiple accounts before setting up consolidated billing. The book will assist you in setting up reliable and fast hosting for static websites, sharing data between running instances and backing up data for compliance. By understanding how to use compute service, you will also discover how to achieve quick and consistent instance provisioning. You’ll then learn to provision storage volumes and autoscale an app server. Next, you’ll explore serverless development with AWS Lambda, and gain insights into using networking and database services such as Amazon Neptune. The later chapters will focus on management tools like AWS CloudFormation, and how to secure your cloud resources and estimate costs for your infrastructure. Finally, you’ll use the AWS well-architected framework to conduct a technology baseline review self-assessment and identify critical areas for improvement in the management and operation of your cloud-based workloads. By the end of this book, you’ll have the skills to effectively administer your AWS environment.

Preface

Who this book is for

What this book covers

To get the most out of this book

Sections

Get in touch

Free Chapter

AWS Fundamentals

Signing up for an AWS account

Understanding AWS's global infrastructure

Using the web console

Learning the basics of AWS CloudFormation

Using the command-line interface (CLI)

Account Setup and Management

Setting up an automated landing zone with AWS Control Tower

Setting up a master account with AWS Organizations

Creating a member account

Inviting an account

Managing your accounts

Adding a Service Control Policy (SCP)

Setting up consolidated billing

AWS Storage and Content Delivery

Setting up a secure Amazon S3 bucket

Hosting a static website

Caching a website with CloudFront

Working with network storage provided by EFS

Amazon FSx for Windows File Server

Backing up data for compliance

AWS Compute

Creating a key pair

Launching an instance

Attaching storage

Autoscaling an application server

Creating security groups

Creating a load balancer

Using AWS Systems Manager to log in to instances from the console

Creating serverless functions with AWS Lambda

Monitoring the Infrastructure

AWS Trusted Advisor

Resource tags

AWS CloudWatch

Billing alerts

The ELK stack

AWS CloudTrail

Network logging and troubleshooting

Managing AWS Databases

Creating an RDS database with automatic failover

Creating an RDS database read replica

Promoting an RDS read replica to master

Creating a one-time RDS database backup

Restoring an RDS database from a snapshot

Managing Amazon Aurora databases

Managing Amazon Neptune graph databases

Create a DynamoDB table with a global secondary index

Calculating Amazon DynamoDB capacity

AWS Networking Essentials

Creating a VPC and subnets

Managing a transit gateway

Creating a Virtual Private Network (VPN)

Setting up NAT gateways

Managing domains with Route 53

AWS Account Security and Identity

Administering users with IAM

Deploying Simple Active Directory service

Creating instance roles

Using cross-account roles

Storing secrets

Protecting applications from DDoS

Configuring AWS WAF

Setting up intrusion detection

Managing Costs

Estimating costs with the Simple Monthly Calculator

Estimating costs with the Total Cost of Ownership Calculator

Estimating CloudFormation template costs

Reducing costs by purchasing reserved instances

Advanced AWS CloudFormation

Creating and populating an S3 bucket with custom resources

Using a macro to create an S3 bucket for CloudTrail logs

Using mappings to specify regional AMI IDs

Using StackSets to deploy resources to multiple regions

Detecting resource drift from templates with drift detection

AWS Well-Architected Framework

Understanding the five pillars of the Well-Architected Framework

Conducting a technology baseline review self-assessment

Using the Well-Architected Tool to evaluate a production workload

Working with Business Applications

Creating a place for employees to share files with WorkDocs

Hosting desktops in the cloud and allowing users to connect remotely using WorkSpaces

Giving your users a place to chat and conduct video calls with Chime

Exploring the use of Alexa for Business

Hosting your company's email with WorkMail

AWS Partner Solutions

Creating machine images with Hashicorp's Packer

Monitoring and optimizing your AWS account with nOps

Using IOPipe to instrument your lambda functions

Other Books You May Enjoy

Leave a review - let other readers know what you think

Setting up an automated landing zone with AWS Control Tower

AWS Control Tower is a service that helps you set up an automated landing zone using best practices for account management that have been learned from years of working with a variety of customers who have complex multi-account environments. Control Tower is the successor to AWS Landing Zone and relies heavily on AWS Organizations, which will be covered in detail later in this chapter.

In this recipe, you will create a new account to serve as the Control Tower master, and within that account, you will launch your Control Tower environment, which will spawn two additional core accounts: Log Archive and Audit. Then, you will use the AWS Service Catalog to create a new provisioned account. Within a provisioned account, you will attempt to create resources that fail to comply with the guardrails established on the organizational...

Tech Concepts

Programming languages

Tech Tools