Book Image

AWS SysOps Cookbook - Second Edition

By : Eric Z. Beard, Rowan Udell, Lucas Chan
Book Image

AWS SysOps Cookbook - Second Edition

By: Eric Z. Beard, Rowan Udell, Lucas Chan

Overview of this book

AWS is an on-demand remote computing service providing cloud infrastructure over the internet with storage, bandwidth, and customized support for APIs. This updated second edition will help you implement these services and efficiently administer your AWS environment. You will start with the AWS fundamentals and then understand how to manage multiple accounts before setting up consolidated billing. The book will assist you in setting up reliable and fast hosting for static websites, sharing data between running instances and backing up data for compliance. By understanding how to use compute service, you will also discover how to achieve quick and consistent instance provisioning. You’ll then learn to provision storage volumes and autoscale an app server. Next, you’ll explore serverless development with AWS Lambda, and gain insights into using networking and database services such as Amazon Neptune. The later chapters will focus on management tools like AWS CloudFormation, and how to secure your cloud resources and estimate costs for your infrastructure. Finally, you’ll use the AWS well-architected framework to conduct a technology baseline review self-assessment and identify critical areas for improvement in the management and operation of your cloud-based workloads. By the end of this book, you’ll have the skills to effectively administer your AWS environment.
Table of Contents (15 chapters)

Creating a VPC and subnets

In this recipe, we're going to build a secure network (VPC) in AWS. This network will consist of two public and private subnets split across two availability zones (AZ). It will also allow inbound connections to the public subnets for the following protocols:

  • SSH (port 22)
  • HTTP (port 80)
  • HTTPS (port 443):
Building a secure network

Getting ready

Before we proceed, you're going to need to know the names of at least two of the AZ in the region we're deploying to. The recipes in this book will typically deploy to us-east-1, so to get things moving, you can just use the following:

  • us-east-1a
  • us-east-1b
When you create an AWS account, your zones are randomly allocated. This means that...