Book Image

Amazon Web Services Bootcamp

Book Image

Amazon Web Services Bootcamp

Overview of this book

AWS is at the forefront of Cloud Computing today. Businesses are adopting AWS Cloud because of its reliability, versatility, and flexible design. The main focus of this book is teaching you how to build and manage highly reliable and scalable applications and services on AWS. It will provide you with all the necessary skills to design, deploy, and manage your applications and services on the AWS cloud platform. We’ll start by exploring Amazon S3, EC2, and so on to get you well-versed with core Amazon services. Moving on, we’ll teach you how to design and deploy highly scalable and optimized workloads. You’ll also discover easy-to-follow, hands-on steps, tips, and recommendations throughout the book and get to know essential security and troubleshooting concepts. By the end of the book, you’ll be able to create a highly secure, fault tolerant, and scalable environment for your applications to run on.
Table of Contents (16 chapters)

Security groups


A security group acts as a firewall for our EC2 instance. We can restrict access to our EC2 by defining on which protocol, port, and IP address EC2 is accessible. We can also define a CIDR block so that a group of IP addresses are able to access EC2 instances.

AWS Management Console

Go to AWS EC2 Management Console at https://console.aws.amazon.com/ec2/home.

Creating a security group

Create a new security group under your AWS account:

Click Security Groups under NETWORK & SECURITY in the left menu. Click Create Security Group:

Figure 3.3: Creating a security group

Provide a friendly security group name, description, and the VPC you want to create this security group. Also, we need to add a rule for inbound access. In our case, we will add a rule for SSH (port 22), which will allow us to access an EC2 instance from any source (IP address). We can also provide an outbound rule, which will allow us to access specific destinations only. By default, the outbound rule is configured...