Book Image

AWS Administration Cookbook

By : Rowan Udell, Lucas Chan
Book Image

AWS Administration Cookbook

By: Rowan Udell, Lucas Chan

Overview of this book

Amazon Web Services (AWS) is a bundled remote computing service that provides cloud computing infrastructure over the Internet with storage, bandwidth, and customized support for application programming interfaces (API). Implementing these services to efficiently administer your cloud environments is a core task. This book will help you build and administer your cloud environment with AWS. We’ll begin with the AWS fundamentals, and you’ll build the foundation for the recipes you’ll work on throughout the book. Next, you will find out how to manage multiple accounts and set up consolidated billing. You will then learn to set up reliable and fast hosting for static websites, share data between running instances, and back up your data for compliance. Moving on, you will find out how to use the compute service to enable consistent and fast instance provisioning, and will see how to provision storage volumes and autoscale an application server. Next, you’ll discover how to effectively use the networking and database service of AWS. You will also learn about the different management tools of AWS along with securing your AWS cloud. Finally, you will learn to estimate the costs for your cloud. By the end of the book, you will be able to easily administer your AWS cloud.

Related Content you might be interested in

Current Title:

Small book image
AWS Administration Cookbook
Rowan Udell | Lucas Chan
Apr, 2017 | 394 pages
Small book image
AWS Tools for PowerShell 6
Ramesh Waghmare
Aug, 2017 | 372 pages
Small book image
AWS Certified Developer - Associate Guide
Bhavin Parmar | Vipul Tankariya
Sep, 2017 | 600 pages
Small book image
Mastering AWS CloudFormation
Karen Tovmasyan
Nov, 2023 | 310 pages
Table of Contents (16 chapters)
Title Page
Title Page
Credits
Credits
About the Authors
About the Authors
About the Reviewer
About the Reviewer
www.PacktPub.com
www.PacktPub.com
Customer Feedback
Customer Feedback
Preface
Preface
Free Chapter
1
AWS Fundamentals
AWS Fundamentals
Introduction
Infrastructure as Code
CloudFormation
The command-line interface tool
2
Managing AWS Accounts
Managing AWS Accounts
Introduction
Setting up a master account
Creating a member account
Inviting an account
Managing your accounts
Adding a service control policy
3
Storage and Content Delivery
Storage and Content Delivery
Introduction
Storage
Hosting a static website
Caching a website
Working with network storage
Backing up data for compliance
4
Using AWS Compute
Using AWS Compute
Introduction
Creating a key pair
Launching an instance
Attaching storage
Securely accessing private instances
Auto scaling an application server
Creating machine images
Creating security groups
Creating a load balancer
5
Management Tools
Management Tools
Introduction
Auditing your AWS account
Recommendations with Trusted Advisor
Creating e-mail alarms
Publishing custom metrics in CloudWatch
Creating monitoring dashboards
Creating a budget
Feeding log files into CloudWatch logs
6
Database Services
Database Services
Introduction
Creating a database with automatic failover
Creating a NAT gateway
Creating a database read-replica
Promoting a read-replica to master
Creating a one-time database backup
Restoring a database from a snapshot
Migrating a database
Calculating DyanmoDB performance
7
Networking
Networking
Introduction
Building a secure network
Creating a NAT gateway
Canary deployment via DNS
Hosting a domain
Routing based on location with failover
Network logging and troubleshooting
8
Security and Identity
Security and Identity
Introduction
Federating with your AWS account
Creating SSL certificates
Active Directory as a service
Creating users
Creating instance roles
Cross-account user roles
Storing secrets
9
Estimating Costs
Estimating Costs
Introduction
Calculating costs
Estimating CloudFormation template costs
Purchasing reserved instances
Estimating total cost of ownership

Federating with your AWS account

This recipe will show you how to federate identities from your Active Directory and use AD groups and IAM roles to provide different levels of access to multiple AWS accounts.

At a high level, we're going to have an AWS account that is designated as an Auth Account. Users will log in to this account and be assigned a role. This role will have next to no privileges because we don't want them doing anything in the Auth Account. However, they will be able to use role switching to access another AWS account; we'll call this the App Account.

This is a reasonably common pattern whereby users will have access to a number of AWS accounts and use role switching to jump between them—all using credentials that are verified against an AD backend and a level of access that is derived from AD groups.

Federation

Getting ready

You'll need the following before we can proceed:

  • An instance of Simple AD. Refer to the Active Directory as a service recipe.
  • The name of an access URL,...
Previous Section
End of Section 3
Next Section