Book Image

AWS for System Administrators

By : Prashant Lakhera
Book Image

AWS for System Administrators

By: Prashant Lakhera

Overview of this book

Amazon Web Services (AWS) is one of the most popular and efficient cloud platforms for administering and deploying your applications to make them resilient and robust. AWS for System Administrators will help you to learn several advanced cloud administration concepts for deploying, managing, and operating highly available systems on AWS. Starting with the fundamentals of identity and access management (IAM) for securing your environment, this book will gradually take you through AWS networking and monitoring tools. As you make your way through the chapters, you’ll get to grips with VPC, EC2, load balancer, Auto Scaling, RDS database, and data management. The book will also show you how to initiate AWS automated backups and store and keep track of log files. Later, you’ll work with AWS APIs and understand how to use them along with CloudFormation, Python Boto3 Script, and Terraform to automate infrastructure. By the end of this AWS book, you’ll be ready to build your two-tier startup with all the necessary infrastructure, monitoring, and logging components in place.
Table of Contents (18 chapters)
1
Section 1: AWS Services and Tools
4
Section 2: Building the Infrastructure
7
Section 3: Adding Scalability and Elasticity to the Infrastructure
11
Section 4: The Monitoring, Metrics, and Backup Layers

Which VPC subnets to choose while building a VPC

AWS gives us a lot of flexibility while designing the VPC network. AWS supports the following subnet blocks: /16 to /28. If you choose a /16 netmask, it will give you 65,536 Internet Protocol (IP) addresses, and if you decide on a /28 IP address, it will provide you with 16 addresses. Now, which subnet block to choose depends entirely upon your network requirements. Typically, companies choose a bigger subnet as this helps them if their infrastructure expands.

AWS now supports the addition of IPv4 classless inter-domain routing (CIDR) to your VPC. The default quota is 5, and the soft limit can be increased to 50 for IPv4. For IPv6, the default limit is 1, which can't be increased (hard limit). In order to add additional CIDR blocks to your VPC, we perform the following steps:

  1. Go to the VPC console at https://us-west-2.console.aws.amazon.com/vpc/home. Select the VPC to prod-vpc, as in this example, and click on Actions...