Book Image

AWS Administration Cookbook

By : Rowan Udell, Lucas Chan
Book Image

AWS Administration Cookbook

By: Rowan Udell, Lucas Chan

Overview of this book

Amazon Web Services (AWS) is a bundled remote computing service that provides cloud computing infrastructure over the Internet with storage, bandwidth, and customized support for application programming interfaces (API). Implementing these services to efficiently administer your cloud environments is a core task. This book will help you build and administer your cloud environment with AWS. We’ll begin with the AWS fundamentals, and you’ll build the foundation for the recipes you’ll work on throughout the book. Next, you will find out how to manage multiple accounts and set up consolidated billing. You will then learn to set up reliable and fast hosting for static websites, share data between running instances, and back up your data for compliance. Moving on, you will find out how to use the compute service to enable consistent and fast instance provisioning, and will see how to provision storage volumes and autoscale an application server. Next, you’ll discover how to effectively use the networking and database service of AWS. You will also learn about the different management tools of AWS along with securing your AWS cloud. Finally, you will learn to estimate the costs for your cloud. By the end of the book, you will be able to easily administer your AWS cloud.

Related Content you might be interested in

Current Title:

Small book image
AWS Administration Cookbook
Rowan Udell | Lucas Chan
Apr, 2017 | 394 pages
Small book image
AWS Tools for PowerShell 6
Ramesh Waghmare
Aug, 2017 | 372 pages
Small book image
AWS Certified Developer - Associate Guide
Bhavin Parmar | Vipul Tankariya
Sep, 2017 | 600 pages
Small book image
Mastering AWS CloudFormation
Karen Tovmasyan
Nov, 2023 | 310 pages
Table of Contents (16 chapters)
Title Page
Title Page
Credits
Credits
About the Authors
About the Authors
About the Reviewer
About the Reviewer
www.PacktPub.com
www.PacktPub.com
Customer Feedback
Customer Feedback
Preface
Preface
Free Chapter
1
AWS Fundamentals
AWS Fundamentals
Introduction
Infrastructure as Code
CloudFormation
The command-line interface tool
2
Managing AWS Accounts
Managing AWS Accounts
Introduction
Setting up a master account
Creating a member account
Inviting an account
Managing your accounts
Adding a service control policy
3
Storage and Content Delivery
Storage and Content Delivery
Introduction
Storage
Hosting a static website
Caching a website
Working with network storage
Backing up data for compliance
4
Using AWS Compute
Using AWS Compute
Introduction
Creating a key pair
Launching an instance
Attaching storage
Securely accessing private instances
Auto scaling an application server
Creating machine images
Creating security groups
Creating a load balancer
5
Management Tools
Management Tools
Introduction
Auditing your AWS account
Recommendations with Trusted Advisor
Creating e-mail alarms
Publishing custom metrics in CloudWatch
Creating monitoring dashboards
Creating a budget
Feeding log files into CloudWatch logs
6
Database Services
Database Services
Introduction
Creating a database with automatic failover
Creating a NAT gateway
Creating a database read-replica
Promoting a read-replica to master
Creating a one-time database backup
Restoring a database from a snapshot
Migrating a database
Calculating DyanmoDB performance
7
Networking
Networking
Introduction
Building a secure network
Creating a NAT gateway
Canary deployment via DNS
Hosting a domain
Routing based on location with failover
Network logging and troubleshooting
8
Security and Identity
Security and Identity
Introduction
Federating with your AWS account
Creating SSL certificates
Active Directory as a service
Creating users
Creating instance roles
Cross-account user roles
Storing secrets
9
Estimating Costs
Estimating Costs
Introduction
Calculating costs
Estimating CloudFormation template costs
Purchasing reserved instances
Estimating total cost of ownership

Adding a service control policy

Before we begin, we should talk through what SCPs are and how they apply to your organization.

An SCP consists of a policy document which defines (by way of filtering) the services and actions which are able to be used and performed within an OU or in an AWS account. If you've previously configured an IAM policy, then you will have more than enough background knowledge to get started with SCPs. Apart from a couple of minor exceptions, they look exactly the same.

SCPs can be applied at different levels throughout an organization. These are the levels, starting from the bottom and going up:

  • AWS account level: An SCP applied to an AWS account takes effect on only that account. It's important to note that the SCP is very separate from the IAM policies which live inside the account. For example, an SCP might allow full access to S3 for an AWS account but the IAM policies inside the account may deny it (for certain roles and/or users).
  • OU level: An SCP applied at the...
Previous Section
End of Chapter 2
Next Chapter