Book Image

AWS Administration Cookbook

By : Rowan Udell, Lucas Chan
Book Image

AWS Administration Cookbook

By: Rowan Udell, Lucas Chan

Overview of this book

Amazon Web Services (AWS) is a bundled remote computing service that provides cloud computing infrastructure over the Internet with storage, bandwidth, and customized support for application programming interfaces (API). Implementing these services to efficiently administer your cloud environments is a core task. This book will help you build and administer your cloud environment with AWS. We’ll begin with the AWS fundamentals, and you’ll build the foundation for the recipes you’ll work on throughout the book. Next, you will find out how to manage multiple accounts and set up consolidated billing. You will then learn to set up reliable and fast hosting for static websites, share data between running instances, and back up your data for compliance. Moving on, you will find out how to use the compute service to enable consistent and fast instance provisioning, and will see how to provision storage volumes and autoscale an application server. Next, you’ll discover how to effectively use the networking and database service of AWS. You will also learn about the different management tools of AWS along with securing your AWS cloud. Finally, you will learn to estimate the costs for your cloud. By the end of the book, you will be able to easily administer your AWS cloud.

Related Content you might be interested in

Current Title:

Small book image
AWS Administration Cookbook
Rowan Udell | Lucas Chan
Apr, 2017 | 394 pages
Small book image
AWS Tools for PowerShell 6
Ramesh Waghmare
Aug, 2017 | 372 pages
Small book image
AWS Certified Developer - Associate Guide
Bhavin Parmar | Vipul Tankariya
Sep, 2017 | 600 pages
Small book image
Mastering AWS CloudFormation
Karen Tovmasyan
Nov, 2023 | 310 pages
Table of Contents (16 chapters)
Title Page
Title Page
Credits
Credits
About the Authors
About the Authors
About the Reviewer
About the Reviewer
www.PacktPub.com
www.PacktPub.com
Customer Feedback
Customer Feedback
Preface
Preface
Free Chapter
1
AWS Fundamentals
AWS Fundamentals
Introduction
Infrastructure as Code
CloudFormation
The command-line interface tool
2
Managing AWS Accounts
Managing AWS Accounts
Introduction
Setting up a master account
Creating a member account
Inviting an account
Managing your accounts
Adding a service control policy
3
Storage and Content Delivery
Storage and Content Delivery
Introduction
Storage
Hosting a static website
Caching a website
Working with network storage
Backing up data for compliance
4
Using AWS Compute
Using AWS Compute
Introduction
Creating a key pair
Launching an instance
Attaching storage
Securely accessing private instances
Auto scaling an application server
Creating machine images
Creating security groups
Creating a load balancer
5
Management Tools
Management Tools
Introduction
Auditing your AWS account
Recommendations with Trusted Advisor
Creating e-mail alarms
Publishing custom metrics in CloudWatch
Creating monitoring dashboards
Creating a budget
Feeding log files into CloudWatch logs
6
Database Services
Database Services
Introduction
Creating a database with automatic failover
Creating a NAT gateway
Creating a database read-replica
Promoting a read-replica to master
Creating a one-time database backup
Restoring a database from a snapshot
Migrating a database
Calculating DyanmoDB performance
7
Networking
Networking
Introduction
Building a secure network
Creating a NAT gateway
Canary deployment via DNS
Hosting a domain
Routing based on location with failover
Network logging and troubleshooting
8
Security and Identity
Security and Identity
Introduction
Federating with your AWS account
Creating SSL certificates
Active Directory as a service
Creating users
Creating instance roles
Cross-account user roles
Storing secrets
9
Estimating Costs
Estimating Costs
Introduction
Calculating costs
Estimating CloudFormation template costs
Purchasing reserved instances
Estimating total cost of ownership

Securely accessing private instances

Any instance or resource living in a private subnet in your VPC will be inaccessible from the Internet. This makes good sense from a security perspective because it gives your instances a higher level of protection.

Of course, if they can't be accessed from the Internet, then they're not going to be easy to administer.

One common pattern is to use a VPN server as a single, highly controlled, entry point to your private network. This is what we're going to show you in this recipe, as pictured in the following diagram:

Accessing private instances securely

Getting ready

We're going to use OpenVPN for this example. They provide a free (for up to two users) AMI in the AWS marketplace, which has OpenVPN already installed and configured. You'll need to accept the terms and conditions for using this AMI. You can do so by visiting the AMI's marketplace page at https://aws.amazon.com/marketplace/pp/B00MI40CAE/.

You need to decide on a password, which will be your temporary...

Previous Section
End of Section 6
Next Section