Book Image

AWS Administration Cookbook

By : Rowan Udell, Lucas Chan
Book Image

AWS Administration Cookbook

By: Rowan Udell, Lucas Chan

Overview of this book

Amazon Web Services (AWS) is a bundled remote computing service that provides cloud computing infrastructure over the Internet with storage, bandwidth, and customized support for application programming interfaces (API). Implementing these services to efficiently administer your cloud environments is a core task. This book will help you build and administer your cloud environment with AWS. We’ll begin with the AWS fundamentals, and you’ll build the foundation for the recipes you’ll work on throughout the book. Next, you will find out how to manage multiple accounts and set up consolidated billing. You will then learn to set up reliable and fast hosting for static websites, share data between running instances, and back up your data for compliance. Moving on, you will find out how to use the compute service to enable consistent and fast instance provisioning, and will see how to provision storage volumes and autoscale an application server. Next, you’ll discover how to effectively use the networking and database service of AWS. You will also learn about the different management tools of AWS along with securing your AWS cloud. Finally, you will learn to estimate the costs for your cloud. By the end of the book, you will be able to easily administer your AWS cloud.

Related Content you might be interested in

Current Title:

Small book image
AWS Administration Cookbook
Rowan Udell | Lucas Chan
Apr, 2017 | 394 pages
Small book image
AWS Tools for PowerShell 6
Ramesh Waghmare
Aug, 2017 | 372 pages
Small book image
AWS Certified Developer - Associate Guide
Bhavin Parmar | Vipul Tankariya
Sep, 2017 | 600 pages
Small book image
Mastering AWS CloudFormation
Karen Tovmasyan
Nov, 2023 | 310 pages
Table of Contents (16 chapters)
Title Page
Title Page
Credits
Credits
About the Authors
About the Authors
About the Reviewer
About the Reviewer
www.PacktPub.com
www.PacktPub.com
Customer Feedback
Customer Feedback
Preface
Preface
Free Chapter
1
AWS Fundamentals
AWS Fundamentals
Introduction
Infrastructure as Code
CloudFormation
The command-line interface tool
2
Managing AWS Accounts
Managing AWS Accounts
Introduction
Setting up a master account
Creating a member account
Inviting an account
Managing your accounts
Adding a service control policy
3
Storage and Content Delivery
Storage and Content Delivery
Introduction
Storage
Hosting a static website
Caching a website
Working with network storage
Backing up data for compliance
4
Using AWS Compute
Using AWS Compute
Introduction
Creating a key pair
Launching an instance
Attaching storage
Securely accessing private instances
Auto scaling an application server
Creating machine images
Creating security groups
Creating a load balancer
5
Management Tools
Management Tools
Introduction
Auditing your AWS account
Recommendations with Trusted Advisor
Creating e-mail alarms
Publishing custom metrics in CloudWatch
Creating monitoring dashboards
Creating a budget
Feeding log files into CloudWatch logs
6
Database Services
Database Services
Introduction
Creating a database with automatic failover
Creating a NAT gateway
Creating a database read-replica
Promoting a read-replica to master
Creating a one-time database backup
Restoring a database from a snapshot
Migrating a database
Calculating DyanmoDB performance
7
Networking
Networking
Introduction
Building a secure network
Creating a NAT gateway
Canary deployment via DNS
Hosting a domain
Routing based on location with failover
Network logging and troubleshooting
8
Security and Identity
Security and Identity
Introduction
Federating with your AWS account
Creating SSL certificates
Active Directory as a service
Creating users
Creating instance roles
Cross-account user roles
Storing secrets
9
Estimating Costs
Estimating Costs
Introduction
Calculating costs
Estimating CloudFormation template costs
Purchasing reserved instances
Estimating total cost of ownership

Auditing your AWS account

We're now going to show you how to set up CloudTrail in your AWS account. Once CloudTrail has been enabled, it will start to record all of the API calls made in your account to the AWS service and then deliver them to you as log files in an S3 bucket. When we talk about API calls we mean things like:

  • Actions performed in the AWS console.
  • Calls made to AWS APIs using the CLI or SDKs.
  • Calls made on your behalf by AWS services. Think CloudFormation or the auto scaling service.

Each entry in the log will contain useful information, such as:

  • The service that was called
  • The action that was requested
  • The parameters sent with the request
  • The response that was returned by AWS
  • The identity of the caller (including IP address)
  • The date and time of the request

How to do it...

  1. Create a new CloudFormation template file; we're going to define the following Resources:
    • An S3 bucket for our CloudTrail log files to be stored in
    • A policy for our S3 bucket that allows the CloudTrail service to write...
Previous Section
End of Section 3
Next Section