AWS Solutions Architect Lesson 1
AWS Solutions Architect Lesson 1
AWS Solutions Architect Lesson 1
AWS Overview
1
What You’ll Learn
History of AWS
2
1.01: Description of AWS
Brief overview of AWS
1 2 3 4 5 6
4
1.02: History and Evolution of AWS
How AWS developed into the company it is today
6
Global Distribution
3
3
2 3 3
3 3 3 3
3
3 6 3 2 2 4
1
3
3
7
Regions and Availability Zones
A region is a geographic area isolated from other Amazon regions to provide the greatest possible fault
tolerance. Availability Zones located within a region, with at least 2 per region, are connected via low-latency
links.
Availability
Zone
Availability Availability
Zone Zone
Data Centers
Region
8
Edge Locations
Edge locations are located in most of the major cities around the world to distribute content to end users with
reduced latency.
9
AWS Products
AWS offers a broad set of global compute, storage, database, analytics, application, and deployment services
that help organizations increase speed, lower IT costs, and scale applications.
10
Market Leader
11
Knowledge Check
12
KNOWLEDGE
CHECK
What is the minimum number of Availability Zones within a Region?
a. 5
b. 33
c. 3
d. 2
13
KNOWLEDGE
CHECK
What is the minimum number of Availability Zones within a Region?
a. 5
b. 33
c. 3
d. 2
There are always at least two Availability Zones within a Region to provide fault tolerance.
14
KNOWLEDGE
CHECK
Which AWS product uses Edge Locations to provide a CDN service?
a. Amazon EC2
c. Amazon CloudFront
15
KNOWLEDGE
CHECK
Which AWS product uses Edge Locations to provide a CDN service?
a. Amazon EC2
c. Amazon CloudFront
Amazon CloudFront is the Amazon Content Delivery Network (CDN) service that uses Edge Locations to
provide content to end users with reduced latency.
16
1.03 Overview of AWS Products and Services
Overview of every product and service on the AWS platform
18
Compute
The Elastic Compute Cloud (EC2) from Amazon provides resizable compute capacity in the cloud, which is
intended to make web-scale computing easier for developers.
19
Compute (Contd.)
Amazon EC2 Container Service (ECS) is a highly scalable, high-performance container management service that
supports Docker containers and allows you to easily run applications on a managed cluster of Amazon EC2 instances.
20
Compute (Contd.)
AWS Elastic Beanstalk is an easy-to-use service for deploying and scaling web applications and services developed with
Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.
21
Compute (Contd.)
AWS Lambda lets you run code without provisioning or managing servers. Pay only for the compute
and execution time that you use.
22
Compute (Contd.)
Elastic Load Balancing is a networking service that automatically spreads out incoming application
traffic across several available EC2 instances.
23
Compute (Contd.)
Amazon Lightsail is a new service that allows you to quickly and easily create your own Virtual
Private Server, or VPS, for as little as $5 per month.
Amazon Lightsail
24
Compute (Contd.)
• AWS Batch is Amazon’s attempt to eliminate third-party commercials or open source batch
processing solutions.
• It enables you to easily and efficiently run huge quantities of batch computing jobs on AWS.
• It is a managed service, and it dynamically provisions the optimal quantity and type of compute
required to run your batch jobs.
AWS Batch
25
Compute (Contd.)
26
Compute (Contd.)
AWS Fargate is a fully managed service to run ECS or EKS containers. It manages and scales on your behalf.
27
Compute
Vmware Cloud on AWS extends on-premises VMware vSphere-based environments to the AWS Cloud.
28
Compute
AWS Outposts allows you to run native AWS services to your own data center.
29
AWS Management Console
The next section is Storage and Content Delivery.
30
Storage and Content Delivery
Simple Storage Service (S3) is an object-based online storage service that offers unlimited data storage
space in the cloud.
Amazon S3
31
Storage and Content Delivery (Contd.)
CloudFront is a content delivery service (CDN) that integrates with other Amazon cloud services to
provide an easy way for businesses and developers to distribute data through high-speed transfers.
32
Storage and Content Delivery (Contd.)
The s3/Glacier Select service allows you to query your S3 or Glacier files with SQL queries and
retrieve only the required data.
33
Storage and Content Delivery (Contd.)
Elastic File System is a storage that can be attached to multiple EC2 instances.
34
Storage and Content Delivery (Contd.)
35
Storage and Content Delivery (Contd.)
Storage gateway is used to increase the capacity to store files, such as Word documents.
36
Storage and Content Delivery (Contd.)
• Amazon Snowball is used to move large amounts of data quickly (petabytes) without a network.
• Snowball Edge is a new version of Snowball; it has compute capacity that can be used to create local storage
tiers.
37
Storage and Content Delivery (Contd.)
Amazon Snowmobile is an Exabyte-scale data transfer service used to move extremely large amounts of data to
AWS.
AWS Snowmobile
38
Storage
Amazon FSx for Lustre is a file system optimized for compute-intensive workloads.
39
Storage
Amazon FSx for Windows File Server provides a fully managed native Microsoft Windows file system.
40
Storage
41
AWS Management Console
The next section deals with Database.
42
Database
The Relational Database Service (RDS) provides scalable relational databases in the cloud through a Web service.
43
Database (Contd.)
44
Database (Contd.)
Amazon Neptune is a graph database service built specifically for highly connected datasets and
graph engines optimized for storing billions of relationships.
45
Database (Contd.)
Amazon DynamoDB
46
Database (Contd.)
If you have users running the same queries, then you can cache these results in Elasticache to reduce
the load on your database instances.
47
Database (Contd.)
48
Database (Contd.)
49
Databases
Amazon Time Stream is a fast, scalable, fully managed time series database service.
50
Databases
Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed
document database service.
51
Databases
AWS Lake Formation is a service that makes it easy to set up a secure data lake in days.
52
Knowledge Check
53
KNOWLEDGE
CHECK
Which AWS service is used to run Docker?
a. Elastic Beanstalk
c. Lambda
d. Direct Connect
54
KNOWLEDGE
CHECK
Which AWS service is used to run Docker?
a. Elastic Beanstalk
c. Lambda
d. Direct Connect
EC2 Container Service is a management service that supports Docker containers. Elastic Beanstalk is used to
deploy and scale web applications. Lambda lets you run code without provisioning or managing servers, and
Direct Connect allows you to directly join your corporate site with AWS.
55
KNOWLEDGE
CHECK
What is an Amazon NoSQL product?
a. RDS
b. DMS
c. RedShift
d. DynamoDB
56
KNOWLEDGE
CHECK
What is an Amazon NoSQL product?
a. RDS
b. DMS
c. RedShift
d. DynamoDB
DynamoDB is the NoSQL offering from AWS. RDS is its relational database server; DMS is its database
migration server; and RedShift is its data warehousing service.
57
KNOWLEDGE
CHECK
What service would you use to archive data for long-term storage?
a. Glacier
b. Snowball
c. S3
d. Storage Gateway
58
KNOWLEDGE
CHECK
What service would you use to archive data for long-term storage?
a. Glacier
b. Snowball
c. S3
d. Storage Gateway
Glacier is used to cost-effectively store data for long-term archival. Snowball is used to transfer large
amounts of data to AWS without using the Internet, S3 is the storage solution for files that you want to
access immediately, and Storage Gateway is a service that allows you to extend your onsite storage into the
cloud.
59
AWS Management Console
The next section deals with Network.
60
Networking
Virtual Private Cloud (VPC) works as a bridge between a user’s existing IT infrastructure and Amazon's cloud.
61
Networking (Contd.)
Route53 is Amazon DNS and Domains service.
62
Networking (Contd.)
Direct Connect is a way of connecting into the AWS environment without using an Internet connection.
63
AWS Management Console
The next section deals with Analytics.
64
Analytics
Elasticsearch allows you to use the popular open source search and analytics engine as a managed service in AWS.
65
Analytics (Contd.)
Elastic MapReduce allows businesses and developers to process large amounts of data using a Hadoop
framework. It’s ideal for processes like data mining and scientific simulation.
66
Analytics (Contd.)
Kinesis can ingest lots of data very quickly from mobile apps, sensors, and other sources.
67
Analytics (Contd.)
QuickSight is a fast, cloud-powered business intelligence (BI) service that makes it easy for all employees
to build visualizations, perform ad-hoc analysis, and quickly get business insights from their data.
68
Analytics (Contd.)
Data pipeline is used to extract, transform, and load data from other locations in AWS.
69
Analytics (Contd.)
Amazon Athena is an interactive query service that allows you to analyze data in
Amazon S3 using standard SQL.
Amazon Athena
70
Analytics (Contd.)
Amazon CloudSearch is a managed service that allows you to easily set up, manage,
and scale a search solution for your website or application.
Amazon CloudSearch
71
Analytics (Contd.)
AWS Glue is fully managed ETL (Extract, transform, load) service that simplifies and
automates the difficult and time consuming tasks of data discovery, conversion,
mapping, and job scheduling.
72
AWS Management Console
The next section deals with Enterprise Application.
73
Enterprise Applications
Amazon WorkDocs allows you to share Word Documents with your
colleagues.
74
Enterprise Applications (Contd.)
Through Amazon WorkMail, you can give everyone in your company the same email system and calendar.
75
Enterprise Applications (Contd.)
WorkSpaces is an enterprise application that gives you a standard Windows desktop that you can control remotely.
76
AWS Management Console
The next section deals with Artificial Intelligence.
77
Artificial Intelligence (Contd.)
Amazon Lex
78
Artificial Intelligence (Contd.)
Amazon Machine Learning can predict future behavior from existing data; for example,
people that bought x also bought y. It can also perform functions such as fraud
detection.
Amazon Machine
Learning
79
Artificial Intelligence (Contd.)
Amazon Polly is a service that turns text into lifelike speech so you can create
applications that talk.
Amazon Polly
80
Artificial Intelligence (Contd.)
Amazon Rekognition is a service that makes it easy to add image analysis to your
applications.
Amazon Rekognition
81
Artificial Intelligence (Contd.)
Amazon Sumerian helps in creating Virtual Reality, Augmented Reality, and 3D applications.
It allows you to build apps for Oculus Rift, HTC Vive, etc.
82
Artificial Intelligence (Contd.)
Amazon DeepLens is a fully programmable video camera with deep learning capabilities
that is pre-loaded with models to assist your deep learning skills
83
Artificial Intelligence (Contd.)
Amazon Rekognition Video is the video analysis service that tracks people and recognizes activities,
objects, celebrities, and inappropriate content.
84
Artificial Intelligence (Contd.)
Amazon comprehend is an AI-based Natural Language Processing service that provides insights
and relationships regarding your text documents.
It helps to identify key extracts from the text, such as phrases, people, locations, and brands, and
provides an organized output of the results.
85
Artificial Intelligence (Contd.)
86
Artificial Intelligence
Amazon Forecast is an accurate time series forecasting service, based on the same technology used at Amazon.com.
87
Artificial Intelligence
88
Artificial Intelligence
Amazon Textract allows you to easily extract text and data virtually from any document.
89
Artificial Intelligence
AWS DeepRacer a fully autonomous 1/18th scale race car driven by reinforcement learning.
90
Knowledge Check
91
KNOWLEDGE
CHECK
Where does Route53 get its name?
92
KNOWLEDGE
CHECK
Where does Route53 get its name?
93
KNOWLEDGE
CHECK
Which service allows you to stream data to AWS?
a. Elastic MapReduce
b. QuickSight
c. Kinesis
d. Data Pipeline
94
KNOWLEDGE
CHECK
Which service allows you to stream data to AWS?
a. Elastic MapReduce
b. QuickSight
c. Kinesis
d. Data Pipeline
Kinesis allows you to stream large amounts of data to AWS from mobile apps or sensors. Elastic MapReduce
is used for data mining or scientific simulation with Hadoop frameworks running on EC2 instances.
QuickSight is a cloud powered BI service, and Data Pipeline is the AWS ETL tool.
95
KNOWLEDGE
CHECK
Which of these is NOT an AWS Enterprise Application?
a. WorkDocs
b. WorkMail
c. WorkServer
d. WorkSpaces
96
KNOWLEDGE
CHECK
Which of these is NOT an AWS Enterprise Application?
a. WorkDocs
b. WorkMail
c. WorkServer
d. WorkSpaces
WorkDocs allows you to share documents with your colleagues. WorkMail is Amazon’s answer to Microsoft
Exchange, and WorkSpaces allows you to run Windows desktops in the cloud.
97
AWS Management Console
The next section deals with Mobile Services.
98
Mobile Services
Amazon Cognito saves mobile user data in the AWS cloud.
99
Mobile Services (Contd.)
Amazon Mobile Analytics tracks and measures in-app activity.
100
Mobile Services (Contd.)
Amazon Simple Notification Service (SNS) sends mobile notifications, emails, and/or SMS messages.
101
Mobile Services (Contd.)
AWS Device Farm tests your app on a bunch of different iOS and Android devices simultaneously.
102
Mobile Services (Contd.)
AWS Mobile Hub builds, tests, and monitors mobile apps.
103
Mobile Services (Contd.)
Amazon Pinpoint makes it easy to run targeted campaigns to drive user engagement
in mobile apps.
Amazon Pinpoint
104
Mobile Services (Contd.)
Amazon AppSync allows web and mobile application data to be updated in real time so that
offline users are updated as soon as they reconnect.
105
AWS Management Console
The next section deals with Internet of Things.
106
Internet of Things
AWS IoT is a managed cloud platform that lets connected devices interact
with cloud applications and other devices easily and securely.
AWS
IoT
Connected Devices
107
Internet of Things (Contd.)
AWS Greengrass is a software that lets you securely run local compute, messaging, and
data caching for connected devices.
AWS Greengrass
108
Internet of Things (Contd.)
Amazon IoT analytics makes it easy to run sophisticated analytics on huge volumes of IoT data.
109
Internet of Things (Contd.)
Managing all your IoT devices in one central location makes it easy to onboard, organize, monitor,
and manage them.
110
AWS Management Console
The next section deals with Developer Tools.
111
Developer Tools
AWS CodeCommit creates AWS hosted version control for your code.
git-push
git-push
CodeCommit S3
AWS
CodeCommit
git-push
112
Developer Tools (Contd.)
Through AWS CodeDeploy, you can get your code from CodeCommit
repository and deploy it to your EC2 instances.
113
Developer Tools (Contd.)
AWS CodePipeline is a continuous delivery service for fast and reliable application updates.
114
Developer Tools (Contd.)
AWS X-Ray helps developers analyze and debug production and distributed applications,
such as those built using micro services.
AWS X-Ray
115
Developer Tools (Contd.)
AWS CodeBuild is a fully managed build service that compiles source code, runs tests, and
produces software packages that are ready to be deployed.
AWS CodeBuild
116
Developer Tools (Contd.)
Amazon cloud9 is a cloud-based development environment that runs in a browser and can be
shared with the team to allow pair programming.
117
Knowledge Check
118
KNOWLEDGE
CHECK
Which service allows you to save mobile user data in the AWS cloud?
a. Cognito
b. SNS
c. Device Farm
d. Mobile Hub
119
KNOWLEDGE
CHECK
Which service allows you to save mobile user data in the AWS cloud?
a. Cognito
b. SNS
c. Device Farm
d. Mobile Hub
Cognito allows you to save mobile user data in the cloud. SNS (Simple Notification Service) allows you to
send mobile notifications, emails, and SMS; Mobile Hub is the tool to build, test, and monitor your mobile
apps.
120
KNOWLEDGE
CHECK
Which AWS service is used as a code repository?
a. CodeDeploy
b. CodeCommit
c. CodePipeline
d. Lambda
121
KNOWLEDGE
CHECK
Which AWS service is used as a code repository?
a. CodeDeploy
b. CodeCommit
c. CodePipeline
d. Lambda
CodeCommit allows you to store code repositories in the cloud. CloudDeploy is used to get code from your
repository and deploy it to your EC2 instances; CodePipeline builds, tests, and deploys your code every time
there is a code change; Lambda allows you to run code without having to provision or manage servers.
122
AWS Management Console
The next section deals with Management Tools.
123
Management Tools
CloudWatch enables monitoring of EC2 and other Amazon cloud services so you can
get alerts when an error occurs or when AWS services are disconnected.
124
Management Tools (Contd.)
CloudFormation allows you to set up a bunch of connected AWS services together.
125
Management Tools (Contd.)
CloudTrail audits user activity on your AWS resources.
126
Management Tools (Contd.)
AWS Config keeps track of configuration management changes.
127
Management Tools (Contd.)
OpsWorks helps configure and manage operations using Chef.
128
Management Tools (Contd.)
Service Catalog gives other AWS users in your group access to preset apps you've built.
129
Management Tools (Contd.)
Trusted Advisor is an automated service that identifies areas in your AWS setup where
you’re overpaying (for example, unused EC2 instances).
Service Limit
130
Management Tools (Contd.)
AWS Personal Health Dashboard provides alerts and remediation guidance when AWS
is experiencing events that may impact you.
131
Management Tools (Contd.)
Amazon Systems Manager is a unified UI that provides a view of all operational data from multiple AWS
services.
132 http://www.msbiblog.com/2017/07/20/data-warehouse-automation-thoughts/
Management
AWS Control Tower allows you to set up and govern a secure, compliant, and multi-account AWS
Environment.
133
AWS Management Console
The next section deals with Security and Identity.
134
Security and Identity
Identity and Access Management allows you to set up additional users, new AWS Keys, and policies.
135
Security and Identity (Contd.)
Amazon Inspector installs agents on your EC2 instances to scan AWS setup to determine its security.
136
Security and Identity (Contd.)
AWS CloudHSM service helps you meet corporate, contractual, and regulatory compliance requirements for
data security using dedicated Hardware Security Module (HSM) appliances within the AWS cloud.
137
Security and Identity (Contd.)
AWS Directory Service makes it easy to set up and run Microsoft Active Directory (AD) in the AWS cloud or
connect your AWS resources with an existing on-premises Microsoft Active Directory.
138
Security and Identity (Contd.)
AWS Key Management Service (KMS) is a managed service that makes it easy for you to create
and control the encryption keys used to encrypt your data and uses Hardware Security Modules
(HSMs) to protect the security of your keys.
139
Security and Identity (Contd.)
140
Security and Identity (Contd.)
AWS Shield
141
Security and Identity (Contd.)
142
Security and Identity (Contd.)
The AWS Artifact portal provides on-demand access to AWS security and
compliance documents, also known as audit artifacts.
AWS Artifact
143
Security and Identity (Contd.)
Amazon GuardDuty is a threat detection service. It protects your AWS accounts and workloads by
continuously monitoring for unusual API calls or signs of compromised accounts.
144
Management
AWS Security Hub allows you to centrally view and manage security alerts and automate compliance
checks.
145
AWS Management Console
The next section deals with Application Services.
146
Application Services
API Gateway creates a proxy of your app’s API so you can throttle bad client traffic, test new
versions, and present methods more cleanly.
147
Application Services (Contd.)
148
Application Services (Contd.)
149
Application Services (Contd.)
150
Application Services (Contd.)
Simple Email Service or SES allows you to send one-off emails such as
transactional marketing emails, password resets, and notifications.
151
Application Services (Contd.)
Simple Queue Service (SQS) is a hosted queue that increases the workflow
between distributed components of applications that perform different tasks.
152
Application Services (Contd.)
153
Application Services (Contd.)
It makes configuring and operating cloud-based message brokers easier and provides industry-standard
APIs and protocols for messaging.
154
Blockchain
Amazon Managed Blockchain allows you to create and manage scalable blockchain networks.
155
Blockchain
156
Migrations
AWS Migration Hub simplify and accelerate migrations to the AWS Cloud.
157
Migrations
158
Migrations
AWS offers a suite of services to help you migrate servers, data and applications to the cloud.
159
Knowledge Check
160
KNOWLEDGE
CHECK
Which service is designed to assist with workflow?
a. SQS
b. SES
c. SNS
d. SWF
161
KNOWLEDGE
CHECK
Which service is designed to assist with workflow?
a. SQS
b. SES
c. SNS
d. SWF
Simple Workflow Service (SWF) is a workflow control process that Amazon uses in its warehouses. Simple
Queue Service (SQS) is a hosted queue that increases the workflow between distributed components of
applications. Simple Notification Service (SNS) is used to send mobile notifications, emails, and/or SMS
messages. Simple Email Service (SES) is used to send one-off emails.
162
KNOWLEDGE
CHECK
Which AWS service is used to control Active Directory?
a. Directory Service
b. Direct Connect
c. IoT
d. KMS
163
KNOWLEDGE
CHECK
Which AWS service is used to control Active Directory?
a. Directory Service
b. Direct Connect
c. IoT
d. KMS
Directory Service allows you to create Microsoft AD services in the cloud or join them to your existing on-site
directories. Direct Connect joins your existing site with AWS directly. IoT is the AWS Internet of Things
service, and KMS is key management service.
164
KNOWLEDGE
CHECK
Which AWS tool is used to track, monitor, and log IAM user activity?
a. CloudFormation
b. Inspector
c. CloudWatch
d. CloudTrail
165
KNOWLEDGE
CHECK
Which AWS tool is used to track, monitor, and log IAM user activity?
a. CloudFormation
b. Inspector
c. CloudWatch
d. CloudTrail
CloudTrail is used to track user activity. CloudFormation allows you to manage resources with templates.
CloudWatch monitors application activity, and Inspector analyzes application security.
166
1.04: Key Takeaways
1. Amazon Web Services (AWS) is a secure cloud services platform that offers cloud-based infrastructure for
compute, database storage, content delivery, and other functionalities to help businesses scale and grow.
2. AWS is truly global; it is available all over the world through 16 geographic Regions.
3. A region is a geographic area isolated from other Amazon regions to provide the greatest possible fault
tolerance. Availability Zones are located within a region, with at least two per region, and are connected
via low-latency links.
4. Edge locations are CDNs and are located all over the world in major cities. They are used to provide
content to end users with low latency.
5. AWS has various cloud-based products to help your business grow.
168
Quiz
169
QUIZ
What is Amazon's NoSQL product?
1
a. RDS
b. DMS
c. RedShift
d. DynamoDB
170
QUIZ
What is Amazon's NoSQL product?
1
a. RDS
b. DMS
c. RedShift
d. DynamoDB
Explanations: DynamoDB is the NoSQL offering from AWS. RDS is their relational database server, DMS is their
database migration server, and RedShift is their data warehousing service.
a. DynamoDB
b. Aurora
c. RedShift
d. Elasticache
172
QUIZ
Which of these services would you use for Data Warehousing?
2
a. DynamoDB
b. Aurora
c. RedShift
d. Elasticache
Explanations: RedShift is the AWS Data Warehousing tool. DynamoDB is a NoSQL database, Aurora is Amazon's
version of MySQL, and Elasticache is used to cache database queries to reduce load on your database instances.
c. Lambda
d. OpsWorks
174
QUIZ
Which AWS service can you use to create Chef recipes?
3
c. Lambda
d. OpsWorks
Explanations: OpsWorks helps configure and manage operations using chef. Elastic Map Reduce helps to process
large amounts of data using Hadoop, EC2 Container Service is used to run Docker containers, and Lambda lets you
run code without provisioning or managing servers.
d. A service distributed all over the world to assist with content delivery
176
QUIZ
What is an AWS Region?
4
d. A service distributed all over the world to assist with content delivery
Explanations: There are multiple AWS Regions around the world (for example, on the US east coast or in Germany),
and there are more coming online in different countries all the time.
178
QUIZ
What is an Availability Zone?
5
Explanations: An Availability Zone is effectively a data center or collection or data centers that are located
inside a Region.
a. One
b. Two
c. Three
d. Five
180
QUIZ
What is the minimum number of Availability Zones in a Region?
6
a. One
b. Two
c. Three
d. Five
Explanations: There are always at least two Availability Zones in a Region to provide fault tolerance.
a. Lower cost
b. Reduced complexity
c. Lower latency
d. Workflow control
182
QUIZ
What is the main benefit of using an Edge Location?
7
a. Lower cost
b. Reduced complexity
c. Lower latency
d. Workflow control
Explanations: An edge location is where end users access services located at AWS. They are located in most of the
major cities around the world and are specifically used by CloudFront (CDN) to distribute content to end user to
reduce latency.