0% found this document useful (0 votes)
37 views43 pages

EN20CS301402 - Sejal Nema - AWS-Cloud Foundation & Architecting

The document is an Industrial Training Report on 'AWS - Cloud Foundation & Architecting' submitted by Sejal Nema as part of the Bachelor of Technology degree in Computer Science and Engineering. It includes various modules covering cloud computing concepts, AWS services, security, architecture, and billing, providing a comprehensive overview of AWS and its applications. The report is structured with sections for approval, declaration, acknowledgments, and detailed content on cloud computing fundamentals and AWS infrastructure.

Uploaded by

en21cs301878
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
37 views43 pages

EN20CS301402 - Sejal Nema - AWS-Cloud Foundation & Architecting

The document is an Industrial Training Report on 'AWS - Cloud Foundation & Architecting' submitted by Sejal Nema as part of the Bachelor of Technology degree in Computer Science and Engineering. It includes various modules covering cloud computing concepts, AWS services, security, architecture, and billing, providing a comprehensive overview of AWS and its applications. The report is structured with sections for approval, declaration, acknowledgments, and detailed content on cloud computing fundamentals and AWS infrastructure.

Uploaded by

en21cs301878
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 43

INDUSTRIAL TRAINING REPORT

AWS - Cloud Foundation & Architecting


Submitted in partial fulfillment of
the Requirements of the Degree of
Bachelor of Technology
In
Computer Science and Engineering

Submitted By: Submitted to:

Name : Sejal Nema Prof. Jayesh Surana


Er. No. EN20CS301402

Department of Computer Science and Engineering


FACULTY OF ENGINEERING
MEDI-CAPS UNIVERSITY, INDORE- 453331

Aug-Dec 23

1
REPORT APPROVAL

The Industrial Training Report entitled “AWS - Cloud Foundation & Architecting” is hereby
approved as a creditable study of an engineering subject carried out and presented in a manner
satisfactory to warrant its acceptance as a prerequisite for the Degree for which it has been
submitted.

It is to be understood that by this approval the undersigned do not endorse or approve any
statement made, opinion expressed, or conclusion drawn therein; but approve the “Industrial
Training Report '' only for the purpose for which it has been submitted.

Internal Examiner Name:


Designation:
Affiliation:

External Examiner Name:


Designation:
Affiliation:

2
DECLARATION

I hereby declare that the In-house Training entitled “AWS - Cloud Foundation & Architecting”
submitted in partial fulfillment for the award of the degree of Bachelor of Technology in ‘Computer
Science & Engineering’ completed under the supervision of Prof. Ashish Kumawat, Computer
Science andEngineering department from 13 July to 13 Aug 2023.
Further, I declare that the content of this Industrial Training, in full or in parts, have neither
been taken from any other source nor have been submitted to any other Institute or University
for the award of any degree or diploma.

Name: Sejal Nema

/ /2023

3
CERTIFICATE

4
ACKNOWLEDGEMENT

I would like to express my deepest gratitude to Honorable Chancellor, Shri R C Mittal, who has
provided me with every facility to successfully carry out this Industrial Training, and my
profound indebtedness to Prof. (Dr.) Dilip Kumar Patnaik, Vice Chancellor, Medi-Caps
University, whose unfailing support and enthusiasm has always boosted up my morale. I also
thank Prof. Dr. Pramod
S. Nair Dean, Faculty of Engineering, Medi-Caps University, for giving me a chance to work on
this Industrial Training. I would also like to thank my Head of theDepartment Prof. Dr. Ratnesh
Litoriya for his continuous encouragement for betterment of the Industrial Training.

I express my heartfelt gratitude to my Instructor and Guide Prof. Ashish Kumawat in the
Department of Computer Science & Engineering of the Medi-Caps University without whose
continuous help and support, this Industrial Training would ever have reached the completion.

It is their help and support, due to which we became able to complete the design and technical
report.

Without their support this report would not have been possible.

Sejal Nema
EN20CS301402
B.Tech IV Year
Department of Computer Science & Engineering
Faculty of Engineering
Medi-Caps University, Indore

5
Table of Contents

Page No.
Report Approval 2
Declaration 3
Certificate 4
Acknowledgement 5
Table of content 6
Introduction 9
Overview 10
Module 1 Cloud Concepts Overview 11-13
1.1 Introduction of Cloud Computing 12
1.2 Advantages 12
1.3 Cloud Computing Models 12
1.4 Cloud Computing Deployment Model 12
1.5 Web Services 13
1.6 What is AWS? 13
1.7 Six Core Perspective 13
Module 2 Cloud Economics and Billing 14-16
2.1 Fundamentals of Billing 14
2.2 What is the Total Cost of Ownership? 16
Module 3 AWS Global Infrastructure Overview 17-19
3.1 AWS Global Infrastructure 17
3.2 AWS service and service category overview 18
Module 4 AWS Cloud Security 20-23

6
4.1 AWS Shared Responsibility Model 20
4.2 AWS Identity and Access Management 22
Module 5 Networking and Content Delivery 24-26
5.1 Amazon VPC 24
5.2 Subnets 24
5.3 Security Groups 25
5.4 Amazon Route 53 25
5.5 Amazon Cloudfront 26
Module 6 Compute 27-28
6.1 E2C Features 27
6.2 Amazon Cloudwatch for Monitoring 27
6.3 Containers 27
6.4 What is Docker? 28
6.5 What is Kubernetes? 28
6.6 What is Lambda? 28
6.7 AWS Elastic Beanstalk 28
Module 7 Storage 29-30
7.1 AmArchiecazon Storage services 29
7.2 Amazon EBS features 29
7.3 Amazon S3 Glacier 30
7.4 Amazon elastic file storage 30
Module 8 Databases 31-32
8.1 Amazon Relational Database Services (Amazon RDS) 31
8.2 What is Amazon DynamoDB? 31
8.3 Amazon Redshift 32

7
Module 9 Cloud Architecture 33

9.1 AWS Well-Architected Framework 33

9.2 AWS Trusted advisor 33

Module 10 Automatic Scaling and Monitoring 34

10.1 Elastic Load Balancing 34

10.2 AWS Autoscaling 34

Learning After Training 35-37

Conclusion 38

References 39

Appendix 40

8
Introduction
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud
platform, offering over 200 fully featured services from data centers globally. AWS Industrial
Training was for students who seek an overall understanding of cloud computing concepts,
independent of specific technical roles. It provides a detailed overview of cloud concepts, AWS
core services, security, architecture, pricing, and support. It provides platforms and APIs to
individuals, companies, and governments, on a metered pay-as-you- go basis. These cloud
computing web services provide a variety of basic abstract technical infrastructure and
distributed computing building blocks and tools. One of these services is Amazon Elastic
Compute Cloud (EC2), which allows users to have at their disposal a virtual cluster of
computers, available all the time, through the Internet. AWS's virtual computers emulate most of
the attributes of a real computer, including hardware.

As of 2021, AWS comprises over 200 products and services including computing, storage,
networking, database, analytics, services, deployment, management, machine learning, mobile,
developer tools, and tools for the Internet of Things.

9
Overview
The course was divided into 10 different modules with each module with a different concept.
The modules covered were:

● Module 1: Cloud Concepts Overview

● Module 2: Cloud Economics and Billing

● Module 3: AWS Global Infrastructure Overview

● Module 4: AWS Cloud Security

● Module 5: Network and Content Delivery

● Module 6: Compute

● Module 7: Storage

● Module 8: Database

● Module 9: Cloud Architecture

● Module 10: Auto Scaling and Monitoring

10
Module 1: Cloud Concepts Overview

1.1 Introduction to Cloud Computing

Cloud computing is the on demand delivery of compute power, database, storage, applications
and other IT resources via the internet with pay as you go pricing, Infrastructure as a software,
are flexible, can change more quickly, easily and cost effectively.

1.2 Advantages

● Trade capital expense for variable expense


● Benefit from massive economies of scale
● Stop guessing capacity
● Increase speed and agility
● Stop spending money running and maintaining data centers
● Go global in minutes
● AWS management console - Easy to use graphical interface
● Command Line Interface (AWS CLI)
● Software development kits (SDK)

1.3 Cloud Computing Models


● Infrastructure as a Service (IaaS)
● Platform as a Service (PaaS)
● Software as a Service (SaaS)

1.4 Cloud Computing Deployment Models


● Cloud
11
● Hybrid
● On-premises

1.5 Web Services


A web service is any piece of software that makes itself available over the interest and uses a
standardized format such as Extensible Markup Language(XML) or JSON for the request and
response of an application programming interface interaction .

Categories of AWS Services

● Analytics
● Application Integration
● AR and VR
● Blockchain
● Gametech
● Machine Learning
● Compute

1.6 What is AWS ?


AWS is a secure cloud platform that offers a broad set of global cloud based products. You pay
only for the individual services you need for as long as you can use the
Three ways to interact with AWS:

1. AWS management console - Easy to use graphical interface


2. Command Line Interface (AWS CLI) - Access to services by discrete commands or
scripts
3. Software development kits (SDKs) - Access services from your cod

12
1.7 Six Core Perspective
● Business - Includes stakeholders like managers, budget owners etc use AWS framework
to create a strong business case for cloud adoption.[1]
● People - Includes members within human perspective like human resources, staffing etc
use AWS framework to evaluate the organizations structures and roles, skills and identify
gaps in them.
● Governance - Includes Chief Information Officer, enterprise architects use Aws cloud
framework to focus on skills and processes that are needed to align IT strategies and
goals.
● Platform - Includes Chief Technology Officer, solution architects use a variety of
architectural dimensions/models to understand and communicate the nature of IT
systems.
● Security - Includes Chief Information Security Officers, IT Security managers must
ensure that the organizational meets security objectives for control, visibility, and agility
● Operations - Includes IT operations managers to define how businesses are conducted.

13
Module 2 Cloud Economics and Billing

2.1 Fundamentals of Billing

Three fundamental drivers of cost with AWS

1. Compute : charged per hour, varies by instance type


2. Storage : charged typically per GB
3. Data Transfer : inbound has no charge, outbound is aggregated and charged

AWS Pricing Models:

2.2 What is the Total Cost of Ownership?

It is the financial estimate to help identify direct and indirect costs of a

system. Why use TCO?

To compare the costs of running an entire infrastructure environment or specific workload on


premises versus on AWS. To budget and build the business case for moving to the cloud.
14
AWS Pricing Calculator:

Use the AWS calculator to :


● Estimate monthly cost
● Identify opportunities to reduce monthly costs
● Model your solutions before building them
● Explore price points and calculations behind your estimate
● Find the available instance types and contract terms that meets your needs
● Name your estimate and create and name groups of services[1]

15
AWS Organizations

AWS organizations is a free account management service that enables you to consolidate
multiple AWS accounts into an organizational tree with each branch representing a department
orteam.
Security with AWS Organisations

Control access with AWS identity management (IAM): IAM policies enable you to allow or
deny access to AWS services for users, groups and roles. Service control policies enable you to
allow or deny access to AWS services for individual or group accounts in an organizational unit
(OU)

AWS Support

Provide unique combination of tools and expertise Support is provided for :


● Experimenting with AWS
● Production use of AWS
● Business critical use of AWS

AWS support plans

AWS support offers four support plans :

1. Basic support - resource center access, service health dashboard, product FAQs,
discussion forums
2. Developer support - support for early development on AWS
3. Business support - customers that run production workloads
4. Enterprise Support- customers that run business and mission critical workloads

16
Module 3 AWS Global Infrastructure Overview

4.1 AWS Global Infrastructure

The AWS Global Infrastructure is designed and built to deliver a flexible, reliable,
scalable, and secure cloud computing environment with high-quality global network
performance.

Understanding AWS Infrastructure:


Availability Zones: Availability Zones represent single or grouped data centers
within a Region. These zones are strategically positioned to ensure low latency
between them while minimizing the risk of simultaneous disruption during disasters.
Each Availability Zone is a self-sufficient data center with redundant power,
networking, and connectivity.[2]

Edge Locations: Edge locations serve as sites for Amazon CloudFront, enabling
faster content delivery by caching data closer to customers. For instance, if your
company's data is stored in Brazil and you have customers in China, caching data at

1
an edge location in China reduces latency. AWS's content delivery network, Amazon
CloudFront, operates through these Edge locations.

AWS Outposts: For businesses with specific requirements necessitating AWS services within
their own premises, AWS offers AWS Outposts. This solution installs a fully operational mini
Region within the business's own data center, isolating AWS services within their building
while using 100% of AWS functionality.[2]

1
In conclusion, selecting the right AWS Region is a crucial decision, and understanding
AWS's robust infrastructure is essential for businesses aiming to leverage cloud computing
effectively. Careful consideration of compliance, proximityto customers, service availability,
and pricing is vital to make an informed choice in Region selection.

4.2 AWS service and service category overview

AWS offers a broad set of cloud-based services. There are 23 different product or service
categories, and each category consists of one or more services. This course will not attempt to
introduce you to each service. Rather, the focus of this course is on the services that are most
widely used and offer the best introduction to the AWS Cloud.

Following services are :

● Cost Management
● Database
● Management and Governance
● Networking and Content Delivery
● Security and Identity
● Compliance and Storage.
● Compute

1
Module 4 AWS Cloud Security

4.1 AWS Shared Responsibility Model

Security and Compliance is a shared responsibility between AWS and the customer. This shared
model can help relieve the customer’s operational burden as AWS operates, manages
andcontrols the components from the host operating system and virtualization layer down to the
physical security of the facilities in which the service operates.

AWS Responsibilities

● Physical security of data centers


● Controlled need based access
● Hardware and software infrastructure
● Storage decommissioning, host operating system, access login and auditing
● Network infrastructure
● Intrusion detection
● Virtualization infrastructure
● Instance isolation
2
4.2 AWS Identity and Access Management

AWS Identity and Access Management (IAM) enables you to manage access to AWS services
and resources securely.
Use IAM to manage access to AWS resources – A resource is an entity in an AWS account that
you can work with Example resources; An Amazon EC2 instance or an Amazon S3 bucket

Multi-Factor Authentication (MFA):


MFA is a security mechanism that requires users to provide multiple forms of verification to
access their AWS accounts. This typically includes something they know (password) and
something they have (a time-based one-time password generated by a token or app). MFA
significantly enhances account security by reducing the risk of unauthorized access.

2
2
IAM Essential Component

1. IAM user : A person or application that can authenticate with an AWS account.
2. IAM group : A collection of IAM users that are granted identical authorization.
3. IAM policy : The document that defines which resources can be accessed and the level
of access to each resource.
4. IAM role : Useful mechanism to grant a set of permissions for making AWS service
requests.

IAM Authorization

Assign permissions by creating an IAM policy.

● Permissions determine which resources and operations are allowed:


● All permissions are implicitly denied by default.
● If something is explicitly denied, it is never allowed.

Best practices to secure an AWS account:

● Secure logins with multi-factor authentication (MFA).


● Delete account root user access keys.
● Create individual IAM users and grant permissions according to the principle of least
privilege.
● Use groups to assign permissions to IAM users.
● Configure a strong password policy.
● Delegate using roles instead of sharing credentials.
● Monitor account activity by using AWS CloudTrail.

2
Module 5 Networking and Content Delivery
5.1 Amazon VPC

Enables you to provision a logically isolated section of the AWS Cloud where you can launch
AWS resources in a virtual network that you define
● Gives you control over your virtual networking resources, including:
1. Selection of IP address range
2. Creation of subnets
3. Configuration of route tables and network gateways
● Enables you to customize the network configuration for your VPC
● Enables you to use multiple layers of security

5.2 Subnets

● Range of IP addresses that divide a VPC


● Belong to a single Availability Zone
● Classified as public or private

2
There are several VPC networking options, which include:

1. Internet gateway
2. NAT gateway
3. VPC endpoint
4. VPC peering
5. VPC sharing
6. AWS Site-to-Site VPN
7. AWS Direct Connect
8. AWS Transit Gateway

5.3 Security Groups

Security groups have rules that control inbound and outbound instance traffic.
● Default security groups deny all inbound traffic and allow all outbound traffic.
● Security groups are stateful.

Security groups and network ACLs are firewall options that you can use to secure your VPC.

5.4 Amazon Route 53

Amazon Route 53 is a highly available and scalable cloud DNS web service that translates
domain names into numeric IP addresses. Amazon Route 53 supports several types of routing
policies. Multi- Region deployment improves your application’s performance for a global
audience. You can use Amazon Route 53 failover to improve the availability of your
applications.

5.5 Amazon Cloudfront

A CDN is a globally distributed system of caching servers that accelerates delivery of content.
Amazon CloudFront is a fast CDN service that securely delivers data, videos, applications, and
APIs over a global infrastructure with low latency and high transfer speeds. Amazon CloudFront

2
offers many benefits.[5]

2
Internet and Virtual Private Gateways:
To control network traffic in Amazon VPC, two essential gateways come into play:

Internet Gateway (IGW): This gateway acts as a protected fortress, permitting only
explicit traffic in or out of the VPC. It's comparable to a doorway through which
customers enter a coffee shop. Without an IGW, external access to VPC resources
isrestricted.

Virtual Private Gateway: In cases where a VPC contains only private resources, a
Virtual Private Gateway is used. This functions as a private doorway and enables the
creation of a Virtual Private Network (VPN) connection. This connection allows traffic
from approved networks, ensuring that private resources are only accessible to
authorized users within a private network.

2
Module 6 Compute

6.1 EC2 Features

Virtual computing environment - instances

● Pre-configured templates for your instances - AMIs


● Various configurations of compute, storage, memory, network - instance types
● Secure login using keypair
● Storage for temporary data
● Persistent storage
● Availability in multiple physical locations
● Firewall – security groups

6.2 Amazon Cloudwatch for Monitoring

● Use Amazon CloudWatch to monitor EC2 instances


● Provides near-real-time metrics
● Provides charts in the Amazon EC2 console Monitoring tab that you can view
● Maintains 15 months of historical data
● Basic monitoring
● Default, no additional cost
● Metric data sent to CloudWatch every 5 minutes

6.3 Containers

Containers provide a standard way to package your application's code, configurations, and
dependencies into a single object. Containers share an operating system installed on the server
and run as resource-isolated processes, ensuring quick, reliable, and consistent deployments,
regardless of environment.

2
6.4 What is Docker?

Docker is a software platform that enables you to build, test, and deploy applications quickly.
Docker packages software into standardized units called containers that have everything the
software needs to run including libraries, system tools, code, and runtime. Using Docker, you can
quickly deploy and scale applications into any environment and know your code will run.
Running Docker on AWS provides developers and admins a highly reliable, low-cost way to
build, ship, and run distributed applications at any scale.

6.5 What is Kubernetes?

Kubernetes is open source software for container orchestration.

● Deploy and manage containerized applications at scale.


● The same toolset can be used on premises and in the cloud.

6.6 What is Lambda?

AWS Lambda is a serverless computer service that provides built-in fault tolerance and
automatic scaling.
Benefits of Lambda

● It supports multiple programming languages


● Completely automated administration
● Built-in fault tolerance
● It supports the orchestration of multiple functions
● Pay-per-use pricing

6.7 AWS Elastic Beanstalk

● AWS Elastic Beanstalk enhances developer productivity.


● Simplifies the process of deploying your application.
● Reduces management complexity.
● Elastic Beanstalk supports Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker

2
Module 7 Storage

7.1 Amazon Storage services

There are 3 types of storage services :

● Object: Amazon simple storage services


● File: Amazon elastic file system Amazon FSx for lustre, Amazon FSx for windows
file server[4]
● Block: Amazon elastic block store

7.2 Amazon EBS features

● Persistent and customizable block storage for Amazon EC2


● HDD and SSD types
● Replicated in the same Availability Zone
● Easy and transparent encryption
● Back up by using snapshots

Amazon simple storage service features

Amazon S3 is a fully managed cloud storage service. You can store a virtually unlimited number

3
of objects. You pay for only what you use. You can access Amazon S3 at any time from
anywhere through a URL. Amazon S3 offers rich security controls.

7.3 Amazon S3 Glacier

Amazon S3 Glacier is a data archiving service that is designed for security, durability, and an
extremely low cost. Amazon S3 Glacier pricing is based on Region.

● Its extremely low-cost design works well for long-term archiving.


● The service is designed to provide 11 9s of durability for objects.

7.4 Amazon elastic file storage

● Amazon EFS provides file storage over a network.


● Perfect for big data and analytics, media processing workflows, content management,
web serving, and home directories.
● Fully managed service that eliminates storage administration tasks.
● Accessible from the console, an API, or the CLI.
● Scales up or down as files are added or removed and you pay for what you use.

3
Module 8 Databases

8.1 Amazon Relational Database Service (Amazon RDS)

Managed service that sets up and operates a relational database in the


cloud. Features –

● Managed service
● Accessible via the console, AWS Command Line Interface (AWS CLI), or application
programming interface (API) calls[3]
● Scalable (compute and storage)
● Automated redundancy and backup are available
● Supported database engines:
● Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle, Microsoft SQL Server

8.2 What is Amazon DynamoDB ?

It is a Fast and flexible NoSQL database service for any scale. DynamoDB supports two
different kinds of primary keys: Partition key and partition and sort key
Features :

● Runs exclusively on SSDs.


● Supports document and key-value store models.
● Replicates your tables automatically across your choice of AWS Regions.
● Works well for mobile, web, gaming, tech, and Internet of Things (IoT) applications.
● Is accessible via the console, the AWS CLI, and API calls.
● Provides consistent, single-digit millisecond latency at any scale.
● Has no limits on table size or throughput.

3
8.3 Amazon Redshift

● Fast, fully managed data warehouse service


● Easily scale with no downtime
● Columnar storage and parallel processing architectures
● Automatically and continuously monitors cluster
● Encryption is built in

3
Module 9 Cloud Architecture

9.1 AWS Well-Architected Framework

The AWS Well-Architected Framework helps you understand the pros and cons of decisions you
make while building systems on AWS A guide for designing infrastructures that are:

● Secure
● High-performing
● Resilient
● Efficient

The AWS Well-Architected Framework is organized into five pillars.


● Operational excellence
● Security
● Reliability
● Performance efficiency
● Cost optimization

Reliability is a measure of your system’s ability to provide functionality when desired by the
user, and it can be measured in terms of MTBF.
Availability is the percentage of time that a system is operating normally or correctly performing
the operations expected of it (or normal operation time over total time). Three factors that
influence the availability of your applications are fault tolerance, scalability, and recoverability.
You can design your workloads and applications to be highly available.

9.2 AWS Trusted advisor


It is an Online tool that provides real-time guidance to help you provision your resources
following AWS best practices. Look at your entire AWS environment.

3
Module 10 Automatic Scaling and Monitoring

10.1 Elastic Load Balancing

Distributes incoming application or network traffic across multiple targets in a single


AvailabilityZone or across multiple Availability Zones. Scales your load balancer as
traffic to your application changes over time.

Types of load balancers :

● Application load balancer


● Network load balancer
● Classic load balancer

ELB offers instance health checks, security, and monitoring.

Amazon CloudWatch helps you monitor your AWS resources—and the applications
that you run on AWS—in real time.

10.2 AWS Autoscaling

Scaling enables you to respond quickly to changes in resource needs. Amazon EC2 Auto
Scaling maintains application availability by automatically adding or removing EC2
instances. An Auto Scaling group is a collection of EC2 instances. A launch
configuration is an instance configuration template. Dynamic scaling uses Amazon EC2

Auto Scaling, CloudWatch, and Elastic Load Balancing. AWS Auto Scaling is a
separate servicefrom Amazon EC2 Auto Scaling.

3
Learning after
Training
After completing the AWS Cloud Foundation and AWS Cloud Architecture training, I
have gained valuable knowledge and insights into cloud computing and AWS services.
Here are some of the key learnings I took away from these courses:

 Understanding of Cloud Computing: I now have a solid grasp of the


fundamental concepts of cloud computing, including the benefits, deployment
models (public, private, and hybrid), and service models (IaaS, PaaS, SaaS).

 AWS Core Services: I have learned about the core AWS services, such as EC2
(Elastic Compute Cloud), S3 (Simple Storage Service), RDS (Relational
Database Service), and more, which form the foundation of cloud infrastructure.

 Architecture Best Practices: The AWS Cloud Architecture course has provided
me with insights into best practices for designing and implementing cloud-
based architectures. This includes considerations for scalability, high
availability, and fault tolerance.

 Security and Compliance: I now understand the importance of security in the


cloud and how AWS provides tools and services to secure data and
applications. This includes Identity and Access Management (IAM) and
compliance considerations.

 Cost Management: I've learned how to manage and optimize costs in the cloud,
including understanding AWS pricing models and using cost control tools like
AWS Cost Explorer.

 Networking and VPCs: The training has equipped me with knowledge about
Amazon Virtual Private Cloud (VPC) and how to design and manage network
resources within AWS.

 Serverless Computing: I have a basic understanding of serverless computing

3
with AWS Lambda and how to create serverless applications.

3
 Databases and Data Storage: I've learned about various AWS database and
storage services, enabling me to make informed decisions about data storage
and retrieval.

3
 Elasticity and Scaling: I now understand how to design applications for
elasticity and scaling to meet changing demands efficiently.

 Monitoring and Management: I've gained knowledge about AWS tools for
monitoring, logging, and managing resources effectively, such as CloudWatch
and CloudFormation.

 Hands-On Experience: Throughout the courses, I had the opportunity to work


on practical exercises and labs, which allowed me to apply my knowledge in a
real-world AWS environment.

 Certification Path: I am now aware of the AWS certification paths and how to
further enhance my expertise in AWS by pursuing certifications like AWS
Certified Solutions Architect, AWS Certified Developer, or AWS Certified
SysOps Administrator.

Overall, the training has provided me with a strong foundation in AWS cloud
computing and architecture, and I feel more confident in my ability to design, deploy,
and manage cloud-based solutions using AWS services. I look forward to applying this
knowledge in my professional work and potentially pursuing AWS certifications to
validate my skills further.

3
Conclusion
AWS is designed to allow application providers, ISVs, and vendors to host your
applications quickly and securely – whether an existing application or a new SaaS-based
application. You canuse the AWS Management Console or well-documented web
services APIs to access AWS’s application hosting platform. AWS enables you to select
the operating system, programming language, web application platform, database, and
other services you need. With AWS, you receive a virtual environment that lets you load
the software and services your application requires. This eases the migration process for
existing applications while preserving options for building new solutions. You pay only
for the computing power, storage, and other resources you use, with no long-term
contracts or up-front commitments. For more information on comparing the costs of
other hosting alternatives with AWS, see the AWS Economics Center. With AWS, you
take advantage of a scalable, reliable, and secure global computing infrastructure, the
virtual backbone of Amazon.com’s multi-billion dollar online business that has been
honed for over a decade. Using AWS tools, Auto Scaling, and Elastic Load Balancing,
your application can scale up or down based on demand. Backed by Amazon’s massive
infrastructure, you have access to compute and storage resources when you need them.
AWS utilizes an end-to- end approach to secure and harden our infrastructure, including
physical, operational, and software measures. Formore information, see the AWS
Security Center.
in cloud architecture

4
References

AWS Official Website:

[1] Amazon Web Services, Inc. "Amazon Web Services (AWS)." [Online].
Available: https://aws.amazon.com/.

AWS Documentation:

[2] Amazon Web Services, Inc. "AWS Documentation." [Online].


Available: https://docs.aws.amazon.com/.

AWS Whitepapers:

[3] Amazon Web Services, Inc. "AWS Whitepapers." [Online].


Available: https://aws.amazon.com/whitepapers/.

AWS Blog:

[4] Amazon Web Services, Inc. "AWS Blog." [Online].


Available: https://aws.amazon.com/blogs/.

AWS YouTube Channel:

[5] Amazon Web Services, Inc. "AWS YouTube Channel." [Online].


Available: https://www.youtube.com/user/AmazonWebServices.

4
Appendix

 AWS - Amazon Web Services: AWS is a comprehensive cloud computing


platform provided by Amazon, offering a wide range of cloud services,
including computing power, storage, databases, and more.

 IAM - Identity and Access Management: IAM is a service in AWS that allows
you to control access to your AWS resources. It enables you to create and
manage user identities and their permissions.

 S3 - Simple Storage Service: S3 is an object storage service in AWS that allows


you to store and retrieve data. It's highly scalable and offers features like data
archiving and data management.

 EC2 - Elastic Compute Cloud: EC2 is a web service that provides resizable
compute capacity in the cloud. It allows you to launch virtual servers known as
instances.

 RDS - Relational Database Service: RDS is a managed relational database


service in AWS. It simplifies the process of setting up, operating, and scaling a
relational database.

 VPC - Virtual Private Cloud: VPC is a virtual network dedicated to your AWS
account. It enables you to launch AWS resources into a virtual network,
providing network isolation and security.

 PaaS - Platform as a Service: PaaS is a cloud computing service that provides a


platform for developing, running, and managing applications. AWS Elastic
Beanstalk is an example of PaaS on AWS.

 IaaS - Infrastructure as a Service: IaaS provides virtualized computing


resources over the internet. AWS EC2 is a prime example of IaaS, allowing
youto rent virtual servers.

 SaaS - Software as a Service: SaaS delivers software applications over the


internet. AWS offers services like Amazon WorkMail as an example of SaaS.

 URL - Uniform Resource Locator: A URL is a web address that specifies the
location of a resource on the internet, such as a website or file.

4
4

You might also like