Bece 355l Aws Cloud Module 1
Bece 355l Aws Cloud Module 1
for
Module 5:
AWS
Architectural
Best Module 4: AWS Security and compliance
practices
Module 3: AWS
Database
services
• The following are some of the Operations that can be performed with Cloud Computing
• Storage, backup, and recovery of data
• Delivery of software on demand
• Development of new applications and services
• Streaming videos and audio
SDD Vs HDD Module-1; Topic-1: Introduction to Cloud Computing
• A server hardware is
a computer which
runs 24×7 with
redundancy
components/ fault
tolerance for
continuous working.
The server has the
storage, computation,
networking and
memory.
• Storage- Persistent
storage of the data.
Eg. HDD and SSD
Module-1; Topic-1: Introduction to Cloud Computing
Introduction to Cloud Computing
• IOPS (input/output operations per
second) is the standard unit of
measurement for the maximum number of
reads/writes to noncontiguous storage
locations.
• C:\ is boot root or the operating systems.
• Throughput is a measurement of bits or
bytes per second that can be processed by
a storage device. Throughput is high for
SSD and low for HDD.
• The anti-pattern is a commonly-used
process, structure or pattern of action that,
Source: https://www.techtarget.com/searchstorage/definition/IOPS- despite initially appearing to be an
input-output-operations-per-second appropriate and effective response to a
problem, has more bad consequences than
good ones.
How can AWS support your HDD Module-1; Topic-1: Introduction to Cloud Computing
and SSD requirements? • Amazon Elastic File System
(Amazon EFS) is a
serverless, set-and-forget file
system for AWS compute
services. This allows you to
access files and scale or
shrink storage as you require.
• Amazon Simple Storage
Service (Amazon S3) offers
data availability, security,
performance, and industry-
Amazon Web Services (AWS) has several storage solutions to leading scalability for all
offer that abstract solid state drive (SSD) and hard disk drive
types of data.
(HDD) concerns:
• AWS Storage Gateway
• Amazon Elastic Block Store (Amazon EBS) offers low-
cost cold HDD storage in the cloud. provides virtually unlimited
cloud storage to on-premises
applications.
How can AWS support your HDD Module-1; Topic-1: Introduction to Cloud Computing
and SSD requirements?
• Computation-CPU- Generic
processor of the instructions
(Maximum 10 cores) and operating
system relies on the CPU.
• Networking
• Memory-RAM-(Speed)-Volatile
data of Primary Memory where this
has the capability of loading the
data for processing. Source: https://www.buurst.com/support-and-services/support/aws-
• GPU-powerful processor for backend-storage-selection-guide/
specialized processing/limited tasks A combination of the server hardware is the data centers.
in a few micro seconds. Each data centers has 50000 to 80000 servers which are
(Thousands of Cores)-Parallel managed at the center. A rack is a collection of servers.
processing of large quantum of data Data centers are basically non-descript (non-disclosure of
the company).
Module-1; Topic-1: Introduction to Cloud Computing
Introduction to Cloud Computing
• On-premises model (private cloud)-privately owned data
center by a third-party provider and is accessible only by
that specific organization.
• Over provisioning- Utilizing so many resources than actual
need for resource-Customer waiting is more.
• Infrastructure as software- A solution to over provisioning
or under provisioning where cloud computing enables to
avoid using infrastructure as hardware and instead use it
as software.
• Traditional Computing model –Infrastructure as
hardware and hardware solutions require (1) Space, staff,
physical security, planning and capital expenditure, (2) long
hardware procurement cycle, (3) require of provision
capacity by guessing theoretical maximum peak.
• Traditional Computing model –Infrastructure as software
and software solutions are (1) flexible, (2) Change more
quickly end easily, (3) Eliminate the undifferentiated heavy
lifting tasks (Stop maintaining the data centers).
Module-1; Topic-1: Introduction to Cloud Computing
Understanding How Cloud
Computing Works?
• Cloud computing helps users in easily
accessing computing resources like
storage, and processing over internet
rather than local hardware's.
• Infrastructure: Cloud computing
depends on remote network
servers hosted on internet for
store, manage, and process the
data.
• On-Demand Access: Users can • Types of Services: Cloud computing
access cloud services and
offers various benefits such as cost
resources based on-demand they
can scale up or down the without saving, scalability, reliability and
having to invest for physical acessibility it reduces capital
hardware. expenditures, improves efficiency.
Module-1; Topic-1: Introduction to Cloud Computing
What is Virtualization In Cloud
Computing?
• Virtualization is the software technology that
creates logical isolation of physical resources
such as RAM, CPU, and Storage.. over the
cloud is known as Virtualization in Cloud
Computing-(Creating types of Virtual
Instances of computing resources over the
cloud)
• It provides better management and utilization
of hardware resources with logical isolation
making the applications independent of
others. • Hypervisor: A hypervisor is a software that run
multiple virtual machines on a single physical
• Virtualization facilitates streamlining the machine where each virtual machine has its own
resource allocation and enhancing scalability
operating system and applications.
for multiple virtual computers within a single
• The hypervisor allocates the underlying physical
physical source offering cost-effectiveness
computing resources such as CPU and memory to
and better optimization of resources.
individual virtual machines as required.
Module-1; Topic-1: Introduction to Cloud Computing
What is Virtualization In Cloud
Computing? • In Cloud Computing, Virtualization is a technology
that builds a virtual ecosystem of storage devices and
A data center is a Server OS. It is residing under the virtualized
physical ecosystem that could be public or a private cloud.
location that • Load Balancer: automatically distributes your
stores incoming traffic across multiple targets, such as EC2
computing instances, containers, and IP addresses, in one or
machines and more Availability Zones.
their related • Virtualization resources can be raised up, which will
hardware reduce the requirement of a physical system using
equipment. Scale up or scale out.
• Scaling up is when you change the instance types
within your Auto Scaling Group to a higher type (for
example: changing an instance from a m4.large to a
m4.xlarge), scaling down is to do the reverse.
• Scaling out is when you add more instances to your
Auto Scaling Group and scaling in is when you
reduce the number of instances in your Auto Scaling
Group.
• When you scale out, you distribute your load and risk
which in turn provides a more resilient solution
Module-1; Topic-1: Introduction to Cloud Computing
What is Virtualization In Cloud
Computing? Features of Virtualization
1. Partitioning
• Virtualization makes it possible to run
multiple servers at the same time on the
physical server.
2. Encapsulation of Data
• All data stored inside the virtual server,
including the boot disks, will be
encapsulated in a file format.
3. Isolation
• The Virtual server working on the
physical server is safely separated and will
not affect each other’s tasks.
4. Hardware Independence
• When the Virtual Server runs, it can
migrate on multiple hardware platforms.
Module-1; Topic-1: Introduction to Cloud Computing
What Is Cloud Hosting?
Source:
https://www.hostinge
r.in/tutorials/what-is-
cloud-hosting
• Cloud Watch— Cloud watch helps you to monitor AWS environments like EC2, RDS
instances, and CPU utilization. It also triggers alarms depends on various metrics.
• Cloud Formation— It is a way of turning infrastructure into the cloud. You can use templates
for providing a whole production environment in minutes.
• Cloud Trail— It offers an easy method of auditing AWS resources. It helps you to log all
changes.
• Ops Works— The service allows you to automated Chef/Puppet deployments on AWS
environment.
• Config— This AWS service monitors your environment. The tool sends alerts about changes
when you break certain defined configurations.
• Service Catalog — This service helps large enterprises to authorize which services user will be
used and which won’t.
• AWS Auto Scaling— The service allows you to automatically scale your resources up and down
based on given CloudWatch metrics.
• Systems Manager — This AWS service allows you to group your resources. It allows you to
identify issues and act on them.
• Managed Services—It offers management of your AWS infrastructure which allows you to
focus on your applications.
Module-1; Topic-2: Overview of AWS Cloud
Internet of Things
• IoT Core— The
service allows
connected
devices like cars,
light bulbs, sensor
grids, to securely
interact with cloud
applications and
other devices.
• IoT Device
Management —It • IoT Analytics —This AWS IOT service is helpful to
allows you to perform analysis on data collected by your IoT devices.
manage your IoT • Amazon FreeRTOS—This RTOS (real-time operating
devices at any system) for microcontrollers helps you to connect IoT
scale. devices in the local server or into the cloud.
Module-1; Topic-2: Overview of AWS Cloud
Application Services
• Step Functions— It is a way
of visualizing what’s going
inside your application and
what different micro-services
it is using.
• SWF (Simple Workflow
Service) — The service helps
you to coordinate both
automated tasks and human-
led tasks. • SQS (Simple Queue Service) — Use this AWS
• SNS (Simple Notification service to decouple your applications. It is a pull-
Service) — You can use this based service.
service to send you • Elastic Transcoder — This AWS service tool
notifications in the form of helps you to changes a video’s format and
email and SMS based on resolution to support various devices like tablets,
given AWS services. smartphones, and laptops of different resolutions.
Developer Tools Module-1; Topic-2: Overview of AWS Cloud
AWS’s text-to-speech
service allows you to
create audio versions of
your notes
Source: https://intellisoft.io/what-is-cloud-computing-understanding-the-basics-services-and-benefits/
Module-1; Topic-3: Cloud service models
Cloud Service Models
Source: https://hazelcast.com/glossary/infrastructure-as-a-service-iaas/
Module-1; Topic-3: Cloud service models
Cloud Service Models
Module-1; Topic-3: Cloud service models
Cloud Service Models
1. Infrastructure as a Service
( IaaS )
•Flexibility and Control: IaaS
comes up with providing
virtualized computing resources
such as VMs, Storage, and
networks facilitating users with
control over the Operating
system and applications.
•Reducing Expenses of
Hardware: IaaS provides
business cost savings with the •Scalability of Resources: The cloud provides in
elimination of physical scaling of hardware resources up or down as per
infrastructure investments demand facilitating optimal performance with cost
making it cost-effective. efficiency.
Module-1; Topic-3: Cloud service models
Cloud Service Models
2. Platform as a Service ( PaaS )
• Simplifying the Development:
Platform as a Service offers
application development by
keeping the underlying
Infrastructure as an Abstraction.
• It helps the developers to
completely focus on application
logic ( Code ) and background
operations are completely managed
by the AWS platform.
• Enhancing Efficiency and Productivity: PaaS lowers the Management of Infrastructure
complexity, speeding up the Execution time and bringing the updates quickly to market by
streamlining the development process.
• Automation of Scaling: Management of resource scaling, guaranteeing the program’s
workload efficiency is ensured by PaaS.
Module-1; Topic-3: Cloud service models
Cloud Service Models
3. SaaS (software as a service)
• Collaboration And Accessibility:
Software as a Service (SaaS) helps
users to easily access applications
without having the requirement of local
installations. It is fully managed by the
AWS Software working as a service
over the internet encouraging effortless
cooperation and ease of access.
• Automation of Updates: SaaS providers
manage the handling of software
maintenance with automatic latest
updates ensuring users gain experience • Cost Efficiency: SaaS acts as a cost-effective
with the latest features and security solution by reducing the overhead of IT support
patches. by eliminating the need for individual software
licenses.
Module-1; Topic-3: Cloud service models
Summary on Cloud Service Models
Module-1; Topic-3: Cloud service models
Summary on Cloud Service Models
Module-1; Topic-4: Cloud Deployment Models
Cloud Deployment Models
• Cloud Deployment Model functions as a virtual
computing environment with a deployment
architecture that varies depending on the amount
of data you want to store and who has access to
the infrastructure.
• The cloud deployment model identifies the specific
type of cloud environment based on ownership, scale,
and access, as well as the cloud’s nature and purpose.
• The location of the servers you’re utilizing and who
controls them are defined by a cloud deployment
model.
• It specifies how your cloud infrastructure will look,
what you can change, and whether you will be given
services or will have to create everything yourself.
Module-1; Topic-4: Cloud Deployment Models
Public Cloud
• The public cloud makes it possible for
anybody to access systems and
services.
• The public cloud may be less secure as
it is open to everyone.
• The public cloud is one in which cloud
infrastructure services are provided
over the internet to the general people
or major industry groups.
• The infrastructure in this cloud model • This form of cloud computing is an excellent
is owned by the entity that delivers the example of cloud hosting, in which service
cloud services, not by the consumer. providers supply services to a variety of
• It is a type of cloud hosting that allows customers.
customers and users to easily access • In this arrangement, storage backup and retrieval
systems and services. services are given for free, as a subscription, or on
a per-user basis.
• For example, Google App Engine etc.
Advantages and Disadvantages of the Module-1; Topic-4: Cloud Deployment Models
Public Cloud Model
Advantages:
• Minimal Investment: Because it is a pay-per-
use service, there is no substantial upfront
fee, making it excellent for enterprises that
require immediate access to resources.
• No setup cost: The entire infrastructure is
fully subsidized by the cloud service
providers, thus there is no need to set up any
hardware.
• Infrastructure Management is not required:
Using the public cloud does not necessitate Disadvantages of the Public Cloud Model
infrastructure management. •Less secure: Public cloud is less secure as
resources are public so there is no guarantee of
• No maintenance: The maintenance work is done
high-level security.
by the service provider (not users). •Low customization: It is accessed by many
• Dynamic Scalability: To fulfill your company’s public so it can’t be customized according to
needs, on-demand resources are accessible. personal requirements.
Module-1; Topic-4: Cloud Deployment Models
AWS Public Cloud
• In the public cloud space, AWS provides
services such as the Amazon Elastic
Compute Cloud (Amazon EC2), which
provides infrastructure and services over
the public internet and are hosted at an
identified AWS Region (for example,
Canada Central).
• Although the infrastructure and services
are provisioned from a remote location,
the customer has no control and limited
visibility over where the service is hosted. AWS public cloud is well-suited for the following:
• But they can use those services anytime • Data storage
anywhere as needed. The AWS public • Data Archival
• Application Hosting
cloud offers advantages such as low cost
• Latency intolerant or mission critical web tiers
of ownership, automated deployments, • On-demand hosting for microsite and application
scalability, security, recovery and • Auto-scaling environment for large applications
reliability.
Module-1; Topic-4: Cloud Deployment Models
Private Cloud
• The private cloud deployment model is
the exact opposite of the public cloud
deployment model.
• It’s a one-on-one environment for a
single user (customer).
• There is no need to share your
hardware with anyone else.
• The distinction between private and
public clouds is in how you handle all
of the hardware.
• It is also called the “internal cloud” & • The cloud platform is implemented in a cloud-
it refers to the ability to access systems based secure environment that is protected by
and services within a given border or powerful firewalls and under the supervision of an
organization. organization’s IT department.
• The private cloud gives greater flexibility of
control over cloud resources.
Advantage and Disadvantage of Private Module-1; Topic-4: Cloud Deployment Models
Cloud
Advantages of the Private Cloud Model
• Better Control: You are the sole owner of the
property. You gain complete command over
service integration, IT operations, policies,
and user behavior.
• Data Security and Privacy: It’s suitable for
storing corporate information to which only
authorized staff have access. By segmenting
resources within the same infrastructure,
improved access and security can be
achieved. Disadvantages of the Private Cloud Model
• Supports Legacy Systems: This approach is • Less scalable: Private clouds are scaled within
designed to work with legacy systems that a certain range as there is less number of
are unable to access the public cloud. clients.
• Customization: Unlike a public cloud • Costly: Private clouds are more costly as they
deployment, a private cloud allows a provide personalized facilities.
company to tailor its solution to meet its
specific needs.
Module-1; Topic-4: Cloud Deployment Models
AWS Private Cloud
• Private cloud environments offer greater
configurability support to any application, and
support those legacy applications that suffer from
performance issues in the public cloud.
Choosing a private cloud makes sense for:
•Strict security, latency, regulatory and data privacy
levels not met by the public cloud.
•Organizations that are highly regulated and need
In the private cloud space, AWS provides the Amazon data hosted privately and securely.
Virtual Private Cloud (Amazon VPC). •Organizations that are large enough to support the
• A private cloud-cloud infrastructure for use costs.
exclusively by a single organization. •Organizations that need high-performance access
• The cloud is owned, managed and operated to a file system, such as media companies.
exclusively by the organization, by a third-party •Hosting applications that have predictable usage
vendor, or both. patterns and demand low storage costs.
• In this cloud model, the infrastructure is •Organizations that demand greater adaptability,
provisioned on premises using a virtualization
configurability, and flexibility.
layer (for example, VMware).
•Hosting business-critical data and applications.
Module-1; Topic-4: Cloud Deployment Models
Hybrid Cloud
• By bridging the public and private
worlds with a layer of proprietary
software, hybrid cloud computing
gives the best of both worlds.
• With a hybrid solution, you may host
the app in a safe environment while
taking advantage of the public cloud’s
cost savings.
• Organizations can move data and
applications between different clouds
using a combination of two or more
cloud deployment methods, depending
on their needs.
Advantage and Disadvantage of Hybrid Module-1; Topic-4: Cloud Deployment Models
Cloud
Advantages of the Hybrid Cloud Model
• Flexibility and control: Businesses with
more flexibility can design personalized
solutions that meet their particular needs.
• Cost: Because public clouds provide
scalability, you’ll only be responsible for
paying for the extra capacity if you
require it.
• Security: Because data is properly
separated, the chances of data theft by
attackers are considerably reduced. Disadvantages of the Hybrid Cloud Model
•Difficult to manage: Hybrid clouds are difficult to
manage as it is a combination of both public and private
cloud. So, it is complex.
•Slow data transmission: Data transmission in the
hybrid cloud takes place through the public cloud so
latency occurs.
Module-1; Topic-4: Cloud Deployment Models
AWS Hybrid Cloud
• When an organization wants to leverage
the cloud both for its efficiency and
cost saving but also wants on-site
security, privacy, and control, it looks to
the hybrid cloud, which almost serves
as a midway point between the public
and private clouds.
• The hybrid cloud uses a combination of
at least one private and one public A hybrid cloud is best suited for:
cloud. • Large organizations that want the flexibility and scalability
• A hybrid cloud can also consist of as offered by the public cloud.
multiple private and public clouds and • Organizations that offer services for vertical markets-
may use many active servers, physical customer interactions can be hosted in the public cloud
or virtualized, which are not a part of while company data can be hosted in the private cloud.
the private cloud. • Organizations that demand greater operational flexibility
and scalability. For them, mission critical data can be
hosted on the private cloud and application development
and testing can take place in the public cloud.
Module-1; Topic-5: Global Infrastructure
AWS Global Infrastructure Overview
• AWS Data centers- Designed
for security
•Availability Zones- Each region
has multiples Availability Zones,
and it is fully isolated partition of
the AWS infrastructure. They are
designed for fault isolation.
• Selecting a Region-Data
governance and legal requirements
(GDPR compliance for handling
cookies), proximity to customers
(latency), services available with
the region and cost (Vary by
region). Determine the region for
services, applications and data
based on these factors.
How can AWS support your HDD Module-1; Topic-5: Global Infrastructure-Overview
and SSD requirements?
• A cluster of data centers is called as
Availability Zone (AZ) and it is the collection
of one or more data centers.
• Three or more availability zone is called as
region. Each Availability Zone (AZ) carries
high speed low latency data.
• AWS global infrastructure has 33 regions. In
India, AP south -1 and 1a is there in Mumbai
and Hyderabad.
• AWS has Availability Zone (AZ) which is
10-100 kms physically separated and has
high isolation.
Module-1; Topic-5: Global Infrastructure
AWS Global Infrastructure Overview
• The AWS Cloud spans 105 Availability Zones within 33 geographic regions, with announced
plans for 18 more Availability Zones and six more AWS Regions in Malaysia, Mexico, New
Zealand, the Kingdom of Saudi Arabia, Thailand, and the AWS European Sovereign Cloud.
•33 launched Regions each with multiple Availability Zones, 105 Availability Zones, 600+
CloudFront POPs and 13 Regional edge caches.
•Security: AWS's security infrastructure is custom-built for cloud use, monitored 24/7 to ensure
data confidentiality, integrity, and availability. All data flows across the global network is
encrypted, allowing users to control their data, including encryption, movement, and retention
management.
• Availability: AWS offers the highest network availability among cloud providers, with each
region being fully isolated and composed of multiple AZs. Applications can be partitioned across
multiple AZs in the same region, and AWS control planes and management console are
distributed across regions.
•Flexibility: The AWS Global Infrastructure gives you the flexibility of choosing how and where
you want to run your workloads, and when you do you are using the same network, control plane,
API’s, and AWS services.
Module-1; Topic-5: Global Infrastructure
AWS Global Infrastructure Overview
•AWS Global Infrastructure provides high performance through AWS Regions, AWS Local
Zones, and AWS Wavelength, offering low latency, packet loss, and high network quality through
a redundant 400 GbE fiber backbone.
• Global Footprint: AWS's growing global infrastructure footprint allows for flexibility in
selecting the technology infrastructure closest to users' primary target for cloud deployment.
Module-1; Topic-6: AWS Shared responsibility model
AWS Shared responsibility model
• Symmetric encryption
for the data in rest.
• Asymmetric
encryption uses private key
and public key for the data in
Transit.
• AWS responsibility
“Security of the Cloud” - AWS
is responsible for protecting
the infrastructure that runs all
of the services offered in the
AWS Cloud. This
infrastructure is composed of
the hardware, software,
networking, and facilities that
run AWS Cloud services.
Module-1; Topic-6: AWS Shared responsibility model
AWS Shared responsibility model
• Customer responsibility for
security in the cloud is
determined by the chosen
AWS Cloud services, such
as Amazon EC2, which
requires configuration and
management tasks as an
Infrastructure as a Service
(IaaS).
• Customers deploying
Amazon EC2 instances are
responsible for managing
the guest operating system,
application software, and
AWS-provided firewall
configuration on each
instance.
Module-1; Topic-6: AWS Shared responsibility model
AWS Shared responsibility model
• AWS manages infrastructure,
operating system, and platforms for
abstracted services like Amazon S3
and DynamoDB, while customers
manage data, classify assets, and
apply permissions using IAM tools.
• AWS and customers share
responsibility for IT controls,
allowing AWS to manage and verify
these controls. This model relieves
customers of the burden of operating
controls associated with physical
infrastructure. Customers can shift
control management to AWS,
creating a distributed control • They can use AWS control and compliance documentation
environment. for control evaluation and verification.
Module-1; Topic-6: AWS Shared responsibility model
AWS Shared responsibility model
• Inherited Controls – Controls which a
customer fully inherits from AWS.
• Physical and Environmental controls
Shared Controls – Controls which apply
to both the infrastructure layer and
customer layers, but in completely
separate contexts or perspectives.
• In a shared control, AWS provides the
requirements for the infrastructure and
the customer must provide their own
control implementation within their use
of AWS services.
Module-1; Topic-6: AWS Shared responsibility model
AWS Shared responsibility model
Examples include:
• Patch Management – AWS is responsible
for patching and fixing flaws within the
infrastructure, but customers are
responsible for patching their guest OS
and applications.
• Configuration Management – AWS
maintains the configuration of its
infrastructure devices, but a customer is
responsible for configuring their own
guest operating systems, databases, and
applications.
• Awareness & Training - AWS trains
AWS employees, but a customer must
train their own employees.
• Customer Specific – Controls which are
solely the responsibility of the customer Service and Communications Protection or Zone Security which
based on the application they are may require a customer to route or zone data within specific
deploying within AWS services. security environments.
Conclusion-Module-1 Module-1; Summary
• Cloud deployment models define how cloud services are made available to users:
• Public Cloud: Services are delivered over the public internet and are owned and
operated by third-party providers.
• Private Cloud: Cloud infrastructure is dedicated to a single organization and is
either managed internally or by a third party.
• Hybrid Cloud: Combines public and private cloud services, allowing data and
applications to be shared between them.
• AWS Global Infrastructure comprises Regions and Availability Zones: Regions are
separate geographic areas with multiple Availability Zones (AZs) that are isolated
from each other to provide fault tolerance and stability.
• Availability Zones (AZs) are distinct data centers within a region, each with
independent power, cooling, and networking to ensure fault isolation.
• AWS operates on a Shared Responsibility Model: AWS is responsible for securing the
infrastructure that runs all of the services offered in the AWS Cloud.
• Customers are responsible for security "in" the cloud, which includes data
protection, identity and access management, and compliance.