Hey, this is Andrew Brown from exam Pro. And
cloud computing has now become one of the essential skills that you need to learn in order
to make it in the web development industry in AWS, Amazon Web Services is the most popular cloud
computing service used by startups. So this whole course is about getting AWS certified
for the certified cloud practitioner, which is the entry level certification. And the
idea here is that by getting the certification, you are going to be able to prove that you
can work with cloud computing, prove that you can work in AWS and you're gonna have a lot more
job opportunities available to you.
So you know, let's get to this and start learning about AWS.
Hey, this is Andrew Brown from exam Pro. And I'm going to try to answer all the questions you
might have about the CCP, which is known as the certified cloud practitioner to determine whether
it's the right certification for you. Okay, so the CCP is all about AWS foundational
knowledge. So what that means is that it can show that you know how to poke around and
you can use the service console and you know, the general offerings from AWS, it's like a lite
version of the solution architect associate, okay. But the CCP has some very unique offerings,
which no other certification on AWS has, which is they have a strong focus on billing and business
centric concepts. Okay. And that's why it's going to make a lot of sense why a lot of people
who tried to obtain the CCP are in sales and management because it's going to give them that
knowledge to help them inform VPS or CEOs, the reasons why to use AWS. Okay. Alright, so the next
thing you're probably going to ask me is, what value does the CCP hold? Well, it's not a Gilda
title.
It can help superficially increase your a recertification count if that's something that
some companies care about. But it's not recognized as an important certification for developers
on resume. So if you think by getting the CCP, it's going to help you get a job, I probably won't
help too much. If you were a bootcamp grad, then it could be a good indicator that you're a little
bit familiar with AWS. So it can be okay in that one circumstance. But generally, for developers,
it's not going to help you too much. Alright, so maybe you're thinking so far? Hey, Andrew, this
doesn't sound that great. Why would I want to even bother getting this and you might be thinking
about skipping the CCP. But I'm going to tell you that that is not what you should do, you should
actually go get the CCP.
And why is that? Well, it's for a totally different reason. It's because
the CCP is going to help you build confidence. And it's a very easy one, because it's the easiest
certification. Because it's the most inexpensive certification, it's the perfect opportunity for
you to get comfortable for when you actually go take a real exam, okay, so the other exams, the
associates, and everything beyond that are very difficult. And you don't want that to be your
first certification you go for, because you're gonna go the exam center, you're going to be very
nervous or stressed out, or something's gonna go wrong. And so by taking the CCP and going to
the test center, you're going to learn your test center and learn how you have to be on time,
and the what the environments going to be like, okay, and that is the big value out of the CCP.
So that's why I want you to go after it. And also just some people day just to just prepare,
because they might get overwhelmed once they start with a solution architect associate.
And so it is a very easy way to ease into the associate certifications.
Alright, so let's
talk about study time, how much time do I have to put in to pass this exam. Now, if you are a
developer, so you're already working in industry, you can pass this in less than a week. If you're
a bootcamp grad, I'd say about 15 hours. So we're talking about a week and a half of study. And if
you're in sales and management, you probably don't have a lot of developer experience, or with a
cloud infrastructure. So we're looking at 20 hours of study, but the thing is, is that you
can, you know, book this exam a week ahead and use this course and you will pass because it is a
very easy certification, and it's not a huge time requirement. Okay, so that just gives you kind of
an idea of the time you need to put in. Alright, so when it comes time to take this exam, you're
going to have to go to a test center, which is partnered with AWS, and there are two test center
networks, we have psi and Pearson VUE.
And so before the only way you can take this exam, you
had to go in person to a test center. But now that Pearson VUE is part of AWS as its offering the
exam through their network, Pearson VUE is known for their proctored exams. So what is the proctor
exam that's when you have someone that who is supervising or monitoring your examination and
specifically for online Okay, so what that means is that you can sign up and schedule an online
exam and through a web camera and if you You would just take the exam and somebody would watch you to
make sure that you're not cheating. Okay. So now it's even easier to get a VA certified because you
can take this at the convenience of your own home. But I would strongly recommend that you take it at
an in person test center, if there is one nearby, just because when you go for this harder
certifications, they may not offer proctored exams.
And so I at this point, I recommend that
you try to go to a test center. But if you just want to get even certified, and you're really
excited, definitely go take it online. Alright, and now we just have some remaining questions
here. So what does it cost to take this exam, it's $100 USD is the most inexpensive eight have
a certification, it's going to take 90 minutes, that's the time that you're allocated during the
the exam, it doesn't actually take that long, you could probably get it done in under an hour
it again, it's not a very hard certification. But I do recommend that when you go to the exam,
you maximize all of your time and review your questions. Because it is a very good habit to get
into when you take exams, there are 65 questions, the passing score is 70%. I think that actually
is a hard number. With all the other exams, it's kind of a floating number. So it's never
exactly that amount.
But I'm pretty sure for the cloud practitioner, if you get over 70%, you
are going to pass, okay. And then when you get the certification, it's going to be valid for three
years. So it's going to be with you for quite a long time. So there you go. Hopefully that answers
all the questions you have about the certified cloud practitioner. Hey, this is Andrew Brown
from exam Pro. And here I have the exam guide pulled up, because I'm going to give you a quick
walkthrough of it. So you have an idea what AWS wants you to know, in order to pass this exam.
So the first thing we're going to do is we're going to scroll on down to the content outline,
and just give the domains a read and understand the weighting of the actual exam.
So we have four
domains. Here, we have cloud concepts, security, technology, and billing and pricing. And so the
largest portion of the exam is technology at 36%. And billing and pricing is the lowest amount which
is kind of funny, because I find that the most valuable thing in the entire course is billing and
pricing. Okay, we're going to learn a lot about billing and pricing, AWS here. But that's just
how they waited it out. But let's just talk about these four domains. So we understand what it is
that we need to know for each of these domains. So for domain one, we need to be we need to be able
to define the AWS cloud and its value proposition, we need to be able to identify aspects of
Eva's cloud economics list of the different cloud architecture design principles, okay.
Now for security, we need to know a variety of different AWS security services. And we need
to know the shared responsibility model, okay, you need to know that for every single exam, it's
always brought up like 100 times over.
But yeah, that's part of the security donate onto
technology, you're going to need to know all the core database services and also a bunch
of other AWS services. And you're going to need to know global infrastructure. Okay, so we're
talking regions, azs, and edge locations. All right. And then on to billing and pricing. So we
need to be able to compare and contrast various pricing models for AWS recognize the various
account structures in relation to Eva's billing and pricing and identify resources available for
billing support. So that is the content outline. So the next thing I wanted to go over with you is
the response type. So when you're taking the exam, you're going to be presented questions in one
or the other format. So we have multiple choice and multiple responses for multiple choice, you
just choose one out of four, okay, and then for multiple response, it's going to be two or more
correct responses out of five or more options, okay, but generally, I find that it's two out of
five or three out of six.
Okay. And then the last thing here is white papers. So white papers are
generally core to studying for AWS, for the CCP, however, you do not have to read a single white
paper, everything in this course covers anything that could possibly pop up in these white papers
here. And white papers are super boring. Okay. But just so you know, we have the overview of
Amazon Web Services architecting for the cloud, eight of us best practices, how AWS pricing
works, cost management in the in AWS cloud, okay, so those are your four white papers recommended
and then a fifth one, this isn't a white paper though, but they just say compare the a of a
support plan.
So you go to the webpage and you read about the support plans. Okay, so there you
go. That is the exam guide in a nutshell. Hey, This is Andrew Brown from exam Pro. And we are
looking at what is cloud computing, which is the most important question on our journey to become
a certified cloud practitioner. So what I've done here is I've pulled up the textbook definition
of cloud computing. And we will read through this and then I will give you a bit more context
on what is cloud computing. So Cloud computing, from the dictionary is the practice of using a
network of remote servers hosted on the internet to store manage and process data rather than
a local server or personal computer. Okay, so what does that mean? Well, to really understand
that, we need to understand on premise and cloud providers, so now most people are using cloud
providers such as AWS, GCP, or Azure to run their actual workloads. And prior to that everyone
was doing on premise. So what you would do with on premise is you'd own the servers.
So it'd be the
hardware and the software, you'd hire the people to configure those servers and those applications,
you'd pay or rent the real estate to house all these physical servers. And you would take all
the risk. Now on premise is still well and alive today. And there's definitely good reasons to have
an on premise solution. But a lot of companies are now starting to use cloud providers. And so
cloud providers are like AWS, GCP, and Azure, as I said earlier. And so here, it's someone else
owns the servers. So you are not responsible for that hardware, and to different degrees, they
will configure the software layer for you, or you have control over yourself depends on what
kind of service you're using. They're hiring the IT people, and they're watching these servers
around the clock for you. So you do not have to pay for that. And someone else is paying for or
renting the real estate. So they are buying the real estate to house these servers, which are data
centers. And now you have a shared responsibility. So you're responsible for configuring cloud
services and the code that you deploy on to the services.
And so these cloud providers are going
to take care of the rest for you. Okay, so that is generally what cloud computing is, Hey, this
is Angie brown from exam Pro. And we are looking at the six advantages and benefits of cloud
computing. And so this section really is about why go with a cloud provider over on premise. Okay,
and so let's jump into the first point here. So we have trade capital expense for variable expense.
So with on prem, you'd have to pay for your data centers, and the servers. And so that would be
an upfront cost where with a cloud provider, you're paying on demand, so you only pay when you
consume those computing resources, and pretty much nothing else.
Okay. Moving on to number two, we
have benefit from massive economics of scale. So when you're using cloud computing, you have usage
from hundreds of 1000s of customers aggregated in the cloud. And so you are sharing the cost
with other customers to get unbeatable savings, which you cannot get on prem. The next point here
is stop guessing capacity. So eliminate guesswork about infrastructure capacities. So instead of
paying for idle or underutilized servers, you can scale up or down to meet the current needs.
So where on prem, you just buy your servers, and they would either be underutilized because
they would just be way too big for the job, or they're just not being utilized all the time.
So moving on to number four, increased speed and agility. So with cloud computing, you can launch
resources within a few clicks, within minutes, instead of waiting days or weeks for your it to
implement the solution on prem.
Then number five, we have stopped spending money on running a
maintaining data centers. So the idea here is that if you don't have to pay for the servers,
the IT staff and a bunch of other stuff, then you can just focus on your customers, okay? So rather
than that heavy lifting of racking, stacking and powering servers, and the last point here is go
global in minutes.
So deploy your app in multi multiple regions around the world with, with
a few clicks, provide low latency and a better experience for your customers at minimal costs.
And so when you have an on prem environment, that data center is, I don't know how many people
can afford multiple data centers. But with AWS and cloud computing, you're gonna have a lot more
reach. Okay, so those are the six advantages or benefits of cloud computing. And this definitely
shows up on the exam. So you do need to know these six points. Hey, this is Andrew Brown from exam
Pro.
And we are looking at the types of cloud computing we have three here for us. So we have
software as a service platform as a service and infrastructure as a service. And you can see
that we have this nice pyramid here. I promise you It's not a scheme scheme, it's just a way of
showing how one is built on top of another. Okay. So starting at the top here, we have Software as
a Service, also known as SAS. And these are for customers, okay, so the idea is that you have a
completed product that that is run and managed by the service provider. So you don't have to worry
about how the service is maintained, it just works and remains available.
So if we had some
examples of sasses here, maybe you'd have your Gmail or your office 365 or your Salesforce, okay,
going down to platform as IT services is really intended for developers, it removes the need
for your organization to manage the underlying infrastructure and focus on the deployment and
management of your applications. So the idea here is you don't have to worry about provisioning and
configuring and understanding the hardware. Alas, it just works. So you have an app, you push it. So
for AWS, you have Elastic Beanstalk. Then there's also Heroku, which is a very popular service. And
then I believe there's one called like engines for Google. And then the last one on our list here
is infrastructure service. And this is really intended for admins. And so when you're using
AWS, GCP, or Azure, this is what infrastructure as a services. So it's the basic building blocks
for cloud it. So it provides access to networking features, computers, and data storage space.
So you don't worry about the IT staff, the data centers or the hardware, but you have access to
all those resources to build whatever you want, okay, and so obviously, a, if you wanted to build
your own platform as a service, you'd build that up on top of IT infrastructure service, if you
wanted to build your own software as a service, you could build that on top of the platform as
a service, or an infrastructure as a service. So there you go.
Hey, this is Andrew Brown
from exam Pro. And we are looking at cloud computing deployment models. So there are three
different kinds here. And so we're gonna start with the cloud on the left hand side work on to
on prem, and then talk about hybrid. So Cloud is where you are fully utilizing cloud computing. So
here I have a few services such as Squarespace, Basecamp, and Dropbox. And it is very well suited
for startups, because it's extremely low cost. It's great for SAS offerings, where with on prem
or hybrid, they might never get to the size where they need to deal with regulatory bodies, or, or
it's just the nature of the applications are not that complicated. Or if it's new projects
or companies, they don't have red tape, because they have existing infrastructure,
okay, and they can design to be 100% on cloud. So now going on to on prem. So on prem is when
you are deploying resources on premise using virtualization and resource management tools, and
is sometimes called private cloud, and so on prem is still being utilized by a lot of companies
today.
And generally, you will see public sector so the government has on prem data centers, when
you're dealing with super sensitive data, such as hospitals, you have like health records, there is
an aversion to putting that into the cloud, or you have large enterprises with heavy regulation.
So insurance companies, and I mean, these organizations are starting to soften and start
utilizing cloud, but there are still holdouts, and reasons, both technical and, and business or
political reasons as to why you cannot use Cloud, okay, then you have hybrid. And so hybrid is where
you use a combination of both cloud and on prem. So you connect the two with hybrid services.
And so we see a lot of banks. Using this, we see FinTech or investment management, or even
large professional service providers. And a lot of the reasons why is that they can adopt cloud
but they have legacy on premise environments, or some of their customers or clients still are
not comfortable with cloud computing. So in some capacity, they are using a cloud.
But it's totally
possible that if they started from day one, they would just only use cloud. So there you can
see I have C IBC, which is a bank, then you have the C CPP Investment Board, that's a Investment
Board in Canada. Then you have Deloitte, which is a large professional service. So those are the
three cloud computing deployment models. Hey, this is Andrew Brown from exam Pro. And we are
looking at ABS global infrastructure. And what we're going to figure out here is where does all
this cloud computing stuff run? Okay, so we have 69 azs, within 22 geographical regions around
the world and we have lots of edge locations more than available. azs. But what does that all
mean? So eight of us serves over a million active customers in more than 190 countries and they're
steadily expanding their Mobile infrastructure to help customers achieve low latency and higher
throughput. And so that global infrastructure, our region's azs, and edge location. So a region
is just a physical location in the world with multiple azs. An AZ is one or more discrete data
centers owned by AWS, and then edge locations or data centers owned by a trusted partner of AWS
and maybe owned by AWS themselves.
And so now that we have that overview, we're gonna jump into
those three types of infrastructure. Hey, this is Andrew Brown from exam Pro, and we are looking
at regions for the AWS global infrastructure. And so a region is a geographically distinct
location, which has multiple data centers, also known as azs for AWS. And I've highlighted in
red geographically distinct, because that is the most important thing you need to remember about
regions. Every region is physically isolated from an independent of every other region in terms of
location, power, and water supply. Every region has at least two diseases. So again, an AZ is a
data center. So it has at least two data centers running within that region, the largest region
for AWS, US East, so that is north Virginia. And new services almost always become available first
in US East. And not all services are available in all regions. Okay. So if you definitely want to
use a new feature or service via AWS, your best bet is to switch over to US East, and US East one,
which again, is north Virginia is the region where you see all your billing information.
All right,
and you can just see here on the left hand side, I have a bunch of flags. For the countries where
these regions are run in here, I might not have all of them in here. But I definitely have a lot
here. So you can see there's a lot of coverage here. So now that we know what a region is,
let's just go take a look at some of the features of regions. Okay, so I just hopped over to the
AWS website, because I just wanted to show you a little bit more about regions visually. And so
here we have our, they say region maps, but these are really just a particular continent that has
a bunch of regions. So looking at North America, you can see we have regions on the west coast and
the East Coast. And so we have Ohio or Oregon, North California. And we have Canada and North
Virginia here. Okay. And so you can see in Canada, there's only two availability zones. And they
are working on third one, it was just recently announced. So AWS can always say that they
at least have two ACS in every single region, but they're definitely coming close to being able
to say they have at least three in every region, which is very important because most companies
or enterprises have to run in at least three azs. So now going on to South America, you can see
that there is a single region here, and that is in Brazil.
And then we have over here in Europe.
So we have a few here we have London, Stockholm, Frankfurt, Paris, and Brahim, I'm sorry if I
pronounced that wrong. I've forgotten already. Oh, and then we have Ireland. Okay, sorry, Ireland. I
know you're you're there as well. Okay. And then on to Asia Pacific. So we have Mainland China,
Sydney. So I would think that that would be Australia there Tokyo such Japan, Seoul, so that
is Korea cannot see that. But that's another place in mainland China. And we have another place
in Japan. And then a Mumbai is I believe that is India. And then we have Hong Kong. So that's
Hong Kong. Okay. So yeah, those are the regions and then we just hop over here to the regional
table. This gives you an idea what services are offered. So when we said that not all services
are available, you can kind of see that like, for example that Amazon Connect is only available
in a few regions. So we have North Virginia and North Carolina, okay? And then deep lense really
is only in Northern Virginia.
So again, as I said, everything is north Northern Virginia. You can
see we have checkboxes all the way down here. And this is also broken up based on those
geographical continents. So if I go here, you can see Ireland seems to be having all the
ones in Europe, and then in Asia Pacific, it looks like I guess Singapore Singapore looks like
they have the majority of services there. Okay, so there you go.
That is hey, this is Angie brown
from exam pro and we are looking at availability zones, also known as AZ. So an AZ is a data
center owned and operated by AWS in which 80 of us services run. Each region has at least two
azs and at best is getting pretty close to being able to say that they have at least three ACS and
all regions. ACS are represented by a region code followed by a letter identifier. So US East one
is region that would be North Virginia. Na is the data center. Okay, and so from North Virginia,
there are six azs. So you'd have a, b, c, d, e, f, okay, then we want to just talk on the concept of
multi AZ. So this is when you're distribute your instances across multiple availability zones,
which allows for failover configuration for handling requests when one AZ goes down. Okay,
so that is very useful. And then one more thing to note is that the latency between availability
zones is a sub 10 milliseconds.
Okay, so there, these days, these are purposely positioned to
be exactly that far apart. Okay. And so there you go. Hey, this is Andrew Brown from exam Pro,
and we are looking at edge locations. And this is all about getting data fast or uploading data
fast to AWS. So an edge location is a data center owned by a trusted partner of AWS, which has
a direct connection to the AWS network. These locations serve requests for CloudFront, and
relativity three, and requests going to either of these services will be routed to the nearest
edge location automatically. So we also have s3, transfer acceleration and API, a gateway.
And
the idea here is that this is where you want to upload data quickly to AWS, you're going to use
these two services to hit a special endpoint at an edge location to then transfer stuff quickly via
the AWS network. Okay. So the whole takeaway from this is that edge locations allow for low latency
no matter where the end user is geographically located. Alright, so we're back on the AWS website
here where we were looking at regions earlier, but this time, I want to give attention to
edge locations. So edge locations are the little blue dots here, and you can see there
are a lot of them.
Okay, and so down below, we have an idea of how many edge locations there
are, you can see that there are a lot. So even just in Atlanta alone, there are five. And so they
definitely outnumber availability zones. Okay, so just to give you an idea, those are the ones
for North America, then down below, we have just a few there. Okay. for Brazil, then in Europe, we
have quite a few here. And then in Asia Pacific, we have more edge location. So there you go.
Hey, this is Andrew Brown from exam Pro. And we're going to take a look at Gov cloud. Okay.
And so Gov cloud is a very special region that allows customers to host sensitive controlled
unclassified information and other types of regulated workloads. So the Gov cloud region is
only operated by employees who are US citizens and us or on US soil. So it's definitely not
something that I can use. Because you have to be a US identity and root account holders who pass a
screening process in order to use this particular region.
So who is this very special region for
it's for customers, that need to architect secure cloud solutions that comply with FedRAMP, the
Department of Justice, the US international traffic and arms regulation, export administration
regulations, and the Department of Defense. Okay, so it just makes it a lot easier if you're working
with us with these government bodies in order to utilize cloud computing. Okay, so I just hopped
back over here on the AWS global infrastructure regions page, because I just wanted to highlight
here, those Gov cloud region.
So there actually are two, there is one on us West and US East. As
far as I'm aware of, there aren't any other Gov clouds other than for us at this time, maybe in
the future, AWS will have it for other countries, but for the time being, it's just the US. And
just to look at the Gov cloud page here in more detailed here, you can see all the nice graphics
here for that address security and compliance. So if you want to build something and sell it
to the government or govern government related industries, by using Gov cloud, you are going
to become compliant.
Okay? And that's gonna make business a lot easier for you. So yeah, that's
all you need to know. Hey, this is Andrew Brown from exam Pro, and I'm going to show you how to
get set up with your AWS account. So here I am on the AWS homepage, and we have two buttons that we
can click on, click the one here in the middle, or click the big orange button to create our account.
I like to press the orange one.
So that's what I'm going to go ahead and do here. Okay. Okay, great.
And so now we're going to be presented with a form here. So I'm going to go ahead here and just fill
in an email. We're going to do Andrew, plus fresh at exam pro.co since this is a fresh account,
okay, and I'm just going to supply Have some kind of password here, I'm going to call this the exam
Pro, a fresh account.
Okay. And I'm just going to go ahead here and continue. So, now in order
to create this account, we're going to have to provide some additional information here. So I'm
just gonna mark this as a personal and I'm going to fill in this information here. Okay, and so I'm
just gonna have to go here and fill that in. Okay. Okay, so now I have that information filled in
there. And so I'm just gonna have to check here to say that I agree to their customer agreement,
okay, and we can go ahead and create our account. Now, in order to use AWS, you have to have a valid
credit card, you cannot use AWS without a credit card. Okay? So that's just something that you're
going to have to do. So I'm going to go ahead here and provide my credit card here. Okay. All right.
So now I have all my information filled in here. So I'm just gonna go ahead and verify and add.
Okay, and then now just wants to also verify on my phone number, this is definitely something
that's required.
So I'm just going to provide my phone number here. Okay, great. My phone numbers
in there, I'm just going to supply the security check here. So we'll just fill that in. Okay, and
then we will just send an SMS and confirm. Great, so that text message came in here. So I'm just
going to fill in the confirmation here. 0448. Okay. And great. So now we're verified. Okay, so
now we're going to choose our support plan, we're definitely going to go with basic here. Great. And
so now we just have a little bit of information here. Um, I don't really need to do any of this.
I'm just ready to go sign into the console.
Great. So now that we've created our account, I believe
we could probably go ahead and sign up here, I'm not sure if we have to confirm our email because
we did confirm by phone number. But let's just give it a go here and see if we can log in. Okay.
So we'll just put that in there. I'll just provide the password. Great. So we have made it into this
AWS account here. So this new account is realized. So there you go. And maybe we'll just have to
poke around here to see if there's anything else we need to do. But yeah, we're in good shape.
Hey, this is Andrew Brown from exam Pro. And what we're going to do now is make sure you do not
get overbuilt and there are three ways we're going to do that.
So there are some billing preferences,
we're going to set, we're going to set up a budget Eva's budgets, and we're also going to create a
billing alarm. Okay, I'm just going to talk to you also through as to like the advantages and
disadvantages of some of these things. And also just make sure we do not get over billed
within our account. So the first thing I want you to do is I want you to make your way over to
support or sorry, maybe under your account here, I'm going to go to my billing dashboard. And when
you get over here, I want you to click on the left hand side here and go to billing preferences,
okay.
And so we're going to have a bunch of preferences here. And they're all really good. So
the first one is receive a PDF, invoice by email, I would check that on receive free tier usage
alerts, this is definitely important. Because if you have a free account, you want to know when you
are going outside that free tier, and so then you just provide your email there. So I'm just gonna
do Andrew plus fresh at exam pro dotco there, and then we have received billing alerts. Okay,
and you definitely want to turn that on. And there is this detail billing reports down here.
This
is a legacy feature. This has now been replaced with cost and usage reports, okay. So it's not
necessary to turn that on, and actually do show you how to use cost and usage somewhere in this
course here. So we will cover that. But anyway, make sure these are all three ticked on, provide
your email and save your preferences. Okay. And now you're going to be in the loop of some of
your billing information. Okay. So now that we have these preferences set up, let's make our
way over to eight of us budget. So I want you to go to the top here and we're going to type in
budgets, okay. And so what budgets do is they allow you to tell you whether you are getting over
or whether you are going over your defined budget, or it's going to also provide some forecast
costs to you as well.
Okay, so now that ad was budgets here has loaded, what I want you to do
is create a new budget, you get two free budgets, in AWS. So we can definitely set to there
It's two cents per day for budgets. And so that doesn't sound like a lot. But if you made
your third budget, it's going to cost you $14 per month. Okay, so for more additional ways of
tracking costs, we're going to use billion lines, which really are inexpensive or end or free. But
we'll do budgets first, because it's good to at least have one budget set here for all costs. So
here, I'm just going to say, overall costs, okay. All right, and we will leave it monthly here,
I can't remember if overall is one or two L's, I think it's two. We want this to be a reoccurring
budget, we're going to have a fixed cost, and we're going to set it some something very
low such as $20. Okay, since we are using again, the free tier, we should not be expecting to see
a bill for quite a while.
And $20 is a good low bill there. And we definitely want all costs
unblended. So this is great. And everything is checkbox there. So we'll go ahead here and
configure alerts. And we're going to provide our email against Andrew plus fresh at exam,
pro dotco. Okay. And we'll just hit Add there, it's already been added. You could also use SNS,
but we're gonna leave that alone. And we can also get alerted when we are approaching it. So we
haven't surpassed 100%. But actually, I'm just going to set it to 100. Because $20 to me is not a
lot. And we can do this for actual or forecasted. And leave that for actual, okay. And I'm going to
go ahead there and create that budget. Alright, and so we don't have any information here. But
if I just give it a hard refresh. So if you are, if you are using an account where you're doing
stuff, if you do refresh there, you'll probably see more information. Okay, great.
So we've
created a budget. So now that we have our budget created there, let's go make a billing alarm for
a higher amount. Okay, so what I want you to do is go to services and type in cloudwatch. Okay. And
once we are over here, we are going to make our way over to alarms. All right. And so we're going
to make our way over to a billing here. And what it's going to tell us is that we need to switch
regions, because billing metrics always live in US East one, okay, so generally, it's always good
to switch to that region there.
So what we'll do is we'll go up to the top here and switch to
US East one. Okay. So now if we go to billing, we can now set our billing alarm. Okay. So, notice
down here that we get 10, free alarms, and 1000 free email notifications. So it's definitely more
free than budgets. Okay. But budgets does have a lot more functionality there. But you can use
definitely use both. Okay, so here, I'm creating a new ability alarm. And I'm just going to scroll
down here. And we can set the amount. So here, I'm just going to set a larger amount such as
$100. And so if it's greater or equal to that, then is going to alert me. Okay, and we'll
leave cat and estimated charges there alone, we'll look at some additional configuration.
This
is all good. We'll hit next. Okay. And then the next thing is, we need it to actually notify us.
So we're going to say add notification here. And oh, I think I already had one here. So it was not
necessary, but we needed to send it to something. So it's going to need an SNS topic, we don't
have one. So we'll create a new one. Okay, and we'll call this notify me. Okay, and then
I'll just provide my email there again. Okay, and we will hit Create topic. And then we'll go ahead
and hit next. And we'll just say, so this $100 100 Bill 100 building alarm. I don't know if it'll let
you do spaces there. So I'm just out of habit, I always leave out spaces. Great. And so we're just
previewing it here.
So just scroll down. This all looks good. And so now we have a billing alarm.
So you know, it's not uncommon to create multiple billing alarms. So you could have one at 100 and
150 and 202. So you can keep track of that stuff. And of course, you definitely want to make use of
a diverse budgets. So you have to there that you can utilize. So maybe once you start using your
account and you use the live we see two instances you just want to monitor that you create a budget
for that. But yeah, we have all bases covered here. And the only thing that is left to do is we
need to confirm this, the email that was sent out to this so that our billing alarm it will take
effect Okay. All right. So um, that notification was sent to me for the billing alarm there for
notify me, so it's just me subscribing to that SNS topic. I guess we only have to do this once.
I think we add additional ones we won't have to confirm but I'm just gonna go ahead here and hit
confirmation okay.
And so, now that is confirmed there, okay. And I think if I do a refresh here,
it should say that this is now different state Okay, so just has nothing there, which is good.
So yeah, we are all set up and we don't have to worry about getting overbuilt. Alright, so there's
a little bit more work we need to do to have our account fully set up. So we can start working with
AWS. And what I want you to do is make your way over to IBM. So just go up here and type in IBM.
If you click that there, you'll end up in the same place that I am here. And so we have a bunch of
recommendations here that ABS wants us to do. So we need to turn MFA on our root account, we need
to create individual users, because we generally do not want to be using the root account, which
is what we're logged in as right now.
We'll have to set some groups and assign permissions and
apply an IM password policy. So let's go ahead and do that. But just before we do, I just want
to make it easier for us to sign in. So what we can do here is changed this URL. So just go ahead
here and customize. And we're just gonna say exam pro fresh, okay. And that is a unique name. So
if you type in something, and it says it's not or it's taken through, just have to change it until
you get something that you like.
So now that we have that set up, let's go turn on MFA. So we're
going to want to turn on MFA for this account, specifically, the root account here. And the
reason why is that let's say someone stole your email and password to this root account, then
they would be able to do some serious damage. So by turning on MFA, there's going to be an
additional layer of security. So the idea is, when somebody logs in, they're gonna have to
provide an additional code based on the MFA delivery mechanism. So just let's go here and
hit manage MFA.
Okay, and so it's gonna pop up here and just say what we're already doing, which
is to start securing our account. And so I'm just gonna click off there, go to MFA and activate MFA.
And so now we're going to be presented with three options. We have virtual you, UTF, and other
hardware. So virtual is going to be for mobile devices. That's what we're going to do. So we're
just going to go ahead there and hit Continue. Okay, and what we want to do is we want to install
a compatible application on our phone. So just going over here, if we scroll down, it's going to
tell us which ones are compatible. I definitely know authenticator is one, so I'm just going
to search for that there. Where are you? Yeah, down here. So if you're on Android or iPhone,
you have authy, too, or Google Authenticator. I'm using Google Authenticator, I find
that more easy to use. And then the idea here is you'll just hit show QR code.
And then
using once you have authenticator installed, you're going to open up the authenticator app. I
know, you can't see me doing this. So I'll just have to talk my way through it here. And there's a
plus button in Google Authenticator, and it says, scan a barcode. And so now I'm holding my, my
phone up to the computer there, it's grabbed the code, it saved the secret. So now what I
need to do is enter in two consecutive codes. So going down here, I'm going to enter this code in
before it expires. So this one is 786763. And then there's a little wheel that is spinning, and it's
going to then give us a new set of numbers. Okay, and so now it is now 984816. And so I'm just going
to hit assign MFA there, and now it MFA is turned on.
So now that we have MFA turned on, we can
make our way back to our dashboard and proceed to the next step. So now we're going to proceed
to create ourselves our own user, because again, we do not want to be using the root account, which
should be rarely used. And we should just create ourselves a user. So we'll hit Manage Users here,
we're going to hit Add User, I'm going to create a new one called Andrew Brown, we're going to give
it programmatic access and access to the console, we're going to let it auto generate a password
for us. And we're going to make sure that it requires a password reset the next time this user
logs in going to permissions we don't have any groups.
So we're going to create a group here. And
we're going to call this group admin or admins, I should say, and we're going to give it
administrator access. Now, generally, you don't want to be giving too many users admin access,
because it gives you full access just like your root account. But for our purposes here, this is
totally fine. It's not unusual to have one or two admins within your entire account. But generally
you want to set most people as power user. Okay, and this is it gives you full access. But there
are some limitations such as you don't have the ability to manage users and groups. So power user
is a very good one here, but for this one here, we are going to stick with admin. I'm going to
hit Create group and we are going to go ahead hit next Review. And we will hit create user.
And
so now what we'll do is we're going to get an access key ID a secret and a password. So I'm
just going to expose those here. And I'm just going to copy these off screen. Alright, and then
we will just proceed here. Okay, so I just copied at least my password off screen here. And what
I'm going to do next is I'm going to make my way back to the IM console. So just go up here
services, and we can just type in I am. Okay, and so now we have done pretty much everything
here except for setting a password policy. So just before we go ahead and set a password policy,
what I want to do is I want to log into this new user. So we have this nice long URL here. So I
want you to copy that URL. And what we're going to do is we're going to log out and now a log
in as that new user, okay, so I'll just go ahead here and log out.
Great. So I'm logged out here.
And so the way we can get to that page is we can paste in that URL up here, which will bring us to
the console. And so you can, you can always use that link. Or if you can remember that alias, you
can always just go to the console and type it in there. So my name was Andrew Brown here, I'm just
going to go off screen and grab my password. And I'm just going to hit sign in here. Alright, and
so now I just need to reset my password here. So I'm going to provide the old password and we are
going to set a new password. Great. And so now I'm logged in, not as the root user, but as a new
user I've created. And just one more thing here, I want to go back to you I am here.
And the reason
I want to go back here is that I exposed my access key and password to you. And anytime that actually
happens, we're going to want to do is go to your user there. And I'm gonna go to Andrew Brown here,
and we're gonna go to our security credentials. And you can see that was that access key and you
saw that password. So what I can do is I can make it inactive, and then I can create myself another
access key. And I'm not going to show you the secret this time around. But it's just, you know,
anytime you accidentally share your credentials, you're definitely going to want to reset them
there and the password that you saw earlier, it doesn't matter because I reset my password
when I logged in here. Okay, so now that is all set up. What we will do is we will log out of
this account, and we will log back in as the root account to set up a password policy.
Okay, and I
just want to show you when I go to sign into the console, it's going to show me this filled in. And
so whenever we're logging in as the root account, we actually have to click this link down below.
And so we would just type in our email here. But if I wanted to log back in as that user,
I could just type in here exam pro fresh, and it would bring me back to here and I would
fill in this information. But if you're always logging in as the root user, I'm just gonna click
back there. It's always your email. I know that's a little bit confusing, but that's just how it
works. And so this time around, I got the MFA, so I can't just log in willy nilly.
So I'm just
going to use my phone, and I'm going to open up authenticator, and I have to provide it that code.
Okay, so it's those numbers again. So this one's gonna be 904361. I'm gonna hit submit. And so
now I'm back into my account. And we'll make our way back to I am and do that last step. And so we
just have one more thing that AWS wants us to do. And let's apply an IM password policy.
So we'll go
down here and click Manage password policy. And so what we can see is a bunch of stuff. And we really
just care about this part up here. So I'll set password policy. And now we can see some rules.
So you can enforce the minimum characters, you can require at least one uppercase one lowercase,
at least one number require at least one of these enable password expiration. Yeah, I could do
that. I suppose password expiration requires admin reset, maybe not allow users to change their own
password, definitely prevent password reuse. So ensure they don't use the same password, I would
probably just crank this up as high as possible, we'll leave it as five. And we'll save changes.
And so now, if we go back to our dashboard, we should satisfy that entire list.
And so we have so
we've met every requirement of AWS. So generally, from now on, you should just log in as that
user and stay out of your account. Okay. Hey, this is Andrew Brown from exam Pro. And now
that we've set up our account, I want to go through the motions Using some of the most common
database services with you here, so you can gain some confidence here on the platform itself.
And
just to have some practical hands on experience, this is not going to be a very difficult section,
it's not important for you to remember anything, but just to again, gain confidence. And just
before we get started here, I want to make sure that you are in the north Virginia region. Okay.
So North Virginia, also known as US East one. The reason why it's one is because there's another
USC, which is USC two, this one is US East one, because it came first. But based on the region
you're in, is going to change the the offerings that you have, because not everything is available
in every single region. Generally, they are across all regions. But like, if I was in Canada Central,
we have a fewer availability zones, those are data centers, where in North Virginia, we have like
six, and if there are any new features, they're definitely going to be in North Virginia. So I'm
just gonna ask you to change over to that region and follow along with me there. Okay. So the first
thing I want you to do is I'm going to show you how to launch a server.
So a server is going to
be using EC two. So going up to services here, we will type in EC two. And we will make our way
over to the EC two console. So once we are here, I want you to go ahead and launch a new instance.
So there's a big blue button here. So we'll just hit launch instance. And now we're going to be
presented with a bunch of options to configure our server. So we are going to choose what OS
we want to use, we're going to stick with Amazon Linux two, because it's part of the free tier.
And saving money is a great thing when we are learning. The next thing we need to do is choose
the size of our of our server here. So these are called instance types. And so you can see that
the memory gets larger in the amount of CPUs get larger, we're going to stick with TT micro
because again, that's part of the free tier and we want to save some money. going next to instance
details, we can choose how many instances we want to start an instance is a server.
So if you have
attendances that's 10 servers, and we have a lot of options here, we're going to launch it in
our default VPC and into the default subnet, it is going to be auto assigned a public IP. So it's
going to be public facing. And we're going to want to create an IM role here. So what I want you to
do is go ahead and just right click here and make a new tab, because we want to give this a bit of
permissions. So up here, I'm just going to go to the IM Management Console. And I want you to make
your way down and create a new role. And so we are going to be presented with a bunch of options. So
we are creating a role for EC two. So we'll select TC two, we're going to go to next to permissions.
And I want you to type in SS M and I want you to use Amazon easy to roll for SSM.
SSM is simple
SYSTEMS MANAGER. And that's going to be a way for us to actually log into that machine. Okay. And so
we're going to get here and I'm just gonna say a my easy to roll. And I want you hit Create roll.
And so now that roll has been created. And we will just go ahead and close that tab there and we
will drop this down, you can see that says none, so we'll hit the refresh button here.
And we'll
choose my EC to roll. So now we have that, that set up, we are going to leave everything
else blank. And I want you to go to storage. So here you can choose how much storage you want.
It's gonna have eight gigabytes by default, you change the volume type, we're gonna stick with
general purpose. And we're going to go review and launch. And we are going to hit launch. And it's
going to ask you to create a key pair. And so key pairs are used to get into the server. But we
actually don't need one because we are using SSM, which is another way of logging into the server.
So we're going to proceed without a key pair. Okay, I will just say I acknowledge that I will
not be able to connect to this instance, unless I already know the built in password, which is not
true because we can get through SYSTEMS MANAGER, but we will go ahead and launch this instance.
Alright, and so this instance is now launching. In order for us to see it, you can either go view
instances, we'll just click that down below here. Alright, and so now this instance is launching,
and you're gonna see a pending state, and we're waiting for two status checks to pass.
So this is
going to turn from yellow to green. And then we're going to wait for this to initialize. And once
that's done here, I'll see you here in a moment, go. Okay, so after a short Wait here, I think I
waited about three to four minutes. Our server is now running and it also has two checks. So that
means that the server is in good shape. So now that our server is running, we'll just take a peek
down here, because we get a variety of different information such as when it was launched. The
Im role, the security group that is in which was the default one what size it was, and we can
see that it has a public IP address and private IP addresses. Okay, so now that the server is
ready Running, this is a costing us money.
Now we are on the free tier. So I guess technically
it's not. But if we wanted to shut this down, and we're not going to shut it down just yet, but
I'm just showing here that we would just go here to terminate, and that would shut the server down.
And then we would no longer be paying for it, we could also stop the instance. And that wouldn't
destroy it, but it would not have it not running more. And we'd also be saving money, okay, so
whether you stop or terminate that instance, will ensure that you save money.
So now that this
is done, let's actually learn how to get access to this instance. Alright, so there's a couple
different ways we can get into this instance. One way is using SSH. So if we had created that
key pair, we could have used it to get into that server here. Or we can use simple SYSTEMS MANAGER,
sessions manager, which is the my preferred way, and AWS, AWS is recommended way, which is what
we're going to do. But just before we go head over to SSM, I want you to right click here and just
go to connect. And you can see that it's actually giving you instructions. So if you had downloaded
that key pair, you would have to jump on it, you would have had to do a bunch of other stuff.
So you have to use SSH and provide that key to get into it.
So there are instructions there.
There's also this easy to instance Connect. And so this is another way to connect, I'm not sure if
it would let us in here without our our key pair, but I'll just give it a go here. And it did. So
this is one way this is actually I guess the third way to access it. So actually, I'm in the server
right now. But the way I want to show you how to get in is via simple SYSTEMS MANAGER. So I'm just
gonna go ahead there and close that I want you to go the top here and type in SSM, which is for
simple SYSTEMS MANAGER, even though they never display the simple word there anymore, definitely
as part of the name.
And then once we are over here, I want you to go to the left hand side and
go to a session manager. And we're going to start a session. And so we can see we have our instance.
So remember when we created that Im role and we set it with that SSM UCT roll that was so that
we could use sessions manager. And the advantage here of using sessions manager, it's going to log
every time somebody uses a session.
So I just hit start on that session there. And so it's very
similar to that other Connect screen here. And it actually logs in as the root user not too easy
to user, which is a bit frustrating. So we'd have to do sudo Su, EC to hyphen user. And now we are
the correct user. And we are within this instance. So you know, that's how you gain access to it,
we're not really going to be doing much with this instance, today. So I want you to go ahead and
terminate this instance, or sorry, that session there. But that session history is recorded.
So by forcing everyone to use sessions manager, you're going to have a bit more visibility over
what's going on with these machines. Whereas SSH, might not provide that same visibility without you
manually putting that effort in there. Okay. But we'll make our way back to the EC two console
here.
So just type in EC two here again. And once we are here, I want you to go on the left
hand side two instances. And so here we can see our server. So we now know how to get into this
machine. And I would say that, we probably want to go ahead and stop this instance here. So I want
you to go ahead and just stop it. Okay. And that way, it's not going to cost us anything. And now
we can do our next step, which is to create an ami.
Alright, so now we're going to learn how
to create an ami and you can think of an ami as like a snapshot or like saving a copy of your
entire server. So what you're going to do is go up to the mixer, the instance is selected there go
to actions, we're going to go to image here and create an image now we could create an image,
whether this is stopped or running, if it was terminated, the server wouldn't exist anymore,
so there would be nothing to create an image of, we'll go ahead here and create an image. And we
are going to have to provide it some information. So I'm just going to call this fresh hyphen
000. Okay, and then you can see that it has an instance volume. And so that is the hard drive
that's attached there.
And we're just gonna leave it as the default settings and create an image.
And so now it's creating the image and it's view pending image creation. So we'll click on this
blue link here. And we'll just wait until that is created now doesn't take too long. The idea
here is now once we have an ami if we wanted to launch another copy of this us the server,
we're just going to have to hit launch here okay, but the real reason I wanted to do to set up
this ami was because we are going to next set up an auto scaling group and we're going to need
an ami to do that. Okay, so I'll just see you here in a little bit Once this is done, and I just
wanted to show you here that it is done.
Alright, and so now if we wanted to launch a version of the
server, we could hit launch. And it's going to go to the second step. So if we go back here, you
can actually see that it chose fresh 000. So if we were to proceed through this, it's a way for us
to upgrade our server or make other changes to it, or just so that we have a copy of it, so we can
launch multiple servers. And just to get back to the AMI there, I'm just gonna click on left
hand side here. But yeah, that's all we need to know for ami, and we'll move on to auto scaling
group. Alright, so now that we've created an ami, we are ready to make an auto scaling group. So
down below, I want you to go to auto scaling groups.
And so what an auto scaling group does is
it allows you to ensure that multiple instances or servers are running. So if you always wanted
to guarantee that one server is running an auto scaling group would have a rule that would check
to say, is at least one running and if not then launch a new server. Also, auto scaling groups
are used to meet the demand of whatever traffic you have. So let's say you have a web application
or website and it's getting a lot of traffic, and it's going to need more servers will auto scaling
groups will determine based on certain metrics, that the the web application needs more servers,
and it will spin up more servers.
And when the the demand of traffic becomes lower than it's
going to remove servers to meet the demand. Okay, so what we'll go ahead and do here is
create a new auto scaling group. And oh, they just change this ami. So I'm a little bit
confused. But we'll just hit getting started, I think that's just a bit of a thing there.
And
then we're going to choose our ami. So this is very similar to launching a situ instance. But we
already have our own ami. So I'm gonna go to my am eyes, I'm just going to select that fresh one
there. And we're going to stick with T to micro, we'll go next, we're going to have to name it
this launch configuration. So we'll just name this fresh LC, we're going to use the my EC t roll
there, we're going to go ahead and add storage. The defaults look great there, the security groups
look right there.
And we are going to create launch configuration and we are going to drop the
down proceed without a key pair. Because we don't need one, we're going to create that launch
configuration. So now that we've created the launch configuration, we can go ahead and create
the auto scaling group. So we're going to call this one fresh as G is CS for auto scaling group,
we're going to set the group size to one. So the number of instances the group should have at any
time. So at minimum how many servers should be running, then we have to have a, a network or a
VPC. And we need to choose some subnets. So we're going to choose one and then we're going to choose
a another one here. Okay, we just need a couple there, I'm just gonna check advanced details,
this all looks great. We're going to configure our scaling policies, scaling policies are ways
rules that you can use to determine how the auto scaling group should react to changes within
its environment, right.
So if you have a lot of CPU utilization, maybe that's when it spins up
servers, maybe it's only when there's a lot of data transfer in or when there's a lot of memory.
So that's what's going policies allow you to do, then we'll go to notifications, then we'll go to
tags. And then we will review. And we'll go ahead and create that auto scaling group. Okay. So it
says that auto scaling group has been created, we'll hit close. and here we can see our fresh,
fresh HSG. and choosing our launch configuration, which is our fresh LC, currently, there are zero
instances running, the desired capacity is one, the minimum servers that should be running as one,
the maximum servers that should be running is one, okay.
So if we just move this up here and go to
instances, it should try to start spinning up servers to meet the minimum demand, which is one.
So I'm going to hit a refresh here. And I'm just kind of expecting to see a server starting here.
If we're not seeing one here just yet. What I want you to do is right click here on instances, and
go here. And I bet you a server is starting up. So I don't see any servers running here as of
yet. Okay, so I'm just gonna hit refresh here, because usually, they would just start spinning
up here.
But yeah, we'll just give this here a little moment here, because maybe it's just
taking some time to get started. So yeah, we just had to wait even just a minute there.
And I just hit refresh. And already we can see that this is now one. And under our instances,
it is launching a new instance ID. So or sorry, an instance that's just the ID of the instance.
So if we go back to our instance tab, and we just do a refresh here, we can see a another instance
is spinning up. Okay. So what we're going to do is we're going to just wait for that instance to
start.
And once once it does, we'll move on to the next step. Alright, so after waiting a few minutes
here, our instance is now started here. I'm just going to select this one off here, but this is
the instance here that is running. That's part of our auto scaling group. So Again, we said that
auto scaling groups, they can ensure that there's always at least a minimum of servers running.
And so if we were to terminate this instance, so I'm just going to go ahead and terminate it,
what's going to happen is, once it shuts down, we're gonna go back to our auto scaling group,
it's going to detect that this one is no longer healthy.
Okay, so see over here that says healthy
right now. But it will after a while, determine that it is unhealthy, and then what it will do as
a response, it's going to launch a new instance. So we're just going to wait here for a little bit
until this is now flagged unhealthy, okay. All right. And so we can now see that this instance
is unhealthy.
And so the way this auto scaling group is going to respond is by launching a new
instance. So now, we're just going to wait here a little bit and just keep on hitting this refresh
button until we see another instance spinning up to replace this unhealthy one. Okay, so I just hit
the refresh here. And so that unhealthy instances gone. And so I guess what we're just going
to wait for here is now a healthy instance, to replace that unhealthy one. So just to get back
to that, that minimum of one server running. Okay, so we'll just go ahead here and just refresh. And
so there we go. So we can see that we have a new server that is starting up.
So we'll just wait
until that one is totally set up here. And we've now accomplished what we wanted with auto scaling
groups, and we will just destroy this auto scaling group. Alright, so our replacement instance is now
healthy and in service. So what I want to do is go ahead and remove this auto scaling group. Now
I believe that when we delete this auto scaling group, it's going to take down the instance as
well. So we're not going to have to delete that. So I'm just going to go ahead here and delete the
auto scaling group. And we're going to say yes. Okay, and so we are going to just watch that
delete there and hit refresh there. And also, since we have that instance, tab open, we'll
hit refresh here. And so we have that instance running. So what we're hoping to see is that this
instance is torn down when we have deleted this auto scaling group.
So we'll just wait here a
little bit and see what happens. All right. And so if we were to do a few refreshes there, it
indeed is shutting down that instance, that was spun up by the auto scaling group. So when you
delete your auto scaling group, it's going to take down those instances as well. So you know,
that's it for the auto scaling group section, and we can move on to elastic load balancer. Hey,
this is Angie brown from exam Pro, and we are going to learn about elastic load balancers, also
known as EBS.
And what they do is they allow you to put a load balancer in front of your instances.
And the idea is that when traffic comes into your web application, it's going to flow flow through
the load balancer, and it's going to evenly distribute that traffic to multiple instances.
And your instances generally will be running in different availability zones. So if one AZ becomes
unavailable, then your traffic will then go to the other AZ where you have an instance running,
so you do not experience downtime.
And your web application remains running. Okay, so now that
we have an idea what lbs are, let's go ahead and launch a few instances so that we have something
to load balance to. And so I'm going to choose Amazon Linux two here, we are going to stick with
the TT micro because it is free, I want you to select a two instances here, okay. And we're
going to leave all the settings alone, maybe we'll give Iam role we do not need to SSH into or
sorry use SSM to get into that instance, but it doesn't hurt to attach it there, we're gonna leave
storage alone, we're going to go past tags, we're going to go to our security groups, I'm going to
set it to an existing one and use the default one, every time you create an instance, it seems like
it really encourages me to keep making new scritti groups, we don't need to have a bunch of these.
So we will just go and use the existing one.
And I'm going to review and then launch, I'm going
to drop down here and proceed without a key pair because we don't need a key pair. And so now these
instances are going to start up here. And I'm just going to wait until they get into a running
state with two status checks. And we'll go ahead and create our EOB. Alright, so our two instances
already here and I just want to go ahead and give them a name. So I'm going to just call this one
instance a and then we will call this one instance B. Okay. And now that I have those two instances,
let's go make our way over to load balancing here. It's under the ECG console. And so we will
click here. And what we will do is we will create ourselves a new load balancer. Now there are three
types of load balancers. We have application load balancer, network load balancer and classic load
balancer.
We are going to be using application load balancer here and that's generally what
you're going to be wanting to use. We are going to type in a lb Or maybe my al v here, it will be
internet facing. Okay, we need to ensure that it's running in at least two availability zones, or
it's going to complain to us. So we will go ahead and do that, we will go to the next step here,
we aren't using SSL or HTTPS, so we don't have to do anything here. For security groups, we will
use the existing security group the default one, so that's totally fine. And for configuring
routing, we're going to have to create a new target group, a target group contains a reference
or a reference to the instances which we want to route traffic to. So we are just going to make a
new one, I had to say my target group here.
And we can route things to different things. So it could
be instances or specific IPS, or lambdas. So we're going to stick with instances. And we're going to
go ahead here and register those targets. so here we can see we have instances here, I'm just going
to select them and add to register. So now they are registered up here, we're going to hit next.
And then we are going to go ahead and create Okay, and so it takes very little time for load balancer
to create, we will then hit close here.
And this load balancer is now just provisioning. So we're
just going to wait here a little while until this is provisioned. And you just have to hit the
refresh here, and see when this is ready. Alright, so our load balancers ready didn't really take
that long, it took about a minute or so. And so just to poke around here, you can see that this
load balancer here has a DNS name, okay, so this DNS name, just looks like a domain name. And the
way you would route your traffic to the elastic load balancer is you would actually point it to
here. Okay, and so all the traffic would go here, and then it would then go on to the listeners,
and the listeners listen on a particular port. So this is Port 80.
And then it's going to then
have rules, which is going to forward this traffic to that target group. If we click into this
target group here, alright, what it's going to do is it's going to show us the actual targets. So if
we go over here and look at targets, it's going to then route it to the registered targets. So that's
how an elastic load balancer works. And that's all we really need to know for this, but just to show
you how to make an elastic load balancer. So now that we're done here, let's go tear this stuff
down. So we'll go ahead here and we will just go delete this load balancer. Now, unlike the auto
scaling group, which would actually tear down the instances, we have to take these instances down
ourselves.
And so what I want you to do is select a and b here, and we are just going to terminate
these here. Okay, and that is our elastic load balancer section. Alright, so we're gonna learn
a little bit about s3 here. So what I want you to do is go to services here and type in s3. And we
will go make our way over to the s3 console here. And so the first thing I want you to notice that
when you come to s3, that it is global here.
So s3 does not require a region selection. However, the
buckets that we're going to create will be region specific. And the idea here is a bucket is just
a place to contain your files. Okay. So we will just create a bucket here, and we're going to give
it a name, I'm going to call this exam pro fresh. Now these names are globally unique. It's just
like selecting a domain name. So if the name you have here selected is not available, you'll just
have to change the name. And we have the option to choose choose the region. So I'm going to go
ahead here and create this bucket. So now I have a bucket, and we can start uploading files to this
bucket. So I'll go ahead here and just hit upload. And what I'm going to do is I'm just going to add
some files. And so for my desktop, I have a photo of me, I'm going to hit open here, I'm going to
upload that there. And so now we have a, a file here in s3, okay, and so if I want to download
it, I can just hit that download button there. And that will allow us to download that file.
And
there's a variety of different things that you can do in s3, but that is just the most basic things
you need to know about s3, okay, but we aren't going to delete this bucket because we're going to
use it in combination with our next thing, which is using CloudFront. Okay, so I'll just gonna make
my way back here to the homepage here. And we'll move on to the next part. Alright, so we're going
to take a look at CloudFront. So CloudFront is used as a CDN, a content distribution network.
And
the idea here is let's say you have files, static files or video files that you want to share across
the world. But you want those to load as quickly as possible and make the shortest route to the
end user. And that is where CloudFront, which is a content content distribution network comes in.
So it's going to take whatever your static content is. It's going to then copy it to multiple edge
locations around the world. And so when someone tries to access your content, it's going to go
to that nearby edge location, as opposed to going really far away to get that content.
So let's
make our way over to CloudFront here, so drop down services and type in CloudFront. Okay. And we will
make our way over here. And we're going to need to create ourselves a distribution. And we'll just
get started here. And I want you to drop this down and just choose that s3 bucket that we created.
Okay. And pretty much all the settings here are totally fine. So we're just going to go down
below here and create that distribution. Okay, and creating distributions take quite some time
to to happen. But the idea there is remember Hi, upload that one file to my bucket there.
So what this distribution is going to do, it's going to copy that file and then move it to
all those servers around the world. So that now my content is a super fast, okay. And just like
elastic load balancer, where it had a DNS name, where you could hit it like a domain name to
access those instances.
CloudFront is similar. So here, we have a domain name here, so your traffic
would hit this domain name, and then it would then route your traffic to the nearest edge location.
Okay. So that's all there really is to it here, distributions take a really long time to create.
So we don't really need to wait for this to complete. So I'm going to just disable this here,
okay. And it's going to just disable and once it's disabled, you can delete it, even if you don't
delete it, it's not going to cost you anything here because it will be disabled. But yeah, once
it's done disabling, you can go ahead and select it and then delete it. Alright, so that's alright,
so now we're going to look at RDS which stands for relational database service.
And it is for setting
up relational databases. So I want you to make your way over to the RDS console. So go to the top
here and type RDS. And we'll click that. And once we're here in the console, we're going to create
ourselves a new database. So on the left hand side here, go to databases, and then create a database.
And we're going to be presented with quite a few options here. Okay, and so by default, it has the
Amazon Aurora engine selected, this is one of the most expensive options, so we definitely do not
want to use that. So we will just use Postgres for our case here. And the next thing is we have
some templates to get started here.
And so we have production, dev test and free tier. And these are
all suited for different needs. So the idea with production is, if you are a larger, a very, very
large company, they're setting you up with every Bell and whistle under the sun here, we're def
test is for small to medium size companies. And free tier is definitely just for a gain hands
on experience, which is what we're doing here, or just for testing simple application. So I just
want to show you the price difference here. So they have a calculation down below. So if I scroll
all the way down below here, you can see that for production, it's $600 a month, which is quite
a bit of money.
And then if we have a dev test, and we scroll down here, now it's $262, still
quite expensive. And then we go the free tier and now there is no cost shown because it is
free, okay, but you only get 750 hours on RDS, and so on for a T two micro and then once that
is used up, then if you use the T to micro for a month, it will cost you around $15 per month.
And again, if you are a very small startup, you can run on the free tier and the lowest tier
for quite a while.
But you know, for some reason, AWS decides to always have the most expensive
one selected here with RDS so we just have to be careful there. So let's go to free tier because
it is the use case for us. We have the DB instance identifier, we'll leave that alone, that's
totally fine. We need to set a password so I'm just going to type in Postgres 123. Okay, and then
Postgres 123. Then you have your DB instance size, we of course want to leave it on T to micro
here, because we want to have the smallest instance there's nothing smaller.
There's no nano
here on RDS litc to then we choose our storage, it's set to 20 gigabytes, there is auto scaling
for storage, so it will automatically increase the size of that runs out. I have to turn that
off. Because we don't need that you have your multi AZ you can determine where this RDS
should launch, like what VPC, we're gonna leave in the default. For database authentication,
we can use the standard password authentication, or if you want to allow Im users to authenticate
directly. You can use that which is pretty cool. I'm just going to leave it to password
authentication. And then we have additional configuration which you definitely want to set.
So you have your initial database name.
So if you do not specify database name RDS does not create
a database. So I'm pretty sure we want to create a database So we're gonna have to name this here.
So I'm gonna call this exam Pro, fresh, okay? And we're going to turn backups off. Okay? And oh, I
guess apparently, I can't use a hyphen there. So I'll just remove that. Actually, it looks like
I can use an underscore.
And so but anyway, so if we turn this off to zero days, that means
it's not going to take a snapshot right away, or a backup right away, it's going to launch a lot
faster. And we're not doing much with a server. So you know, let's just get through this as quickly
as possible. We don't need performance insights, I'm going to turn that off as well. And, yeah, we
were all good to go.
So we'll go ahead and create that database. Okay, and so we're just going to
wait for the creation of that database there. And it will just take a little bit of time here.
And we'll be back in a moment. Alright, so now our database is available here. And you can just
see when clicking into it, that we get stuff such as the CPU usage currently, and how many current
connections are connected to this database here. Now, in order to actually access this database,
you'd have to assemble all the requirements. So you'd have to use this endpoint, you'd need
this port number, we need the database name, username, password, which we had set earlier.
And then you could use a traditional tool, maybe table plus or something to make a connection and
start using that database.
Okay. But, you know, for our purposes, it was just a matter of showing
how easy it is to create a database here. And so now that we have created our own database, let's
go ahead and just destroy that database. Okay. And so I'm going to go ahead here, and I just
have to type in, delete me. Okay, and that's RDS for you. So this will just delete here, I'm just
gonna hit refresh. And we're totally good here, I'm just gonna go back to the management. So we're
gonna take a look at a with lambda here and see how to run a lambda function. So what I want you
to do is go to the top here to services and just type in a lambda.
And we'll make our way over to
the lambda console. And once we're in here, I want you to go ahead and create a new function. And we
are going to author one from scratch. So I'm just gonna say a my lambda, okay, and we have a bunch
of different runtimes that we can choose here, we have no GS, etc, I'm gonna choose Ruby, because
that's my language of choice, we're going to drop down here, and we are going to have it create
us a new role with basic lambda permissions so that it can write to cloud watch logs, and we're
going to go ahead and create that function.
Okay, great. So that function has now been set up
here for us. And if we just scroll down here, you can see that we have this nice little inline
editor that allows us to work on our function, okay. And so the big benefit of lambda, it's,
you don't have to worry about the the servers, you just write your code, and it will run. The
trade off here is though, that these only run for a small amount of time.
So lamda can only run for
up to 15 minutes, but generally they're they only run for one second or less. That's definitely how
they're used. Let's go ahead here. And let's just put a puts in here. So I can just say hello world,
just so we can see that our lambda works. And what we can do here is we can go up and make a test.
So I'm just gonna go ahead here and make a test. And we already have one here called hello world.
And I'm just going to type this in again, hello, world. Here, oh, maybe I have to do this. And I'm
just gonna hit Create there.
So now I have a test. And I'm just going to go ahead and hit test there.
And we can see that it succeeded. And we got a status code. So this is what it would return.
And if we were to go check the logging here, if we were to go to monitoring here, all right,
we should be able to see that that puts that we have there.
Okay, so we just click on this button
here, view logs in cloud watch. And we can see that lambda ran there. And you know, the reason I
don't have any output here is I forgot to hit Save there really finicky about that. And now if I hit
test, okay, it's worked. And now the output here actually has HelloWorld. Okay, so that's from the
logs. And if I go back here and give this a hard refresh here, okay, I might have to go back one
step here because now it's in this one up here, and we should have our, our puts, click the right
one. Maybe just says, oh, there it is.
Okay, so I've just been patient here, but it showed
up. So there you go. So you can see lambdas are pretty darn simple. And just going back here
up To the function lambdas get triggered from a variety of different services. So if you want
to add a trigger, you can go here and drop down and choose a service. So you could have it. So
anytime something is inserted into dynamodb, it would then trigger that lambda function or
from a variety of things. Okay, and there's even integration with third party, third party,
Amazon partners. Okay. So yeah, that's all we need to know for lambda. So we're going to take a
look at the ECP pricing model.
And there are four ways we can pay with EC two, we have on demand
spot, reserved and dedicated. And we're going to go through each section and see where each one
it makes sense. So we're going to take first a look at on demand pricing. And this is whenever
you launch an EC two instance, it's going to by default use on demand, and so on demand has no
upfront payment, and no long term commitment, you're only charged by the hour or by the minute
is going to vary based on ecsu instance type. And that's how the pricing is going to work. And you
might think, okay, what's the use case here? Well, on demand is for applications where the workload
is short term spike, you're unpredictable, when you have a new app for development, or you
want to just run an experiment, this is where on demand is going to be a good fit for you.
So we're taking a look at reserved instances, also known as r i, n, these are going to give you
the best long term savings.
And it's designed for applications that have steady state predictable
usage or require reserved capacity. So what you're doing is you're saying to AWS, you know, I'm gonna
make a commitment to you, and I'm gonna be using this over next period of time, and they're gonna
give you savings. Okay, so this reduced pricing is going to be based on three variables, we
have term class offerings, and payment options. And we'll walk through these things to see how
they all work. So for payment options, we have standard convertible and scheduled standard is
going to give us the greatest savings with 75%, reduced pricing. And this is compared to
obviously to on demand. The thing here though, is that you cannot change the ri attributes,
attributes being like instance type, right? So whatever you have, you're you're stuck with
it.
Now, if you needed a bit more flexibility, because you might need to have more room to
grow in the future, you'd look at convertible, so the savings aren't going to be as great,
we're looking at up to 54%. But now you have the ability to let's say, change your instance
type to a larger size, you can't go smaller, but you can always go larger, and you're
going to have some flexibility there, then there's scheduled and this is when you need
to reserved instances for a specific time period. This could be the case where you always have a
workload that's predictable every single Friday for a couple hours.
And the idea is by telling
AWS that you're going to be doing out on schedule, they will give you savings there that's going to
vary. The other two things is term and payment options. So terms is how long are you willing
to commit one year or three year contract, the greater the terms, the greater the savings, and
you have payment options. So you have all upfront, partial upfront and no upfront, no friends, the
most interesting one, because you could say, you know, I'm going to use a server for a year, and
you and you'll just pay at the end of the month. And so that is a really good way of saving money.
Right off the bat, a lot of people don't seem to know that. So you know, mix those three together.
And that's going to change the the outcome there. And I do here have a graphic to show you that you
can select things and just show you how they would estimate the actual cost for you. A couple things
you want to know about reserved instances that can be shared between multiple accounts within a
single organization and unreserved, our eyes can be sold in the reserved instance marketplace.
So
if you do buy into one or through your contract, you're not fully out of luck, because you can
always try to resell it to somebody else who might want to use it. So there you go. So
now we're taking a look at Spa instances, and they have the opportunity to give you the
biggest savings with 90% discount compared to on demand pricing. There are some caveats, though. So
eight of us has all this unused compute capacity, so they want to maximize utility of their idle
servers.
It's no different than when a hotel offers discounts to fill vacant suites, or when a
plane offers discounts to fill vacant seats. Okay, so they're just easy to answer this is lying
around, it would be better to give people discounts then for them to do nothing. So the only
caveat though is that when you use spot instances, if another customer who wants to pay on demand
a higher price wants to use it and they need to give that capacity to that on demand user. This
instance can be terminated at any given time, okay? And that's going to be the trade off. So
just looking at termination termination conditions down below. instances can be terminated by Avis at
any time. If your instance is terminated by AWS, you don't get charged for the partial hour of
usage.
But if you were to terminate an instance, you will still be charged for any hour that it
ran. Okay, so there you go. That's the little caveat to it. Um, but what would you use spot
instances for if it can if these incidents could be interrupted anytime? Well, they're designed
for applications that have flexible Start and End Times or applications that are only feasible
at very low compute costs.
And so you can see, I pulled out the configuration graphic
when you make spot. So it's saying like, Is it for load balancing workloads, flexible
workloads, big data workloads are defined duration workloads. So you can see there is some
definitions as to what kind of utility you would have there. But there you are. So we're taking
a look at dedicated hosting, which is our most expensive option with EC two pricing models. And
it's designed to meet regulatory requirements when you have strict server bound licensing that won't
support multi tenancy or cloud deployments. So to really understand dedicated hosts, we need to
understand multi tenant versus single tenant. So whenever you launch an EC two instance, and
choosing on demand or or any of the other types beside dedicated hosts, it's multi tenant, meaning
you are sharing the same hardware as other AWS customers, and the only separation between you and
other customers is through virtualized isolation, which is software, okay, then you have single
tenant and this is when a single customer has dedicated hardware. And so customers are separated
through physical isolation.
All right. And so to just compare these two, I think of multi
tenant is like everyone living in an apartment, and single tenant is everyone living in a house.
Right? So, you know, why would we want to have our own dedicated hardware? Well, large enterprises
and organizations may have security concerns or obligations about sharing the same hardware with
other AWS customers. So it really just boils down to that with dedicated hosts. It comes in an on
demand flavor and a reserved flavor. Okay, so you can save up to 70%. But overall, dedicated hosts
is way more expensive than our other ACP pricing options. So we're on to the CPU pricing cheat
sheet. And this one is a two pager, but we'll make our way through it. So EC two has four pricing
models, we have on demand spot reserved instances, also known as RI and dedicated looking first at
on demand, it requires the least commitment from you.
It is low cost and flexible. You only pay
per hour. And the use cases here are for short term spiky, unpredictable workloads, or first time
applications, it's going to be ideal when you want workloads that cannot be interrupted, whereas
in spot, that's when you can have interruption and we'll get to that here shortly. So onto
reserved instances, you can save up to 75% off, it's gonna give you the best long term value.
The use case here are steady state or predictable usage. You can resell unused reserved instances
and the reserved instance marketplace the reduced pricing is going to be based off of these three
variables terms class offering and payment option. So for payment terms, we have a one year or
a three year contract.
With payment options, we can either pay all upfront, partial upfront
or no upfront. And we have three class offerings, we have standard convertible and scheduled. So for
standard we're gonna get up to 75% reduced pricing compared to on demand. But you cannot change those
ri attributes meaning like, if you want to change to a larger instance type, it's not going to be
possible, you're stuck with what you have. If you want a bit more flexibility we have convertible
where you can get up to 54% off, and you get that flexibility. As long as those ra attributes are
greater than or equal in value, you can change those values, then you have scheduled and this is
used. This is for reserved instances for specific time periods. So maybe you want to run something
once a week for a few hours. And the savings here are gonna vary. Now on to our last two pricing
models, we have spot pricing, which is up to 90% off, it's gonna give you the biggest savings.
What you're doing here is you're requesting spare computing capacity. So you know, as we said
earlier, it's like hotel rooms where they're just trying to fill the vacant suites.
If you are
if you're comfortable with flexible Start and End Times spot price is going to be good for you. The
use case here is if you can handle interruption, so servers randomly stopping and starting, it's a
very good use case is for non critical background jobs. instances can be terminated by ABS at any
time. If your instance is terminated by ATMs, you won't get charged for that partial hour
of usage. If you terminate that instance, you will be charged for any hour that it ran
in. Okay. And the last is dedicated hosting, it's the most expensive option and it's just
dedicated servers okay? And so it can be can be utilized and on demand or reserves you can save up
to 70% off.
And the use case here is when you need a guarantee of isolette hardware. So this is like
enterprise requirements. So there you go. made it all the way through ECP pricing. Alright, so there
are many AWS services that do not incur a cost and so these are free services. So for example I am,
which is used for creating users and groups and roles to access a different resources, creating
any of those components of IBM are not going to incur a cost.
So I am is essentially a free
service where you have these other services which are free, such as auto scaling cloud formation
Elastic Beanstalk everything in this blue box, but they can provision other AWS services,
which costs money. So, on the exam, I would not be surprised if you come across a question,
which kind of implies that cloudformation might incur a cost, but you just need to know that the
service itself is free, but it can provision other services. Okay, so I've highlighted in bold here,
two services, which I think would most likely show up on the exam. But I've given you more of a full
list of things that definitely do not cost money. So there you go. So each of us has four different
support plans to help you out when you need it. And when you first make an AWS account, you by
default are in the basic support plan. And this is going to give you access via email for billing and
account information. So let's say you aren't sure about the cost of something or you think that you
might have been overbilled or you are suspecting that you may be overbuild.
Because you might have
misconfigured, something, you have this available to you at all tiers. But yeah, that's the first
thing that you have access to. And so you just send them an email, and they'll help you resolve
that. Now, coming into the paid tiers, we're gonna start with developer starting at $20 USD,
and this is gonna give you access to technical support via email, okay, and generally, they will
reply within 24 hours. But they do allow you to choose the response time, like the nature of the
issue, which is going to determine how fast they reply. And so we have general guidance and system
impaired, okay. Now in the developer tier, it does not provide third party support. So let's say you
had a web application, whether it's Ruby on Rails, or Django or express GS and is running on an EC
two instance, AWS is going to help you with easy to instance, but they're not going to help you
with the actual third party part, which would be, you know, again, rails or Django and etc.
Okay.
So, so you know, that's what's going to be limited to, going into the next year business was starts
at 100 USD, this is now where you're going to have access to chat and phone. And this is any time,
okay, so if you want to call them at 3am in the morning, you can or chat with them. And generally,
it might be a bit slower to connect with them, but they definitely will connect with you. And
you can work through your problems, okay. So the other advantage here is that now that you can
do chat and phone, you can also do screen sharing with them, so they can actually send you over a
link. And now they can see your screen, and they can work through the problem with you.
And this is
extremely useful and definitely makes the business here, something worth purchasing, especially if
you're running a production system. Okay, you're also going to get faster response times, in the
case of if you have a production system impaired or down. Okay, so this might be important to you.
And so also the business tier and enterprise here does support third party, okay, so on these tears,
they will make the best effort to try to help you through things that aren't database related to
solve your problem. Okay, so that is an additional bonus, they're now coming into the enterprise
account. This is the most expensive plan starting at 15,000 USD, it was previously 10,000. But it
was has increased that and this plan is special because you actually get to dedicated resources,
these nysa resources, I mean people and so you get a personal concierge and a Tam which stands for
technical account manager.
And also you have a new response time where they can respond within
15 minutes. In the case for a business critical system down. Okay. So um, there's that and then we
have advisor checks. Okay, so for advisor checks for the basic developer, we have seven, and then
for business enterprise, we get all checks. Do we have another section in this course here where
we covered trusted advisor so you can see what all those checks are. But for the exam, you're
going to need to know the difference. pricing for the different tiers, you're going to need to
know those response times the 2412 for one hour, 15 minutes, you need to know when are people
assigned your accountants only in the enterprise. You're going to need to know when third party
support is is there or not Yeah, so there you go. So here in this follow along, I want to show
you how you would go ahead and create a case, in AWS support, I am using the business support
plan here.
And you can see that I have a bunch of different support cases, I definitely have a
lot on cloud front, because it's given us a lot of trouble. But anyway, let's work our way through
this and create a new case here. And then you're going to be presented with a type of case you
want to choose. So if you were on the basic tier, technical support would be grayed out, you'd
have access to both account a billing support and service limit increase.
So if I just click
here, you can see here, if I want to report a billing thing, I can choose the type. So I'd say
billing, I would choose the category. So I could say I have a question about the free tier. And
then you could specify the response time here, okay, Lord, I guess they call it the severity
and you'd write your subject description, you can attach up to three attachments there. And you
can only choose to talk to them via email. Okay, so we have chat and phone, but these are disabled.
But I think the real interesting thing to show you in support here is technical support. Okay? So
with technical support, this is where we're going to be able to ask technical questions about Ada
services. So if I wanted to drop something down, and we would type in a cloud front here, because
again, I say cloud front is something we spent a lot of time on. And then you choose the category.
And so now the category is going to narrow down based on the service.
And on the right hand side,
there are going to give you suggestions, okay, but we can go through here and say I'm having
an issue with caching, okay. And then you could choose the severity. So we'll just leave it
general. And then sometimes they ask you to provide additional information, it's optional,
but it's going to save them time to help you out, you'd have to go through your account to find
those values, it's going to change based on the service. And then down below, we can write in
whatever we want.
So I could say, I'm having issues with my distribution. Okay. My cash values
aren't showing up, aren't being served. Okay. And so you can choose the preferred contact here.
Now, this is very simple, you don't get any type of formatting or bolding. So you have to be a
bit creative to display that information. But you definitely want to try to create all the steps for
them to replicate it. Okay. And then down below, we have web chat or phone. So we'll give chat a
try here. Okay, and I'm just going to hit submit, and then we will we will get here is, um, a chat
window pop up there. Okay, and so we'll just wait here for a little bit. Well, I just wanted to give
you actually a better example here.
So I just left that window there and opened up a previous case I
had here on this one actually is with CloudFront, lambda edge. And so once you are chatting with
the cloud engineer, it will actually save all this within the case later on. So if you need to
read what you were talking about, that's going to be saved there later. If for whatever reason, the
cloud engineer cannot solve it, and they need to go off and try to replicate it or reach out to
someone else in the team, they will do so and then they will come back to you with the answer
later on.
And so they will provide that there. And that's what happened in the case here. Okay,
um, and generally, sometimes they will go out and actually bring back even more information for you
there. Okay. So you can even see that this cloud engineer had to go talk to the cloud formation
team to resolve this case here. So you definitely can really reach the experts within AWS to solve
your problem. So there you go. That's generally the follow along here in a nutshell, for crina
case, okay. So now we're taking a look at AWS marketplace, which is a curated digital catalog
with 1000s of software listings from independent software vendors, and allows you to easily find
by test and deploy software that already runs on AWS. So on the right hand side, there, you
can see we have a bunch of categories such as operating system security, machine learning, and
the idea is that you would click into one of those categories.
And now you have a bunch of products
that are being offered to you in the form of Amazon machine images, cloudformation, templates,
SAS offerings, laughs rules and a variety of more. And these products can either be free, or they
could have an associated charge, more likely the ladder and discharge will become part of your
AWS bill. And if you want to sell things yourself, there is a sales channel for ISVs and consulting
partners. So you definitely It cannot just be the one buying but also selling, okay. So in this fall
long, I want to show you the AWS marketplace and the things that you could possibly buy in here.
So just looking here, on the homepage, here, we have a bunch of categories where we can narrow
down the thing that we're looking for. Or we could choose a vendor, if we knew in particular, what we
want, you can see there's 1361 vendors. So there's quite a few here. Or if you want to determine
your pricing plans or delivery methods, okay, and then you have those popular categories,
which is a very easy way to start exploring, maybe we would be interested in machine learning.
So I'll go ahead and click there.
Okay. And now that we are in machine learning, we can see that
we have a variety of different offerings here. So let's say we wanted to do some deep learning.
with Python three and TensorFlow, I'm just going to click into here. And it's going to give
you an idea what kind of product we have here. I believe this is an Amazon machine image, I'm
just kind of trying to find where it says that, and right down there.
So we see that the delivery
methods is an Amazon machine image. So it's going to determine what that is. And we have a variety
of information here, such as the product overview, it'll do price estimating estimations based on the
easy to instance that you choose. And there can be useful information such as how to actually use
this. Okay, so yeah, so if you wanted to do that, I mean, you could create a subscription from
here. But generally, when you're launching Amazon machine images, you'd want to go ahead and launch
that with in the EC two, console there.
So let's hop our way over there and try to find something
in the marketplace. Okay. All right. So here I am in my AWS account, and I'm going to make my way
over to EC two. Okay. So a lot of times when you want to use a marketplace resource, generally,
you're going to launch it within the context of what service you're using. So there are laughs
rules that are sold in the marketplace. So when you're using laughs in the last console, you can
purchase them there. And when it's going to be an ami, it's going to be via EC two. Okay, so I
would just go ahead here and launch an instance. And as soon as I launch an instance here, or you
get to the option to choose to watch it instance, whatever it decides to load, we are going to be
presented with the AMI that we need to choose, okay.
Alright, so now we can choose our ami,
on the left hand side, you're going to see AWS marketplace. And so this is where it's going to
make it easy for us to choose a service there and subscribe to it. So if we wanted that machine
learning one, I think it was TensorFlow. Okay, so we typed TensorFlow there. I'm not quite
exactly the same one. But if we just wanted to launch one here, so here we have deep learning
ami, which is an Ubuntu image.
And it would have some kind of associated cost here. So I go
here and select it. Okay. And right away, it's going to show me the pricing here. I don't
see any additional costs, probably because this one is an AWS, deep learning ami, it probably
doesn't have any additional cost, but it does estimate that stuff out there. So maybe we'll
go back and actually choose something where I know there will definitely be a cost. Maybe we
try launching guacamole. Okay, so guacamole is a if you can spell it is a is a bastion, I'll
just type in Bastion, that's an easy way to find it. And so here's guacamole, it gives you a free
trial. And here you can see the pricing here. So you see 0.3 cents to 33 point 52 cents per hour.
And so I will just go ahead and select that, okay, and choose that ami and it can tell you that it
has a free instance. And then you'd hit continue, okay. And then you just launch your instance.
So based on this here, I'm restricted to that. So I'll just do a small here, and I'm just
going to go ahead and review and launch.
Okay, and this is definitely not part of the free
tier. So I'm going to definitely want to destroy this immediately after creating it, okay. But I
just want to show you how easy it is to create something from the aect marketplace here. Okay.
We'll just download that and launch that. Alright. And so now I actually have a subscription to that
market. Place service. Okay. So as is launching there usually doesn't take this long, but today,
it seems to be a bit slower. I want to show you the actual ABS marketplace subscription. So
when you start accumulating subscriptions, you can go to ABS marketplace subscriptions here
and see that apparently it's not supported in the Canada region. So we'll have to move over
to US East. That's not uncommon for AWS, because a lot of times with billing and other
things.
They are only available in the US East region. But here you can see we have guacamole,
okay, it's saying trial ends in five days. And then I have over here a lamp certified by bitnami.
And it has no additional costs. So if you are using a bunch of things from the marketplace, and
you're trying to keep track of them, this is where you're going to find that information. Okay? So
I mean, that's pretty much all you need to know, for the ABS marketplace. And I'm just going to
make sure to shut down that instance, there, since I do actually not want to do anything with
it.
Okay. But I just wanted to show you how easy it was to start subscribing to a resource there.
So I'm just going to go here and quickly shut down that instance there. So if you're following along,
you do the same. So I'll just go ahead here and terminate that instance. Okay. And there we go.
Hey, this is Angie brown from exam Pro. And we are looking at trusted advisor which advises
you on security, saving money performance, service limits and fault tolerance. The reason
I have that saving money in red is because we are looking at billing and pricing. Okay. And
for trusted advisor for every single account, you're going to get for free seven trust advisor
checks, if you have either business or enterprise support, you're going to get all trusted advisor
checks. And an easy way of thinking of what trusted advisor is, is think of it as an automated
checklist for best practices on AWS. So trusted advisor has five different categories where it can
advise you on and it has a checks.
And these are all the checks that are possible that are at the
paid tiers, okay, for the free tier, there's quite a few less, I honestly can't remember what they
are. So I'm not going to show them here to you. And we're just going to focus on the fullest here
going through each category. So first looking at cost optimization, where you're going to be able
to save money. The two most common ones where it will recommend you on is idle load balancers, and
on associate AIP. So for idle load balancers. So if you spin up an elastic load balancer, the
minimum cost per month is $15. Okay, but let's say you just don't happen to have any easy two
instances that are being balanced on there, it's going to say, hey, this load balancer is not doing
anything, maybe you should get rid of it to save some money. Another one is IPS. So that's elastic
IP addresses. Okay. And so the idea is that if you have an easy to instance, and you want to give it
a static IP, you can reserve an E I, II, II p from AWS.
But the thing is, is that it's not attached
to EC two and says it's associated, it costs you money, because AWS wants you to release that
that IP address so someone else can use it. So that's a recommendation that will make to you
looking at performance. Let's say we look at high utilization Amazon ECS instances. So for that one,
I believe that it's let's say you have a very high CPU usage on an on a CPU instance, it's going to
say, hey, maybe you should use a larger instance, okay, to get better performance out of this,
this machine here, okay? Now, for security, we have MFA on root account. And this is not
only trusted advisor tells you to do this, but so many other services tell you to do it,
because it's such a important security measure within your AWS account. Another thing could be
Iam access key rotation, so you have access keys that are used by users.
And it might suggest, hey,
it's time to rotate these out to make sure things stay secure. Okay, so looking at the last two
categories, we have fault tolerance and service limits. So for fault tolerance, it would recommend
that, let's say something for RDS backups, okay, so just to make sure that you have backups in
place, or have them turned on. So in the case that your database goes down, you can recover
it, okay. And then you have service limits, and there's none in particular chosen here. But
there are limitations on the certain amount of things that you can use enables allows you to
increase those limits. So it's just kind of like a safeguard for you to be less be allowed to go
beyond that, I guess a really good one would be SEO.
So SEO allows you to send out emails, and
probably by default, it caps you at like 5000 or 10,000 emails. And if you had to go beyond that,
you would ask for a service limit increase. Okay, so those are all the checks there and the five
categories to give you an idea of what trust advisor can help you with. So in this follow
along, I want to show you, the trusted advisor dashboard and how it makes recommendations to
you, and how you can keep up to date when it discovers new things. Okay, so here in this
exam pro account, we have business applied, so we have all the AWS advisor checks.
So let's
go take a look at cost optimization here. And you can see that we have things in green. So these
things are a Okay. And then you have things with warnings. And one thing we explored earlier was an
associate associated elastic IP addresses. If we expand there, it's going to show us that we have
one IP address and our US East region that's not currently associated with any running instance.
So this thing is costing us money, okay? So so then you'd have to go take action and go over to I
believe it's VPC, the VPC console and then just an associate that and you start saving money, okay.
And so we have that for a bunch of categories here.
If you wanted to download a report, I
believe you could go up here and download an XLS. Yep, that's an XLS there. So you can bring
that into Excel and look at that information. But the number one thing I'm going to show you
is preferences. And under preferences, you can actually set up email notifications on a weekly
basis. So you would just set those email addresses checkbox and save those preferences. And you would
get these notifications, anytime there would be a change, where it has recommendations for you, you
can take action on that. So that is all you really need to do for trusted advisors. So there you go.
So we're gonna take a look here at consolidating billing, which is a feature that is turned on by
default when you're using a service organizations and you have multiple member accounts. So you're
going to have one account, that's considered your master account within your organization.
And then
you'll have all these member accounts underneath. And all of their billing information is going
to be sent to the master account, as well as the master account is going to be responsible for
paying the charges for all its member accounts. Okay, so it makes billing a very simple and
straightforward. And also, you'll be able to use cost explorer to visualize the usage of the
billing per account. So if you wanted to see all the expenses, just for the developer account, or
the data science science account or the security account, you're going to be able to segment that
data within cost Explorer. consolidate billing is offered at no additional cost, okay. And if
you do have a member account, and you have it, leave the organization that cost export data is
going to be no longer available. So just keep that in consideration. Okay. So another thing we want
to touch on about consolidating billing is volume discount.
So each of us has volume discounts for
many services. So what that means is, the more you use something, the more you are going to save
Okay, and so consolidate consolidated billing lets you take advantage of volume discounts,
because it's going to take the usage from multiple accounts and treated as one and then whatever
that surplus of from another account is going to end up in another bracket of lower discount. So
just to really illustrate this here, we have usage from two different accounts we have odos usage and
data's use, DAX is usage for data transfer, okay, instead of the data transfer is going to cost at
the first 10 terabytes 17 cents per gigabyte. And the next 40 gigabytes is going to be a 13 cents
per gigabyte. Okay? So if you were just paying for odos usage and daxue separately, which would
be unconsolidated, you could see that comes out to 2088 and 96 cents, okay.
But when you consolidate
the billing and group, the total usage, you're going to have that usage overflow into tier two,
which is where you're going to save that money, okay. And so now you can see the consolidated
billing, it's going to be $2,007.04. So we have roughly there about $80 worth of saving, okay, and
so, if you if those costs weren't consolidated, we wouldn't get those savings. So that's one
motivation for you to take your individual accounts and make sure they're in an organization.
Okay. Hey, this is Andrew Brown from exam Pro. And we are looking at AWS cost Explorer, which helps
you visualize, understand and manage your AWS cost and usage over time.
So with cost Explorer, if you
have multiple AWS accounts within an organization, all the costs will be consolidated into the master
accounts of cost Explorer is very good at giving, getting an overview of all your costs, no matter
what accounts they're in. Within Eva's cost Explorer, you have these things called reports,
okay? And Asus gives you a bunch of reports, by default that you can use. So if you need to
start breaking costs down based on services, or excetera, they're just one click away. And you
of course, can make your own reports. Within cost Explorer, it has a feature called forecasting,
which allows you to see future costs, so you can plan for the future or maybe make adjustments so
you can lower your bill.
Within cost explorer if you want to view the data monthly or daily, that
is an option that is available to you. And you get these nice graphs within class Explorer.
So you can group the information in a variety of different ways. You can see there's tons of
different ways and you can also filter based on a lot of options there. So if you want to filter
out very specific services or Yeah, very specific regions or based on tags, or maybe you just
want to look at one particular, like accounts, maybe you have a developer account, you just want
to see what they're spending, then you, you can use those filters to narrow that stuff down. All
right? Hey, this is Angie brown from exam Pro. And we are going to do a quick follow along here
in Eva's cost explorer here. Okay. And so here, I have an exam pro at ghost account, which has
some expenses within it. So hopefully, we will find some useful information here to look at as
an example, on how would you use cost Explorer.
So here I am on the home, right. So if I was to click
here, this is what we would see. And right away, we're going to get month by month today cost. So
here so far, we've spent $185, this month, and then it's forecasting $466.18, I do need to point
out that these forecasts, forecasted monthly costs can be misleading. So if you have a large spike,
or bill at the start of a month, because you might have large services, so like you're paying for EDA
support, or you're registering domains, like one time fixed costs, this value here can be extremely
misleading.
So next month, I'm not paying $466. I definitely know that. But you know, just be aware
of that, if you see that it might shock you. Okay, so just to start looking at information, we
go to explore costs, okay. And right away, now we have our nice graph here. And it allows us
to now filter this data however we want. So here we have that group by and so the most convenient
one is generally by service, okay. And so what you'll get is a stacked bar graph here, which
will break down service costs. Now, it doesn't always show everything.
As you can see, here, we
have our business support RDS, some other EC two instances that are probably managed by AWS, maybe
ECS or something, then we have kinesis analytics, and then we have others, okay, so you don't get a
full picture there. But they do have a cost listed down below, you can download the CSV and work with
this raw data here. Okay, and you could break this down monthly, so I can go to monthly here. Okay,
and then this will just change the graph. So now it's a monthly breakdown. And you can change the
scope of how far you want to go back there. Okay. But we'll just go back there and change it to
daily. And apparently, we have some other options here. So if you don't, like stacked and you like
line graphs, you can have that or if you'd like bars, okay, but stack stack is my preference
there. Okay.
And then on the right hand side, we have filters. So if you want to start
filtering, it might look like this is grayed out, but what you do is you actually click here, okay,
and so then I could type something like register, okay. If I can remember how to spell it, there we
go. And that's for registering domains on Route 53. And if I just apply that filter there, you can
see I have one class there, okay. And there's tons of different filters in here, okay, tons and tons.
But like, the one that you'll notice the most is like linked accounts.
So if you wanted to filter
out for like a developer account, like a discount, or something like a variety of different accounts,
you can do that to figure out the exact costs of particular teams. Okay, and so that's that there.
Now, just to show you those reports, there are those default reports here, if you go on the left
hand side here, we can go to save reports. Okay, and so here are a bunch of them there, and you
can get an idea of what's inside of them. Okay. But yeah, you basically would just create whatever
configuration you want, oops, I went into reserved utilization there. I don't care about that. But
yeah, whatever, whatever filters you want, you just go ahead and make any report. You go cost and
usage, okay. And from there, once you pick, choose your configuration, you hit save, and you can have
this report for later. Okay, so if you really want to monitor, like CloudFront. So CloudFront is
something that we heavily use that exam Pro, and it can fluctuate based on how many people are
consuming videos on our platform, we might want to just create a report for CloudFront.
Okay, so
yeah, there you go. Hey, this is Angie brown from exam Pro. And we are looking at AWS budgets, which
is a service that helps you plan service usage, service costs and instance reservations. I like
to think of it as billing alarms on steroids. And when you use AWS budgets, each budget costs
about two cents per day. Okay, and you have up to a limit of 20,000 budgets, but the first two
budgets are free of charge. So if you have any adverse account, you definitely want to go ahead
and create yourself a couple of budgets. Okay. All right. So we're looking at his budgets here,
a little bit more detail. And so the idea here is that you can set up alerts if you exceed or are
approaching your defined budget. There are three types of budgets you can create. You have cost
usage and reservation, okay, so costs is where you're just plugging in $1 amount There, okay?
For usage, it's going to be based on a usage unit. So you could choose something such as EC to
running hours. And then you're going to use supply whatever the unit is.
So that's going to be ours
in this case. So here I've supplied 100. And you can track budgets based on monthly, quarterly
or yearly levels, okay? And so just if you set it for a year, then that alert is really going
to be designed to be delivered at the end of the year. Okay. So for reservations, that is for
reserved instances, and it is budget supports, etc, to redshift or RDS and elastic cash,
okay? Now, when you are defining your budgets, you can define them based on a fixed cost, or you
can plan planning upfront based on your chosen level. So you could say for, for each, so for next
six months, you could say for this month, I want to spend this and for this month, I want to spend
that etc, etc.
Okay, and if it was quarterly, you could say what you want those budgets to be
for those quarters. Okay. You can also easily manage Eva's budgets via the dashboard. And they
also have an API. So if you need to do something programmatic, you can definitely do something
there. And normally, you'd get notified by email, but you could also have the notification
sent to chatbot. Okay, so for chatbot, that is a newer service for AWS integrates
with common services such as slack or chime, so those could, your budget information will be
pushed out to there, okay.
Hey, this is Angie brown from exam Pro, and we are going to look at
Avis budgets in this follow along and learn how to set our own budget. So we'll go ahead here and
create our our budget here. Alright, and so we're gonna be presented with either a cost budget,
or usage budget, or a reservation budget. So I'm going to choose cost. And we're going to set your
budget. And so they give you a suggestion, like monthly easy to budget, okay. And I could just say
all my costs, so overall, overall costs, okay. And then we can choose the period. So monthly seems
good to me, but you have monthly, quarterly and annually here, alright, you can have a recurring
budget or expiring we want this for every single month. And then you can choose your budget amount.
So we have a fixed or a monthly budget planning, this is a little bit more complicated.
So I guess
if you're a startup and you assumed your costs were going up, you'd want to fill this go up and
up and up. Or if you were a seasonal business, and you assume your budget would change based on
the demand, it would definitely make sense to a set monthly budget planning, okay, but we'll go
back to fixed here and we can just have a cost, you can see it shows my last month cost was $126.
Let's just say I wanted my cost to always be $100 per month, it will draw this line here and give
me an idea of whether I'm over or under, okay, and we could filter services. So if I wanted to
go here, I could just choose EC two, okay.
And I'm just going to look for EC two, I'm not sure why
I didn't show up in search ghosts already. Yes, instead, because that was a bit easier to find
here. So apply filter. So but just an idea to show you just how that works there. Okay, and I'm just
going to remove that filter there. If I figured that out, there we are. Okay, and we'll just apply
that filter again. And we do have some advanced options there.
But everything seems pretty good.
So I'm just going to go ahead and configure alerts. Okay, and so you can get alerted if you're
if you go over the budget, so you can get it based on the actual cost or forecasted, I would get so
many emails, if I or at least I'd always get a email if I had forecasted because forecasts within
my account are always spiked, okay, but here, you could set the alert threshold. So when you're
approaching that budget, so let's say you're 80% On the way there, it should send you an email,
and then you'd add your contact here. So I could just say Andrew at exam pro.co. Okay, um, maybe I
did that button.
Yeah, just the one there. Okay, and you could also notify via Amazon SNS so if you
already have a topic Arn, you could provide that there. But apparently, you do not have to do that
here, which is kind of nice. But apparently they have a new feature, which is the chat bot. So I
suppose if you're using Slack, you could integrate that alert there. So nothing super exciting there.
But yeah, so if you were using Slack, or I'm sure it integrates with AWS version of slack, which is
called chime in, there's probably another service there. So that's kind of interesting there.
But
we'll go ahead and we will confirm our budget. We're going to get an overview of that. And we'll
go ahead and create that budget. Okay. And so now we have this budget, and we just have to wait some
time before we can actually see some information here. But generally what would happen is it will
Oh, here we go. I just did a refresh there. So it showed my budgeted my forecasted the current
versus budgeted and then the forecast. Okay, so yeah, there you go. That is a budget. So I
just wanted to show you that the email here came through for those budgets and just what it looks
like.
So here, you can see that it says that I exceeded the amount of $80. So when we entered in
that 80%, it calculated the dollar amount for us there. It just shows us that information. Okay,
so there you go. That's all you need to know for those budgets. Hey, this is Angie brown from exam
Pro. And we are looking at the decio calculator, which stands for the total cost of ownership. And
this allows you to estimate how much you would save when moving to a dress from on premise. So it
provides you a detailed set of reports that can be used in executive presentations, the tool is built
on underlying calculation models that generate fair assessments of value that you can achieve
given the data provided, okay? And the TCL helps by reducing the need need to invest in large
capital expenditures. Of course, this tool is for approximation purposes only. So it's really a
persuasion tool to use for at the executive level, okay.
But the idea is that you just launch the
TCL calculator, you describe your environment, you're going to get a three years summary of
cost comparisons, and then you can download that detailed report, okay. All right, so we're going
to take a look at the total cost of ownership calculator here. So just Google and find your way
to the TCL calculator on AWS, when you arrive, this page, you know, you're in the right place,
and you're gonna be looking for this big yellow button. Now, it does take sometimes quite a bit
of time for this to load. So I've already clicked that button and have it open here on a new tab.
Okay. And so you get here, and the idea is you choose your currency, we're gonna stay with us
dollars. And you can choose whether you're on a premise or colocation, we're gonna say on prem.
And you can decide whether they are physical servers or virtual machines, you can see some
options there. And now you're going to go ahead and fill some stuff in here.
So let's see if I can
figure something out here. That is a good example. So maybe you'd have a non database server. So you
have your own web application. Okay. And let's say it is using whoops, it is using the number of VMs,
you have six running, and each have, I don't know, eight cores, and you're using that's 1024242048
amount of memory, oh, that's gigabytes. That's too high, we'll just say eight gigabytes there.
Okay, we can choose the hypervisor, the OS there, I'm going to add another row here. And we'll
choose a database this time, and we'll just say Postgres here, okay. We'll say Postgres. And
maybe we don't have as many Postgres servers running here. So we'll say two, and we will say,
four cores. And we will say, have four gigabytes of memory here.
And that's running on VMware. And
then we can choose storage here. So we have some storage here. I guess we could just put something
in here. So we could say, we'd have 500 gigabytes, maybe 500 gigabytes of storage. Okay. And so now
that we have all those things, we're going to go ahead and hit Calculate the TCL. And we are just
going to wait here for this report to generate all right. All right. So after a little wait
there, we can see this report has generated and we have a comparison between on prem and AWS. And
it's saying that we could save up to 70% a year, which would give us a total savings of $200,000
over the course of three years. Okay, so here, we get a cost breakdown, and we get the total
cost of ownership there. So we have the server, the storage, the network, and now we have this
additional cost, which is it labor, okay, because this is, in the case that you have on prem, you're
gonna have to hire it to manage the infrastructure on AWS, it's, it's taken care of for you, okay,
so you're not paying for that cost.
And then it shows you your on prem environment, and then it
shows you the equivalent in AWS. So if you had if this is what you're using, this is what you'd
want to use on AWS. Okay. And then down below, we have some additional information, okay,
and then we have a cost breakdown. So it just compares those breakdowns for you. Okay, and then
we got other things here, like calculations. Oh, boy, that's a lot of stuff. methodology. Okay.
So a lot of stuff that you can use within a presentation to make the case to move to AWS.
Okay. And then up here, we can just download that report. Okay. And that would download it as a
PDF.
Alright, but there you go. So that's the the TCL calculator. Hey, is Andrew Brown from exam
Pro, and we are looking at Ava's landing zone, which helps enterprises quickly set up a secure
Avis multi account. Now I have enterprises in red there because if you read them Marketing
page, it doesn't say that it's for enterprises, but it definitely is because from what I remember,
it has a very expensive upfront cost, okay, which but for enterprises would be a very little.
So it's not gonna be for the small to medium sized startups. But the purpose of Eva's landing zone is
to provide you with a baseline environment to get started with multi account architecture. So what
does that mean? Well, the idea is that you have these companies and at best recommends that you
run in multi account, but they don't know how best to the company itself doesn't know how best to set
up multi account and make sure it's secure.
And, and, and good for future growth. And so landing
zone is basically that setup for you. Okay. And the way this all works is through a service
account vending machine, also known as a VM, which automatically provisions and configures
new accounts via a service catalog template. And the way you're going to access these accounts
is going to be using single sign on. Okay, and so the environments here are customizable to allow
customers to implement their own account baselines through a landing zone configuration and update
pipeline. Okay, so now that we have an idea, let's go take a peek at the landing zone page.
So here
we are on the Ava's landing zone marketing page, I just want to scroll down here for you. So I can
just show you that they have some architectural diagrams here to give you an idea what you are
getting with landing zone. So here it says the solution includes four counts, add on products can
be deployed using a service catalog. So when you get this you're going to get four accounts
are going to get this master account here, they're going to have a shared service account
log archive account and secret account. So when you are setting up your organization's you should
always have a login account and should also have a security accounts that are isolate from your other
accounts, because it's just good for for auditing purposes, okay, and so at best is giving you the
best setup possible by doing that for you.
All right. And so when you need additional accounts,
then you use that account vending machine, okay, and so that account vending machine will just
create new accounts for you. And so that's really all you need to know about a landing zone
that it is giving you a baseline environment, and then it's going to allow you to add additional
accounts that are going to be secure, with a lot of other good best practices baked into the Okay.
Hey, this is Angie brown from exam Pro, and we are looking at Ava's resource groups and tagging.
So
we've got two different things here. But they are strongly related. So we need to learn them both at
the same time. So tags are words or phrases that act as metadata for organizing your AWS resources.
And then you have resource groups are a collection of resources that share one or more tags. Okay,
and so the way you'd access those resource groups, is there's a drop down right beside services where
you get to create a group and manage your tags. Okay. So the whole purpose of resource groups is
to help you organize consolidate information based on your, your project, and the resources that you
use. And resource groups can display details about a group of resources based on metrics, alarms,
configuration settings, okay. And at any time, you can modify the settings of your resource groups to
change what a resources appear. Okay, so let's say you had a database server, and maybe an s3 bucket
and you wanted to group them all together, you'd give them all the same tag, and then you could
put them in a resource group.
And so that's the concept there. Okay. So in this follow along here,
I'm going to show you how to use resource groups and tagging. So we're going to spin up a couple of
servers, give them some tags, and associate those to a resource group see that they are in a group,
and then we'll turn down those servers. Okay, so what I want you to do is make your way to EC
two. So we'll go to services at the top here and type in EC two. Okay. And we'll just make our way
over to the EC two console. So once we are here, we'll have to go ahead and launch some instances.
So let's press the Big Blue Button.
Okay. And now that we're in here, I will just choose Amazon
Linux two, okay. And we'll stick with the micro tier because that is the free tier. And then we're
just going to set up two servers, okay. And we're going to go on to storage and pass onto storage
onto tags, and we're going to add a new tag and I'm going to call it project and I say tarok
nor okay tear rock nor, and that is a Star Trek reference. If you're wondering, okay, and we don't
have to worry about secure groups, we'll have to review and launch we're gonna hit launch here and
I'm going to drop down Percy without a key pair. We're not doing anything with these servers, just
tagging them okay. And so, they are launching, we're gonna go down to view instances in the right
hand side there and then they are launched. I'm just going to click on one of these, even though
there's a loading thing, you can still click the checkbox. And we're going to go to tags here just
so we can see our tag.
And then what I want you to do is ROP resource groups down here and I'm just
going to create a new group, I'm going to open a new tab to make my life a little bit easier
here. And we'll just wait for this to load. Okay, and so here, we are creating a new group. And we
need to choose our group types. So we have tag based and cloud formation stack based, so we're
going to be going with tag base today, okay, and so then we have our grouping criteria, this
is going to determine how things will be grouped. And so we can choose a resource type, but we'll
just leave it to all supported resource types, okay, so that allows it to be anything easy to
or anything, okay, and we will need to supply our tags. So going back over here, I just want to make
sure it's 100% the same, so I'm just going to copy and paste that there. So we got project, and
then we have tarok noer. Okay, and I'm just gonna hit Add.
And so now we have our criteria set up.
This is where we would see those group resources, we don't see any as of yet, okay, I'm just going
to click here to see what we see. Oh, sorry. So you hit that there. And now, those instances have
been found, and also the volumes the EBS volumes attached there also have the tag applied appears
to be, so we actually have four resources. And that's why and so I'm just going to type in tarok.
Nor here, okay.
And we have some options, here to tag the actual group here. That's not necessary,
we'll just hit Create group. Okay, and so now we have grouped resources, okay, so whenever we want
to look at our saved groups, okay, we can go here, we can see terok nor, and we can see all the
resources and then quickly click through to find other resources with those tags.
All right.
All right. And so now that we know how to create a resource group, let's actually go look at manage
tags, okay? Because this is a very convenient way to find resources. All right, based on tag, so
what we can do is we are, it's certain it adds the region that we're in, so we're in Ohio right
now. And we could choose the type of resource I'll say all resource types, and I'm gonna just
type in projects, see how it autocompletes there, and I can use tarok, nor Okay, I'm going to add,
I'm gonna hit Search resources, okay. And so what that has done for me is it's actually found them
all for me. And if I want to export them as a CSV, those resources I could do so. And I think I
have a checkbox here and go to Manage tags, selected resources, I can now remove the tag from
all these resources here, or add additional tags, okay, so I can go here and then say, Federation,
Starfleet, okay.
All right. And I believe, if I hit review and apply tags, it's going to go
now apply those tags to those four resources. So we go back to EC two instance here, we might have
to do a manual refresh up here. And so now we have an additional tag applied. If we wanted to remove
those on mass, it's going to be the same story, right? So we're gonna go to project we're going to
go to terok. Nor we're going to hit all resources here, search for those resources. And I can select
them all manage them, and remove that tag. Okay. So um, yeah, it's pretty darn straightforward.
I
think I actually removed our original tag there. So if I go back here and do a refresh, now we just
have Federation Starfleet. Okay. So, you know, that's as simple as it is. And there's tagging
found out throughout so many services within AWS. Okay. And I'm just going to go and shut down
these instances, because we are done with them. So we want to terminate them. And we want to say
yes, okay, and so that's all of our cleanup there. So there you go. Hey, this is Angie brown from
exam Pro. And we are looking at AWS quickstarts, which are pre built templates by Ava solution
architects, and Amos partners to help you deploy popular stacks on AWS.
And so the benefit here is
that it can reduce hundreds of manual procedures into just a few steps. Okay, so quickstart is
composed of three parts. So you're going to get a reference architecture for the deployment. So
it's going to be like an architectural diagram and description. And then the actual quickstart
itself is just a cloudformation template, and cloudformation templates are used for
provisioning multiple AWS resources.
So it's going to automate configured that deployment
for you. And it will have also a deployment guide explaining the architecture and implementation in
detail. Okay, so most quickstarts are reference deploy deployments enable you to spin up a fully
functional architecture in less than an hour. Okay, so you can get operational pretty quick with
these things. And on the right hand side there, you can see that I've cherry picked one out there
from onica and that's one is for setting up an IoT camera connector. Okay. So here I just wanted to
give you a quick tour of Eva's quickstarts just so you have an idea of what there is available to
you here.
And so on the left hand side we have a bunch of filtration options to choose Or to narrow
down some nice templates here for us. And on the right hand side, we already have some templates,
let's go into analytics here. And right away, we have a one here by Cambridge technology, which
automatically deploys a clickstream analytics environment for you. So that sounds pretty
cool. So if we just click into this actual quickstart here, what we're going to see
down below is that architectural diagram, I was talking about how we're like a bunch of
descriptions as to what it is doing, this stuff varies based on quickstart templates that don't
expect to see the same stuff everywhere.
But they'll generally give you instructions on how to
deploy, and then the costs or licenses involved. And so if we wanted to launch this, we go view
deployment guide details, maybe here. Okay. And, oh, we got a big white paper. So this one's a
bit different here. Sometimes, the buttons are a little more clear. Oh, yeah, here it is. So again,
this will vary based on each one. So I've never done this one before. But we'll say deploy into a
new VPC. Okay, and what that's going to do is set up that cloudformation template for you.
That's
what I'm expecting anyway, so yep, there it is, it's going into cloudformation. Okay. And we're
not going to go through this whole process, I'm just showing you, at least to this stage, okay.
And so here, we have that template, we go next. And I'm just going to see if it asks us to provide
some information. So yeah, these a cloudformation template has a bunch of variables that you fill
in. So based on the Quickstart template you have, it's just going to have different options here.
As you can see, this one has a variety of options, but we would just fill that in, go next review and
launch and then it would spin up that clickstream for it. So there you go, that is a quickstart.
Hey, this is Andy brown from exam Pro. And we are looking at AWS cost and usage report. And this
is a service which will generate out a detailed spreadsheet enabling you to better analyze and
understand your AWS costs. So just as it says, you have a big button and you download a spreadsheet
and there you get a nice big breakdown, the report gets placed into an s3 bucket, you can
use Athena to turn that report into iqueryable database hour, or you can use quick sight to
visualize your billing data as graphs.
Okay, so you have a lot of options here to work with
this data. All right, but maybe you just want the spreadsheet. Okay. So that is Ava's cost usage
report. So in the following, I just want to show you how to use Amos costing usage report to get
that spreadsheet, okay. And so what you're gonna do is you're gonna go up the top right corner
here, you're gonna go to my billing dashboard, and you're going to make your way to the cost
of usage reports here on the left hand side, okay, and then once you get here, we're gonna
have a nice big blue button that we can press to create our reports, let's go ahead and do
that. So we're gonna need to give us a name. So we're gonna say my, my use cost and usage, okay.
And we can include additional resource IDs here, I'm gonna just hit next.
And then we need to
configure where it goes. So I'm going to create a new bucket. So I'm just gonna say, ESP for
exam Pro, cost and usage, okay. And it's going to put that in the US East. One region there.
Okay, I'll hit next. And we have this nice, big policy wants will say, save that, okay. And
then we can choose to what detail that we want. I'll leave it for hourly, that's totally fine. I
will say daily, that's probably more ideal there, we'll create a new version of support. And now for
easy integration, we do have those options there, Athena redshift and quick site, but we are just
going to leave this as be I'm gonna make a zip because I want to make my life really easy here.
Just because if I download to my local computer, I won't be able to unzip that with very little
effort here. I'm gonna hit next. And what we can do here is go hit review and complete. Okay,
and so now, it is going to deliver that. So in the next 24 hours, your first report will be delivered
to an Amazon s3 bucket you configured during this report creation.
So we're just going to have
to wait for this creation. And I will come back here and download it and show you that report.
Okay. All right. So it's been 24 hours, and I went over to my s3 buckets here, and I searched
for that bucket that I created. And then I just drilled down so if you just click through to that
bucket, okay, so I go into here, and then there's this folder that has no name, okay? And then you
go into the cost and usage. And then you go into here, then you're going to see another folder, you
click into there, and then we can get that CSV, zip.
Okay. So that's going to have a zip, which
contains a CSV file. And that's going to give us that raw data, which I've opened up here in Excel.
And so you can see there's a lot of data here and so it's up to you To make sense of this data, but
at least you can see you get all the raw data from cost and usage. And of course, I mean, the huge
advantage here is that you can integrate this into quick site and Athena to analyze it within AWS.
Okay. So there you go, that is a cost of usage. Hey, this is Angie brown from exam Pro, and we're
looking at organizations and accounts. So when you first sign up for AWS, you are creating a single
account. And that first user you're logging in, as is the root user. Okay, so just look over
here on this diagram, see where we have a master account. So just, let's pretend that this was the
account that we created, and we were logging is that root account user.
So what you can do is you
can promote your account into an organization. And so what that's going to allow you to do is it's
going to allow you to create multiple accounts within that organization. So now, that original
account is now a master account, and underneath it, you can create multiple accounts. Okay,
so why would you want to do this? Well, if you're an organization, you might want to, like,
isolate different departments within your company, and also to have fine tuned control over what they
have access to on mass. Okay, so the idea here is like, let's say you have a development team on one
side, and there's multiple accounts, you can put them within an organizational unit, and then use
a service control policy to apply rules about what services they can or cannot use on math.
Okay.
So I mean, that's pretty much all there is to it. But I think this would be a lot more clear when we
do a quick follow along, okay. Hey, this is Angie brown from exam Pro. And in this follow along,
I'm going to show you how to use organizations and create some member accounts. Okay. So there are
two places where you can manage your organization. It's within the IM console here. So you just type
in Im to get to that console. But you can see here that it says organization is not in use, because
we have yet to create an organization. So what we'll have to do is in a new tab, we'll have to go
to the organization's console here, which is where I'm at currently. And we have this nice little
wizard here to get started. So I'm going to go ahead here and hit Create organization, it's
going to ask us to create an organization where we have all these features, or we could just have
one consolidated billing, we definitely want to create this one here.
So I'm gonna hit Create
organization. Great. And so here I have created organization. And you can see that it sent me an
email to finish verifying your master account, because the original account we have here has
now been turned into a master account. So I'm going to go ahead and just go confirm that email
here. So now I'm in my email here. And here's that verification email. So I'm just going to go
ahead and press that button. And now this has been verified. Okay, so I'm just going to close that
here. I'm just going to refresh. And you can see we are now verified, okay, and we can see, that's
our master account, I think it might be Yep, the star emphasizes that that is a master account. So
if I go back to Im console here and do a refresh, let's see if there's any kind of change.
Okay, and
there definitely is. So you can see that we have a root organization here. And then we have the exam
pro fresh account, which is the master account. So we can't create additional accounts. From here,
it's just more of an organizational structure, what we can do is go back to the organization's
console here, and do some organized organizing. So before I actually go ahead and create any
accounts, let's actually go look at some, some organizations are sorry to organize this
account. So we'll go to organize accounts. And so over here, this is where we'd see all of our
accounts. And we can create some organizational units.
So I'm going to create a new organizational
unit called developers. Okay. And so now I have that organizational unit, and there is some
way for me to set them in the tree. Actually, by default, it has already set it here. So we
already have that. Okay, so I suppose it already is associated to the root there. Okay, so now
what we'll want to do is we'll want to actually create an account under this organizational unit.
So let's go back to accounts here and let's make a new account. I'm going to create a new account
here.
And I'm going to do Andrew plus fresh plus developer at exam pro.co. Here, okay, I just gotta
be here. And we'll just say Andrew Brown, okay, because every account has to have a unique, unique
email for the root account. And there is this Im role, I'm just gonna leave that blank and hit
Create. And what's that? What that is going to do? It's going to get us set up with a new account.
And so I'm just waiting here for this to send us an email to tell us that our account is ready.
Okay, so we'll just wait here for a little bit. Alright, so after waiting a few minutes here, I
got a new email saying my account is ready.
Okay. And just back in here, if you do a hard refresh
here, you'll see that the account is set up, you probably don't want to name the account
based on someone's name, I just inherently had put my name in there. Generally, you'd want
to name this developers or whatever the account is called here. But this account is now ready.
So how do we actually access this account? Well, the way you do it is you actually just log in as
the root user. So I'm going to just close this tab here. And I need to remember what this email is
here. So it's Andrew plus fresh plus developer. And we're just going to log out here and just sign
back in with this as the root user.
So what we'll do here is we'll just go ahead and go sign in
to console. And we're just going to provide that email there. And we're just going to hit next.
Okay, and what we're going to do is we're actually going to hit forgot password is the only way to
set up new accounts, you have to just reset the password. And so we have to enter into this code
by three by m, q q, that's really hard to see, but I think that's what it is. Okay, we'll try
this again, eight, seven, E, eight, y p. Great. And so now we're gonna get an email here. And so
we'll just wait for that email. Okay. All right. And so here is that email to reset her password.
So we just got to go ahead here and click this link here. Okay. And so now we're just going to
have to provide a new password, so I'm just going to fill something in there.
Okay, and so now our
password has been reset. Great. So now we'll just have to proceed to sign in here. So we'll just
put in that new password, and we should be in our new account. Great. And so now we are in with
within this new account. So it's not easy to get new accounts set up. And so I guess the next thing
is, we'll look at how we can organize this account with the organization. So we're gonna have to
log in and go back into the root account of our master account. Okay. So that's what I'm just
doing here. Okay. So I believe I called it fresh. And we will just supply that a password. Okay, and
so what we'll do here is we'll make our way over to organizations.
And we see we have our account
there. And so what we want to do is we want to add our account to an organizational unit. And so I'm
just going to see how we can do that if I remember how. So I'm just going to check boxes here. And
I believe over here, if we right click here, this account is currently in the route to move
this, choose the move account option. Okay, so I guess that's what we need to do here.
So we'll just click on move. And we'll just choose that to be in the developers route. And
so now, this account is under the developers organizational unit. Okay. So if we click in
there, we can see that account. So the reason you'd want to move things into organizational
units is so you can attach policies, okay. And service control policies.
And that's what they
are, helps you limit access to certain resources. So if we only wanted that account to only be
allowed to use EC two, that's what we can do. So we'd say only EC two, here as the policy name.
And then we'll just filter out what it is that we want to allow. So we'll say EC two, and then we
have to choose actions. So we'll say all Okay, and then we can move on to resources, I suppose,
specify the resource type EC to will say, all resources here, and then we'll hit add, and then
we'll move on to the conditions. And so we don't need to change any of this here. I'm pretty sure
I'm happy with that.
And we're going to say allow, so we're just going to allow access to all the
VC to Okay, so that way, everything else will be implicitly denied. So the only thing we'll have
access to is easy to and hopefully, the statement is valid. And we'll just go hit Create policy.
And now that we have our policy created here, which gives us only easy to access, we now you
can apply it to that organization, you have to do everything from the root. So you'd have to enable
service control policies so that you're allowed to use them. Okay. And so now that is enabled, and
I believe, if we go into developers, we should be able to set that policy. So I'll go here, and
I'm going to just choose attach. Okay, and I'm not sure if I can detach it, but let's give it a go.
Okay, and so now this one should only have access to EC two, and, but the root will still have
access to everything.
Okay. So there we go. So now that we have an idea how we can apply permissions
to accounts, let's actually go back to the other account and just go ahead and just shut it down or
terminate it because we're not going to be using This other account for anything, we don't want
to leave this other account laying around. Okay, so what we'll do is we will just log out here,
and I'm just going to log back into this other account. Okay, so I'm just proceeding to log into
that other account there. And I just got to type the password in here. Okay, great. So we're back
into our member account there. And we did say we were only allowed to launch EC two. So actually,
let's go ahead and try to just create something else just to see if our service control policies
working and right away, so you're not authorized to perform lambda. So our policy is working as
expected, okay.
And I didn't mention this before, but every time you create an account, they all
have their own root account. Okay, so right now we are logged in as the root account into this
member account. And let's say you wanted to get rid of this account, you can actually suspend this
account. So let's go ahead and do that now. So I believe to suspend accounts, we have to go to up
up here, and we have to go to my account. Alright, so but there's only one problem here is the
fact that we don't actually have the ability to close our own account, because we don't have the
permission. So we're going to have to go back into our master account and give us better permissions
there.
So we can actually go ahead and get rid of this account. So I'm just going to log out here,
we're gonna go back into our master account there. And we will make our way back to organizations
here. And so you might think that you could just remove the account here, but the problem with
that is that it would just leave the organization. And in order to leave the organization,
you'd have to attach a new credit card, and account wouldn't be would actually wouldn't
be deleted or suspended, you actually can't delete accounts in AWS, you can just suspend them, which
makes sure that no resources are being billed for within those accounts anymore. And that's what
we want to accomplish here.
So we're going to go back to our organization accounts here, right
click on developers, and we're going to go to service policies, and I'm going to attach the
full access and then detach on the EC two, and we're going to log out and go back into that
member account. Alright, so here we are going back into that member account. And we'll just do
was at Andrew plus exam Pro Plus developers. Oh, no, it's fresh, okay, fresh plus developers at
exam pro.co. Maybe it's just developer. There we go. We'll enter that password in. Okay, great. And
so now we should be able to get rid of our account here. So I'm going to go up and go to my account.
Okay. And so we do have some sensitive information here, which I have blocked out.
But within here,
we are going to go ahead and close our account. So we'll just do that. So what I did here is I
just scrolled all the way to the bottom, and you can see that we can close your account. And we
have a big long disclaimer about it. But again, the advantage here of closing our account, which
just suspends it is that it's going to ensure that we're not being billed for anything else within
our account. Okay, and I'm just going to go ahead here and say I understand for the three things
here and go ahead and close my account. And so this account has now been closed, and I can just
proceed to logging out here. So just scroll up and just log out and we'll go back into our master
account. Alright, and so now we'll just go ahead and log back into our master account and go just
check on the status of that organization. And we will just make our way back to organizations
here. And you can see now this is suspended. So this account is no longer active. Okay. And so
that's all there is to it.
Okay, so yeah, that's eight us organizations. And yeah, there is some,
some visibility there on organizations within the IM console, there's not a lot there to do, you can
just see the structure and look at service control policies. But just be aware that each of us is
developing that in Iam. Yeah, there you go. Hey, this is Andrew Brown from exam Pro. And we are
going to learn a bit about 80 of us networking here. So I have this nice big architectural
diagram. And we're gonna work our way through it. Okay. So the first thing you'll want
to do when you want to launch resources, you're going to have to choose a region to
launch them in. And so a region is a geographical location of your network.
So that could be US East
one, which is north Virginia, or maybe you would choose Canada Central, which is based in Montreal.
Once you've decided what region you want to launch resources in, you're going to need a VPC. And
a VPC stands for virtual private cloud. It is a logical isolated section of the cloud, where you
can launch at best resources. So it's just a slice of the ADA based network. Just for you. Okay, and
then once you have your VPC, you're going to want to subdivide it up into subnets. And so subnets
are logical partition of IP network into multiple smaller network segments. Okay, so you could have
public and private subnets. The difference between a public and a private subnet a public one is
generally accessible to the internet, whereas a private subnet is where it is not. Okay. So when
you have things that need to be super secure, are you going to put those in a private subnet?
All right.
And so subnets are defined within an availability zone. And an availability zone
is just a data center for your where you're going to launch your AWS resources. And those
azs are contained or are specific to specific regions. Okay. So now we have a region we have a
VPC, we have our subnets. And so we can go ahead and start launching resources into our subnets
here. So we could launch an EC two instance, or an RDS instance. But how are how is that EC two
instance going to reach the internet. So in order to do so we're going to need a gateway to the
internet. And that's where internet gateway comes into play. So it enables access to the internet,
you can think of it up as a door to the internet, from your VPC, outward, okay. But just having
internet gateway is not enough, because the subnet has to know how to reach that internet
gateway to reach the internet. And that's where route tables come in.
So route tables determine
where network traffic from your subnets are, are directed. So you'd create a a route in your
route table to say, hey, row table, go here and go out to the internet. Alright, now that we have
a way to the Internet, and we can launch resources into our subnets, what about security, and that's
where security groups and knackles are going to come in. So security groups is acts as a firewall
at the instance level. So here, you can see that we have an EC two instance in RDS, and they span
subnets. And we have a border drawn around it to say that the security group is protecting those
two instances. So that's how that works. And you have knackles and knackles is another form of
security, but it's at the subnet level. So it sits in front of subnets. And controls access in and
out of those. Okay, so I mean, those are the most important components of AWS networking, there's
definitely a lot more. So that's all we need to know for now.
Okay. Hey, this is Andrew Brown from
exam Pro, and we are looking at database services. And so you can see we have a variety of different
services, for databases on AWS. And for the actual exam, you probably just need to know Dynamo dB,
RDS, Aurora, and redshift. But when you're taking the exam, they might throw in these other ones to
just throw you off. And so by knowing all of them through process of elimination, you can determine
what the correct answer is. Okay. So I think it's going to be good for us to learn them all. And
so just starting at the top here with Dynamo dB, which is a no SQL key value database.
And
so I always like to say that it's Cassandra, like or Cassandra based, because I think
at one point it was, or at least is very similar to it. And so this is a very flattened
simple database, which can scale to millions of records. And we'll give you a guarantee of reads
and writes per second. Okay. So if you needed to say 200 reads per second, you just enter that
in and you'd get a guarantee of it. All right, moving on to document dB, which is a no SQL
document database that is MongoDB compatible. So if you need MongoDB, you're going to be using
document dB. Then we have RDS, which stands for the relational database service, okay. And it's
probably the most popular database on AWS, and the most commonly used and it supports multiple
engines.
So you can use MySQL, Postgres, Maria, db, Oracle, or Microsoft SQL Server, alright. And
it happens to have one other engine called Aurora. And so Aurora is really its own thing. And it
is a fully managed relational database, okay. And within it, you can choose to either run MySQL
or Postgres. And so because it's fully managed, it has a greater performance over the regular MySQL
Postgres RDS, and you're gonna see my school, it has a better performance of up to five times,
whereas Postgres has up to three times. Now, Aurora, again, is highly available and durable.
And so when it when you spin up, an aurora cluster is going to be running six copies of your
database across three availability zones. Okay, so with that, it definitely is more expensive
than using RDS.
But if you are an enterprise or you need that guarantee of availability and
durability, you're definitely going to want to use a worra. Now moving on to Aurora serverless.
It's pretty much the same thing as Aurora. With less features, but the huge advantage here is
that it's, it's way more inexpensive. So this is kind of like a relational database where it's on
a need B basis. Okay? So the idea is that you're only paying for when you're using it just like
kind of like a lambda, okay? And it's really good for development workloads or web apps that are not
frequently used. Or if you're using a serverless architecture, okay, so it makes it really easy
to connect lambdas to Aurora serverless. Now, moving on to Neptune. It is a managed graph
database. That's all you need to know. them. We're onto a redshift. So redshift is a columnar
store database. Okay, so instead of reading via rows, it reads via columns.
And so it's really,
really good. Working with a huge amount of data, where you need to generate maybe, like reports
or analytics, like a business intelligence tool, and it can handle petabytes worth of data. Okay,
so there's like 1000 terabytes in one petabyte. So that is x significant amount of data. Moving on
to elastic cache, it is a caching solution. So you can either choose to use the open source caching
databases here, Redis, or memcached. Okay, so if you need caching, that's going to be your choices
here. So there you go.
That's all the database services. Hey, this is Andrew Brown from exam
Pro. And we are looking at provisioning and so provisioning is just an easy way to set up a bunch
of AWS resources for you or your servers in an automated way. And this could be done via code, or
it could be done via a graphical user interface. Okay. And so AWS has a variety of different
services that can help us with provisioning. So let's just learn the difference between all
these services starting with Elastic Beanstalk. So Elastic Beanstalk is really good at deploying web
applications, where you don't have to think about the underlying infrastructure at all. So what
you're going to do is you're just going to prepare your code, you're going to upload it to Elastic
Beanstalk choose the container you want to use with the language of choice.
And it will more or
less work with very little to no configuration. So if you're using Ruby on Rails, you just choose the
Ruby container, upload your code, it would work. And you know, if you wanted to use Django, then
you just use the Python container, etc, etc. Okay, I like to think of Elastic Beanstalk as the
Heroku for AWS, if you've ever used Heroku, it's just a service where you not part of AWS, but you
just upload your code, and it just works. Okay, moving on to opsworks. opsworks is a configuration
management service. And it's going to help you the management help you with the configuration of
your instances, using either Chef or Puppet. So those are just two different tools, developer
tools that you can use to manually or sorry, programmatically set up a server. So for, for
chef, you're actually using Ruby, that's what it's written in. And so you would define these
things called recipes. And those recipes would go out and set up things on your actual easy to
server. So if you had to install dependencies, or pull the code or do a bunch of other stuff,
that's what those tools are going to do.
And officeworks also has a concept called layers.
So you can define your infrastructure as like three tier or two tier layers. And so you could
have like an application layer, a database layer and networking layer. And it just makes things
very clear. Okay. Moving on to cloud formation, cloud formation is infrastructure as code.
And so the idea here is that you are creating a JSON or yamo file, and what you're going
to do is you're going to define all of your AWS resources that you want to provision and
how exactly how you want to configure them, you're going to upload that template and then
it's going to set everything up for you in one go.
Okay, so cloudformation is an extremely
powerful provisioning tool. And so compared to opsworks opsworks, has some limitations as to what
it can do. So it can set up some things for you, but cloudformation can do anything pretty much
in AWS. Okay, so it is the most complex option, but it is also the most flexible option in our
provisioning tool set here. Moving on to Eva's quickstarts. These are just pre made packages,
which actually are just cloudformation templates. And they are created by AWS or with AWS third
party providers through the APN network, okay, and so, they are going to have these pre packaged
templates for a variety of different things. And we do cover quick sidebar. quickstart in more
detail here in this course. But the idea is like, let's say you wanted to get started with ml,
you'd go to the ML category, and there would be a bunch of premade configured cloudformation
templates and you just launched one.
Okay, so you'd have to take a look to see what there is
there. But it is a provisioning tool. Moving on to 80 of us marketplace, this is a digital catalog
of 1000s of software listings from independent software vendors, where you can find by test
and deploy software. Okay, and so, generally, you're gonna be using the marketplace to buy
managed EC two instances. So let's say you needed to set up a WordPress, you could go into the Ava's
marketplace and find an ami, for wit, WordPress, so one that is very popular is by bitnami. And
so the advantage here is that it's just pre configured for you. And maybe it has additional
security hardening. And so you would pay a monthly subscription to use that.
Okay, so those are all
of our provisioning options on AWS. Hey, this is Andrew Brown from exam Pro. And we are looking at
computing services on AWS, starting with geesey, which stands for elastic Compute Cloud. And you
can see that I've made a division there. And that's just to emphasize how important EC two is.
And the fact that basically, every service under the hood is using EC two. So no matter what you're
using, whether it's a lambda RDS, or redshift, they're all running on EC two instances, they're
just what might be abstracted away from you, because eight of us is managing those EC two
instances. Okay. And so what is EC two? Well, it's a highly configurable server, where you get
to choose your CPU, memory network and operating system. Okay, so now moving on to the other
computing services, we have ECS, which stands for elastic container service.
And this is basically
Docker as a service. So if you need to run micro services, or a, a dockerized, application, you're
going to be launching it on ECS. So with ECS, what you would do is you would just choose the
type of easy to instance you you want. And that easy to instance will come pre configured with
Docker running on it. And then it has a really nice interface, so that you would just define
your containers within something called a task or a service, and then you would just run them on
ECS. Okay, next on this list, you have fargate. And this is also for micro services.
And this is
kind of like the evolution of ECS. So, with ECS, you choose what easy to instance, you, you need
to use fargate, you don't choose easy to instance, you just would define your, your containers within
a task or service. And you would just tell them to run and AWS would just have it run, okay. And
so the difference here is that you aren't paying for the EC two instance, you're just paying
for the runtime and the CPU utilized. Okay, so it's kind of like lambdas, where you're
just paying for the time performed and the resources used. Okay, moving on to Eks, which is
Kubernetes as a service. And so if you've never heard of Kubernetes, it's becoming the de facto
standard for micro services within the industry. And so since it's so important, AWS has decided
that it needs to have a service to run Kubernetes and it's called Eks.
Okay, so it gives you all the
benefits of ECS. That allows you to run the open source Kubernetes. Okay. And again, this is just
for micro services, moving on to lambda lambda, lets you run serverless functions. So the idea
here is that it you just upload your code in the form of function, and it just runs, you don't have
to think about the servers, there's nothing to provision everything is taken care of for you.
And you are just paying for the compute time based on how long it runs. Okay, so that's all
there is with lambda. Okay, moving on to Elastic Beanstalk. And so Matt blastic, beanstalk is going
to orchestrate a various amounts of Eva services for you.
So the idea is it will set up up to s3,
SNS, cloudwatch RDS, load balancers, whatever you need to run your web application. And the idea
behind Elastic Beanstalk, it allows you to set up developer environments, that's what it's intended
for. It's not really for production use. So the idea is like, let's say you're a developer, and
you have a web app. And it's running on Ruby on Rails, or Django, or love rail, and you just want
to get it running. But you don't want to have to think about all the services you have to set up.
You just upload your code to Elastic Beanstalk, it would do the rest for you. So that's all there
is there to that service. And it really just is using EC two again, so it's just going to set up
EC two instances for you, but you just don't have to worry about it. Moving on to AWS batch.
So Avis
batch, as the name implies for batch processing, so you can plan schedule and execute your batch
computing workloads across the full range of Eva's compute services and features. And so what it's
doing is it's just launching EC two instances for you using spot pricing so that you can save
a lot of money. So there you go, that is all the computing services, you need to know. Hey, this
is Angie brown and exam Pro. And on AWS, we have a variety of different storage services that are
available to us. So let's quickly go through them. So the first one on our list here is s3, which
stands for simple storage service. And it's an object store, I like to think of it as a hard
drive in the cloud, where I don't have to think about the actual hard drive, I can just upload
files, and I don't have to worry about running out of space, because there's unlimited space.
So it
really is a no brainer, okay. And then you have s3 Glacier. And so it's like s3, but it's extremely
inexpensive. But the trade off here is that you have to be okay with waiting for several minutes
up to hours to access those files. And when you do access those files, there is a retrieval
cost. So it is a really good use case for large enterprises who have lots of sensitive data. But
they have to hold on to it for seven to 10 years, but they're very unlikely to actually ever look at
that data. Okay, so that's where s3 Glacier comes in. Then you have storage gateway. And so I like
to think of storage gateway as an extension of your on premise storage into the cloud. You could
also use storage gateway as a backup solution. So for your local storage, you would just back
it up onto s3 there. Okay. And so basically, storage gateway is a hybrid solution for on prem
to cloud for storage. And then you have EBS, which stands for elastic block store. And this is
essentially a virtual hard drive in the cloud that you can attach to EC two instances, and you get
to choose what kind of hard drive you want it to be.
Okay, so if you want it to be a solid state
drive, which are optimized for higher I ops and better throughput, or you could use an H HD, which
is going to be more inexpensive solution, okay. And then you have Fs, which stands for elastic
file store, and it is a file storage solution. So it's like having a file system that you're
able to mount to multiple EC two instances at the same time. Whereas with elastic block store,
you're only able to attach that to one EC two. So that is a huge advantage there. Okay. All right.
And so now we're looking at snowball, and it is a way of moving a lot of data around very
quickly from your on premise network into AWS, or vice versa.
So let's say you have terabytes
worth of data, uploading that directly to this would be extremely slow and painful. So what it
goes will do is you order a snowball, they'll send it to you, it's basically a computer in the form
of a suitcase with a lot of hard drives in it. And what you're going to do is you're going to quickly
load your data onto that snowball, and then it's going to be delivered to AWS directly into s3,
okay. And then we have snowball edge, which happens just to be like a snowball with additional
features, and more storage so that it actually can also process data as it's being inserted into the
snowball. Okay, and then on last on our list here is snowmobile, which is super cool. And it
allows you to move petabytes worth of data. So it's actually just a giant cargo container or
shipping container on a semi trailer truck. Okay, so it's basically like a data center on wheels.
So AWS will drive it to your on premise, location, and you're going to basically just hook up to
that, and you're going to move all of your data onto there, and then it's going to be driven back
to AWS and then loaded into s3.
So there you go, that is the storage services on AWS. Hey, this is
Andrew Brown from exam Pro, and we are looking at business centric services. So starting at the
top of our list here, we have Amazon Connect, which is a cloud based call center service, you
can set up in just a few clicks, and based on the same proven system used by amazon customer
service teams, okay. So what you can do with Amazon Connect is you can accept inbound, inbound
calls and dial outbound, you can record your calls and then store them into s3. So maybe you could
then run them for analysis maybe through Amazon comprehend or something like that. And you can
also set up workflows within Amazon Connect. So if you want to route a call based on a set of rules,
you can definitely do that there. Next on our list here is workspaces, which just boils down to
being a virtual Remote Desktop.
So secure managed services for provisioning either Windows or Linux
desktops in just a few minutes, which quickly scales up to 1000s of desktops. So you just would
have bring your own license and you'd be able to spin up a Windows 10 server that you can now log
in from the convenience of your AWS account. Okay, then we have worked docs, which is a content
creation collaboration service, easily create, edit and share content, save centrally AWS. So
this is a this is version of SharePoint, then you have chimes. So this is a service platform
for online meetings, video conferencing and business call business calling which elastically
scales to meet your capacity needs. So chime here is like, it's like having slack and also Skype.
Okay. Now we're on to work mail. And this is just managed business, emails, Contacts and Calendar
service, which supports for existing desktop and mobile email client applications.
So this is just
Gmail for but like on AWS, then you have pinpoint. So this is for marketing campaign management
systems, you can use for sending targeted emails, SMS push notifications, and voice messages. So
we actually use pinpoint here at exam pro to send out our campaign emails. So here, you can
import a bunch of contacts, create campaigns, and do like a B testing on your your emails. Okay,
so that's a useful tool there.
Then you have FCS simple email service. And this is a cloud based
email sending service doesn't a for marketers, and application developers who send marketing
notification in emails. So we just had mentioned pinpoint, which is for marketing campaign
management system. And this can send emails but FCS is more for like when you are building
your web application, and you want to send out emails from that application. So let's say you
had someone who registered on your platform, and you want to send them a confirmation email,
you send them out through FCS and FCS supports, HTML emails.
So there's another service called
SNS, which also can send emails, but that can only send plain text. So that's why ICS is more
designed for marketers because it has that HTML component. And last on our list is quick sight.
And this is a business intelligence service. And so the idea here is you can connect multiple data
sources and quickly visualize data in the form of graphs, little to no programming knowledge,
okay, so you can connect a data from s3, you're probably Aurora and RDS. And you just click
it. And then with a bunch of other clicks, you now have these beautiful graphs, okay. And I believe
that there's also like an ml component and quick site. So there's a lot of cool things you can do
there. And you can also share those visualizations in the form of dashboards to other people.
Okay.
So there you go. Those are the business centric services. Hey, this is Andrew Brown from exam Pro,
and we are looking at enterprise integration. This is all about going hybrid, bringing your on prem
and your cannabis network together. Okay. So the first service we're gonna look at here is direct
connect. And this is a dedicated a gigabit network connection from your on premise to AWS. So imagine
having a direct fiber optic cable running straight to AWS. So it's a really good way of having low
latency and a dedicated connection. Okay. The next thing is VPN. So the idea here is that you can
establish a secure connection to your network. And we have two ways of doing this. We have site to
site VPN and client VPN. So site to site is when you are connecting on prem to your network, and
you have client VPN.
So imagine you have someone that works for you. Maybe they are maybe they work
from home and they have a laptop and you just want to connect them to your network. Okay, then you
have storage gateway. So this is a hybrid storage service that enables your on prem applications
to use Eva's Cloud Storage. I always think of it as extending your hard your on prem hard drives
onto AWS. So this can be also used for backing up and archiving, disaster recovery, cloud data
processing, storage tiering and migration. Okay, and then down below, we have Active Directory.
So we have a directory service for Microsoft Active Directory, also known as Eva's managed
Microsoft ad.
And this enables your directory where workloads and Amos resources to use manage
Active Directory in the cloud. Alright, so I know that last one was pretty boring. But if you are
using Active Directory, there are definitely ways to integrate that on AWS. Hey, this is Daniel
brown from exam Pro. And we are looking at two logging services. Here we have cloud trail
and cloud watch, starting with cloud trail, it logs all API calls, generally via the SDK or
AWS COI between Ada services.
So this is a really good service to determine who we should blame for
something. So if you wanted to say who created this bucket, who spun up that expensive easy to
instance, who launched the sage maker notebook, that's where cloud trail is going to come
into play. And so some of the other use cases here is that we can use it to detect developer
misconfiguration, which we just talked about, but we could also use it to detect malicious
actors. So someone got into our account, cloud trail is going to maybe give us an idea
What is going on? And then we could also automate responses. So maybe every time someone created
a bucket, you wanted to trigger something. And so that is something that we could do maybe with
cloudwatch events using cloud trail. Okay. So now on to cloud watch. So Cloud watch is a collection
of multiple services. But generally, when people say cloudwatch, we're talking about cloud watch
logs. And all the other cloud watch services are really based off of logs.
Okay? So Cloud watch
logs is just a durable storage solution for your logs. And so logs could be performance data about
your database services, such as CPU utilization, memory, or network in, you could also store your
application logs here. So if you are running Ruby on Rails, you could send the logs there or nginx.
Just as that as well. Or let's say you're using lambda lambda, you would, you can put within your
functions, a lot of console log calls. And so that would then pass that on to cloud watch. And that
is just in itself, application logs for lambdas. Okay, and so moving on to the other cloud watch
services, we have metrics, and they represent a time ordered set of data points. And so you want
to think of cloudwatch metrics as a variable to monitor.
And if that's still confusing, just think
of it as like taking data from Cloud watch logs and turning it into a graph, okay, then you have a
cloud watch events. And this allows you to trigger an event based on a condition so when, when you
have logged data, or you can trigger based off of a metric, or other other kinds of rules. But like,
the most common thing you might use cloudwatch events for is, let's say, every hour, you want
to take a snapshot of your elastic block store, like the volume that is attached to your
server, you can do that with cloudwatch events, then you have cloud watch alarms, and these
trigger notifications based on a metric. And so you would specify a threshold and when that
threshold is breached, that alarm gets triggered, and then it would send you an email or a
text message however you specify, okay, then you have cloud watch dashboards. And this
just creates visualizations based off of metrics. So when I said earlier that metrics, you can think
of them as graphs, that's exactly what they are. And so you could take those graphs, and then put
them onto a dashboard.
So you could represent a lot of data at a glance. So there you go,
those are the two logging services in AWS. Hey, this is Andrew Brown from exam Pro, and we're
looking at know your initialisms. And so there's a lot of ad bus services and some other things that
are represented by these short form of initials. And the reason why it's good to know these is
that on the exam, if they were to just give you the full name of the service, it might give away
the answers. So they might use the initialized version. Okay, so if you had a question about
sending emails, and one of the options was sex, and you knew that he sued for email, that's a dead
giveaway of what the correct answer is, it's also just going to help you comprehend things a lot
faster, if every time you see auto scaling groups, you just think as G because in your mind, you're
going to read that a lot quicker.
Okay. So we do have a lot of initialisms here, and four services.
But there's also some things such as Tam, which is actually a type of person that gets assigned
your account. Or we have IoT, which is just a more generic tech technology term, which stands for
Internet of Things. Okay, so there just are a lot of things on here. And these are the most common
ones that I could think of. And so I figured, you know, you should study up on these and just
make sure you are familiar with them, okay. Hey, this is Andrew Brown from exam Pro. And we're
looking at the shared responsibility model. And this is going to deal with security of an in
the cloud. So when we're talking about customers, they are responsible for security in the cloud.
So what does that mean? Well, whatever data you put on AWS, you are responsible for it. So if you
do not secure it, that is your fault.
Or if you do not turn on monitoring services to monitor
sensitive data, that's going to be your fault as well. Or there's a variety of different Ada
services that you can use, and it's up to you to configure them. So if there is a misconfiguration,
that fault is going to be with you. Okay, so those are your responsibilities. Then we have AWS and so
AWS is has is responsible for the security of the cloud. So the hardware, the operations of managed
services, and the global infrastructure, okay, so all the things that you can't touch is what AWS
is responsible for. And so this is actually just a pared down version of the shared responsibility
model. The full one actually looks like this. Okay, and so you can just see that there's a
lot more information here. So for the customer, we got customer data platforms application
on As the network the fire configuration, client side dating encryption, server side
encryption network traffic protection, and on AWS we have software and hardware rights
over the software, you have your compute your storage, your database, your networking, if your
hardware you have an Davis global infrastructure, you have the regions and the edge locations.
Okay,
so I mean, this is the full list, but really, you just need to remember, again, for the customer,
it's dating configuration for AWS, its global infrastructure and hardware. Okay. Hey, this is
Angie brown from exam Pro, and we are looking at ETS compliance program. So what is a compliance
program? It's a set of internal policies and procedures of a company to comply with laws, rules
and regulations or to uphold business reputation, okay. And so we have a bunch of these cool looking
badges. And the idea here is that if you need to conform to one of these compliance programs,
eatables has a big list of them. So it makes it easier for you to adopt cloud computing.
To
that I want to point out is HIPAA and PCI. So so for HIPAA that is the Health Insurance Portability
and Accountability Act of the United States, and is a legislative legislation that provides data
privacy and security provisions for safeguarding medical information. So if your hospital you're
going to want to be HIPAA compliant, okay? And then you have PCI DSS and so this is the Payment
Card Industry data security standard. So when you want to sell things online, and you need to handle
credit card information, you're going to want to be PCI compliant, okay? And there's a variety of
compliance programs, this is not the full list, but just to give you a taste of what that is,
okay? Alright, so I just hopped over here to the AWS website, because I just wanted to show you the
full range of compliance programs that AWS has, and if you had to find out if they had some kind
of compliance program, how to investigate that. So here I am, you can see we have a bunch of
different logos more than what I was showing you prior there.
And you can see that there are
offerings in multiple countries. So if we just scroll down here, you can see there's a lot for
the US. We even have some here for Canada, okay, which is where I am, Asia, Pacific Europe. Okay,
so there is a variety of things there. All right. Now, if you wanted to find a little bit more about
any of these certifications, if you just click into them, they'll tell you what it's for. And a
lot of additional information, okay. So there is a considerable amount of information here.
So when
you do need to explore a bit more about compliance programs, definitely check this out. Now actually
getting access to the reports for how AWS meets those compliances is another story. And so
that's what we're going to look at next, which is at this artifact, okay? Hey, this is Andrew Brown
from exam Pro, and we are looking at a database artifact. And the purpose of this service is to
really help us determine whether a database is meeting a compliance program, because just because
they have the logo on their website, doesn't necessarily mean that they are compliant, you
need to prove that via a very long checklist and explain how you are meeting those, all those rules
within a compliance program. So if you wanted to get access to that, you actually have to go into
a bit of a roundabout way. And so 80 of us has made a service in order to generate out the report
that shows that they're compliant. So what you do is you would go into at this artifact, you would
choose the package, or artifact you're looking to get, it's going to generate out a PDF, and
then within that PDF, you have to click a link, which will then get you the actual files that
you that you are seeking.
Okay, so that's what Eva's artifact is, and I'm going to show you how
to generate an artifact and get to those files. Alright, so in this follow along here, I'm going
to show you how to use AWS artifacts so that you can get access to a compliance report. So what I
want you to do is go to the top here to services, and we will type in artifact, like remember how to
spell it here. We just type in art. There we go. And so now in artifact, we're going to get a huge
list of all the possible compliance programs that AWS has. And so what we'll do is we'll just look
for one so since I'm in Canada, let's look for the Canada GC partner package. And what you'll do
is you'll hit get this artifact, okay, and you'll be presented with a bunch of information. And what
we'll do is you should probably read it and then once you've read it, check that box there and say
accept and download and what that what's that that is going to do is it's going to download this PDF
document.
So in order for you to access to files within this PDF, you're going to have to make
sure you have Adobe Acrobat Reader installed, because it will not work with any other reader.
If you're on a Mac like I'm on right now, if you open it up in preview, it's not going to allow you
to download those files. But I'm going to open up Adobe Acrobat, and we're going to give this a go.
Alright, so I have this document opened up here in Adobe Acrobat Reader. And it even tells you right
off the bat, open the artifact using Adobe Acrobat Reader. Other PDF readers are not supported.
Okay.
So now that we have this open, what we have to do is follow the instructions. So this is click the
paperclip paperclip icon in the top left corner, so which is up here, okay, and then what it's
going to tell you is a double click the file you'd like to open. So there could be a variety
of different files in here. It could be PDFs, or csds, or excels. But we'll just go ahead and
just double click this one here. And so now we actually have access to even more content. So now
we have an XLS. So here, I guess it's just kind of a summary of what's going on. And then, within
this XLS file is the file that we're actually trying to get to. So we're gonna go ahead and open
this file. Okay. And here's that file open there. And so, you know, this is what we're looking
for, you can see it's a very long file. Okay, so the, these documents are gonna vary based
on each compliance program, because they're all different.
But this is that one. And this is
the file that you are trying to get to that proves that AWS is meeting this compliance program. So
there you go. Hey, this is Andrew Brown from exam Pro. And we are looking at Amazon inspector.
And the question we are asking here is how do we prove an EC two instance is harden? And so
to really understand that question, we need to know what a hardening is. And so hardening is
the act of eliminating as many security risks as possible. Okay. And so that is what Eva's
inspector is helping you do. So Avis inspector runs a security benchmark against specific EC two
instances.
So you choose which ones you want. And you can run a variety of security benchmarks.
Okay. And so it can run both a network and host assessment. So for network, it's checking to see
if you're, if any ports are open, and if they're reachable to the internet. And then the host is
actually checking the actual OS, and any of the applications there, based on the benchmark or
security best practices that you choose, okay. So the way inspector works is that it's going
to install the agent on your EC two instance, which just does this, I believe through a run
command, then it's going to run an assessment for your assessment target. And then it's going
to, then you get to review your findings and remediate those security issues. Okay. And so
one very popular security benchmark is the CIS, which stands for center of internet security. And
they have over 699 checks. And that's what we are going to be using through our follow along. So
let's get to that. Hey, this danger brown from exam Pro. And we are looking at AWS whap,
which stands for web application firewall, and it's going to protect us, or specifically our
web application from common web exploits.
Okay, so the idea here is you're going to write your
own rules that are either going to allow or deny traffic based on the contents of an HTTP request.
And if you didn't want to create your own rules, and you wanted to just use one from a trusted
Eva security partner, you could purchase one very cheaply in the at best laugh rules marketplace.
And so they call it a rule set, because it's a bunch of rules included. And generally, those rule
sets will protect you against the a wasp top 10, which are the most dangerous attacks for web
applications. And so whether it's SQL injection, or cross site scripting, or a host of other ones,
again, those rule sets are easy to purchase and protect you against everything. Now, in order to
use laugh, it has to be attached either in front of CloudFront, or an application load balancer.
And so there you go, that is all you need to know for a nervous laugh. Hey, this is Andrew Brown
from exam Pro.
And we are looking at AWS shield, which is a managed DDoS protection service that
safeguards applications running on AWS. So just to understand what the offering for the services, we
need to know what a DDoS attack is, which stands for distributed denial of service and this is
a malicious attempt to disrupt normal traffic by flooding a website with a large amount of fake
traffic, okay. And so, in order to use a shield, it's actually already turned on for you, and
it's given to all eight of us customers. at no additional charge at least the shield standard
is and So, in order to take advantage of shield, you just have to make sure that you are routing
your traffic through rough d3 or through cloud front. Okay? Now I said that there is a paid tier
and that is shield advanced. Okay, so for shield a standard, this is going to protect you against the
most common DDoS attacks, and it's already turned on automatically for you.
And it's available for
a lot of different database services. And then you have shield advanced, which cost $3,000 per
year and you have to pay that upfront, I believe are these you have to make the commitment to pay
that. And this is going to protect you against additional types of attacks, larger attacks,
more sophisticated attacks, okay, and it's also going to give you visibility into those attacks, I
believe you get like a dashboard. And you also get 24 seven access to some DDoS experts. For those
complex cases, I myself have experienced DDoS and have paid for such a services shield advanced,
so I can definitely understand the value there. And it's only available for a limited amount of
services. So it'd be for roughly three CloudFront lb their global accelerator and putting things in
front of or on to tip there.
Okay, so that's all there is there. And I probably will just go to the
website and just pull up the big comparison so we can take a quick look through it. Alright, so I've
hopped over here to the AWS website to give you a comparison between shield standard and shield
advance. And so as we saw earlier, shield standard is turned on for all AWS services, where shield
advanced, it's going to have the same coverages of standard but have additional functionality for
these specific AWS services. Okay, so if we just scroll down here, you see we have a nice large
comparison, the most important thing to note is that shield advance is for mitigating large, DDoS
attacks.
So if someone is specifically targeting you, and sending a lot of traffic your way, you're
going to want to pay for shield advance. Okay? Another thing about shield advanced is that we get
that visibility reporting, so we're gonna get a lot more information as to the nature of these
attacks, we're going to have response team and support. So we're going to be able to talk to
people to work through that problem. And then we're also going to get DDoS cost protection,
okay, so this is going to make sure because we're getting a lot of traffic's going to be hitting
the servers that roughly three CloudFront EOB. And if you have a lot of traffic that would
cause you to spend a lot of money.
So AWS gives you these guarantees that you're not going
to be going overboard and cloths. Okay, so yeah, that's the stuff I wanted to highlight there for
advanced. Yeah, there we go. Hey, this is Andrew Brown from exam Pro. And we are looking at the
concept of penetration testing. And so it's pen testing for short. So what is pen testing? It's
an authorized simulated cyber attack on a computer system performed to evaluate the security of the
system. So the question here is, can you perform pen tests on AWS? And the answer is yes, there
are some limitations around it.
And there are some prohibited activities. But you can definitely
do pen testing on AWS, AWS. So there are eight services you are permitted to do pen testing on.
So you have you see two instances, Nat gateways and lbs, you have RDS, you have CloudFront, you
have Aurora, you have API gateway, you have Eva's lambda and lambda edge, you have lightsail
resources, which are just using a variety of other services underneath such as EC two, and
then you have Elastic Beanstalk. So those are the eight permitted services. And then you have
prohibited activities. So you definitely cannot perform DDoS attacks, you can't do port flooding,
you can't do protocol flooding, you can't do request flooding, anything of the flooding nature,
okay, and you cannot do DNS zone walking. So there's that now if there's something else that
you wanted to do, I need us to run a simulated cyber attack or test, you can submit a request to
AWS and they will reply up to seven days to say whether you are allowed to do so or not a year or
so ago pentesting wasn't allowed at all on AWS.
So they have definitely opened this up. So you can do
a lot more stuff here. And just be aware that yes, you can do pen testing on AWS. Hey, this is
Andrew Brown from exam Pro, and we are looking at Amazon guard duty and so the question I want
to pose to you is how do we detect if someone is attempting to gain access to our AWS account or
resources, and that's where Amazon guard duty is going to come into play. So guard duty is a threat
detection service that continuously monitors for malicious suspicious activity and unauthorized
behavior. It uses machine learning to analyze the following 80 plus logs so you have cloud trail
logs, your VPC flow logs and your DNS logs.
Okay, and it will alert you of findings which you can
automate an incident response via cloud watch events or with a third party services. And
just to add a bit of additional information, if you've ever heard of an IDS or an IPS, those
stands for intrusion detection systems and intrusion protection system. And that is a device
or software application that monitors and network or systems for malicious activity or policy
violations. So that's what Amazon guard duty is. It's an IDS IPS for AWS. Okay. Alright, so I just
wanted to quickly show you what findings look like in guard duty. So I have guardi turned on, and
I have a few EC two instances that are launched, which are just in public v PCs with with very
exposed security groups.
And you can see right away that people are already trying to SSH
brute force into my instances, because if you do have instances that are public facing with SSH,
where you do not restrict the IP to only your IP, you're very likely to see a brute force attacks.
But you can see here it describes what, what the finding is, and a bunch of additional information
about this attack here. So yeah, there you go. That's just a guard up there. Okay, this is Andrew
Brown from exam Pro. And we are looking at key management service, also known as kms. And it is
a managed service that makes it easy for you to create and control encryption keys used to encrypt
your data. And there's three things I want you to know about kms. And that is it's a multi tenant
HSM.
HSM stands for hardware security module, and this is a piece of hardware that's at the AWS
data center. I mean, there's lots of them. But this piece of hardware is specifically designed
for storing keys within memory. So they're never written to disk. And that piece of hardware is
extremely secure. It's multi tenant in the sense that there's other customers that are utilizing
that same piece of hardware, and you all are virtually isolated from each other via software.
Okay. And the other two points I want you to know is that many Eva services integrate with kms
to encrypt your data with a simple checkbox. So in this screenshot here, we have RDS where we're
enabling encryption, and that is using kms. Okay, so a lot of services have that checkbox, and
then you just choose the key from kms.
And kms uses envelope encryption. Okay, and so envelope
encryption, we have an example down below, on the idea here is you might have a you have a key that
encrypts your data, but what is going to protect your data key from from being encrypted. Okay, so
that's what we're doing is that we're encrypting the key that we use to encrypt our data with
and that's why it's called envelope encryption. Because it's like putting your key within an
envelope so people can't see that key. Alright. And yeah, that is kms. Hey, this is Angie brown
from exam Pro. And we're looking at Amazon Macy, which is a fully managed service that continuously
monitors s3 data access activity for anomalies, and generates detailed alerts when it detects
risks of unauthorized access or inadvertently data leaks. So that was a very long sentence. So if you
weren't following along, I wasn't either.
So just to reiterate, Amazon may see it, the idea is here
is that you put data in your s3 bucket. And that data can be it could be sensitive data, such
as credit card numbers, or personally identify identifiable information, or it could be health
record information. And so what Amazon Macy does, using the power of machine learning, and also
analyzing your cloud trail logs, it's going to detect that sense of data and whether that data
has a risk of being compromised or exposed. Okay, so if you put a file full of credit cards in plain
text, and you upload it to your s3 bucket, Amazon is gonna say, Hey, we found some credit cards, and
it's plain text, you should probably I don't know, encrypt this and and archive it and make sure
nobody has access to it. Okay. So that's the role of Amazon Macy.
Now, Macy has a variety
of alerts. And this kind of gives you an idea, the kind of things that can detect so ransomware
someone trying to lock you out your data and make you pay for it privilege escalation for someone
trying to get access to stuff that they're not supposed to, at the entity enumeration somebody
that is trying to enumerate over the list of stuff that you have to figure out what they can
steal information loss, if you've lost data, credit credentials loss.
So if you have stored
credentials there, and they were lost. So there's a bunch of alerts that it can alert you on. The
other thing that it can do is it will identify your most at risk users, which could lead to
a compromise. Okay, so if you have someone on your team, and you know, they're just having very
poor practices and access to sensitive files very often, they're going to rank it based on this.
These badges, okay. And it's funny because you think bronze would be the worst user, but Platinum
is actually the worst user. So the nicer the badge is the worse this user is. You got to give them
that attention. Okay. But anyway, that is what Amazon may see is, Hey, this is Angie brown from
exam Pro, and we are looking at security groups versus a knackles. Okay, and so these are both
used to act as firewalls within your VPC. But the utility of these are slightly different. Okay, so
just knowing the difference here is a good thing to cover, especially when we are in the security
section here.
So looking at security groups, they act as a firewall at the instance level, whereas
knackles act as a firewall at the sub net level. So in that diagram, you can see that all those
instances are contained within a security group, and they can span multiple subnets. Whereas the
knackles sit in front of the subnets. And they're gonna control access in and out from subnets.
Okay. Now, security groups implicitly deny all traffic, and so you have to create allow rules
to get access to things.
Okay. And so that's both for inbound and outbound. Okay. So the
idea is that if you wanted to open up Port 22, so you could SSH into an instance, that's an allow
rule you'd create on that security group. Now, with knackles, you can allow an end deny rules,
okay. But the real utility here with knackles, is that you can block a specific IP address
known for abuse, okay? Because you can have deny rules. And you can say exactly, I want to
deny exactly this IP address. So the reason you can't do this with security groups is that because
implicitly denies everything in order for you to, to deny a single IP and allow everything else,
imagine all the IP addresses in the world, right, you'd have to create allow rules for everything
for those IP addresses, and just exclude that one IP address, which is like almost impossible.
So for knackles, the best use case here is again, block a specific IP address known for abuse.
Okay,
so hopefully that helps you understand security groups, versus knackles. And that's all we need
to know here. Hey, this is Andrew Brown from exam Pro. And we are looking at a universal VPN, which
stands for virtual private network. And what this service does is it lets you establish a secure
and private tunnel from your network or device to the AWS global network. And so it comes in two
variations, we have site to site VPN and a client VPN. So what is the difference here, so for site
to site, this is where you securely connect on premises networks, or a branch office to your
AWS VPC. And then for the client VPN, this is where you securely connect users to AWS, or on
premise networks. Okay, so the idea here is that you are for site to site, you're connecting an
entire office, or network to AWS.
And the client is just like, imagine you have some employees, and
they have laptops, and they're, or they're working from home, and you want them to connect them to
the ADA bus network. That's what you're going to be using. So just know that you can do that.
And it is a private tunnel, and it is secure. And that there are these two variations here. Hey,
this is Andrew Brown from exam Pro. And we're doing a bit of variation study.
And we're going
to look at services that have cloud in the name because I want you to know that even though they
have similar names, they're completely different services. And I just don't want you to get mixed
up with these things. So we're going to learn about all the services that start with cloud
starting with cloud formation. cloud formation is infrastructure as code. And it sets up services
via templating scripts such as gamle, or Jason, it is used for provisioning lots of resources on
AWS. Okay, moving on to cloud trail, this is for logging all API calls between Ada services. So
I would say it's about who you can blame, okay, then on to CloudFront. CloudFront, is a content
distribution network creates a cached copy of your website and copies that content to servers located
near people trying to download your website, okay, it's going to be using edge locations to do
that. Then moving on to cloud watch, which is a collection of multiple services, okay. And so
starting with cloud watch logs, any custom data or log data, so memory usage, rails logs, or nginx
logs, then you have cloudwatch metrics.
And these are metrics that are based off of the logs. I like
to think of metrics as graphs, because that's how they're represented. So it's like your log data.
So like, if you want a memory usage graph over time, that's cloud watch metrics, okay? Then you
have cloud watch events. And this is triggers, triggers an event based on a condition. So
you could have a condition where every hour it takes a snapshot of the server, and these
can be based off of metrics or other log data, okay? Then you have cloud watch alarms, and
these trigger notifications based on metrics. Then you have cloud watch dashboard, and this
creates visualizations based on metrics. And the last one here on our list is cloud search. It
is a search engine, so Let's say you had an e commerce website and you wanted to add a search
bar to search across all products on your website. Unlike just or just like amazon.com, that's
what you would use, okay? Hey, this is Andrew Brown from exam Pro. And now I just want to cover
services that have connect in the name.
Alright, and so there are three services with Connect,
they are totally all unrelated. But let's learn a little bit about these three so we can distinguish
them. Okay, so the first on our list is direct connect. And it is a dedicated fiber optics
connection from your data center to AWS. So this is ideal for large enterprises that own their own
data center. And they need to have insanely fast connection directly to AWS. If you need to secure
these connections, you can also apply a VPN, it was VPN on top of direct connect. Okay,
next is Amazon Connect. And this is basically a call center in the cloud. So you get a toll free
number, it can accept inbound and outbound calls, and you can automate, automate like a phone system
within it. Last on our list here is media Connect, and it is the new version of elastic transcoder.
It converts videos to different video types. So if you have 1000 videos, and you need to transcode
them into different video formats, then, or if you had to apply like a watermark or insert in an
introduction video, this is what you would use, okay.
Hey, this is Andrew Brown from exam Pro,
I just quickly want to do a comparison between elastic transcoder and media convert the both
these services transcode videos. So it's a little bit confusing, but I'll just tell you a bit of the
story here. So elastic transcoder is the old way it was the first service that came out that could
transcode videos into streaming formats, and you have a video one format, and you want to turn it
into another format.
And so eight of us came up with another service called Eva's elemental media
convert. And it is the new way of transcoding videos. I don't know if they rebuilt it from
scratch. But it has the exact same use case except it has additional features that elastic transcoder
cannot do. So you can overlay images, you can insert video clips, you can do extracts for
caption data, it has a much more robust UI. So at one point, I believe that people were still using
elastic transcoder because it just had better integration with the AWS API, but I'm pretty sure
media convert has caught up. And anytime you're using elastic transcoder Avi bus is always
telling you Hey, go use media convert, okay, but elastic transcoder is still around, because
I'm sure they have customers that are pretty much used to it.
And these things are priced pretty
much the same. Okay, so you're not going to really save money by using elastic transcoder. But there
is a comparison for you. Hey, this is Andrew Brown from exam Pro. And I want to just do a quick match
up here of SNS versus Sq s, because these are easy services to get mixed up because they both have
something to do with messaging. And they both are used for application integration. So they connect
apps together. So let's look at SNS first so SNS, which stands for simple notification service it
uses using pub sub, which is publisher subscriber messaging model. And so with it, it passes along
messages, whereas with simple queue service, it is a messaging service, but it's all about queuing
up messages. Okay, and so simple notification service, it's just passing them along, whereas Sq
s you can get a guaranteed of delivery, okay.
Now going back to SNS, SNS sends notifications to
subscribers of topics via multiple protocols. So it can use HTTP email, it can also send it to
Sq s, you can also send text messages, and it can send to lambda, as well there which don't have
listed, okay, whereas simple queue service, you place messages in the queue and the and you have
applications pull the queue using the AWS SDK. All right back on the SNS. So SNS is generally used
for sending plain text emails, I really got to emphasize that because it cannot do HTML emails,
which is triggered via other AWS services.
So the best example is building alarm. So if you've
ever had a building alarm and it's been triggered, it's going to send you a plain text email. Okay,
so that's the exact use case there. SNS does have the ability to retry sending in the case for
HTTPS. So that's when you are sending web hooks, okay. So that there is some kind of retry
functionality there. Now moving over to SQL, so SQL can retain a message for up to 14 days. They
can send them in sequential order or in parallel, they can ensure only one message is sent, they can
ensure messages are delivered at least once. Okay, and so there's the comparison there and just the
last part here, so SNS is really good for web hooks. Simple internal emails are triggering
lambda functions, and we have Sq S is really good for delay tasks, and queuing up emails.
All right, if you needed a comparison of other similar services for SNS, if you've ever heard of
pusher or pub nub, that is basically what SNS is. And for Sq s, if you've ever heard of rabid mq
or sidekicks, that's what Sq S is, there you go, Hey, this is Andrew Brown from exam Pro, I want
to do a comparison here between inspector and trusted advisor, because both of these services
have a security component involved in them. And so they're easy to mix up.
Okay? So Amazon
inspector is designed to audit easy two instances. So you can audit a single instance or all the
instances within your region. And, and so it would run a script, which would then run against
a security checklist, and it will come back and report to you what checks have passed or failed.
So there is one very popular benchmark by the CIS, which will do 699 checks, okay. And the other
side, we have trusted advisor and trusted advisor doesn't generate PDF report, there probably is
a way to export a CSV or something. But it's not like something that is promoted with trusted
advisor. But it gives you a holistic view of recommendations across multiple service services
and best practices. And so it has a whole section on just security, okay, so it would tell you
something like, Hey, you should really enable MFA on your root account.
So inspector is really
just about EC two instances and and making them secure or hardened. And trusted advisor is all
about multiple services and security practices, okay. Hey, this is Andrew Brown from exam Pro,
I just want to quickly cover the three different types of load balancers. So you have an idea
of their use case. So before application, network load bouncer existed, all there was was
elastic load bouncer, and now it's been renamed to classic load balancer. And it basically does
the job of both application network load bouncer, but it has a way fewer features, and it works
slightly different. Okay, so classic load balancer does not use target groups. And it's
intended for applications that were built with the EC two classic network in mind, okay, so
generally, you do not want to launch a classic load balancer you, you still can, but you're
going to want to use application and network load balancer because they are specialized for their
individual use case.
So for the application loads, load balancer, it's working at layer seven,
layer seven is the application layer. So it's dealing with HTTP and HTTPS traffic. Okay. And so
if you're running a web application, this is what you're going to want to use. It has some advanced
routing rules. So it allows you to get more usability out of your load balancer. So prior to
this, if you needed a load bouncer for subdomain, you'd have to launch a load bouncer for each one.
But now you with routing rules, you can route all subdomains to the single load balancer and make
sure that it goes to the right instances that you want to target. Okay. And so with application load
balancer, you are able to attach a laugh. Laugh stands for web application firewall. And so since
its application load balancer and web application firewalls just for applications, it makes sense
why you would be able to attach it, okay.
Now, on to the network load balancer. This operates at
layer four, which is the transport layer, and it's dealing with IP protocol data. So this is where
you are dealing with TCP and TLS traffic where extreme performance is required. So think video
games think real time. So think about handling millions of requests per second will maintain
ultra low latency, okay. It's also optimized for sudden and volatile traffic patterns. So
that is another advantage there. Okay. And then all these load balancers, you can attach the
Amazon certification manager so you can apply SSL certificate so you have HTTPS traffic. Okay, so
there you go. Hey, this is Andrew Brown from exam Pro. I'm just gonna do a quick matchup of SNS vs
FCS. And so these two services are easy to confuse because they both send emails Okay, so let's learn
the difference. So SNS, which stands for simple notification service. It is really intended for
practical use cases and internal use cases when it comes to sending emails. All right. So with
SNS you can send notifications to subscribers of topics via multiple protocols, so we're not
just limited to email, but we have HTTP email, sq s SMS and we can also do lambdas.
Alright,
on the other side, we have se s which stands for simple email service. And this is really utilize
for professional emails, marketing, emails, all right. And so it basically is a cloud based email
service. Have you ever heard of sendgrid that is what FCS is All right. So going back to SNS, SNS
is generally used for sending plain text emails, which is triggered via other Ada services. The
best example here is building alarms. Okay, so if you ever had a billing alarm, and it's
been triggered, it would send you an SMS plain text email. It's an ugly email, but it does the
job. Okay. over onto FCS FCS sends HTML emails, and can also send play up plaintext emails,
whereas SMS cannot do that. So SMS cannot send HTML email. So if you want something that's going
to look good, you're going to have to use sts sts can also receive inbound emails, SMS can create
email templates, you can use a custom domain name, or domain name for your email, and you can monitor
your email reputation. So there's a lot of other stuff that is going on there with SEO.
As you can
see, it's really optimized for emails. So yeah, there you go. So that is the comparison there.
Hey, this is Andrew Brown from exam Pro, I just want to do a quick comparison between
artifact and inspector. And the reason why is that they both compile up PDF reports. So
that is where some confusion can can happen. So I just want to clarify the difference between
these two services. So artifact is all about why should enterprise trust at West. So does
AWS meet specific compliance frameworks, such as sock or PCI? And inspector is all
about how do we know this easy to instance is secure? Can you prove it? And so it runs a
script that analyzes your EC two instance, and then generates out a PDF report telling you which
security checks have passed.
Okay, so that is the difference between these two services, but just be
aware that they both compile up PDFs. Hey, this is Andrew Brown from exam Pro. And I congratulate you
for making your way through the journey content. And so now all that's left to do is to do some
practice exam questions. And if you're scoring, all right, that means you're ready to go book
your exam, which I'll show you here in the next section shortly. Okay, so there you go.
All right.
So now it's time to book our exam. And it's always a bit of a trick to actually find where this page
is. So if you were to search at a certification and go here, alright, and then maybe go to the
training overview, and then click get started, it's going to take you to at bis dot training,
and this is where you're going to register to take the exam. So in the top right corner, we are
going to have to go ahead and go sign in. And I already have an account. So I'm just going to go
and login with my account there. So I'm just gonna hit sign in there. Okay, and we're just going
to have to provide our credentials here. So I'm just going to go ahead and fill mine in.
And I
will see you on the other side and just show you the rest of it here. Alright, so now we are in the
training and certification portal. So at the top, we have a one stop training. And to get to booking
our exam, we got to go to certification here. And then we're going to have to go to our account.
And we're going to be using the certain metrics, third party service that actually manages the
certifications. So we're going to go to our certain metrics account here. And now we can go
ahead and schedule our exam. So we're going to schedule a new exam. And down below, we're going
to get a full list of exams here. So it used to just be psi. And so now they all have psi Pearson
VUE, these are just a network of training centers where you can actually go take and sit the exam,
for the CCP, you can actually take it from home now it's the only certification you can take from
home, it is a monitored exam.
But for the rest, they have to be done at a data center. And so I'm
just going to show you how to book it either with psi or a Pearson VUE here. And again, they have
different data centers. So if you do not find a data center in your area, I'll just go give
Pearson VUE a look so that you can actually go book that exam. So let's go take a look at
an exam. So maybe we will book the professional here. So I'm just going to open this in a tab and
open that in a tab and we're going to review how we can book it here through these two portals. So
let's take a look at psi, this is the one I'm most familiar with. Okay, because Pearson VUE wasn't
here the last time I checked, but so here you can see the duration and the confirmation number,
you want to definitely make sure you're taking the right exam. Sometimes there are similar exams like
the old ones, that will be in here. So just be 100%. Sure, before you go ahead and do that and go
and schedule your exam.
And so it's even telling you that there is more than one available here and
that's fine. So we'll just hit Continue. Okay. And then from here, we're going to wait here and we're
going to select our language, okay. And then we get to choose our data centers. So the idea is you
want to try to find a data center near you. So if I typed in Toronto here, so we'll get sitting
here like Toronto, I don't know why thinks I'm over here. And I'm just going to hit Toronto here.
And we're going to search for exam centers.
Okay, and then we are going to have a bunch of over
here. So the closest one in Toronto is up here. So I'm gonna click one. Alright, and it's going
to show me the available times that I can book. So there's not a lot of times this week, generally
you have to, it has to be like two, three days ahead. Every time I booked exam, it's never been
the next day. But here, we actually have one, it's going to vary based on the test center that you
have here. We're going to go ahead here and this one only lets you do Wednesdays and Thursdays.
So
if we had the Thursday here at 5pm, okay, and then we would choose that and we would continue. Okay,
and then we would hit Continue again. Alright, and so the booking has been created. And in order
to finalize that, we just have to pay that it is in USD dollars, okay. So you'd have to just go and
fill that out. And once that's filled out and you pay it, then you are ready to go sit that exam. So
that's how we do with psi and then we're gonna go take a look over at Pearson VUE. So I'm just gonna
go ahead and clear this, because I'm not serious about booking an exam right now. Okay, and we'll
go take a look how we do it with Pearson VUE. So here we are in the Pearson VUE section to book and
you first need to choose your preferred language. I'll choose English because that's what I'm most
comfortable with.
And we're going to just hit next here. And the next thing it's going to show us is
the price and we will say schedule this exam. All right. And now we can proceed to scheduling. Okay,
so we'll just proceed to scheduling it's given me a lot of supervillains often Alright, okay,
hello, let's go. and here we can see locations in Toronto. Okay, so here are test centres. And
we do actually have a bit of variation here. So you can see there are some different offerings,
you might also see the same data center, so I can choose this one here.
Okay, and it lets you select
up to three to compare the availability. So sure, we will select three, and we will hit next. Okay,
we'll just wait a little bit here. All right. Okay. Hello, let's go. And now we are just going
to choose when we want to take that exam there. So we do have the three options to compare. And so
you know, just choose that 11 time, okay. And so then we would see that information, and we could
proceed to checkout. Hey, this is Andrew Brown from exam Pro, and we are at the end here. So I
hope you set your exam and you pass and when you do I definitely want to hear your feedback. I do
appreciate any kind of criticisms. You do have of the the course curriculum here of any regards
and definitely be sure to share with me your success on social media, whether it's LinkedIn,
Twitter, Instagram, I want to hear from you. Okay..