CloudFormation
- Declarative way of outlining AWS Infrastructure, for any resources
- CloudFormation creates any resources you want in the right order, with the exact configuration that you specify
- Benefits
- Infrastructure as code
- No resources are manually created, which is excellent for control
- Changes to the infrastructure are reviewed through code
- Cost
- Each resources within the stack is tagged with an identifier so you can easily see how much a stack costs you
- Productivity
- Ability to destroy and re-create an infrastructure on the cloud on the fly
- Don't re-invent the wheel
- Leverage existing templates on the web!
- Leverage the documentation
- Supports all AWS resources
- Infrastructure as code
- Service Role
- IAM role that allows CloudFormation to create/update/delete stack resources on your behalf
- Give ability to users to create/update/delete the stack resources even if they don't have permissions to work with the resources in the stack
- User must have iam:PassRole permissions
Amazon Simple Email Service
- Fully managed service to send emails securely, globally and at scale
- Allows inbound/outbound emails
- Reputation dashboard, performance insights, anti-spam feedback
- Provides statistics such as email deliveries, bounces, feedback loop results, email open
- Supports DomainKeys Identified Mail and Sender Policy Framework
- Flexible IP deployment : shared, dedicated, and customer-owned IPs
- Send emails using your application using AWS Console, APIs, or SMTP
Amazon Pinpoint
- Scalable 2 way marketing communications service
- Support email, SMS, push, voice and in-app messaging
- Ability to segment and personalize messages with the right content to customers
- Possibility to receive replies
- Scales to biliions of messages per day
- VS. Amazon SNS or Amazon SES
- In SNS & SES, you managed each message's audience, content, and delivery schedule
- In Amazon PinPoint, you create message templates, delivery schedules, highly-targeted segments, and full campaigns
Systems Manager
SSM Session Manager
- Allows you to start a secure shell on your EC2 and on-premises servers
- No SSH access, bastion hosts, or SSH keys needed
- No port 22 needed
- Support Linux, macOS, and Windows
- Send session log data to S3 or CloudWatch Logs
Run Command
- Execute a document or just run a command
- Run command across multiple instances
- No need for SSH
- Command Output can be shown in the AWS Console, sent to S3 bucket or CloudWatch Logs
- Send notifications to SNS about command status
- Integrated with IAM & CloudTrail
- Can be involved using EventBridge
Patch Manager
- Automates the process of patching managed instances
- OS updates, applications updates, security updates
- Supports EC2 instances and on-premises servers
- Support Linux, macOS, and Windows
- Patch on-demand or on a schedule using Maintenance Windows
- Scan instances and generate patch compliance report
Maintenance Windows
- Defines a schedule for when to perform actions on your instances
- Maintenance Window contains
- Schedule
- Duration
- Set of registered instances
- Set of registered tasks
Automation
- Simplifies common maintenance and deployment tasks of EC2 instances and other AWS resources
- Automation Runbook - SSM Documents to define actions performed on your EC2 instances or AWS resources
- Can be triggered using :
- Manually using AWS Console, AWS CLI or SDK
- Amazon EventBridge
- On a schedule using Maintenance Windows
- By AWS Config for rules remediations
Cost Explorer
- Visualize, understand, and manage your AWS costs and usage over time
- Create custom reports that analyze cost and usage data
- Analyze your data at a high level : total costs and usage across all accounts
- Or Monthly, hourly, resource level granularity
- Choose an optimal Savings Plan
- Forecast usage up to 12 months based on previous usage
AWS Batch
- Fully managed batch processing at any scale
- Efficiently run 100,000s of computing batch jobs on AWS
- A "batch" job is a job with a start and an end
- Batch will dynamically launch EC2 instances of Spot Instances
- AWS Batch provisions the right amount of compute / memory
- You submit or schedule batch jobs and AWS Batch does the rest!
- Batch jobs are defined as Docker images and run on ECS
- Helpful for cost optimizations and focusing less on the infrastructure
- Batch vs Lambda
- Lambda
- Time Limit
- Limited runtimes
- Limited temporary disk space
- Serverless
- Batch
- No time limit
- Any runtime as long as it's packaged as a Docker image
- Rely on EBS / instance store for disk space
- Relies on EC2
- Lambda
Amazon AppFlow
- Fully managed integration service that enables you to securely transfer data between Software-as-a-Service applications and AWS
- Sources : Salesforce, SAP, Zendesk, Slack, and ServiceNow
- Destinations : AWS services like Amazon S3, Amazon Redshift or non-AWS such as SnowFlake and Salesforce
- Frequency : on a schedule, in response to events, or on demand
- Data transformation capabilites like filtering and validation
- Encrypted over the public internet or privately over AWS PrivateLink
- Don't spend time writing the integrations and leverages APIs immediately
AWS Amplify - web and mobile applications
- A set of tools and services that helps you develop and deploy scalable full stack web and mobile applications
- Authentication, Storage, API, CI/CD, PubSub, Analytics, AI/ML Predictions, Monitoring
- Connect your source code from GitHub, AWS CodeCommit, Bitbucket, GitLab, or upload directly
'aws' 카테고리의 다른 글
| AWS 삭제 되지 않는 stack 들 (1) | 2024.05.02 |
|---|---|
| Architectures (1) | 2024.04.20 |
| More Solutions Architecture (1) | 2024.04.19 |
| Disaster Recovery & Migrations (1) | 2024.04.19 |
| Amazon VPC (2) | 2024.04.19 |