aws

Other Services

ayleeee 2024. 4. 20. 16:24

CloudFormation

  • Declarative way of outlining AWS Infrastructure, for any resources
  • CloudFormation creates any resources you want in the right order, with the exact configuration that you specify
  • Benefits
    • Infrastructure as code
      • No resources are manually created, which is excellent for control
      • Changes to the infrastructure are reviewed through code
    • Cost
      • Each resources within the stack is tagged with an identifier so you can easily see how much a stack costs you
    • Productivity
      • Ability to destroy and re-create an infrastructure on the cloud on the fly
    • Don't re-invent the wheel
      • Leverage existing templates on the web!
      • Leverage the documentation
    • Supports all AWS resources
  • Service Role
    • IAM role that allows CloudFormation to create/update/delete stack resources on your behalf
    • Give ability to users to create/update/delete the stack resources even if they don't have permissions to work with the resources in the stack
    • User must have iam:PassRole permissions

Amazon Simple Email Service

  • Fully managed service to send emails securely, globally and at scale
  • Allows inbound/outbound emails
  • Reputation dashboard, performance insights, anti-spam feedback
  • Provides statistics such as email deliveries, bounces, feedback loop results, email open
  • Supports DomainKeys Identified Mail and Sender Policy Framework
  • Flexible IP deployment : shared, dedicated, and customer-owned IPs
  • Send emails using your application using AWS Console, APIs, or SMTP

Amazon Pinpoint

  • Scalable 2 way marketing communications service
  • Support email, SMS, push, voice and in-app messaging
  • Ability to segment and personalize messages with the right content to customers
  • Possibility to receive replies
  • Scales to biliions of messages per day
  • VS. Amazon SNS or Amazon SES
    • In SNS & SES, you managed each message's audience, content, and delivery schedule
    • In Amazon PinPoint, you create message templates, delivery schedules, highly-targeted segments, and full campaigns

Systems Manager 

SSM Session Manager

  • Allows you to start a secure shell on your EC2 and on-premises servers
  • No SSH access, bastion hosts, or SSH keys needed
  • No port 22 needed
  • Support Linux, macOS, and Windows
  • Send session log data to S3 or CloudWatch Logs

Run Command

  • Execute a document or just run a command
  • Run command across multiple instances
  • No need for SSH
  • Command Output can be shown in the AWS Console, sent to S3 bucket or CloudWatch Logs
  • Send notifications to SNS about command status
  • Integrated with IAM & CloudTrail
  • Can be involved using EventBridge

Patch Manager

  • Automates the process of patching managed instances
  • OS updates, applications updates, security updates
  • Supports EC2 instances and on-premises servers
  • Support Linux, macOS, and Windows
  • Patch on-demand or on a schedule using Maintenance Windows
  • Scan instances and generate patch compliance report 

Maintenance Windows

  • Defines a schedule for when to perform actions on your instances
  • Maintenance Window contains
    • Schedule
    • Duration
    • Set of registered instances
    • Set of registered tasks

Automation

  • Simplifies common maintenance and deployment tasks of EC2 instances and other AWS resources
  • Automation Runbook - SSM Documents to define actions performed on your EC2 instances or AWS resources
  • Can be triggered using :
    • Manually using AWS Console, AWS CLI or SDK
    • Amazon EventBridge
    • On a schedule using Maintenance Windows
    • By AWS Config for rules remediations

Cost Explorer

  • Visualize, understand, and manage your AWS costs and usage over time
  • Create custom reports that analyze cost and usage data
  • Analyze your data at a high level : total costs and usage across all accounts
  • Or Monthly, hourly, resource level granularity
  • Choose an optimal Savings Plan
  • Forecast usage up to 12 months based on previous usage

AWS Batch

  • Fully managed batch processing at any scale
  • Efficiently run 100,000s of computing batch jobs on AWS
  • A "batch" job is a job with a start and an end
  • Batch will dynamically launch EC2 instances of Spot Instances
  • AWS Batch provisions the right amount of compute / memory
  • You submit or schedule batch jobs and AWS Batch does the rest!
  • Batch jobs are defined as Docker images and run on ECS
  • Helpful for cost optimizations and focusing less on the infrastructure
  • Batch vs Lambda
    • Lambda
      • Time Limit
      • Limited runtimes
      • Limited temporary disk space
      • Serverless
    • Batch
      • No time limit
      • Any runtime as long as it's packaged as a Docker image
      • Rely on EBS / instance store for disk space
      • Relies on EC2

Amazon AppFlow

  • Fully managed integration service that enables you to securely transfer data between Software-as-a-Service applications and AWS
  • Sources : Salesforce, SAP, Zendesk, Slack, and ServiceNow
  • Destinations : AWS services like Amazon S3, Amazon Redshift or non-AWS such as SnowFlake and Salesforce
  • Frequency : on a schedule, in response to events, or on demand
  • Data transformation capabilites like filtering and validation
  • Encrypted over the public internet or privately over AWS PrivateLink
  • Don't spend time writing the integrations and leverages APIs immediately 

AWS Amplify - web and mobile applications

  • A set of tools and services that helps you develop and deploy scalable full stack web and mobile applications
  • Authentication, Storage, API, CI/CD, PubSub, Analytics, AI/ML Predictions, Monitoring 
  • Connect your source code from GitHub, AWS CodeCommit, Bitbucket, GitLab, or upload directly

'aws' 카테고리의 다른 글

AWS 삭제 되지 않는 stack 들  (1) 2024.05.02
Architectures  (1) 2024.04.20
More Solutions Architecture  (1) 2024.04.19
Disaster Recovery & Migrations  (1) 2024.04.19
Amazon VPC  (2) 2024.04.19