AWS for System Administrators: Build, automate, and manage your infrastructure on the most popular cloud platform – AWS

Description

Take your AWS SysOps skills to the next level by learning infrastructure automation techniques using CloudFormation, Terraform, and Boto3 Key FeaturesExplore AWS automation using CloudFormation, Terraform, and Boto3Leverage AWS to make your infrastructure flexible and highly availableDiscover various AWS features for building a secure and reliable environment to host your applicationBook Description Amazon Web Services (AWS) is one of the most popular and efficient cloud platforms for administering and deploying your applications to make them resilient and robust. AWS for System Administrators will help you to learn several advanced cloud administration concepts for deploying, managing, and operating highly available systems on AWS. Starting with the fundamentals of identity and access management (IAM) for securing your environment, this book will gradually take you through AWS networking and monitoring tools. As you make your way through the chapters, you'll get to grips with VPC, EC2, load balancer, Auto Scaling, RDS database, and data management. The book will also show you how to initiate AWS automated backups and store and keep track of log files. Later, you'll work with AWS APIs and understand how to use them along with CloudFormation, Python Boto3 Script, and Terraform to automate infrastructure. By the end of this AWS book, you'll be ready to build your two-tier startup with all the necessary infrastructure, monitoring, and logging components in place. What you will learnAdopt a security-first approach by giving users minimum access using IAM policiesBuild your first Amazon Elastic Compute Cloud (EC2) instance using the AWS CLI, Boto3, and TerraformSet up your datacenter in AWS Cloud using VPCScale your application based on demand using Auto ScalingMonitor services using CloudWatch and SNSWork with centralized logs for analysis (CloudWatch Logs)Back up your data using Amazon Simple Storage Service (Amazon S3), Data Lifecycle Manager, and AWS BackupWho this book is for This Amazon Web Services book is for system administrators and solution architects who want to build highly available and flexible AWS Cloud platforms for their applications. Software engineers and programmers looking to deploy their applications to AWS Cloud will also find this book useful. Basic knowledge of Linux and AWS is necessary to get started. Table of ContentsSetting Up the AWS EnvironmentProtecting Your AWS Account Using IAMCreating a Data Center in the Cloud Using VPCScalable Compute Capacity in the Cloud via EC2Increasing an Application's Fault Tolerance with Elastic Load BalancingIncreasing Application Performance using AWS Auto ScalingCreating a Relational Database in the Cloud using AWS Relational Database Service (RDS)Monitoring AWS Services Using CloudWatch and SNSCentralizing Logs for AnalysisCentralizing Cloud Backup SolutionAWS Disaster Recovery SolutionsAWS Tips and Tricks Cover Copyright About PACKT Contributors Table of Contents Preface Section 1: AWS Services and Tools Chapter 1: Setting Up the AWS Environment Technical requirements Setting up the environment Installing the AWS CLI Configuring command-line completion Configuring the AWS command line Understanding the AWS CLI command structure Introducing Python Boto3 Installing Python Boto3 Verifying the Boto3 setup Introducing CloudFormation Writing your first CloudFormation template Creating a CloudFormation stack using the AWS console Creating a CloudFormation stack using the AWS CLI Introducing Terraform Installing Terraform Creating resources using Terraform Installing tools in an automated way Summary Chapter 2: Protecting Your AWS Account Using IAM Technical requirements Creating IAM users and groups Introducing IAM users Introducing IAM groups Understanding IAM policies IAM policy structure Introducing ARN IAM policy evaluation Creating the IAM policy using the AWS CLI Creating IAM roles Advantages of using an IAM role Creating an IAM role using Terraform Introducing AWS Security Token Service (AWS STS) Advantages of AWS STS Use cases IAM cross-account access Real-time use case of launching a specific instance using CloudFormation Rotating IAM credentials using Boto3 Prerequisites Creating a Boto3 script to rotate credentials Summary Section 2: Building the Infrastructure Chapter 3: Creating a Data Center in the Cloud Using VPC Technical requirements Setting up two VPCs Creating your first VPC using the AWS console Creating a second VPC using CloudFormation Introducing AWS Transit Gateway Creating your first transit gateway using the AWS console Creating a second transit gateway using Terraform Real-time use case to enable a VPC flow log Summary Chapter 4: Scalable Compute Capacity in the Cloud via EC2 Technical requirements Setting up EC2 instances Creating an EC2 instance using AWS CloudFormation Creating an AWS billing alarms Real-time use case to clean up an unused AMI Real-time use case to detach unused EBS volumes Real-time use case to shutdown instances on a daily basis Summary Section 3: Adding Scalability and Elasticity to the Infrastructure Chapter 5: Increasing an Application's Fault Tolerance with Elastic Load Balancing Technical requirements Different load balancers offered by AWS Setting up the application load balancer Setting up the application load balancer Automating the application load balancer using Terraform Summary Chapter 6: Increasing Application Performance Using AWS Auto Scaling Technical requirements Setting up Auto Scaling Creating a launch template Creating an AWS Auto Scaling group Verifying an Auto Scaling group Understanding Auto Scaling policies Scaling an application based on demand Testing the Auto Scaling group Creating an Auto Scaling group using Terraform Summary Chapter 7: Creating a Relational Database in the Cloud using AWS Relational Database Service (RDS) Technical requirements The different database offerings in AWS RDS Setting up AWS RDS in high availability mode Setting up a MySQL read replica Automating AWS RDS MySQL creation using Terraform Summary Section 4: The Monitoring, Metrics, and Backup Layers Chapter 8: Monitoring AWS Services Using CloudWatch and SNS Technical requirements CloudWatch monitoring Monitoring custom metrics using CloudWatch Downloading and installing the CloudWatch agent Creating an IAM role used by CloudWatch agent Running the CloudWatch agent on your server Introduction to SNS Introduction to CloudWatch Events Automating alarm notification using email and a Slack channel Configuring Slack Configuring CloudWatch Creating a Lambda function Testing the integration Summary Chapter 9: Centralizing Logs for Analysis Technical requirements Why do we need log management? Setting up the CloudWatch agent Setting up AWS Elasticsearch and Kibana Summary Chapter 10: Centralizing Cloud Backup Solution Technical requirements The v backup options offered by AWS Why do we back up data? Setting up the AWS DLM Backing up your data to S3 using the AWS CLI Transitioning S3 data to Glacier using a lifecycle policy Automating transitioning S3 data to Glacier using Terraform Summary Chapter 11: AWS Disaster Recovery Solutions Technical requirements Discussing the various DR solutions offered by AWS Backup and restore Pilot light Warm standby in AWS Hot standby (with multi-site) Configuring a website to fail over to an S3 bucket Summary Chapter 12: AWS Tips and Tricks Technical requirements Some common pitfalls – VPC limitations Which VPC subnets to choose while building a VPC Dedicated instance versus dedicated host – which should you choose? The power of the IAM permission boundary Custom CloudWatch metrics Tagging, tagging, and tagging – why is tagging important? Protecting your EC2 instances and EBS volumes using termination protection How to reduce your AWS bill Choosing an AWS bucket name and how to create a random bucket name Automating AMI creation Creating an AMI using the AWS console Creating an AMI using the AWS CLI Automating AMI creation using Packer Summary Other Books You May Enjoy Index