Amazon Elastic Beanstalk

AWS ElasticBeanstalk is an easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.

You can simply upload your code and Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring. At the same time, you retain full control over the AWS resources powering your application and can access the underlying resources at any time.

There is no additional charge for Elastic Beanstalk - you pay only for the AWS resources needed to store and run your applications.

What is Amazon Elastic Beanstalk:

FlexibleBeanstalk utilizes Auto Scaling and Elastic Load Balancing to scale and adjustremaining tasks at hand. It gives instruments as Amazon CloudWatch to screen the strength of sent applications. It likewise gives limit provisioning because of its dependence on AWS S3 and EC2.

Benefits:

Fast and simple to begin:

Versatile Beanstalk is the quickest and easiest approach to send your application on AWS. You just utilize the AWS Management Console, a Git archive, or a coordinated advancement condition (IDE, for example, Eclipse or Visual Studio to transfer your application, and Elastic Beanstalk consequently handles the organization subtleties of limit provisioning, load adjusting, auto-scaling, and application wellbeing checking. Inside minutes, your application will be prepared to use with no framework or asset setup take a shot at your part.

Developer productivity:

VersatileBeanstalk arrangements and works the foundation and deals with the application stack (stage) for you, so you don't need to invest the energy or build up the mastery. It will likewise keep the basic stage running your application in the know regarding the most recent fixes and updates. Rather, you can concentrate on composing code as opposed to investing energy overseeing and arranging servers, databases, load balancers, firewalls, and systems.

Impossible to outgrow:

FlexibleBeanstalk naturally scales your application here and there dependent on yourapplication's particular need utilizing effectively customizable Auto Scalingsettings. For instance, you can utilize CPU use measurements to trigger AutoScaling activities. With Elastic Beanstalk, your application can deal with topsin remaining burden or traffic while limiting your expenses.

Complete resource control:

You have the opportunity to choose the AWS assets, for example, Amazon EC2 case type, thatare ideal for your application. Also, Elastic Beanstalk gives you "a chanceto open the hood" and hold full authority over the AWS assets controllingyour application. In the event that you choose you need to assume control over a few (or the majority) of the components of your foundation, you can do so consistently by utilizing Elastic Beanstalk's administration abilities.

Cloud Computing

distinct models and organization procedures have risen to help address explicit issues of various clients. Each sort of cloud administration, and arrangement technique, gives you various degrees of control, adaptability, and the executives. Understanding the contrasts between Infrastructure as a Service, Platform as a Service, and Software as a Service, just as what sending systems you can utilize, can enable you to choose what set of administrations is directly for your needs.

Infrastructure as a Service (IaaS):

Framework as a Service,once in a while contracted as IaaS, contains the essential structure obstructs forcloud IT and normally give access to systems administration highlights, PCs(virtual or on devoted equipment), and information extra room. Framework as aService gives you the most elevated level of adaptability and the executivesauthority over your IT assets and is most like existing IT assets that numerousIT offices and designers know about today.

Platform as a Service (PaaS):

Stages as an assistanceexpel the requirement for associations to deal with the hidden foundation(typically equipment and working frameworks) and enable you to concentrate onthe sending and the executives of your applications. This encourages you beprogressively effective as you don't have to stress over asset acquisition,scope organization, programming support, fixing, or any of the otherundifferentiated truly difficult work engaged with running your application.

Software as a Service (SaaS):

Programming as a Service furnishes you with a finished item thatis run and overseen by the specialist organization. Much of the time,individuals alluding to Software as a Service are alluding to end-clientapplications. With a SaaS offering you don't need to consider how theadministration is kept up or how the basic foundation is overseen; you justneed to consider how you will utilize that specific piece programming. Atypical case of a SaaS application is electronic email where you can send andget email without overseeing highlight increases to the email item or keepingup the servers and working frameworks that the email program is running on.

AWS Step Functions

AWS Step Functions gives you a chance to organize numerous AWS administrations into serverless work processes so you can construct and refresh applications rapidly. Utilizing Step Functions, you can structure and run work processes that join together administrations, for example, AWS Lambda and Amazon ECS into highlight rich applications. Work processes are comprised of a progression of steps, with the yield of one stage going about as contribution to the following. Application advancement is less difficult and increasingly instinctive utilizing Step Functions, since it makes an interpretation of your work process into a state machine outline that is straightforward, simple to disclose to other people, and simple to change. You can screen each progression of execution as it occurs, which means you can recognize and fix issues rapidly. Step Functions consequently triggers and tracks each progression, and retries when there are mistakes, so your application executes all together and true to form.

Benefits:

Build and update apps quickly:

AWS Step Functions gives you a chance toconstruct visual work processes that empower quick interpretation of businessnecessities into specialized prequisities.You can construct applications inmerely minutes,and when necessities change,you can swap or rearrange segmentswithout altering any code.

Improve resiliency:

AWS Step Functions oversees state, checkpoints and restartsfor you to ensure that your application executes all together and true to form.Worked in attempt/get, retry and rollback abilities manage mistakes andexemptions consequently.

Write less code:

AWS Step Functions manages the logic of your application for you, and implements basic primitives such as branching, parallel execution, and timeouts. This removes extra code that may be repeated in your microservices and functions

AWS Cloud Services

In 2006, Amazon Web Services, (AWS) began offering IT services to the public in the form of web services commonly known as cloud computing. One of the key benefits of cloud computing is that it replaces upfront capital infrastructure expenses with an on-demand low-cost pay-as-you-go model. AWS made businesses no longer need to plan for and procure IT infrastructures weeks or months in advance. Instead, they can instantly select any numbers of servers and other technologies needed for them and it is delivered to them in minutes. Today, AWS provides a highly reliable, scalable, and low-cost infrastructure platform in the cloud that powers hundreds of thousands of businesses in more than 190 countries around the world.

AWS services are typically grouped into different categories like compute, networking, storage, applications, databases, and analytics.

Important Cloud Services provided by AWS:

The Important Cloud Services according to various categories that are provided by AWS are given below :

 Amazon EC2:

Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, resizable compute capacity in the cloud. It allows organizations to obtain and configure virtual compute capacity in the cloud. You can select from a variety of operating systems and resource configurations like memory, CPU, storage that is required for your application. Amazon EC2 enables you to increase or decrease capacity within minutes. You can use one or hundreds or even thousands of server instances simultaneously. Because this is all controlled with web service APIs, your application can automatically scale itself up and down depending on its needs. Amazon EC2 is integrated with most AWS services, such as Amazon Simple Storage Service (Amazon S3), Amazon Relational Database Service (Amazon RDS), and AmazonVirtual Private Cloud (Amazon VPC) to provide a complete, secure solution for computing applications.

AWS Lambda:

AWS Lambda enables you to run code without overseeing servers. You pay just for the register time you devour and there is no charge when your code isn't running. With AWS Lambda, you can run code for an application with zero organization. Simply transfer your code, and Lambda deals with everything required to run and scale your code with high accessibility. You can set up your code to consequently trigger from different AWS administrations, or you can call it legitimately from any web or versatile application.

Simple Notification Services

Amazon Simple Notification Service (SNS) is an exceptionally accessible, sturdy, secure, completely oversaw bar/sub informing the administration that empowers you to decouple microservices, dispersed frameworks, and serverless applications. Amazon SNS gives subjects to high-throughput, push-based, many-to-many informing. Utilizing Amazon SNS themes, your distributer frameworks can fan-out messages to countless endorser endpoints for parallel preparing, including Amazon SQS lines, AWS Lambda capacities, and HTTP/S webhooks. Also, SNS can be utilized to fan out warnings to end clients utilizing versatile push, SMS, and email. 

You can begin with Amazon SNS in minutes by utilizing the AWS Management Console, AWS Command Line Interface (CLI), or AWS Software Development Kit (SDK).

Reliably deliver messages with durability:

Amazon SNS uses cross accessibility zone message stockpiling to give high message toughness. Running inside Amazon's demonstrated system framework and server farms, Amazon SNS subjects are accessible at whatever point your applications need them. All messages distributed to Amazon SNS are put away repetitively over numerous topographically isolated servers and server farms. Amazon SNS dependably conveys messages to all legitimate AWS endpoints, for example, Amazon SQS lines and AWS Lambda capacities.

Automatically Scale Your Workload:

Amazon SNS influences the demonstrated AWS cloud to progressively scale with your application. Amazon SNS is a completely overseen administration, dealing with the truly difficult work identified with scope organization, provisioning, checking, and fixing. The administration is intended to deal with high-throughput, bursty traffic designs. In addition, there is no forthright cost and no compelling reason to get, introduce, design, or redesign informing programming.

Simple your Architecture with Message Filtering:

Amazon SNS causes you to rearrange your bar/sub informing design by offloading the message sifting rationale from your endorser frameworks, and message directing rationale from your distributer frameworks. With Amazon SNS message separating, buying in endpoints get just the messages of enthusiasm, rather than all messages distributed to the subject. Amazon CloudWatch gives visibility into your sifting action, and AWS CloudFormation empowers you to convey membership channel approaches in a robotized and secure way.

Keep your Architecture with Message Filtering:

Amazon SNS theme proprietors can keep delicate information secure by setting point approaches that limit who can distribute and buy into a subject. Amazon SNS likewise guarantees that information is encoded in travel by applying Amazon ATS endorsements to help its HTTPS API, and can likewise scramble information very still by utilizing AWS KMS keys. Moreover, utilizing AWS PrivateLink, you can secretly distribute messages to Amazon SNS points from your Amazon VPC subnets without crossing the open Internet. Amazon SNS can likewise bolster use cases in controlled markets and is in-scope with consistency programs, including HIPAA, PCI, ISO, FIPS, SOC, and FedRAMP.

Coud Formation

AWSCloudFormation is assistance that causes you model and set up your Amazon WebServices assets so you can invest less energy dealing with those assets and additional time concentrating on your applications that keep running in AWS. You make a layout that portrays all the AWS assets that you need (like Amazon EC2 cases or Amazon RDS DB cases), and AWS CloudFormation deals with provisioning and designing those assets for you. You don't have to independently make and design AWS assets and make sense of what's reliant on what; AWS CloudFormation handles the majority of that. The accompanying situations exhibit how AWS CloudFormation can help

Simplify Infrastructure Management:

For a scalable web application that also includes a back-end database, you might use an Auto Scaling group, an Elastic Load Balancing load balancer, and an Amazon Relational Database Service database instance. Normally, you might use each individual service to provide these resources. And after you create the resources, you would have to configure them to work together. All these tasks can add complexity and time before you even get your application up and running.

Instead, you can create or modify an existing AWS CloudFormation template. A template describes all of your resources and their properties. When you use that template to create an AWS CloudFormation stack, AWS CloudFormation provisions the Auto Scaling group, load balancer, and database for you. After the stack has been successfully created, your AWS resources are up and running. You can delete the stack just as easily, which deletes all the resources in the stack. By using AWS CloudFormation, you easily manage a collection of resources as a single unit.

Elastic Compute Cloud Essential

Amazon EC2 is facilitated in various areas around the world. These areas are made out of Regions and Availability Zones. Every Region is a different geographic territory. Every Region has different, secluded areas known as Availability Zones. Amazon EC2 gives you the capacity to put assets, for example, occurrences, and information in numerous areas. Assets aren't recreated crosswise over areas except if you do so explicitly.

Amazon works best in class, exceptionally accessible server farms. Albeit uncommon, disappointments can happen that influence the accessibility of cases that are in a similar area. On the off chance that you have every one of your cases in a private area that is influenced by such a disappointment, none of your occurrences would be accessible

S3 Life Cycles

Life Cycles in S3:

You can use lifecycle policies to define actions you want Amazon S3 to take during an object's lifetime (for example, transition objects to another storage class, archive them, or delete them after a specified period of time).

You can define a lifecycle policy for all objects or a subset of objects in the bucket by using a shared prefix (that is, objects that have names that begin with a common string).

A versioning-enabled bucket can have many versions of the same object, one current version, and zero or more noncurrent (previous) versions. Using a lifecycle policy, you can define actions specific to current and noncurrent object versions.

Life cycle configuration:

·         If you upload periodic logs to a bucket, your application might need them for a week or a month. After that, you might want to delete them.

·         Some documents are frequently accessed for a limited period of time. After that, they are infrequently accessed. At some point, you might not need real-time access to them, but your organization or regulations might require you to archive them for a specific period. After that, you can delete them.

·         You might upload some types of data to Amazon S3 primarily for archival purposes. For example, you might archive digital media, financial and healthcare records, raw genomic sequence data, long-term database backups, and data that must be retained for regulatory compliance.

With lifecycle configuration rules, you can tell Amazon S3 to transition objects to less expensive storage classes, or archive or delete them.

Life Cycle Policies:

Implementing  Lifecycle policies within S3 is a great way of ensuring your data is managed safely (without experiencing unnecessary costs) and that your data is cleanly deleted once it is no longer required. Lifecycle policies allow you to automatically review objects within your S3Buckets and have them moved to Glacier or have the objects deleted from S3. You may want to do this for security, legislative compliance, internal policy compliance, or general housekeeping.

Implementing good lifecycle policies will help you increase your data security. Goodlifecycle policies can ensure that sensitive information is not retained for periods longer than necessary. These policies can easily archive data into AWSGlacier behind additional security features when needed. The glacier is often used as a ‘cold storage’ solution for information that needs to be retained but rarely accessed and offers a significantly cheaper storage service than S3.

Lifecycle policies are implemented at the Bucket level and you can have up to 1000policies per Bucket. Different policies can be set up within the same Bucketaffecting different objects through the use of object ‘prefixes’. The policies are checked and run automatically — no manual start required. I have an important note on this automation, be aware that lifecycle policies may not immediately run once you have set them up because the policy may need to propagate across the AWS S3 Service. Very important when starting to verify your automation is life.

The policies can be set up and implemented either via the AWS Console or S3API. Within this article, I will show you how to set up a lifecycle policy usingthe AWS console. Cloud Academy has a short “overview” blog post comparing AmazonS3.

                              

Working with Permissions of S3:

This section explains how to use the Amazon Simple Storage Service (Amazon S3) console to grant access permissions to your buckets and objects. It also explains how to use Amazon S3 block public access to prevent the application of any settings that allow public access to data within S3 buckets.

Buckets and objects are Amazon S3 resources. You grant access permissions to your buckets and objects by using resource-based access policies. You can associate an access policy with a resource. An access policy describes who has access to resources. The resource owner is the AWS account that creates the resource. For more information about resource ownership and access policies.

Simple Storage Services

Life Cycles in S3:

You can use lifecycle policies to define actions you want Amazon S3 to take during an object's lifetime (for example, transition objects to another storage class, archive them, or delete them after a specified period of time).

You can define a lifecycle policy for all objects or a subset of objects in the bucket by using a shared prefix (that is, objects that have names that begin with a common string).

A versioning-enabled bucket can have many versions of the same object, one current version, and zero or more noncurrent (previous) versions. Using a lifecycle policy, you can define actions specific to current and noncurrent object versions

Life cycle configuration:

·         If you upload periodic logs to a bucket, your application might need them for a week or a month. After that, you might want to delete them.

·         Some documents are frequently accessed for a limited period of time. After that, they are infrequently accessed. At some point, you might not need real-time access to them, but your organization or regulations might require you to archive them for a specific period. After that, you can delete them.

·         You might upload some types of data to Amazon S3 primarily for archival purposes. For example, you might archive digital media, financial and healthcare records, raw genomic sequence data, long-term database backups, and data that must be retained for regulatory compliance.

With lifecycle configuration rules, you can tell Amazon S3 to transition objects to less expensive storage classes, or archive or delete them.

Life Cycle Policies:

Implementing  Lifecycle policies within S3 is a great way of ensuring your data is managed safely (without experiencing unnecessary costs) and that your data is cleanly deleted once it is no longer required. Lifecycle policies allow you to automatically review objects within your S3Buckets and have them moved to Glacier or have the objects deleted from S3. You may want to do this for security, legislative compliance, internal policy compliance, or general housekeeping.

Implementing good lifecycle policies will help you increase your data security. Goodlifecycle policies can ensure that sensitive information is not retained for periods longer than necessary. These policies can easily archive data into AWSGlacier behind additional security features when needed. The glacier is often used as a ‘cold storage’ solution for information that needs to be retained but rarely accessed and offers a significantly cheaper storage service than S3.

Lifecycle policies are implemented at the Bucket level and you can have up to 1000policies per Bucket. Different policies can be set up within the same Bucketaffecting different objects through the use of object ‘prefixes’. The policies are checked and run automatically — no manual start required. I have an important note on this automation, be aware that lifecycle policies may not immediately run once you have set them up because the policy may need to propagate across the AWS S3 Service. Very important when starting to verify your automation is life.

The policies can be set up and implemented either via the AWS Console or S3API. Within this article, I will show you how to set up a lifecycle policy usingthe AWS console. Cloud Academy has a short “overview” blog post comparing Amazon S3.

                              

Cloud Watch:

AmazonCloud Watch monitors your Amazon Web Services (AWS) resources and the applications you run on AWS in real-time. You can use Cloud Watch to collect and track metrics, which are variables you can quantity for your incomes and applications.

The Cloud Watch home page repeatedly displays metrics about every AWS service you use. You can additionally create custom consoles to display metrics about your custom applications and display custom groups of metrics that you choose.

You can create alarms which watch metrics and send notifications or automatically make changes to the resources you are monitoring when a threshold is breached. For example, you can monitor the CPU usage and disk reads and writes of your Amazon EC2 instances and then use this data to determine whether you should launch additional instances to handle the increased load. You can also use this data to stop under-used instances to save money.

WithCloud Watch, you gain system-wide visibility into resource utilization, application performance, and operational health.

Related AWS Service:

The following services are used along with Amazon Cloud Watch:

Amazon Simple Notification Services(Amazon SNS):

ANS coordinates and manages the delivery or sending of messages to subscribing endpoints or clients. You use Amazon SNS with CloudWatch to send messages when an alarm threshold has been reached.

Amazon EC2  Auto Scaling:

AmazonEC2  auto-scaling enables you to automatically launch or terminate Amazon EC2 instances based on user-defined policies, health status checks, and schedules. You can use a Cloud Watch alarm with Amazon EC2 Auto Scaling to scale your EC2 instances based on demand.

AWS Cloud Trails:

 Aws cloud trails enable you to monitor the calls made to the Amazon Cloud Watch API for your account, including calls made by the AWS Management Console, AWS CLI, and other services. When Cloud Trail logging is turned on, Cloud Watch writes log files to the Amazon S3 bucket that you specified when you configured Cloud Trail.

AWS Identity and Access Management:

 Aws access management is a web service that helps you securely control access to AWS resources for your users. Use IAM to control who can use your AWS resources (authentication) and what resources they can use in which ways (authorization).

Monitoring the aws services health dashboard:

You can use Amazon Cloud Watch Events to detect and react to changes in the status of AWS Personal Health Dashboard (AWS Health) events. Then, based on the rules that you create, Cloud Watch Events invokes one or more target actions when an event matches the values that you specify in a rule. Depending on the type of event, you can send notifications, capture event information, take corrective action, initiate events, or take other actions.

Create a Cloud Watch Events rule in each Region that you use. AWS Health events for a particular The region is published to Cloud Watch Events in that Region.

You can select the following types of targets when using CloudWatch Events as a part of your AWS Health workflow:

·         AWS Lambda functions

·         Kinesis streams

·         Amazon SQS queues

·         Built-in targets (CloudWatch alarm actions)

·         Amazon SNS topics

The following are some use cases:

·         Use a Lambda function to pass a notification to a Slack channel when an event occurs.

·         Send custom text or SMS notifications with Amazon SNS when an AWS Health event happens by using Lambda and CloudWatch Events.

Automating Actions for EC2  Instances:

You can automate actions in response to newly scheduled events for your EC2 instances. For example, you can create Cloud Watch Events rules for EC2 scheduled events generated by the AWS Health service. These rules can then trigger targets, such as AWS Systems Manager Automation documents, to automate actions.

For example, when an Amazon EC2 instance retirement event is scheduled for an EBS-backed EC2 instance, you can automate the stop and start of the instance so that you don't have to perform these actions manually.

Cloud Watch

Monitoring the aws services health dashboard:

You can use Amazon Cloud Watch Events to detect and react to changes in the status of AWS Personal Health Dashboard (AWS Health) events. Then, based on the rules that you create, Cloud Watch Events invokes one or more target actions when an event matches the values that you specify in a rule. Depending on the type of event, you can send notifications, capture event information, take corrective action, initiate events, or take other actions.

Create a Cloud Watch Events rule in each Region that you use. AWS Health events for a particular The region is published to Cloud Watch Events in that Region.

You can select the following types of targets when using CloudWatch Events as a part of your AWS Health workflow:

·         AWS Lambda functions

·         Kinesis streams

·         Amazon SQS queues

·         Built-in targets (CloudWatch alarm actions)

·         Amazon SNS topics

The following are some use cases:

·         Use a Lambda function to pass a notification to a Slack channel when an event occurs.

·         Send custom text or SMS notifications with Amazon SNS when an AWS Health event happens by using Lambda and CloudWatch Events.

Automating Actions for EC2  Instances:

You can automate actions in response to newly scheduled events for your EC2 instances. For example, you can create Cloud Watch Events rules for EC2 scheduled events generated by the AWS Health service. These rules can then trigger targets, such as AWS Systems Manager Automation documents, to automate actions.

For example, when an Amazon EC2 instance retirement event is scheduled for an EBS-backed EC2 instance, you can automate stop and start of the instance so that you don't have to perform these actions manually.

Cloud Watch

Cloud Watch:

AmazonCloud Watch monitors your Amazon Web Services (AWS) resources and the applications you run on AWS in real-time. You can use Cloud Watch to collect and track metrics, which are variables you can quantity for your incomes and applications.

The Cloud Watch home page repeatedly displays metrics about every AWS service you use. You can additionally create custom consoles to display metrics about your custom applications and display custom groups of metrics that you choose.

You can create alarms which watch metrics and send notifications or automatically make changes to the resources you are monitoring when a threshold is breached. For example, you can monitor the CPU usage and disk reads and writes of your Amazon EC2 instances and then use this data to determine whether you should launch additional instances to handle the increased load. You can also use this data to stop under-used instances to save money.

With Cloud Watch, you gain system-wide visibility into resource utilization, application performance, and operational health.

Related AWS Service:

The following services are used along with Amazon Cloud Watch.

Amazon Simple Notification Services(Amazon SNS):

ANS coordinates and manages the delivery or sending of messages to subscribing endpoints or clients. You use Amazon SNS with CloudWatch to send messages when an alarm threshold has been reached.

Amazon EC2  Auto Scaling:

 AmazonEC2  auto-scaling enables you to automatically launch or terminate Amazon EC2 instances based on user-defined policies, health status checks, and schedules. You can use a Cloud Watch alarm with Amazon EC2 Auto Scaling to scale your EC2 instances based on demand.

AWS Cloud Trails:

 Aws cloud trails enable you to monitor the calls made to the Amazon Cloud Watch API for your account, including calls made by the AWS Management Console, AWS CLI, and other services. When Cloud Trail logging is turned on, Cloud Watch writes log files to the Amazon S3 bucket that you specified when you configured Cloud Trail.

AWS Identity and Access Management:

 Aws access management is a web service that helps you securely control access to AWS resources for your users. Use IAM to control who can use your AWS resources (authentication) and what resources they can use in which ways (authorization).