AWS Admin All-in-One: 4-in-1

Name: AWS Admin All-in-One: 4-in-1
Rating: 4.0 (13 reviews)

Easily administer your AWS cloud with networking, security and database services. Four complete courses in one comprehen

Created byPackt Publishing

Last updated 5/2018

English

What you'll learn

Create, manage and scale database on AWS
Manage the tools in AWS such as e-mail alarms, dashboard and budget
Configure, administer computing, storage, and networking in the AWS cloud
Master your networking skills on Public Cloud
Gain work with load balance applications across different regions
Take the AWS Developer Exam Prep Course

Course content

4 sections • 88 lectures • 7h 41m total length

The Course Overview2:03
This video gives an overview of the entire course.
Auditing AWS Account6:38
In this video, we are going to show you how to set up CloudTrail in your AWS account. Once CloudTrail has been enabled, it will start to record all of the API calls made in your account to the AWS service and then deliver them to you as log files in an S3 bucket.

Define S3 bucket and policy
Set up CloudTrail
Creating Email Alarms3:37
E-mail alarms may not be the most scalable of all alarms due to the amount of e-mail most people get, but they are the easiest to integrate and almost everyone has an e-mail address. In this video, we use two AWS services: CloudWatch and Simple Notification Service.
Create an alarm and select the metrics
Publishing Custom Metrics in CloudWatch5:22
Once you get used to using CloudWatch, it is highly likely that you will want to see more than just the built-in AWS metrics. In this video, we will show you how to feed the amount of memory inuse on your Linux instances to CloudWatch, so that you can see them alongside the other instance metrics.
Use put-metric-data command
Creating Monitoring Dashboards2:57
The real value of collecting metrics is the ability to spot trends and relationships between disparate systems. With this kind of visibility, you are able to identify and troubleshoot issues before they become an incident. This video uses the AWS console because you cannot create dashboards via CloudFormation or the AWS CLI tool yet.
Create Dashboard
Creating a Budget5:15
One of the main attractions of using AWS, is its pay-as-you-go model. You only pay for what you use, no more and no less. Unfortunately, this can sometimes result in what's known as bill shock at the end of the month. In this video we will create budgets that helps you be aware of your usage and spending.

Navigate to My Billing Dashboard
Create a budget
Feeding Log Files into CloudWatch logs5:08
CloudWatch logs are managed, highly durable, log storage system in AWS. It is capable of ingesting logs from many sources. We're going to focus on what is probably the most common use case which is shipping logs off your EC2 instances into CloudWatch logs.

Define Role and InstanceProfile
Add SNS topic
Creating a Database with Automatic Failover5:54
In this video, we are going to create a MySQL RDS database instance configured in multi-AZ mode to facilitate automatic failover.

Add database credentials as parameters
Define parameters relating to backup and availability
Define RDS instance resource
Creating a Database Read Replica3:49
This video will show you how to create an RDS read-replica. You can use read-replicas in order to increase the performance of your application by off-loading database reads to a separate database instance. You can provision up to five read-replicas per source DB.

Create read-replica
Promote read-replica to primary database instance
Creating a One-Time Database Backup3:04
We are going to show you how to make a one-off snapshot of your database. You might opt to do this if you have a specific requirement around keeping a point in time backup of your DB. You might also want to take a snapshot for the purpose of creating a new working copy of your dataset.

Initiate the creation of snapshot
Create a new database in security group
Calculating DynamoDB Performance4:42
DynamoDB(DDB) is the managed NoSQL database service from AWS. As DDB pricing is based on the amount of read and write capacity units provisioned, it is important to be able to calculate the requirements for your use case.

Study different formula for calculating performance
Building a Secure Network7:58
In this video, we are going to build a secure network in AWS. This network will consist of two public and private subnets split across two Availability Zones. It will also allow inbound connections to the public subnets.

Add an Internet gateway and attach VPC
Create route table
Creating a NAT Gateway2:36
When your instances are on the Internet, you have to assume they will be attacked at some stage. This means most of your workloads should run on instances in private subnets. Private subnets are those that are not connected directly to the Internet. In order to give your private instances access to the Internet, you use network address
translation(NAT).

Define Elastic IP
Define the route to NAT gateway
Canary Deployment Via DNS3:31
Canary deployment is a popular deployment method in the cloud. In this video, we will create the resources necessary to do a DNS-based canary deployment, and cut traffic from one resource to another.

Define template version and description
Add parameter and resources section
Hosting a Domain1:25
In this video, we will show you how to host a domain in Route 53 and add some records to it

Add HostedZone resource
Routing Based on Location with Failover2:49
In this video, we are going to combine two Route 53 routing policies together by combining you can do great things for your performance and availability.

Add primary and secondary records for ELBs
Network Logging and Troubleshooting3:59
In this video, we will turn on logging for our network resources. You could do this all the time, to give yourself another layer for monitoring and auditing, or you could selectively enable it during troubleshooting, saving yourself any additional data storage charges.

Define log group to send flow-logs
Define IAM role to give permissions
Creating SSL Certificates2:17
SSL-based communications are now becoming insecure methods that are no longer good enough. AWS provides the AWS Certificate Manager (ACM) service to provision AWS-backed SSL certificates that you can use with your AWS resources, such as Elastic Load Balancers (ELBs) and CloudFront.

Include domain name for certificate
Active Directory as a Service4:15
This video will show you how to deploy an AWS Simple Active Directory service. Simple AD is powered by Samba 4 and is a Microsoft Active Directory compatible managed service. It also integrates with other services provided by AWS. AWS manages backup and restoration of the directory for you in the form of daily snapshots and the ability to perform point-in-time recovery.

Define parameter and resources
Creating Users4:11
We will talk briefly about Identity and Access Management (IAM). It's free and is enabled on every account. It allows you to create groups and users and allows you to control exactly what they can and can't do using policy assignment.

Attach policy to the defined group
Use AWS Managed Policy
Creating Instance Roles4:06
This video contains a really important concept to anyone who is new to the AWS platform. Understanding and utilizing IAM roles for EC2 will significantly reduce your exposure to lost credentials and probably help you sleep a little better at night too. In a nutshell, instance roles help you get AWS credentials off your servers and out of your code
bases.

Define role that contains reference to managed policies
Create an InstanceProfile resource
Calculating Tools3:47
AWS Simple Monthly Calculator is a website application provided to help you estimate and forecast your AWS costs. By listing the resources you expect to consume you can calculate your pay-as-you-go costs, which is how AWS bills you. There are no upfront costs involved.

Go to the calculator website, http://calculator.s3.amazonaws.com/index.html
Select/deselect free usage tier option
Estimating CloudFormation Template Costs1:59
In this video, we will estimate the cost of CloudFormation template.
Generate the report
Estimate the monthly bill
Purchasing Reserved Instances6:04
Reserved instances can be the cause of some confusion and are often misunderstood. Reserved instances have no distinguishing technical features compared to regular on-demand instances. Reserved instances are not a specific type or class of instance

Go to EC2 web console
Choose the reservation
Estimating Total Cost of Ownership3:34
The AWS TCO Calculator is designed to provide you with a ballpark view of how much it will cost you to run equivalent infrastructure on AWS in comparison to your co-located or on-premise data center. The calculator has been audited by an independent third-party, but you should of course check its output against your own calculations before you make any purchasing decisions.

Navigate to https://awstcocalculator.com/.
Describe the server requirement

The Course Overview2:27
This video gives an overview of the entire course.
Basics of AWS2:28
Amazon Web Services is a public cloud provider. It provides infrastructure and platform services at a pay-per-use rate. You get on-demand access to resources that you used to have to buy outright. You can get access to enterprise-grade services while only paying for what you need, usually down to the hour.

Create an account on amazon.com
Study the AWS web console
Managing Infrastructure Through Code Definition2:53
Infrastructure as Code is the practice of managing infrastructure though code definitions. IaC is needed to get the most utility and value. In this video, we will see visibility, consistency, troubleshooting, scale, costs, devOps and server configuration.

Study Infrastructure as code
CloudFormation1:42
CloudFormation service allows you to provision and manage a collection of AWS resources in an automated and repeatable fashion. In this video, we will show you how to define the resources to be included in your CloudFormation stack. We will also see CloudFormation templates,
YAML versus JSON.

Study CloudFormation
Look at the CloudFormation templates
Study CloudFormation parameters
CloudFormation Templates3:09
In this video, we will learn about the template files that are codified representation of your stack, expressed in either YAML or JSON.

Parameters Types
Use mappings to define a set of key/value pairs
The Command-Line Interface Tool5:58
The AWS command-line interface tool is an important piece of the AWS administrator's toolkit. The CLI tool is often one of the quickest and easiest ways to interact with the API. The AWS application programming interface represents all the functionality available to you as an AWS administrator.

Install AWS command-line interface
Configure the CLI tool
Generate a CLI skeleton
Setting Up a Master Account1:52
All accounts that use AWS Organizations for billing and control purposes must have a master account. This account controls membership to the organization, and pays the bills of all the members

Create a master account
Study relationship between master accounts, members and organizational units
Creating a Member Account3:04
Our organization is up and running, the most common use that is automating the account creation process. Accounts created inside an organization are referred to as member accounts.

Create a member account
Study the service control policies
Managing Your Account3:56
There are a number of ways to group and arrange your AWS accounts. In this video, we are going to get the ID for our organization.
Create an organizational unit
Add an account to an organizational unit
Remove or delete an account from an organizational unit
Adding a Service Control Policy5:15
An SCP consists of a policy document which defines the services and actions which are able to be used and performed within an OU or in an AWS account. SCPs can be applied at different levels throughout an organization.

Create a SCP and add to organizational unit
Storage3:12
Storage is an integral part of any organization's cloud usage. When used correctly, servers are short-lived and replaceable. This means that having a durable, available storage service is critical to persisting and sharing state.
Study the storage services in AWS
Hosting a Static Website6:09
It's really easy to host a static website on AWS. It is also cheap, fast, reliable, and massively scalable too. You do this by
storing your content in an S3 bucket and configuring that bucket to behave like a website.
Create a S3 buckets and hosting contents
Create a DNS records
Caching a Website1:44
In this video, we will show you how to use AWS CloudFront to cache your website.
Configure CloudFront distribution
Working with Network Storage3:15
In this video, we will use the Amazon EFS to provide network-based storage to instances.
Create a top level resource property
Create a security group
Define ingress and egress rules
Backing Up Data for Compliance3:09
In this video, we are also going to utilize versioning in order to mitigate the damaged caused by a file being accidentally deleted or overwritten in our backup bucket.
Study the parameters in backing up data
Create S3 bucket
Creating a Key Pair4:44
A key pair is used to access your instances via SSH. This is the quickest and easiest way to access your instances. In this video, we are going to create a key pair.
Create the key pair
Create a volume and attach to the instance
Securely Accessing Private Instances9:09
Resource living in a private subnet will be inaccessible from internet. This makes good sense from a security perspective because it gives our instances a higher level of protection. Of course, if they can't be accessed from the Internet, then they're not going to be easy to administer. One common pattern is to use a VPN server as a single, highly controlled, entry point to your private network.

Define the actual OpenVPN instance
Creating Machine Images2:48
Creating or baking your own Amazon Machine Images is a key part of systems administration in AWS. In this video, we will create an image with the Apache web. server pre-installed and configured

Define the build details
Creating Security Groups3:13
AWS describes security groups as virtual firewalls. We are going to go through a basic scenario involving a web server and load balancer. We want the load balancer to respond to HTTP requests from everywhere, and we want to isolate the web server from everything except the load balancer.

Look at a security group
Add our load balancer
Creating a Load Balancer5:03
We're going to focus on the application load balancer. It's effectively an upgraded, second generation of the ELB service, and it offers a lot more functionality than the classic load balancer. HTTP/2 and WebSockets are supported natively, for example. The hourly rate also happens to be cheaper.

Create a new CloudFormation
Add resources
Create a security group for load balancer

The Course Overview2:56
This video gives glimpse of the entire course.
Introducing Cloud Computing4:16
In this video, we will start with the introduction about cloud computing. Then we will look at cloud deployment models and cloud service models and its type. Lastly, we will have a glance at the Regions and Availability Zones.
Look at the deployment model, service model
Understand regions and availability zones
Security, Compliance, and AEC24:25
In this video, we will get an overview on few of the core concepts of AWS that is Security and compliance. Then, we will look at Amazon Elastic compute cloud that is Amazon EC2.

Study the concepts of security and compliance
Security Groups and Networking Services11:20
In this video, we will get an overview on security groups and networking services. Also, we will learn to create a security group.

Create a security group
Look at Amazon Virtual Private Cloud
Look at the components of default VPC
Billing Dashboard and AWS (TCO) Calculators4:37
AWS Billing and cost management provides detailed information on your usage of resources, budget, notifications, and to pay the bill. In this video, we will look at billing dash board and TCO calculator.
Manage budgets from My Billing Dashboard
Creating VPC Using a Wizard12:21
In this video, we will cover both types of VPC creation, in brief, to become more familiar with the concepts along with creating VPCs in an easier fashion.

Create a VPC with public and private subnets and hardware VPN access
Create the VPC with public and private subnets
Utilize network address translation (NAT)
Creating VPC Without Using the Wizard7:29
In this video, we will look at the steps to create VPC without using wizard.
Create a private subnet to be utilized as a private subnet
Create a public subnet in the packt VPC
Create a subnet with a /28 subnet mask
Creating Instances in VPC7:29
In this video, we will look at the steps to create application in AWS Beanstalk. We will also create, an environment in the application and deploy the same sample application in the environment.
Launch Elastic Beanstalk environment
Check EC2 instances in the AWS Portal
Creating and Configuring ELB5:31
In this video, we will get an overview of ELB. Then we will learn the steps to create and configure ELB.
Look at the types of AWS Elastic Load Balancing
Create and configure ELB
Accessing the Instance Remotely with PuTTY10:21
In this video, we will first download putty and install Tomcat to deploy sample WAR file. Then we will create ELB and configure target groups.
Download PuTTY and install Tomcat
Use Win SCP and transfer any working WAR file to remote instance
Configure Load Balancer
An Overview and Setup4:57
In this video, we will cover the basic introduction of Auto scaling along with its benefits and types. After that, we will setup an Auto scaling in load balanced application.
Observe concepts and benefits of Auto Scaling
Learn types of scaling
Look at major components of Auto Scaling
Auto Scaling Group8:24
In this video, we demonstrate to create an Auto Scaling group, and configure manual and automated scaling while creating Auto Scaling group.
Manage EC2 instances automatically
Configure scaling policies
Configuring Amazon Route 534:14
Amazon Route 53 provides a facility to register domain names, a Domain Name System (DNS) service.

In this video, we will cover the basic overview of Amazon Route 53
concepts. Then we will configure Route 53 service and demonstrate the
process of domain registration.

Understand the features of Amazon Route 53
Configure Amazon Route 53
Configuring Route 53 for a Web Application6:53
In this video, we will configure Route 53 service for a web application. Then we will demonstrate the steps to configure health checks on Route 53.
Create a new hosted zone by clicking on Create Hosted Zone
Add and update name servers with a registered domain
Configure health check on Route 53
Creating a CNAME Resource Record Set2:53
In this video, we demonstrate the steps to configure a CNAME resource record set from Route 53 dashboard.
Create record set
Introduction to AWS Direct Connect3:10
AWS Direct Connect provides a facility to create a dedicated network (private connectivity) Connection. In this video, we will figure out answers for many queries related to AWS Direct Connect.

Study the working of AWS Direct Connect
Follow steps to use AWS Direct Connect
An Overview of AWS Direct Connect Components4:36
In this video, we will look at the reason why we need to establish the connection. Later we will also learn the steps to do the same.
Create Connection with port speed and location/region
Understand the concept of Direct Connect Gateway
Identity and Access Management10:42
Security can't be an afterthought. It is essential in the multitenant environment of cloud.

In this video, we will first look at shared responsibility model.
Then we will create groups and users. Later we will assign each IAM user
to a specific group

Copy the repo
Understand the demo repo
Overview of IAM Policies5:42
Policies is the document that help us define and assign permissions to a role, group, user, or
AWS resource.

In this video, we will learn to create policy in 2 different ways.
Then, we will create user and assign the newly created policies to it.

Build a policy using Visual editor
Create a policy document using JSON editor
Create a user and assign policy to it
Security Groups and Network ACLs7:17
In this video, we demonstrate the steps to create a security group and network ACL. Later, we will assign a subnet to the newly created Network ACL.

Create Security group and add Inbound or Outbound rule
Create Network ACL and add rules to it

The Course Overview3:10
This video provides an overview of the entire title.
IAM Recap – Users, Groups, and Roles10:06
Summary of the fundamental concepts surrounding IAM.
View a summary of the key IAM characteristics and best practices
View a summary of the key components and their roles
View a summary of federation using Active Directory and Web Identity Federation
EC2 Recap – Instance Types and EBS12:46
Summary of the fundamental concepts surrounding EC2, ELB, and the AWS CLI.

Overview the instance types, pricing plans, and storage types (EBS versus instance store)
Overview how to create AMIs and snapshots, the instance metadata and user data, and ELB key characteristics
Get to know the key AWS CLI commands to remember about EC2
S3 Recap – Object Storage, Lifecycling (Glacier), Storage Types, and Version Con13:04
Summary of the key concepts surrounding S3 and CloudFront.

Understand S3 fundamentals,storage types, versioning, and lifecycle rules (with Glacier)
Get data into AWS (Snowball, Storage Gateway, and Transfer Acceleration)
Understand policies, CORS, static website hosting, encryption, and CloudFront
Exam Tips5:10
Exam tips containing more information about S3, EC2, and IAM covered in the section.
Get to know S3 error codes and the difference between bucket URLs and static website hosting URLs
Understand CloudWatch monitoring, Cloudwatch concepts, System and Instance status checks for EC2
Understand the relationship between IAMroles and EC2
View the summary of topics covered in the section
Quiz – IAM, EC2, and S38:32
Overview of what was covered in the exam prep section, followed by a quiz to verify the knowledge gained.
Face 10 questions with a pause in between before the answer is revealed
View the answers to the questions given after each question
Where applicable, extra explanations are given to solidify the knowledge
DynamoDB Recap – Tables, Indexes, Queries, and Scans14:17
Recap of the fundamental DynamoDB concepts.

Understand DynamoDB tables, indexes, and primary keys
Understand scans versus queries
Also, understand Provisioned Throughput calculations and Web Identity Federation with DynamoDB
Route53 Recap – DNS and Routing Types8:06
Recap of Route53 concepts.
Know the DNS fundamentals
Know the Route53 fundamentals
Understand routing policies
SQS, SNS, and SWF Recap8:51
Recap of application and messaging services.
View a recap of SQS
View a recap of SNS
View a recap of SWF
CloudFormation Recap2:38
Recap of the CloudFormation service.
Know the fundamentals of CloudFormation
Know the functions of CloudFormation
View the sections within a CloudFormation template
Elastic Beanstalk Recap1:22
Recap of the Elastic Beanstalk service.
Overview Elastic Beanstalk
View the supported programming languages
View supported container services
Exam Tips3:23
Extra exam tips for the services covered within the section.
Recommended reading
View extra DynamoDB tips
View extra Route53 tips
View a summary of the concepts that were covered
Quiz5:29
Overview of what was covered in the section, followed by a quiz to verify the knowledge gained.
Face 5 questions with a pause in between before the answer is revealed
Answers to the questions are given with extra explanations to solidify the knowledge
Building a Custom VPC Recap11:17
Recap the steps to create a custom VPC.
Get introduced to VPC characteristics and use cases
CIDR blocks, subnets, and Internet gateway introduction
Default VPC introduction and characteristics
NATs and Bastion Host Recap4:47
Recap of differences between bastion hosts and NAT devices.
Bastion hosts recap
NAT devices recap
Comparison between bastion hosts and NAT devices
Access Control Lists and Flow Logs Recap5:57
Summary access control lists and flow logs.
Network Access Control Lists
Security Groups
Creating and enabling flow logs
Exam Tips2:11
Exam tips for VPCs.
Recommended reading
VPC Peering exam tips
Scalability within applications deployed within a custom VPC
View a summary of the concepts that were covered
Quiz – VPCs2:58
Overview of what was covered in the section, followed by a quiz to verify the knowledge gained.
Face five questions with a pause in between before the answers are revealed
Answers to the questions are given with extra explanations to solidify the knowledge
What to Expect Going into the Exam?1:55
Set the expectations for the exam.
Register for the exam
Learn how to reschedule an exam
Know what to take to the exam
Exam Format and Structure2:27
This video covers the exam format and structure.
Know the exam format
Understand the breakdown of the exam in domains
Review the key services that compose the exam sections
View a summary of the concepts that were covered
Course Content Mega Quiz 113:49
Overview of what was covered in the section and the rest of the courses, followed by a quiz to verify the knowledge gained.
Face questions with a pause in between before the answers are revealed
Answers to the questions are given with extra explanations to solidify the knowledge
Course Content Mega Quiz 212:08
Overview of what was covered in the section and the rest of the courses, followed by a quiz to verify the knowledge gained.
Face questions with a pause in between before the answers are revealed
Face questions with a pause in between before the answers are revealed
Final Exam Tips1:14
Final tips for the preparation for the exam.
Useful reading
View practice exercises
Review concepts

Requirements

Basic idea of system administration

Description

Amazon Web Services (AWS) is the most dominating platform in the public cloud market by a huge margin and has been the first choice for many organizations.

This comprehensive 4-in-1 training course is packed with clear, practical, instruction-based videos that will enable you to use and implement the latest features of AWS.

About the Authors

Lucas Chan has been working in tech since 1995 in a variety of development, systems admin, and DevOps roles. He is currently a senior consultant and engineer at Versent and technical director at Stax. He's been running production workloads on AWS for over 10 years. He’s also a member of the APAC AWS Warriors program and holds all five of the available AWS certifications.

Rowan Udell has been working in development and operations for 15 years. He has held a variety of positions, such as SRE, front-end developer, back-end developer, consultant, technical lead, and team leader. His travels have seen him work in start-ups and enterprises in the finance, education, and web industries in Australia and Canada. He currently works as a senior consultant with Versent, an AWS Advanced Partner in Sydney. He specializes in serverless applications and architectures on AWS and contributes actively in the Serverless Framework community.

Mitesh Soni is a DevOps enthusiast. He has worked on projects for DevOps enablement using Microsoft Azure and VSTS. He also has experience in working with other tools that are DevOps enablers such as Jenkins, Chef, IBM UrbanCode Deploy, Atlassian Bamboo, and more. He is a CSM, SCJP, SCWCD, VCP, IBM Bluemix, CJE and IBM Urbancode certified professional.

Raluca Bolovan is an author, DevOps Engineer, AWS Certified Solutions Architect, and AWS Certified Developer. She graduated with a first-class Honors Meng degree in Computing (Software Engineering) from Imperial College London. She worked in Investment Banking for three years with technologies such as Python, Java, and Spring. She then moved into the FinTech industry and has written microservices running on Docker on AWS. Raluca has several years' experience architecting and implementing new solutions on the AWS platform. She has built, among others, a serverless ETL and data warehousing solution using AWS Lambda, DynamoDB, Redshift, and S3 as the principal components. She is also interested in new technologies. So far, she has worked in roles in most aspects of technology, ranging from front-end development with JavaScript and Django to back-end with microservices in Java 8 and Postgres, and more recently DevOps on AWS. If a technology might feasibly be the solution for the task at hand, she will definitely try it.

Who this course is for:

System administrators, DevOps engineer, or an IT professional who is moving to an AWS-based cloud environment.

AWS Admin All-in-One: 4-in-1

What you'll learn

Explore related topics

Course content

AWS Administration-Database,Networking and Beyond25 lectures • 1hr 41min

AWS Administration Solutions20 lectures • 1hr 15min

Practical AWS Networking20 lectures • 2hr 10min

AWS Certified Developer - Associate - Prep Course23 lectures • 2hr 36min

Requirements

Description

Who this course is for: