AWS SysOps: EC2, VPC, IAM, S3, CloudFormation, Auto Scaling

Launch an EC2 instance from the AWS console in the Mumbai region, choose an AMI and instance type, configure network, storage, security groups, and prepare key pair for access.

Create and download a key pair to securely access your AWS instance, using a public key on AWS and a private key for Windows password or Linux SSH.

Learn two ways to connect to your AWS instance: ssh from Windows with a private key and PuTTY PPK, or ssh from Linux using the IP or DNS.

connect from one linux server to another using ssh with a pem key, set permissions to 400, login as ec2 user, and verify both server IPs.

Enable termination protection to guard against accidental termination, and disable it in instance settings to allow termination. By default, terminating an instance also deletes its root EBS volume.

Enable termination protection and configure shutdown behavior on EC2 instances, as shown with webserver1 and webserver2. OS shutdown can stop one and terminate the other, highlighting the exam scenario.

Group interdependent AWS EC2 instances into a placement group to achieve low latency and high throughput within the same availability zone, including cluster, partition, and spread types.

Explore cluster, partition, and spread placement groups in Amazon EC2, noting cluster's low latency and high throughput, partition and spread's hardware failure isolation.

Create and manage AWS placement groups—cluster, partition, and spread—in EC2. Launch an EC2 instance into a chosen placement group, changing the instance type to enable cluster placement.

Explore common instance launch errors, especially vcpu limit exceeded, and learn to request limit adjustments or switch regions. See a demonstration of launching t2.micro instances to illustrate virtual CPU limits.

Learn how to address common instance launch issues in AWS SSM, including handling instance limit exceeded errors, insufficient capacity, and immediate termination causes, plus how to diagnose with instance attributes.

Learn how to troubleshoot common SSH login issues across jump, Oradb, and application servers by fixing private key permissions, adjusting security group inbound rules, and using the correct default users.

Compare EC2 on-demand and reserved instances, illustrating pay-as-you-go pricing, upfront payments, and capacity reservations to meet testing and steady-state workloads while reducing costs.

Convertible reserved instances allow changes in instance families, OS, tenancy, and payment options for 31%–54% discounts; scheduled reserved instances reserve capacity for defined times and charge for scheduled hours.

Explore EC2 spot instances that let you request spare compute capacity at up to 90% off the on-demand price, with bidding and the risk of losing capacity when prices rise.

Explore how dedicated instances reserve a hardware rack for a single AWS account. Learn that dedicated host is discussed next, while dedicated instances show isolation within the same account.

Explore EC2 dedicated hosts, a physical server for licenses bound to the CPU and compliance, offering hardware control and placement visibility, unlike dedicated instances, with a higher 3-year reservation cost.

Explore EC2 launch types hands-on, including spot requests and standard launches, configure AMIs and instance types (for example C5.large or M5a.large), and manage price options and potential reclamation by AWS.

Explore how to deploy EC2 using reserved instances, dedicated hosts, and scheduled launches, including selecting instance type and term, setting availability zones, and understanding charges.

Explore amazon ec2 instance types across general purpose, compute optimized, memory optimized, accelerated computing, and storage optimized categories with examples like a1, t3, c5, m, g4, p3.

Learn to create and manage Amazon machine images (AMIs) to launch AWS instances, including custom AMIs, regional availability, EBS snapshots, and sharing options.

Create a custom ami from a configured web server by creating an image, using no reboot to avoid downtime, then launch instances from this ami to clone the web server.

Copy and share an ami across regions and accounts, control image permissions, and launch instances while preserving ownership.

Explore how CloudWatch monitors AWS resources and applications in real time, collects metrics and logs, and sets alarms, with EC2's default five minute monitoring and custom metrics.

Explore CloudWatch metrics for an EC2 web server, including CPU utilization, disk read operations, network in/out, and status checks with default five-minute monitoring.

Learn to create custom memory metrics in CloudWatch from an Amazon Linux 2 EC2 instance by installing monitoring scripts, setting an IAM role, and using cron to collect memory data.

Create a CloudWatch alarm on EC2 CPU utilization above 80% for a single data point within five minutes to trigger email alerts and reflect alarm, ok, and data-insufficient states.

Explore how AWS Systems Manager offers visibility and control of your infrastructure through a unified interface, automating tasks, inventorying software, applying patches, and ensuring compliance across Windows and Linux instances.

Install the AWS Systems Manager Agent on servers to enable management via Systems Manager; follow Windows or Linux installation steps, noting some images include the agent by default.

Configure EC2 instances with the SSM agent and an IAM role, attach the role, and verify the two managed instances appear online in Systems Manager.

Learn to define AWS tags and create tag-based resource groups by using key-value pairs such as environment and department to filter instances and save groups.

Learn to remotely and securely manage instance configurations with AWS Systems Manager Run Command, executing commands on many managed instances via preconfigured documents and capture logs.

Learn to work with AWS Systems Manager documents by creating and executing a command document to configure an Apache web server on Linux instances, and monitor output via CloudWatch logs.

Use AWS Systems Manager inventory to gain visibility into software, applications, and patches across your instances. Enable inventory, view per-instance details, and search by application type and patches installed.

Configure patching with predefined baselines in AWS Systems Manager, selecting instances by tags or groups, scheduling patches, and letting the tool auto-apply OS-specific Amazon Linux, Debian, Ubuntu, or Windows baselines.

Configure a custom patch baseline in AWS Systems Manager, adding critical security patches and bug-fix rules with immediate and 14-day approvals, then apply it to Amazon Linux 2.

Learn to configure linux patching with a custom patch baseline in aws systems manager, tag instances, attach patch groups, set default baseline, and apply patches to a web server group.

Discover how AWS Systems Manager Session Manager enables secure, portless, one-click access to on-premises and cloud instances via browser or CLI, with IAM-based access control and auditable CloudWatch logs.

Learn how AWS systems manager parameter store secures configuration data and secrets, storing plaintext or encrypted values and enabling retrieval during tasks with run command and automation.

Create a string parameter to store a Windows user password in AWS Systems Manager parameter store, then run a PowerShell script to reset Islama's password from that parameter.

Create and retrieve AWS SSM parameter store entries with the AWS CLI, specifying string and secure string types, and use --with-decryption to view encrypted values.

Reset the Windows administrator password on an EC2 instance with AWS Systems Manager, retrieving the new credential from Parameter Store after running the command.

Explore Amazon elastic load balancer concepts, define vertical and horizontal scalability (elasticity) in distributed systems, and examine high availability across multiple data centers to maintain service during failures.

Use Amazon elastic load balancer to distribute traffic across multiple healthy instances, enabling high availability through health checks and automatic scaling, while balancing cost with appropriate instance sizes.

Explain why the classic load balancer (clb) is the previous generation that distributes requests across healthy instances but lacks host-based routing.

Explore how the application load balancer operates at the application layer to route traffic using host-based and path-based routing, supporting multiple apps on one instance and microservices architectures.

Learn how the network load balancer (nlb) operates at the network layer to forward traffic based on dcpi, supports static and elastic IPs, and differs from application load balancers.

Configure a classic load balancer with two web servers, enable health checks, and verify the Route 53 dns name routes requests across both instances.

Troubleshoot a classic load balancer by stopping a backend web server, observing health checks mark an instance unhealthy, and verify traffic routes to the healthy instance.

Enable load balancer stickiness to route requests to the same instance behind a target group, set the stickiness duration, and understand its impact on traffic distribution.

Investigate how to monitor a load balancer using CloudWatch metrics, including unhealthy hosts, latency, requests, and backend connection errors, with detailed metric descriptions.

Enable load balancer access logs to store activity in an S3 bucket; configure the interval (default five minutes) and bucket location to start capturing logs after five to ten minutes.

Configure an application load balancer by creating and registering target groups, adding instances, and setting health checks and listener rules for reliable, scalable web traffic.

Explore path-based routing with an application load balancer, forwarding traffic to two target groups (main site and block site) via a listener rule from a single DNS name.

Learn how AWS auto scaling adjusts EC2 capacity to maintain performance and cost by using auto scaling groups with min, desired, and max sizes and latency- or utilization-based policies.

Configure an auto scaling group with a launch configuration, define cpu-based scaling policies, and manage two instances in a default VPC for high availability.

Demonstrates an ASG policy that increases group size when CPU utilization exceeds 80 percent, expanding from two minimum instances to a maximum of eight.

Learn how the ASG decrease group size policy automatically terminates instances when CPU utilization deviates from 30 percent for 60 seconds, demonstrated with a three-instance setup.

Deploy web apps easily with Amazon Elastic Beanstalk, a platform as a service. Provision infrastructure, scale automatically, balance load, monitor health, and update while you focus on coding.

Log into the aws management console, open Elastic Beanstalk, create your first application, select the .net on Windows platform, deploy your code, and monitor the environment health.

Configure a beanstalk app env by adjusting software, target dotnet runtime 4.0, and enabling cloud log streaming; modify instance capacity, security groups, and load balancer for rolling updates and monitoring.

Learn to access a Windows Beanstalk app instance by creating an RDP key pair, updating security group rules, and connecting to deploy dot net files.

Learn to deploy a web app with AWS Systems Manager, using custom configuration, auto scaling, security groups, and an application load balancer on Linux with dotnet code.

Deploy and update web applications to an elastic Bienstock environment using the W.S. elastic Bienstock console, with rolling, rolling with an additional batch, imitable, and traffic splitting deployments.

Explore all at once deployment, the fastest method that requires downtime as updates reach every instance. Assess risks of full-fleet failure and why this is best for development and testing.

Explore rolling deployment in aws systems manager (ssm), upgrading services in batches to minimize downtime and preserve availability. Learn to set batch sizes and upgrade instances gradually.

Learn how a rolling with additional batches deployment policy preserves bandwidth and availability by provisioning an extra batch of instances before upgrading. Observe the staged upgrade to the newer version.

Explore immutable deployment, a slower method that launches new instances, passes health checks, doubles the fleet briefly, and upgrades the application on new servers with safe rollback.

Understand traffic splitting deployments and candidate testing; forward a percentage of traffic to new instances for a period, and if health checks pass, shift all traffic and terminate old ones.

Explore hands-on elastic beanstalk deployment policies, upgrade production environments using rolling and immutable deployments, create new environments, monitor health and events, and preview application changes.

AWS CloudFormation overview as an infrastructure as code solution that models and provisions AWS resources via templates, replacing manual setup with automated configurations for EC2, VPC, subnets, and databases.

CloudFormation simplifies infrastructure management by reading a template to create APIs and provision resources. It saves time, lets you replicate infrastructure with same template, and supports rollback if deployment fails.

See how cloud formation reads a template to create a stack of resources, store it in an S3 bucket, and deploy a VPC with private and public subnets and routing.

Explore how AWS CloudFormation stacks group resources into a unit defined by JSON or YAML templates, and use CloudFormation designer for visual template creation to provision, update, or rollback resources.

Learn to create an EC2 instance with cloud formation, using ready or custom templates, validate syntax, upload templates to S3, and launch and monitor a stack.

This hands-on CloudFormation lecture walks through creating an S3 bucket via a template, handling stack creation, rollback on errors, and viewing resources and tags in the stack.

Learn to use the CloudFormation designer to create templates with drag-and-drop resources in JSON or YAML, then validate and save to local or S3 to deploy a stack.

Explore AWS CloudFormation templates for resources, and learn the template structure—format, description, metadata, parameters, mappings, conditions, transform, resources, and outputs—and the 2010-09-09 template version.

Define a CloudFormation parameter named instanced type parameter to specify the EC2 instance type during stack creation or update, with a dropdown of allowed values.

Define a cloudformation mapping with keys and values, then retrieve specific values using find_in_map to set instance properties based on a reason.

Explore mappings in aws systems manager (ssm) hands-on by uploading a template, selecting parameters, and deploying a region-aware ami-based instance stack.

Master CloudFormation conditions by defining when resources or outputs are created, using intrinsic functions in the condition section and associating conditions with templates and stacks.

Join this hands-on session to use conditions in a template to decide resources: create an ec2 instance with a volume when prod is selected, or just the instance when test.

Explains cloudformation outputs by declaring, exporting, and importing values across templates and stacks, using parameters, mappings, and intrinsic functions to reuse resources like VPC, subnets, security groups, and EC2 instances.

Learn how intrinsic functions like reference, get attribute, and substitute drive runtime values in templates, enabling parameters and resources such as EC2 instances and elastic IPs to reference each other.

Demonstrate how the intrinsic function GetAtt retrieves a resource's runtime attributes and injects them into outputs, using an EC2 instance's public and private IP addresses as examples.

Explore how to use the FindInMap intrinsic function to retrieve a value from a two-level map in a mapping section, by specifying the map name and top and second-level keys.

Explore the intrinsic function join, which concatenates a comma-delimited set of values into a single value using a delimiter, or into a continuous string when the delimiter is empty.

Learn how the substitutes intrinsic function replaces variables in templates with values from parameters, resource logical ids, resource attributes, or maps, including pseudo parameters via the reference function at runtime.

Learn how import value, an intrinsic function, retrieves an output exported by another stack to enable cross-stack references using the substitute function in CloudFormation templates.

Learn how to pass user data to EC2 via CloudFormation using base64, build a template, provision an EC2 instance, install Apache, and verify access.

Explore crafting a CloudFormation template with user data and cfn-init to install packages, configure files, bootstrap services, and manage Apache on the target instance, then verify with stack logs.

Demonstrate creating a CloudFormation stack from a template to provision two EC2 instances with a security group and ports, then update the stack and explore rollbacks.

Learn to create and compare change sets for CloudFormation, previewing updates to instances, security groups, image replacement, and templates before safely updating or replacing a running stack.

Create IAM users and groups to control sign-in and access to AWS resources. Attach policies and roles to grant permissions for services like S3 and elastic load balancing.

Learn to create IAM users and groups, attach full and read-only policies, assign users to groups, and verify permissions across S3 and other services in the AWS console.

Learn to access the aws management console via cli by creating a user, configuring credentials on linux, and applying read-only and full access groups to manage S3 buckets securely.

Learn how IAM roles securely grant permissions to trusted entities, such as EC2 instances, enabling full access to S3 without credentials by attaching an IAM role.

Configure multifactor authentication for an AWS management console user using a virtual MFA device like Google authenticator by scanning a QR code and verifying during login.

Learn how to create a custom policy in AWS IAM, selecting a service, choosing actions like start, stop, and describe, and attach it to a role for a Lambda function.

S3, the simple storage service, offers secure, durable, and scalable object storage via a simple web interface; data lives in globally unique buckets with encryption and integrity checks.

The lecture contrasts S3 object storage with EBS block storage, showing block-level updates and object-level overwrites, and notes S3 for write-once, read-many workloads while EBS offers fast block performance.

Explore creating and securing S3 buckets, configuring public access, enabling versioning, access logging, encryption, and object lock, and making objects publicly accessible with practical lab steps.

Learn how to secure data in S3 with encryption and access controls, including server-side encryption with S3-managed keys, KMS, client-side encryption, and bucket policies plus access logs.

Discover how S3 versioning preserves multiple object versions in a bucket, enabling retrieval and restoration of files. It cannot be disabled once enabled, only suspended, and works with lifecycle rules.

Discover how Amazon S3 storage classes, especially S3 Standard, balance cost, reliability, and availability with high capacity and low latency for hosting websites and apps.

Explore Amazon s3 storage classes like s3 ia, s3 one zone ia, and s3 intelligent tiering, which moves data based on usage to optimize cost and availability.

Explore Amazon Glacier and Glacier Deep Archive as low-cost, long-term storage for data you rarely access, with retrieval times from hours to 48 hours and a 90-day minimum storage period.

Explore AWS S3 lifecycle rules to automate object transitions from standard to infrequent access and Glacier, using versioning awareness and expiry settings to optimize cost and retrieval times.

Create a source bucket, make it public, upload files, and configure cross-region replication to a London destination bucket with a replication rule and IAM role.

Explore how Amazon CloudFront functions as a distributed content delivery network that caches web content and media at edge locations to speed access, with origins, distributions, and time to live.

Explore how to set up a CloudFront distribution for an S3 bucket origin, configure a domain name, adjust caching, and use invalidations to manage content delivery.

Explore how AWS EBS volumes attach to EC2 instances, providing file system storage for operating systems and data, with five types: gp2, io1, st1, sc1, and magnetic.

Perform hands-on EBS management by creating and attaching volumes to EC2 instances, resizing and changing volume types, and understanding termination behavior for root and data volumes across availability zones.

Attach and manage an EBS volume, format and mount a file system, and create a snapshot for backup. Recover by restoring from snapshot or changing the volume type.

Discover how to create a customized Amazon machine image (ami) to launch identical virtual machines, snapshot the image, and copy it across regions for reuse.

Understand the difference between a snapshot and an image, back up a volume with a snapshot, and use an image to launch or attach a new server.

Encrypt a root volume by snapshotting an unencrypted volume, copying the snapshot to an encrypted snapshot, and creating an image to launch an instance with encryption by default.

Learn how to create and manage an elastic IP in AWS, assign it to an instance to provide a persistent public IP, and release or disassociate to avoid charges.

Explore hands-on cloudwatch by enabling detailed monitoring on two instances, creating dashboards to visualize metrics, and configuring alarms with email notifications to alert the monitoring team.

Learn to create a CloudWatch alarm in AWS Systems Manager (SSM) hands-on, set an 80 percent threshold for one minute within five minutes, and configure email notifications for outages.

Learn to manage aws services from the command line using the aws cli, configure credentials, create instances, and handle s3 buckets and iam users.

Learn to back up and restore EC2 instances using incremental snapshots and volumes with AWS Systems Manager, including identifying volumes, creating and attaching volumes from snapshots, and restoring servers quickly.

Learn to safely increase a root volume for an operating system disk using AWS SSM, including identifying the volume, increasing its size, and taking a snapshot as a best practice.

Retrieve instance metadata, including public IP, private IP, hostname, DNS, instance type, security groups, and keys, via the latest metadata endpoint from the command line.

Launch and configure an EC2 instance to run post installation with user data scripts, viewable in the user data tab, and understand how it relates to metadata.

Learn to create and use AWS elastic file system (efs) as a shared, elastic storage across EC2 instances, with lifecycle, security, and encryption options.

AWS Route 53 acts as a DNS service that maps domain names to IP addresses, linking a registered domain to a public IP for a website.

Allocate and associate an elastic IP to a Linux instance, open web ports in the security group, and deploy a website. Register a domain to point to the public IP.

Register a domain and connect it to your public IP, then configure DNS by creating hosted domain records, name servers, and A records for internet access.

Create and configure health checks to monitor web servers and resources, set alarms and email notifications, and respond to unhealthy instances with automated alerts in AWS Systems Manager.

Understand the simple routing policy in Route 53, using an A record for multiple IP addresses to balance load and ensure redundancy across servers.

Configure a weighted routing policy to split traffic between two resources by specified proportions. Observe how health checks respond when a target goes down.

Explore latency based routing with Route 53 by placing web servers in India and London and directing users to the lowest latency region for faster responses.

Learn how failover routing policy redirects traffic from a primary resource to a secondary one when health checks mark the primary unhealthy. Configure health checks and DNS records for failover.

Configure geolocation routing to direct user requests based on location, sending India users to the India server and London users to the London server, with a health check.

Learn how geo proximity routing directs traffic by distance to resources, with positive or negative bias and latitude and longitude endpoints.

Explore how multivalue answer routing in Route 53 returns multiple IPs for DNS queries, with health checks ensuring only healthy resources are served.