Advanced Operations on AWS

Amazon S3 provides secure, durable object storage across regions, hosting unlimited data in buckets and supporting versioning, access control, storage classes, and cross-region replication.

Develop and apply a bucket policy to control access, using the policy generator, and test delete permissions against IAM policies.

Enable versioning on a bucket to keep multiple versions of an object, preventing accidental deletions or overwrites, and restore from a chosen version.

Enable server access logging to capture details about access requests and troubleshooting insights, and store logs in the same region bucket with a designated prefix for easy analysis.

Learn about private IP addresses for internal VPC communication, public IP addresses for internet access, and elastic IPs as static, persistent allocations tied to your account.

Launch an EC2 Linux instance by selecting a region and an AMI, configure instance details, storage, and security groups, then connect securely via SSL using a key pair.

Learn how to connect a Windows PC to an EC2 Linux instance using PuTTY and PuTTYgen, converting PEM to PPK and logging in as ec2-user.

Connect from macOS to an EC2 Linux instance via the Mac terminal using a desktop private key, then SSH to the public IP or DNS after setting permissions.

Launch a Windows Server 2019 EC2 instance, configure storage, then open an RDP port 3389 in a security group from a known IP and connect.

Connect to a Windows EC2 instance from Windows OS by updating inbound security group rules, downloading the RDP file, and decrypting the login password with your private key on AWS.

Connect from macOS to a Windows Server 2019 EC2 instance with Microsoft Remote Desktop, add the desktop via public IP or DNS, decrypt the password with a private key.

Learn how to create a customized Amazon machine image (AMI) by launching a public AMI, installing software and bootstrapped scripts, applying customizations, and capturing the image to deploy multiple instances.

Configure the CLI by authenticating with your access key and secret key in your terminal, then set the region and default output format to enable deploying and monitoring resources.

Configure an s3 bucket-triggered lambda function that runs on each image upload, using a role and blueprint; monitor invocations and duration in CloudWatch.

Set up a scalable, highly available app on AWS by using a customized image, a classic load balancer, an auto scaling group, and a CPU-based target tracking policy.

Explore EC2 masterclass basics: launching EC2 instances with AMIs, choosing instance types, configuring VPCs and IPs, managing EBS volumes, security groups, and key pairs, plus CloudWatch monitoring.

Learn to launch an EC2 instance on AWS. Explore AMIs, instance types, vertical and horizontal scaling, IP addressing, VPCs, security groups, and on-demand, reserved, and spot pricing.

Explore the relevance and implementation of routing policies in business architecture, including failover to location and tie value, with foundational concepts and extensive hands-on labs.

Explore how the DNS translates domain names to IP addresses, acting as the internet's phonebook, and routes traffic to AWS resources like instances, load balancers, S3, and CloudFront.

Explore Route 53 DNS service options in a hands-on lab, register or transfer domains, and manage hosted zones with name servers and SOA records. Learn health checks and DNS failover.

Learn how to implement simple routing policy with AWS Route 53 by mapping a domain to a single resource—an instance or a load balancer—using alias or A records.

Configure a failover routing policy in Route 53 with an active primary Mumbai ELB and a secondary California ELB. Health checks monitor the primary, triggering traffic failover when unhealthy.

Discover geolocation routing policy that directs end users to load balancers, such as asia users to mumbai and north america users to california; learn to create geo location-based record sets.

Learn multivalue answer routing in Route 53, returning multiple healthy IP addresses to improve DNS-based availability and load balancing across Mumbai and California, without substituting a load balancer.

Master the VPC IP address types by comparing private IPs for internal communication, public IPs for internet reach with dynamic assignment, and elastic IPs for static, persistent public addressing.

Learn how an internet gateway connects your VPC to the internet, enabling public access for instances, with steps to attach, assign public or elastic IPs, and configure routes and security.

Regulate inbound and outbound traffic with security groups, virtual firewalls for instances in a VPC. Remain stateful and apply immediate, permissive rules that can be modified anytime.

Learn how network access control lists (NACLs) add a firewall layer to a VPC, with stateless inbound and outbound rules ordered ascending, default versus custom ACLs, and subnet associations.

Build a custom non-default VPC from scratch using a reference architecture, defining CIDR ranges, public and private subnets, Elastic IPs, Internet gateway, and NAT gateway.

Learn to build a non-default vpc with cidr 10.0.0.0/16, create public and private subnets 10.0.1.0/24 and 10.0.2.0/24, attach an internet gateway, and understand default vs dedicated tenancy.

Explore VPC endpoints to establish private connectivity from a VPC to AWS services like S3, keeping traffic on the Amazon network without internet gateways, NAT gateways, or public IPs.

Learn how VPC flow logs capture IP traffic to and from network interfaces, store it in a log group, and configure at the VPC, subnet, or network interface level.

CloudFormation uses template files to provision and manage a stack of resources for repeatable deployments, enabling a load-based auto scaling architecture with easily deployable templates.

Explore Elastic Beanstalk, a platform as a service that deploys and scales applications with auto scaling, manages the stack, and lets you deploy a web server environment using Python platform.

Explore how AWS OpsWorks uses stacks, layers, leaders, and instances to deploy apps, then create a stack, add a layer, and deploy a web app from a GitHub repository.

Conclude the automation section by illustrating cloud formation for repeatable deployments, deploying a load-based auto scanning architecture, and demoing a web server with ops folks stacks, layers, and apps.