[old] Building AWS Basic Architecture for super beginners

Explore cloud basics with aws, uncover infrastructure concepts, virtualization, and why aws offers over 200 services, global data centers, ec2, vpc, storage, and immediate, on-demand access.

Learn how infrastructure combines hardware and software to deliver servers and databases, and how the cloud lets you temporarily rent this infrastructure over the internet.

Explore why AWS remains the clear leader in cloud computing, holding about 30% market share and rapidly launching new services fueled by strong research and development investment.

Explore how AWS combines compute, networking, and storage services like EC2, ELB, RDS, VPC, Route 53, and Lambda to build scalable architectures and easy deployments.

Explore AWS storage, database, and networking services, including S3, EBS, EFS, Glacier, RDS, Aurora, DynamoDB, ElastiCache, Redshift, VPC, CloudFront, Route 53, Direct Connect, and Storage Gateway.

Explore essential AWS services for identity management, security, governance, and cost control, including IAM, single sign-on, KMS, CloudWatch, CloudTrail, and migration tools like DMS and Snowball.

Explore AWS services for application development and data analysis, including API gateway, SNS, SQS, and CloudWatch. Use CloudFormation, Elastic Beanstalk, Step Functions, and ECS to automate infrastructure and deployment.

Explore how virtualization underpins cloud services, enabling server, storage, network, and desktop virtualization with hypervisors and containers like Docker, and how software defined infrastructure enables flexible, secure, and cost-efficient IT.

Explore cloud basics, including on-demand self-service, broad network access, resource sharing, scalability, and measurability as you borrow infrastructure, middleware, and applications via IaaS, PaaS, and SaaS.

Master AWS global infrastructure concepts by examining regions, availability zones, and edge locations; learn cross-region replication, Direct Connect, and content delivery with CloudFront.

Learn AWS pricing through pay-as-you-go models, data capacity and request charges, data transfer out, and regional variation, with volume discounts and a 12-month free tier.

Set up your AWS account with IAM users, MFA, and password policies. Use the management console and AWS CLI to manage EC2, CloudTrail, and billing alerts.

Navigate the AWS management console, log in, and use the EC2 console to launch an instance with an AMI, instance type, storage, tags, and security group; switch regions like Tokyo.

Explore the AWS CLI as a command-line tool to interact with AWS services, including S3, with examples like aws s3 ls and bucket creation, alongside management console options.

Explore AWS identity and access management basics, including IAM users, groups, policies, and roles, to grant EC2 and S3 access. Emphasize root account safety, MFA, and monitoring using IAM tools.

Increase authentication security with day one settings: enable MFA with Google Authenticator, enforce a password policy, create an IAM user, enable CloudTrail, and set billing alerts.

Learn to secure AWS by using IAM in the management console to enable MFA for the root account with Google authenticator, scanning a QR code and entering six digit passcodes.

Learn how to change the AWS IAM password policy from the dashboard, setting rules for length, uppercase letters, numbers, and expiration options, then save changes to enforce company security.

Create an IAM user in the AWS management console, assign administrative rights via the IAM policy, and log in as that user to begin hands-on operations.

Create an IAM user in AWS from the root account, enable both console and programmatic access, set MFA and administrator rights, and manage credentials with tags and access keys.

Create an IAM group named admin, attach administrator access, and add users to the group to apply permissions for multiple users; sign in using the console link and username.

Learn to enable CloudTrail to log AWS actions for root accounts and IAM users, store encrypted logs in S3 via KMS for long-term retention, and export to CloudWatch Logs.

Set up CloudTrail on the management console, create a trail named Udemy-admin-log, and configure an S3 bucket for long-term log storage with optional encryption, log file validation, and alerts.

Learn to set up an AWS billing alarm with CloudWatch, receiving alerts before costs exceed thresholds, by navigating the billing dashboard and root account permissions.

Set up billing alarms and alerts in CloudWatch using Cost Explorer and Budgets to monitor spending. Use the root account to grant IAM access to billing information by adjusting settings.

Set up a CloudWatch billing alarm to monitor estimated charges, using a six-hour average and a static threshold of $100, with email notifications via an SNS topic.

Learn to configure VPCs and subnets, deploy a two-tier WordPress site on EC2 with a private MySQL, and enable multi-AZ redundancy, auto scaling, Route 53, S3, and CloudFront.

Explain how the internet connects clients and servers, from URLs and IP addresses to packets and protocols, and how http transfers html over the web.

Explore the fundamentals of IP addresses, including IPv4 and IPv6, global versus private addresses, and how NICs and DHCP assign private IPs within a VPC.

Explore subnet masks and CIDR to define private network ranges, configure slash 16 and slash 24 blocks, and segment AWS VPCs into public and private subnets.

Learn how a VPC creates a logically separated network with subnets, CIDR ranges, route tables, and gateways, enabling internet access and on-premise connections.

Build a VPC across two availability zones with four subnets—public and private in each AZ—using the wizard to configure routing to the internet gateway and a NAT gateway.

Create a VPC with public and private subnets in the AWS management console, configure subnets, route tables, internet gateway, and a NAT gateway with an elastic IP, enabling DNS hostnames.

Create a public subnet by adding a subnet in another availability zone and configuring its route table to route traffic to an internet gateway. It defines public and private subnets.

Create a public subnet in availability zone c for the Udemy VPC, attach it to the internet gateway via the route table, and verify internet access.

Create a private subnet in 10.0.0.0/24, attach a NAT gateway in the public subnet, update routes for internet access, then delete NAT gateway and elastic IP address to avoid fees.

Explore how communication protocols and the OSI and TCP/IP models organize internet exchanges, from http, https, and smtp to ports, with layer-specific rules for email, web, and applications.

Explore how security groups control EC2 instance communication by protocol and IP, and how network ACLs regulate subnet-wide traffic, with stateful versus stateless behavior and inbound and outbound rules.

Configure network access control lists with a hands-on demonstration, creating and setting up a new acl while verifying existing settings and enabling appropriate protocol communication.

Configure network ACLs in a VPC by creating a custom ACL, applying inbound and outbound rules, and attaching it to subnets to enable SSH, HTTP, and HTTPS.

Learn how servers power web services, configure EC2 instances, and deploy Apache, MySQL, and WordPress on AWS, using public key authentication and connections.

Explore ec2 basics: launch virtual servers in minutes with pay-as-you-go ami options, choose instance types and families, and attach storage with ebs for scalable cloud compute.

Launch a Linux-based EC2 instance on a public subnet, install Apache, then launch a private subnet instance for MySQL, and set up WordPress across both, using the AWS Management Console.

Launch an ec2 instance from the aws management console, selecting a linux ami on a t2 micro, and configure vpc, subnet, security group, and storage.

Discover how public key authentication uses a private pem key and a public key on an EC2 instance to securely access and verify your server.

Learn the Secure Shell protocol to securely connect to a Linux EC2 instance. Use an ssh client and the login command ssh -i keyfile user@host on port 22.

Connect to the EC2 instance via SSH using the downloaded key. Install Teraterm on Windows to access the instance IP, and connect from the Mac terminal using the key.

Connect from a Windows PC to an EC2 instance by installing terror term, downloading version 4.1.5 from the official site, and launching the program.

Connect to an ec2 instance with teraterm on windows, using ssh and a private key, copy the public ip, then verify connectivity and security group settings.

Learn to access an ec2 instance from a mac by moving the pem key to a secure folder, setting permissions, and connecting with ssh as ec2-user.

Set up an Apache web server on a Linux EC2 instance by connecting, updating software, installing Apache, and creating a website to display.

Launch a Linux EC2 instance in the private subnet, install MySQL as the database server, and enable the web server to access it via a NAT gateway.

Launch an EC2 instance as a private subnet database server using Amazon Linux 2, t2 micro, with no public IP and MySQL port 3306 open via a new security group.

Set up an EC2 private subnet as a MySQL server and access it through a public subnet bastion server. Configure keys and a NAT gateway.

Configure a NAT gateway in the public subnet, assign an elastic IP, and update the private subnet's routes to pass traffic via the gateway, then remove it to avoid charges.

Access public and private subnet EC2 instances via teraterm to install the MySQL community server with yum. Explore a two-tier architecture for web data storage on a MySQL server.

Remove the NAT gateway to stop charges after setting up a two-tier architecture by deleting the NAT gateway in the VPC, then release the elastic IP address.

Install and configure PHP and MySQL on Amazon Linux to set up the LAMP stack, including PHP 7.2, MySQL, and enabling auto-start on EC2.

Install WordPress on a LAMP stack by configuring an Apache server on an EC2 instance in a public subnet, deleting existing index.html, and enabling httpd to start on boot.

Set up a MySQL database on an EC2 instance for WordPress, log in with a temporary password, create the Udemy database, and grant privileges to the Udemy user.

Configure a MySQL database on an EC2 instance by logging in with the temporary root password, changing it, creating the Udemy database and Udemy user, and granting WordPress access.

Install WordPress on an EC2 instance, download with wget, extract with tar, move WordPress into the var/www folder, set ownership and permissions, and restart the httpd service to apply changes.

Install WordPress on the EC2 instance, download the latest WordPress package, unzip it, move the files into /var/www/html, grant Apache ownership, and restart the httpd service.

Set up WordPress on an EC2 instance, connect to a MySQL database, and configure site title, user credentials, and email to complete the WordPress installation.

Launch WordPress on an EC2 instance by configuring a MySQL database and user. Paste the public IP to open WordPress, set the site title Udemy, and log in.

Explore how domains, URLs, and DNS work, including name resolution and the DNS hierarchy, and learn to register and manage a domain with Route 53 or an external vendor.

Set up a dns server with Route 53, link the ip to your domain, and display your website from the url using the new Route 53 console.

Learn how DNS translates domain names to IP addresses through hierarchical resolution from root to top-level to each next name server, guided by resolvers and name servers.

Explore Route 53, an authoritative DNS service from AWS for domain registration, DNS routing, and health checks, using hosted zones and a variety of routing policies.

Register a domain with Route 53 on AWS, review the name server resolution, and create a hosted zone to map the domain to your web server IP.

Check your freenom domain status and DNS registration, create a public hosted zone in Route 53, route to your EC2 IP with a simple record, and update Freenom name servers.

Explore how databases store, organize, and manage data through CRUD operations, transactions, and the acid properties, including commit and rollback, while distinguishing storage from database and preview relational models.

Explore how relational databases store data in tables with keys and relationships, as RDBs managed by RDBMS using SQL, and compare row oriented with column oriented storage.

Explore aws rds to deploy managed relational databases with sql engines such as mysql, postgres, oracle, or aurora, and learn about multi-az failover and read replicas.

Migrate WordPress from an unmanaged EC2 MySQL to a managed RDS setup in a two-tier architecture with a separate data layer, then switch WordPress to RDS.

Learn to configure an RDS MySQL instance by creating a subnet group with private subnets across availability zones, and review default parameter and option groups for secure, initial setup.

Use the standard rds mysql setup in the udemy vpc, with subnet group udemy, mysql version 8.0 on a single free-tier t2 micro, storage auto scaling, and no multi-az.

Configure security groups to manage traffic between an EC2 instance and the RDS database, with inbound port 306 rules and per-instance or per-group access safeguards.

Configure the RDS database security group to restrict access so only the web server security group can reach the MySQL port by editing inbound rules.

Switch WordPress database to MySQL and implement a two-tier architecture across two subnets, then delete the wp-config.php and recreate the Udemy database and the Udemy user.

Access the EC2 instance via Teraterm, delete the wp-config.php file as root with sudo, and prepare to reconfigure the database in the next lecture.

Set up your WordPress database on RDS by connecting from EC2, creating the Udemy database and user, granting privileges, and preparing WordPress for installation.

Set up WordPress with RDS by configuring the instance, entering database credentials, copying the database endpoint, and completing the WordPress installation and login.

Configure S3 as WordPress image storage and review the architecture for image delivery through S3. Create an S3 bucket to streamline data access and reduce storage costs.

Explore Amazon S3 as unlimited object storage using buckets and objects, with public access controls, versioning, and tiered storage classes for global distribution via CloudFront.

Create an s3 bucket for WordPress images, create an IAM user for WordPress access, install a WordPress S3 plugin, and configure EC2 software while disabling block public access for demonstration.

Create a new S3 bucket in the AWS management console, set the region, disable block public access, and upload an image for WordPress to access.

Set up an S3 bucket for WordPress, create an IAM user with access, install the Offload Media Light plugin, and configure libraries to enable image upload to S3.

Create an IAM user named WordPress S3 with programmatic access, grant Amazon S3 full access, and generate access keys to let WordPress access the S3 bucket from the management console.

Access the WordPress admin on the EC2 web server, install and activate the Offload Media Light for Amazon S3 plugin, then proceed to the next EC2 setup lesson.

Set up a web server on EC2, install php-xml and related packages, remove and reinstall the library web page, install tools to upload images to S3, and restart Apache.

Configure WordPress to access Amazon S3 by editing wp-config.php, inserting your access key and secret key, and selecting the S3 bucket via the offload media plugin.

Show how to save WordPress images to S3 by uploading an image from the Hello World page and updating the post, proving storage in the S3 bucket.

Explore redundant AWS architectures by configuring ELB and autoscaling, review RDS multi-az failover concepts, and understand the theory behind multi-az deployment and its cost considerations.

Configure a multi-az RDS in the AWS management console using a production template, t2 micro burstable classes, and general purpose SSD with a standby instance in a different subnet.

Learn how elastic load balancer distributes traffic across multiple EC2 instances, performs health checks, and supports ALB, NLB, and CLB for scalable, available AWS architectures.

Demonstrates building a multi-AZ setup by creating an AMI from an existing EC2, launching a second instance in another AZ, and configuring balanced availability before a load balancer.

Duplicate an EC2 instance across a different AZ using an AMI to create redundancy, then launch a new web server in the same VPC and verify WordPress on both.

Create a target group for EC2 instances, configure a load balancer to distribute traffic to two web servers, and set health checks and https plans for future security.

Create an application load balancer for the internet and assign it to two availability zones. Configure security groups, listeners, and a target group to route traffic using the DNS name.

Configure Route 53 to point the domain to the ELB, select the appropriate region and load balancer, and verify traffic is distributed to both EC2 instances.

Explore AWS auto scaling basics for EC2, including horizontal and vertical scaling, target group setup, launch templates, and auto scaling groups, with scaling policies, health checks, and CloudWatch integration.

Set up auto scaling for the target group by creating a launch configuration or template, then establish the auto scaling group with thresholds to launch EC2 instances.

Create an auto scaling group from the management console by configuring a launch configuration with a chosen AMI, instance type, and security group. Explore launch templates as an optional alternative.

Attach two existing EC2 instances to the auto scaling group and set the termination policy to newest instance to preserve older ones, then adjust desired capacity and grace period.

Set up CloudFront to deliver S3-hosted images, encrypt communications with ACM SSL/TLS certificates, and configure HTTPS for WordPress, improving global delivery and performance.

Learn to issue and validate SSL/TLS certificates with AWS Certificate Manager, activate via Route 53, and deploy through CloudFront to encrypt communications; ACM certificates can’t be installed on EC2 instances.

Learn how to issue an SSL/TLS certificate with ACM, verify via DNS validation using Route 53, and apply the certificate to a CloudFront web distribution in Northern Virginia.

Learn how CloudFront uses global edge locations to deliver content from an origin server, caching at the edge with TTL and cache-control controls.

Configure a CloudFront distribution on AWS with an ACM certificate and S3 origin, apply it to your domain, and deliver WordPress content through CloudFront.

Configure a CloudFront web distribution from the AWS management console, enable restricted S3 bucket access with an origin access identity, and tune cache settings and SSL for content delivery.

Configure a CNAME in Route 53 to map your CloudFront domain to a custom domain. Create a content subdomain record using quick create, completing the Route 53 setup.

Set up WordPress on an EC2 instance and configure image delivery through Amazon CloudFront using the WP Offload Media Lite plugin, with a custom subdomain content.udemy.test.