AWS SysOps Training

System Operations on AWS is designed to teach those in a Systems Administrator or Developer Operations (DevOps) role how to create automatable and repeatable deployments of networks and systems on the AWS platform. The course covers the specific AWS features and tools related to configuration and deployment, as well as common techniques used throughout the industry for configuring and deploying systems.

Seven best practises for building systems with AWS:

Design for failure and nothing fails

• Avoid single points of failure
• Assume everything fails and design backwards

Loose coupling sets you free

• Design architectures with independent components
  • The more loosely they’re coupled, the bigger they scale
  • Design every component as a black box
  • Load balance clusters
  • Use a queue to pass messages between components

Implement elasticity

• Elasticity is a fundamental property of the cloud
• Don’t assume the health, availability, or fixed location of components
• Use design that are resilient to reboot and re-launch
• Bootstrap your instances
  • When an instance launches, it should ask “Who am I and what is my role?”
  • Favour dynamic configuration

Build security in every layer

• Security is a shared responsibility. You decide how to:
  • Encrypt data in transit and at rest
  • Enforce principle of least privilege
  • Create distinct, restricted Security Groups for each application role
    • Restrict external access via these security groups
• Use multi-factor authentication

Don’t fear constraints

• Need more RAM
  • Consider distributing load across machines or a shared cache
  • Better IOPS for databases?
    • Instead, consider multiple read replicas, sharing, or DB clustering
• Hardware failed or config got corrupted
  • “Rip and Replace” – Simply toss bad instances and instantiate replacement

Think parallel

• Experiment with parallel architectures

Leverage different storage options

• One size does not fit all
  • Object storage
  • Content delivery network/edge caching
  • Block storage
  • Relational database
  • NoSQL

Simplify using AWS services in your applications with an API tailored to your programming language or platform such as Browser, iOS, Android, Java, .Net, Node.js, PHP, Python, Ruby, Go, C++, AWS Mobile SDK, AWS IoT Device SDK etc.

Controlling of AWS services from the command line and automate service management with scripts by AWS Command Line Interface(CLI), AWS Tools for PowerShell, AWS SAM Local, Amazon BenStalk, Amazon EC2, and Amazon EC2 Container Service.

IAM Overview
IAM User Administration  
IAM Groups  
IAM User Permissions  
MFA  Securing
AWS Master Account

Cloud Deployments Overview  
Deployment with Auto Scaling  
Blue / Green Deployment  
Version Updates with Auto Scaling  
Overview of the technologies for automated deployment CloudFormation: Terminology  
CloudFormation: Structure of the template  
CloudFormation: Maintaining Templates  
CloudFormation: Working with Stacks  
CloudFormation: Ref functions  
CloudFormation: Parameters  
CloudFormation: Mappings  
CloudFormation: Resources  
CloudFormation: Init  
CloudFormation:Init and User Data  
CloudFormation: WaitCondition  
CloudFormation: Outputs  
CloudFormation: Errors  
CloudFormation: Demo  
CloudFormation: Creating Base templates
CloudFormation: Troubleshooting templates Lab

Introduction to the section  EC2 volume/storage types
EC2 EBS snapshots overview  
S3 overview  
Glacier overview  
Concepts of Data lifecycle on AWS  
Some storage limits important to know  
How to work with EBS volumes  
EBS RAID  
EBS Snapshots in details  
Using Amazon S3 in details  
S3 access (with console demo)  
Create IAM group policy with Policy Generator  
S3 versioning  
S3 CORS  
S3 Reduced Redundancy storage  Using Amazon Glacier Storage Security
EBS and encryption  
S3 and encryption  
Storage troubleshooting  
Storage Pricing

Overview of Cloud Monitoring  
CloudWatch: key concepts
CloudWatch: Logs  AWS CloudTrail overview  
Third-party Monitoring apps  
Cloudwatch metrics  
CloudWatch
Log analysis
Cloudtrail logs
Monitoring and Security  
Troubleshooting
Quick quiz  Lab