Summary: https://www.udemy.com/course/aws-certified-cloud-practitioner-new/learn/lecture/20260634
Infrastructure as Code (IaC) Services
- AWS CloudFormation (CFN): JSON/YAML templates, AWS-native IaC service
- AWS CDK (Cloud Development Kit): AWS infrastructure library imported into your code
- Can define cloud infrastructure using a popular programming language (JavaScript/TypeScript, Python, Java, .NET)
- Code “compiled” into a CFN template
AWS Elastic Beanstalk (EB)
Ref: https://www.udemy.com/course/aws-certified-cloud-practitioner-new/learn/lecture/20056068
- 🔧 PaaS (Platform-as-a-Service)
- Intended for developers → deploy your code, without managing infrastructure
- Creates underlying AWS infrastructure (EC2 instances, ASG, ALB, RDS…), but it's all managed by EB
- Many programming languages supported, as well as Docker images
- Code deployed consistently with a well-known architecture (e.g. 3-tier Web App Architecture with ALB + EC2 + RDS)
- EB (AWS) manages:
- Instance OS & configuration
- Performing deployment strategy
- Capacity provisioning
- LB and auto-scaling
- App health monitoring & responsiveness
AWS Systems Manager (SSM)
Ref: https://www.udemy.com/course/aws-certified-cloud-practitioner-new/learn/lecture/20056088 ; https://www.udemy.com/course/aws-certified-cloud-practitioner-new/learn/lecture/29102378 and https://www.udemy.com/course/aws-certified-cloud-practitioner-new/learn/lecture/40515858
- 🔧 Manage systems at scale
- Hybrid service: systems can be EC2 instances and/or on-premises servers
- Support for many OSs: Linux, Windows, MacOS, RaspberryPi OS
- 💡 SSM = Simple Systems Manager (The “Simple” was dropped off from the name a while ago, but “SSM” persists)
- To register a system/server into the SSM Fleet Manager, must install SSM Agent in system
- Agent installed by default in Amazon Linux AMI & some Ubuntu AMI
- Suite of 10+ products for managing systems. Some important ones:
- Automate updates & patching for compliance
- Run commands across an entire fleet of servers
- SSM Session Manager: launch an SSH terminal in server without configuring SSH
- Enhanced security: No SSH access, bastion hosts, SSH keys, or exposing port 22
- Enhanced auditing: every session can be logged to S3 or CWLogs
- SSM Parameter Store: store param configurations (environment variables, secrets…)
AWS Code* Family Services