---
title: 'AWS Solutions Architect Full Course in 4 Hours | AWS Course From Beginner to Advanced | Simplilearn'
source: 'https://youtube.com/watch?v=_7ty_1VwX8k'
video_id: '_7ty_1VwX8k'
date: 2026-10-25
duration_sec: 13045
channel: 'Simplilearn'
---

# AWS Solutions Architect Full Course in 4 Hours | AWS Course From Beginner to Advanced | Simplilearn

> Source: [AWS Solutions Architect Full Course in 4 Hours | AWS Course From Beginner to Advanced | Simplilearn](https://youtube.com/watch?v=_7ty_1VwX8k)

## Summary

This is the first session of a comprehensive AWS Solutions Architect certification course that introduces cloud computing concepts and AWS fundamentals. It covers core AWS services, including compute (EC2), storage (S3, EBS, EFS), and networking (VPC), and explains key architectural components such as regions, availability zones, and IAM for security and access control.

### Key Points

- **Cloud Computing Defined** [04:19] — Defines cloud computing as on-demand remote availability of resources like computing power, data storage, and networking without direct user management.
- **What is AWS?** [07:39] — Identifies AWS as a leading provider with over 200 on-demand services, using a pay-per-use model.
- **Why Use AWS?** [08:08] — Explains features: reliability, scalability, security through defense in depth, cost effectiveness, and high demand for professionals.
- **AWS Infrastructure: Regions and AZs** [26:00] — Outlines regions as geographical areas with multiple AZs, AZs as collections of data centers, and data centers with thousands of servers.
- **Core Services Overview** [43:25] — Covers core service categories: compute, storage, database, and networking, emphasizing their roles in architecture.
- **EC2 Explained** [47:05] — Provides an analogy comparing EC2 to a virtual machine on rent, highlighting its elasticity and pay-as-you-go model.
- **Storage Services: EBS, EFS, S3** [52:20] — Distinguishes between storage types: EBS (block, persistent), EFS (file, shared), and S3 (object, unlimited).
- **Account Types: Root vs IAM** [01:06:49] — Explains the difference between root and IAM user accounts, recommending IAM users for daily tasks to avoid security risks.
- **IAM Roles and Delegation** [01:51:05] — Describes IAM roles as temporary credentials, using the Spider-Man analogy, and highlights cross-account access as a key use case.
- **EC2 Instance Types** [02:44:24] — Lists EC2 instance families (general purpose, compute optimized, memory optimized, etc.) and their use cases.
- **EC2 Features: AMI, Placement Groups, and Beyond** [02:54:46] — Discusses AMI, placement groups (cluster, partition, spread), metadata, and purchasing options like saving plans, reserved, spot, and dedicated hosts.

## Transcript

is important, but knowing how to design the right architecture is even more important. The real question is, can your cloud solution handle traffic, stay secure, reduce cost, and recover quickly when something goes wrong? Welcome to
this session on AWS solutions architect certification training. Designing secure and scalable cloud solutions. In this course, we'll understand how AWS helps businesses design, deploy, and scale
businesses design, deploy, and scale cloud solutions. We'll also explore AWS fundamentals and the shift from onremise to cloud infrastructure. Now let's look at the agenda for this course. We'll learn AWS core concepts like regions,
availability zones and pricing models and explore compute services like EC2. Next, we'll cover storage services like S3, EVS, and EFS and networking concepts
including VPC and subnets. We'll also learn about load balancers, content learn about load balancers, content delivery, and AWS security using AM roles, policies, and permissions. We'll explore databases, serverless,
monitoring, automation, and containers, and learn to design scalable, secure, and cost-effective AWS solutions. Before we begin, just a quick note. AWS solutions architect certification training. It's aligned with the AWS
training. It's aligned with the AWS solutions architect associate exam. This course helps you master AWS architectural principles and services architectural principles and services like AM, VPC, EC2, EBS, and more. You'll
learn to design, plan, deploy, and scale AWS implementations using more than 70 cloud computing services and Amazon designated best practices. It includes 50 hours of e-learning content, 16 live demos of AWS services, and three
simulation exams. You'll also get three realtime industry projects, integrated realtime industry projects, integrated labs, and 247 learner support. By the end, you won't just understand AWS services, you'll know how to design
cloud solutions that solve real business problems. Before we begin, here's a quick question for you. Question one, what does AWS stand for? Option A, what does AWS stand for? Option A, Amazon Web Services. Option B, advanced
web software. Option C, automated website system. Option D, application >> World's number one boot camp and even I welcome you to AWS solution architect
welcome you to AWS solution architect associate course. Right. So myself, Muzanil Daki, I have total 11 years of experience in teaching and training. Right now I have three certification. Solution architect professional level
certification, solution architect associate level certification and sysops administrator associate level certification. So I'll be your trainer for entire these number of course. Right? So for total AWS solution
architect associate course I'll be the trainer who is going to handle all your sessions. Right? Let's start with introduction to AWS. Before that first introduction to AWS. Before that first question, what is cloud computing? So
question, what is cloud computing? So folks, cloud computing is an ondemand folks, cloud computing is an ondemand remote availability of resources such as computing power, data storage and networking without direct user
networking without direct user management. So folks here one more definition to understand in a better way from my end right see cloud computing is from my end right see cloud computing is all about ondemand delivering IT
resources over the internet. Right? So what kind of a resources here it's all about on demand that means whenever it is required at that time you are going to use that and you are going to pay for it right so what kind of a resources
like computing where you are going to process the data then where you are going to store the data right then where you are going to provide a security networking and that to without direct user management what exactly it means
someone is there without direct user management means someone is there behalf of you to manage your data. Are you getting the point? Someone is there behalf of you to manage your data. Let me take one simple example. Right? Let
me take one simple example. Electricity board. Electricity board where you are paying for how much you are consuming the power. You are not maintaining any the power. You are not maintaining any infrastructure there. Right? Someone is
there to manage that electricity board. But here how much you are consuming how much you are consuming the whatever the energy whatever you have the resources everything you are going to pay for it right you are not directly managing the
infrastructure electricity board you are not managing that just how many that you are going to pay for it like this in cloud computing also you are not going to manage your infrastructure just
based on that you are going to pay for it. Right? Electricity board you can compare with the cloud computing concept. Right? Now here the companies that provides uh like companies that provide these services are called cloud
providers. So right now folks from my end AWS is one of the cloud provider. Do you know any other cloud provider right now in the market? Any other cloud now in the market? Any other cloud provider in the market? AWS, GCP,
provider in the market? AWS, GCP, Alibaba, Azure, Oracle, IBM these all are the cloud provider. These all are the cloud provider. So these all are even if you make the list there are lot of cloud providers are available right
and these services are accessible over the internet. So how you are accessing this connect cloud services by using our internet connectivity right now cloud providers ensures large scale management of these services. See when it come for
the cloud providers, cloud providers are going to provide a large scale of a management of the resources right not only we are restricted to only large scale management. Even cloud providers they'll provide a service to startup
also and even individuals also. It's up to you how you are going to utilize to you how you are going to utilize that. Right now here now we are going to discuss about one of the cloud provider that is AWS. What is AWS folks? AWS
that is AWS. What is AWS folks? AWS stand for Amazon Web Services. It's a leading cloud provider right now in the market which offers over 200 ondemand cloud services and these services are extended to individuals, companies,
government based on a pay-per use model. Right now, why should I go for AWS? What are the features I'll get if I'm going to AWS? First of all, reliability. See,
if you have huge amount of a data, even if you have low amount of a data, the performance will be always consistent, right? If you have huge amount of a data, even low amount of a data, the performance will be consistent and even
efficient, accurate, right? That is the power of one of the even you can say that one of the feature of AWS then scalability let us consider I have one scalability let us consider I have one application right so for specific
duration I'm getting huge amount of a traffic at that time here automatically my application resources will be increased right when I am not expecting any traffic for my application automatically the resources are
decreased so this part is about scalability now Security part. How I can make my cloud environment secure. For this we have a concept called defense in
depth. Defense in depth where a security will be provided at different different layer. Let us consider this is layer 1. This is layer 1. This is layer two. Right? This is layer three. So now if I want to make my cloud environment
secure. So security will be provided at different different layer. Right? This layer three. So what kind of a security I can provide that I'll discuss in future classes right cost effectiveness. So as you know that pay as you go model
how much you are consuming based on that you are going to pay for it right now if I talk about the market trends right now AWS professional salaries right the average salary for AWS professional salary is like $160 $60,000
and there is a huge demand of AWS professionals right 60% of a cloud computing job requires AWS related skill now I hope you people are heard almost like majority of the companies right now they are migrating they're migrating
from onremism to AWS environment right not only AWS might be the any cloud but if I talk about the AWS right now which is leading right so all the organization
now they are shifting right migrating from on-romises to AWS environment so everywhere AWS professionals are required and the condition is the person should be skillful again I'm repeating a person should be skillful that means you
should know how to survive in the AWS environment being a solution architect you are going to provide a solution what kind of a instances what kind of a databases what kind of a storage you are using for your organization it's your
duty to provide cost optimized solution to the organization or a client right now what are the skills are covered in this course virtual private Red cloud storage services security and IM. IM stands for identity and access
stands for identity and access management then container services. So course? Might we have a question? Why should I go for solution architect? As I clearly specified just now in a single line all the organizations are migrating
from on premises to AWS. So in that situation solution architect is must right as per the client requirement whether I am providing a solution or not I should meet the requirement of a client right I should satisfy all the
requirements of a client so then only I'm a solution architect right so even if you adhere on the requirement of client that is not sufficient and make
sure that what you are designing the architecture it should be secure it should be resil land it should be high performing and that two very very very important is cost optimized architecture because cost is very important factor
because cost is very important factor right so anyone see might be anyone can provide the solution hey I know about the AWS services let us consider one ABC person is there who is having some knowledge about the AWS hey I know that
how to launch my EC2 instances fine launch your EC2 instance so do you know launched if you are aware about That's that's really really well and good. But do you know for which workload which instance type should be used? What kind
of a storage should be used? Right? So who is going to provide that kind of a solution? It's a solution architect because solution architect is the person who is going to provide a solution for your workload. Right? What kind of a
working? Are you working with graphical related? Are you working with batch processing? Are you working with any floatingpoint calculation? It's up to you. Like being a solution architect,
you are going to decide that, right? See, solution architect, one more important point, solution architect is not only providing a new entire architecture. They're responsible to review the existing architecture also,
existing solutions also. So what they can do? They can review they can review suggested so we have designed our architecture. No being a solution architect even if the organization is
now migrated it's your duty being a solution architect you have to review that right then you can improve the existing solution how I can improve like based on the what kind of instances storage databases networking security
there are lot of things are there any loopholes are there being a solution loopholes are there being a solution architect you have to identify right now learning path so folks in this course we We have 10 modules. We have 10 modules.
You can say 10 modules or 10 lesson both are fine. Okay. Now what I'm doing course introduction then AWS core concepts compute related features storage services VPC networking content delivery then databases security and IM
serverless and application services monitoring and automation and finally container services. Right? So these are a total 10 models what we have for solution architect. Now course component. So folks in this course there
are different components are available in that the first one is lesson end project. So what is this lesson and project? How many modules we have? We have 10 lessons right. So first and second are basics. So now if you
complete module number three which is relevant to compute which is relevant to compute. Right? Now once you complete module number three called compute based on this module you will get one lesson end project like you will get one mini
project where you are going to perform after this session and if you get any difficulty I'll be there to help you for this okay once you complete this is for module number three now module number four is storage right so once you
this you are going to perform one lesson and project right so these are like mini projects what you are going to perform after the session then we have course end project this is mandatory to unlock your simple learn certification right as
ma'am clearly specified at the last day of a session out of these two project I'll discuss one project with you people how to submit and what are the task you demonstrate about that how to perform
that task right and the very interesting and very important called assisted practices assisted practice This is is something let us consider we are working with the module number three called compute right in this compute module
there is a topic called AMI if there is a topic called AMI based on this one assisted practice like lab exercise will be there you are going to perform in the session in front of me like first I'll demonstrate the task once my
demonstration is done you are going to perform the task in front of me and sometime I'll give the assignment after the session also So you have to perform that I'll provide like I'll provide some exercise or assignment what you can
exercise or assignment what you can consider right now knowledge check. So number three which is relevant to compute right. So based on this module you will get some MCQ questions multiplechoice questions in this session
I'll take this. So you have to answer for these questions right now course and assessment. So this is first factor and this is second factor. If you want to learn certification these are the mandatory points you have to complete
first course and project then course and assessment this is also I'm going to discuss in LMS right and the very important part ebooks a material section important part ebooks a material section everything all about these all are like
all about the material everything about this course will be available in ebooks this course will be available in ebooks that I'm going to show you in LMS okay lesson project is also mandatory It's up to you. This is for knowledge purpose
pin. This is for knowledge purpose. Okay. No need to submit this. But if you complete you will get the confidence. So based on what we have completed the module. So I completed this particular mini project. You will get confidence in
this. Okay. Now exam format. So usually folks I'll not discuss about this exam format about solution architect C3 because at the last day I'll discuss this. But if you want I'll just uh have a overview on this right. So C3 is the
course 65 MCQ questions 2 hour 10 minutes of a time 130 minutes and this exam can be taken in English, French, German, Italian, Japanese, Korean, Portuguese and simplified Chinese also.
Right? So usually about this examination in detail I'll discuss at the last day in detail. Okay. how to book examination, how to like uh how to solve question each and everything I'll discuss at the last day of session.
Okay. Yes. This is also like if you talk about the cost in India 150 plus $27 total $177 you have to pay for this exam, right? 20
USD for mock questions and testing like testing center or online proctor. Again, this part is also I discussed at the last day of a session. Fine. Okay. Let me take you to the LMS now. Learning management system.
management system. Where is my LMS? Yes. So I hope folks when you log into your learning management system, are you able to see there is a tab called AWS solution architect associate level course. Okay.
I hope all are able to see this AWS solution architect associate level course. Right. Click on continue learning. Click on continue learning. Right. So first tab is learning track. If you
click on learning track there is a option called self-arning. Self-arning. Right. So self-arning as I clearly specified in the theoretical part like in the slides. These are the pre-recorded videos by some of the AWS
experts. These are always available. You don't have to download this right because the lifetime access will be available. So no need to download right and it's up to you how you will complete right. So better like whenever you are
also fine but this is also one of the mandatory thing to unlock your simple learn certification 85% of a self-arning should be completed. Now I hope all are attended the session from this live classes only. Are you with me folks? All
are joined the session from this live classes. Very good. That's superb. That's really superb. Right. And the one more important point folks, once our session is complete, right? Let us consider today at 11:00 we are done with
our session. Right? So tomorrow after 24 hours the recordings will be available here in the my classes section only. Again I'm repeating once we are done with uh 24 hours after the session then the recordings are available for you in
my classes section. Just what you have to do if you go to the my classes right which class recording you want just select the date might be you are able to see the date now right today is 3 like 4 5 6 4 5 6 7 8 February month right let
us consider tomorrow you want to check the recording of today just click on 3rd February then you are able to see below that a link will be available for you so you can access anytime from anywhere right now assessment part so Folks, this
part also I'll discuss last week because assessment is mandatory to unlock your simple learn certification. First two tests are there right within these two
test you have to clear at least one. And let me tell you every test carries three attempts. Every test that carries three attempts. Right? So here you have two tests. Out of these two you have to clear at least one. At least one. Then
there is another point to unlock your simply learn certification. Here we have two projects. Out of these two projects you have to submit at least one at least one to unlock your simply learn certification. Right? If you see
here if you click on certificate there are three mandatory things are available. First self-arning should be completed 85%. And project should be submitted. Out of two project you have to submit at least
one project. Out of two test at least one should be clear. Then only your simply learn certification will be unknown. Right? Now this is for certificate part. Now the very important part is material section. Material
section. Here we have a reference material. Let us consider I want what I'm going to perform in this session. Right? Just click on this session. Right? Just click on this download button. You can see here
assisted practices are downloading. You can see once it completes you can see the folder here. Yes, assisted practices 84 MB folder is successfully downloaded in my system like this. Whatever you want, ebooks,
lesson and projects, live guide, lab guide, anything whatever you want regarding the material you can download from here. Right. And the third tab is from here. Right. And the third tab is practice labs. I have the third tab
called practice labs where in simply learn environment where you are going to perform your labs here in the practice lab section just click on this right so once you click on this there is a option called launch lab you can click on this
there is a blue button at the bottom bottom bottom side right bottom side click on launch that's it the remaining part I'll discuss so now folks let me take your inputs Okay folks, let's move on towards the
next module where I'm going to discuss about AWS overview. Right now, so folks in every module you will get
this scenario. Scenario for whom? A solution architect. So now you are a cloud architect in an organization and have been asked to implement a solution have been asked to implement a solution in the AWS cloud. As a beginner in AWS,
focus on AWS core services such as computing, storage, databases, networking services, and even more. You must set up an AWS account and use the
AWS CLI. CLI stand for command line interface to interact with AWS services and resources. Additionally, learn how to securely regulate access to AWS
resources using AWS identity and access management. To achieve this, you will learn a few concepts in this lesson that will help you to find the solution for given scenario. Right now, learning objectives. By the end of this lesson,
you will be able to set up an AWS account. Enabling access to and utilization of AWS services. Configure billing alerts to monitor AWS charges for cost control and budget management. Delegate access using IM roles to
enhance the security permissions management and setup and work with AWS CLA for efficient interaction with AWS services. So folks, these are the learning objectives or you can call it as a outcomes. Once you complete the
module, you are able to answer the questions based on these topics. Okay. So folks, I have one question before going to this. How is my pace? Please feel free feel free to put on your inputs because again and again I'm
repeating it's your session. How is my pace? Whether I'm going too fast, too slow or all good. Okay. See please provide your genuine responses. See again I'm repeating feel free to put down your inputs by taking your inputs
only I can improve the session right. So what I believe taking the inputs after what I believe taking the inputs after this session right I can implement in your inputs within a session so I can implement within a session itself right.
So why should I wait for 24 hours if you put down your input so I can improve within a session itself. Right? So as I can see start with the AWS infrastructure. So what is infrastructure? Can I say that
infrastructure is nothing but combination of software and hardware components. So [snorts] now here I'm talking about the AWS infrastructure. In talking about the AWS infrastructure. In that the first term is region. So what
is region? Now reason is nothing but a geographical location where all the AWS geographical location where all the AWS services are available. Right now folks total 39 regions are available around the world. One more definition for
better understanding you can say that region is nothing but collection of two region is nothing but collection of two or more availability zones. Region is nothing but collection of two or more availability zone. This is also
one of the definition right. This is A1, this is A2 and this is A3 right? So folks do you know how many regions we have in India? First is Mumbai and the
have in India? First is Mumbai and the second one is Hyderabad. Right? So right now total 39 regions are available around the world and that two in India we have Mumbai and Hyderabad two regions right and one more definition what is
region? First region is a geographical location where your AWS services are available. One more definition region is nothing but collection of two or more. Availability zone is nothing but region. Right? So why we are calling it as two
or more? Why not one or more? What is the reason? For high availability purpose. Even if yes backup exactly correct. So here even let us consider correct. So here even let us consider here disaster occur at the A1. Right? A2
will be ready to provide the service. If A2 goes down, A3 will be ready to provide the services. Right? So here folks, what is a now? What is availability zone? Availability zone is
availability zone? Availability zone is nothing but collection of nothing but collection of one or more data centers. Again, I'm repeating folks, what is availability zone? Now availability zone
is nothing but collection of one or more data centers. So every availability zone which consists of one or more data centers. Now might you have a question
centers. Now might you have a question what is data center? Right? So now data what is data center? Right? So now data center is nothing but collection of
Are you with me folks? Can I say that every data center which consists of thousands of servers. Can I say that every data center which consist of thousands of servers? Right? So now you can see here availability zone is
data center. Every availability zone which consist of one or more data centers. Right? Every data centers consist of thousands of server. Now how many availability zones right now we
many availability zones right now we have around the world? Exact value is 123. Right now availability zones are available in India. We have six availability zone. Three in Mumbai, three in Hyderabad. Right now my
question is folks any idea what is the distance between these two availability distance between these two availability zones? The answer of distance between two availability zone is 100 kilometers. Right? So 100 kilometers that means more
than 60 to 70 miles approximate right. So like the distance should be maintained 100 kilometers. See I have one question here why they are keeping 100 kilometers. See they can create within one or two kilometers also. What
between why they are maintaining the distance between two availability zone distance between two availability zone is 100 kilometers for disaster recovery. Exactly correct. See if you maintain 1 kilometer or 5 kilometer right if you
maintain 1 kilometer or 5 kilometer if something went wrong let us consider something went wrong let us consider disaster occur at the A1 that affects A2 also then there is no use there is no matter to maintain the multiple
availability zone if one affect definitely then second is also affected definitely then second is also affected right so if one affect then second is also affected right so if If one affects the second is also affect that is the
reason the standard minimum is 100 approximate that to a 60 m 100 km right so minimum is 100 they are not specified any specific maximum value right minimum it should maintain 100 km a standard value so folks this is all about the
basics of AWS infrastructure do they ask about these in the exam no because this is two simple question right how many how many regions AWS will never ask these kind of a questions Okay. So no need to uh worry about this
but uh make sure that you should be updated for these values because every updated for these values because every day AWS is updating every day AWS is updating right because every day every hour AWS is updating its infra. So the
numbers of region will be changed number of availability zones will be changed number of edge locations will be changed everything will be changed right. So you should be updated but in the examination you will not get this kind of a
questions. Okay. Yes. The same thing you are going to see here for two slides. AWS infrastructure a global cloud infrastructure offers unmatched security broad and reliability as a cloud platform. It features over 200 services
supported by data center worldwide. So just now what I completed what is region? region is a corresponding corresponds to a geographical area housing multiple availability zones. Each availability zone comprises one or
more separate data centers each equipped with sufficient power network setup reliable connection within a distinct zone what we are completed just now for zone what we are completed just now for the region. Now folks, if I am using AWS
infrastructure, right? What benefits I'll get? Right? If I'm using AWS infrastructure, what I'll get the benefits? This is my what I'll get the benefits? This is my AWS cloud. Now, so using this AWS cloud,
what I'll get the benefit first of all, scalability. Let me tell you folks, scalability is one of the major advantage of the AWS infrastructure advantage of the AWS infrastructure because AWS provides the ability to
quickly increase or decrease the resources to your application as per your requirement as per your need. Right? Let us consider for your organization you can manage the cost effectively
while maintaining the performance as well as efficiency. This feature is especially beneficial for the organization. They experience some variable workload. Variable workload means sometimes the traffic will be
high. Sometime the traffic will be low. Right? At that time the scalability is very important. Right? Now reliability. See in terms of reliability folks AWS has this strong track record. The architecture itself designed in a way
that right the architecture itself they are designed in a way that they ensure the high availability and continuous functionality. What it means? It means that AWS can provide the uninterrupted services even in the event of network
failure or any natural disaster. Any natural disaster that is the power of natural disaster that is the power of AWS right now when it come. AWS right now when it come. So folks in security part AWS delivers
high level security through its firewall. There is a new term called firewall. What is firewall? Because some people are from nontechnical background, right? They'll understand what we are talking with the cloud infra term. That
is the reason. I hope you got the point, right? So that is the reason. Otherwise right? So that is the reason. Otherwise I can use a more technical technical what do you call a logical terms also some symbols also right so let them
easily let them understand easily for today we have a first day then we'll go with I can use some diagram also I can use some relationship diagrams also that use some relationship diagrams also that is different but let okay as I can see
discussed about the firewalls yes I'm discussing about this security layer protection layer get of network network Security component protection against Security component protection against malware. Okay. Layer of security.
Gatekeeper of input and output. Filtering incoming and outgoing traffic. Set of rules defined via software. Okay. Network security devices for filtering a traffic. Security layer restricting unauthor data. Controls what network is
traffic in or out. Perfect. It's a security feature where not network can connect with server directly. Check filter in control traffic. Okay folks. filter in control traffic. Okay folks. So firewalls can I say that for better
understanding right for simple I'm using two simple terms let me tell you I'm using two simple words anyone can understand can I say that firewalls are filters which filters your incoming and outgoing traffic simple words right now
there is something called encryption how you will define the encryption term mask of hiding data turning data into unreadable format perfect protected sensor sensitive information encoding data with algorithm perfect abstraction
data with algorithm perfect abstraction yes converting readable data into unreadable format confidentiality so now folks if I more technically now right so can I say that encryption is a process where I'm going to convert from
plain text to cipher text can I say that encryption is a process where I'm going to convert from plain text to cipher text right so this is somewhat technical definition right Now encryption is a process where we are converting from
encoding to decoding format. No sir, this is also not clear. Let me take more simple words. Can I say that encryption is a process where you are converting from readable format to non-readable format. There are three levels of
different like three levels of definitions. Plain text to cipher text, encoding to decoding and even even readable format to non-readable format. readable format to non-readable format. Right? Then yes I am capability IM
identity and access management. So here by using this IM service you are going to decide who can access what you are going to decide by using IM service like Damian. Damian can access S3. Abeu can access uh what do you call EBS EC2
right? Namata can access RDS. Sorup can access KMS. Aishwara can access right. Aishwar can access uh another EC2 or RDS. So you are going to decide as per
your work requirement by using IM you are going to assign the work who can access what you are going to decide by using IM service. Right now performance efficiency. So folks let me tell you performance efficiency is one of the key
performance efficiency is one of the key attribute of AWS. key attribute of AWS because it has the capability to run services efficiently on a cloud platform that can scale according to your need of the traffic scale according to your
requirement of your traffic. Right? So what it means it can handle a high volume of a traffic without disline in a performance. Right? Even it ensure the smooth operations and greater user experience. Right? Now flexibility here
it allows the user to select your preferred operating system. Right? Let preferred operating system. Right? Let us consider uh want Mac operating system. Right? Then Damian want Windows operating system. Then Linux, Fedora.
you want. Then programming language someone want to use.NET, NET, Java, Ruby, Rails, Python, it's up to you, right? Then databases, we have RDS, right? Then databases, we have RDS, Dynamob, Red Shift, Elastic Cache,
databases are available. It's up to you going to decide which database should be used, right? Then finally cost used, right? Then finally cost optimization. So folks, pay as you go
model. How much you are consuming based on that you are going to pay for it. That's it. Right? Now here in this diagram you can see we are increasing agility and reducing the complexity and risk. How? Accelerate time to market. So
folks AWS is providing a solution as per the market requirement. Right? Right now we have a trend like uh even you can call that right now we have a trend of machine learning right artificial intelligence AI. So AWS is trying to
provide a solution with ML and a IML right how to train a models we have in AWS we have a service called bedrock right bedrock is a service which is used in machine learning there are multiple services are available what market is
expecting from you AWS is providing a solution right right now AWS like right now market is pro expecting about a IML artificial intelligence machine learning for that AWS is providing some containerization services like ECS
elastic container services to train a model uh best solution I'm just taking one example ECS with Fargate solution to train a to train a machine right to design models to train models at that time we are using this kind of a service
so as per the market trend what market is expecting from you AWS is providing a solution for this right as per requirement of market now increase innovation now folks your workload infrastructure will be managed by
someone else. This is your cloud now and someone is there behalf of you who is going to manage this infrastructure. Right? So now your task is managed by someone else. So that means here you can focus purely let us consider I'm a
developer who is working in a AWS environment. Right? Being a developer I can think because management part will be taken care by someone else. So being a developer I have to think whether as per the requirement of a client I am
developing my application or not as per the requirement I'm satisfying the client or not as whatever a new things I can add whatever a new features I can add so I'll get the sufficient time to do some innovation idea here innovative
idea here right then scale seamlessly as per the requirement here whenever you are expecting a high traffic or resources you can consume right and when you are not expecting any traffic the resources will be resources will be
scaled out and you can do like you are achieving a cost optimization now optimizing the cost we are reducing the cost how by paying how much you're consuming that is nothing but again pay as you go model right then how we are
minimizing the security vulnerabilities by using defense indepth concept where a security will be provided at different layer layer 1 layer 2 layer three those
who are aware about the AWS term let me tell you at the EC2 level I'm going to use security group right sir so suddenly don't take the question sir what is security group again I'm repeating those who are already aware just here you can
consider level one level two level three right those who are already available let us consider I'm providing a security at EC2 level security groups the knackl subnet level right I'm using nal at subnet level then VPC flow log at VPC
level so at the different different layer I'm providing a security to minimize my vulnerabilities right now folks how I am reducing the management complexity let's discuss and please provide your inputs how I am reducing
the management complexity yeah that's why clearly specified consider level one level two level three those who are already aware just now I given a introduction security at EC2 level security groups knackle VPC level so no
need to worry don't worry about these terms right now consider level one level two level three that's it that's enough now okay yes as I can see there are some input need to not maintain [clears throat] physical data center
okay maintain infra no direct involvement in managing infra see you don't have to worry about managing infrastructure right behalf of you infrastructure that is the reason no need to worry about the management of
infrastructure so By doing this you are reducing a management complexity because management of infrastructure headache is taken by someone else that is AWS. That is the reason we are reducing the management complexity. Right? So this is
all about AWS features and the advantages what I'll get if I'm using AWS infrastructure. [clears throat] So now folks let's move on to the core services. How many of you are observed? I don't know but in scenario a day in
the life of cloud architect they specified some core services architect a day in the life of cloud architect they are specified some core
architect they are specified some core services let's take four storage database next
next compute it's networking so compute networking storage database so here we have few
core services which are available to us so now folks let me tell you one important point here in this module I'm discussing only introduction about core services
So usually what happens in the session let me tell you that also all are very excited to learn everything in a single day right in it happens in every session even if I'm also the participant it happens right so here
now I'm discussing at the introduction level introduction level let me take one example let us consider I'm discussing about storage services as I clearly specified this is introduction only right So now if I'm
discussing about the different storage EBS, S3 then EFS. Sir, what is the difference between S3 and EFS? Sir, why should I use S3 and when should I use should I use S3 and when should I use EFS? Sir, which one is better EVS or S3?
Everything I'll get the question here. So folks, let me tell you here I'll discuss only introduction part because a module number three is completely compute only. Module number four is completely storage only. Module
number five is completely networking only. Module number six is completely database only. So no need to worry when the time comes 100% each and everything I'll discuss. But right now today we have first session let's discuss at
introduction level. Right? So again we'll come back to the details 100%. We we'll come back to the details 100%. We have separate module for this awar
in detail we are going to discuss this so that is the reason first we'll discuss at the introduction level because everyone right so after this we'll go in detail about each and every core services right now let me take you
to the core AWS services here you can see compute see compute storage database analytics networking storage database analytics networking mobile developer tools IoT security
management tools, enterprise applications. Right? So now folks, here I have a one popular core service called compute. Compute service. So what is this compute? How you'll define this term?
Compute is all about processing, right? So compute service which offers secure and resizable computing capacity in the cloud that simplifies the webcale cloud that simplifies the webcale computing for developers. So folks
compute means processing a processing capacity right. So here it's a secure and resizable computing capacity. Resizable means as per the requirement of a client it will increase and dis decrease. So how much amount of a data
you have that will be processed here and that too developer can easily and efficiently they can process the data. Right now let me take one simple Right now let me take one simple comparison. There is a service
comparison. There is a service called EC2. EC2 is one of the popular called EC2. EC2 is one of the popular service of compute. EC2 means a server in cloud environment. Server in cloud environment. Right? So
now elastic compute cloud. EC2 stands for elastic compute cloud. No need to go in depth. Just consider EC2 is one server in cloud environment. Okay. Let me take one scenario. So now folks I have one onremises server. Onromises
server. Again I'm repeating this is my onromises server and this is my EC2 instance. Okay. A server in cloud platform. Okay. Let me do the comparison. And now folks, my scenario is I'm your client and all the 52
participants are my network engineers. Again, I'm repeating folks, be ready for this scenario. I'm your client client and you all 52 participants are my network engineers. Right? So folks, I don't know anything. I want to design
one web server. So how you will take up this challenge So how you will take up this challenge understanding the requirement
you are ready with the configuration also how much do you how much time you want okay 5 to 10 days depending on scale okay let us consider one week fine one week okay fine no based on hardware collection fine at max one week okay
fine okay let's consider leader my server is ready and you have deployed the server and it's available for me and now folks you have designed the server for 500 people you have designed a server for 500
people but there is sudden hike in a traffic and thousand people are hitting to the server what will happen to the server what is the solution additional processes we can extend the hardware we are discussing in onremises environment
right exactly horizontal scaling you have to do or vertical scaling you have have to do or vertical scaling you have to do. You have to add some additional have to add some additional configuration increasing the hardware
configuration increasing the hardware requirement again. Yes. Then again expensive cost you have to add like again there is a investment again there is a investment you have to pay more. Right? Now let us compare with our AWS
cloud environment. This is my AWS cloud environment. Right? This is my AWS cloud environment. Now if you want to launch one server right select the operating system instance type right security groups your instance is ready
right instance is ready and here pay as you go model pay as you go model how much you're consuming you're going to pay for it then when I'm expecting a huge traffic automatically the configuration will be resources will be
traffic automatically resources will we decreased. So which one is best? Which one is best? Onromises server or EC2? Just now we are done with
comparison. So you have to answer for this which one is better EC2. Yes. this which one is better EC2. Yes. Because here you are going to pay on demand how much you are consuming and you are going to pay on resources. There
you are going to pay on resources. There is no any upfront cost. upfront cost that means there is no any advanced investment but here a lot of configuration lot of hardware purchase lot of things are there right now some
key features they empower user to control their control their compute resources right they operate under pay as you go model already we have allow user to boot a new server instances within a minute as I discussed
your EC2 can be launched within a minutes right they enable Yes, just a minute. Let me complete this. They enable quick scaling to meet quick and easy configuration of the services. As I clearly specified when
the application required when you are expecting the huge amount of a traffic the resources will be increased then automatically it decreases. Right now automatically it decreases. Right now these are the compute services like EC2
ECR. EC2 stands for elastic compute cloud elastic container registry. Then elastic container service elastic kubernet service light sale serverless application repository lambda fargate elastic binstock and finally batch
service. So these all are AWS compute services which are available in AWS services which are available in AWS environment. Right now let's move on to the next service called storage. Here you can see folks we have
a service called storage service. a storage service which offers the secure, reliable and scalable storage solution for a data in the AWS cloud. Now it provides the high efficiency, availability, durability and performance
availability, durability and performance also. So folks let me tell you in AWS we have a different types of storage services. In that the first one is services. In that the first one is object storage.
Object storage. Then we have block storage. Block storage. And the third we have file storage.
the data will be stored in terms of objects. A popular service. Let me tell you there is a popular service. Might be you people have heard about this ES3 simple storage service. These all are storage services. Again I'm repeating
storage services. Again I'm repeating folks. These all are storage services. categories. First one is object storage. And the popular services simple storage And the popular services simple storage service. S3 stands for simple storage
service where you are going to create a buckets and you are going to store the buckets and you are going to store the objects. Every data will be considered as a object like whatever you are storing the data this will be considered
as a object and you can store any kind of a data there is no restriction right of a data there is no restriction right then block storage. So folks in block storage we have a popular service called EBS elastic block storage. In block
storage we have popular service called EBS elastic block storage. Right? So it's a persistent block storage. This is my EBS value. This is my EBS value and
my EBS value. This is my EBS value and this is my EC2 machine. EC2 is server. this is my EC2 machine. EC2 is server. This is my EC2 machine. Right? So now This is my EC2 machine. Right? So now it's a persistent block storage
persistent block level storage right so now this persistent blockle storage volume you can attach to your EC2 instance right again I'm repeating folks
EBS elastic block storage is one of the popular block storage right and it's a persistent block storage persistent means the data will be permanent which acts like your hard disk drive or SSD, HDD or SSD, hard disk drive or solid
state drive, right? Secondary memory, right? Until and unless you will not delete, the data will be available, right? So here this EBS value is a persistent storage value. Now we are going to attach to our EC2 instance. Why
we are attaching? Let us consider I want to install my operating system. So at that time this storage is required. Let us consider I'm using some data inensive application. Right? Now let us consider I'm running some low latency application
right. So even I want to access a low latency accessing a data at that time latency accessing a data at that time this is required right. So here as I taken the examples sorry use cases when should I go for block storage like
installing the operating system or if I want to run the databases or a data inensive applications where the application required some low latency access of a data at that time EBS is best solution. Now when should I go for
best solution. Now when should I go for object storage? The best example is let us consider I want to store the images, videos, PDF. S3 is also persistent. Let us consider I want to store uh unlimited data like entertainment purpose. Right?
I want to store images, audio, video, any type of a data you can store in S3. Right? Now this is for EBS. Then we have file storage. Then we have file storage. file storage. Then we have file storage. So what is file storage? Here folks like
E3 like EBS in file storage we have a popular service called EFS. popular service called EFS. EFS elastic file system which offers a scalable shared file storage that means
it's a shared file system. This is EFS right. So this EFS is well suited for the application that require the shared file access. Right? Let us consider this is my first EC2, second EC2, third EC2, fourth EC2. Right? So now all the
developers are working for a same software. Again I'm repeating folks, elastic file system is a scalable shared file storage. So EFS can be accessed
concurrently from multiple EC2 machine. Again I'm repeating this shared file storage that can be accessed concurrently from multiple EC2 instances. Right? So now let me take one simple example. I have one software.
Right? I have one software but different different developer developer one developer 2 3 4 and all are working for the same software but all are working on a different models and finally the result is stored in this
shared file system. Yes, it's like a shared folder, right? So, this is all about just introduction about our storage services. So, it allows the user to store, access and analyze the data to reduce the cost, increase the agility
and accelerate the innovations and it can be broadly categorized into the storage and backup and the data migration. What we have the services, right? So now what are the storage services we have that's why I was
clearly specified we are thinking at the introduction level see these are the storage services simple storage service storage services simple storage service elastic file system Amazon FSX then EBS
backup then we have storage gateway data sync then transfer family and slow family these all are AWS storage services okay then We have uh another
service called database. So folks, what is database? As per your knowledge, see related data. The data might be structured or unstructured. That is whether it is structured, unstructured or semiructured. But now can I say that
database is nothing but collection of related data. But now let me make it a simple collection of related data. Might be it is schematic like a structured, unstructured, semiructured, whether it is uh what is that semantic or symmetric
that is different right? So now database is nothing but collection of data related data right. So here folks AWS provide the comprehensive selection of provide the comprehensive selection of purpose-built a databases right which is
suit for like various application needs. So here it's up to you as per your requirement you can select any kind of a databases and let me tell you folks these database services are fully managed. Fully managed means no need to
think about provisioning, no need to think about updating, no need to think about patching, everything will be taken care by AWS. Fully managed, fully managed. Whenever the term comes fully managed, everything will be taken care
by AWS. Even provisioning, updating, patching, everything will be taken care by AWS. Right? Scalable means as per the requirement, it scales then even highly requirement, it scales then even highly efficient. Right? Now what are the
features like what type of databases I'll get here. So AWS offer the different database engines like relational database key value database right relational means RDS key value means Dynamob in memory means radius
memach then graph time series ledger. So there are different types of databases are available in AWS. So as per your requirement you have to choose your requirement you have to choose your databases. So here it supports multi-
region that means more than one region in all the 39 regions. Multim masteraster replication means you can do the replication in all the 39 regions.
It's up to you. So you will get a complete control over the data. Right? So how will replicate this everything that we'll see in future classes. Fine. Now what are the databases service like what database service we have? I have
RDS then red shift Dynamob then red shift Dynamob elastic cachet then we have document DB key spaces Napune then finally we have QLDB these all are the types of
databases which are available in AWS right now folks here we have networking service what is networking as per your knowledge
going to establish a connection between two devices to share the resources. two devices to share the resources. Right? So here AWS will provide a set of networking services that provide the essential security features and robust
essential security features and robust network solutions. So folks here these services isolate resources. So there is a service if I want to isolate the resources in AWS I have a service called VPC that we'll see in detail in future
VPC that we'll see in detail in future classes. VPC means isolate when I want to isolate the resources at that time I'll go with VPC. Let us consider this is Karthik VPC Rajes VPC right Manikandan VPC Santo VPC. So here all
the resources are deployed here all the Karthik resources are deployed right? Rajes resources are deployed then Manikandan then Santosh so without owner
permission no one can enter to this isolated area that's why we are using isolated area that's why we are using VPC money can't enter to Karthik area VPC money can't enter to Karthik area Rajes area no not at all so that's why
VPC is a isolated service whether you are using any EC2 RDS Dynamob KMS ES3 anything you are going to deploy in this EPC So that's why we are calling it as
it's a isolating service. VPC is isolating service. No one can enter without your permission. Then encrypting a data. See to encrypt a data we have a a data. See to encrypt a data we have a service called KMS. It's a native AWS
service. Key management service. Key management service is a centralized repository for cryptographic keys for encryption as well as decryption. right now provides private connection on the
AWS global network. So what kind of a connections you will call private connections you will call private connections? VPN then we have direct connect then we have side to side connectivity
VPN connection direct connect side to connect side to side connection these all are the examples of private connections. Everyone is aware about VPN but direct what is direct connect side to side that I'll discuss in this AWS
to side that I'll discuss in this AWS and walk. Okay. Now what features I'll get? It offers the highest network availability with very few downtime availability with very few downtime hours due to networking issues. So
purposely I'm keeping this statement folks. It provide the global coverage of availability zones? You have to answer. You have to correct global 39 regions and how many availability zones? It's 123 exactly that right. So what are the
networking services we have? We have Amazon VPC API gateway API stand for application programming interface right cloud front route 53 VPN direct connect cloud map then app mesh these all are networking services which are available
networking services which are available in AWS environment okay now folks let me take you to the agenda of today's session session so first today we'll start with first
so first today we'll start with first account setup
After account types, we have billing concepts and billing alerts. How we are creating alerts. Right. After this we have delegation.
How we are delegating authority. Delegation are how we are delegating Delegation are how we are delegating authority to IM user and IM role. Right? Then we have a concept called IM. Right? So
these are the topics what I'm going to discuss in today's session. Right? So today's session that is AWS account setup. So folks, I have one question for you people. Let's take again one scenario for a discussion purpose. So
now folks, I don't know anything about uh I'm not from technical background, uh I'm not from technical background, right? So I want to access a Gmail service. So can anyone help me out how I can use this Gmail?
I'm not a technical person. I don't know anything. And I want to access this Gmail service. Can anyone help me out? How I can do that? So what is the How I can do that? So what is the procedure? First you have to sign up.
First you have to sign up. So what are the details are required? Like first name, last name, mobile number, alternate email ID, right? Then hint question, then you are ready with your account. Right? For Gmail, it ask UPI.
account. Right? For Gmail, it ask UPI. So now once once you are ready with your account it's a one-time procedure a setup you have to complete right then you have to login so here you have to put on just email ID
and password to access your Gmail services right so in AWS also we have two types of account the first account is called root account first account is called root account and the second account is called IM user
account. IM users account right. So folks let me tell you root account who is having access to all the AWS services. So access to all the AWS services. So whenever whenever you are accessing the
AWS resources at the first time so that account is called root account. Right? So now what is the procedure to create a root account? Just you have to visit AWS like www.awwsconole.com awsconole.com right so you will be redirected to
right so you will be redirected to signup page signup page so here everything almost same come like your Gmail only first name last name middle name mobile number email id alternate email id hint question right password
then there is one more additional part what is that here it asks here it asks credit card details or debit card details right I think you have now up
option also right So you have to specify the mandatory field called credit card the mandatory field called credit card or debit card information right. So once or debit card information right. So once your account is created this will be
your account is created this will be verified. How AWS will debit AWS will debit a token amount from your account to verify this account is genuine. Right? After 2 days again this amount will be refunded to your account. Right?
So that is the reason here I think uh root account have access to all the AWS services all the AWS services and that is the reason AWS clearly specified
don't use root account for day-to-day activity this is not a best practice again I'm repeating AWS is clearly specified don't use root account for day-to-day activity there is a reason behind that if you compromise your root
account credentials at that time at that time you are going to loss each and everything about your organization that is the reason the best practice says create a IM users within this root account IM users are nothing but you are
creating another account a separate account within the root account but this user when you create they don't have access for any of the AWS services until and unless you have to explicitly define them right so folks root account have
access to all the AWS services right now. IM users. IM users are the users within this root account. And in a single root account, you can create up to 5,000 IM users. Right? And by default, when you create one IM user,
this user don't have any access to any of the services, right? Until and unless you have to explicitly define them. You to attach the policy. For example, let us consider I here in an organization I
have Karthartik, right? Then Rashmi, then Santosh, then here I'll assign then Santosh, then here I'll assign Kartik can work with S3. Then Rashmi can Kartik can work with S3. Then Rashmi can Rashmi can work with EC2, right? Then
Rashmi can work with EC2, right? Then Santosh can work with RDS. So like this you can provide a permission to access the resources. So no one can access the other resources apart from this. That is the power of IM user. So IM user also a
separate users separate users within the root account but they have separate username and password right. So now so here it's up to you right like root account
but this is not a best practice to use on a daily basis. Right now here just now what I discussed how to create a AWS account. First go to AWS website, create
AWS account, right? Enter your account information, right? So whether it is personal or business account, provide your personal information, then accept the agreement, then create account and continue. Right? Then provide the
billing information. Verify it. Once verified, then provide the mobile number, phone number details, then support plan. By default, basic plan will be available. By default, basic plan will be available which is free.
Some advanced plans are also available. But this is paid service. This is paid service. So basic plan always available with all the accounts. There is no any charges. But when you go for advanced plan, you have to pay for it. Once you
select the plans, then you are ready with your account and you have successfully activated your account now. Right now here folks there is a one type. Yes, here I have different types of account. In that the first type of
of account. In that the first type of account is AWS free tier account. Right? So now what you're creating uh in a account in AWS console we are calling it as free tier account. Free tier account is valid for 12 months. [snorts]
is valid for 12 months. [snorts] Right? And here for specific services these are free for specific duration. For example, EC2 instance which is free For example, EC2 instance which is free for 750 hours. Now S3 which is free for
5GB, right? So now S3 is for 5GB, right? So now after 5GB you have to pay for it. After 750 hours you have to pay for it,
right? This is free tier account. Now there are different types of accounts we have. First 12 months free tier account, right? Then always free what I discussed just now 12 months free which is restricted to only one year.
Now always free is something there is no any specific duration but here every service is charged from the beginning itself. Right? Now short-term trial. What is short-term trial? Let us consider here we have Rajes.
consider here we have Rajes. Rajes is one of the developer in ABC organization. Right? Rajes is one of the developer in Right? Rajes is one of the developer in ABC organization and now AWS is launched
one new service called bedrock. There is a new service launched by AWS called bedrock and Rajes want to learn this service. So at that time Rajes can request to AWS. Hey team can you provide a access to bedrock service? I want to
access this service. Right? So at that time AWS will provide a short-term credentials for one week. for one week. So for one week Rajes can
access this service they like if he if the if a person is a developer and he at that time for one week they'll provide access to Rajes so Rajes can
learn something new which is launched in the AWS environment right so that's why we are calling it as short-term trials after one week the credentials are not after one week the credentials are not usable not usable right so these are the
different types of uh accounts what we have. So now folks let's [snorts] let me take you to the now let me take you to the AWS management console. So
let's start with our labs now that means just I'm going to show you what about the credential shared in the LMS for the account that only I'm discussing Santo just allow me a minute
just allow me a minute right so all are with me now in your LMS all are able to see there is a course called AWS solution architect associate level click on continue learning are you able to see this screen a same screen is
available on your screen. Now take your own time and let me know once you are ready because I want to show you how to launch your labs. So now folks here you can see there is a option called practice lab. Quick click on this. Click
on this. So once you click on practice lab at the right bottom side there is a option called launch lab. Click on this blue button and you will get one popup.
blue button and you will get one popup. Click on launch lab. Once you click on launch lab, your lab will load for you from 1% to up to 100%. It takes one or hardly 2 minutes of a time, not more than that.
Yes, lab is working now. For me also it's logging. My console is also 90% done. Yes, still it's 90%. I think work console is in loop. Yes. Should we sign in meanwhile? If you want to just allow me a minute. Let me take
to just allow me a minute. Let me take you one by one like first we'll complete this loading process. Yes. Now I can see my credential sign in link, username and password. We get IM user account. Great. Still at 90%. Okay. All are able to see
these credentials now. How many of you are at this place as I can see? Okay. Okay, majority of the participants are successfully logged in like uh loaded the lab. So folks, let me tell you. So folks, this is pre-cooked environment
which is specially designed for practicing purpose, right? This is simply learn AWS environment. Same exact exact in the sense the main AWS console only but this is specially designed for practice purpose only the services which
are relevant to AWS solution architect are available for you right now here you can see I have some credentials along with the sign-in link right so every with the sign-in link right so every time every time sign in link along with
the username and password everything will be changed again I'm repeating don't use same sign in link username, password after 6 hour. Every after 6 hour your sign-in link, username, password will change and this lab will
number of a time. There is no restriction. You can practice any number of a time. There is no restriction. But this labs are active for 5 hours. After 5 hours, all the resources will be deleted. Right? All the resources will
be deleted. After 5 hours, 1 minute, you can start your new lab. You can start your new lab again. You can start the resources after 5 hours. Right? So how resources after 5 hours. Right? So how to login your AWS console? Just you have
to copy this signin link. Paste it.
with signin link. Okay. Now copy the username and paste it in the username username and paste it in the username section. Then copy the password and paste it in the password section. Right now click on sign in.
see this window. Okay. So now how many of you are at this console homepage AWS console homepage? those who are at the 90% right still they are at the 90% just
refresh it then you are able to log into your AWS console fine so now folks your AWS console fine so now folks whenever in AWS console especially in simply learn environment whenever you enter to AWS console the first thing you
have to check is the region in which region you are working so the first task is you have to check in which region you are working so click on this region Right? And make sure that always you should work in North Virginia region.
North Virginia region. So let me tell you why we are selecting North Virginia region. As I clearly specified in this pre-cooked environment all these pre-cooked environment all these services are enabled for you for AWS
solution architect associate course. Right? So here in this environment only North Virginia is enabled. Sir, I'm in Pune. I'll use Mumbai. No, it will not work because this environment is for practice purpose. So only one region is
enabled for you. Sir, I'm in Hyderabad. I'll use Hyderabad region. No, you can't I'll use Hyderabad region. No, you can't use because as you know that only the North Virginia region is enabled for you. In this environment, you can use
always North Virginia region. So the first task when you enter to your AWS console, you have to check whether I am in North Virginia region or not. This is the first time. Okay. And the next. So folks, this is my AWS console home,
services are available, you can click on this here. Based on the domain, there are different services are available. are different services are available. For example, compute, appunner, batch
processing, EC2, image builder, elastic, binto, global view, lambda, outpost. These all are compute services. Now let me take you to the database services. Aurora, RDS, document DB, Dynamob, Elastic, these all are database
Elastic, these all are database services. Next let me take networking services. API gateway, app mesh, recovery controller, cloud map, cloudfront. These all are networking services. If you want
to search any services, everything will be available for you here. Right? No sir, I want to search directly. Here we have search bar. Just type the service have search bar. Just type the service name. For example, yes three,
right? The service will be available for you. Let us consider you are using this service frequently then make it as bookmark. You can see here this bookmark is available for me. Now if you want to remove just
right just click on this star a bookmark will be available then remove it if you will be available then remove it if you don't want. Right now after this here we don't want. Right now after this here we have cloudshell. See cloudshell is
built-in command line interface which is provided you to interact with AWS services by using commands. Again I'm repeating folks. Cloudshell is built-in command line interface which is provided to you people to interact with AWS
services by using commands or programmatically. Right. The next notifications you will get here and this is help section right if you have if you
require any help you will get here support then settings right once we are done so just now what I discussed uh number of regions these are the regions which are available for us now right total 39 regions everything
you can see here right so always you have to use North Virginia region in have to use North Virginia region in this environment fine now just click on this. So before this here you can see some of the access denied. So no need to
worry no need to worry only the services which are relevant to AWS solution architect associate the services are enabled for you. So I'm getting access denied. No need to worry even I'm also getting the same fine now click on this
account. Here you can see this is my account ID. Account ID 43807153868. A 12digit account ID is available for all the IM and root account users.
Right? Account name because I am the IM user. I don't have account name right now. And account like color also. So this is my IM user details. Now ODL user this is my IM user details. Now ODL user 2053459 is the user ID. If you check
your account also the account ID is different. Right? Now here you will get the details about account like if you want to enable uh MFA if you want to
enable uh accessing IM control to the user in account like it's like a additional settings for your account organization organization is something where if you want to manage a multiple accounts multi-level account right so at
that time you can go with this AWS organization service right you can go with AWS organization service now you can see here you can see
here organization again I'm repeating folks organization is nothing but AWS organization is a service where you are going to maintain a multi-account going to maintain a multi-account environment right now next part see next
part is service kota see service kota in the sense every service has some limit a maximum limit for everything you have some Kota right a limit so after that you can't create the resources that you will get here then next and next and
which is very crucial part of every organization that is billing and cost management let me tell you folks no one is having access to billing and cost management because this is one of the very very important par parameter in the
organization right even if I click on this let me click on this billing and this let me click on this billing and cost management
see here access denied as I clearly specified billing part is one of the specified billing part is one of the crucial service in AWS organization in AWS environment. No one is having a access to the specially billing part
right a specific uh like what do you call a specific position a person who is going to deal and handle your billing to entire organization entire organization
where we have a concept called AWS organization to manage a billing in a organization to manage a billing in a centralized manner right now here you have a question sir why we are getting
access denied right So as a clearly specified billing is one of the crucial service. Now no one is having access only a respective person or you can say that the person who is having authority to deal with the costing part right
because in a organization costing is very important. So the person who is having a knowledge who is having a authent like authorization to access the resources they can access. Now one more important point when you go for billing
and cost management automatically your region change from north Virginia to global because it's a global service. Billing and cost management is a global service which check the costing for every region and then you will get the
details here right. So here you will get cost summary like even from month to cost summary like even from month to date cost last month costing forecast for current month last month total cost and even a cost breakdown a detailed
information for that particular month. Now some recommended actions also let us consider I have one EC2 instance which is running for more than 24 hours right so suddenly like you are not aware this EC2 is running now so you will get some
practices you will get the recommendation so and so EC2 instances started date still it is running in which region where everything you'll get the details information right so this is for recommended actions then we have the
for recommended actions then we have the another tab called bills.
fetch a bills from last month, 3 months bill, 6 month bill, 1 year bill, 2 year bills, you can easily retrieve the bills here in the bill section. Then payment. Let us consider I want to pay my AWS account bills by using debit card by
using credit card even by using up UPI also which is accepted right credits. account. How many credits are left? You can check it out in the credit section. Then purchase order. Whatever you are using the services for everything you
will get the purchase order. Right. Then we have cost explorer. See cost explorer detailed information. If you want to do some cost optimization in your
environment at that time this cost optimization which provides a uh what do you call main role which gives some in detail information about your organization where you can see what is the total cost right average monthly
cost service count where you will get the graph cost and usage graph how many services are active right in which region when it was started when it was ended how much it was charged even entire breakdown will be available along
with a graphical representation right even if you want to download this file this file you can download in a CSV format in a excel format where you can download the complete information along
with the breakdown of your costing right so folks this is all about a billing part now right so folks just now what I completed in the slides AWS management
console already we are done right these are the slides so folks AWS billing also just now we are completed in the slides right so what is AWS billing where I'm going to pay the AWS bills right what I shown you in the AWS
billing part billing section where I can organize and report your AWS and cost usage right so managing the consolidated billing for the members of AWS of AWS
organization. So as I discussed and as I clearly specified in the lab like uh AWS clearly specified in the lab like uh AWS console AWS organization is a service where you are going to manage a multi-account environment and even you
can maintain a consolidated billing for example this is the organization tree organization tree. So one root account along with many IM users right.
So using the AWS organization service I can do a consolidated billing right every user every user will get a separate billing and within a single frame I'll get the consolidated billing right
now. So features folks what I discussed in the AWS console you can manage your AWS account you can view the bills right you can manage the payment by using credit card debit card UPI and you can manage the purchasing orders right then
you can manage the cost and even you can manage the payment profile also right then consulting like consolidating uh billing for AWS organization let us consider I have one ABC organization Right. So first Suyash then Aishwara.
Right. So first Suyash then Aishwara. Right. So next we have Capil Vidya then Vishal. Capil Vidya Vishal. These all are employees of the organization. These all are employee of a single organization.
Right. Right. Single organization. So every Right. Single organization. So every employee $39 for Vishal. Right. Then 8 employee $39 for Vishal. Right. Then 8 8.9 for second employee 35 119. So after
consolidating you will get the total billing here. Right? Now what is payment profile? See payment profile where you where your billing and payment information is stored and managed. Right? Payment profile is like your AWS
billing identity plus payment method. Right? It contains the detail of AWS Right? It contains the detail of AWS uses like what is the charge you for services how like generating the invoices managing the taxes taxes and
billing address everything will be available for you. Okay. So next we have available for you. Okay. So next we have folks here we have AWS support. So can I call this AWS support as customer care service? How many of you agree with
this? No. Exactly correct because this support team is collection of technical people. They are well qualified technical people. They are going to support. No doubt they'll resolve the queries.
Right. Yes. Tech support. Exactly. These all are technical people. Right. So where they are going to resolve your queries, right? So folks, if you have any queries, you can always take a support, right? So here there are two
types of support plans we have. The first one is basic which is totally free what you'll get when you create a account and the next one is detailed or advanced. Advanc is paid service. There are different types of support
plans are available. Right. So here you can see AWS support provides a variety of plans that allow access to tools and expertise that support the success success and operational health of AWS
solution. All support plans provides 24 bar 7 access to the customer services AWS documentation technical papers and support forms. So when they'll provide a support forms. So when they'll provide a solution right so they'll provide
solution with some proof also like AWS documentation AWS documents are very very good even excellent documents for everything you will get the documentation even they'll provide technical paper also why this answer is
correct some support forms also and this support is always available for you 24 by7 right and folks let me tell you when you go for paid service there are different advanced plans are available Like here you can see technical support
plan sorry developer plan, business plan, enterprise onramp plan, enterprise plan, enterprise onramp plan, enterprise plan, right? So based on best practices available a different information is available right. So now based on uh what
do you call best practice technical support case severity programmatic case management proactive programs and self-services then AWS managed services then training and even finally pricing. So every every support
plan have the different parameters right. So folks in every session what I'll do I'll give this part as a assignment everyone please take down the first assignment for your AWS solution
architect associate course everyone should go with this support plans support plans there are different plans are available again I'm repeating developer business enterprise on ramp and enterprise now folks we have billing
and enterprise now folks we have billing alerts so we have a option you can set some billing like uh I hope everyone is aware we have uh Jio connections right we have Jio connections once you complete 50% of a data you will get the
data you will get the notification am I right folks in geio connections I'm right folks in geio connections I'm talking once you complete 50% of a data 90% of a data you will get the notification so those who are
international participants those who are international participants Jio is one of the telecommunication popular telecommunication industry in India right so once you complete 50% of a data you will get the notification once you
complete 90% you will get the notification like this you can create a billing alerts for your AWS services like let us consider I have one EC2 instance right so I'll specify here once my EC2
crosses $200 right so my EC2 should be shut down or stopped or You can take any action. You can inform to the client or user. That is also possible. Right now AWS billing alerts allows the user to monitor the
alerts allows the user to monitor the charges on their bills. Right? So user can set up an alert to receive a email notification when the estimated charges reach a specific threshold value. When you cross $200, what you specify, right?
So when you cross the threshold value it will be informed. Now using the email in future classes you are going to see how you are going to inform to the customer by using email SMS right you can inform to the customer right. So what are the
steps you are going to consider for billing alerts going to the AWS console then we have a billing preferences select choose a receiving billing alerts and save the preferences. Now what you specify you will get the updates or
notification on your registered email. Right now folks here we have something Right now folks here we have something special called delegation or delegate.
knowledge? How you will define this delegation term? Let's see how many of you are going to answer for this. How you will define how you will define this delegation term? What is delegation? as per you or not
here one of the participant is called Shivanchu okay and here being a trainer Shivanchu okay and here being a trainer I am busy in taking this session okay so now here we have Shivanchu I'll tell to Shivanchu now hey Shivanchu
can you take the attendance for today's session I'm busy in taking the session what I'm doing now being a trainer I'm busy in taking the session like I'm engaging the session So I am delegating my authority to
Shivansu. Hey Shivanchu can you take the attendance for today's session. Right? So suddenly Aishwara will come into the picture. Aishwara will come into the picture and she'll start taking the attendance. Do you think Aishwara is a
authorized or a valid person to take the attendance? Do you think Aishwara is the attendance? Do you think Aishwara is the right person to take the attendance? No. No. because I have delegated a authority to only Shivanshu not any other person
right again I'm repeating folks Shivianu is the right person because I have delegated the authority to Shivanchu not other users right so that is the reason the attendance I have not delegated the
authority so only Shivansu can take the attendance right so same thing same attendance right so same thing same thing now we are delegating delegating ing their access to other users right now to whom you are
delegating delegating access to the billing console. Let us consider we have billing service and as I clearly specified it's a crucial service only
the specific person can access that right so now AWS account owner can delegate the access to specific IM users that need to access or manage the AWS
billing and cost management data for AWS account now what I'm doing let us consider I have one ABC organization Folks, AWS account owner can delegate the access to specific IM users that need to access or manage the AWS billing
and cost management data for AWS account. Right? So now folks, I have ABC organization. Right? So instead of keeping thousands of employee, if I keep only Karthik as a admin, do you think Karthik can manage these thousand people
work? Instead of maintaining thousand employers, if I keep only Karthik to perform all the task, do you think is it the right strategy to work in the organization? No. So that is the reason Karthik is admin.
Kartik is admin who can take the administrative overall task. Right? So administrative overall task. Right? So like this let me take Vishall. Vishall can work with ES3. Then we have Suange.
Suange can work with KMS. Then who is next? Usually I'll take uh Then who is next? Usually I'll take uh Rajes.
billing. Now folks within a ABC organization let us consider Karthik he is having a admin account right or a root account who is having access to all the AWS services. Okay. So now Vishal can access S3 then
Su can access KMS. Rajes can access EC2. Santosh can access billing. Right. So permission is given to Vishal. This permission is given to Rajesh. Same for Santo. Now Vishall can't access KMS. Not
possible because only S3 policy is assigned. Same thing. Su can't access S3. Su can't access EC2. Su can't access billing information. Right? That is the reason for every IM user we have already assigned a policy explicitly to perform
that task. Now Santoskumar is responsible for billing information. So as I clearly specified by taking your inputs only Kartharti can perform all
employees work. That is the reason we are assigning assigning or you can say that we are delegating authority to work purpose. We are delegating their workload. So Santosh can work on billing. Rajes can work on EC2. Surange
can work on KMS. Michelle can work on ES3 like this we are delegating authority to IM users. So now might you have a question how we are assigning how we are delegating to these IM users by using these four steps. First enabling
using these four steps. First enabling the access there is a option to enable that I'll show you right next create policy no need to create a policy already we have AWS created a policy right then attach create a policy
created not required creating already I have a policy then then attach a policy have a policy then then attach a policy to whom Santosh Santosh is responsible person then attach this billing policy to Santosh Kumar then test the access by
using the Santo credentials username and password you can access the billing password you can access the billing information now right not role not role information now right not role not role forin it's a I am user role is different
I'm not talking about role now it's a I am user okay role is different so folks am user okay role is different so folks let me tell you clearly here actually at
this point usually I'll not go to the AWS console tool to explain for the AWS console tool to explain for the demonstration. But if you want if you want to see this what I shown you the steps in the AWS console then I'll
demonstrate. No need to go in detail. That's why I'm clearly specifying. If you are interested I can show you in the AWS console but no need to go in details. This is just introduction. We are in introduction. Still we are in
introduction. So now folks let me go to the AWS console. First you have to policy creating not required directly policy creating not required directly you can attach. Let's go to AWS console.
So folks now for creating IM user you have to go to the AWS service called IM
right so everyone please observe is it global service now when I shifted to IM dashboard automatically the region is changed from North Virginia to global changed from North Virginia to global service right so now It's a global
right. So now folks, what is the first step? You have to enable the access. First you have to enable the access. Click on account. And there is a option Click on account. And there is a option called account here.
section. There is a option right enabling here. Yes. Can you see this? I am user and role access billing information. Sorry, just a minute.
Go to account section. What happened this? section, there is a option here. You have to enable this IM user and role access billing information. Even if you directly attach billing policy to IM
user, it won't work until and unless you have to enable this. Here you will get the option to enable and disable. There are two radio buttons called enable and first you have to enable. This is the
first step. Now let me go to the next step. step. Go to IM service.
why I have not enabled. So first step is done. Now second is you have to create a policy. Right. So no need to create a policy. Already we have a policy. Let's create one. I am user. I am user. Okay. Let's create a IM user.
Let's click on create user. username is so who is responsible for username is so who is responsible for billing information in example billing information in example Santosh. Okay. So now folks do you want
to provide this Santosh can access the AWS console? Yes. So do you want autogenerated password for Santosh? No. I want to provide the password called
password. Santos at 1 2 3 right now do you want to provide a authority to Santosh to change the password after login no I don't want
to give this authority to Santo okay click on next so right now no need to worry about these options just there is a option third step you after creating the policy you can attach a policy right third step is attach a policy so which
authority you want to give to Santosh what Santosh can access now. So just search for billing policy. So folks can you see this there is a policy name called billing provide the billing policy access to this Santos user. Click
on next. Everything is done. Review it and now create a user. See user is created with few error. Why that error? Now let me tell you for works. I don't have authority to attach
a policy because in this environment I am also because in this environment I am also one IM user folks if I don't have access to if I don't have access for a billing information then how I can attach this
policy to someone else that is the reason user is created but without attaching billing policy here you can see user is successfully created but I demonstrated you how you are attaching the policy to the user Now you are
ready. User is ready. Now you have to test the access. How you will test? Now use this console sign in and open the new browser. Let me use edge browser.
new browser. Let me use edge browser. Okay. Paste this URL also that is also fine. Okay, I'm ready
with my credentials. So folks, even if you want to download the credentials, there is option download CSV file here. You can see in my system, Santosh credentials are successfully downloaded. If you open this document, let me show
you. Santo credentials are available. Santo credentials CSV file, username, password along with the signing, login. Okay. Okay. So now let me open the edge. See account
So now let me open the edge. See account ID username is ID username is Santos right and the password is Santo at 123 folks. Let me show you the password also. Santosh at 123. So now
password also. Santosh at 123. So now let me sign.
logged in with Santosh credentials. Are you with me folks? Can you see this? Now Santosh user is successfully created. Fine. Santosh user is successfully created. But if you go to the billing information, do you think Santosh is
able to access the billing information here? No, because if I don't have access for billing information then how I can assign like how I can assign someone else to access this information. So now
just now I shown you how to create a account then how to attach a policy to the user called Santosh then policy is attached because of this pre-cooked environment the policy was not attached then I have tested the access by using
the same credential of Santo. I hope folks by demonstrating with this like by demonstrating your delegation concept with this demonstration is clear to everyone right. So just now what I shown you first just now what I completed the
steps activating access to billing data enabling accessing then create policy I have not created a policy directly I attached the policy by using existing one then attaching a billing policy then tested the access by using a separate
username and credentials. Let me take you to the next part. How we are you to the next part. How we are delegating authority to IM roles. So folks, IM user is different different. Okay. There is one more question. How we
can assign same role to two three people one by one or need to create a group. first topic of today's session. Delegating access to IM roles. So folks in the previous session I was
just discussed how we are delegating authority to IM user right. So now how we are delegating authority to IM roles. So AWS so now AWS
account owner can use a role to delegate the access to resources in a different AWS account called production and development. So folks here we have a
concept of IM roles. Okay. So here we have a concept of IM role. Now what is IM role? IM roles are temporary in a nature. IM roles are temporary in a
nature. That means these roles are available for short duration. Again I'm repeating folks. IM roles are temporary in a nature and these roles are for
in a nature and these roles are for short duration. Right? So now short duration means up to what time these roles are active. So you can customize roles are active. So you can customize the time but by default from 1 hour
the time but by default from 1 hour to up to 12 hour you can use these roles maximum 12 hours. You can customize the duration also. You can customize from 1 minute to up to 12 hours. That is also possible right? But maximum 12 hours
that's why we are calling it as roles are temporary in a nature. So once the terminated right might you have a question sir can I extend this 12 hours? No, it's not possible. Again, you have to create a new role and you have to
provide all the information. Right? Let me take one simple example here for this IM role. For this I am role. Let me take one simple example. I hope everyone is familiar with Spider-Man.
Spider-Man. I hope you people have heard about this Spider-Man. See, Spiderman is about this Spider-Man. See, Spiderman is a normal person.
When the problem occurs, he'll become a Spider-Man, right? He's a normal person. When problem occurs, he'll become a Spider-Man. Once the problem is rectified again, he will be a normal person. He will be normal person. Do you
think this Spider-Man is always available for you 24/7? Do you think Spider-Man is available for you 24/7? No. Whenever the problem occurs, this normal person is going to become a Spider-Man. Once the problem is
rectified again is going to become a normal person. So folks, can I call the with me? For short duration, a normal person is
going to become a Spider-Man. Once the task is completed, once the issue is rectified again is going back to the original position. Right? So now you can consider the Spider-Man as an IM role because once the task is completed
automatically the Spider-Man is going to become a normal person. Let me take one become a normal person. Let me take one more example. Okay. So as per this statement I have production environment and I have development environment
and I have development environment right. So yes the two participants Shrea and Deepika Shrea and Deepipika see Shrea and Deepipika see Shrea and
Deepipika. Okay. So Shria is working in production environment and Deepipika is working in development environment and both are in ABC organization right. So folks let me tell you both are very good friends. Shria and Deepipika both are
friends. Shria and Deepipika both are very good friends right now but both are working in different department. Now Shrea Shrey want to access RDS database of development environment. Right. So now Shrea will approach to
Deepipika. Hey Deepipika can you give me your credentials? I want to access development RDS database. So Deepika are you ready to share the credential with Shrea? Right. What she's going to do now? Now she'll create one role. She'll
create one role. So what exactly this role? Now Shria want to access RDS database of development environment. Right. So role should be created with the permission called RDS full access right after
called RDS full access right after creating a role after creating a role this role should be attached to Shya. Now now without sharing without sharing the credential Shia now Shrea can access this development RDS database. Why?
because you are assigning a role to Shya and with the permission called RDS full and with the permission called RDS full access and that to for 2 hours once the 2 hours completed automatically this role will be terminated and Shia
will become the member of again production environment only so that is production environment only so that is the reason folks the best use case of IM the reason folks the best use case of IM role is cross account access
again I'm repeating the best use case of this IM role is cross account access. If you want to access any resources from other account at that time this cross account access this cross account access is very very important that two by using
IM roles you can you can delegate the authority right so now folks how we are doing this three steps first creating a role granting the access and testing the access right let me show you first creating the role then granting the
access and then testing the access let me show you how exactly it looks in the console as I shown you for IM user. Now I'm going to show you for IM role. So folks again you have to go to
role. So folks again you have to go to this IM service.
roles. Can you see this? After user we have roles. Now let me create a new role. There are multiple roles are available. Let me multiple roles are available. Let me create a new let's create a row. So now
folks you have to create a role right. There are multiple options are available. Now let me create a row for this scenario. Let us consider I have one server that is EC2 instance in AWS environment. Right? And I have one S3
bucket. S3 bucket right so what you have to do you have to create a role you have to create a role so for this role which permissions you have to attach now your EC2 want to access S3 bucket so which
permission should I attach for this role very good it's S3 full access exactly correct right so once you attach this policy to this role attach this role to
EC2 machine once the role is attached then this EC2 can access the S3 bucket this diagram now I'm going to demonstrate in the console right first you have to create a role right let me create a role now you can see here you
create a role now you can see here you can create a role for these entities whether AWS service or AWS account what I taken the example of production and development right now let me take AWS service so for which service you are
service so for which service you are creating a role now in this For which creating a role now in this For which service you are creating a role now? EC2 EC2 For which service you are creating role folks for which service
you are creating a role are you creating role for S3 or EC2 you can see here for which service you are creating EC2 right right so let's select EC2 right
right right so let's select EC2 right then next so which permission do you then next so which permission do you want to attach for this row exactly now it's S3 full access. Now it's S3 full access. You have to type S3 full access.
access. You have to type S3 full access. Right. Click on next. And the role name is let me create a role name called demo let me create a role name called demo role. Okay. Let's create a role folks.
You can see here once you click on create role. So ro demo role is successfully created. If you want to search here just type demo ro right role
is successfully created. When you click on this demo role you can see the role is successfully created for you right along with the policy Amazon S3 full along with the policy Amazon S3 full access what I attached. Now sir where I
can customize the duration of this role here folks once you create a role. So folks here as you know that it's a temporary right roles are temporary. If there's a option called edit here. Right? So you can see by default it's 1
hour. So you can extend up to 12 hours. And even if you want to customize the duration, you can customize from 1 minute to up to maximum 12 hours. Now my question is what is the difference between IM user and IM role. So folks,
between IM user and IM role. So folks, IM users are permanent. IM roles are temporary. IM users are permanent until and unless you have to explicitly delete them. IM roles are temporary in a nature. Once this 12 hour, 1 hour, 2
hour, what you specify the duration it completes automatically it will be completes automatically it will be terminated. So folks here you can see roles can be used for any user, any application, any services. Roles can be
application, any services. Roles can be used for any user, any application, any used for any user, any application, any account you can. Okay. Now folks, let's move on to the next service called IM which is already completed in the
previous session as I shown you how to create a IM users. Right? What is IM? they are given which is if it is completed we can proceed. Now what is IM
folks? As you know that identity and access management, it's a web service that provides the access control to AWS resources. It's a web service that enables the user to securely regulate access to AWS resources. So here folks,
IM will helps to determine the authentication who is signed in. IM will help you to determine who is signed in and what are
the permissions you have authorization of user to utilize the resources. Now let me take one simple example here. So everyone is familiar with online banking
right? So first you'll put username then password then capture then OTP then finally submit button right. So folks once username, password, OTP, then
capture is everything validated that right. So then only successfully you are logged into your online banking. So this process is nothing but authentication. Who is signed in? So this overall procedure validating username, password,
OTP capture is nothing but authentication. Who is signed in? Once you are signed in, now you are in the dashboard of online banking, right? So now what are the permissions you have, right? Authorization. What are the
environment? That is nothing but authorization. Now let me take the example in this online banking dashboard. You can check the balance. You can try like you can transfer the amount, right? Then you can change the
password. Then you can add the beneficiary right. Then you can add some uh what do you call auto debit option everything. Now folks my question is
do you have option to modify your balance? balance? But my question do you have But my question do you have authorization to do a modification of a
authorization to do a modification of a balance? No. A big no. balance? No. A big no. Right. Yes. Exactly correct. So here this is called permissions. You have permission to check the balance. You
You can change the password. You can change the transaction password. You can add the beneficiary. But you don't have authority to modify the balance. That is nothing but permissions authorization. In AWS environment also first who is
In AWS environment also first who is logged in then by using IM what are the permissions you have to access? By default, no one is having any access. You have to explicitly allow them until and unless you can't access anything. So
that is the reason I taken this example internal. Right now what are the features we'll get? So which is already completed. You will get a shared access to the AWS accounts. You can provide the granular permissions right securely
accessing the AWS resources here. Then multiffactor authentication. You can enable the MFA also for your accounts. Then identity federation. See this is Then identity federation. See this is interesting. Now folks let us consider I
have an organization called ABC. Okay. And these cloud is belongs to ABC organization. Now some of the external person who is outside the organization
they want to access the AWS resources. Right? At that time there is a service called IDP identity provider right identity provider who will who is going to authenticate this external user. Once the IDP give the authentication once the
the IDP give the authentication once the user is validated then only he or she can access the AWS resources. That means outside the organization some external body or external user want to access your organization resources at that time
IDP will come into the picture to authenticate this user. Once the authentication is done then you are able to access the AWS resources. Best example where already you people is like you people are aware about this. So
folks I hope everyone is familiar with LinkedIn right? I hope you people are familiar with the LinkedIn everyone right. See, LinkedIn is given the permission if you don't have credentials to access the LinkedIn. Then LinkedIn is
given the authority to use your Gmail or Facebook account. Are you with me folks? Using the Gmail credentials or Facebook credentials, you can access the LinkedIn credentials, you can access the LinkedIn information. Yes or no? Yes. So now a
user will be validated first then only you are able to access the native organization services. someone like third party user or a client they want to access the AWS services at that time IDP will come into the picture so in
detail we'll discuss again this in module number seven okay now identity information for assurance so there is a service called cloud trail might be you people have heard about this cloud trail is responsible to track each and every
API activity in the AWS environment right who when where are the actions are taken who's taken the action right everything you will get the detailed
information each and every API activity in the AWS environment which is recorded in the AWS environment which is recorded right now so this IM is compatible with PCIDSS which is payment card industry data security standards then it it's
integrated with other many AWS services also then always the performance will be consistent why what is the reason because it achieves the high availability ility. How? If you want to make your data highly available, make
sure that your data should be replicated across the different global data center. That is the reason you will get the consistent results. Right? And let me tell you folks which is very very important. IM is always free service.
So how many resources services you are using at that time with the IM that is chargeable right? And there is something called STS security token service. STS is responsible to provide the temporary credentials for IM role always
for IM roles always it provide the temporary temporary credentials. So STS is responsible to provide the temporary credentials to IM users, right? So this is a free service now. So how I can access this IM service? Just now what I
shown you? AWS management console. Then we have command line interface. Then software development kit SDK. Then HTTP software development kit SDK. Then HTTP APIs. So folks let me tell you these two
options are usually used by solution architect and these two options are used right solution architect will concentrate on AWS console and CLI developer they'll use SDK and HTTP API right now here IM user folks already
completed with the demonstration in the previous session what is IM user IM users are the users within account not a separate account you each user can have the password to access the AWS management console. Right? Now here like
what I taken the example in the previous session like uh one of the user is I think who who was the admin Santosh right? Santosh who's having a billing access Santosh is having a billing excess I think admin is Rajes Rajes or
Santosh yeah might be so in that I was taking the example Shivan Shu Palvi Ferdin then Niti Karthik there are multiple IM users are available right
available each employees responsible to do their respective work so here IM users uh every individual who is going to perform their individual task view
to perform their individual task view right so now folks let's move on to the next point called CLI command line interface so before going to this are you people familiar with DOSS
disk operating system which is purely command- based am I right folks which is command- based am I right folks which is purely command-based command-based right so now we have our AWS cloud
AWS cloud Now this is our AWS cloud. If I want to Now this is our AWS cloud. If I want to access the AWS services by using commands at that time this CLI is required. Again I'm repeating folks if
you want to access the AWS services by using commands at that time I required using commands at that time I required CLI. Right? So one more point I want to specify here. CLI is very powerful compared to AWS console also. Some of
the features are not supported by AWS console. But the features which are not supported by console also supported in CLI. That is the reason CLI or what is that SDK are used by the developers. Right? So now if you want to access the
AWS services by using command there are two types we have right two types we have. The first one is CLI command line interface. So folks if you remember interface. So folks if you remember in AWS console right after search bar
there is something this is second one no after amazon this is second one no after amazon exactly anything it's cloud shell it's a cloud shell right a built-in command line interface which is provided
for us to interact with the AWS services by using commands right so now folks I'll show you the both approaches also Now if you want to install CLI you can
install on your local machine also right so here what is CLI command line interface it's a opensource tool that allows the user to communicate with AWS allows the user to communicate with AWS services using commands in their command
services using commands in their command line shell right so how we are going to set up this by just you have to type AWS configure at that time you have to provide access key and secret key so folks Access key and secret keys are
used for always programmatic access. Again I'm repeating if you want to do a programmatic access at that time this access key and secret keys are required and always default region it's up to you
but in our case you have to provide North Virginia only and the default format will be text. If you want to change that is also possible right? So this is not for us because if you are already user existing configuration if
you have then only you are going to use this you have to copy one folder into the configuration folder but this is not required for us now. Okay let me take required for us now. Okay let me take you to the console back. So folks what
is the first method cla you can download a software in your system just you have a software in your system just you have to type AWS
installing or updating the latest version of CLI. version of CLI. So now folks, it's totally it's up to If you're using Linux, if you are using Mac, if you are using Windows, select
this option and you will get the systematic a complete document what are the steps you have to carry out to install this software in your laptop. Right? And one more request from my end folks just now we are at the third day.
folks just now we are at the third day. Right? Okay. So this is the first method how we are installing how we are installing the software in my local installing the software in my local machine. Now the second one is let us
consider. Okay. So here just now I created one user right. Yeah let me create a see folks for access key and secret key. In module
number seven you are going to perform the task more in depth. We are going to discuss about the access key and secret key. But let me show you now how we are going to access. Okay let's create a user quickly.
user quickly. Let's create a user quickly. Okay. The username is Naven. Same steps what I completed in the previous session. I'm not going to explain again. Nim at 1 2 3. I don't want to give the
permission. Click on next. I don't want any permissions also. Just I want to show you how to generate the access key and secret key. Next. Create user. Right. So folks here the user is successfully created. If you go to the
user now how to generate access key and secret key for the user. You can see just now see what I demonstrated in a
quick manner because in the previous session I completed. Now I'll show you how to create a user. Yesterday I was discussed now how to create or how to generate this access key secret key. Click on user first.
And here we have a option called security credentials. Again I'm repeating first click on user for which user you are creating security credentials. Click on nine and then security credentials. So in
this security credentials we have a option called access keys. Let's create a access key. Now when you click on access key it asks for what
purpose you are using what is the use case. So select command line interface case. So select command line interface CL right and now confirm it. Once you confirm click on next description blah blah blah blah blah blah next. So folks
you can see there is a important message. This is the only time the secret access key can be viewed or downloaded. You cannot recover it later. You can create new access key anytime. See what just now I created access key
right? So this is the time you can view on download. If you try to again like if you try to check one more time the same key which is not possible right. However you can create new key any time. So that is the reason the best practice says you
have to download your Excel file. You can see nin access key successfully can see nin access key successfully downloaded.
well as secret key which is available for us. Now how to use this? Go to cloud shell. So what is the command folks?
Just now I shown you in the slide. It's AWS configure right? Very good. It's AWS AWS configure right? Very good. It's AWS configure. Enter.
Now it ask for access access key. You can copy it from Excel file also or here also access key is available. Right. Let me copy and paste here. Enter. Then
secret access key. Secret access key. Secret access key. I think this V is not there.
Something went wrong. I think I pasted twice.
Okay, let me start the terminal one more time. Okay, now type AWS Right. It asks for access key first. Copy the access key.
Yes. Karthik it's a better option.
Yes. Now it ask for secret key. Right? Copy the secret key it ask for default region name. Now I'll keep blank. It's up to you which region
you want. And output format by default it's text. So now as a navin user you are accessing the AWS services. Now as a nin user you are accessing the AWS services by using commands. So this is the way how you are
going to access the AWS services by using commands with two methods. First is CLA and the second one is cloud shell right. So folks this is all about a CLI in detail again we are going to discuss this part in module number seven where
you are going to perform some task also right. So folks let me take the first question for module number two. Which of the following represents a geographical region containing multiple availability zones?
region C. Excuse me. C is the right answer. Which service helps to determine who is authenticated and authorized to utilize the resources? A is the right answer. I am. What is the primary function of AWS
am. What is the primary function of AWS CLI? D. Yes, it is the right answer. Exactly correct. D is the right answer. Right. So folks, these are some sample questions what we have completed for the module number two. Right. So now folks,
let's move on to the next module. Module number three that is compute. Let's move on to the next module. the module number three where I'm going to discuss about the compute and related features right
so let me set the pen okay so as you know that in every module you will get the scenario a day in the life of cloud architect like you have a scenario for
the cloud architect now you are a cloud architect for an IT company with multiple cloud-based applications the organization has encountered routing challenges that have resulted in a significant financial losses. Hence, you
have been asked to ensure that such issues are proactively prevented in the future. By the end of this lesson, you will have a concise understanding of crafting routing requests, creating AMI images, and exploring the types of load
balancer. So, what are the learning objectives? By the end of this lesson, you will be able to create an AMI image for fast deployment. AMI stands for Amazon machine image.
Launch and connect to a Windows instances to enable disaster recovery. Then deploy various load balancer to improve the scalability. Then create a
routing request in application load balancer to enable pathbased routing. So folks, these are the learning objectives or you can call it as outcomes. Once you complete the module, you are able to answer the questions based on this
answer the questions based on this topic. Right? Amazon machine image Amazon machine image application load balancer. Right now let us start with introduction to EC2. So let us start with introduction to EC2. So folks as I
discussed in the previous session also EC2 stands for elastic compute cloud. EC2 stands for elastic compute cloud. It's a web service that provides a
scalable computing capacity in the AWS computing capacity in the AWS environment. So now it's a resizable computing capacity as per the requirement you can execute here. So in
simple words for better understanding you can say that you are taking one virtual machine on rent right. So folks here you are taking one virtual machine on rent. So how much you
are consuming you are going to pay for it in the cloud environment you are going to take one virtual machine on rent. How much you are using this how much you are consuming this you are going to pay for it. Right? So one more
thing I want to specify here. We are using the term EC2 this is also fine. Virtual machine is also fine. Server is also fine. Right? Even instance is the right term. In AWS console also we have a term
called instances. Right? EC2 instances. So but in some organization we call EC2 virtual machine server instances. All the terms are same. Right? Now if I'm
using EC2 service right what benefits I'll get first of all elastic webcale computing. So folks here EC2 can increase or decrease the
storage capacity in a minutes. So like when I'm expecting a huge amount of a traffic for my application at that time automatically the resources should be increased and when I'm expecting a low traffic for my EC2 automatically the
resources should be decreased and here you can launch thousands of server instances simultaneously. So folks for your understanding purpose now how I can launch thousands of server instances simultaneously there is a
concept called autoscaling groups using the autoscaling groups you can launch multiple EC2 instances at the same time simultaneously right now flexible cloud
hosting services so easy to launch the numerous operating systems instance type software in a minute so numerous operating system means here it supports operating system means here it supports Mac, Windows, Linux, right? Ubuntu and
even more different operating system. Then instance type. So here we have different types of instance type like storage, optimize, general purpose, right? Then we have accelerated computing. This topic I'm going to
discuss in the next part right after 10 to 15 minutes later. So but right now we have different types of instances like general purpose instance, compute instance type, storage instance type then we have accelerated computed
different types of instances are available right and even if you want to install a software that is also possible within a minutes you can install on your within a minutes you can install on your machine now right now it allows the user
to choose the memory c memory CPU instance storage and boot partition size that is best for the application and operating system. So as I compared in difference between our traditional uh server and EC2 instances right? So like
what you have the option to choose the configuration like what will be the what like which CPU I'm going to use right so what is the uh storage capacity what are the different uh like RAM which RAM I can use and what is the partition size
right in C drive you will partition like C drive D drive you can do the partition also where you are going to install the operating system fine now the next benefit AWS integration so this EC2 is integrated with many other
AWS services. For example, here we have S3. S3 is a storage service. Then we have RDS. RDS is database service. Then we have SQS. SQS is also message queuing
service. Right? So here we are listed only three but your EC2 is integrated only three but your EC2 is integrated with many more AWS services. Right? Now
with many more AWS services. Right? Now reliability and security EC2 provides highly reliable environment where the replacement instances can be quickly and consistently deployed. So now folks what I taken the name called autoscaling
group if I want to launch multiple EC2 instances at same time or simultaneously at that time I'll go with autoscaling group. In some cases if one of the EC2
instance is terminated or unhealthy at that time AWS is responsible to launch a that time AWS is responsible to launch a new EC2 instance to provide a results to the client. Right? So that is the reason if something went wrong AWS will take
care and replace that instances with the healthy one. Right? Now user can easily create a secure and robust network to run their Amazon EC2 instances using virtual private cloud. I hope you people are remember in the previous session I
are remember in the previous session I was taken the service called VPC. If I want to isolate the resources, I hope everyone remember I was taking the example. This is Santos VPC. This is Rajesh VPC. This is Kiran VPC. This is
right. This is Rajes VPC. Right? Santos Rajes Kiran. And no one can enter without that person like owner of that VPC. Right? So it's a isolated area where you are going to deploy your AWS services. So here also you are going to
deploy your EC2 instances within this VPC only. Fine. Now low cost. AWS charges the users in seconds. They only pay for what they use. How much you are consuming based on that you are going to pay for it. So the rates are lower than
existing onremises infrastructure. So folks, how many of you are agree with this what I taken the comparison in the yesterday session. Then we have yesterday session. Then we have completely control. So folks, the user
instances here. If you have any EC2 instance, the user have the complete control even you have a root access root access to all the instances right and these user can use the web service API to stop
on their boot partition and resume it back. So all the operations if the user has created one instance you can stop the instance. So using how by using the APIs already the APIs are created by AWS just you have to use this stopping the
API like uh terminating the API deleting the API even hibernating the API right keeping the data in boot partition size again if you want to resume it back there is a option called hibernation right once you hibernate once you
hibernate again when you resume it back it start from the same state and even the data is also maintained Right. So these all are the benefits of EC2 instances. So now folks let's move on to the next topic which is very very very
very interesting also right there are different types of EC2 storage option different types of EC2 storage option options are available right in that the options are available right in that the first one is
EBS with EC2 elastic block level storage with EC2 option. Elastic block level storage with EBS option right as you know that EBS is block level storage know that EBS is block level storage right EBS is block level storage right
and here EBS is block level storage it's a persistent storage where the data will be always available for you right so here one more point folks let me specify
here one more point folks let me specify here yes abs elastic block level storage. It's a persistent storage, persistent block level storage, right? persistent block level storage, right? Which allows the user to create and
attach EBS value. This is my EC2 machine, right? This is my EC2 and this is my EBS value, right? So, as I clearly specified, EBS is a persistent storage, persistent
block level storage. That means which acts like your secondary storage service, secondary storage devices, right? So here it allows the user to create a EBS volume then attach this EBS volume to EC2 instance right and this
volume to EC2 instance right and this EBS values are d like this EBS volume provide the durability durability as well as data persistence. So that is the well as data persistence. So that is the reason it make them suitable for storing
reason it make them suitable for storing some critical data or databases or installing operating system. Again I'm repeating folks if I talk about the use cases if I want to store some critical data or a databases or even if I want to
install the operating system of this EC2 machine at that time I'll install in EBS machine at that time I'll install in EBS storage right then instance store. Instance store is like a RAM which is temporary memory.
It's a temporary memory, right? Instance store is a temporary storage option, right? And no doubt it provides the higher IO performance, right? So that is
the reason it's best suited for caching purpose. purpose. Siddiki EC2 is a service server. EC2 is very much important in AWS. Do you want server in your organization? If yes,
then very very important. Right? Elastic block storage. Elastic block level block storage. Elastic block level storage. Right? So now folks, yeah, I right? So why we are using instance store? Instance store is a temporary
memory, temporary storage. Sorry. So here instance is a temporary storage here instance is a temporary storage now. And it performs high IO performance. So that is the reason temporary storage means when should I
use can I use for caching purpose right temporary memory means can I use for temporary memory means can I use for caching purpose right now next part here caching purpose right now next part here we have EFS with EC2 so folks
we have EFS with EC2 so folks EFS elastic file system right it's a EFS elastic file system right it's a scalable
manage managed storage service right so that can be easily mounted to multiple EC2 instances here right so again I'm repeating folks EFS is a scalable
managed file storage service that can be easily attached with multiple EC2 instances this is one this is two this is three this is four right so it provides a shared file storage so because of that reason it makes a well
suitable for the application which require the shared access shared access to the files across the instances right so whenever you want shared file system go with EFS now what are the use cases let me consider folks if you remember I
was taken in the previous session also development environment right where developer one developer 2 developer three and developer four all developers are working together for a same software
And everyone every developer is working on a different different modules and finally the result will be stored in this. Right? This is one example. Then another example content management system. Content management system where
for a single user the different contents are maintained. Right? This is also one of the simple example content management system also the best example for this system also the best example for this EFS story. Right? And the next one is S3
EFS story. Right? And the next one is S3 with EC2. S3 with EC2. Folks, let me with EC2. S3 with EC2. Folks, let me tell you here I have EC2 machine.
first of all the very important part here EC2 we are not attaching EC2 instance with E3 bucket. First of all, let me tell you first of all the first let me tell you first of all the first point we are not attaching EC2 with S3
bucket, right? So S3 stands for simple storage service. It's a unlimited storage service. It's a unlimited storage and it's a object level storage. storage and it's a object level storage. It's a object level storage where your
EC2 can interact with the S3 by using HTTP API. Again I'm repeating folks you have you have to make a request by using HTTP API have to make a request by using HTTP API to retrieve the data right so S3 is
unlimited storage right it's a object level storage and we are not directly connecting our EC2 to S3 we are not attaching right and whenever if I want
to make a request at that time we are going to use the HTTP API right and it's a object level storage you can store any type of data here. Yes. HTTP is 480. type of data here. Yes. HTTP is 480. HTTP is 443. HTTPS is 443 now. Right? So
this is about EC2 storage. Now, now folks, let me take the differences folks, let me take the differences between these all four. Let me clear this first. Okay. Now let me take the differences
between these all four. That is the reason before explaining I was specified. Please let me complete this part. then we'll have a discussion see because so now folks these are the differences what I completed this is for
just explanation part for your storage now if I talk about the differences let now if I talk about the differences let me take one by one so please help me folks what kind of a EBS storage now what type of a storage it is it's a
block level storage what about this this is persistent what about this this is is persistent what about this this is not see just I taken the analogy Palvi this is also temporary block level storage this is temporary block level
storage right so this is temporary block level right so this is temporary block level storage right and now third one shared access what kind of a story it is very good it's a file storage it's a file
storage right or managed network file system right then fourth sorry first system right then fourth sorry first what kind of a storage it is it's object object storage right let me take the second difference so folks if I talk
second difference so folks if I talk about the size so here EBS will be 64 dB about the size so here EBS will be 64 dB EBS will be 64 dB and here it depends on instance it depends on instance why we are
calling it as depend on instance because what kind of a instance you are selecting whether it is general purpose instance compute instance storage instance it depends on that the size may vary right and that too it depends on
vary right and that too it depends on the instance up to 3.6 6B. Okay. And what about this? It's unlimited. No restriction. What about S3? It's
unlimited. This is also unlimited. Right? Instance stories depend upon instance type. What kind of instance type you're using. Whether it is general purpose, compute optimize, accelerated computing, it it
depends on that. It depends on instance type. Instance type. So based on the configuration of instance type let us consider I have one EC2 instance with four virtual CPU right with Intel processor. So depends on that it
provides. Now let me take the third difference. So folks EBS is persistent difference. So folks EBS is persistent or non-persistent. EBS is persistent.
Instant shore non-persistent EFS persistent
access accessibility how we are accessing right. So now single EC2 accessing right. So now single EC2 right. So here also single EC2
multiple multiple what about here be careful for multiple what about here be careful for fourth one it's HTTP API
http or HTTPS API so always your EC2 can access S3 by using HTTP APIs Right. And let me take the last
difference about the use cases. So when should I use EBS to install operating system, database or any sensitive information, right? And what about instance store caching purpose? Very good. Then what about EFS? Shared
storage across the instances. Wherever you want shared access at that time you you want shared access at that time you will go with EFS. Then yes three images purpose can I use for web applications
can I use for web applications backup purpose right I can use for backup web purpose right I can use for backup web applications and even more right so now see if I talk about the costing also costing also instance store will be
lower EBS will be medium EFS somewhat EFS is somewhat expensive but this one is low cost. When you want to store a data for longer duration, S3 is low cost. When you want to store a for long
duration like five year, 10 years, 1 year, 2 years at that time this is lowest, right? If I talk about the performance also always this performance performance also always this performance is faster, right? This is fastest. EVS
is faster, right? This is fastest. EVS will be high, EFS will be moderate. So S3 compared to this is somewhat slow right. So folks this is all about the comparison of these different EC2 storage options. So folks
agenda for today's session is first we'll start with instance type instance types right then we have a topic called AMI Amazon machine image
topic called AMI Amazon machine image then placement group then we have another topic called metadata
Right. After metadata, we have a topic called EC2 purchasing options.
Purchasing options then we have a topic called hibernation. going to discuss in today's session. Now let me take you to the first topic of
today's session that is instance type. One thing important point as per the protocol in the protocol itself I'll clearly specify how much information is required for solution architect associate level I'm discussing with you
repeating because I'm the trainer who will take professional certification also professional solution architect associate solution architect sisops administrators deops and all but how much is required at sysop like associate
level I'm discussing right by taking associate certificate ation don't expect like professional information like in depth no need to go too more in depth how much is required now at this situation I'm not saying that in
associate level we are not going in depth we are going in depth but when it when the time comes right and one more point we are not discussing about the lab still I have not shared any files with you people still I have myself I'm
clearly specifying still I have not started the lab because there is a reason First we should get the basic information right once I'm ready with the basics like once I'm strong with the fundamentals with the what do you call
fundamentals with the what do you call foundation then I can provide the lab right what I follow so let us start with first topic of today's session that is instance types like what are the different types of instance types we
have like so folks when you go for your onromisy server where you have a different types of instances like sorry different types of server In market you have uh what is that Intel processors right? Intel processors, then we have
Nvidia processors, right? AMD processors with a different different configuration, right? For example, we have uh what is that uh i3, i4 earlier generation. After that, core studio dio i3, i5, i6, i10, i1 based on the
different configuration like this for every compute instances we have instance types, right? As you know that instance is a virtual server in the AWS cloud. So
EC2 offers a various instance types allowing user to select the CPU, memory, storage and networking resources which are required to run their application. So now here we have a generalpurpose instances. So when should I use this
generalpurpose instances? Let us consider when I'm designing web servers or code repositories which required uh equal resources in equal parts right let us consider I want to design one simple web server or code repository at that
time I'll go with general purpose instances right so here there are different examples are available every character indicates something like for character indicates something like for example T4G right so every again I'm
repeating folks every character which specifies something. Now T means specifies something. Now T means bustable performance. Four means processor generation. G means gravity and gravity and processor. So let me
and gravity and processor. So let me tell you folks there are three different types of processors are supported here. So here we have a different types of processor. So folks, first AMD processor. I hope everyone is familiar
with this, right? Then we have G gravitian processor. Then we have I Intel exactly Intel processor. So folks right now like
A for AMD, G for gravity and I for Intel processor right now it supports. Now processor right now it supports. Now recently right recently it added M that recently right recently it added M that is Apple chip. M Apple chip and there is
one more new processor type B star which is accelerated by Nvidia. Nvidia is accelerated by Nvidia. Nvidia blackwell GPU. These are supported by from beginning. Now recently these two processors B is for accelerated by
processors B is for accelerated by Nvidia Blackwell GPU and this AM indicates the Apple chip. Apple chip now right now every whatever you have the instance type for example T4G after this you will have like 100% you will have
you will have like 100% you will have this size size. So size might be like small, medium, large, right? Then X large, double X large. This type you have a size, right? Might be the type is
anything but the size will be medium like small, medium, large, XL large, double X large, everything. And for these abbreviation, no need to worry. No need to worry. I have one document. I'll share with you people each and every
abbreviation what it indicates. you will get the clear idea okay that is the reason I'm taking just only one got the point for that is the reason I'm asking time so I'll share one document where each and every abbreviation you will get
the details right now the next type is compute optimize instances so now folks compute optimize instances are suitable for compute inensive application that
benefit from high performance processor so what it means when should I use is compute optimized instances. So these compute optimized instances are very much useful in batch processing workload. Batch processing workload
where the bulk number of processes are going to be executed. Then we have dedicated gaming servers, add-on server engines, scientific modeling and even so engines, scientific modeling and even so on. Right? So here I have C6GN.
on. Right? So here I have C6GN. C for compute optimize. Six is processor generation. G is gravity and processing. N is additional capability. Additional capability. Right? Now, next point is memory optimized instances.
Memory optimized instances are intended to provide the rapid performance for a workload that process large data sets in a memory. So now when should I go for this memory optimized instances? when I'm dealing with database elect like
databases then electronic design automation workloads then realtime analytics so folks do you have any specific example for real-time analytics accelerated computing instances so folks accelerated computing instances use
hardware accelerator or co-processor to execute the task more effectively than software which is running on CPU so folks when you go for accelerated computing This is specially designed for graphical workloads. Right folks, if you
graphical workloads. Right folks, if you remember, especially from 2005 to desktop system or laptop system is not supporting. I was at that time adding
something to my system. What is that? Especially from 2005 to 2009. Yes, it's Especially from 2005 to 2009. Yes, it's graphics card. See especially from 2005 to 2009 where the desktop era was going on right especially when my SD games are
not supporting at that time so what usually what we'll add a graphics card so can I say that this graphics card will work as a co co-processor now can I call that this graphics card will work like a co-processor for these era right
so here also in accelerated computing instance it use some hardware accelerator right or a co-processor that execute the task in a more effective manner, right? Which is running on CPU. So when should I use this? When I'm
dealing with floating point number calculations, then graphics processing, then data pattern matching and even so on even so on. Right? So here you can see I have a different different uh what do you call instance type like G for DN
this G stands for uh what do you call uh first G right G means if I'm not wrong related to graphics intensive actually this G indicate the graphics intensive
this G indicate the graphics intensive and this processor generation right so here DN which provide the additional capability and here you can use a processor like even Nvidia will provide. Now specifically Nvidia is provided for
graphics only. Right? Now the next part is storage optimized instances. The continuation storage optimized instances are designed to provide the application
with tens of thousands of low latency random IO operations per second. So here folks storage optimize instances are specially designed specially designed to
deal with or useful for the workload that require the high sequential readr access for a large data set on a local storage. So when you are performing
sequential readwrite operation in any specific example now where we are performing sequential readwrite operation UPI transactions banking transaction transaction payments where you are going to perform the sequential
readwrite operations where you have a large data sets right so here you can large data sets right so here you can see LM4GN that means LM which indicates see LM4GN that means LM which indicates a storage optimized right then Four is
gravity and processor. N is like a additional capability. Right? So this is this part is about storage optimized instances. Now let me take you to the uh
instances. Now let me take you to the uh naming instance type. Right? Let me open this instance.
this one where you'll get the detailed information.
Yes. So here you can see folks see folks C 7 GN C stands for series right compute C 7 GN C stands for series right compute storage 7 is generation options right G is G is nothing but uh instance processor processor type right G gravity
and AMD and all N is like a additional capability this entire thing we are calling it as instance family and here we have instance size small medium large we have instance size small medium large X XL double XL 2 XL a different uh what
entire part we are calling it as instance type right and here we have all the series you can see A for AMD processor B is for accelerated Nvidia black GPU then gravity processor Apple chip these are the different options
which are available and here is the series all the series are available right so this is all about the instance type so once we go for the demonstration like first we'll take one assisted practice first lab assisted practice is
once we'll go to the demonstration I'll show you how exactly it looks in the AWS show you how exactly it looks in the AWS console also right next part called AMI just now we are done with storage optimized instances
right then we have Amazon machine images after storage optimized instances we after storage optimized instances we have AMI Amazon machine image so let me have AMI Amazon machine image so let me take you to this AMI Amazon machine
take you to this AMI Amazon machine image so before going to this. So folks, if you open everyone please and first you have to extract this because it's a zip file. Extract it. If you open, are you able to see the folder from 3 to 10
less than 3 to less than 10. So just click on third one. Okay, just click on click on third one. Okay, just click on third one. So after this right there is
third one. So after this right there is a document here creating AMI image right so keep this one now let me go with AMI first fine so folks AMI Amazon machine
image so what is AMI now AMI stands for Amazon machine image AMI is nothing but Amazon machine image AMI is nothing but which contains the information about EC2 instance what you are going to be launched again I'm repeating Folks, AMI
is something which contains the information about EC2 instance what you information about EC2 instance what you are going to be launched right so what kind of a information like which operating system you have which EBS like
are using what kind of a security group you are using right what like uh what is the IOPS rate for EBS volume everything you will get the detailed information right so the collection of this information we have in EMR. Right? So
now folks, I have one question here. Let us consider. Right? I want to launch multiple EC2. Right? Right. So if I use the same template to launch a multiple
the same template to launch a multiple EC2 instance now, the configuration of this EC2 machine is same or different. The configuration of these EC2 instance what you have launched using this AMI, the configuration is same or different.
Exactly correct. It's same. It's same because you're using the same AMI to launch a multiple EC2. No doubt even if you launch thousand also the configuration will be same. If you want a different different different
different operating system then create a separate AMI. This is for Windows. This is for Ubuntu. This is for uh Mac. Right? You can create a separate AMI. Right? So this AMI is a virtual instance that includes a template, right? Yes,
you can say that Karthik a template for the root value of the instance, a blueprint or a template for the root value of the instance. Even it consist like it consist of a launch permission to control the AMI launch instances,
right? along with a block device mapping that specifies the volume to attach to that specifies the volume to attach to the instances. Right? So here it specify which instance like for which instance this particular AMI is attached. Now I
this particular AMI is attached. Now I have one diagram here you can see. So folks in this you can see when you go for creating the EBS volume right so here you will get the option snapshots. Snapshots are nothing but a backup
right. Even if you want to take a backup of that, right? So you can create a snapshot that is also possible. Now once your creation of the EBS is done, then you are successfully register your EBS file, right? Sorry AMI, right? So
successfully done with creation of a AMI. This registration completes. So by AMI. This registration completes. So by using this AMI, by using this AMI, you can launch any number of instances. There is no restriction as I clearly
specified by using this AMI what you have created you can launch n number of instances there is no restriction but the configuration will be same right now the configuration will be same right now let us consider I want to share this AMI
let us consider I want to share this AMI I want to share this AMI so at that time I want to share this AMI so at that time you can copy this AMI between AWS region within the same region or any other region let us consider in future if I'm
not using this AMI, you can dregister it, right? You can dregister an AMI when it, right? You can dregister an AMI when you no longer need it. So if you're not using the AMI, you can dresister, right? Now there are different types of AMIs
are available. There are different types of AMIs are available in the first, let of AMIs are available in the first, let me zoom out.
Let me zoom out. First one is private. First one is private and the second one is specific AWS account.
Specific AWS account. Okay. Then third point is public. create a AMI or you can consider AMI distribution who all are to who is
having a authority to create the AMI. The first one is private. Private means let us consider Santoshi is created one AMI and this AMI will be used only by this Santo only. That's why we are calling it as private. Right? AMI is
created by you. So no other person can use this AMI. Right? So that's why we are calling as private AMR. Now specific AWS account even if you want to share with the specific AWS account. Let us consider here Namata is created one AMR
right and now she want to share with Aishwara. Now she want to share with Aishwara. So you should have the account number of Aishwara. Then you can share a specific AMI with from NRA to Aishwara. Now this
is specific AWS account. The third point is public. In AWS, we have a concept is public. In AWS, we have a concept called AWS marketplace.
So folks for better understanding let me take one simple analogy. This AWS marketplace is like Ox. Ox where you can buy and sell your AM. Right? So folks let me tell you in this marketplace
marketplace AWS developers community member trusted people all are available that I'm going to show you in the console also right so to show you in the console also right so here everyone if everyone like even
community members trusted authorities everyone will be there so here you can share like you can buy and sell your AM right now let me take you to the console
my EC2 instance. This is the dashboard for my EC2 instance. So now if you open for my EC2 instance. So now if you open the folder uh lesson 3 right there is a the folder uh lesson 3 right there is a file called creating AMI image
this is for your reference purpose right this document is for your reference purpose the same task I'm going to perform in the AWS console so folks these documents we are calling it as assisted practices lesson 3 demo one
creating AMI image so what is the objective of this to create a AMI from Amazon on AC2 instances. What are the tools are required AWS workspace prerequisite? None. Right? So let me tell you folks, simply learn is created
a very beautiful documents here to provide a in detail information along provide a in detail information along with the step one then step number 1.1 substep numbers along with the snapshots. First open the AWS console
snapshots. First open the AWS console then type EC2 right then go to uh EC2 dashboard everything click on new EC2 experience everything they are specified right so this is for your reference purpose now let me go to EC2 so folks
here what I'm doing now let me discuss one by one when the time comes so right now this is my EC2 dashboard you can If I want to launch or create one EC2 instance. No, no, no, no. Don't
perform this task. I'll give the time because it's too difficult to understand. Now folks, if I want to launch or create one EC2 machine, EC2 instance in AWS environment, you have to click on launch instance.
Okay. So now let me give the name called demo demo server. Okay now it's asking for name right demo server here you can see folks Amazon machine image what we are discussing you can see here. Yeah, you can see here Linux operating system,
Mac operating system, Ubuntu operating system, Microsoft Windows operating system, Red Hat, so say DAN and even more, right? Even if you want more AMIs, you can browse here. You can browse here. So quick start AMIs are 45 which
is commonly used AMI. Then my AMI till now I have not created AMI. That is the reason it's zero. And what I shown you AWS marketplace total 6,460 AWS marketplace total 6,460 AMIs are available and that two from AWS
and trusted third parties AMI some of the communities AMI which is published by anyone total 500 AMIs are available right now yes you can say that you can say that okay just click on launch instance
interacting with you people so we can discuss okay now provide the name demo server okay so I'll go with the Linux operating system and folks now we are operating system and folks now we are using Linux 2023 kernel 6.1 which is le
latest AMI right here you can see for this AMI here we have AMI ID right 64 34-bit x86 architecture right this is AMI ID then virtualization HVM so
enabled ENA enabled and root devices EBS elastic block level storage fine and here if you see in description there are two architecture we have first is 64-bit
x86 and ARM architecture so always we are going with x86 architecture right so now folks here just now know what we are completed instance type. Can you see
completed instance type. Can you see this? Here you can see T2 dot nano T t2 dot medinium T2 dotl large X large T3 nano small medium. If you see here T2 dot micro is always we are using in this
environment. Here you can see how you are scroll down like continue when you scroll down your instance type options right. So you will get the more and more instance types here. See just you can scroll down like
here. See just you can scroll down like this. Let me show you. instance types are available right now. So here you can use T2.micro because
So here you can use T2.micro because this is free tier supported instance type. Again I'm repeating folks don't go for T3.micro. Always use T2.micro. Even if it is showing free tier eligible go for T2 micro for T2.micro family is T2
one virtual CPU along with 1 GB memory right so current generation is true so right so current generation is true so you can see for on demand 0.0116 0116 USD per hour. This is for Linux. This is for Windows. This is for Ubuntu. This is
for SOC. So every operating system have the different pricing for this T2 micro. the different pricing for this T2 micro. Right now keeper what is keep pier? Keep pair is like a additional security for your EC2 instances. Again I'm repeating
folks. Keeper is like a additional security for your EC2 instance. Let us consider simple analogy here. Let us consider Chanavir is a developer who is official work he's going to Bangalore from Mumbai right so at that time first
he'll lock a main door main door of the house after that for better security for to make sure that this home should be more secure he'll lock the main door also this is advanc security right main gate there are two layer of a security
gate there are two layer of a security now so like this here keeper is like a advanc like additional level of a security if someone will get this key so they can easily connect with your EC2 instance right so whatever you're using
the key if someone will get that is the reason make sure that when you are creating any key pair make sure that it should be kept at the safe place if someone will get then they can directly connect with your EC2 instances right
now how to create a key pair right now I don't have any key pair there is a option here to create a keep pair Right? So you can provide the name. Right? So you can provide the name. There are two types we have for key pair. First one is
RSA which is encrypted private and public key. Then edit 2419. This is also for encrypting private and public key pair. Right? And here folks this key uh
private key file format PM. Right? Now what we are using is Pam only because what we are using is Pam only because PPK we need a separate a third party software called putty. Using the putty you can use this ppk file right which is
older concept. So directly we are using pm file right. Let me create one demo key with p. Let's create a keep pair. So you automatically this keep pier will be downloaded in my local system that is
nothing but in my laptop demo 14 pm file is available for me. So whenever you are trying to connect your EC2 instance by using SSH or a cloud shell or uh what do you call the SDK at that time these required when you are using okay if you
want additional security it's optional part but you can say that sometime it's mandatory also fine now demo key is selected after this right now folks no need to think about networking part because still we are not touched with
this networking part right okay folks let's launch let's launch uh instance.
which is available for Mina, right? So now folks, here you can see if you go back to the instance because if I start explaining with it takes time. Let me complete this part then we'll go for this. Okay. So here you can see folks
this. Okay. So here you can see folks this is my demo server. This is my demo this is my demo server. This is my demo server. Now, now you can see here a name of server is demo server with the instance id right and the status or even
you can call it as a state instance state right which is running now and the instance type is t2.micro so still it's initializing right initialization initializing once it completes here you will get 2x2 check passed 2x2 check
passed so what is 2x2 check passed there are two types of check we have First one is system check and the second one is instance check. What is 2x2 check first? First is system check and the second one is instance check. So what is system
check? It physic like it check first it ensures that physical hardware is working network connectivity from AWS side power and host machine health right
everything. If this fails problem is with AWS infrastructure not from the instance. Then what is next one? Instance check it check your instance operating system right then it ensures uh instance networking is configured
correctly or not instance booted successfully or not right kernel is responding or not if this fails problems is available inside the instance like operating system memory network you have to check that right okay again I'm
repeating there are two types of check first one is system check and the second one is instance check instance check. System check is relevant to AWS infrastructure and instance check is relevant to operating system networking
whether it is booted successfully or not even whether it is kernel is responding even whether it is kernel is responding or not. Okay. Now folks once you create your server okay now you have to create the image that means same EC2 instance
AMI right. So for that you have to go to the server fine and then go to the action and here folks there is a option called image and template then you can
click on create image. Now what I'm doing I'm creating a same image same image of my EC2 machine. I'm creating the same image of my EC2 machine. Right? So create images option create image
option is available now. Right now if you don't select this EC2 many participants what they'll do they'll not select this option and directly they go for here right so I'm going to the action and here this option is disabled
so how it will be enabled until and unless you have to first select the unless you have to first select the server then go to the action and image and template create a image
see what is the name of your image now let me create a new demo Okay, image name is new demo description blah blah blah blah blah it's up to you right so reboot instance so when you select this right so EC2 will like uh
EC2 will rest when the snapshots are attached to your volumes when you are attached to your volumes when you are taken so here always it ensures that the data will be always consistent here right so folks what I created the EC2
instance it's 8 GB again I'm repeating what I created the EC2 instance it's 8 GB here in this image if you want to change the size up to 64GB you can modify it's up to you but I'll keep as
it is no I don't want to change anything here keep everything as it is let's here keep everything as it is let's create a image this is EBS details right so now you can see currently creating AMI this is AMI ID from instance this
instance is processing right you can check the status until and unless it should be available. Let me go to the AMI section. Now let me go to the AMI section. Here I have images and AMI option. So folks, is it the same AMI
what I created just now? You can see still still status is pending. It should still still status is pending. It should be available now. Right? So after that let me show you. Let me click on launch instance again.
Here you can see 2x2 check passed successfully done. Okay. So folks, successfully done. Okay. So folks, everyone please concentrate. Now in AMI section, I'll get a new field. Can you see this? My AMI is new field. Folks,
AMI what I created just now in front of you people? Earlier it was not there. But now I created with the same image, right? Earlier it was not there. Just now I created in front of few people with the same EC2 I created one image.
with the same EC2 I created one image. Even if you go for browse more AMI here you can see my AMI is one now created by me new demo is successfully available me new demo is successfully available for you. Right. So folks one thing I
want to specify here what I created the AMI here. By using this AMI you can launch multiple EC2 instances when when it is available. Okay. So folks, this is
all about the demonstration. This is all about the demonstration for your AMI. How we are creating the AMI and how we are creating the image of AMI. So this is your first demonstration now. So folks, first of all, this placement
group is one of the feature placement groups is one of the feature of EC2. Placement group is one of the feature of EC2. group is one of the feature of EC2. Right? Actually it helps the users. It
helps the users to deploy to deploy a group of
interdependent instances to handle their workload in a more effective manner. Again I'm repeating folks here. It helps the user to deploy a group of this is
the user to deploy a group of this is group of interdependent instances. So folks, if you use single instance, it depends on the single instance configuration, right? When you use a group of interdependent where the
instances are dependent on each other, right? Interdependent instances. So you will get a more configuration. So that is the reason you can handle your workload in a more effective manner. Right? If it is single instance which is
relevant to like which is only relevant to a specific configuration when you will get a group of EC2 instances which are interdependent you will get a more more more computing power. That is the reason if you want to handle your
workload in a more effective manner at that time we are using placement group. Placement groups are not mandatory. Placement groups are not mandatory. Right? So it's up to you. It's up to you. You can create and enable this.
Right? Now some of the important points for this placement group in that the first one is okay fine. Let me take one simple example. You cannot attach you simple example. You cannot attach you cannot attach EC2 instance to security
group unless the security group should exist first. You cannot attach your EC2 instance security group unless the security group should exist first. So
this is dependency right? This is dependency now. Fine. Now here folks some of the important points for this placement group. So per region 500
placement group can be created. Right. And always make sure that name of every And always make sure that name of every placement group should be unique. Always name of every placement group should be unique. And here merge is not
possible. Merging of placement group is not possible because there are different placement groups are available. Right? Cluster, partition, spread. So merging of placement group is not possible. These three points you have to keep in
These three points you have to keep in mind. Now folks, let me take you to the custom diagrams. Here I have one document. And folks let me tell you in every session I'll use this custom diagrams 500 placement group per region
not per instance per region. Okay. So folks this is custom diagram document. So in every session I'll use this document to clear more about the topic.
available in the material section. These diagrams are my personal collection what I taken from the official AWS page. Right? So I taken this diagram from the the placement group. If you see the diagram you will get a,000% clear
picture of how the cluster how the partition how spread will work. So now partition how spread will work. So now folks here you can see cluster placement term called racking networking? Okay. No. Yeah. Let me explain if you're not
aware. See rack is a place those who are already aware you can acknowledge for already aware you can acknowledge for this. Rack is a place where I can host my servers. Can I say that in simple words? I'm using rack is a place where
I'm going to host my servers. Are you with me folks? Those who are already aware, I'm taking the input from them. Rack is a place where I can host my Rack is a place where I can host my servers. So now I am using a single
rack. I'm using single rack to launch multiple EC2 instances. In cluster placement group I'm using single rack to launch multiple EC2 instances. Let us
consider in some case a rack fails then all the EC2 instances will fail. All the EC2 instances will fail right. Let me show you the description. So same rack and same availability zone it provide the great network with the low latency
and the communication a 10 Gbps bandwidth between the instances if you want to communicate right. So what is the advantage? See sorry what is the disadvantage? If rack fails then all the EC2 instances will be fail at the same
time as I shown you in the diagram. So when we are using what are the use cases for big data jobs that need complete fast right and even some of the application with low latency high throughput. The best example for low
latency high throughput is stock market right where the instances can be communicate with each other with the low latency to provide a quick results with high throughput right now the next one is partition placement group. So folks
this partition placement group is also available in single availability zone but here you can create a multiple question sir how many partitions I can
create now up to seven partitions in single availability zone you can create up to seven partition and here every partition have a separate rack every partition have a separate rack. If something went wrong with the first rack
that doesn't going to affect the partition two and three. If something that doesn't going to affect partition one and three. If something went wrong with the partition three rack that doesn't going to affect the partition
one and two that is the power of partition placement group now right so here you can deploy hundreds of EC2 instance there is no restriction let me show you in partition up to seven partition per with hundreds of EC2
instances you can deploy so the instance of one partition do not share the rack instance with other partition if partition failover can affect a many EC2 inst instance from a same partition but it won't affect for other EC2 instance
in other partition that is the power of partition placement group now right now the third type is called spread placement group the name itself indicate
spread where you can use in multiple availability zone in a single region multiple availability zone in a single region like here I have 1 A availability zone, 1 B availability zone, 1 C
availability zone. Even in same single availability zone for every EC2 instance have a separate hardware. Right? So here for 1 A availability zone, EC2 with the
separate hardware, EC2 with the separate hardware. what it means even within the same availability zone if something went wrong with the first EC2 hardware that doesn't going to affect the hardware too because for every EC2 a separate
hardware will be maintained right same thing in 1B also if something went wrong with the hardware 4 that doesn't going to affect hardware 3 because for every EC2 the hardware is separate same thing if something went wrong with the
affect six even if it is in the same available ility zone every EC2 are independent and let me tell you folks in a single availability zone you can launch up to seven instances it's a hard limit right up to seven instances not
more than that right so now spread all EC2 instances will be located on a different hardware span across the multiple availability zone it reduces the risk of simultaneous failure and there is a limit of seven instances per
a per placement ment group. So when should I use this? Let us consider I have the application that needs a maximum high availability like critical application right critical application
that need to be isolated from failover from each other. So folks can I consider critical application means can I use for defense system? Yes. Right. Okay. Now let me show you where this feature will be available in your EC2 instance.
See when you scroll down there is a option called advanced details. Just click on this. When you click on this advanced detail many additional features are available. You can see there is a option called create placement group.
Right now I don't have any placement group in this in this region. Right. Let group in this in this region. Right. Let me create a new placement group.
group. Let me create a new one. Let's create a new placement group. The name create a new placement group. The name called today's date is 06. Demo 06. And which strategy you are using? I'm going to use a cluster. Let's create a
placement group. And folks, when you go back to your EC2 dashboard here, launching the instance, still it is not available. You have to refresh now. Right? So now while you are launching the EC2 instance you have to
launching the EC2 instance you have to select this demo06. Is it the same demo06 placement group what I created in front of you people folks cluster is the strategy is it the same placement group? Yes you have to select this and you can
launch your install right next topic called meta data. So what is metadata folks? Data about EC2. What kind of a data information about EC2? But what kind of a information about EC2? A E API security table configuration details of
EC2 contains the information about the EC2 which is running. Right? Like what is the AMI ID of instance? What is the instance type? What is the public hosted name? Right? What is the local host name? What is the IPv4 address? Right?
Then MAC address, what is the security group? What is the instance ID? What are like what is profile then what is the tax everything you'll get the detailed information here exactly correct meta data is all about the data about what do
you call data about the EC2 instances right now let me show you how we are right now let me show you how we are enabling this let me create a server enabling this let me create a server called m server okay
this is my Linux operating system t2.micro So
networking keep everything as it is. So here make sure that SSH traffic should be allowed right SSH traffic should be allowed. So now go to advanced details
right. So there is a feature called metadata. Please check it out where it is. Yes. Can you see this? There are two options are see meta data it's enabled right so here we have two versions
v_sub_1 and v_sub_2 so v_sub_1 is like without authentication v_sub_2 is like with authentication where the token is created again I'm repeating we have two types of metadata v_sub_1 and v_sub_2 v_sub1 means without authentication
v_sub_2 means tokens are required where authentication is required where 6 hour sessions token will be created right so which provides a better security right let me select both v_sub1 and v_sub_2 okay now v_sub1 v2 is available let's
create a instance let's launch the instance right v_sub_1 is for request response method v_sub2 is for session oriented for maximum six hours okay let me go to the instance and here is my meta server
select this see here you can see meta server is see here you can see meta server is available right just click on connect now directly I'll connect to my EC2 by using EC2 instance connect option
connect it because SSH traffic is allowed for me because SSH traffic is allowed for me right SSH traffic is allowed for me okay now you can see I am in my EC2 machine this is my EC2 machine right
with the Linux 2023 operating system and this is public IP and private IP of my EC2 machine. So folks, if you want to check the meta data of EC2 machine by check the meta data of EC2 machine by using version one, I have two commands.
using version one, I have two commands. Let me
okay. So this is first one. This is for first version one. copy it and just paste it here. So, curl http col 169 254 169 254 latest
meta data. This is the standard URL. This is the standard URL you can use to check the meta data of any EC2 instances by using version one. Just enter it. You
What you want to check? I want to check the AMI ID of EC2 machine. So just you the AMI ID of EC2 machine. So just you have to add AMI ID. have to add AMI ID. Okay. Now you will get the AMI ID of
this particular EC2 machine. Right. Let us consider I want a MAC address of this us consider I want a MAC address of this EC2 machine like this. Just type MAC ID. So this is the MAC ID of your EC2 machine. So by using this way you are
machine. So by using this way you are getting the responses for your EC2 meta data version one right. So version two will be like assignment. Here you have two steps. I'll share this document. You will get the details of your EC2 machine
by using V2 also. Same steps. First you have to copy step one then copy step Provide the name of the attribute. You will get the detail information. Right. will get the detail information. Right. The next topic is about EC2 purchasing
options. So let me take you to the next topic called EC2 purchasing options. So folks here I have the next topic called EC2 purchasing options. Okay. So folks
when you create any EC2 instance by default it's on demand instances. So why we are using ondemand instances? Because there is no any commitment
there is no any commitment right then ready to use always even you right then ready to use always even you can use for short workloads can use for short workloads short workloads but this is costly
but this is costly folks costly compared to other options right so first of all there is no any commitment here always ready to work and here even this is best for short workloads right this is costly compared to other options. Right. Next,
we have saving plans. In saving plan, you will get a 65% of a discount
here you have to give a commitment of 1 or 3 years. 1 or 3 years of a commitment required. And here you will get 65% of a discount. Right? 65% of a discount compared to your on demand instances.
Right? Then next we have reserved instances. Here also you will get 1 or 3 years of a commitment. Right? And here you will get a discount up to 72% compared to your ondemand instances. Right? Might be you have a question sir
what is the difference between saving and reserved instances? See in saving plan it's possible to change the instance family like from T2 to T6 from
T3 to R six you can change the instance family but in reserved instances right in reserved instances if you select R6.large that means this R6.lar should be used for this 3 years. Now the next question
sir then when should I use this reserve instance? Let us consider yes let us consider Santosh is one of the solution architect for IRCTC website. So IRCTC
architect for IRCTC website. So IRCTC website so now Santosh is already aware website so now Santosh is already aware this IRCTC website will work for 100% 3 year and I know that this much of a traffic I'll get every day I'll get 1
million request for this server already. I I know that right. So that is the I I know that right. So that is the reason I'll take the decision to use R6.x large for this three years. So now in
this situation even if you are expecting some high traffic also it's not possible to change the instance type in this red reserved instance. Right? Then the next reserved instance. Right? Then the next one is spot instances. So folks, spot
one is spot instances. So folks, spot instances you will get 90% of a discount compared to your ondemand instances. Right? Might we have a question sir? Why we are getting 90% of a discount here? Might we have a question? Because this
part instance spaces are some of the unused space from saving plan reserve instances or on demand instances. Some of the some of the unused spaces are
allocated in this spot instances. Right? That is the reason you are getting 90% of a discount. Apart from this, apart from this, there is one twist. What is that? Let me explain with one simple example. So folks, here I'm getting 90%
of a discount. Right? Let me take one simple example. Here folks, in this hotel and lodging facility, I have total 100 rooms. 100 rooms. Total 100 rooms and all the 97 rooms are
Total 100 rooms and all the 97 rooms are occupied with amount of $100 occupied with amount of $100 with amount of $100. Okay. Now after 24 vacened. These three three rooms are vacened. Right. So now suddenly one
person will come and he'll ask the room. Okay. Hey manager do you have any rooms? Okay. Hey manager do you have any rooms? So yes, answer is yes, but I'll pay $50. I'll pay $50. Okay, he's agree. But
he'll put one condition. He'll put one condition, right? So if someone will come with more value, if someone will ask for this room with $60, you have to leave the room. This room is allocated to this person with $50. But manager
will put one condition. If someone will come with higher value then this you have to leave the room like this. Let us consider here we have Santosh and Ferdin
right. So now this space is allocated to Santosh Santosh right. So after this Santosh is taken this space for $100. Right? Now Ferdin will bid for $110.
So this space will be allocated to furin and for Santosh before 2 minutes he'll get the notification please complete your task save all the data and your whatever the uh what do you call this space is there this will be allocated to
space is there this will be allocated to so and so person right so now that is the reason AWS is clearly specified AWS is clearly specified don't use spot instances if you have some mission critical data complex data or any
important data. Again, I'm repeating folks, this is very important. Don't use spot instances when you are dealing with critical data, mission critical data, complex data because if the data is vanished, it's not possible to recover
vanished, it's not possible to recover it back. Right? The next one, dedicated it back. Right? The next one, dedicated host. So folks, dedicated host is very very very very costly compared to all these options
because a separate physical server will be provided to the single customer. Right? Now might we have a question sir when we are using them specially specially for compliance purpose or let us consider I want a licensing that
requires some dedicated physical server at that time we'll go for this one right where you want a dedicated physical server especially for licensing purpose at that time I'll go with dedicated host >> now we've come to the end of this
session on AWS solutions architect certification training we've learned how AWS supports cloud architecture through compute, storage, networking, databases, security, monitoring, automation, and scalability. Thank you for watching.
Until then, keep practicing and keep learning.
is important, but knowing how to design the right architecture is even more important. The real question is, can your cloud solution handle traffic, stay secure, reduce cost, and recover quickly when something goes