AWS Cloud Basics: Core Services & Architecture — Step-by-Step Guide & Transcript

[01:04] is important, but knowing how to design the right architecture is even more important. The real question is, can your cloud solution handle traffic, stay secure, reduce cost, and recover quickly when something goes wrong? Welcome to

[01:20] this session on AWS solutions architect certification training. Designing secure and scalable cloud solutions. In this course, we'll understand how AWS helps businesses design, deploy, and scale

[01:35] businesses design, deploy, and scale cloud solutions. We'll also explore AWS fundamentals and the shift from onremise to cloud infrastructure. Now let's look at the agenda for this course. We'll learn AWS core concepts like regions,

[01:49] availability zones and pricing models and explore compute services like EC2. Next, we'll cover storage services like S3, EVS, and EFS and networking concepts

[02:02] including VPC and subnets. We'll also learn about load balancers, content learn about load balancers, content delivery, and AWS security using AM roles, policies, and permissions. We'll explore databases, serverless,

[02:16] monitoring, automation, and containers, and learn to design scalable, secure, and cost-effective AWS solutions. Before we begin, just a quick note. AWS solutions architect certification training. It's aligned with the AWS

[02:31] training. It's aligned with the AWS solutions architect associate exam. This course helps you master AWS architectural principles and services architectural principles and services like AM, VPC, EC2, EBS, and more. You'll

[02:44] learn to design, plan, deploy, and scale AWS implementations using more than 70 cloud computing services and Amazon designated best practices. It includes 50 hours of e-learning content, 16 live demos of AWS services, and three

[03:00] simulation exams. You'll also get three realtime industry projects, integrated realtime industry projects, integrated labs, and 247 learner support. By the end, you won't just understand AWS services, you'll know how to design

[03:14] cloud solutions that solve real business problems. Before we begin, here's a quick question for you. Question one, what does AWS stand for? Option A, what does AWS stand for? Option A, Amazon Web Services. Option B, advanced

[03:29] web software. Option C, automated website system. Option D, application >> World's number one boot camp and even I welcome you to AWS solution architect

[03:41] welcome you to AWS solution architect associate course. Right. So myself, Muzanil Daki, I have total 11 years of experience in teaching and training. Right now I have three certification. Solution architect professional level

[03:53] certification, solution architect associate level certification and sysops administrator associate level certification. So I'll be your trainer for entire these number of course. Right? So for total AWS solution

[04:06] architect associate course I'll be the trainer who is going to handle all your sessions. Right? Let's start with introduction to AWS. Before that first introduction to AWS. Before that first question, what is cloud computing? So

[04:19] question, what is cloud computing? So folks, cloud computing is an ondemand folks, cloud computing is an ondemand remote availability of resources such as computing power, data storage and networking without direct user

[04:33] networking without direct user management. So folks here one more definition to understand in a better way from my end right see cloud computing is from my end right see cloud computing is all about ondemand delivering IT

[04:45] resources over the internet. Right? So what kind of a resources here it's all about on demand that means whenever it is required at that time you are going to use that and you are going to pay for it right so what kind of a resources

[04:58] like computing where you are going to process the data then where you are going to store the data right then where you are going to provide a security networking and that to without direct user management what exactly it means

[05:12] someone is there without direct user management means someone is there behalf of you to manage your data. Are you getting the point? Someone is there behalf of you to manage your data. Let me take one simple example. Right? Let

[05:26] me take one simple example. Electricity board. Electricity board where you are paying for how much you are consuming the power. You are not maintaining any the power. You are not maintaining any infrastructure there. Right? Someone is

[05:41] there to manage that electricity board. But here how much you are consuming how much you are consuming the whatever the energy whatever you have the resources everything you are going to pay for it right you are not directly managing the

[05:58] infrastructure electricity board you are not managing that just how many that you are going to pay for it like this in cloud computing also you are not going to manage your infrastructure just

[06:11] based on that you are going to pay for it. Right? Electricity board you can compare with the cloud computing concept. Right? Now here the companies that provides uh like companies that provide these services are called cloud

[06:26] providers. So right now folks from my end AWS is one of the cloud provider. Do you know any other cloud provider right now in the market? Any other cloud now in the market? Any other cloud provider in the market? AWS, GCP,

[06:39] provider in the market? AWS, GCP, Alibaba, Azure, Oracle, IBM these all are the cloud provider. These all are the cloud provider. So these all are even if you make the list there are lot of cloud providers are available right

[06:52] and these services are accessible over the internet. So how you are accessing this connect cloud services by using our internet connectivity right now cloud providers ensures large scale management of these services. See when it come for

[07:09] the cloud providers, cloud providers are going to provide a large scale of a management of the resources right not only we are restricted to only large scale management. Even cloud providers they'll provide a service to startup

[07:24] also and even individuals also. It's up to you how you are going to utilize to you how you are going to utilize that. Right now here now we are going to discuss about one of the cloud provider that is AWS. What is AWS folks? AWS

[07:39] that is AWS. What is AWS folks? AWS stand for Amazon Web Services. It's a leading cloud provider right now in the market which offers over 200 ondemand cloud services and these services are extended to individuals, companies,

[07:56] government based on a pay-per use model. Right now, why should I go for AWS? What are the features I'll get if I'm going to AWS? First of all, reliability. See,

[08:08] if you have huge amount of a data, even if you have low amount of a data, the performance will be always consistent, right? If you have huge amount of a data, even low amount of a data, the performance will be consistent and even

[08:23] efficient, accurate, right? That is the power of one of the even you can say that one of the feature of AWS then scalability let us consider I have one scalability let us consider I have one application right so for specific

[08:37] duration I'm getting huge amount of a traffic at that time here automatically my application resources will be increased right when I am not expecting any traffic for my application automatically the resources are

[08:51] decreased so this part is about scalability now Security part. How I can make my cloud environment secure. For this we have a concept called defense in

[09:03] depth. Defense in depth where a security will be provided at different different layer. Let us consider this is layer 1. This is layer 1. This is layer two. Right? This is layer three. So now if I want to make my cloud environment

[09:16] secure. So security will be provided at different different layer. Right? This layer three. So what kind of a security I can provide that I'll discuss in future classes right cost effectiveness. So as you know that pay as you go model

[09:33] how much you are consuming based on that you are going to pay for it right now if I talk about the market trends right now AWS professional salaries right the average salary for AWS professional salary is like $160 $60,000

[09:48] and there is a huge demand of AWS professionals right 60% of a cloud computing job requires AWS related skill now I hope you people are heard almost like majority of the companies right now they are migrating they're migrating

[10:02] from onremism to AWS environment right not only AWS might be the any cloud but if I talk about the AWS right now which is leading right so all the organization

[10:15] now they are shifting right migrating from on-romises to AWS environment so everywhere AWS professionals are required and the condition is the person should be skillful again I'm repeating a person should be skillful that means you

[10:32] should know how to survive in the AWS environment being a solution architect you are going to provide a solution what kind of a instances what kind of a databases what kind of a storage you are using for your organization it's your

[10:46] duty to provide cost optimized solution to the organization or a client right now what are the skills are covered in this course virtual private Red cloud storage services security and IM. IM stands for identity and access

[11:02] stands for identity and access management then container services. So course? Might we have a question? Why should I go for solution architect? As I clearly specified just now in a single line all the organizations are migrating

[11:16] from on premises to AWS. So in that situation solution architect is must right as per the client requirement whether I am providing a solution or not I should meet the requirement of a client right I should satisfy all the

[11:31] requirements of a client so then only I'm a solution architect right so even if you adhere on the requirement of client that is not sufficient and make

[11:43] sure that what you are designing the architecture it should be secure it should be resil land it should be high performing and that two very very very important is cost optimized architecture because cost is very important factor

[11:57] because cost is very important factor right so anyone see might be anyone can provide the solution hey I know about the AWS services let us consider one ABC person is there who is having some knowledge about the AWS hey I know that

[12:09] how to launch my EC2 instances fine launch your EC2 instance so do you know launched if you are aware about That's that's really really well and good. But do you know for which workload which instance type should be used? What kind

[12:23] of a storage should be used? Right? So who is going to provide that kind of a solution? It's a solution architect because solution architect is the person who is going to provide a solution for your workload. Right? What kind of a

[12:38] working? Are you working with graphical related? Are you working with batch processing? Are you working with any floatingpoint calculation? It's up to you. Like being a solution architect,

[12:50] you are going to decide that, right? See, solution architect, one more important point, solution architect is not only providing a new entire architecture. They're responsible to review the existing architecture also,

[13:04] existing solutions also. So what they can do? They can review they can review suggested so we have designed our architecture. No being a solution architect even if the organization is

[13:19] now migrated it's your duty being a solution architect you have to review that right then you can improve the existing solution how I can improve like based on the what kind of instances storage databases networking security

[13:33] there are lot of things are there any loopholes are there being a solution loopholes are there being a solution architect you have to identify right now learning path so folks in this course we We have 10 modules. We have 10 modules.

[13:47] You can say 10 modules or 10 lesson both are fine. Okay. Now what I'm doing course introduction then AWS core concepts compute related features storage services VPC networking content delivery then databases security and IM

[14:03] serverless and application services monitoring and automation and finally container services. Right? So these are a total 10 models what we have for solution architect. Now course component. So folks in this course there

[14:17] are different components are available in that the first one is lesson end project. So what is this lesson and project? How many modules we have? We have 10 lessons right. So first and second are basics. So now if you

[14:31] complete module number three which is relevant to compute which is relevant to compute. Right? Now once you complete module number three called compute based on this module you will get one lesson end project like you will get one mini

[14:46] project where you are going to perform after this session and if you get any difficulty I'll be there to help you for this okay once you complete this is for module number three now module number four is storage right so once you

[15:01] this you are going to perform one lesson and project right so these are like mini projects what you are going to perform after the session then we have course end project this is mandatory to unlock your simple learn certification right as

[15:16] ma'am clearly specified at the last day of a session out of these two project I'll discuss one project with you people how to submit and what are the task you demonstrate about that how to perform

[15:30] that task right and the very interesting and very important called assisted practices assisted practice This is is something let us consider we are working with the module number three called compute right in this compute module

[15:45] there is a topic called AMI if there is a topic called AMI based on this one assisted practice like lab exercise will be there you are going to perform in the session in front of me like first I'll demonstrate the task once my

[15:59] demonstration is done you are going to perform the task in front of me and sometime I'll give the assignment after the session also So you have to perform that I'll provide like I'll provide some exercise or assignment what you can

[16:12] exercise or assignment what you can consider right now knowledge check. So number three which is relevant to compute right. So based on this module you will get some MCQ questions multiplechoice questions in this session

[16:27] I'll take this. So you have to answer for these questions right now course and assessment. So this is first factor and this is second factor. If you want to learn certification these are the mandatory points you have to complete

[16:42] first course and project then course and assessment this is also I'm going to discuss in LMS right and the very important part ebooks a material section important part ebooks a material section everything all about these all are like

[16:56] all about the material everything about this course will be available in ebooks this course will be available in ebooks that I'm going to show you in LMS okay lesson project is also mandatory It's up to you. This is for knowledge purpose

[17:08] pin. This is for knowledge purpose. Okay. No need to submit this. But if you complete you will get the confidence. So based on what we have completed the module. So I completed this particular mini project. You will get confidence in

[17:23] this. Okay. Now exam format. So usually folks I'll not discuss about this exam format about solution architect C3 because at the last day I'll discuss this. But if you want I'll just uh have a overview on this right. So C3 is the

[17:38] course 65 MCQ questions 2 hour 10 minutes of a time 130 minutes and this exam can be taken in English, French, German, Italian, Japanese, Korean, Portuguese and simplified Chinese also.

[17:51] Right? So usually about this examination in detail I'll discuss at the last day in detail. Okay. how to book examination, how to like uh how to solve question each and everything I'll discuss at the last day of session.

[18:06] Okay. Yes. This is also like if you talk about the cost in India 150 plus $27 total $177 you have to pay for this exam, right? 20

[18:19] USD for mock questions and testing like testing center or online proctor. Again, this part is also I discussed at the last day of a session. Fine. Okay. Let me take you to the LMS now. Learning management system.

[18:35] management system. Where is my LMS? Yes. So I hope folks when you log into your learning management system, are you able to see there is a tab called AWS solution architect associate level course. Okay.

[18:50] I hope all are able to see this AWS solution architect associate level course. Right. Click on continue learning. Click on continue learning. Right. So first tab is learning track. If you

[19:05] click on learning track there is a option called self-arning. Self-arning. Right. So self-arning as I clearly specified in the theoretical part like in the slides. These are the pre-recorded videos by some of the AWS

[19:20] experts. These are always available. You don't have to download this right because the lifetime access will be available. So no need to download right and it's up to you how you will complete right. So better like whenever you are

[19:34] also fine but this is also one of the mandatory thing to unlock your simple learn certification 85% of a self-arning should be completed. Now I hope all are attended the session from this live classes only. Are you with me folks? All

[19:49] are joined the session from this live classes. Very good. That's superb. That's really superb. Right. And the one more important point folks, once our session is complete, right? Let us consider today at 11:00 we are done with

[20:04] our session. Right? So tomorrow after 24 hours the recordings will be available here in the my classes section only. Again I'm repeating once we are done with uh 24 hours after the session then the recordings are available for you in

[20:20] my classes section. Just what you have to do if you go to the my classes right which class recording you want just select the date might be you are able to see the date now right today is 3 like 4 5 6 4 5 6 7 8 February month right let

[20:36] us consider tomorrow you want to check the recording of today just click on 3rd February then you are able to see below that a link will be available for you so you can access anytime from anywhere right now assessment part so Folks, this

[20:51] part also I'll discuss last week because assessment is mandatory to unlock your simple learn certification. First two tests are there right within these two

[21:03] test you have to clear at least one. And let me tell you every test carries three attempts. Every test that carries three attempts. Right? So here you have two tests. Out of these two you have to clear at least one. At least one. Then

[21:18] there is another point to unlock your simply learn certification. Here we have two projects. Out of these two projects you have to submit at least one at least one to unlock your simply learn certification. Right? If you see

[21:34] here if you click on certificate there are three mandatory things are available. First self-arning should be completed 85%. And project should be submitted. Out of two project you have to submit at least

[21:46] one project. Out of two test at least one should be clear. Then only your simply learn certification will be unknown. Right? Now this is for certificate part. Now the very important part is material section. Material

[21:59] section. Here we have a reference material. Let us consider I want what I'm going to perform in this session. Right? Just click on this session. Right? Just click on this download button. You can see here

[22:12] assisted practices are downloading. You can see once it completes you can see the folder here. Yes, assisted practices 84 MB folder is successfully downloaded in my system like this. Whatever you want, ebooks,

[22:28] lesson and projects, live guide, lab guide, anything whatever you want regarding the material you can download from here. Right. And the third tab is from here. Right. And the third tab is practice labs. I have the third tab

[22:40] called practice labs where in simply learn environment where you are going to perform your labs here in the practice lab section just click on this right so once you click on this there is a option called launch lab you can click on this

[22:55] there is a blue button at the bottom bottom bottom side right bottom side click on launch that's it the remaining part I'll discuss so now folks let me take your inputs Okay folks, let's move on towards the

[23:11] next module where I'm going to discuss about AWS overview. Right now, so folks in every module you will get

[23:23] this scenario. Scenario for whom? A solution architect. So now you are a cloud architect in an organization and have been asked to implement a solution have been asked to implement a solution in the AWS cloud. As a beginner in AWS,

[23:38] focus on AWS core services such as computing, storage, databases, networking services, and even more. You must set up an AWS account and use the

[23:50] AWS CLI. CLI stand for command line interface to interact with AWS services and resources. Additionally, learn how to securely regulate access to AWS

[24:02] resources using AWS identity and access management. To achieve this, you will learn a few concepts in this lesson that will help you to find the solution for given scenario. Right now, learning objectives. By the end of this lesson,

[24:17] you will be able to set up an AWS account. Enabling access to and utilization of AWS services. Configure billing alerts to monitor AWS charges for cost control and budget management. Delegate access using IM roles to

[24:33] enhance the security permissions management and setup and work with AWS CLA for efficient interaction with AWS services. So folks, these are the learning objectives or you can call it as a outcomes. Once you complete the

[24:48] module, you are able to answer the questions based on these topics. Okay. So folks, I have one question before going to this. How is my pace? Please feel free feel free to put on your inputs because again and again I'm

[25:03] repeating it's your session. How is my pace? Whether I'm going too fast, too slow or all good. Okay. See please provide your genuine responses. See again I'm repeating feel free to put down your inputs by taking your inputs

[25:17] only I can improve the session right. So what I believe taking the inputs after what I believe taking the inputs after this session right I can implement in your inputs within a session so I can implement within a session itself right.

[25:33] So why should I wait for 24 hours if you put down your input so I can improve within a session itself. Right? So as I can see start with the AWS infrastructure. So what is infrastructure? Can I say that

[25:46] infrastructure is nothing but combination of software and hardware components. So [snorts] now here I'm talking about the AWS infrastructure. In talking about the AWS infrastructure. In that the first term is region. So what

[26:00] is region? Now reason is nothing but a geographical location where all the AWS geographical location where all the AWS services are available. Right now folks total 39 regions are available around the world. One more definition for

[26:15] better understanding you can say that region is nothing but collection of two region is nothing but collection of two or more availability zones. Region is nothing but collection of two or more availability zone. This is also

[26:30] one of the definition right. This is A1, this is A2 and this is A3 right? So folks do you know how many regions we have in India? First is Mumbai and the

[26:42] have in India? First is Mumbai and the second one is Hyderabad. Right? So right now total 39 regions are available around the world and that two in India we have Mumbai and Hyderabad two regions right and one more definition what is

[26:57] region? First region is a geographical location where your AWS services are available. One more definition region is nothing but collection of two or more. Availability zone is nothing but region. Right? So why we are calling it as two

[27:15] or more? Why not one or more? What is the reason? For high availability purpose. Even if yes backup exactly correct. So here even let us consider correct. So here even let us consider here disaster occur at the A1. Right? A2

[27:28] will be ready to provide the service. If A2 goes down, A3 will be ready to provide the services. Right? So here folks, what is a now? What is availability zone? Availability zone is

[27:42] availability zone? Availability zone is nothing but collection of nothing but collection of one or more data centers. Again, I'm repeating folks, what is availability zone? Now availability zone

[27:55] is nothing but collection of one or more data centers. So every availability zone which consists of one or more data centers. Now might you have a question

[28:07] centers. Now might you have a question what is data center? Right? So now data what is data center? Right? So now data center is nothing but collection of

[28:20] Are you with me folks? Can I say that every data center which consists of thousands of servers. Can I say that every data center which consist of thousands of servers? Right? So now you can see here availability zone is

[28:34] data center. Every availability zone which consist of one or more data centers. Right? Every data centers consist of thousands of server. Now how many availability zones right now we

[28:47] many availability zones right now we have around the world? Exact value is 123. Right now availability zones are available in India. We have six availability zone. Three in Mumbai, three in Hyderabad. Right now my

[29:02] question is folks any idea what is the distance between these two availability distance between these two availability zones? The answer of distance between two availability zone is 100 kilometers. Right? So 100 kilometers that means more

[29:18] than 60 to 70 miles approximate right. So like the distance should be maintained 100 kilometers. See I have one question here why they are keeping 100 kilometers. See they can create within one or two kilometers also. What

[29:32] between why they are maintaining the distance between two availability zone distance between two availability zone is 100 kilometers for disaster recovery. Exactly correct. See if you maintain 1 kilometer or 5 kilometer right if you

[29:47] maintain 1 kilometer or 5 kilometer if something went wrong let us consider something went wrong let us consider disaster occur at the A1 that affects A2 also then there is no use there is no matter to maintain the multiple

[30:00] availability zone if one affect definitely then second is also affected definitely then second is also affected right so if one affect then second is also affected right so if If one affects the second is also affect that is the

[30:13] reason the standard minimum is 100 approximate that to a 60 m 100 km right so minimum is 100 they are not specified any specific maximum value right minimum it should maintain 100 km a standard value so folks this is all about the

[30:30] basics of AWS infrastructure do they ask about these in the exam no because this is two simple question right how many how many regions AWS will never ask these kind of a questions Okay. So no need to uh worry about this

[30:43] but uh make sure that you should be updated for these values because every updated for these values because every day AWS is updating every day AWS is updating right because every day every hour AWS is updating its infra. So the

[30:58] numbers of region will be changed number of availability zones will be changed number of edge locations will be changed everything will be changed right. So you should be updated but in the examination you will not get this kind of a

[31:11] questions. Okay. Yes. The same thing you are going to see here for two slides. AWS infrastructure a global cloud infrastructure offers unmatched security broad and reliability as a cloud platform. It features over 200 services

[31:27] supported by data center worldwide. So just now what I completed what is region? region is a corresponding corresponds to a geographical area housing multiple availability zones. Each availability zone comprises one or

[31:40] more separate data centers each equipped with sufficient power network setup reliable connection within a distinct zone what we are completed just now for zone what we are completed just now for the region. Now folks, if I am using AWS

[31:55] infrastructure, right? What benefits I'll get? Right? If I'm using AWS infrastructure, what I'll get the benefits? This is my what I'll get the benefits? This is my AWS cloud. Now, so using this AWS cloud,

[32:08] what I'll get the benefit first of all, scalability. Let me tell you folks, scalability is one of the major advantage of the AWS infrastructure advantage of the AWS infrastructure because AWS provides the ability to

[32:22] quickly increase or decrease the resources to your application as per your requirement as per your need. Right? Let us consider for your organization you can manage the cost effectively

[32:35] while maintaining the performance as well as efficiency. This feature is especially beneficial for the organization. They experience some variable workload. Variable workload means sometimes the traffic will be

[32:47] high. Sometime the traffic will be low. Right? At that time the scalability is very important. Right? Now reliability. See in terms of reliability folks AWS has this strong track record. The architecture itself designed in a way

[33:03] that right the architecture itself they are designed in a way that they ensure the high availability and continuous functionality. What it means? It means that AWS can provide the uninterrupted services even in the event of network

[33:19] failure or any natural disaster. Any natural disaster that is the power of natural disaster that is the power of AWS right now when it come. AWS right now when it come. So folks in security part AWS delivers

[33:31] high level security through its firewall. There is a new term called firewall. What is firewall? Because some people are from nontechnical background, right? They'll understand what we are talking with the cloud infra term. That

[33:45] is the reason. I hope you got the point, right? So that is the reason. Otherwise right? So that is the reason. Otherwise I can use a more technical technical what do you call a logical terms also some symbols also right so let them

[34:00] easily let them understand easily for today we have a first day then we'll go with I can use some diagram also I can use some relationship diagrams also that use some relationship diagrams also that is different but let okay as I can see

[34:12] discussed about the firewalls yes I'm discussing about this security layer protection layer get of network network Security component protection against Security component protection against malware. Okay. Layer of security.

[34:25] Gatekeeper of input and output. Filtering incoming and outgoing traffic. Set of rules defined via software. Okay. Network security devices for filtering a traffic. Security layer restricting unauthor data. Controls what network is

[34:38] traffic in or out. Perfect. It's a security feature where not network can connect with server directly. Check filter in control traffic. Okay folks. filter in control traffic. Okay folks. So firewalls can I say that for better

[34:51] understanding right for simple I'm using two simple terms let me tell you I'm using two simple words anyone can understand can I say that firewalls are filters which filters your incoming and outgoing traffic simple words right now

[35:07] there is something called encryption how you will define the encryption term mask of hiding data turning data into unreadable format perfect protected sensor sensitive information encoding data with algorithm perfect abstraction

[35:21] data with algorithm perfect abstraction yes converting readable data into unreadable format confidentiality so now folks if I more technically now right so can I say that encryption is a process where I'm going to convert from

[35:36] plain text to cipher text can I say that encryption is a process where I'm going to convert from plain text to cipher text right so this is somewhat technical definition right Now encryption is a process where we are converting from

[35:50] encoding to decoding format. No sir, this is also not clear. Let me take more simple words. Can I say that encryption is a process where you are converting from readable format to non-readable format. There are three levels of

[36:02] different like three levels of definitions. Plain text to cipher text, encoding to decoding and even even readable format to non-readable format. readable format to non-readable format. Right? Then yes I am capability IM

[36:15] identity and access management. So here by using this IM service you are going to decide who can access what you are going to decide by using IM service like Damian. Damian can access S3. Abeu can access uh what do you call EBS EC2

[36:32] right? Namata can access RDS. Sorup can access KMS. Aishwara can access right. Aishwar can access uh another EC2 or RDS. So you are going to decide as per

[36:44] your work requirement by using IM you are going to assign the work who can access what you are going to decide by using IM service. Right now performance efficiency. So folks let me tell you performance efficiency is one of the key

[37:00] performance efficiency is one of the key attribute of AWS. key attribute of AWS because it has the capability to run services efficiently on a cloud platform that can scale according to your need of the traffic scale according to your

[37:17] requirement of your traffic. Right? So what it means it can handle a high volume of a traffic without disline in a performance. Right? Even it ensure the smooth operations and greater user experience. Right? Now flexibility here

[37:35] it allows the user to select your preferred operating system. Right? Let preferred operating system. Right? Let us consider uh want Mac operating system. Right? Then Damian want Windows operating system. Then Linux, Fedora.

[37:50] you want. Then programming language someone want to use.NET, NET, Java, Ruby, Rails, Python, it's up to you, right? Then databases, we have RDS, right? Then databases, we have RDS, Dynamob, Red Shift, Elastic Cache,

[38:04] databases are available. It's up to you going to decide which database should be used, right? Then finally cost used, right? Then finally cost optimization. So folks, pay as you go

[38:17] model. How much you are consuming based on that you are going to pay for it. That's it. Right? Now here in this diagram you can see we are increasing agility and reducing the complexity and risk. How? Accelerate time to market. So

[38:35] folks AWS is providing a solution as per the market requirement. Right? Right now we have a trend like uh even you can call that right now we have a trend of machine learning right artificial intelligence AI. So AWS is trying to

[38:50] provide a solution with ML and a IML right how to train a models we have in AWS we have a service called bedrock right bedrock is a service which is used in machine learning there are multiple services are available what market is

[39:04] expecting from you AWS is providing a solution right right now AWS like right now market is pro expecting about a IML artificial intelligence machine learning for that AWS is providing some containerization services like ECS

[39:18] elastic container services to train a model uh best solution I'm just taking one example ECS with Fargate solution to train a to train a machine right to design models to train models at that time we are using this kind of a service

[39:32] so as per the market trend what market is expecting from you AWS is providing a solution for this right as per requirement of market now increase innovation now folks your workload infrastructure will be managed by

[39:48] someone else. This is your cloud now and someone is there behalf of you who is going to manage this infrastructure. Right? So now your task is managed by someone else. So that means here you can focus purely let us consider I'm a

[40:04] developer who is working in a AWS environment. Right? Being a developer I can think because management part will be taken care by someone else. So being a developer I have to think whether as per the requirement of a client I am

[40:19] developing my application or not as per the requirement I'm satisfying the client or not as whatever a new things I can add whatever a new features I can add so I'll get the sufficient time to do some innovation idea here innovative

[40:34] idea here right then scale seamlessly as per the requirement here whenever you are expecting a high traffic or resources you can consume right and when you are not expecting any traffic the resources will be resources will be

[40:49] scaled out and you can do like you are achieving a cost optimization now optimizing the cost we are reducing the cost how by paying how much you're consuming that is nothing but again pay as you go model right then how we are

[41:04] minimizing the security vulnerabilities by using defense indepth concept where a security will be provided at different layer layer 1 layer 2 layer three those

[41:16] who are aware about the AWS term let me tell you at the EC2 level I'm going to use security group right sir so suddenly don't take the question sir what is security group again I'm repeating those who are already aware just here you can

[41:30] consider level one level two level three right those who are already available let us consider I'm providing a security at EC2 level security groups the knackl subnet level right I'm using nal at subnet level then VPC flow log at VPC

[41:45] level so at the different different layer I'm providing a security to minimize my vulnerabilities right now folks how I am reducing the management complexity let's discuss and please provide your inputs how I am reducing

[41:59] the management complexity yeah that's why clearly specified consider level one level two level three those who are already aware just now I given a introduction security at EC2 level security groups knackle VPC level so no

[42:14] need to worry don't worry about these terms right now consider level one level two level three that's it that's enough now okay yes as I can see there are some input need to not maintain [clears throat] physical data center

[42:26] okay maintain infra no direct involvement in managing infra see you don't have to worry about managing infrastructure right behalf of you infrastructure that is the reason no need to worry about the management of

[42:40] infrastructure so By doing this you are reducing a management complexity because management of infrastructure headache is taken by someone else that is AWS. That is the reason we are reducing the management complexity. Right? So this is

[42:55] all about AWS features and the advantages what I'll get if I'm using AWS infrastructure. [clears throat] So now folks let's move on to the core services. How many of you are observed? I don't know but in scenario a day in

[43:11] the life of cloud architect they specified some core services architect a day in the life of cloud architect they are specified some core

[43:25] architect they are specified some core services let's take four storage database next

[43:37] next compute it's networking so compute networking storage database so here we have few

[43:52] core services which are available to us so now folks let me tell you one important point here in this module I'm discussing only introduction about core services

[44:07] So usually what happens in the session let me tell you that also all are very excited to learn everything in a single day right in it happens in every session even if I'm also the participant it happens right so here

[44:24] now I'm discussing at the introduction level introduction level let me take one example let us consider I'm discussing about storage services as I clearly specified this is introduction only right So now if I'm

[44:38] discussing about the different storage EBS, S3 then EFS. Sir, what is the difference between S3 and EFS? Sir, why should I use S3 and when should I use should I use S3 and when should I use EFS? Sir, which one is better EVS or S3?

[44:52] Everything I'll get the question here. So folks, let me tell you here I'll discuss only introduction part because a module number three is completely compute only. Module number four is completely storage only. Module

[45:08] number five is completely networking only. Module number six is completely database only. So no need to worry when the time comes 100% each and everything I'll discuss. But right now today we have first session let's discuss at

[45:21] introduction level. Right? So again we'll come back to the details 100%. We we'll come back to the details 100%. We have separate module for this awar

[45:35] in detail we are going to discuss this so that is the reason first we'll discuss at the introduction level because everyone right so after this we'll go in detail about each and every core services right now let me take you

[45:50] to the core AWS services here you can see compute see compute storage database analytics networking storage database analytics networking mobile developer tools IoT security

[46:04] management tools, enterprise applications. Right? So now folks, here I have a one popular core service called compute. Compute service. So what is this compute? How you'll define this term?

[46:21] Compute is all about processing, right? So compute service which offers secure and resizable computing capacity in the cloud that simplifies the webcale cloud that simplifies the webcale computing for developers. So folks

[46:35] compute means processing a processing capacity right. So here it's a secure and resizable computing capacity. Resizable means as per the requirement of a client it will increase and dis decrease. So how much amount of a data

[46:51] you have that will be processed here and that too developer can easily and efficiently they can process the data. Right now let me take one simple Right now let me take one simple comparison. There is a service

[47:05] comparison. There is a service called EC2. EC2 is one of the popular called EC2. EC2 is one of the popular service of compute. EC2 means a server in cloud environment. Server in cloud environment. Right? So

[47:18] now elastic compute cloud. EC2 stands for elastic compute cloud. No need to go in depth. Just consider EC2 is one server in cloud environment. Okay. Let me take one scenario. So now folks I have one onremises server. Onromises

[47:33] server. Again I'm repeating this is my onromises server and this is my EC2 instance. Okay. A server in cloud platform. Okay. Let me do the comparison. And now folks, my scenario is I'm your client and all the 52

[47:49] participants are my network engineers. Again, I'm repeating folks, be ready for this scenario. I'm your client client and you all 52 participants are my network engineers. Right? So folks, I don't know anything. I want to design

[48:06] one web server. So how you will take up this challenge So how you will take up this challenge understanding the requirement

[48:20] you are ready with the configuration also how much do you how much time you want okay 5 to 10 days depending on scale okay let us consider one week fine one week okay fine no based on hardware collection fine at max one week okay

[48:37] fine okay let's consider leader my server is ready and you have deployed the server and it's available for me and now folks you have designed the server for 500 people you have designed a server for 500

[48:50] people but there is sudden hike in a traffic and thousand people are hitting to the server what will happen to the server what is the solution additional processes we can extend the hardware we are discussing in onremises environment

[49:03] right exactly horizontal scaling you have to do or vertical scaling you have have to do or vertical scaling you have to do. You have to add some additional have to add some additional configuration increasing the hardware

[49:16] configuration increasing the hardware requirement again. Yes. Then again expensive cost you have to add like again there is a investment again there is a investment you have to pay more. Right? Now let us compare with our AWS

[49:31] cloud environment. This is my AWS cloud environment. Right? This is my AWS cloud environment. Now if you want to launch one server right select the operating system instance type right security groups your instance is ready

[49:49] right instance is ready and here pay as you go model pay as you go model how much you're consuming you're going to pay for it then when I'm expecting a huge traffic automatically the configuration will be resources will be

[50:03] traffic automatically resources will we decreased. So which one is best? Which one is best? Onromises server or EC2? Just now we are done with

[50:15] comparison. So you have to answer for this which one is better EC2. Yes. this which one is better EC2. Yes. Because here you are going to pay on demand how much you are consuming and you are going to pay on resources. There

[50:30] you are going to pay on resources. There is no any upfront cost. upfront cost that means there is no any advanced investment but here a lot of configuration lot of hardware purchase lot of things are there right now some

[50:45] key features they empower user to control their control their compute resources right they operate under pay as you go model already we have allow user to boot a new server instances within a minute as I discussed

[50:59] your EC2 can be launched within a minutes right they enable Yes, just a minute. Let me complete this. They enable quick scaling to meet quick and easy configuration of the services. As I clearly specified when

[51:13] the application required when you are expecting the huge amount of a traffic the resources will be increased then automatically it decreases. Right now automatically it decreases. Right now these are the compute services like EC2

[51:26] ECR. EC2 stands for elastic compute cloud elastic container registry. Then elastic container service elastic kubernet service light sale serverless application repository lambda fargate elastic binstock and finally batch

[51:43] service. So these all are AWS compute services which are available in AWS services which are available in AWS environment. Right now let's move on to the next service called storage. Here you can see folks we have

[51:58] a service called storage service. a storage service which offers the secure, reliable and scalable storage solution for a data in the AWS cloud. Now it provides the high efficiency, availability, durability and performance

[52:14] availability, durability and performance also. So folks let me tell you in AWS we have a different types of storage services. In that the first one is services. In that the first one is object storage.

[52:31] Object storage. Then we have block storage. Block storage. And the third we have file storage.

[52:50] the data will be stored in terms of objects. A popular service. Let me tell you there is a popular service. Might be you people have heard about this ES3 simple storage service. These all are storage services. Again I'm repeating

[53:03] storage services. Again I'm repeating folks. These all are storage services. categories. First one is object storage. And the popular services simple storage And the popular services simple storage service. S3 stands for simple storage

[53:17] service where you are going to create a buckets and you are going to store the buckets and you are going to store the objects. Every data will be considered as a object like whatever you are storing the data this will be considered

[53:30] as a object and you can store any kind of a data there is no restriction right of a data there is no restriction right then block storage. So folks in block storage we have a popular service called EBS elastic block storage. In block

[53:46] storage we have popular service called EBS elastic block storage. Right? So it's a persistent block storage. This is my EBS value. This is my EBS value and

[53:59] my EBS value. This is my EBS value and this is my EC2 machine. EC2 is server. this is my EC2 machine. EC2 is server. This is my EC2 machine. Right? So now This is my EC2 machine. Right? So now it's a persistent block storage

[54:11] persistent block level storage right so now this persistent blockle storage volume you can attach to your EC2 instance right again I'm repeating folks

[54:24] EBS elastic block storage is one of the popular block storage right and it's a persistent block storage persistent means the data will be permanent which acts like your hard disk drive or SSD, HDD or SSD, hard disk drive or solid

[54:40] state drive, right? Secondary memory, right? Until and unless you will not delete, the data will be available, right? So here this EBS value is a persistent storage value. Now we are going to attach to our EC2 instance. Why

[54:55] we are attaching? Let us consider I want to install my operating system. So at that time this storage is required. Let us consider I'm using some data inensive application. Right? Now let us consider I'm running some low latency application

[55:11] right. So even I want to access a low latency accessing a data at that time latency accessing a data at that time this is required right. So here as I taken the examples sorry use cases when should I go for block storage like

[55:23] installing the operating system or if I want to run the databases or a data inensive applications where the application required some low latency access of a data at that time EBS is best solution. Now when should I go for

[55:36] best solution. Now when should I go for object storage? The best example is let us consider I want to store the images, videos, PDF. S3 is also persistent. Let us consider I want to store uh unlimited data like entertainment purpose. Right?

[55:53] I want to store images, audio, video, any type of a data you can store in S3. Right? Now this is for EBS. Then we have file storage. Then we have file storage. file storage. Then we have file storage. So what is file storage? Here folks like

[56:08] E3 like EBS in file storage we have a popular service called EFS. popular service called EFS. EFS elastic file system which offers a scalable shared file storage that means

[56:22] it's a shared file system. This is EFS right. So this EFS is well suited for the application that require the shared file access. Right? Let us consider this is my first EC2, second EC2, third EC2, fourth EC2. Right? So now all the

[56:40] developers are working for a same software. Again I'm repeating folks, elastic file system is a scalable shared file storage. So EFS can be accessed

[56:52] concurrently from multiple EC2 machine. Again I'm repeating this shared file storage that can be accessed concurrently from multiple EC2 instances. Right? So now let me take one simple example. I have one software.

[57:08] Right? I have one software but different different developer developer one developer 2 3 4 and all are working for the same software but all are working on a different models and finally the result is stored in this

[57:21] shared file system. Yes, it's like a shared folder, right? So, this is all about just introduction about our storage services. So, it allows the user to store, access and analyze the data to reduce the cost, increase the agility

[57:37] and accelerate the innovations and it can be broadly categorized into the storage and backup and the data migration. What we have the services, right? So now what are the storage services we have that's why I was

[57:54] clearly specified we are thinking at the introduction level see these are the storage services simple storage service storage services simple storage service elastic file system Amazon FSX then EBS

[58:08] backup then we have storage gateway data sync then transfer family and slow family these all are AWS storage services okay then We have uh another

[58:21] service called database. So folks, what is database? As per your knowledge, see related data. The data might be structured or unstructured. That is whether it is structured, unstructured or semiructured. But now can I say that

[58:39] database is nothing but collection of related data. But now let me make it a simple collection of related data. Might be it is schematic like a structured, unstructured, semiructured, whether it is uh what is that semantic or symmetric

[58:54] that is different right? So now database is nothing but collection of data related data right. So here folks AWS provide the comprehensive selection of provide the comprehensive selection of purpose-built a databases right which is

[59:09] suit for like various application needs. So here it's up to you as per your requirement you can select any kind of a databases and let me tell you folks these database services are fully managed. Fully managed means no need to

[59:25] think about provisioning, no need to think about updating, no need to think about patching, everything will be taken care by AWS. Fully managed, fully managed. Whenever the term comes fully managed, everything will be taken care

[59:39] by AWS. Even provisioning, updating, patching, everything will be taken care by AWS. Right? Scalable means as per the requirement, it scales then even highly requirement, it scales then even highly efficient. Right? Now what are the

[59:52] features like what type of databases I'll get here. So AWS offer the different database engines like relational database key value database right relational means RDS key value means Dynamob in memory means radius

[1:00:08] memach then graph time series ledger. So there are different types of databases are available in AWS. So as per your requirement you have to choose your requirement you have to choose your databases. So here it supports multi-

[1:00:22] region that means more than one region in all the 39 regions. Multim masteraster replication means you can do the replication in all the 39 regions.

[1:00:35] It's up to you. So you will get a complete control over the data. Right? So how will replicate this everything that we'll see in future classes. Fine. Now what are the databases service like what database service we have? I have

[1:00:49] RDS then red shift Dynamob then red shift Dynamob elastic cachet then we have document DB key spaces Napune then finally we have QLDB these all are the types of

[1:01:05] databases which are available in AWS right now folks here we have networking service what is networking as per your knowledge

[1:01:21] going to establish a connection between two devices to share the resources. two devices to share the resources. Right? So here AWS will provide a set of networking services that provide the essential security features and robust

[1:01:35] essential security features and robust network solutions. So folks here these services isolate resources. So there is a service if I want to isolate the resources in AWS I have a service called VPC that we'll see in detail in future

[1:01:49] VPC that we'll see in detail in future classes. VPC means isolate when I want to isolate the resources at that time I'll go with VPC. Let us consider this is Karthik VPC Rajes VPC right Manikandan VPC Santo VPC. So here all

[1:02:04] the resources are deployed here all the Karthik resources are deployed right? Rajes resources are deployed then Manikandan then Santosh so without owner

[1:02:17] permission no one can enter to this isolated area that's why we are using isolated area that's why we are using VPC money can't enter to Karthik area VPC money can't enter to Karthik area Rajes area no not at all so that's why

[1:02:29] VPC is a isolated service whether you are using any EC2 RDS Dynamob KMS ES3 anything you are going to deploy in this EPC So that's why we are calling it as

[1:02:41] it's a isolating service. VPC is isolating service. No one can enter without your permission. Then encrypting a data. See to encrypt a data we have a a data. See to encrypt a data we have a service called KMS. It's a native AWS

[1:02:56] service. Key management service. Key management service is a centralized repository for cryptographic keys for encryption as well as decryption. right now provides private connection on the

[1:03:09] AWS global network. So what kind of a connections you will call private connections you will call private connections? VPN then we have direct connect then we have side to side connectivity

[1:03:21] VPN connection direct connect side to connect side to side connection these all are the examples of private connections. Everyone is aware about VPN but direct what is direct connect side to side that I'll discuss in this AWS

[1:03:35] to side that I'll discuss in this AWS and walk. Okay. Now what features I'll get? It offers the highest network availability with very few downtime availability with very few downtime hours due to networking issues. So

[1:03:47] purposely I'm keeping this statement folks. It provide the global coverage of availability zones? You have to answer. You have to correct global 39 regions and how many availability zones? It's 123 exactly that right. So what are the

[1:04:04] networking services we have? We have Amazon VPC API gateway API stand for application programming interface right cloud front route 53 VPN direct connect cloud map then app mesh these all are networking services which are available

[1:04:20] networking services which are available in AWS environment okay now folks let me take you to the agenda of today's session session so first today we'll start with first

[1:04:33] so first today we'll start with first account setup

[1:04:53] After account types, we have billing concepts and billing alerts. How we are creating alerts. Right. After this we have delegation.

[1:05:05] How we are delegating authority. Delegation are how we are delegating Delegation are how we are delegating authority to IM user and IM role. Right? Then we have a concept called IM. Right? So

[1:05:20] these are the topics what I'm going to discuss in today's session. Right? So today's session that is AWS account setup. So folks, I have one question for you people. Let's take again one scenario for a discussion purpose. So

[1:05:36] now folks, I don't know anything about uh I'm not from technical background, uh I'm not from technical background, right? So I want to access a Gmail service. So can anyone help me out how I can use this Gmail?

[1:05:50] I'm not a technical person. I don't know anything. And I want to access this Gmail service. Can anyone help me out? How I can do that? So what is the How I can do that? So what is the procedure? First you have to sign up.

[1:06:03] First you have to sign up. So what are the details are required? Like first name, last name, mobile number, alternate email ID, right? Then hint question, then you are ready with your account. Right? For Gmail, it ask UPI.

[1:06:18] account. Right? For Gmail, it ask UPI. So now once once you are ready with your account it's a one-time procedure a setup you have to complete right then you have to login so here you have to put on just email ID

[1:06:34] and password to access your Gmail services right so in AWS also we have two types of account the first account is called root account first account is called root account and the second account is called IM user

[1:06:50] account. IM users account right. So folks let me tell you root account who is having access to all the AWS services. So access to all the AWS services. So whenever whenever you are accessing the

[1:07:06] AWS resources at the first time so that account is called root account. Right? So now what is the procedure to create a root account? Just you have to visit AWS like www.awwsconole.com awsconole.com right so you will be redirected to

[1:07:21] right so you will be redirected to signup page signup page so here everything almost same come like your Gmail only first name last name middle name mobile number email id alternate email id hint question right password

[1:07:34] then there is one more additional part what is that here it asks here it asks credit card details or debit card details right I think you have now up

[1:07:46] option also right So you have to specify the mandatory field called credit card the mandatory field called credit card or debit card information right. So once or debit card information right. So once your account is created this will be

[1:07:59] your account is created this will be verified. How AWS will debit AWS will debit a token amount from your account to verify this account is genuine. Right? After 2 days again this amount will be refunded to your account. Right?

[1:08:14] So that is the reason here I think uh root account have access to all the AWS services all the AWS services and that is the reason AWS clearly specified

[1:08:27] don't use root account for day-to-day activity this is not a best practice again I'm repeating AWS is clearly specified don't use root account for day-to-day activity there is a reason behind that if you compromise your root

[1:08:42] account credentials at that time at that time you are going to loss each and everything about your organization that is the reason the best practice says create a IM users within this root account IM users are nothing but you are

[1:08:57] creating another account a separate account within the root account but this user when you create they don't have access for any of the AWS services until and unless you have to explicitly define them right so folks root account have

[1:09:12] access to all the AWS services right now. IM users. IM users are the users within this root account. And in a single root account, you can create up to 5,000 IM users. Right? And by default, when you create one IM user,

[1:09:28] this user don't have any access to any of the services, right? Until and unless you have to explicitly define them. You to attach the policy. For example, let us consider I here in an organization I

[1:09:44] have Karthartik, right? Then Rashmi, then Santosh, then here I'll assign then Santosh, then here I'll assign Kartik can work with S3. Then Rashmi can Kartik can work with S3. Then Rashmi can Rashmi can work with EC2, right? Then

[1:09:58] Rashmi can work with EC2, right? Then Santosh can work with RDS. So like this you can provide a permission to access the resources. So no one can access the other resources apart from this. That is the power of IM user. So IM user also a

[1:10:12] separate users separate users within the root account but they have separate username and password right. So now so here it's up to you right like root account

[1:10:25] but this is not a best practice to use on a daily basis. Right now here just now what I discussed how to create a AWS account. First go to AWS website, create

[1:10:39] AWS account, right? Enter your account information, right? So whether it is personal or business account, provide your personal information, then accept the agreement, then create account and continue. Right? Then provide the

[1:10:53] billing information. Verify it. Once verified, then provide the mobile number, phone number details, then support plan. By default, basic plan will be available. By default, basic plan will be available which is free.

[1:11:08] Some advanced plans are also available. But this is paid service. This is paid service. So basic plan always available with all the accounts. There is no any charges. But when you go for advanced plan, you have to pay for it. Once you

[1:11:23] select the plans, then you are ready with your account and you have successfully activated your account now. Right now here folks there is a one type. Yes, here I have different types of account. In that the first type of

[1:11:38] of account. In that the first type of account is AWS free tier account. Right? So now what you're creating uh in a account in AWS console we are calling it as free tier account. Free tier account is valid for 12 months. [snorts]

[1:11:51] is valid for 12 months. [snorts] Right? And here for specific services these are free for specific duration. For example, EC2 instance which is free For example, EC2 instance which is free for 750 hours. Now S3 which is free for

[1:12:04] 5GB, right? So now S3 is for 5GB, right? So now after 5GB you have to pay for it. After 750 hours you have to pay for it,

[1:12:17] right? This is free tier account. Now there are different types of accounts we have. First 12 months free tier account, right? Then always free what I discussed just now 12 months free which is restricted to only one year.

[1:12:31] Now always free is something there is no any specific duration but here every service is charged from the beginning itself. Right? Now short-term trial. What is short-term trial? Let us consider here we have Rajes.

[1:12:45] consider here we have Rajes. Rajes is one of the developer in ABC organization. Right? Rajes is one of the developer in Right? Rajes is one of the developer in ABC organization and now AWS is launched

[1:12:58] one new service called bedrock. There is a new service launched by AWS called bedrock and Rajes want to learn this service. So at that time Rajes can request to AWS. Hey team can you provide a access to bedrock service? I want to

[1:13:14] access this service. Right? So at that time AWS will provide a short-term credentials for one week. for one week. So for one week Rajes can

[1:13:26] access this service they like if he if the if a person is a developer and he at that time for one week they'll provide access to Rajes so Rajes can

[1:13:38] learn something new which is launched in the AWS environment right so that's why we are calling it as short-term trials after one week the credentials are not after one week the credentials are not usable not usable right so these are the

[1:13:53] different types of uh accounts what we have. So now folks let's [snorts] let me take you to the now let me take you to the AWS management console. So

[1:14:06] let's start with our labs now that means just I'm going to show you what about the credential shared in the LMS for the account that only I'm discussing Santo just allow me a minute

[1:14:19] just allow me a minute right so all are with me now in your LMS all are able to see there is a course called AWS solution architect associate level click on continue learning are you able to see this screen a same screen is

[1:14:34] available on your screen. Now take your own time and let me know once you are ready because I want to show you how to launch your labs. So now folks here you can see there is a option called practice lab. Quick click on this. Click

[1:14:49] on this. So once you click on practice lab at the right bottom side there is a option called launch lab. Click on this blue button and you will get one popup.

[1:15:01] blue button and you will get one popup. Click on launch lab. Once you click on launch lab, your lab will load for you from 1% to up to 100%. It takes one or hardly 2 minutes of a time, not more than that.

[1:15:24] Yes, lab is working now. For me also it's logging. My console is also 90% done. Yes, still it's 90%. I think work console is in loop. Yes. Should we sign in meanwhile? If you want to just allow me a minute. Let me take

[1:15:39] to just allow me a minute. Let me take you one by one like first we'll complete this loading process. Yes. Now I can see my credential sign in link, username and password. We get IM user account. Great. Still at 90%. Okay. All are able to see

[1:15:54] these credentials now. How many of you are at this place as I can see? Okay. Okay, majority of the participants are successfully logged in like uh loaded the lab. So folks, let me tell you. So folks, this is pre-cooked environment

[1:16:10] which is specially designed for practicing purpose, right? This is simply learn AWS environment. Same exact exact in the sense the main AWS console only but this is specially designed for practice purpose only the services which

[1:16:25] are relevant to AWS solution architect are available for you right now here you can see I have some credentials along with the sign-in link right so every with the sign-in link right so every time every time sign in link along with

[1:16:40] the username and password everything will be changed again I'm repeating don't use same sign in link username, password after 6 hour. Every after 6 hour your sign-in link, username, password will change and this lab will

[1:16:55] number of a time. There is no restriction. You can practice any number of a time. There is no restriction. But this labs are active for 5 hours. After 5 hours, all the resources will be deleted. Right? All the resources will

[1:17:09] be deleted. After 5 hours, 1 minute, you can start your new lab. You can start your new lab again. You can start the resources after 5 hours. Right? So how resources after 5 hours. Right? So how to login your AWS console? Just you have

[1:17:24] to copy this signin link. Paste it.

[1:17:36] with signin link. Okay. Now copy the username and paste it in the username username and paste it in the username section. Then copy the password and paste it in the password section. Right now click on sign in.

[1:18:04] see this window. Okay. So now how many of you are at this console homepage AWS console homepage? those who are at the 90% right still they are at the 90% just

[1:18:16] refresh it then you are able to log into your AWS console fine so now folks your AWS console fine so now folks whenever in AWS console especially in simply learn environment whenever you enter to AWS console the first thing you

[1:18:31] have to check is the region in which region you are working so the first task is you have to check in which region you are working so click on this region Right? And make sure that always you should work in North Virginia region.

[1:18:49] North Virginia region. So let me tell you why we are selecting North Virginia region. As I clearly specified in this pre-cooked environment all these pre-cooked environment all these services are enabled for you for AWS

[1:19:03] solution architect associate course. Right? So here in this environment only North Virginia is enabled. Sir, I'm in Pune. I'll use Mumbai. No, it will not work because this environment is for practice purpose. So only one region is

[1:19:18] enabled for you. Sir, I'm in Hyderabad. I'll use Hyderabad region. No, you can't I'll use Hyderabad region. No, you can't use because as you know that only the North Virginia region is enabled for you. In this environment, you can use

[1:19:30] always North Virginia region. So the first task when you enter to your AWS console, you have to check whether I am in North Virginia region or not. This is the first time. Okay. And the next. So folks, this is my AWS console home,

[1:19:46] services are available, you can click on this here. Based on the domain, there are different services are available. are different services are available. For example, compute, appunner, batch

[1:19:58] processing, EC2, image builder, elastic, binto, global view, lambda, outpost. These all are compute services. Now let me take you to the database services. Aurora, RDS, document DB, Dynamob, Elastic, these all are database

[1:20:14] Elastic, these all are database services. Next let me take networking services. API gateway, app mesh, recovery controller, cloud map, cloudfront. These all are networking services. If you want

[1:20:29] to search any services, everything will be available for you here. Right? No sir, I want to search directly. Here we have search bar. Just type the service have search bar. Just type the service name. For example, yes three,

[1:20:41] right? The service will be available for you. Let us consider you are using this service frequently then make it as bookmark. You can see here this bookmark is available for me. Now if you want to remove just

[1:20:56] right just click on this star a bookmark will be available then remove it if you will be available then remove it if you don't want. Right now after this here we don't want. Right now after this here we have cloudshell. See cloudshell is

[1:21:10] built-in command line interface which is provided you to interact with AWS services by using commands. Again I'm repeating folks. Cloudshell is built-in command line interface which is provided to you people to interact with AWS

[1:21:25] services by using commands or programmatically. Right. The next notifications you will get here and this is help section right if you have if you

[1:21:37] require any help you will get here support then settings right once we are done so just now what I discussed uh number of regions these are the regions which are available for us now right total 39 regions everything

[1:21:52] you can see here right so always you have to use North Virginia region in have to use North Virginia region in this environment fine now just click on this. So before this here you can see some of the access denied. So no need to

[1:22:06] worry no need to worry only the services which are relevant to AWS solution architect associate the services are enabled for you. So I'm getting access denied. No need to worry even I'm also getting the same fine now click on this

[1:22:20] account. Here you can see this is my account ID. Account ID 43807153868. A 12digit account ID is available for all the IM and root account users.

[1:22:32] Right? Account name because I am the IM user. I don't have account name right now. And account like color also. So this is my IM user details. Now ODL user this is my IM user details. Now ODL user 2053459 is the user ID. If you check

[1:22:47] your account also the account ID is different. Right? Now here you will get the details about account like if you want to enable uh MFA if you want to

[1:22:59] enable uh accessing IM control to the user in account like it's like a additional settings for your account organization organization is something where if you want to manage a multiple accounts multi-level account right so at

[1:23:16] that time you can go with this AWS organization service right you can go with AWS organization service now you can see here you can see

[1:23:28] here organization again I'm repeating folks organization is nothing but AWS organization is a service where you are going to maintain a multi-account going to maintain a multi-account environment right now next part see next

[1:23:42] part is service kota see service kota in the sense every service has some limit a maximum limit for everything you have some Kota right a limit so after that you can't create the resources that you will get here then next and next and

[1:23:59] which is very crucial part of every organization that is billing and cost management let me tell you folks no one is having access to billing and cost management because this is one of the very very important par parameter in the

[1:24:13] organization right even if I click on this let me click on this billing and this let me click on this billing and cost management

[1:24:33] see here access denied as I clearly specified billing part is one of the specified billing part is one of the crucial service in AWS organization in AWS environment. No one is having a access to the specially billing part

[1:24:47] right a specific uh like what do you call a specific position a person who is going to deal and handle your billing to entire organization entire organization

[1:24:59] where we have a concept called AWS organization to manage a billing in a organization to manage a billing in a centralized manner right now here you have a question sir why we are getting

[1:25:12] access denied right So as a clearly specified billing is one of the crucial service. Now no one is having access only a respective person or you can say that the person who is having authority to deal with the costing part right

[1:25:27] because in a organization costing is very important. So the person who is having a knowledge who is having a authent like authorization to access the resources they can access. Now one more important point when you go for billing

[1:25:43] and cost management automatically your region change from north Virginia to global because it's a global service. Billing and cost management is a global service which check the costing for every region and then you will get the

[1:25:57] details here right. So here you will get cost summary like even from month to cost summary like even from month to date cost last month costing forecast for current month last month total cost and even a cost breakdown a detailed

[1:26:11] information for that particular month. Now some recommended actions also let us consider I have one EC2 instance which is running for more than 24 hours right so suddenly like you are not aware this EC2 is running now so you will get some

[1:26:27] practices you will get the recommendation so and so EC2 instances started date still it is running in which region where everything you'll get the details information right so this is for recommended actions then we have the

[1:26:43] for recommended actions then we have the another tab called bills.

[1:26:55] fetch a bills from last month, 3 months bill, 6 month bill, 1 year bill, 2 year bills, you can easily retrieve the bills here in the bill section. Then payment. Let us consider I want to pay my AWS account bills by using debit card by

[1:27:09] using credit card even by using up UPI also which is accepted right credits. account. How many credits are left? You can check it out in the credit section. Then purchase order. Whatever you are using the services for everything you

[1:27:24] will get the purchase order. Right. Then we have cost explorer. See cost explorer detailed information. If you want to do some cost optimization in your

[1:27:36] environment at that time this cost optimization which provides a uh what do you call main role which gives some in detail information about your organization where you can see what is the total cost right average monthly

[1:27:52] cost service count where you will get the graph cost and usage graph how many services are active right in which region when it was started when it was ended how much it was charged even entire breakdown will be available along

[1:28:08] with a graphical representation right even if you want to download this file this file you can download in a CSV format in a excel format where you can download the complete information along

[1:28:21] with the breakdown of your costing right so folks this is all about a billing part now right so folks just now what I completed in the slides AWS management

[1:28:34] console already we are done right these are the slides so folks AWS billing also just now we are completed in the slides right so what is AWS billing where I'm going to pay the AWS bills right what I shown you in the AWS

[1:28:51] billing part billing section where I can organize and report your AWS and cost usage right so managing the consolidated billing for the members of AWS of AWS

[1:29:03] organization. So as I discussed and as I clearly specified in the lab like uh AWS clearly specified in the lab like uh AWS console AWS organization is a service where you are going to manage a multi-account environment and even you

[1:29:17] can maintain a consolidated billing for example this is the organization tree organization tree. So one root account along with many IM users right.

[1:29:30] So using the AWS organization service I can do a consolidated billing right every user every user will get a separate billing and within a single frame I'll get the consolidated billing right

[1:29:45] now. So features folks what I discussed in the AWS console you can manage your AWS account you can view the bills right you can manage the payment by using credit card debit card UPI and you can manage the purchasing orders right then

[1:30:01] you can manage the cost and even you can manage the payment profile also right then consulting like consolidating uh billing for AWS organization let us consider I have one ABC organization Right. So first Suyash then Aishwara.

[1:30:20] Right. So first Suyash then Aishwara. Right. So next we have Capil Vidya then Vishal. Capil Vidya Vishal. These all are employees of the organization. These all are employee of a single organization.

[1:30:34] Right. Right. Single organization. So every Right. Single organization. So every employee $39 for Vishal. Right. Then 8 employee $39 for Vishal. Right. Then 8 8.9 for second employee 35 119. So after

[1:30:47] consolidating you will get the total billing here. Right? Now what is payment profile? See payment profile where you where your billing and payment information is stored and managed. Right? Payment profile is like your AWS

[1:31:01] billing identity plus payment method. Right? It contains the detail of AWS Right? It contains the detail of AWS uses like what is the charge you for services how like generating the invoices managing the taxes taxes and

[1:31:14] billing address everything will be available for you. Okay. So next we have available for you. Okay. So next we have folks here we have AWS support. So can I call this AWS support as customer care service? How many of you agree with

[1:31:27] this? No. Exactly correct because this support team is collection of technical people. They are well qualified technical people. They are going to support. No doubt they'll resolve the queries.

[1:31:42] Right. Yes. Tech support. Exactly. These all are technical people. Right. So where they are going to resolve your queries, right? So folks, if you have any queries, you can always take a support, right? So here there are two

[1:31:58] types of support plans we have. The first one is basic which is totally free what you'll get when you create a account and the next one is detailed or advanced. Advanc is paid service. There are different types of support

[1:32:14] plans are available. Right. So here you can see AWS support provides a variety of plans that allow access to tools and expertise that support the success success and operational health of AWS

[1:32:28] solution. All support plans provides 24 bar 7 access to the customer services AWS documentation technical papers and support forms. So when they'll provide a support forms. So when they'll provide a solution right so they'll provide

[1:32:43] solution with some proof also like AWS documentation AWS documents are very very good even excellent documents for everything you will get the documentation even they'll provide technical paper also why this answer is

[1:32:56] correct some support forms also and this support is always available for you 24 by7 right and folks let me tell you when you go for paid service there are different advanced plans are available Like here you can see technical support

[1:33:11] plan sorry developer plan, business plan, enterprise onramp plan, enterprise plan, enterprise onramp plan, enterprise plan, right? So based on best practices available a different information is available right. So now based on uh what

[1:33:27] do you call best practice technical support case severity programmatic case management proactive programs and self-services then AWS managed services then training and even finally pricing. So every every support

[1:33:45] plan have the different parameters right. So folks in every session what I'll do I'll give this part as a assignment everyone please take down the first assignment for your AWS solution

[1:33:58] architect associate course everyone should go with this support plans support plans there are different plans are available again I'm repeating developer business enterprise on ramp and enterprise now folks we have billing

[1:34:13] and enterprise now folks we have billing alerts so we have a option you can set some billing like uh I hope everyone is aware we have uh Jio connections right we have Jio connections once you complete 50% of a data you will get the

[1:34:29] data you will get the notification am I right folks in geio connections I'm right folks in geio connections I'm talking once you complete 50% of a data 90% of a data you will get the notification so those who are

[1:34:42] international participants those who are international participants Jio is one of the telecommunication popular telecommunication industry in India right so once you complete 50% of a data you will get the notification once you

[1:34:55] complete 90% you will get the notification like this you can create a billing alerts for your AWS services like let us consider I have one EC2 instance right so I'll specify here once my EC2

[1:35:10] crosses $200 right so my EC2 should be shut down or stopped or You can take any action. You can inform to the client or user. That is also possible. Right now AWS billing alerts allows the user to monitor the

[1:35:27] alerts allows the user to monitor the charges on their bills. Right? So user can set up an alert to receive a email notification when the estimated charges reach a specific threshold value. When you cross $200, what you specify, right?

[1:35:45] So when you cross the threshold value it will be informed. Now using the email in future classes you are going to see how you are going to inform to the customer by using email SMS right you can inform to the customer right. So what are the

[1:36:01] steps you are going to consider for billing alerts going to the AWS console then we have a billing preferences select choose a receiving billing alerts and save the preferences. Now what you specify you will get the updates or

[1:36:16] notification on your registered email. Right now folks here we have something Right now folks here we have something special called delegation or delegate.

[1:36:31] knowledge? How you will define this delegation term? Let's see how many of you are going to answer for this. How you will define how you will define this delegation term? What is delegation? as per you or not

[1:36:48] here one of the participant is called Shivanchu okay and here being a trainer Shivanchu okay and here being a trainer I am busy in taking this session okay so now here we have Shivanchu I'll tell to Shivanchu now hey Shivanchu

[1:37:01] can you take the attendance for today's session I'm busy in taking the session what I'm doing now being a trainer I'm busy in taking the session like I'm engaging the session So I am delegating my authority to

[1:37:16] Shivansu. Hey Shivanchu can you take the attendance for today's session. Right? So suddenly Aishwara will come into the picture. Aishwara will come into the picture and she'll start taking the attendance. Do you think Aishwara is a

[1:37:29] authorized or a valid person to take the attendance? Do you think Aishwara is the attendance? Do you think Aishwara is the right person to take the attendance? No. No. because I have delegated a authority to only Shivanshu not any other person

[1:37:45] right again I'm repeating folks Shivianu is the right person because I have delegated the authority to Shivanchu not other users right so that is the reason the attendance I have not delegated the

[1:37:58] authority so only Shivansu can take the attendance right so same thing same attendance right so same thing same thing now we are delegating delegating ing their access to other users right now to whom you are

[1:38:14] delegating delegating access to the billing console. Let us consider we have billing service and as I clearly specified it's a crucial service only

[1:38:27] the specific person can access that right so now AWS account owner can delegate the access to specific IM users that need to access or manage the AWS

[1:38:40] billing and cost management data for AWS account now what I'm doing let us consider I have one ABC organization Folks, AWS account owner can delegate the access to specific IM users that need to access or manage the AWS billing

[1:38:56] and cost management data for AWS account. Right? So now folks, I have ABC organization. Right? So instead of keeping thousands of employee, if I keep only Karthik as a admin, do you think Karthik can manage these thousand people

[1:39:11] work? Instead of maintaining thousand employers, if I keep only Karthik to perform all the task, do you think is it the right strategy to work in the organization? No. So that is the reason Karthik is admin.

[1:39:25] Kartik is admin who can take the administrative overall task. Right? So administrative overall task. Right? So like this let me take Vishall. Vishall can work with ES3. Then we have Suange.

[1:39:42] Suange can work with KMS. Then who is next? Usually I'll take uh Then who is next? Usually I'll take uh Rajes.

[1:40:02] billing. Now folks within a ABC organization let us consider Karthik he is having a admin account right or a root account who is having access to all the AWS services. Okay. So now Vishal can access S3 then

[1:40:20] Su can access KMS. Rajes can access EC2. Santosh can access billing. Right. So permission is given to Vishal. This permission is given to Rajesh. Same for Santo. Now Vishall can't access KMS. Not

[1:40:38] possible because only S3 policy is assigned. Same thing. Su can't access S3. Su can't access EC2. Su can't access billing information. Right? That is the reason for every IM user we have already assigned a policy explicitly to perform

[1:40:55] that task. Now Santoskumar is responsible for billing information. So as I clearly specified by taking your inputs only Kartharti can perform all

[1:41:07] employees work. That is the reason we are assigning assigning or you can say that we are delegating authority to work purpose. We are delegating their workload. So Santosh can work on billing. Rajes can work on EC2. Surange

[1:41:22] can work on KMS. Michelle can work on ES3 like this we are delegating authority to IM users. So now might you have a question how we are assigning how we are delegating to these IM users by using these four steps. First enabling

[1:41:38] using these four steps. First enabling the access there is a option to enable that I'll show you right next create policy no need to create a policy already we have AWS created a policy right then attach create a policy

[1:41:53] created not required creating already I have a policy then then attach a policy have a policy then then attach a policy to whom Santosh Santosh is responsible person then attach this billing policy to Santosh Kumar then test the access by

[1:42:07] using the Santo credentials username and password you can access the billing password you can access the billing information now right not role not role information now right not role not role forin it's a I am user role is different

[1:42:20] I'm not talking about role now it's a I am user okay role is different so folks am user okay role is different so folks let me tell you clearly here actually at

[1:42:33] this point usually I'll not go to the AWS console tool to explain for the AWS console tool to explain for the demonstration. But if you want if you want to see this what I shown you the steps in the AWS console then I'll

[1:42:47] demonstrate. No need to go in detail. That's why I'm clearly specifying. If you are interested I can show you in the AWS console but no need to go in details. This is just introduction. We are in introduction. Still we are in

[1:42:59] introduction. So now folks let me go to the AWS console. First you have to policy creating not required directly policy creating not required directly you can attach. Let's go to AWS console.

[1:43:12] So folks now for creating IM user you have to go to the AWS service called IM

[1:43:30] right so everyone please observe is it global service now when I shifted to IM dashboard automatically the region is changed from North Virginia to global changed from North Virginia to global service right so now It's a global

[1:43:42] right. So now folks, what is the first step? You have to enable the access. First you have to enable the access. Click on account. And there is a option Click on account. And there is a option called account here.

[1:44:03] section. There is a option right enabling here. Yes. Can you see this? I am user and role access billing information. Sorry, just a minute.

[1:44:27] Go to account section. What happened this? section, there is a option here. You have to enable this IM user and role access billing information. Even if you directly attach billing policy to IM

[1:44:43] user, it won't work until and unless you have to enable this. Here you will get the option to enable and disable. There are two radio buttons called enable and first you have to enable. This is the

[1:44:56] first step. Now let me go to the next step. step. Go to IM service.

[1:45:08] why I have not enabled. So first step is done. Now second is you have to create a policy. Right. So no need to create a policy. Already we have a policy. Let's create one. I am user. I am user. Okay. Let's create a IM user.

[1:45:27] Let's click on create user. username is so who is responsible for username is so who is responsible for billing information in example billing information in example Santosh. Okay. So now folks do you want

[1:45:40] to provide this Santosh can access the AWS console? Yes. So do you want autogenerated password for Santosh? No. I want to provide the password called

[1:45:56] password. Santos at 1 2 3 right now do you want to provide a authority to Santosh to change the password after login no I don't want

[1:46:09] to give this authority to Santo okay click on next so right now no need to worry about these options just there is a option third step you after creating the policy you can attach a policy right third step is attach a policy so which

[1:46:26] authority you want to give to Santosh what Santosh can access now. So just search for billing policy. So folks can you see this there is a policy name called billing provide the billing policy access to this Santos user. Click

[1:46:43] on next. Everything is done. Review it and now create a user. See user is created with few error. Why that error? Now let me tell you for works. I don't have authority to attach

[1:46:59] a policy because in this environment I am also because in this environment I am also one IM user folks if I don't have access to if I don't have access for a billing information then how I can attach this

[1:47:12] policy to someone else that is the reason user is created but without attaching billing policy here you can see user is successfully created but I demonstrated you how you are attaching the policy to the user Now you are

[1:47:26] ready. User is ready. Now you have to test the access. How you will test? Now use this console sign in and open the new browser. Let me use edge browser.

[1:47:39] new browser. Let me use edge browser. Okay. Paste this URL also that is also fine. Okay, I'm ready

[1:47:55] with my credentials. So folks, even if you want to download the credentials, there is option download CSV file here. You can see in my system, Santosh credentials are successfully downloaded. If you open this document, let me show

[1:48:09] you. Santo credentials are available. Santo credentials CSV file, username, password along with the signing, login. Okay. Okay. So now let me open the edge. See account

[1:48:23] So now let me open the edge. See account ID username is ID username is Santos right and the password is Santo at 123 folks. Let me show you the password also. Santosh at 123. So now

[1:48:39] password also. Santosh at 123. So now let me sign.

[1:48:52] logged in with Santosh credentials. Are you with me folks? Can you see this? Now Santosh user is successfully created. Fine. Santosh user is successfully created. But if you go to the billing information, do you think Santosh is

[1:49:07] able to access the billing information here? No, because if I don't have access for billing information then how I can assign like how I can assign someone else to access this information. So now

[1:49:22] just now I shown you how to create a account then how to attach a policy to the user called Santosh then policy is attached because of this pre-cooked environment the policy was not attached then I have tested the access by using

[1:49:37] the same credential of Santo. I hope folks by demonstrating with this like by demonstrating your delegation concept with this demonstration is clear to everyone right. So just now what I shown you first just now what I completed the

[1:49:53] steps activating access to billing data enabling accessing then create policy I have not created a policy directly I attached the policy by using existing one then attaching a billing policy then tested the access by using a separate

[1:50:09] username and credentials. Let me take you to the next part. How we are you to the next part. How we are delegating authority to IM roles. So folks, IM user is different different. Okay. There is one more question. How we

[1:50:24] can assign same role to two three people one by one or need to create a group. first topic of today's session. Delegating access to IM roles. So folks in the previous session I was

[1:50:39] just discussed how we are delegating authority to IM user right. So now how we are delegating authority to IM roles. So AWS so now AWS

[1:50:52] account owner can use a role to delegate the access to resources in a different AWS account called production and development. So folks here we have a

[1:51:05] concept of IM roles. Okay. So here we have a concept of IM role. Now what is IM role? IM roles are temporary in a nature. IM roles are temporary in a

[1:51:18] nature. That means these roles are available for short duration. Again I'm repeating folks. IM roles are temporary in a nature and these roles are for

[1:51:30] in a nature and these roles are for short duration. Right? So now short duration means up to what time these roles are active. So you can customize roles are active. So you can customize the time but by default from 1 hour

[1:51:43] the time but by default from 1 hour to up to 12 hour you can use these roles maximum 12 hours. You can customize the duration also. You can customize from 1 minute to up to 12 hours. That is also possible right? But maximum 12 hours

[1:51:57] that's why we are calling it as roles are temporary in a nature. So once the terminated right might you have a question sir can I extend this 12 hours? No, it's not possible. Again, you have to create a new role and you have to

[1:52:12] provide all the information. Right? Let me take one simple example here for this IM role. For this I am role. Let me take one simple example. I hope everyone is familiar with Spider-Man.

[1:52:30] Spider-Man. I hope you people have heard about this Spider-Man. See, Spiderman is about this Spider-Man. See, Spiderman is a normal person.

[1:52:45] When the problem occurs, he'll become a Spider-Man, right? He's a normal person. When problem occurs, he'll become a Spider-Man. Once the problem is rectified again, he will be a normal person. He will be normal person. Do you

[1:53:02] think this Spider-Man is always available for you 24/7? Do you think Spider-Man is available for you 24/7? No. Whenever the problem occurs, this normal person is going to become a Spider-Man. Once the problem is

[1:53:16] rectified again is going to become a normal person. So folks, can I call the with me? For short duration, a normal person is

[1:53:28] going to become a Spider-Man. Once the task is completed, once the issue is rectified again is going back to the original position. Right? So now you can consider the Spider-Man as an IM role because once the task is completed

[1:53:43] automatically the Spider-Man is going to become a normal person. Let me take one become a normal person. Let me take one more example. Okay. So as per this statement I have production environment and I have development environment

[1:53:56] and I have development environment right. So yes the two participants Shrea and Deepika Shrea and Deepipika see Shrea and Deepipika see Shrea and

[1:54:10] Deepipika. Okay. So Shria is working in production environment and Deepipika is working in development environment and both are in ABC organization right. So folks let me tell you both are very good friends. Shria and Deepipika both are

[1:54:25] friends. Shria and Deepipika both are very good friends right now but both are working in different department. Now Shrea Shrey want to access RDS database of development environment. Right. So now Shrea will approach to

[1:54:41] Deepipika. Hey Deepipika can you give me your credentials? I want to access development RDS database. So Deepika are you ready to share the credential with Shrea? Right. What she's going to do now? Now she'll create one role. She'll

[1:54:55] create one role. So what exactly this role? Now Shria want to access RDS database of development environment. Right. So role should be created with the permission called RDS full access right after

[1:55:13] called RDS full access right after creating a role after creating a role this role should be attached to Shya. Now now without sharing without sharing the credential Shia now Shrea can access this development RDS database. Why?

[1:55:31] because you are assigning a role to Shya and with the permission called RDS full and with the permission called RDS full access and that to for 2 hours once the 2 hours completed automatically this role will be terminated and Shia

[1:55:45] will become the member of again production environment only so that is production environment only so that is the reason folks the best use case of IM the reason folks the best use case of IM role is cross account access

[1:56:01] again I'm repeating the best use case of this IM role is cross account access. If you want to access any resources from other account at that time this cross account access this cross account access is very very important that two by using

[1:56:14] IM roles you can you can delegate the authority right so now folks how we are doing this three steps first creating a role granting the access and testing the access right let me show you first creating the role then granting the

[1:56:29] access and then testing the access let me show you how exactly it looks in the console as I shown you for IM user. Now I'm going to show you for IM role. So folks again you have to go to

[1:56:45] role. So folks again you have to go to this IM service.

[1:56:58] roles. Can you see this? After user we have roles. Now let me create a new role. There are multiple roles are available. Let me multiple roles are available. Let me create a new let's create a row. So now

[1:57:10] folks you have to create a role right. There are multiple options are available. Now let me create a row for this scenario. Let us consider I have one server that is EC2 instance in AWS environment. Right? And I have one S3

[1:57:28] bucket. S3 bucket right so what you have to do you have to create a role you have to create a role so for this role which permissions you have to attach now your EC2 want to access S3 bucket so which

[1:57:43] permission should I attach for this role very good it's S3 full access exactly correct right so once you attach this policy to this role attach this role to

[1:57:55] EC2 machine once the role is attached then this EC2 can access the S3 bucket this diagram now I'm going to demonstrate in the console right first you have to create a role right let me create a role now you can see here you

[1:58:12] create a role now you can see here you can create a role for these entities whether AWS service or AWS account what I taken the example of production and development right now let me take AWS service so for which service you are

[1:58:26] service so for which service you are creating a role now in this For which creating a role now in this For which service you are creating a role now? EC2 EC2 For which service you are creating role folks for which service

[1:58:41] you are creating a role are you creating role for S3 or EC2 you can see here for which service you are creating EC2 right right so let's select EC2 right

[1:58:54] right right so let's select EC2 right then next so which permission do you then next so which permission do you want to attach for this row exactly now it's S3 full access. Now it's S3 full access. You have to type S3 full access.

[1:59:09] access. You have to type S3 full access. Right. Click on next. And the role name is let me create a role name called demo let me create a role name called demo role. Okay. Let's create a role folks.

[1:59:24] You can see here once you click on create role. So ro demo role is successfully created. If you want to search here just type demo ro right role

[1:59:36] is successfully created. When you click on this demo role you can see the role is successfully created for you right along with the policy Amazon S3 full along with the policy Amazon S3 full access what I attached. Now sir where I

[1:59:48] can customize the duration of this role here folks once you create a role. So folks here as you know that it's a temporary right roles are temporary. If there's a option called edit here. Right? So you can see by default it's 1

[2:00:03] hour. So you can extend up to 12 hours. And even if you want to customize the duration, you can customize from 1 minute to up to maximum 12 hours. Now my question is what is the difference between IM user and IM role. So folks,

[2:00:18] between IM user and IM role. So folks, IM users are permanent. IM roles are temporary. IM users are permanent until and unless you have to explicitly delete them. IM roles are temporary in a nature. Once this 12 hour, 1 hour, 2

[2:00:34] hour, what you specify the duration it completes automatically it will be completes automatically it will be terminated. So folks here you can see roles can be used for any user, any application, any services. Roles can be

[2:00:48] application, any services. Roles can be used for any user, any application, any used for any user, any application, any account you can. Okay. Now folks, let's move on to the next service called IM which is already completed in the

[2:01:02] previous session as I shown you how to create a IM users. Right? What is IM? they are given which is if it is completed we can proceed. Now what is IM

[2:01:15] folks? As you know that identity and access management, it's a web service that provides the access control to AWS resources. It's a web service that enables the user to securely regulate access to AWS resources. So here folks,

[2:01:31] IM will helps to determine the authentication who is signed in. IM will help you to determine who is signed in and what are

[2:01:43] the permissions you have authorization of user to utilize the resources. Now let me take one simple example here. So everyone is familiar with online banking

[2:01:56] right? So first you'll put username then password then capture then OTP then finally submit button right. So folks once username, password, OTP, then

[2:02:08] capture is everything validated that right. So then only successfully you are logged into your online banking. So this process is nothing but authentication. Who is signed in? So this overall procedure validating username, password,

[2:02:24] OTP capture is nothing but authentication. Who is signed in? Once you are signed in, now you are in the dashboard of online banking, right? So now what are the permissions you have, right? Authorization. What are the

[2:02:40] environment? That is nothing but authorization. Now let me take the example in this online banking dashboard. You can check the balance. You can try like you can transfer the amount, right? Then you can change the

[2:02:55] password. Then you can add the beneficiary right. Then you can add some uh what do you call auto debit option everything. Now folks my question is

[2:03:07] do you have option to modify your balance? balance? But my question do you have But my question do you have authorization to do a modification of a

[2:03:20] authorization to do a modification of a balance? No. A big no. balance? No. A big no. Right. Yes. Exactly correct. So here this is called permissions. You have permission to check the balance. You

[2:03:33] You can change the password. You can change the transaction password. You can add the beneficiary. But you don't have authority to modify the balance. That is nothing but permissions authorization. In AWS environment also first who is

[2:03:47] In AWS environment also first who is logged in then by using IM what are the permissions you have to access? By default, no one is having any access. You have to explicitly allow them until and unless you can't access anything. So

[2:04:01] that is the reason I taken this example internal. Right now what are the features we'll get? So which is already completed. You will get a shared access to the AWS accounts. You can provide the granular permissions right securely

[2:04:17] accessing the AWS resources here. Then multiffactor authentication. You can enable the MFA also for your accounts. Then identity federation. See this is Then identity federation. See this is interesting. Now folks let us consider I

[2:04:32] have an organization called ABC. Okay. And these cloud is belongs to ABC organization. Now some of the external person who is outside the organization

[2:04:44] they want to access the AWS resources. Right? At that time there is a service called IDP identity provider right identity provider who will who is going to authenticate this external user. Once the IDP give the authentication once the

[2:05:01] the IDP give the authentication once the user is validated then only he or she can access the AWS resources. That means outside the organization some external body or external user want to access your organization resources at that time

[2:05:15] IDP will come into the picture to authenticate this user. Once the authentication is done then you are able to access the AWS resources. Best example where already you people is like you people are aware about this. So

[2:05:28] folks I hope everyone is familiar with LinkedIn right? I hope you people are familiar with the LinkedIn everyone right. See, LinkedIn is given the permission if you don't have credentials to access the LinkedIn. Then LinkedIn is

[2:05:43] given the authority to use your Gmail or Facebook account. Are you with me folks? Using the Gmail credentials or Facebook credentials, you can access the LinkedIn credentials, you can access the LinkedIn information. Yes or no? Yes. So now a

[2:05:56] user will be validated first then only you are able to access the native organization services. someone like third party user or a client they want to access the AWS services at that time IDP will come into the picture so in

[2:06:11] detail we'll discuss again this in module number seven okay now identity information for assurance so there is a service called cloud trail might be you people have heard about this cloud trail is responsible to track each and every

[2:06:25] API activity in the AWS environment right who when where are the actions are taken who's taken the action right everything you will get the detailed

[2:06:37] information each and every API activity in the AWS environment which is recorded in the AWS environment which is recorded right now so this IM is compatible with PCIDSS which is payment card industry data security standards then it it's

[2:06:52] integrated with other many AWS services also then always the performance will be consistent why what is the reason because it achieves the high availability ility. How? If you want to make your data highly available, make

[2:07:06] sure that your data should be replicated across the different global data center. That is the reason you will get the consistent results. Right? And let me tell you folks which is very very important. IM is always free service.

[2:07:21] So how many resources services you are using at that time with the IM that is chargeable right? And there is something called STS security token service. STS is responsible to provide the temporary credentials for IM role always

[2:07:37] for IM roles always it provide the temporary temporary credentials. So STS is responsible to provide the temporary credentials to IM users, right? So this is a free service now. So how I can access this IM service? Just now what I

[2:07:54] shown you? AWS management console. Then we have command line interface. Then software development kit SDK. Then HTTP software development kit SDK. Then HTTP APIs. So folks let me tell you these two

[2:08:07] options are usually used by solution architect and these two options are used right solution architect will concentrate on AWS console and CLI developer they'll use SDK and HTTP API right now here IM user folks already

[2:08:24] completed with the demonstration in the previous session what is IM user IM users are the users within account not a separate account you each user can have the password to access the AWS management console. Right? Now here like

[2:08:38] what I taken the example in the previous session like uh one of the user is I think who who was the admin Santosh right? Santosh who's having a billing access Santosh is having a billing excess I think admin is Rajes Rajes or

[2:08:53] Santosh yeah might be so in that I was taking the example Shivan Shu Palvi Ferdin then Niti Karthik there are multiple IM users are available right

[2:09:05] available each employees responsible to do their respective work so here IM users uh every individual who is going to perform their individual task view

[2:09:17] to perform their individual task view right so now folks let's move on to the next point called CLI command line interface so before going to this are you people familiar with DOSS

[2:09:31] disk operating system which is purely command- based am I right folks which is command- based am I right folks which is purely command-based command-based right so now we have our AWS cloud

[2:09:46] AWS cloud Now this is our AWS cloud. If I want to Now this is our AWS cloud. If I want to access the AWS services by using commands at that time this CLI is required. Again I'm repeating folks if

[2:09:59] you want to access the AWS services by using commands at that time I required using commands at that time I required CLI. Right? So one more point I want to specify here. CLI is very powerful compared to AWS console also. Some of

[2:10:15] the features are not supported by AWS console. But the features which are not supported by console also supported in CLI. That is the reason CLI or what is that SDK are used by the developers. Right? So now if you want to access the

[2:10:33] AWS services by using command there are two types we have right two types we have. The first one is CLI command line interface. So folks if you remember interface. So folks if you remember in AWS console right after search bar

[2:10:48] there is something this is second one no after amazon this is second one no after amazon exactly anything it's cloud shell it's a cloud shell right a built-in command line interface which is provided

[2:11:02] for us to interact with the AWS services by using commands right so now folks I'll show you the both approaches also Now if you want to install CLI you can

[2:11:14] install on your local machine also right so here what is CLI command line interface it's a opensource tool that allows the user to communicate with AWS allows the user to communicate with AWS services using commands in their command

[2:11:29] services using commands in their command line shell right so how we are going to set up this by just you have to type AWS configure at that time you have to provide access key and secret key so folks Access key and secret keys are

[2:11:42] used for always programmatic access. Again I'm repeating if you want to do a programmatic access at that time this access key and secret keys are required and always default region it's up to you

[2:11:56] but in our case you have to provide North Virginia only and the default format will be text. If you want to change that is also possible right? So this is not for us because if you are already user existing configuration if

[2:12:12] you have then only you are going to use this you have to copy one folder into the configuration folder but this is not required for us now. Okay let me take required for us now. Okay let me take you to the console back. So folks what

[2:12:25] is the first method cla you can download a software in your system just you have a software in your system just you have to type AWS

[2:12:42] installing or updating the latest version of CLI. version of CLI. So now folks, it's totally it's up to If you're using Linux, if you are using Mac, if you are using Windows, select

[2:12:56] this option and you will get the systematic a complete document what are the steps you have to carry out to install this software in your laptop. Right? And one more request from my end folks just now we are at the third day.

[2:13:10] folks just now we are at the third day. Right? Okay. So this is the first method how we are installing how we are installing the software in my local installing the software in my local machine. Now the second one is let us

[2:13:23] consider. Okay. So here just now I created one user right. Yeah let me create a see folks for access key and secret key. In module

[2:13:35] number seven you are going to perform the task more in depth. We are going to discuss about the access key and secret key. But let me show you now how we are going to access. Okay let's create a user quickly.

[2:13:48] user quickly. Let's create a user quickly. Okay. The username is Naven. Same steps what I completed in the previous session. I'm not going to explain again. Nim at 1 2 3. I don't want to give the

[2:14:03] permission. Click on next. I don't want any permissions also. Just I want to show you how to generate the access key and secret key. Next. Create user. Right. So folks here the user is successfully created. If you go to the

[2:14:18] user now how to generate access key and secret key for the user. You can see just now see what I demonstrated in a

[2:14:30] quick manner because in the previous session I completed. Now I'll show you how to create a user. Yesterday I was discussed now how to create or how to generate this access key secret key. Click on user first.

[2:14:44] And here we have a option called security credentials. Again I'm repeating first click on user for which user you are creating security credentials. Click on nine and then security credentials. So in

[2:15:02] this security credentials we have a option called access keys. Let's create a access key. Now when you click on access key it asks for what

[2:15:14] purpose you are using what is the use case. So select command line interface case. So select command line interface CL right and now confirm it. Once you confirm click on next description blah blah blah blah blah blah next. So folks

[2:15:30] you can see there is a important message. This is the only time the secret access key can be viewed or downloaded. You cannot recover it later. You can create new access key anytime. See what just now I created access key

[2:15:45] right? So this is the time you can view on download. If you try to again like if you try to check one more time the same key which is not possible right. However you can create new key any time. So that is the reason the best practice says you

[2:15:59] have to download your Excel file. You can see nin access key successfully can see nin access key successfully downloaded.

[2:16:11] well as secret key which is available for us. Now how to use this? Go to cloud shell. So what is the command folks?

[2:16:23] Just now I shown you in the slide. It's AWS configure right? Very good. It's AWS AWS configure right? Very good. It's AWS configure. Enter.

[2:16:36] Now it ask for access access key. You can copy it from Excel file also or here also access key is available. Right. Let me copy and paste here. Enter. Then

[2:16:48] secret access key. Secret access key. Secret access key. I think this V is not there.

[2:17:05] Something went wrong. I think I pasted twice.

[2:17:23] Okay, let me start the terminal one more time. Okay, now type AWS Right. It asks for access key first. Copy the access key.

[2:18:03] Yes. Karthik it's a better option.

[2:18:32] Yes. Now it ask for secret key. Right? Copy the secret key it ask for default region name. Now I'll keep blank. It's up to you which region

[2:18:45] you want. And output format by default it's text. So now as a navin user you are accessing the AWS services. Now as a nin user you are accessing the AWS services by using commands. So this is the way how you are

[2:19:01] going to access the AWS services by using commands with two methods. First is CLA and the second one is cloud shell right. So folks this is all about a CLI in detail again we are going to discuss this part in module number seven where

[2:19:15] you are going to perform some task also right. So folks let me take the first question for module number two. Which of the following represents a geographical region containing multiple availability zones?

[2:19:37] region C. Excuse me. C is the right answer. Which service helps to determine who is authenticated and authorized to utilize the resources? A is the right answer. I am. What is the primary function of AWS

[2:19:53] am. What is the primary function of AWS CLI? D. Yes, it is the right answer. Exactly correct. D is the right answer. Right. So folks, these are some sample questions what we have completed for the module number two. Right. So now folks,

[2:20:08] let's move on to the next module. Module number three that is compute. Let's move on to the next module. the module number three where I'm going to discuss about the compute and related features right

[2:20:25] so let me set the pen okay so as you know that in every module you will get the scenario a day in the life of cloud architect like you have a scenario for

[2:20:37] the cloud architect now you are a cloud architect for an IT company with multiple cloud-based applications the organization has encountered routing challenges that have resulted in a significant financial losses. Hence, you

[2:20:54] have been asked to ensure that such issues are proactively prevented in the future. By the end of this lesson, you will have a concise understanding of crafting routing requests, creating AMI images, and exploring the types of load

[2:21:10] balancer. So, what are the learning objectives? By the end of this lesson, you will be able to create an AMI image for fast deployment. AMI stands for Amazon machine image.

[2:21:24] Launch and connect to a Windows instances to enable disaster recovery. Then deploy various load balancer to improve the scalability. Then create a

[2:21:36] routing request in application load balancer to enable pathbased routing. So folks, these are the learning objectives or you can call it as outcomes. Once you complete the module, you are able to answer the questions based on this

[2:21:51] answer the questions based on this topic. Right? Amazon machine image Amazon machine image application load balancer. Right now let us start with introduction to EC2. So let us start with introduction to EC2. So folks as I

[2:22:09] discussed in the previous session also EC2 stands for elastic compute cloud. EC2 stands for elastic compute cloud. It's a web service that provides a

[2:22:21] scalable computing capacity in the AWS computing capacity in the AWS environment. So now it's a resizable computing capacity as per the requirement you can execute here. So in

[2:22:35] simple words for better understanding you can say that you are taking one virtual machine on rent right. So folks here you are taking one virtual machine on rent. So how much you

[2:22:49] are consuming you are going to pay for it in the cloud environment you are going to take one virtual machine on rent. How much you are using this how much you are consuming this you are going to pay for it. Right? So one more

[2:23:02] thing I want to specify here. We are using the term EC2 this is also fine. Virtual machine is also fine. Server is also fine. Right? Even instance is the right term. In AWS console also we have a term

[2:23:17] called instances. Right? EC2 instances. So but in some organization we call EC2 virtual machine server instances. All the terms are same. Right? Now if I'm

[2:23:29] using EC2 service right what benefits I'll get first of all elastic webcale computing. So folks here EC2 can increase or decrease the

[2:23:42] storage capacity in a minutes. So like when I'm expecting a huge amount of a traffic for my application at that time automatically the resources should be increased and when I'm expecting a low traffic for my EC2 automatically the

[2:23:58] resources should be decreased and here you can launch thousands of server instances simultaneously. So folks for your understanding purpose now how I can launch thousands of server instances simultaneously there is a

[2:24:12] concept called autoscaling groups using the autoscaling groups you can launch multiple EC2 instances at the same time simultaneously right now flexible cloud

[2:24:25] hosting services so easy to launch the numerous operating systems instance type software in a minute so numerous operating system means here it supports operating system means here it supports Mac, Windows, Linux, right? Ubuntu and

[2:24:39] even more different operating system. Then instance type. So here we have different types of instance type like storage, optimize, general purpose, right? Then we have accelerated computing. This topic I'm going to

[2:24:52] discuss in the next part right after 10 to 15 minutes later. So but right now we have different types of instances like general purpose instance, compute instance type, storage instance type then we have accelerated computed

[2:25:06] different types of instances are available right and even if you want to install a software that is also possible within a minutes you can install on your within a minutes you can install on your machine now right now it allows the user

[2:25:20] to choose the memory c memory CPU instance storage and boot partition size that is best for the application and operating system. So as I compared in difference between our traditional uh server and EC2 instances right? So like

[2:25:37] what you have the option to choose the configuration like what will be the what like which CPU I'm going to use right so what is the uh storage capacity what are the different uh like RAM which RAM I can use and what is the partition size

[2:25:51] right in C drive you will partition like C drive D drive you can do the partition also where you are going to install the operating system fine now the next benefit AWS integration so this EC2 is integrated with many other

[2:26:08] AWS services. For example, here we have S3. S3 is a storage service. Then we have RDS. RDS is database service. Then we have SQS. SQS is also message queuing

[2:26:22] service. Right? So here we are listed only three but your EC2 is integrated only three but your EC2 is integrated with many more AWS services. Right? Now

[2:26:34] with many more AWS services. Right? Now reliability and security EC2 provides highly reliable environment where the replacement instances can be quickly and consistently deployed. So now folks what I taken the name called autoscaling

[2:26:49] group if I want to launch multiple EC2 instances at same time or simultaneously at that time I'll go with autoscaling group. In some cases if one of the EC2

[2:27:01] instance is terminated or unhealthy at that time AWS is responsible to launch a that time AWS is responsible to launch a new EC2 instance to provide a results to the client. Right? So that is the reason if something went wrong AWS will take

[2:27:16] care and replace that instances with the healthy one. Right? Now user can easily create a secure and robust network to run their Amazon EC2 instances using virtual private cloud. I hope you people are remember in the previous session I

[2:27:31] are remember in the previous session I was taken the service called VPC. If I want to isolate the resources, I hope everyone remember I was taking the example. This is Santos VPC. This is Rajesh VPC. This is Kiran VPC. This is

[2:27:45] right. This is Rajes VPC. Right? Santos Rajes Kiran. And no one can enter without that person like owner of that VPC. Right? So it's a isolated area where you are going to deploy your AWS services. So here also you are going to

[2:28:01] deploy your EC2 instances within this VPC only. Fine. Now low cost. AWS charges the users in seconds. They only pay for what they use. How much you are consuming based on that you are going to pay for it. So the rates are lower than

[2:28:17] existing onremises infrastructure. So folks, how many of you are agree with this what I taken the comparison in the yesterday session. Then we have yesterday session. Then we have completely control. So folks, the user

[2:28:30] instances here. If you have any EC2 instance, the user have the complete control even you have a root access root access to all the instances right and these user can use the web service API to stop

[2:28:47] on their boot partition and resume it back. So all the operations if the user has created one instance you can stop the instance. So using how by using the APIs already the APIs are created by AWS just you have to use this stopping the

[2:29:04] API like uh terminating the API deleting the API even hibernating the API right keeping the data in boot partition size again if you want to resume it back there is a option called hibernation right once you hibernate once you

[2:29:20] hibernate again when you resume it back it start from the same state and even the data is also maintained Right. So these all are the benefits of EC2 instances. So now folks let's move on to the next topic which is very very very

[2:29:35] very interesting also right there are different types of EC2 storage option different types of EC2 storage option options are available right in that the options are available right in that the first one is

[2:29:51] EBS with EC2 elastic block level storage with EC2 option. Elastic block level storage with EBS option right as you know that EBS is block level storage know that EBS is block level storage right EBS is block level storage right

[2:30:07] and here EBS is block level storage it's a persistent storage where the data will be always available for you right so here one more point folks let me specify

[2:30:19] here one more point folks let me specify here yes abs elastic block level storage. It's a persistent storage, persistent block level storage, right? persistent block level storage, right? Which allows the user to create and

[2:30:32] attach EBS value. This is my EC2 machine, right? This is my EC2 and this is my EBS value, right? So, as I clearly specified, EBS is a persistent storage, persistent

[2:30:47] block level storage. That means which acts like your secondary storage service, secondary storage devices, right? So here it allows the user to create a EBS volume then attach this EBS volume to EC2 instance right and this

[2:31:04] volume to EC2 instance right and this EBS values are d like this EBS volume provide the durability durability as well as data persistence. So that is the well as data persistence. So that is the reason it make them suitable for storing

[2:31:17] reason it make them suitable for storing some critical data or databases or installing operating system. Again I'm repeating folks if I talk about the use cases if I want to store some critical data or a databases or even if I want to

[2:31:32] install the operating system of this EC2 machine at that time I'll install in EBS machine at that time I'll install in EBS storage right then instance store. Instance store is like a RAM which is temporary memory.

[2:31:46] It's a temporary memory, right? Instance store is a temporary storage option, right? And no doubt it provides the higher IO performance, right? So that is

[2:31:58] the reason it's best suited for caching purpose. purpose. Siddiki EC2 is a service server. EC2 is very much important in AWS. Do you want server in your organization? If yes,

[2:32:13] then very very important. Right? Elastic block storage. Elastic block level block storage. Elastic block level storage. Right? So now folks, yeah, I right? So why we are using instance store? Instance store is a temporary

[2:32:27] memory, temporary storage. Sorry. So here instance is a temporary storage here instance is a temporary storage now. And it performs high IO performance. So that is the reason temporary storage means when should I

[2:32:40] use can I use for caching purpose right temporary memory means can I use for temporary memory means can I use for caching purpose right now next part here caching purpose right now next part here we have EFS with EC2 so folks

[2:32:53] we have EFS with EC2 so folks EFS elastic file system right it's a EFS elastic file system right it's a scalable

[2:33:06] manage managed storage service right so that can be easily mounted to multiple EC2 instances here right so again I'm repeating folks EFS is a scalable

[2:33:18] managed file storage service that can be easily attached with multiple EC2 instances this is one this is two this is three this is four right so it provides a shared file storage so because of that reason it makes a well

[2:33:35] suitable for the application which require the shared access shared access to the files across the instances right so whenever you want shared file system go with EFS now what are the use cases let me consider folks if you remember I

[2:33:52] was taken in the previous session also development environment right where developer one developer 2 developer three and developer four all developers are working together for a same software

[2:34:06] And everyone every developer is working on a different different modules and finally the result will be stored in this. Right? This is one example. Then another example content management system. Content management system where

[2:34:20] for a single user the different contents are maintained. Right? This is also one of the simple example content management system also the best example for this system also the best example for this EFS story. Right? And the next one is S3

[2:34:35] EFS story. Right? And the next one is S3 with EC2. S3 with EC2. Folks, let me with EC2. S3 with EC2. Folks, let me tell you here I have EC2 machine.

[2:34:50] first of all the very important part here EC2 we are not attaching EC2 instance with E3 bucket. First of all, let me tell you first of all the first let me tell you first of all the first point we are not attaching EC2 with S3

[2:35:05] bucket, right? So S3 stands for simple storage service. It's a unlimited storage service. It's a unlimited storage and it's a object level storage. storage and it's a object level storage. It's a object level storage where your

[2:35:19] EC2 can interact with the S3 by using HTTP API. Again I'm repeating folks you have you have to make a request by using HTTP API have to make a request by using HTTP API to retrieve the data right so S3 is

[2:35:34] unlimited storage right it's a object level storage and we are not directly connecting our EC2 to S3 we are not attaching right and whenever if I want

[2:35:46] to make a request at that time we are going to use the HTTP API right and it's a object level storage you can store any type of data here. Yes. HTTP is 480. type of data here. Yes. HTTP is 480. HTTP is 443. HTTPS is 443 now. Right? So

[2:36:02] this is about EC2 storage. Now, now folks, let me take the differences folks, let me take the differences between these all four. Let me clear this first. Okay. Now let me take the differences

[2:36:17] between these all four. That is the reason before explaining I was specified. Please let me complete this part. then we'll have a discussion see because so now folks these are the differences what I completed this is for

[2:36:30] just explanation part for your storage now if I talk about the differences let now if I talk about the differences let me take one by one so please help me folks what kind of a EBS storage now what type of a storage it is it's a

[2:36:45] block level storage what about this this is persistent what about this this is is persistent what about this this is not see just I taken the analogy Palvi this is also temporary block level storage this is temporary block level

[2:36:59] storage right so this is temporary block level right so this is temporary block level storage right and now third one shared access what kind of a story it is very good it's a file storage it's a file

[2:37:12] storage right or managed network file system right then fourth sorry first system right then fourth sorry first what kind of a storage it is it's object object storage right let me take the second difference so folks if I talk

[2:37:28] second difference so folks if I talk about the size so here EBS will be 64 dB about the size so here EBS will be 64 dB EBS will be 64 dB and here it depends on instance it depends on instance why we are

[2:37:43] calling it as depend on instance because what kind of a instance you are selecting whether it is general purpose instance compute instance storage instance it depends on that the size may vary right and that too it depends on

[2:37:57] vary right and that too it depends on the instance up to 3.6 6B. Okay. And what about this? It's unlimited. No restriction. What about S3? It's

[2:38:09] unlimited. This is also unlimited. Right? Instance stories depend upon instance type. What kind of instance type you're using. Whether it is general purpose, compute optimize, accelerated computing, it it

[2:38:22] depends on that. It depends on instance type. Instance type. So based on the configuration of instance type let us consider I have one EC2 instance with four virtual CPU right with Intel processor. So depends on that it

[2:38:38] provides. Now let me take the third difference. So folks EBS is persistent difference. So folks EBS is persistent or non-persistent. EBS is persistent.

[2:38:53] Instant shore non-persistent EFS persistent

[2:39:07] access accessibility how we are accessing right. So now single EC2 accessing right. So now single EC2 right. So here also single EC2

[2:39:25] multiple multiple what about here be careful for multiple what about here be careful for fourth one it's HTTP API

[2:39:37] http or HTTPS API so always your EC2 can access S3 by using HTTP APIs Right. And let me take the last

[2:39:49] difference about the use cases. So when should I use EBS to install operating system, database or any sensitive information, right? And what about instance store caching purpose? Very good. Then what about EFS? Shared

[2:40:07] storage across the instances. Wherever you want shared access at that time you you want shared access at that time you will go with EFS. Then yes three images purpose can I use for web applications

[2:40:24] can I use for web applications backup purpose right I can use for backup web purpose right I can use for backup web applications and even more right so now see if I talk about the costing also costing also instance store will be

[2:40:40] lower EBS will be medium EFS somewhat EFS is somewhat expensive but this one is low cost. When you want to store a data for longer duration, S3 is low cost. When you want to store a for long

[2:40:54] duration like five year, 10 years, 1 year, 2 years at that time this is lowest, right? If I talk about the performance also always this performance performance also always this performance is faster, right? This is fastest. EVS

[2:41:08] is faster, right? This is fastest. EVS will be high, EFS will be moderate. So S3 compared to this is somewhat slow right. So folks this is all about the comparison of these different EC2 storage options. So folks

[2:41:24] agenda for today's session is first we'll start with instance type instance types right then we have a topic called AMI Amazon machine image

[2:41:39] topic called AMI Amazon machine image then placement group then we have another topic called metadata

[2:41:54] Right. After metadata, we have a topic called EC2 purchasing options.

[2:42:06] Purchasing options then we have a topic called hibernation. going to discuss in today's session. Now let me take you to the first topic of

[2:42:19] today's session that is instance type. One thing important point as per the protocol in the protocol itself I'll clearly specify how much information is required for solution architect associate level I'm discussing with you

[2:42:32] repeating because I'm the trainer who will take professional certification also professional solution architect associate solution architect sisops administrators deops and all but how much is required at sysop like associate

[2:42:47] level I'm discussing right by taking associate certificate ation don't expect like professional information like in depth no need to go too more in depth how much is required now at this situation I'm not saying that in

[2:43:00] associate level we are not going in depth we are going in depth but when it when the time comes right and one more point we are not discussing about the lab still I have not shared any files with you people still I have myself I'm

[2:43:15] clearly specifying still I have not started the lab because there is a reason First we should get the basic information right once I'm ready with the basics like once I'm strong with the fundamentals with the what do you call

[2:43:29] fundamentals with the what do you call foundation then I can provide the lab right what I follow so let us start with first topic of today's session that is instance types like what are the different types of instance types we

[2:43:41] have like so folks when you go for your onromisy server where you have a different types of instances like sorry different types of server In market you have uh what is that Intel processors right? Intel processors, then we have

[2:43:55] Nvidia processors, right? AMD processors with a different different configuration, right? For example, we have uh what is that uh i3, i4 earlier generation. After that, core studio dio i3, i5, i6, i10, i1 based on the

[2:44:10] different configuration like this for every compute instances we have instance types, right? As you know that instance is a virtual server in the AWS cloud. So

[2:44:24] EC2 offers a various instance types allowing user to select the CPU, memory, storage and networking resources which are required to run their application. So now here we have a generalpurpose instances. So when should I use this

[2:44:41] generalpurpose instances? Let us consider when I'm designing web servers or code repositories which required uh equal resources in equal parts right let us consider I want to design one simple web server or code repository at that

[2:44:56] time I'll go with general purpose instances right so here there are different examples are available every character indicates something like for character indicates something like for example T4G right so every again I'm

[2:45:09] repeating folks every character which specifies something. Now T means specifies something. Now T means bustable performance. Four means processor generation. G means gravity and gravity and processor. So let me

[2:45:23] and gravity and processor. So let me tell you folks there are three different types of processors are supported here. So here we have a different types of processor. So folks, first AMD processor. I hope everyone is familiar

[2:45:36] with this, right? Then we have G gravitian processor. Then we have I Intel exactly Intel processor. So folks right now like

[2:45:48] A for AMD, G for gravity and I for Intel processor right now it supports. Now processor right now it supports. Now recently right recently it added M that recently right recently it added M that is Apple chip. M Apple chip and there is

[2:46:01] one more new processor type B star which is accelerated by Nvidia. Nvidia is accelerated by Nvidia. Nvidia blackwell GPU. These are supported by from beginning. Now recently these two processors B is for accelerated by

[2:46:17] processors B is for accelerated by Nvidia Blackwell GPU and this AM indicates the Apple chip. Apple chip now right now every whatever you have the instance type for example T4G after this you will have like 100% you will have

[2:46:32] you will have like 100% you will have this size size. So size might be like small, medium, large, right? Then X large, double X large. This type you have a size, right? Might be the type is

[2:46:47] anything but the size will be medium like small, medium, large, XL large, double X large, everything. And for these abbreviation, no need to worry. No need to worry. I have one document. I'll share with you people each and every

[2:47:00] abbreviation what it indicates. you will get the clear idea okay that is the reason I'm taking just only one got the point for that is the reason I'm asking time so I'll share one document where each and every abbreviation you will get

[2:47:14] the details right now the next type is compute optimize instances so now folks compute optimize instances are suitable for compute inensive application that

[2:47:27] benefit from high performance processor so what it means when should I use is compute optimized instances. So these compute optimized instances are very much useful in batch processing workload. Batch processing workload

[2:47:42] where the bulk number of processes are going to be executed. Then we have dedicated gaming servers, add-on server engines, scientific modeling and even so engines, scientific modeling and even so on. Right? So here I have C6GN.

[2:47:57] on. Right? So here I have C6GN. C for compute optimize. Six is processor generation. G is gravity and processing. N is additional capability. Additional capability. Right? Now, next point is memory optimized instances.

[2:48:13] Memory optimized instances are intended to provide the rapid performance for a workload that process large data sets in a memory. So now when should I go for this memory optimized instances? when I'm dealing with database elect like

[2:48:28] databases then electronic design automation workloads then realtime analytics so folks do you have any specific example for real-time analytics accelerated computing instances so folks accelerated computing instances use

[2:48:44] hardware accelerator or co-processor to execute the task more effectively than software which is running on CPU so folks when you go for accelerated computing This is specially designed for graphical workloads. Right folks, if you

[2:49:00] graphical workloads. Right folks, if you remember, especially from 2005 to desktop system or laptop system is not supporting. I was at that time adding

[2:49:15] something to my system. What is that? Especially from 2005 to 2009. Yes, it's Especially from 2005 to 2009. Yes, it's graphics card. See especially from 2005 to 2009 where the desktop era was going on right especially when my SD games are

[2:49:30] not supporting at that time so what usually what we'll add a graphics card so can I say that this graphics card will work as a co co-processor now can I call that this graphics card will work like a co-processor for these era right

[2:49:45] so here also in accelerated computing instance it use some hardware accelerator right or a co-processor that execute the task in a more effective manner, right? Which is running on CPU. So when should I use this? When I'm

[2:50:00] dealing with floating point number calculations, then graphics processing, then data pattern matching and even so on even so on. Right? So here you can see I have a different different uh what do you call instance type like G for DN

[2:50:17] this G stands for uh what do you call uh first G right G means if I'm not wrong related to graphics intensive actually this G indicate the graphics intensive

[2:50:31] this G indicate the graphics intensive and this processor generation right so here DN which provide the additional capability and here you can use a processor like even Nvidia will provide. Now specifically Nvidia is provided for

[2:50:45] graphics only. Right? Now the next part is storage optimized instances. The continuation storage optimized instances are designed to provide the application

[2:50:57] with tens of thousands of low latency random IO operations per second. So here folks storage optimize instances are specially designed specially designed to

[2:51:11] deal with or useful for the workload that require the high sequential readr access for a large data set on a local storage. So when you are performing

[2:51:23] sequential readwrite operation in any specific example now where we are performing sequential readwrite operation UPI transactions banking transaction transaction payments where you are going to perform the sequential

[2:51:37] readwrite operations where you have a large data sets right so here you can large data sets right so here you can see LM4GN that means LM which indicates see LM4GN that means LM which indicates a storage optimized right then Four is

[2:51:51] gravity and processor. N is like a additional capability. Right? So this is this part is about storage optimized instances. Now let me take you to the uh

[2:52:03] instances. Now let me take you to the uh naming instance type. Right? Let me open this instance.

[2:52:28] this one where you'll get the detailed information.

[2:52:40] Yes. So here you can see folks see folks C 7 GN C stands for series right compute C 7 GN C stands for series right compute storage 7 is generation options right G is G is nothing but uh instance processor processor type right G gravity

[2:52:53] and AMD and all N is like a additional capability this entire thing we are calling it as instance family and here we have instance size small medium large we have instance size small medium large X XL double XL 2 XL a different uh what

[2:53:06] entire part we are calling it as instance type right and here we have all the series you can see A for AMD processor B is for accelerated Nvidia black GPU then gravity processor Apple chip these are the different options

[2:53:21] which are available and here is the series all the series are available right so this is all about the instance type so once we go for the demonstration like first we'll take one assisted practice first lab assisted practice is

[2:53:37] once we'll go to the demonstration I'll show you how exactly it looks in the AWS show you how exactly it looks in the AWS console also right next part called AMI just now we are done with storage optimized instances

[2:53:51] right then we have Amazon machine images after storage optimized instances we after storage optimized instances we have AMI Amazon machine image so let me have AMI Amazon machine image so let me take you to this AMI Amazon machine

[2:54:04] take you to this AMI Amazon machine image so before going to this. So folks, if you open everyone please and first you have to extract this because it's a zip file. Extract it. If you open, are you able to see the folder from 3 to 10

[2:54:22] less than 3 to less than 10. So just click on third one. Okay, just click on click on third one. Okay, just click on third one. So after this right there is

[2:54:34] third one. So after this right there is a document here creating AMI image right so keep this one now let me go with AMI first fine so folks AMI Amazon machine

[2:54:46] image so what is AMI now AMI stands for Amazon machine image AMI is nothing but Amazon machine image AMI is nothing but which contains the information about EC2 instance what you are going to be launched again I'm repeating Folks, AMI

[2:55:01] is something which contains the information about EC2 instance what you information about EC2 instance what you are going to be launched right so what kind of a information like which operating system you have which EBS like

[2:55:17] are using what kind of a security group you are using right what like uh what is the IOPS rate for EBS volume everything you will get the detailed information right so the collection of this information we have in EMR. Right? So

[2:55:33] now folks, I have one question here. Let us consider. Right? I want to launch multiple EC2. Right? Right. So if I use the same template to launch a multiple

[2:55:45] the same template to launch a multiple EC2 instance now, the configuration of this EC2 machine is same or different. The configuration of these EC2 instance what you have launched using this AMI, the configuration is same or different.

[2:55:57] Exactly correct. It's same. It's same because you're using the same AMI to launch a multiple EC2. No doubt even if you launch thousand also the configuration will be same. If you want a different different different

[2:56:11] different operating system then create a separate AMI. This is for Windows. This is for Ubuntu. This is for uh Mac. Right? You can create a separate AMI. Right? So this AMI is a virtual instance that includes a template, right? Yes,

[2:56:26] you can say that Karthik a template for the root value of the instance, a blueprint or a template for the root value of the instance. Even it consist like it consist of a launch permission to control the AMI launch instances,

[2:56:41] right? along with a block device mapping that specifies the volume to attach to that specifies the volume to attach to the instances. Right? So here it specify which instance like for which instance this particular AMI is attached. Now I

[2:56:55] this particular AMI is attached. Now I have one diagram here you can see. So folks in this you can see when you go for creating the EBS volume right so here you will get the option snapshots. Snapshots are nothing but a backup

[2:57:11] right. Even if you want to take a backup of that, right? So you can create a snapshot that is also possible. Now once your creation of the EBS is done, then you are successfully register your EBS file, right? Sorry AMI, right? So

[2:57:26] successfully done with creation of a AMI. This registration completes. So by AMI. This registration completes. So by using this AMI, by using this AMI, you can launch any number of instances. There is no restriction as I clearly

[2:57:39] specified by using this AMI what you have created you can launch n number of instances there is no restriction but the configuration will be same right now the configuration will be same right now let us consider I want to share this AMI

[2:57:53] let us consider I want to share this AMI I want to share this AMI so at that time I want to share this AMI so at that time you can copy this AMI between AWS region within the same region or any other region let us consider in future if I'm

[2:58:07] not using this AMI, you can dregister it, right? You can dregister an AMI when it, right? You can dregister an AMI when you no longer need it. So if you're not using the AMI, you can dresister, right? Now there are different types of AMIs

[2:58:22] are available. There are different types of AMIs are available in the first, let of AMIs are available in the first, let me zoom out.

[2:58:34] Let me zoom out. First one is private. First one is private and the second one is specific AWS account.

[2:58:52] Specific AWS account. Okay. Then third point is public. create a AMI or you can consider AMI distribution who all are to who is

[2:59:05] having a authority to create the AMI. The first one is private. Private means let us consider Santoshi is created one AMI and this AMI will be used only by this Santo only. That's why we are calling it as private. Right? AMI is

[2:59:21] created by you. So no other person can use this AMI. Right? So that's why we are calling as private AMR. Now specific AWS account even if you want to share with the specific AWS account. Let us consider here Namata is created one AMR

[2:59:37] right and now she want to share with Aishwara. Now she want to share with Aishwara. So you should have the account number of Aishwara. Then you can share a specific AMI with from NRA to Aishwara. Now this

[2:59:51] is specific AWS account. The third point is public. In AWS, we have a concept is public. In AWS, we have a concept called AWS marketplace.

[3:00:03] So folks for better understanding let me take one simple analogy. This AWS marketplace is like Ox. Ox where you can buy and sell your AM. Right? So folks let me tell you in this marketplace

[3:00:18] marketplace AWS developers community member trusted people all are available that I'm going to show you in the console also right so to show you in the console also right so here everyone if everyone like even

[3:00:31] community members trusted authorities everyone will be there so here you can share like you can buy and sell your AM right now let me take you to the console

[3:01:00] my EC2 instance. This is the dashboard for my EC2 instance. So now if you open for my EC2 instance. So now if you open the folder uh lesson 3 right there is a the folder uh lesson 3 right there is a file called creating AMI image

[3:01:14] this is for your reference purpose right this document is for your reference purpose the same task I'm going to perform in the AWS console so folks these documents we are calling it as assisted practices lesson 3 demo one

[3:01:28] creating AMI image so what is the objective of this to create a AMI from Amazon on AC2 instances. What are the tools are required AWS workspace prerequisite? None. Right? So let me tell you folks, simply learn is created

[3:01:43] a very beautiful documents here to provide a in detail information along provide a in detail information along with the step one then step number 1.1 substep numbers along with the snapshots. First open the AWS console

[3:01:58] snapshots. First open the AWS console then type EC2 right then go to uh EC2 dashboard everything click on new EC2 experience everything they are specified right so this is for your reference purpose now let me go to EC2 so folks

[3:02:14] here what I'm doing now let me discuss one by one when the time comes so right now this is my EC2 dashboard you can If I want to launch or create one EC2 instance. No, no, no, no. Don't

[3:02:30] perform this task. I'll give the time because it's too difficult to understand. Now folks, if I want to launch or create one EC2 machine, EC2 instance in AWS environment, you have to click on launch instance.

[3:02:52] Okay. So now let me give the name called demo demo server. Okay now it's asking for name right demo server here you can see folks Amazon machine image what we are discussing you can see here. Yeah, you can see here Linux operating system,

[3:03:06] Mac operating system, Ubuntu operating system, Microsoft Windows operating system, Red Hat, so say DAN and even more, right? Even if you want more AMIs, you can browse here. You can browse here. So quick start AMIs are 45 which

[3:03:21] is commonly used AMI. Then my AMI till now I have not created AMI. That is the reason it's zero. And what I shown you AWS marketplace total 6,460 AWS marketplace total 6,460 AMIs are available and that two from AWS

[3:03:36] and trusted third parties AMI some of the communities AMI which is published by anyone total 500 AMIs are available right now yes you can say that you can say that okay just click on launch instance

[3:04:00] interacting with you people so we can discuss okay now provide the name demo server okay so I'll go with the Linux operating system and folks now we are operating system and folks now we are using Linux 2023 kernel 6.1 which is le

[3:04:14] latest AMI right here you can see for this AMI here we have AMI ID right 64 34-bit x86 architecture right this is AMI ID then virtualization HVM so

[3:04:27] enabled ENA enabled and root devices EBS elastic block level storage fine and here if you see in description there are two architecture we have first is 64-bit

[3:04:39] x86 and ARM architecture so always we are going with x86 architecture right so now folks here just now know what we are completed instance type. Can you see

[3:04:51] completed instance type. Can you see this? Here you can see T2 dot nano T t2 dot medinium T2 dotl large X large T3 nano small medium. If you see here T2 dot micro is always we are using in this

[3:05:06] environment. Here you can see how you are scroll down like continue when you scroll down your instance type options right. So you will get the more and more instance types here. See just you can scroll down like

[3:05:21] here. See just you can scroll down like this. Let me show you. instance types are available right now. So here you can use T2.micro because

[3:05:35] So here you can use T2.micro because this is free tier supported instance type. Again I'm repeating folks don't go for T3.micro. Always use T2.micro. Even if it is showing free tier eligible go for T2 micro for T2.micro family is T2

[3:05:53] one virtual CPU along with 1 GB memory right so current generation is true so right so current generation is true so you can see for on demand 0.0116 0116 USD per hour. This is for Linux. This is for Windows. This is for Ubuntu. This is

[3:06:06] for SOC. So every operating system have the different pricing for this T2 micro. the different pricing for this T2 micro. Right now keeper what is keep pier? Keep pair is like a additional security for your EC2 instances. Again I'm repeating

[3:06:21] folks. Keeper is like a additional security for your EC2 instance. Let us consider simple analogy here. Let us consider Chanavir is a developer who is official work he's going to Bangalore from Mumbai right so at that time first

[3:06:38] he'll lock a main door main door of the house after that for better security for to make sure that this home should be more secure he'll lock the main door also this is advanc security right main gate there are two layer of a security

[3:06:52] gate there are two layer of a security now so like this here keeper is like a advanc like additional level of a security if someone will get this key so they can easily connect with your EC2 instance right so whatever you're using

[3:07:07] the key if someone will get that is the reason make sure that when you are creating any key pair make sure that it should be kept at the safe place if someone will get then they can directly connect with your EC2 instances right

[3:07:21] now how to create a key pair right now I don't have any key pair there is a option here to create a keep pair Right? So you can provide the name. Right? So you can provide the name. There are two types we have for key pair. First one is

[3:07:34] RSA which is encrypted private and public key. Then edit 2419. This is also for encrypting private and public key pair. Right? And here folks this key uh

[3:07:46] private key file format PM. Right? Now what we are using is Pam only because what we are using is Pam only because PPK we need a separate a third party software called putty. Using the putty you can use this ppk file right which is

[3:08:00] older concept. So directly we are using pm file right. Let me create one demo key with p. Let's create a keep pair. So you automatically this keep pier will be downloaded in my local system that is

[3:08:16] nothing but in my laptop demo 14 pm file is available for me. So whenever you are trying to connect your EC2 instance by using SSH or a cloud shell or uh what do you call the SDK at that time these required when you are using okay if you

[3:08:31] want additional security it's optional part but you can say that sometime it's mandatory also fine now demo key is selected after this right now folks no need to think about networking part because still we are not touched with

[3:08:46] this networking part right okay folks let's launch let's launch uh instance.

[3:08:58] which is available for Mina, right? So now folks, here you can see if you go back to the instance because if I start explaining with it takes time. Let me complete this part then we'll go for this. Okay. So here you can see folks

[3:09:13] this. Okay. So here you can see folks this is my demo server. This is my demo this is my demo server. This is my demo server. Now, now you can see here a name of server is demo server with the instance id right and the status or even

[3:09:29] you can call it as a state instance state right which is running now and the instance type is t2.micro so still it's initializing right initialization initializing once it completes here you will get 2x2 check passed 2x2 check

[3:09:44] passed so what is 2x2 check passed there are two types of check we have First one is system check and the second one is instance check. What is 2x2 check first? First is system check and the second one is instance check. So what is system

[3:09:58] check? It physic like it check first it ensures that physical hardware is working network connectivity from AWS side power and host machine health right

[3:10:10] everything. If this fails problem is with AWS infrastructure not from the instance. Then what is next one? Instance check it check your instance operating system right then it ensures uh instance networking is configured

[3:10:24] correctly or not instance booted successfully or not right kernel is responding or not if this fails problems is available inside the instance like operating system memory network you have to check that right okay again I'm

[3:10:38] repeating there are two types of check first one is system check and the second one is instance check instance check. System check is relevant to AWS infrastructure and instance check is relevant to operating system networking

[3:10:55] whether it is booted successfully or not even whether it is kernel is responding even whether it is kernel is responding or not. Okay. Now folks once you create your server okay now you have to create the image that means same EC2 instance

[3:11:11] AMI right. So for that you have to go to the server fine and then go to the action and here folks there is a option called image and template then you can

[3:11:23] click on create image. Now what I'm doing I'm creating a same image same image of my EC2 machine. I'm creating the same image of my EC2 machine. Right? So create images option create image

[3:11:36] option is available now. Right now if you don't select this EC2 many participants what they'll do they'll not select this option and directly they go for here right so I'm going to the action and here this option is disabled

[3:11:50] so how it will be enabled until and unless you have to first select the unless you have to first select the server then go to the action and image and template create a image

[3:12:03] see what is the name of your image now let me create a new demo Okay, image name is new demo description blah blah blah blah blah it's up to you right so reboot instance so when you select this right so EC2 will like uh

[3:12:18] EC2 will rest when the snapshots are attached to your volumes when you are attached to your volumes when you are taken so here always it ensures that the data will be always consistent here right so folks what I created the EC2

[3:12:32] instance it's 8 GB again I'm repeating what I created the EC2 instance it's 8 GB here in this image if you want to change the size up to 64GB you can modify it's up to you but I'll keep as

[3:12:46] it is no I don't want to change anything here keep everything as it is let's here keep everything as it is let's create a image this is EBS details right so now you can see currently creating AMI this is AMI ID from instance this

[3:13:02] instance is processing right you can check the status until and unless it should be available. Let me go to the AMI section. Now let me go to the AMI section. Here I have images and AMI option. So folks, is it the same AMI

[3:13:17] what I created just now? You can see still still status is pending. It should still still status is pending. It should be available now. Right? So after that let me show you. Let me click on launch instance again.

[3:13:32] Here you can see 2x2 check passed successfully done. Okay. So folks, successfully done. Okay. So folks, everyone please concentrate. Now in AMI section, I'll get a new field. Can you see this? My AMI is new field. Folks,

[3:13:54] AMI what I created just now in front of you people? Earlier it was not there. But now I created with the same image, right? Earlier it was not there. Just now I created in front of few people with the same EC2 I created one image.

[3:14:07] with the same EC2 I created one image. Even if you go for browse more AMI here you can see my AMI is one now created by me new demo is successfully available me new demo is successfully available for you. Right. So folks one thing I

[3:14:20] want to specify here what I created the AMI here. By using this AMI you can launch multiple EC2 instances when when it is available. Okay. So folks, this is

[3:14:33] all about the demonstration. This is all about the demonstration for your AMI. How we are creating the AMI and how we are creating the image of AMI. So this is your first demonstration now. So folks, first of all, this placement

[3:14:49] group is one of the feature placement groups is one of the feature of EC2. Placement group is one of the feature of EC2. group is one of the feature of EC2. Right? Actually it helps the users. It

[3:15:04] helps the users to deploy to deploy a group of

[3:15:21] interdependent instances to handle their workload in a more effective manner. Again I'm repeating folks here. It helps the user to deploy a group of this is

[3:15:33] the user to deploy a group of this is group of interdependent instances. So folks, if you use single instance, it depends on the single instance configuration, right? When you use a group of interdependent where the

[3:15:47] instances are dependent on each other, right? Interdependent instances. So you will get a more configuration. So that is the reason you can handle your workload in a more effective manner. Right? If it is single instance which is

[3:16:01] relevant to like which is only relevant to a specific configuration when you will get a group of EC2 instances which are interdependent you will get a more more more computing power. That is the reason if you want to handle your

[3:16:16] workload in a more effective manner at that time we are using placement group. Placement groups are not mandatory. Placement groups are not mandatory. Right? So it's up to you. It's up to you. You can create and enable this.

[3:16:30] Right? Now some of the important points for this placement group in that the first one is okay fine. Let me take one simple example. You cannot attach you simple example. You cannot attach you cannot attach EC2 instance to security

[3:16:45] group unless the security group should exist first. You cannot attach your EC2 instance security group unless the security group should exist first. So

[3:16:57] this is dependency right? This is dependency now. Fine. Now here folks some of the important points for this placement group. So per region 500

[3:17:09] placement group can be created. Right. And always make sure that name of every And always make sure that name of every placement group should be unique. Always name of every placement group should be unique. And here merge is not

[3:17:26] possible. Merging of placement group is not possible because there are different placement groups are available. Right? Cluster, partition, spread. So merging of placement group is not possible. These three points you have to keep in

[3:17:39] These three points you have to keep in mind. Now folks, let me take you to the custom diagrams. Here I have one document. And folks let me tell you in every session I'll use this custom diagrams 500 placement group per region

[3:17:55] not per instance per region. Okay. So folks this is custom diagram document. So in every session I'll use this document to clear more about the topic.

[3:18:07] available in the material section. These diagrams are my personal collection what I taken from the official AWS page. Right? So I taken this diagram from the the placement group. If you see the diagram you will get a,000% clear

[3:18:23] picture of how the cluster how the partition how spread will work. So now partition how spread will work. So now folks here you can see cluster placement term called racking networking? Okay. No. Yeah. Let me explain if you're not

[3:18:37] aware. See rack is a place those who are already aware you can acknowledge for already aware you can acknowledge for this. Rack is a place where I can host my servers. Can I say that in simple words? I'm using rack is a place where

[3:18:49] I'm going to host my servers. Are you with me folks? Those who are already aware, I'm taking the input from them. Rack is a place where I can host my Rack is a place where I can host my servers. So now I am using a single

[3:19:03] rack. I'm using single rack to launch multiple EC2 instances. In cluster placement group I'm using single rack to launch multiple EC2 instances. Let us

[3:19:16] consider in some case a rack fails then all the EC2 instances will fail. All the EC2 instances will fail right. Let me show you the description. So same rack and same availability zone it provide the great network with the low latency

[3:19:31] and the communication a 10 Gbps bandwidth between the instances if you want to communicate right. So what is the advantage? See sorry what is the disadvantage? If rack fails then all the EC2 instances will be fail at the same

[3:19:45] time as I shown you in the diagram. So when we are using what are the use cases for big data jobs that need complete fast right and even some of the application with low latency high throughput. The best example for low

[3:20:00] latency high throughput is stock market right where the instances can be communicate with each other with the low latency to provide a quick results with high throughput right now the next one is partition placement group. So folks

[3:20:17] this partition placement group is also available in single availability zone but here you can create a multiple question sir how many partitions I can

[3:20:30] create now up to seven partitions in single availability zone you can create up to seven partition and here every partition have a separate rack every partition have a separate rack. If something went wrong with the first rack

[3:20:46] that doesn't going to affect the partition two and three. If something that doesn't going to affect partition one and three. If something went wrong with the partition three rack that doesn't going to affect the partition

[3:20:59] one and two that is the power of partition placement group now right so here you can deploy hundreds of EC2 instance there is no restriction let me show you in partition up to seven partition per with hundreds of EC2

[3:21:13] instances you can deploy so the instance of one partition do not share the rack instance with other partition if partition failover can affect a many EC2 inst instance from a same partition but it won't affect for other EC2 instance

[3:21:30] in other partition that is the power of partition placement group now right now the third type is called spread placement group the name itself indicate

[3:21:44] spread where you can use in multiple availability zone in a single region multiple availability zone in a single region like here I have 1 A availability zone, 1 B availability zone, 1 C

[3:21:58] availability zone. Even in same single availability zone for every EC2 instance have a separate hardware. Right? So here for 1 A availability zone, EC2 with the

[3:22:10] separate hardware, EC2 with the separate hardware. what it means even within the same availability zone if something went wrong with the first EC2 hardware that doesn't going to affect the hardware too because for every EC2 a separate

[3:22:26] hardware will be maintained right same thing in 1B also if something went wrong with the hardware 4 that doesn't going to affect hardware 3 because for every EC2 the hardware is separate same thing if something went wrong with the

[3:22:39] affect six even if it is in the same available ility zone every EC2 are independent and let me tell you folks in a single availability zone you can launch up to seven instances it's a hard limit right up to seven instances not

[3:22:56] more than that right so now spread all EC2 instances will be located on a different hardware span across the multiple availability zone it reduces the risk of simultaneous failure and there is a limit of seven instances per

[3:23:11] a per placement ment group. So when should I use this? Let us consider I have the application that needs a maximum high availability like critical application right critical application

[3:23:26] that need to be isolated from failover from each other. So folks can I consider critical application means can I use for defense system? Yes. Right. Okay. Now let me show you where this feature will be available in your EC2 instance.

[3:23:43] See when you scroll down there is a option called advanced details. Just click on this. When you click on this advanced detail many additional features are available. You can see there is a option called create placement group.

[3:23:57] Right now I don't have any placement group in this in this region. Right. Let group in this in this region. Right. Let me create a new placement group.

[3:24:13] group. Let me create a new one. Let's create a new placement group. The name create a new placement group. The name called today's date is 06. Demo 06. And which strategy you are using? I'm going to use a cluster. Let's create a

[3:24:26] placement group. And folks, when you go back to your EC2 dashboard here, launching the instance, still it is not available. You have to refresh now. Right? So now while you are launching the EC2 instance you have to

[3:24:41] launching the EC2 instance you have to select this demo06. Is it the same demo06 placement group what I created in front of you people folks cluster is the strategy is it the same placement group? Yes you have to select this and you can

[3:24:55] launch your install right next topic called meta data. So what is metadata folks? Data about EC2. What kind of a data information about EC2? But what kind of a information about EC2? A E API security table configuration details of

[3:25:10] EC2 contains the information about the EC2 which is running. Right? Like what is the AMI ID of instance? What is the instance type? What is the public hosted name? Right? What is the local host name? What is the IPv4 address? Right?

[3:25:26] Then MAC address, what is the security group? What is the instance ID? What are like what is profile then what is the tax everything you'll get the detailed information here exactly correct meta data is all about the data about what do

[3:25:40] you call data about the EC2 instances right now let me show you how we are right now let me show you how we are enabling this let me create a server enabling this let me create a server called m server okay

[3:25:54] this is my Linux operating system t2.micro So

[3:26:06] networking keep everything as it is. So here make sure that SSH traffic should be allowed right SSH traffic should be allowed. So now go to advanced details

[3:26:19] right. So there is a feature called metadata. Please check it out where it is. Yes. Can you see this? There are two options are see meta data it's enabled right so here we have two versions

[3:26:36] v_sub_1 and v_sub_2 so v_sub_1 is like without authentication v_sub_2 is like with authentication where the token is created again I'm repeating we have two types of metadata v_sub_1 and v_sub_2 v_sub1 means without authentication

[3:26:51] v_sub_2 means tokens are required where authentication is required where 6 hour sessions token will be created right so which provides a better security right let me select both v_sub1 and v_sub_2 okay now v_sub1 v2 is available let's

[3:27:08] create a instance let's launch the instance right v_sub_1 is for request response method v_sub2 is for session oriented for maximum six hours okay let me go to the instance and here is my meta server

[3:27:24] select this see here you can see meta server is see here you can see meta server is available right just click on connect now directly I'll connect to my EC2 by using EC2 instance connect option

[3:27:38] connect it because SSH traffic is allowed for me because SSH traffic is allowed for me right SSH traffic is allowed for me okay now you can see I am in my EC2 machine this is my EC2 machine right

[3:27:54] with the Linux 2023 operating system and this is public IP and private IP of my EC2 machine. So folks, if you want to check the meta data of EC2 machine by check the meta data of EC2 machine by using version one, I have two commands.

[3:28:09] using version one, I have two commands. Let me

[3:28:22] okay. So this is first one. This is for first version one. copy it and just paste it here. So, curl http col 169 254 169 254 latest

[3:28:35] meta data. This is the standard URL. This is the standard URL you can use to check the meta data of any EC2 instances by using version one. Just enter it. You

[3:28:47] What you want to check? I want to check the AMI ID of EC2 machine. So just you the AMI ID of EC2 machine. So just you have to add AMI ID. have to add AMI ID. Okay. Now you will get the AMI ID of

[3:29:02] this particular EC2 machine. Right. Let us consider I want a MAC address of this us consider I want a MAC address of this EC2 machine like this. Just type MAC ID. So this is the MAC ID of your EC2 machine. So by using this way you are

[3:29:20] machine. So by using this way you are getting the responses for your EC2 meta data version one right. So version two will be like assignment. Here you have two steps. I'll share this document. You will get the details of your EC2 machine

[3:29:34] by using V2 also. Same steps. First you have to copy step one then copy step Provide the name of the attribute. You will get the detail information. Right. will get the detail information. Right. The next topic is about EC2 purchasing

[3:29:49] options. So let me take you to the next topic called EC2 purchasing options. So folks here I have the next topic called EC2 purchasing options. Okay. So folks

[3:30:02] when you create any EC2 instance by default it's on demand instances. So why we are using ondemand instances? Because there is no any commitment

[3:30:14] there is no any commitment right then ready to use always even you right then ready to use always even you can use for short workloads can use for short workloads short workloads but this is costly

[3:30:26] but this is costly folks costly compared to other options right so first of all there is no any commitment here always ready to work and here even this is best for short workloads right this is costly compared to other options. Right. Next,

[3:30:44] we have saving plans. In saving plan, you will get a 65% of a discount

[3:30:56] here you have to give a commitment of 1 or 3 years. 1 or 3 years of a commitment required. And here you will get 65% of a discount. Right? 65% of a discount compared to your on demand instances.

[3:31:11] Right? Then next we have reserved instances. Here also you will get 1 or 3 years of a commitment. Right? And here you will get a discount up to 72% compared to your ondemand instances. Right? Might be you have a question sir

[3:31:27] what is the difference between saving and reserved instances? See in saving plan it's possible to change the instance family like from T2 to T6 from

[3:31:40] T3 to R six you can change the instance family but in reserved instances right in reserved instances if you select R6.large that means this R6.lar should be used for this 3 years. Now the next question

[3:31:57] sir then when should I use this reserve instance? Let us consider yes let us consider Santosh is one of the solution architect for IRCTC website. So IRCTC

[3:32:10] architect for IRCTC website. So IRCTC website so now Santosh is already aware website so now Santosh is already aware this IRCTC website will work for 100% 3 year and I know that this much of a traffic I'll get every day I'll get 1

[3:32:22] million request for this server already. I I know that right. So that is the I I know that right. So that is the reason I'll take the decision to use R6.x large for this three years. So now in

[3:32:38] this situation even if you are expecting some high traffic also it's not possible to change the instance type in this red reserved instance. Right? Then the next reserved instance. Right? Then the next one is spot instances. So folks, spot

[3:32:52] one is spot instances. So folks, spot instances you will get 90% of a discount compared to your ondemand instances. Right? Might we have a question sir? Why we are getting 90% of a discount here? Might we have a question? Because this

[3:33:06] part instance spaces are some of the unused space from saving plan reserve instances or on demand instances. Some of the some of the unused spaces are

[3:33:18] allocated in this spot instances. Right? That is the reason you are getting 90% of a discount. Apart from this, apart from this, there is one twist. What is that? Let me explain with one simple example. So folks, here I'm getting 90%

[3:33:35] of a discount. Right? Let me take one simple example. Here folks, in this hotel and lodging facility, I have total 100 rooms. 100 rooms. Total 100 rooms and all the 97 rooms are

[3:33:49] Total 100 rooms and all the 97 rooms are occupied with amount of $100 occupied with amount of $100 with amount of $100. Okay. Now after 24 vacened. These three three rooms are vacened. Right. So now suddenly one

[3:34:05] person will come and he'll ask the room. Okay. Hey manager do you have any rooms? Okay. Hey manager do you have any rooms? So yes, answer is yes, but I'll pay $50. I'll pay $50. Okay, he's agree. But

[3:34:23] he'll put one condition. He'll put one condition, right? So if someone will come with more value, if someone will ask for this room with $60, you have to leave the room. This room is allocated to this person with $50. But manager

[3:34:39] will put one condition. If someone will come with higher value then this you have to leave the room like this. Let us consider here we have Santosh and Ferdin

[3:34:51] right. So now this space is allocated to Santosh Santosh right. So after this Santosh is taken this space for $100. Right? Now Ferdin will bid for $110.

[3:35:06] So this space will be allocated to furin and for Santosh before 2 minutes he'll get the notification please complete your task save all the data and your whatever the uh what do you call this space is there this will be allocated to

[3:35:20] space is there this will be allocated to so and so person right so now that is the reason AWS is clearly specified AWS is clearly specified don't use spot instances if you have some mission critical data complex data or any

[3:35:36] important data. Again, I'm repeating folks, this is very important. Don't use spot instances when you are dealing with critical data, mission critical data, complex data because if the data is vanished, it's not possible to recover

[3:35:48] vanished, it's not possible to recover it back. Right? The next one, dedicated it back. Right? The next one, dedicated host. So folks, dedicated host is very very very very costly compared to all these options

[3:36:02] because a separate physical server will be provided to the single customer. Right? Now might we have a question sir when we are using them specially specially for compliance purpose or let us consider I want a licensing that

[3:36:19] requires some dedicated physical server at that time we'll go for this one right where you want a dedicated physical server especially for licensing purpose at that time I'll go with dedicated host >> now we've come to the end of this

[3:36:33] session on AWS solutions architect certification training we've learned how AWS supports cloud architecture through compute, storage, networking, databases, security, monitoring, automation, and scalability. Thank you for watching.

[3:36:49] Until then, keep practicing and keep learning.

[3:37:09] is important, but knowing how to design the right architecture is even more important. The real question is, can your cloud solution handle traffic, stay secure, reduce cost, and recover quickly when something goes