Shulou(Shulou.com)06/03 Report--

Design elastic architecture 1.1.Select reliable / resilient storage EC2 instance storage temporary volumes only certain EC2 instance fixed capacity disk types and capacity depend on EC2 instance type application-level persistent EBS (Elastic Block Store) different types of availability zones (gp2, io1, st1, sc1) can be encrypted (can only be encrypted when created) Snapshot preconfiguration capacity stripes multiple volumes independent of the lifecycle of the EC2 instance To create mass volume learning materials AWS storage service overview white paper EBS lab EC2 instance storage experiment S3 consistency model storage class and persistence-standard, standard-IA encryption (data at rest)-SSE-S3, SSE-KMS, SSE-C encryption (data in transmission)-HTTPS version control access control-ACL, Bucket Policy segmented upload provides access to unlimited capacity area availability and high persistence through API-99.999999999%S3 Glacier data backup and archive storage file library and archive retrieval-accelerated, standard, bulk encrypted object lifecycle policy area availability high persistence-99.999999999 learning resources Amazon Glacier documents FAQ-EFS, S3, Glacier, CloudFrontS3, EFS White Paper 1.2, Determine how to use AWS products to design the separation mechanism SQSELBEIPRoute 531.3, determine how to design a multi-tier architecture solution CloudFormationAWS Lambda runs stateless code to respond to events Or a fully managed computing service that runs stateless code based on an interval that allows you to run code without the need to manage the infrastructure For example, Amazon EC2 instance and Auto Scaling group 1.4, determine how to design high availability and / or fault-tolerant solutions, look at knowledge points, the option of counting on a "single availability zone" is definitely not the right answer, using AWS managed services should always be the first choice for fault tolerance and high availability are not the same thing. Expect everything to fail at some point. And accordingly expand the design 2, define high-performance architecture 2.1, select high-performance storage and database EBS volume type S3 bucket Amazon RDSRDS partial engine read-only copy across the main deployed Amazon DynamoDBNoSQL database according to throughput requirements Amazon Redshift big data analysis 2.2, application cache to improve performance cache content in CloudFront-static and dynamic sources-S3, EC2, ELB and HTTP servers protect private content to improve security-AWS Shield, AWS WAF2.3, design flexible and scalable solutions vertical and horizontal scaling Auto Scaling start and terminate instances automatically register new instances into the load balancer can launch cloudWatchELB3 across availability zones, specify secure applications and architectures 3.1, determine how to protect the minimum authority principle of the application layer responsibility sharing model

IAM

Role

VPC security group and NACLVPC connection 3.2, determine how to protect data × × × SSLAWS KMS3.3, define networking infrastructure for a single VPC application 4, design cost-optimized architecture 4.1, determine how to design cost-optimized storage S3 charging model outgoing area charge PUT, COPY, POST, LIST, GET charge S3 traffic to CloudFront free of charge priority to choose managed service 4.2, Determine how to design cost optimization calculation the larger the amount of instances reserved on demand The less the unit cost, the less the unit cost. 5. Define the architecture that runs well. 5.1.Select the design function in the solution that can achieve excellent operation. AWS ConfigCloudFormationAWS Trusted AdvisorVPC log flow CloudTrailAWS Inspector inspection knowledge point IAM role is more convenient than secret key and password, more secure cross-system monitoring various indicators when appropriate, automatic response indicators to provide abnormal situation alerts welcome you to scan the code to follow and get more information.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.