book

Amazon Web Services in Action, Third Edition

Name: Amazon Web Services in Action, Third Edition
ISBN: 9781633439160

by Andreas Wittig, Michael Wittig

May 2023

Intermediate to advanced

552 pages

16h 16m

English

Manning Publications

Audiobook available

Read now

Unlock full access

inside front cover
AWS Services Explained in the Book
Amazon Web Services in Action
Praise for the second edition
Copyright
brief contents
contents
front matter
prefaceacknowledgmentsabout this bookAbout the third editionWho should read this bookHow this book is organized: A road mapAWS costsAbout the codeliveBook discussion forumabout the authorsabout the cover illustration
Part 1. Getting started
1 What is Amazon Web Services?
1.1 What is Amazon Web Services (AWS)?1.2 What can you do with AWS?1.2.1 Hosting a web shop1.2.2 Running a Java EE application in your private network1.2.3 Implementing a highly available system1.2.4 Profiting from low costs for batch processing infrastructure1.3 How you can benefit from using AWS1.3.1 Innovative and fast-growing platform1.3.2 Services solve common problems1.3.3 Enabling automation1.3.4 Flexible capacity (scalability)1.3.5 Built for failure (reliability)1.3.6 Reducing time to market1.3.7 Benefiting from economies of scale1.3.8 Global infrastructure1.3.9 Professional partner1.4 How much does it cost?1.4.1 Free Tier1.4.2 Billing example1.4.3 Pay-per-use opportunities1.5 Comparing alternatives1.6 Exploring AWS services1.7 Interacting with AWS1.7.1 Management Console1.7.2 Command-line interface1.7.3 SDKs1.7.4 Blueprints1.8 Creating an AWS account1.8.1 Signing up1.8.2 Signing in1.9 Creating a budget alert to keep track of your AWS billSummary
2 A simple example: WordPress in 15 minutes
2.1 Creating your infrastructure2.2 Exploring your infrastructure2.2.1 Virtual machines2.2.2 Load balancer2.2.3 MySQL database2.2.4 Network filesystem2.3 How much does it cost?2.4 Deleting your infrastructureSummary

Part 2. Building virtual infrastructure consisting of computers and networking
3 Using virtual machines: EC2
3.1 Exploring a virtual machine3.1.1 Launching a virtual machine3.1.2 Connecting to your virtual machine3.1.3 Installing and running software manually3.2 Monitoring and debugging a virtual machine3.2.1 Showing logs from a virtual machine3.2.2 Monitoring the load of a virtual machine3.3 Shutting down a virtual machine3.4 Changing the size of a virtual machine3.5 Starting a virtual machine in another data center3.6 Allocating a public IP address3.7 Adding an additional network interface to a virtual machine3.8 Optimizing costs for virtual machines3.8.1 Commit to usage, get a discount3.8.2 Taking advantage of spare compute capacitySummary
4 Programming your infrastructure: The command line, SDKs, and CloudFormation
4.1 Automation and the DevOps movement4.1.1 Why should you automate?4.2 Using the command-line interface4.2.1 Installing the CLI4.2.2 Configuring the CLI4.2.3 Using the CLI4.2.4 Automating with the CLI4.3 Programming with the SDK4.3.1 Controlling virtual machines with SDK: nodecc4.3.2 How nodecc creates a virtual machine4.3.3 How nodecc lists virtual machines and shows virtual machine details4.3.4 How nodecc terminates a virtual machine4.4 Infrastructure as Code4.4.1 Inventing an infrastructure language: JIML4.5 Using AWS CloudFormation to start a virtual machine4.5.1 Anatomy of a CloudFormation template4.5.2 Creating your first template4.5.3 Updating infrastructure using CloudFormationSummary
5 Securing your system: IAM, security groups, and VPC
5.1 Who’s responsible for security?5.2 Keeping the operating system up-to-date5.3 Securing your AWS account5.3.1 Securing your AWS account’s root user5.3.2 AWS Identity and Access Management (IAM)5.3.3 Defining permissions with an IAM identity policy5.3.4 Users for authentication and groups to organize users5.3.5 Authenticating AWS resources with roles5.4 Controlling network traffic to and from your virtual machine5.4.1 Controlling traffic to virtual machines with security groups5.4.2 Allowing ICMP traffic5.4.3 Allowing HTTP traffic5.4.4 Allowing HTTP traffic from a specific source IP address5.4.5 Allowing HTTP traffic from a source security group5.5 Creating a private network in the cloud: Amazon Virtual Private Cloud (VPC)5.5.1 Creating the VPC and an internet gateway (IGW)5.5.2 Defining the public proxy subnet5.5.3 Adding the private backend subnet5.5.4 Launching virtual machines in the subnets5.5.5 Accessing the internet from private subnets via a NAT gatewaySummary
6 Automating operational tasks with Lambda
6.1 Executing your code with AWS Lambda6.1.1 What is serverless?6.1.2 Running your code on AWS Lambda6.1.3 Comparing AWS Lambda with virtual machines (Amazon EC2)6.2 Building a website health check with AWS Lambda6.2.1 Creating a Lambda function6.2.2 Use CloudWatch to search through your Lambda function’s logs6.2.3 Monitoring a Lambda function with CloudWatch metrics and alarms6.2.4 Accessing endpoints within a VPC6.3 Adding a tag containing the owner of an EC2 instance automatically6.3.1 Event-driven: Subscribing to EventBridge events6.3.2 Implementing the Lambda function in Python6.3.3 Setting up a Lambda function with the Serverless Application Model (SAM)6.3.4 Authorizing a Lambda function to use other AWS services with an IAM role6.3.5 Deploying a Lambda function with SAM6.4 What else can you do with AWS Lambda?6.4.1 What are the limitations of AWS Lambda?6.4.2 Effects of the serverless pricing model6.4.3 Use case: Web application6.4.4 Use case: Data processing6.4.5 Use case: IoT backendSummary
Part 3. Storing data in the cloud
7 Storing your objects: S3
7.1 What is an object store?7.2 Amazon S37.3 Backing up your data on S3 with AWS CLI7.4 Archiving objects to optimize costs7.5 Storing objects programmatically7.5.1 Setting up an S3 bucket7.5.2 Installing a web application that uses S37.5.3 Reviewing code access S3 with SDK7.6 Using S3 for static web hosting7.6.1 Creating a bucket and uploading a static website7.6.2 Configuring a bucket for static web hosting7.6.3 Accessing a website hosted on S37.7 Protecting data from unauthorized access7.8 Optimizing performanceSummary
8 Storing data on hard drives: EBS and instance store
8.1 Elastic Block Store (EBS): Persistent block-level storage attached over the network8.1.1 Creating an EBS volume and attaching it to your EC2 instance8.1.2 Using EBS8.1.3 Tweaking performance8.1.4 Backing up your data with EBS snapshots8.2 Instance store: Temporary block-level storage8.2.1 Using an instance store8.2.2 Testing performance8.2.3 Backing up your dataSummary
9 Sharing data volumes between machines: EFS
9.1 Creating a filesystem9.1.1 Using CloudFormation to describe a filesystem9.1.2 Pricing9.2 Creating a mount target9.3 Mounting the EFS filesystem on EC2 instances9.4 Sharing files between EC2 instances9.5 Tweaking performance9.5.1 Performance mode9.5.2 Throughput mode9.5.3 Storage class affects performance9.6 Backing up your dataSummary
10 Using a relational database service: RDS
10.1 Starting a MySQL database10.1.1 Launching a WordPress platform with an RDS database10.1.2 Exploring an RDS database instance with a MySQL engine10.1.3 Pricing for Amazon RDS10.2 Importing data into a database10.3 Backing up and restoring your database10.3.1 Configuring automated snapshots10.3.2 Creating snapshots manually10.3.3 Restoring a database10.3.4 Copying a database to another region10.3.5 Calculating the cost of snapshots10.4 Controlling access to a database10.4.1 Controlling access to the configuration of an RDS database10.4.2 Controlling network access to an RDS database10.4.3 Controlling data access10.5 Building on a highly available database10.5.1 Enabling high-availability deployment for an RDS database10.6 Tweaking database performance10.6.1 Increasing database resources10.6.2 Using read replication to increase read performance10.7 Monitoring a databaseSummary
11 Caching data in memory: Amazon ElastiCache and MemoryDB
11.1 Creating a cache cluster11.1.1 Minimal CloudFormation template11.1.2 Test the Redis cluster11.2 Cache deployment options11.2.1 Memcached: Cluster11.2.2 Redis: Single-node cluster11.2.3 Redis: Cluster with cluster mode disabled11.2.4 Redis: Cluster with cluster mode enabled11.2.5 MemoryDB: Redis with persistence11.3 Controlling cache access11.3.1 Controlling access to the configuration11.3.2 Controlling network access11.3.3 Controlling cluster and data access11.4 Installing the sample application Discourse with CloudFormation11.4.1 VPC: Network configuration11.4.2 Cache: Security group, subnet group, cache cluster11.4.3 Database: Security group, subnet group, database instance11.4.4 Virtual machine: Security group, EC2 instance11.4.5 Testing the CloudFormation template for Discourse11.5 Monitoring a cache11.5.1 Monitoring host-level metrics11.5.2 Is my memory sufficient?11.5.3 Is my Redis replication up-to-date?11.6 Tweaking cache performance11.6.1 Selecting the right cache node type11.6.2 Selecting the right deployment option11.6.3 Compressing your dataSummary
12 Programming for the NoSQL database service: DynamoDB
12.1 Programming a to-do application12.2 Creating tables12.2.1 Users are identified by a partition key12.2.2 Tasks are identified by a partition key and sort key12.3 Adding data12.3.1 Adding a user12.3.2 Adding a task12.4 Retrieving data12.4.1 Getting an item by key12.4.2 Querying items by key and filter12.4.3 Using global secondary indexes for more flexible queries12.4.4 Creating and querying a global secondary index12.4.5 Scanning and filtering all of your table’s data12.4.6 Eventually consistent data retrieval12.5 Removing data12.6 Modifying data12.7 Recap primary key12.7.1 Partition key12.7.2 Partition key and sort key12.8 SQL-like queries with PartiQL12.9 DynamoDB Local12.10 Operating DynamoDB12.11 Scaling capacity and pricing12.11.1 Capacity units12.12 Networking12.13 Comparing DynamoDB to RDS12.14 NoSQL alternativesSummary
Part 4. Architecting on AWS
13 Achieving high availability: Availability zones, autoscaling, and CloudWatch
13.1 Recovering from EC2 instance failure with CloudWatch13.1.1 How does a CloudWatch alarm recover an EC2 instance?13.2 Recovering from a data center outage with an Auto Scaling group13.2.1 Availability zones: Groups of isolated data centers13.2.2 Recovering a failed virtual machine to another availability zone with the help of autoscaling13.2.3 Pitfall: Recovering network-attached storage13.2.4 Pitfall: Network interface recovery13.2.5 Insights into availability zones13.3 Architecting for high availability13.3.1 RTO and RPO comparison for a single EC2 instance13.3.2 AWS services come with different high availability guaranteesSummary
14 Decoupling your infrastructure: Elastic Load Balancing and Simple Queue Service
14.1 Synchronous decoupling with load balancers14.1.1 Setting up a load balancer with virtual machines14.2 Asynchronous decoupling with message queues14.2.1 Turning a synchronous process into an asynchronous one14.2.2 Architecture of the URL2PNG application14.2.3 Setting up a message queue14.2.4 Producing messages programmatically14.2.5 Consuming messages programmatically14.2.6 Limitations of messaging with SQSSummary
15 Automating deployment: CodeDeploy, CloudFormation, and Packer
15.1 In-place deployment with AWS CodeDeploy15.2 Rolling update with AWS CloudFormation and user data15.3 Deploying customized AMIs created by Packer15.3.1 Tips and tricks for Packer and CloudFormation15.4 Comparing approachesSummary
16 Designing for fault tolerance
16.1 Using redundant EC2 instances to increase availability16.1.1 Redundancy can remove a single point of failure16.1.2 Redundancy requires decoupling16.2 Considerations for making your code fault tolerant16.2.1 Let it crash, but also retry16.2.2 Idempotent retry makes fault tolerance possible16.3 Building a fault-tolerant web application: Imagery16.3.1 The idempotent state machine16.3.2 Implementing a fault-tolerant web service16.3.3 Implementing a fault-tolerant worker to consume SQS messages16.3.4 Deploying the applicationSummary
17 Scaling up and down: Autoscaling and CloudWatch
17.1 Managing a dynamic EC2 instance pool17.2 Using metrics or schedules to trigger scaling17.2.1 Scaling based on a schedule17.2.2 Scaling based on CloudWatch metrics17.3 Decoupling your dynamic EC2 instance pool17.3.1 Scaling a dynamic EC2 instance pool synchronously decoupled by a load balancer17.3.2 Scaling a dynamic EC2 instances pool asynchronously decoupled by a queueSummary
18 Building modern architectures for the cloud: ECS, Fargate, and App Runner
18.1 Why should you consider containers instead of virtual machines?18.2 Comparing different options to run containers on AWS18.3 The ECS basics: Cluster, service, task, and task definition18.4 AWS Fargate: Running containers without managing a cluster of virtual machines18.5 Walking through a cloud-native architecture: ECS, Fargate, and S3Summary
index
inside back cover
AWS Services Explained in the Book

Content preview from Amazon Web Services in Action, Third Edition

6 Automating operational tasks with Lambda

This chapter covers

Creating a Lambda function to perform periodic health checks of a website
Triggering a Lambda function with EventBridge events to automate DevOps tasks
Searching through your Lambda function’s logs with CloudWatch
Monitoring Lambda functions with CloudWatch alarms
Configuring IAM roles so Lambda functions can access other services

This chapter is about adding a new tool to your toolbox. The tool we’re talking about, AWS Lambda, is as flexible as a Swiss Army knife. You don’t need a virtual machine to run your own code anymore, because AWS Lambda offers execution environments for C#/.NET Core, Go, Java, JavaScript/Node.js, Python, and Ruby. All you have to do is implement a function, ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781633439160Publisher Support Publisher Website Errata Page

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Amazon Web Services in Action, Third Edition

by Andreas Wittig, Michael Wittig

6 Automating operational tasks with Lambda

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.