PH3- AWS Global Infrastructure Overview

Prelim Handout 03

AZ

Availability Zone

CDN

Content Delivery Network

DNS

Domain Name System

DDoS

Distributed Denial of Service

What provides the physical and network foundation for delivering cloud services around the world.

AWS Global Infrastructure

What AWS Global Infrastructure is designed to support while giving customers control over where applications and data are deployed.

Secure, reliable, scalable, and high-performing workloads

The main components AWS organizes its cloud infrastructure into, as introduced in this module.

AWS Regions, Availability Zones, data centers, and Points of Presence

What should be verified using the AWS Global Infrastructure resources, since AWS continually expands its footprint.

Current infrastructure information

A separate geographic area in which AWS operates cloud infrastructure.

AWS Region

Why Regions are isolated from one another.

To support fault tolerance and stability

Whether resources and data in one Region are automatically replicated to another Region.

No; cross-Region replication is configured based on business or technical requirements

What communication between Regions uses.

The AWS global network backbone

What a Region contains that provides redundant and interconnected infrastructure within the same geographic area.

Multiple Availability Zones

What the appropriate Region for a workload depends on.

The requirements of the workload

The factor for selecting a Region concerning choosing a location that satisfies regulatory, compliance, or data residency requirements.

Data governance and legal requirements

The factor for selecting a Region concerning how a Region closer to users and connected systems can help reduce network latency.

Proximity to users

The factor for selecting a Region concerning confirming that the required AWS services and features are available in the selected Region.

Service availability

The factor for selecting a Region concerning how service prices can vary by Region, affecting the total cost of a workload.

Cost

An isolated location within an AWS Region, designed for fault isolation.

Availability Zone (AZ)

What Availability Zones are connected to other Availability Zones in the same Region through.

High-bandwidth, low-latency private networking

What each Availability Zone consists of, with independent power, networking, and connectivity.

One or more discrete data centers

What AWS recommends when a workload requires high availability and resiliency.

Distributing resources across multiple Availability Zones

What deploying resources across multiple Availability Zones can reduce and improve.

The impact of a failure in a single location and improve application availability

The infrastructure level described as a separate geographic area that contains multiple Availability Zones, with customer-controlled cross-Region replication.

Region

The infrastructure level described as an isolated location within a Region, designed for fault isolation, connected to other AZs through private high-speed networking.

Availability Zone

The infrastructure level described as a physical facility where data is stored and processed, including redundant power, networking, and connectivity.

Data center

The physical facilities in which computing, storage, and network processing occur.

AWS data centers

The most granular infrastructure location that customers generally choose when deploying resources.

The Availability Zone

What AWS designs data centers with to reduce environmental and operational risk.

Redundant power, networking, and connectivity

What can redirect traffic when failures occur at AWS data centers.

Automated processes

What make up an Availability Zone, helping provide fault isolation and resiliency within an AWS Region.

One or more discrete data centers

What extend selected AWS services closer to end users and are designed primarily to reduce latency.

AWS Points of Presence

What Points of Presence include.

Edge locations and Regional edge caches

What edge locations are used by services such as Amazon CloudFront and Amazon Route 53 for.

To serve requests closer to end users and reduce latency

A content delivery network (CDN) that uses edge locations to deliver content with low latency and high transfer speeds.

Amazon CloudFront

What provide an additional caching layer for content that is not accessed frequently enough to remain at an edge location.

Regional edge caches

The number of service categories emphasized in this module that are used throughout AWS Academy Cloud Foundations.

Seven categories

The seven service categories emphasized in this module.

Storage; Compute; Database; Networking and Content Delivery; Security, Identity, and Compliance; Cost Management; and Management and Governance

What is at the infrastructure layer, per the Foundational Service Model.

Regions, Availability Zones, and edge locations

What foundational services such as compute, networking, and storage use, per the Foundational Service Model.

The infrastructure layer (Regions, Availability Zones, and edge locations)

What higher-level database, analytics, application, management, security, and other service categories build on.

Those foundations (the infrastructure layer)

The service category whose primary purpose is to store and protect data using object, block, file, and archival storage options.

Storage

The service category whose primary purpose is to run virtual machines, containers, applications, and serverless code.

Compute

The service category whose primary purpose is to operate relational, key-value, document, and data warehouse workloads.

Database

The service category whose primary purpose is to connect resources and networks, balance traffic, route requests, and deliver content.

Networking and Content Delivery

The service category whose primary purpose is to control access, manage encryption, obtain compliance information, and protect applications.

Security, Identity, and Compliance

The service category whose primary purpose is to analyze spending, track usage, and define budget thresholds.

Cost Management

The service category whose primary purpose is to access, monitor, configure, audit, and optimize AWS resources and workloads.

Management and Governance

What AWS storage services provide different ways to store data based on.

Access pattern, performance, sharing, and retention requirements

Object storage for scalable storage and protection of data used by applications, backups, archives, analytics, and other workloads.

Amazon S3

High-performance block storage designed primarily for use with Amazon EC2 instances.

Amazon EBS

Managed, elastic file storage that can scale automatically as files are added or removed.

Amazon EFS

Low-cost archival storage for long-term retention and backup data.

Amazon S3 Glacier storage classes

Provides resizable compute capacity as virtual machines in the cloud.

Amazon EC2

Automatically adds or removes EC2 instances based on defined conditions.

Amazon EC2 Auto Scaling

Orchestrates and runs containerized applications.

Amazon ECS

Stores, manages, and deploys container images.

Amazon ECR

Deploys and scales web applications while AWS manages much of the underlying environment.

AWS Elastic Beanstalk

Runs code without provisioning or managing servers.

AWS Lambda

Runs and manages Kubernetes-based containerized applications on AWS.

Amazon EKS

Runs containers without requiring customers to manage servers or clusters.

AWS Fargate

What AWS database services support, including relational applications, key-value and document workloads, and large-scale analytics.

Different data models and workload patterns

Simplifies the setup, operation, and scaling of relational databases while automating common administration tasks.

Amazon RDS

A MySQL- and PostgreSQL-compatible relational database built for cloud workloads.

Amazon Aurora

A managed key-value and document database designed for consistent low-latency performance at scale.

Amazon DynamoDB

A cloud data warehouse service for large-scale analytics and complex queries.

Amazon Redshift

What networking and content delivery services connect, while supporting traffic distribution, routing, private connectivity, and content delivery.

Cloud resources, on-premises environments, and end users

Creates logically isolated virtual networks in the AWS Cloud.

Amazon VPC

Distributes incoming application traffic across multiple targets.

Elastic Load Balancing

Delivers content globally through a content delivery network with low latency.

Amazon CloudFront

Provides scalable Domain Name System (DNS) routing for internet applications.

Amazon Route 53

Connects multiple VPCs and on-premises networks through a central gateway.

AWS Transit Gateway

Provides a dedicated private network connection from an on-premises location to AWS.

AWS Direct Connect

Creates a secure private tunnel from a network or device to the AWS global network.

AWS VPN

What AWS security, identity, and compliance services help do.

Protect resources, control access, manage encryption, and support compliance requirements

Manages access to AWS services and resources through identities and permissions.

AWS IAM

Provides centralized account management and organization-level controls across multiple AWS accounts.

AWS Organizations

Adds user sign-up, sign-in, and access control to web and mobile applications.

Amazon Cognito

Provides on-demand access to AWS security and compliance reports and selected agreements.

AWS Artifact

Creates and manages encryption keys used by AWS services and applications.

AWS KMS

Provides managed protection against Distributed Denial of Service (DDoS) attacks.

AWS Shield

What AWS cost management services provide, helping organizations monitor, analyze, and control costs.

Visibility into cloud spending

Provides detailed AWS cost and usage data with service, pricing, and reservation information.

AWS Cost and Usage Report

Creates custom cost or usage budgets and alerts when actual or forecasted amounts cross defined thresholds.

AWS Budgets

Visualizes and analyzes AWS costs and usage over time.

AWS Cost Explorer

What management and governance services help customers do.

Access, monitor, configure, audit, scale, and optimize AWS environments

Provides a browser-based interface for accessing and managing AWS services.

AWS Management Console

Tracks resource inventory, configurations, and configuration changes.

AWS Config

Monitors resources and applications and provides metrics, logs, and alarms.

Amazon CloudWatch

Scales supported AWS resources to help meet changing demand.

AWS Auto Scaling

Provides a command-line tool for managing AWS services.

AWS CLI

Provides recommendations related to areas such as cost, performance, security, and service limits.

AWS Trusted Advisor

Supports reviews of workloads against AWS architectural best practices.

AWS Well-Architected Tool

Records user activity and API usage for auditing and governance.

AWS CloudTrail

What helps users identify whether a service or resource is global, Regional, or associated with a particular Availability Zone.

The AWS Management Console

Services not associated with a specific AWS Region that can be accessed across the AWS global infrastructure.

Global services

Services and resources that operate within a selected AWS Region.

Regional services and resources

What some Regional services allow, providing greater control over where resources operate within the Region.

Resources to be deployed in specific Availability Zones

What the scope of a service or resource affects.

Where it is configured, deployed, and available within the AWS infrastructure

The scope of AWS IAM.

Global service