Thursday 15 February 2018

AWS LAB

Computing

CREATE YOUR FIRST AMAZON EC2 INSTANCE (LINUX)
CREATE YOUR FIRST AMAZON EC2 INSTANCE (WINDOWS)
FIRST STEPS INTO THE LINUX CONSOLE

Storage

USING S3 BUCKET POLICIES AND CONDITIONS TO RESTRICT SPECIFIC PERMISSIONS
CREATE AN EBS-BACKED LINUX AMI
MANAGING INSTANCE VOLUMES USING EBS
INTRODUCTION TO THE ELASTIC FILE SYSTEM
CONFIGURING A STATIC WEBSITE WITH S3 AND CLOUDFRONT

Databases

INTRODUCTION TO DYNAMODB
CREATE YOUR FIRST AMAZON RDS DATABASE
CREATE YOUR FIRST AMAZON S3 BUCKET

Networking & Auto Scaling

INTRODUCTION TO VIRTUAL PRIVATE CLOUD (VPC)
SERVE YOUR FILES USING THE CLOUDFRONT CDN
WORKING WITH THE APPLICATION LOAD BALANCER
CREATING YOUR FIRST AUTO SCALING GROUP
WORKING WITH AMAZON EC2 AUTO SCALING GROUPS
LAUNCHING AUTO SCALING GROUPS BEHIND A CLASSIC LOAD BALANCER
CREATING YOUR FIRST CLASSIC LOAD BALANCER

Security

Others

INTRODUCTION TO AWS LAMBDA
MANAGE MESSAGE QUEUES USING AMAZON SQS
CREATE YOUR FIRST ELASTICACHE CLUSTER






CREATE YOUR FIRST AMAZON EC2 INSTANCE (LINUX)

How to launch, configure, and access a Linux virtual machine using AWS

Lab Overview

Amazon Elastic Compute Cloud (EC2) is one of the most popular AWS services. EC2 allows you to launch different types of cloud instances and pay for them with a pay-per-use model. EC2 allows you to have operating system level control of your computing resources while running in Amazon’s computing environment. Amazon EC2 reduces the time required to obtain and boot new server instances from days or weeks to minutes. This allows you to quickly scale capacity, both up and down, as your computing requirements change. Amazon EC2 allows you to build and configure your instances as you like, from your desired operating system to your applications.
By completing this hands-on lab, you will be able to launch and configure your first Amazon EC2 instance using the AWS Management Console.

Lab Objectives

Upon completion of this lab you will be able to:
  • Configure and launch an instance in EC2
  • Understand the Instance States and other critical instance information
  • Generate and use a Secure Shell (SSH) public/private key pair
  • Connect to a running Linux instance using an SSH client
  • Extract metadata about your running instance
  • Terminate an instance

Lab Prerequisites

You should be familiar with:
  • Conceptual understanding of EC2
  • Conceptual understanding of SSH client software, protocol, and keys
  • Some Linux shell/command level understanding is helpful, but not required

CREATE YOUR FIRST AMAZON EC2 INSTANCE (WINDOWS)

How to launch, configure, and access a Microsoft Windows virtual machine using AWS

Amazon EC2 is the most famous AWS service and allows you to launch different types of cloud instances and pay for them with a pay-per-use approach. With Amazon EC2 you can create new servers in a few minutes and use different images (AMI) to personalize them. AWS provides several Microsoft Windows Server AMIs that enables you to run any compatible Windows-based solution. You can use Windows-based applications, websites, and web-services written in .NET, for data processing, media transcoding, and any other task requiring Windows software.
By completing this hands-on lab, you will be able to launch and access your first Amazon EC2 instance running Microsoft Windows Server.

Follow these steps to learn by building helpful cloud resources

Log In to the Amazon Web Service Console

Your first step to start the laboratory experience

Create a Windows EC2 instance

Launch an new EC2 instance using the Windows AMI

Retrieve the Administrator password using the Keypair

Get the Windows Administrator password starting from the EC2 Keypair

Connect to a Windows instance using a Remote Desktop connection

How to start a Remote Desktop connection using the EC2 instance credentials

Get the EC2 instance metadata (Windows)

How to get the EC2 instance ID and other useful metadata

Terminate an EC2 instance

How to destroy an EC2 instance

FIRST STEPS INTO THE LINUX CONSOLE

GNU/Linux is the leading operating system on servers and other big iron systems such as mainframe computers and supercomputers. Any system administrator should know the basics of the Linux Command Line Interface (CLI). This laboratory will show you the Linux CLI step-by-step.

Follow these steps to learn by building helpful cloud resources

Introduction to the Linux Command Line Interface (CLI)

Learn what a shell is and a terminal emulator.

Log In to the Amazon Web Service Console

Your first step to start the laboratory experience

Create an EC2 instance

Launch a new EC2 instance using the management console wizard

Convert a PEM key to a PPK key

Learn how to generate a PPK (PuTTY key) using the AWS PEM key

Connect to a remote shell using an SSH connection

How to use a remote Linux shell from Windows, Linux or Mac

Move between directories and list file content

How to use pwd, ls, cd, cat and tail commands

Manage files and their permissions

Learm how to use cp, mv, rm, mkdir, chmod and chown commands

Monitor and manage processes

How to use top, free, uptime and df commands.

Terminate an EC2 instance

How to destroy an EC2 instance


USING S3 BUCKET POLICIES AND CONDITIONS TO RESTRICT SPECIFIC PERMISSIONS

Being able to restrict and grant access to specific S3 resources is fundamental when implementing your security procedures. There are various methods that could be used to achieve this, one of which is to implement bucket policies. Bucket policies are applied directly to a bucket within S3 itself, and apply to that bucket only.
To make your bucket policy even more effective, you can apply specific conditions as to when the effects of that Policy should apply. There are a number of conditions you could base your bucket policy upon, and the AWS documentation provides greater insight into these found here.
It is also possible to create user policies which are created within IAM, however for this lab we will be focusing on bucket policies. For more information regarding user policies, please see our other labs and courses relating to IAM.
This lab will guide you through the bucket policy creation process with the use of the AWS Policy Generator.
We will create 2 Bucket Policies
1. Configure a bucket policy that will restrict what a user can do within an S3 bucket based upon their IP address
2. Configure a bucket policy to only allow the upload of objects to a bucket when server side encryption has been configured for the object

Follow these steps to learn by building helpful cloud resources

Log In to the Amazon Web Service Console

Your first step to start the laboratory experience

Create an S3 bucket

Create a new S3 bucket

Create a Bucket Policy Within S3 with IP Address Conditions

How to create and apply a bucket policy with IP address conditions within S3 using the AWS Policy Generator.

Create a Bucket Policy Within S3 with Encryption Conditions

How to create and apply a bucket policy with encryption conditions using the AWS Policy Generator.

CREATE AN EBS-BACKED LINUX AMI

Learn to create a customized OS image through an Amazon Machine Image (AMI)

An Amazon Machine Image (AMI) provides the information required to launch an EC2 instance. You can customize an EC2 instance and then save the configuration as a custom AMI for your private or public use. Every EC2 instance launched selecting the customized AMI will contain any software or file that you've previously added.
During this lab, you will setup a webserver EC2 instance starting from a Linux AMI, and then generate a new AMI.

Follow these steps to learn by building helpful cloud resources

Log In to the Amazon Web Service Console

Your first step to start the laboratory experience

Create a basic webserver instance

How to create a simple webserver instance

Create an AMI starting from an EBS-backed instance

How to create an AMI starting from a customized EC2 instance

Make an AMI public

How to allow the usage of a specific AMI from other AWS accounts













MANAGING INSTANCE VOLUMES USING EBS

Learn to manage the storage space of your EC2 instance using Amazon EBS

Amazon Elastic Block Store (Amazon EBS) provides persistent block level storage volumes for use with Amazon EC2 instances in the AWS Cloud.  Each Amazon EBS volume is automatically replicated within its Availability Zone to protect you from component failure. This provides high availability and durability. Amazon EBS volumes offer consistent, low-latency performance needed to run your workloads.
During this laboratory, you will learn to create an EC2 instance with an additional EBS volume. You will learn to attach and detach an EBS to/from a specific EC2 instance, take a snapshot, and master how to delete a volume.

Follow these steps to learn by building helpful cloud resources

Log In to the Amazon Web Service Console

Your first step to start the laboratory experience

Create an EC2 instance with an additional EBS

How to launch an EC2 instance with an additional EBS volume

Create a new EBS volume

How to create a new EBS Volume.

Attach and Detach an EBS volume

How to attach and detach an EBS volume to an EC2 instance

Connect to a remote shell using an SSH connection

How to use a remote Linux shell from Windows, Linux or Mac

Create a filesystem on an EBS Volume

How to create a filesystem in an EBS volume using a Linux instance.

Create an EBS snapshot

How to create and manage EBS snapshots










INTRODUCTION TO THE ELASTIC FILE SYSTEM

Amazon Elastic File System (Amazon EFS) provides simple, scalable file storage for use with Amazon EC2 instances in the AWS Cloud. With Amazon EFS, storage capacity is elastic, growing and shrinking automatically as you add and remove files, so your applications have the storage they need, when they need it.
Amazon EFS has a simple web services interface that allows you to create and configure file systems quickly and easily. The service manages all the file storage infrastructure for you, avoiding the complexity of deploying, patching, and maintaining complex file system deployments.

Pre-requisites:

This is a beginner level Lab, however, in order to follow the next steps you should be able to:
  • Describe and launch EC2 instances;
  • Connect to an EC2 instance using SSH;
  • Describe, create and configure Security Groups.
 We recommend this lab as pre-requisite:
 Learning Objectives:
By the end of this lab you should be able to:
  • Create file systems;
  • Mount file systems to EC2 instances;
  • Read/write files to a file system.

Follow these steps to learn by building helpful cloud resources

Log In to the Amazon Web Service Console

Your first step to start the laboratory experience

Create a File System

In this step, you will create a new File System in the Elastic File System console.

Mount a File System

In this step, you will mount a File System in an EC2 instance.

Retrieve files from EFS

In this step, you will use another EC2 instance to retrieve files from a File System.





























CONFIGURING A STATIC WEBSITE WITH S3 AND CLOUDFRONT

You can easily and inexpensively use Amazon Web Services (AWS) to host a website that uses client-side technologies (such as HTML, CSS, and JavaScript) and does not require server-side technologies (such as PHP and ASP.NET). This type of site is called a static website and is used to display content that does not change frequently.
During this lab, you will host your static website using the Amazon Simple Storage Service ( S3) so that it is secure, fast, protected against data loss, and can scale to support enterprise-level traffic. To do that, you'll store your website files on Amazon S3 and also use S3 to deliver your content to visitors to your website.
After setting up the static website on S3, this lab will show you how to use Amazon CloudFront to create a content delivery network (CDN). A CDN makes your website content available from data centers around the world, called edge locations. Using edge locations improves the speed of your website by reducing latency. Doing so is especially important if your website displays large media files such as high-resolution images, audio, or video.
Are you ready to get started?
Pre-requisites:
This is a beginner level Lab, however, in order to follow the next steps you should be able to:
  • Create S3 buckets
  • Set permissions for buckets and objects using ACLs and bucket policies
  • Create CloudFront distributions
We recommend these labs as pre-requisites:

Learning Objectives:

By the end of this lab you should be able to:
  • Configure static website hosting on Amazon S3
  • Configure static websites to work with CloudFront distributions

Follow these steps to learn by building helpful cloud resources

Log In to the Amazon Web Service Console

Your first step to start the laboratory experience

Create a S3 Static Website

In this step, you will create a new S3 static website

Create a CloudFront Distribution For The Static Website

In this step, you will create a new CloudFront distribution to work with the S3 static website



































USING S3 BUCKET POLICIES AND CONDITIONS TO RESTRICT SPECIFIC PERMISSIONS

Being able to restrict and grant access to specific S3 resources is fundamental when implementing your security procedures. There are various methods that could be used to achieve this, one of which is to implement bucket policies. Bucket policies are applied directly to a bucket within S3 itself, and apply to that bucket only.
To make your bucket policy even more effective, you can apply specific conditions as to when the effects of that Policy should apply. There are a number of conditions you could base your bucket policy upon, and the AWS documentation provides greater insight into these found here.
It is also possible to create user policies which are created within IAM, however for this lab we will be focusing on bucket policies. For more information regarding user policies, please see our other labs and courses relating to IAM.
This lab will guide you through the bucket policy creation process with the use of the AWS Policy Generator.
We will create 2 Bucket Policies
1. Configure a bucket policy that will restrict what a user can do within an S3 bucket based upon their IP address
2. Configure a bucket policy to only allow the upload of objects to a bucket when server side encryption has been configured for the object

Follow these steps to learn by building helpful cloud resources

Log In to the Amazon Web Service Console

Your first step to start the laboratory experience

Create an S3 bucket

Create a new S3 bucket

Create a Bucket Policy Within S3 with IP Address Conditions

How to create and apply a bucket policy with IP address conditions within S3 using the AWS Policy Generator.

Create a Bucket Policy Within S3 with Encryption Conditions

How to create and apply a bucket policy with encryption conditions using the AWS Policy Generator.

CREATE AN EBS-BACKED LINUX AMI

Learn to create a customized OS image through an Amazon Machine Image (AMI)

An Amazon Machine Image (AMI) provides the information required to launch an EC2 instance. You can customize an EC2 instance and then save the configuration as a custom AMI for your private or public use. Every EC2 instance launched selecting the customized AMI will contain any software or file that you've previously added.
During this lab, you will setup a webserver EC2 instance starting from a Linux AMI, and then generate a new AMI.

Follow these steps to learn by building helpful cloud resources

Log In to the Amazon Web Service Console

Your first step to start the laboratory experience

Create a basic webserver instance

How to create a simple webserver instance

Create an AMI starting from an EBS-backed instance

How to create an AMI starting from a customized EC2 instance

Make an AMI public

How to allow the usage of a specific AMI from other AWS accounts



















MANAGING INSTANCE VOLUMES USING EBS

Learn to manage the storage space of your EC2 instance using Amazon EBS

Amazon Elastic Block Store (Amazon EBS) provides persistent block level storage volumes for use with Amazon EC2 instances in the AWS Cloud.  Each Amazon EBS volume is automatically replicated within its Availability Zone to protect you from component failure. This provides high availability and durability. Amazon EBS volumes offer consistent, low-latency performance needed to run your workloads.
During this laboratory, you will learn to create an EC2 instance with an additional EBS volume. You will learn to attach and detach an EBS to/from a specific EC2 instance, take a snapshot, and master how to delete a volume.

Follow these steps to learn by building helpful cloud resources

Log In to the Amazon Web Service Console

Your first step to start the laboratory experience

Create an EC2 instance with an additional EBS

How to launch an EC2 instance with an additional EBS volume

Create a new EBS volume

How to create a new EBS Volume.

Attach and Detach an EBS volume

How to attach and detach an EBS volume to an EC2 instance

Connect to a remote shell using an SSH connection

How to use a remote Linux shell from Windows, Linux or Mac

Create a filesystem on an EBS Volume

How to create a filesystem in an EBS volume using a Linux instance.

Create an EBS snapshot

How to create and manage EBS snapshots