CloudFormation

Benefits of AWS CloudFormation

• Infrastructure as code

• Cost

  • Each resource in the stack is tagged with an identifier so you can easily see how much a stack costs

  • Estimate the costs of resources using the CloudFormation template

  • Saving strategy: In Dev, you could automate the deletion of templates at 5 PM and recreate them at 8 A, safely

• Productivity

  • Automated generations of Diagram for template

• Do not reinvent the wheel

  • Leverage existing templates on the web

  • Leverage the documentation

• Supports (almost) all AWS resources

Service Role

• Use cases:

  • You want to achieve the least privilege principle

  • But you do not want to give the user all the required permissions to create the stack resources

• User must have iam:PassRole permissions

AWS SES

• Fully managed service to send emails securely, globally, and at scale

• Allow inbound/outbound emails

• Reputation dashboard, performance insights, anti-spam feedback

• Use cases: transactional, marketing, and bulk email communications

Amazon Pinpoint

• Supports email, SMS, push, voice, and in-app messaging

• Possibility of receiving replies

• Scales to billions of messages per day

• Use cases: run campaigns by sending marketing, bulk, and transactional SMS messages

• Versus SNS or SES

  • In SNS & SES you managed each message’s audience, content, and delivery schedule.

  • In Pinpoint, you create message templates, delivery schedules, highly-targeted segments, and full campaigns.s

System Manager - SSM Session Manager

• Allows to start a secure shell on EC2 and on-premises servers

• No SSH access, bastion hosts, or SSH Keys needed

• There is no need to open port 22

• Supports Linux, MacOS, Windows

• Send session log data to S3 or CloudWatch Logs

System Manager

Run command

• Execute a script or just run a command

• Run command across multiple instances (using resource groups)

• No need for SSH

• Command output can be shown in the AWS Console, and sent to the S3 bucket or CloudWatch Lo.gs.

• Send notifications to SNS about command status

• Integrated with IAM & CloudTrail

• It can be invoked using EventBridge

Patch Manager

• Automates the process of patching managed instances

• OS updates, application updates, security updates

• Supports EC2 instances and on-premises servers

• Supports Linux, MacOS, Windows

• Patch on-demand or on a schedule using Maintenance Windows

• Scan instances and generate patch compliance reports (missing patches)

Maintenance Windows

• Defines a schedule for when to perform actions on instances

• Example: OS patching, updating drivers, installing software,…

Automation

• Simplifies common maintenance and deployment tasks of EC2 instances and other AWS resources

• Ex: restart instances, create an AMI, EBS Snapshot,…

• Automation Runbook - SSM Documents to define actions pre-formed on EC2 instances or AWS Resources

• Can be triggered using:

  • Manually using AWS Console, AWS CLI, SDK

  • EventBridge

  • On a schedule using Maintenance Windows

  • By AWS Config for rules remediations

AWS Outposts

• Benefits:

  • Low-latency access to on-premises systems

  • Local data processing

  • Data residency

  • Easier migration from on-premises to the cloud

  • Fully managed service

• Some service that work on Outposts: EC2, EBS, S3, EKS, ECS, RDS, EMR

AWS Batch

• Fully managed batch processing at any scale

• Efficiently run 100,000s of computing batch jobs on AWS

• A “batch” job is a job with a start and an end

• Batch will dynamically launch EC2 or Spot Instances

• Batch jobs are defined as Docker images and run on ECS

• Helpful for cost optimizations and focusing less on the infrastructure

Amazon AppFlow

• Fully managed integration service that enables secure transfer of data between SaaS applications and AWS

• Sources: Salesforce, SAP, ServiceNow

• Destinations: S3, Redshift,…

• Frequency: on a schedule, in response to events, on-demand

AWS Amplify

• A set of tools and services that helps develop and deploy scalable full-stack web and mobile applications

Instance Scheduler on AWS

• Automatically start/stop AWS services

• Supports cross-account and cross-region resources

• Schedules are managed in a DynamoDB table

• Supports EC2, EC2 Auto Scaling Groups, and RDS instances