Security Token Service (STS) creates temporary security credentials – short time use (A few minutes to several hours).Continue reading “[AWS Architect] (40) Security Token Service (STS)”
President Trump has lost the election. We are bombarded with all those media articles about how the President would react, what he will do – another crazy, non-common-sensical behavior-, and what kind of norms he is going to break this time.Continue reading “Now – 11/21/2020 – Norms”
A snapshot is a point-in-time backup of an ESB Volume stored in S3.
- To protect against AZ failure, EBS snapshots (to S3) can be used.
- Snapshots are incremental. The initial snapshot is a full copy, and future ones only store the data changed since the last snapshot, which can reduce the storage cost.
- You can take a snapshot while the instance is running. When you back up a root volume, you need to stop the instance for data integrity.
- You can create an AMI from a snapshot.
- EBS volumes are in the same AZ of the EC2 instance.
Amazon FSx can launch and run popular file systems that are fully managed by AWS. You have 2 options; one for Windows and another for Linux.Continue reading “[AWS Architect] (38) Amazon FSx”
AWS PrivateLink connects your AWS services with other AWS services through a private tunnel. It secures data shared with cloud-based applications by eliminating the exposure of data to the public Internet.Continue reading “[AWS Architect] (37) AWS PrivateLink”
Elastic File System (EFS) is a scalable managed service that implements the Network File System (NFSv4).
- File systems can be mounted on multiple Linux instances at the same time. -> shared media, home folder, shared documents.
- It can be accessed in the VPC, across the VPC, and even from outside of VPC through Direct Connect.
- EFS is built to scale while maintaining low latency and high throughput. It can support thousands of current NFS connections.
- EFS is a regional service that stores data across multiple AZs for high availability and durability.
- EFS supports Read after Write consistency.
Elastic Block Store (EBS) is a network-attached storage service that creates and manages persistent volumes.
- Volumes are persistent (removed and attached) and are replicated within a single AZ.
- You can change the EBS volume size and the storage type on the fly.
- EBS supports a maximum per-instance throughput of 1,750 MiB/s.
- EBS supports 80,000 IOPS per instance or 64,000 IOPS per volume.
- By default, EBS volumes are replicated within the AZ.
- Every EC2 instance must have a root volume, which may or may not be EBS (Elastic Block Store).
- By default, an EBS root volume will be deleted when the instance is terminated. You can change the setting to make EBS volumes persistent.
- You can attach additional EBS volumes to instances, and they are not deleted when the instance is terminated.