DataSync is an online data transfer service that automates transferring large amounts of data to and from AWS storage services over the internet or AWS Direct Connect (DX) in a simple way.
Continue reading “[AWS] DataSync”[AWS] AWS Organizations
AWS Organizations is a centralized global management service of AWS accounts (up to 20) and billings.
- All accounts within an AWS Organization can consolidate bills into a single account.
- A paying account should be used for billing purposes only.
- Economy of scale – by using more, you can save more. (Volume pricing discount)
[AWS] Policies
IAM policy is a JSON document that defines permissions for users and resources. To uniquely identify AWS resources, Amazon Resource Names (ARNs) are used.
Continue reading “[AWS] Policies”[AWS] Identity and Access Management (IAM)
Identity and Access Management (IAM) provides the centralized management of your AWS account. It manages who can access what in your AWS services. Access control is done via policies that can be attached to users, groups, and roles.
- IAM is a global service that is not tied to a region.
- Users and policies can be used globally.
- Users are given long-term credentials to access AWS resources (username/password or access keys).
- Roles allow for short-term access to resources when assumed, using temporary access credentials.
- IAM can work with Identity Federation such as Active Directory or Web Identity Federation (Facebook, Google, etc.)
[AWS] Storage Gateway
Storage Gateway is a hybrid storage service that allows you to migrate data into AWS, extending on-premise storage capacity using AWS.
- It is used when you want to integrate the existing on-premise application data with AWS cloud storage services without fully migrating to AWS. Applications in your network can access data in the cloud.
- Data may be moved to AWS and cached them locally at the on-premise data center.
- Key Management Service (KMS) can encrypt data at rest in the cloud.
- CloudWatch can be used for monitoring, and CloudTrail can be used for logging account activity.
[AWS] VPN and DX
Hybrid cloud architecture combines resources in the cloud with on-premise resources and use them just like all resources are in the same environment. There are a couple of ways to setup communication between AWS VPCs and on-premise networks.
Continue reading “[AWS] VPN and DX”[AWS] Global Accelerator
Global Accelerator is a networking service that improves performance and availability by directing traffic to optional endpoints.
Continue reading “[AWS] Global Accelerator”[AWS] Transit Gateway
AWS Transit Gateway is used to simplify your AWS network architecture (topology) by allowing to have transitive peering between hundreds and thousands of VPC and on-premise data centers.
Continue reading “[AWS] Transit Gateway”