Book Overview & Buying
Table Of Contents
Feedback & Rating

Effective DevOps with AWS

By : Felsen

4.3 (6)

Buy this Book

Effective DevOps with AWS

4.3 (6)

By: Felsen

Buy this Book

Overview of this book

The DevOps movement has transformed the way modern tech companies work. AWS which has been on the forefront of the Cloud computing revolution has also been a key contributor of this DevOps movement creating a huge range of managed services that help you implement the DevOps principles. In this book, you’ll see how the most successful tech start-ups launch and scale their services on AWS and how you can too. Written by a lead member of Mediums DevOps team, this book explains how to treat infrastructure as code, meaning you can bring resources online and offline as necessary with the code as easily as you control your software. You will also build a continuous integration and continuous deployment pipeline to keep your app up to date. You’ll find out how to scale your applications to offer maximum performance to users anywhere in the world, even when traffic spikes with the latest technologies, such as containers and serverless computing. You will also take a deep dive into monitoring and alerting to make sure your users have the best experience when using your service. Finally, you’ll get to grips with ensuring the security of your platform and data.

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

The Cloud and the DevOps Revolution

Thinking in terms of the cloud and not infrastructure

Adopting a DevOps culture

Deploying in AWS

Summary

Deploying Your First Web Application

Creating and configuring your account

Creating our first web server

Summary

Treating Your Infrastructure As Code

Managing your infrastructure with CloudFormation

Adding a configuration management system

Summary

Adding Continuous Integration and Continuous Deployment

Building a continuous integration pipeline

Building a continuous deployment pipeline

Summary

Scaling Your Infrastructure

Scaling a monolithic application

Improving performance and cost saving

Architecting your application to handle massive amounts of traffic

Summary

Running Containers in AWS

Dockerizing our helloworld application

Using the EC2 container service

Creating a CI/CD pipeline to deploy to ECS

Summary

Monitoring and Alerting

Instrumenting our application for monitoring

Monitoring our infrastructure

Creating alarms using CloudWatch and SNS

Summary

Hardening the Security of Your AWS Environment

Understanding where to focus your effort

Improving the security of the IAM layer

Strengthening the security at the network level

Protecting against targeted attacks

Summary

Customer Reviews

4.3 (6)

5 star

66.7%

4 star

3 star

33.3%

2 star

1 star

Strengthening the security at the network level

When using AWS, you can imagine your infrastructure as being contained in your own virtual data center. This is called a VPC. Each VPC is then subdivided into multiple subnets. So far, we have used the default VPC and subnets. Take the example of us-east-1. As we can see in the following image, our default VPC is using the 173.31.0.0/16 network. Within this network, we have a subnet for each availability zone.

In addition, each AZ is directly connected to an internet gateway:

This gateway is what makes it possible for our EC2 instances to have both a public and private IP. This is also what we want to change. One of the common best practices in security is to minimize the attack surface. As services and applications become more and more complex, the likelihood of opening a security group too much also increases. What we want to...