Cloud Computing Week: Introdução à AWS Cloud

Name: Cloud Computing Week: Introdução à AWS Cloud
Uploaded: 2021-02-02T23:32:35.000Z
Duration: 2 h 48 min 25 s

Introduction to the Cloud Computing Talk

Welcome and Community Introduction

The event is introduced as the second talk of a week focused on cloud computing, organized by local tech communities in Minas.

Bia, a volunteer from both communities, welcomes attendees and mentions that they will present community information for newcomers.

Bia shares her experience with the communities over nearly two years, emphasizing their role in technology engagement.

Focus on Women in Technology

The talk highlights initiatives aimed at engaging women in tech fields such as development, data science, and infrastructure.

Bia discusses the importance of increasing female representation in technology, particularly within infrastructure roles where disparities are evident.

She emphasizes ongoing efforts to support women entering these fields through various events and resources.

Resources and Engagement Opportunities

Information about community blogs is shared, which feature content created by women covering topics like Ruby programming, cloud technologies, data science, agile culture, and career advice.

Bia encourages attendees to follow their social media channels for updates and additional resources related to infrastructure tools and cloud services.

Event Details and Certification Giveaway

Encouragement for Participation

Attendees are urged to subscribe to the channel and engage with the live stream by liking it to increase visibility for others interested in AWS topics.

Certification Opportunity Announcement

Bia announces a giveaway of two AWS certification vouchers for women attending the live session who have registered properly.

Introduction to AWS Services

Speaker Introduction

Marília is introduced as an experienced professional from AWS who has been involved with them for over two years.

She outlines her journey starting from a solutions architect training program to working directly with clients across various sectors.

Overview of Cloud Computing Concepts

Marília sets expectations for the session's content focusing on an introduction to AWS cloud services including advantages of using cloud technology.

Key Topics Covered

Discussion will include security aspects of cloud services along with automation benefits that enhance operational efficiency.

Understanding Cloud Computing

Cloud Computing vs. Traditional Data Centers

Understanding Resource Provisioning

The necessity of provisioning resources in advance is emphasized, particularly for physical data centers where purchases are made based on estimated needs.

It is acknowledged that these purchases often rely on estimations rather than precise calculations, highlighting the technical nature of the decision-making process.

Transition to Cloud Computing

In contrast to traditional models, cloud computing allows for on-demand resource provisioning, meaning resources can be allocated as needed without prior purchase commitments.

Resources in the cloud are described as disposable; once they are no longer needed, they can be deprovisioned without ongoing costs.

Security and Responsibility

The concept of shared responsibility in cloud security is introduced, indicating that both the provider and user have roles in maintaining a secure environment.

Advantages of AWS Cloud Services

Cost Efficiency

Working with AWS reduces capital expenditures (CapEx) and operational expenditures (OpEx), allowing businesses to pay only for what they use rather than making large upfront investments.

Traditional data center costs include not just hardware but also additional expenses like energy and maintenance, which are minimized in a cloud model.

Scalability and Flexibility

The flexibility of scaling resources up or down based on demand is highlighted as a significant advantage over fixed-cost traditional setups.

Economic Benefits of Cloud Infrastructure

Economies of Scale

AWS benefits from economies of scale due to its vast customer base, enabling it to offer lower prices through bulk purchasing discounts.

Historical Price Reductions

Since its inception in 2006, AWS has reduced prices significantly—by approximately 87%—demonstrating its commitment to cost efficiency for users.

Estimation Challenges

Capacity Planning Issues

The difficulty in accurately estimating required capacity leads many organizations to overestimate their needs, resulting in underutilized resources.

AWS Infrastructure Management

Efficient Resource Utilization

A significant portion of time and resources can be wasted on underutilized assets that have already been paid for, making it crucial to align infrastructure with business demands.

Properly managing capacity ensures customer satisfaction and prevents team stress due to insufficient resources or over-provisioning.

Rapid Deployment Capabilities

The ability to quickly launch hundreds of instances in minutes enhances operational efficiency and allows businesses to add value rapidly.

Resources are disposable; if something goes wrong, there is no ongoing cost associated with unused resources.

Global Presence of AWS Services

AWS offers a wide range of services across approximately 175 global regions, including various computing options like Intel, AMD, and ARM processors.

There are both relational and non-relational database services available, along with managed databases provided by AWS.

Security and Innovation Support

AWS provides numerous services focused on security best practices while allowing room for innovation through machine learning capabilities.

Understanding AWS Regions

Users can explore the geographical distribution of AWS services via an interactive site that details service locations globally.

There are 24 total geographic regions, each containing multiple availability zones where data centers reside.

Availability Zones and Points of Presence

Each region has several availability zones (77 in total), which enhance redundancy and reduce latency for users accessing services from different locations.

Over 220 points of presence exist globally for DNS resolution, routing options, security services like DDoS mitigation, and content delivery acceleration through caching.

Criteria for Choosing an AWS Region

Key factors include data governance laws relevant to the user's location and the proximity needed to provide optimal service experiences.

Understanding EC2 and Its Capabilities

Introduction to EC2 and Computational Power

The discussion begins with the capabilities of SDK in programming languages such as Java, Node.js, and .NET, emphasizing the importance of computational power for application availability.

AWS EC2 is highlighted as a service that provides scalable and secure cloud computing resources, allowing users to choose their operating system and licensing options.

Use Cases for EC2 Instances

Specific use cases are discussed, including hosting a blog or using instances tailored for databases with higher memory consumption.

The need for GPU instances is mentioned, indicating that different use cases require specific instance types based on performance needs.

Instance Types and Families

Each instance type belongs to a family defined by its purpose (e.g., general-purpose, memory-optimized), which influences attributes like CPU count and RAM.

Vertical scaling is introduced as a method to increase instance size while horizontal scaling involves adding more instances; both affect computational power.

Instance Generation Considerations

The generation of an instance affects its performance; newer generations typically offer better performance at lower costs.

An example from Netflix illustrates how moving from one generation to another can lead to significant performance improvements (140% increase).

Storage Solutions with EC2

Elastic Block Store (EBS) is identified as the persistent storage solution for EC2 instances, ensuring data retention even when instances are stopped or terminated.

EBS volumes can persist beyond the lifecycle of an instance, providing flexibility in data management.

Availability Zones and Data Protection

EBS operates within availability zones alongside EC2 instances to ensure data redundancy; if one fails, another can take over without data loss.

Various disk types are available (SSD vs. HDD), with SSD recommended for high input/output operations due to better performance characteristics.

Cost Management and Snapshots

Users pay based on provisioned disk size; snapshots can be created for backups but only capture changes incrementally after the initial snapshot.

Snapshots can be copied across regions for disaster recovery purposes; encryption options are also available for securing stored data.

Transitioning to Other Storage Services

Data Storage and Management in AWS S3

Overview of Data Storage in S3

Data is stored as objects within a bucket, which is defined by a unique global name. The bucket's region must also be specified.

Each object added to the bucket has a maximum size limit of 5 terabytes, but multiple objects can exist within a single bucket.

Durability and Availability

S3 offers 11 nines (99.999999999%) durability through regional replication, ensuring data remains intact even with potential loss.

When creating an S3 bucket, it is private by default; only the creator has access unless permissions are explicitly granted.

Use Cases for S3

S3 serves as an excellent repository for backups and can host static websites or share videos among users.

It can also be utilized for software delivery or application hosting, making it versatile for various storage needs.

Storage Classes and Access Patterns

Different storage classes in S3 offer varying pricing models while maintaining the same durability level across all classes.

Access patterns range from frequent access to long-term archival storage, each with specific retrieval times and costs associated.

Networking in AWS: Virtual Private Cloud (VPC)

Setting Up Your VPC

A Virtual Private Cloud (VPC) allows users to create isolated networks within AWS. Users define regions and subnets based on their requirements.

Subnets can be public or private; public subnets require an Internet Gateway for external communication.

Routing and Security Features

Public subnets need routing tables that direct traffic to the Internet Gateway, enabling internet access for resources within those subnets.

Private subnets do not interact directly with the internet; they have no routes leading outside unless configured via VPN connections.

Network Security Controls

Network Access Control Lists (NACLs) provide stateless filtering at the subnet level, allowing different rules for inbound and outbound traffic.

Security Layers and Resource Management in Cloud Computing

Introduction to Security Layers

The discussion begins with an overview of three security layers in cloud computing, emphasizing the importance of resource management through network access control lists and routing configurations.

On-Demand Resource Management

The speaker highlights the shift from estimating resource needs to a demand-based approach, allowing for more efficient resource allocation without manual intervention.

Key Pillars of Elasticity

Cloudbot and Monitoring Services

Three key pillars are introduced: Cloudbot, which automates responses based on defined metrics like CPU usage; it can trigger actions when thresholds are met.

Auto Scaling Groups

Auto Scaling is discussed as a method to maintain a minimum and maximum number of instances. This ensures that resources scale according to demand while maintaining operational efficiency.

Load Balancing

Load balancers distribute incoming traffic across multiple targets, ensuring high availability by directing traffic only to healthy instances. They operate based on predefined rules for optimal performance.

Database Management Solutions

RDS Overview

The speaker introduces Amazon RDS as a managed service for relational databases, capable of handling various database engines with automated maintenance features.

High Availability Features

Multi-AZ deployments are explained as a way to enhance reliability; if the primary instance fails, automatic failover occurs to ensure continuous operation.

Non-relational Database Options

Infrastructure Automation and Optimization

Infrastructure as Code

The discussion begins with the need for automation in managing infrastructure, highlighting that manual processes are still prevalent but can be improved through automation.

Emphasizes the importance of treating infrastructure as code, suggesting the use of tools like AWS CloudFormation to manage resources efficiently.

A template in JSON format is used to specify all necessary configurations for an environment, allowing for uniformity across different environments (e.g., testing and production).

Reusable templates ensure consistency in deployment across various environments, facilitating easier management and scaling of resources.

Discusses specific AWS services such as EC2 for computing power, S3 for storage, RDS for relational databases, and CloudWatch for monitoring resource usage.

Time and Cost Optimization

Introduces optimization strategies aimed at saving time and costs in cloud operations, emphasizing their significance alongside financial savings.

Highlights AWS Lambda as a serverless computing option that allows developers to run code without managing servers directly.

Explains how Lambda functions are triggered by events (e.g., image uploads), showcasing its utility in automating tasks like image processing.

Provides a practical example where an uploaded image triggers a Lambda function to resize it before making it available for download.

Mentions security considerations related to permissions between services when using Lambda functions.

Content Delivery Network (CDN)

Shifts focus to global services like CDNs that enhance content delivery performance by reducing latency through strategically placed points of presence.

Describes how CDNs cache content closer to users, ensuring faster access while maintaining persistent connections with origin servers for efficient file retrieval.

Illustrates the benefit of having users connect to nearby CDN nodes rather than distant servers, improving overall user experience significantly.

Security Considerations

Introduces the shared responsibility model in cloud security where AWS manages certain aspects while customers handle others related to their applications and data security.

Cloud Security and Management Responsibilities

Overview of Cloud Responsibilities

The responsibility for cloud services lies with the provider (WS), particularly regarding access control to resources in the cloud.

Clients are responsible for managing security aspects, including encryption both at rest and in transit.

Access Control and Security Measures

AWS provides tools like IAM (Identity and Access Management) to manage user permissions effectively, ensuring that users have only the necessary access.

The principle of least privilege is emphasized; users should only have access to what they need for their tasks.

Vulnerability Inspection and Mitigation

AWS Shield is introduced as a service that mitigates attacks, particularly focusing on layers 3, 4, and advanced layer 7 attacks.

Regular inspections of vulnerabilities are crucial; services like EC2 must be monitored for open ports that could pose security risks.

User Management Best Practices

Creating user groups with similar permissions simplifies management; temporary credentials can enhance security when interacting with AWS services.

Emphasizing minimal privileges helps maintain a secure environment by limiting unnecessary access across services.

Compliance and Certifications

AWS holds various international certifications that validate its security measures, such as ISO/IEC 27017 for cloud security.

These certifications assure clients about data privacy standards, especially relevant for industries handling sensitive information like credit card data.

Pricing Models in Cloud Services

Understanding Cost Structures

Each AWS service has different pricing models based on usage; costs vary by region and resource consumption.

Users pay primarily for what they utilize; idle resources can lead to unnecessary expenses if not managed properly.

Reserved Instances and Discounts

Options like reserved instances allow users to commit to longer-term usage (1 or 3 years), resulting in discounts compared to on-demand pricing.

Free Tier Offerings

AWS offers a free tier which may last up to 12 months or provide monthly quotas indefinitely, allowing new users to test services without incurring costs.

Cost Estimation Tools

Understanding AWS Services and Support

Overview of Cost Management Tools

The speaker introduces Koch Flora, a tool designed to help users understand their costs by creating personalized reports based on specific accounts or environments.

Users can estimate future costs based on their current usage, aiding in budget planning.

Support Levels Available

Various support levels are available to cater to different business needs, ensuring all clients receive appropriate assistance.

Basic support includes billing inquiries and health checks for services, while more advanced options provide best practice guidance.

Advanced Support Features

Enterprise-level support offers access to technical account managers who specialize in monitoring client accounts and providing extensive documentation.

Reference architectures are available to help users understand how services connect with specific use cases.

Resources for Learning and Certification

The speaker emphasizes the importance of utilizing templates created by architects that follow best practices for various use cases.

A Q&A session is opened, indicating the availability of resources like certification vouchers and official study materials from AWS.

Audience Engagement and Feedback

Positive feedback from attendees highlights the clarity of the presentation despite the dense information covered in a short time frame.

The speaker encourages using both official course materials and this presentation as study aids for upcoming exams.

Technical Questions Addressed

Attendees inquire about differences between using console versus CLI tools; both can be utilized effectively depending on user preference.

Specific functionalities may not be available through the console, emphasizing the need for understanding service limitations across platforms.

Data Management Insights

Discussion around data movement between slow (HDD) and fast (SSD) disks clarifies that such transitions depend on specific use cases rather than being universally applicable.

Cloud Security Solutions and Shared Responsibility Model

Understanding Cloud Security and Permissions

The discussion begins with cloud security solutions from AWS, emphasizing the importance of permission management. Single sign-on (SSO) can be implemented using tokens for secure access.

Trust is a key element in accessing services; individuals must have confidence in those managing their data and systems.

Shared Responsibility Model

The shared responsibility model is crucial for understanding cloud operations. Clients are responsible for managing their own data, including database security and operating system maintenance.

In the cloud environment, clients must ensure they manage access to resources effectively, highlighting the need for vigilance in maintaining security protocols.

The speaker notes that understanding different service models helps clarify responsibilities between clients and AWS, particularly regarding managed services where AWS takes on more operational duties.

Communication Between Infrastructure Zones

Information communication across AWS's 77 zones depends on specific strategies like multi-region setups. This involves utilizing fiber connections across oceans to link regions effectively.

It’s emphasized that there will not be automatic communication between all zones unless explicitly configured by the user, underscoring the importance of intentional design in network architecture.

Audience Engagement and Feedback

The audience expresses appreciation for the presentation, indicating a strong interest in learning about cloud providers' roles in market dynamics.

A recording of the session will be available for those who missed it live, allowing further study of AWS concepts discussed during the talk.

Prize Draw Process Explanation

The speaker transitions to explaining a prize draw process intended for women who registered for the seminar. They outline how participants will be selected randomly from a list of attendees.

Each participant's name corresponds to a line number in an online randomizer tool used to select winners fairly based on registration numbers.

As names are drawn, participants are encouraged to confirm their presence; if not present, another name will be drawn to ensure engagement among attendees.

Networking and Opportunities for Women in Technology

Contact Information Sharing

The speaker mentions sharing contact information for Carina Albuquerque and Daniele, emphasizing the importance of correct email submission during registration.

Certification Voucher Announcement

Participants are informed about winning a voucher for EA certification, highlighting its value given the current high dollar exchange rate. This is framed as a significant investment in their careers.

Encouragement for Female Participation

The speaker acknowledges the gradual increase of female presence in technology but stresses that more work is needed to achieve equality. They encourage collective efforts towards certification and empowerment.

Focus on Inclusivity in Events

It is noted that events are open to everyone online, with a specific focus on providing pathways for women to address gender disparities in tech fields.

Diversity Benefits