0:02 hey this is Andrew Brown over here on
0:04 free Camp bringing you another free
0:06 Cloud certification study course and
0:09 this time we are looking at the ads
0:12 Cloud practitioner also known as the clf
0:14 C02 and the way we're going to achieve
0:16 ads certification is through lectur
0:19 content Hands-On labs and as always I
0:21 provide you a full free practice exam
0:24 the best way to support uh more free
0:25 study courses like this one is to
0:28 purchase the optional paid additional
0:30 materials it's going to help you on your
0:31 exam and it's going to allow me to
0:34 produce more of these uh great Cloud uh
0:37 certification study courses if you don't
0:39 know me I'm Andrew Brown and this is the
0:41 fourth time I've taught this uh
0:43 certification so it's really refined at
0:45 this point and I've taught a bit of
0:47 everything in the cloud so we've looked
0:50 at ads Azure gcp terraform kuber denes
0:52 you name it I've taught it uh but that's
0:55 about it and I will see you in class in
0:58 the next video ciao [Music]
1:01 [Music]
1:02 hey this is Angie Brown and we are at
1:04 the start of our journey asking the most
1:06 important question first which is what
1:09 is the adus cloud practitioner well it's
1:12 ad's entrylevel certification that's
1:13 going to teach you things like the cloud
1:15 fundamentals so we're talking cloud
1:18 Concepts architectures deployment models
1:21 it's a close look at adus core Services
1:22 which would be our compute our storage
1:24 our Network or databases and it's a
1:27 quick look at the vast amount of adus
1:29 services and functionality around adus
1:32 so we're looking at identity security
1:35 billing pricing support and a lot more
1:37 stuff and we'll get into that in the
1:38 course and we'll even look at the exam
1:41 guide outline but uh yeah there is a lot
1:43 of stuff um the course code for this
1:47 certification is now the clf C02 the old
1:48 one was the
1:51 c01 uh the way to know if there is a new
1:53 course is if this becomes the c03 if you
1:56 see that then this course um may be out
1:58 of date um but uh yeah right now it's
2:00 the C02
2:02 um often people refer to this
2:05 certification as the CCP to stand for
2:07 the certified clock practitioner how you
2:09 want to refer to it is up to you but uh
2:12 there are a few ways of describing this
2:14 certification I want to point out that
2:16 adus is the leading cloud service
2:18 provider in the world and the cloud
2:20 practitioner is the most common starting
2:22 point for people breaking into the cloud
2:25 so even if you're going to uh utilize
2:27 another cloud service provider I'm just
2:28 going to say that you're going to get a
2:30 really good uh Foundation with this
2:32 certification even if it's not the uh
2:34 same provider uh so who is the
2:36 certification for well consider the
2:38 cloud practitioner if you are new to
2:39 cloud and you're learning the
2:41 fundamentals you are at the executive
2:43 management or sales level and you need
2:46 to acquire strategic information about
2:48 Cloud for adoption or
2:50 migration or you are a senior Cloud
2:52 engineer or Solutions architect who
2:54 needs to reset or refresh their adus
2:57 knowledge after working uh with cloud
3:00 services or adus for multiple years
3:02 um it's always a surprise that when I
3:04 come back and I refresh this course uh
3:05 the things that have changed and it's
3:08 very easy to miss those things so yeah
3:11 this this certification is for everybody
3:12 so what is the value of the
3:15 certification well this uh certification
3:17 provides the most expansive view
3:20 possible of cloud architecture and ads
3:21 it'll uh we I would describe this as
3:24 having a bird's eye view or the 50,000
3:28 ft view so with that in mind uh the idea
3:30 here is to promote big picture thinking
3:32 we're zooming out and assessing the
3:34 cloud or itus landscape for things like
3:38 changes Trends opportunities um and it's
3:39 important to understand about being
3:41 strategic about the approach and process
3:43 for your journey and that's why I like
3:46 the certification so much and I strongly
3:49 uh recommend it for everybody's Journey
3:50 so what is the value of the
3:53 certification well it's not a difficult
3:55 exam uh it's it's not going to validate
3:58 that you can build Cloud workloads so if
3:59 you are trying to obtain a technical
4:01 implementation role like develop Cloud
4:04 developer Cloud engineer devops engineer
4:06 uh it's not going to be enough to attain
4:09 those technical Cloud roles um but it
4:10 could help short list your resume for
4:13 interviews um the exam covers content
4:15 not found in other certifications so it
4:16 is recommended as an essential study
4:19 guide uh for your adus journey do not
4:21 skip this one uh some people like to go
4:23 straight to the solution architect and
4:25 then they realize that they didn't set a
4:27 good foundation or they just have gaps
4:29 uh in their knowledge which could really
4:31 help them out in their careers so really
4:33 do not skip this one um I like to make
4:36 these road maps to give you an idea uh
4:38 in terms of where you can go after this
4:40 certification so here is uh all the
4:43 certifications currently that has
4:44 notice that I have the data engineer
4:46 it's a really small one it just became
4:48 uh came out as a beta exam it's not as
4:50 hard as the professionals it's just
4:53 where I place it on this diagram um but
4:54 the idea is that we have a lot of
4:58 different ways that we can navigate or
4:59 uh work through these certifications
5:01 these can generally map to particular
5:04 roles in the cloud so uh very often
5:06 people go right to the uh Solutions
5:08 architect I'm just getting my pen out
5:10 here but very often this is the approach
5:12 that'll go straight to here uh right
5:13 after the solution architect because
5:16 they're very similar um in terms of uh
5:19 scope and Challenge and difficulty where
5:20 the solution architect is a broad
5:22 certification just like the cloud
5:24 practitioner but it's more focused on
5:27 the technical knowledge uh whereas this
5:29 one of course is much more broad the
5:30 cloud prer
5:31 and then after that people will
5:32 generally go for the developer or the
5:34 CIS office administrator in my personal
5:37 opinion I really do think that people
5:39 should study all three Associates and do
5:41 all three Associates at the same time uh
5:44 because really I don't find that uh it
5:46 makes sense to leave out the ssops admin
5:48 or developer knowledge um it's just the
5:49 way that itus Engineers their
5:51 certifications but when you go to other
5:53 ones like let's say Google they only
5:56 have one associate and they have all the
5:58 um they call Cloud engineer and it has
6:00 everything in it and so uh again I just
6:02 feel like you should take all three but
6:05 you decide what works for you um and you
6:07 know you can see that there are various
6:08 routes but I want to just make it very
6:11 clear that certifications do not
6:14 validate programming they do not uh make
6:16 you do technical diagramming they don't
6:19 necessarily make you do code management
6:21 and there's many other technical skills
6:22 that are required for obtaining
6:24 technical roles like these roles um and
6:26 that is not the purpose of certification
6:28 certification is supposed to give you
6:31 knowledge specifically on us and so just
6:33 understand that you need to make sure
6:35 you get those skills uh somewhere else I
6:38 do try to uh slot in a lot of these uh
6:41 technical skills uh where I can and so
6:43 if you're uh if we're doing something in
6:44 the course and you're wondering why are
6:46 we doing this when it's not on the
6:47 certification it's because I'm trying to
6:49 give you those adjacent skills uh so
6:52 that you are successful um in the future
6:55 okay so how long does it take to uh
6:58 study to pass this exam well depends
6:59 right it depends but if you're a
7:01 beginner we're probably looking at 30
7:03 hours so this is someone who's never
7:05 used datab bus or cloud provider before
7:06 uh you've never written code or had a
7:09 technical role if you're experienced uh
7:11 your study time is going to be very low
7:14 like as low as 6 hours even lower uh if
7:16 possible um especially if you've already
7:19 taken the certification I sat it um uh
7:21 blind right I didn't look up anything
7:25 and I passed it uh no problem um but uh
7:26 so it says here you know if we've
7:28 practiced we have experience working
7:30 with ads if we have an equivalent
7:31 experience in another cloud service
7:32 provider some people are coming over
7:36 from Azure or gcp so they can kind of
7:38 map their knowledge over to adabs or if
7:40 they have a strong background in
7:42 technology uh you might really be
7:43 already familiar with these kind of
7:45 offerings from
7:47 another uh like from another discipline
7:49 and so your study time can be really low
7:51 but I would say that um you know the
7:54 average study time is probably 24
7:57 hours so yes it's closer to the beginner
7:58 level but that's the average study time
8:00 that we found and so it's basically a
8:02 split between 50 lectures and Labs so
8:05 labs are Hands-On skills and 50% with
8:08 practice exams uh a lot of people forget
8:10 that practice exams are part of the
8:12 study process so make sure that you do
8:14 do that uh we do recommend a study a
8:16 study time of one to two hours a day uh
8:20 for 14 days uh what does it take to pass
8:21 the exam we're still going on with this
8:23 here but you know you have to watch
8:25 those lecture videos and memorize key
8:27 information this is a knowledge based
8:29 exam it's not a uh it does not test your
8:31 skills so knowledge is key here uh you
8:33 should do Hands-On Labs uh we call those
8:36 follow alongs within your own account uh
8:37 this is just going to help uh sment the
8:40 knowledge in your head it really makes a
8:42 a huge difference so really do those
8:45 Hands-On labs and get practice exams to
8:47 simulate the real exam you absolutely
8:49 need to do this because if you don't
8:51 you're going to find that you did all
8:54 the study materials and then uh the exam
8:57 is its own uh Beast so make sure that
8:59 you go get some practice exams there's a
9:00 lot of places that you can get uh get
9:03 them from uh we offer a full free
9:04 practice exam I think we're the only
9:06 provider that does this but um we give
9:09 you like a full free practice exam and
9:11 we also have some paid ones so the best
9:13 way to support this this content that we
9:15 produce is to purchase our additional
9:17 paid materials uh if you don't have the
9:19 money that's okay we still have at least
9:21 one full free practice exam to help you
9:23 out you can find that over at exampro doco
9:25 doco cfy
9:27 cfy
9:29 C02 it looks like it know but it's a
9:32 zero uh let's talk about the content
9:34 outline so there are four domains and
9:35 you have to understand that each domain
9:37 has its own waiting this is going to
9:39 determine how many questions in that
9:41 domain will show up on your exam the
9:43 first one is cloud Concepts so that's
9:46 for 24% so we're looking at between 15
9:48 to 16 questions domain two is about
9:51 security and compliance so that's 30%
9:53 it's a a quite high up there so we have
9:55 about 1920 questions for cloud
9:58 Technologies and services it's 34% so
10:00 understanding the offerings of ads is
10:01 the most important thing in the exam
10:03 it's the highest percentage here so we
10:05 we're going to definitely get 22
10:07 questions and then uh we have domain
10:10 four so billing pricing and support
10:12 where it's at 12% so we have eight
10:15 questions not a lot for billing pricing
10:16 support definitely important because
10:18 it's very easy to get overbuild in the
10:20 stuff but just you know point out that
10:22 you need to know a wide range of adus
10:24 services you need to know about core
10:27 Services more in depth so where do you
10:29 take this exam well you can take it at
10:32 the um at an inperson test center or
10:33 online from the convenience of your own
10:35 home I personally like to take it in a
10:38 test center if there's one near me I
10:40 used to live in Toronto now I don't so
10:42 there's no test centers near me and so I
10:44 have to do it online it's just so much
10:45 less stressful walking into a building
10:48 and everything is uh controlled whereas
10:50 at home you might have a lot of things
10:52 going on and that can cause a lot of
10:54 stress but you know do what makes sense
10:56 for you so adus delivers the exams via
10:59 Pearson View and so uh there's pearon
11:02 view they have the online system which
11:04 you do uh you install on your computer
11:06 and then they also have a network of
11:08 test centers their partner with uh
11:11 previously adabs also offered it via PSI
11:13 um they don't do this anymore I'm not
11:15 sure why they changed this before it was
11:18 only PSI then they added Pearson and now
11:20 they've dropped PSI so your only option
11:22 is Pearson view I just want to point out
11:24 what a project exam means it means that
11:28 it's it's someone is supervising uh your
11:30 um your exam while you're taking it so
11:32 you're not cheating so it's very common
11:35 that when you check in they're going to
11:37 ask to look around your room you might
11:39 even have to talk to them uh and it's
11:42 just again to make sure that what you do
11:46 is um your exam was legit legit so when
11:48 they issue your badge you know it's for
11:50 real anyway let's talk about grading
11:53 here so the passing grade here is 700
11:55 out of a a th000 points and so you need
11:58 to get around 70% to pass ads like many
12:02 other CL providers use scaled scoring so
12:03 um that doesn't mean if you get exactly
12:07 70% that you'll pass but uh I mean more
12:10 less it works out to to be that okay so
12:12 the response types uh we have here well
12:15 first of all we have 65 questions and
12:17 there are 50 questions that are scored
12:20 and then there's 15 that are unscored
12:23 and if that sounds bizarre I mean I I
12:24 agree with you I think it's odd that
12:26 they give you 15 unscored questions but
12:28 the reason ads will do this is that they
12:32 want to introduce new questions um to
12:34 help test against the difficulty of the
12:36 exam um because you know maybe some
12:38 people know more than uh what they're
12:40 expecting so they can adjust the
12:41 difficulty of the exam I think that they
12:44 use it as an anti-che mechanism as well
12:46 but from the test taker it can get a bit
12:48 stressful because you can get 15 really
12:51 crazy wild questions that were not in
12:54 your um uh course studies and it's just
12:56 a of us testing things out and so I just
12:58 want to point out don't get stressed out
12:59 when you take this exam and you get a
13:01 really funny question it's probably one
13:03 of those unscored questions but on top
13:06 of that you know there are 15 scored
13:09 questions you can get wrong so you can
13:11 get a total of 30 questions wrong on
13:13 this exam and pass I just want to make
13:15 that uh really clear there there is no
13:17 penalty for wrong questions so
13:19 absolutely always submit an answer and
13:21 take your best guess the format of the
13:22 questions are multiple choice and
13:25 multiple answer so you know it's not too
13:27 stressful in terms of uh the formatting
13:30 of questions um there are again 15
13:32 unscored questions of the exam they will
13:34 not count towards your final score why
13:36 are there unscored questions uh they're
13:38 there to evaluate the introduction of
13:40 new questions they're there to determine
13:42 if the exam is too easy and the passing
13:43 score of the question difficulty needs
13:45 to be increased to discover users who
13:46 are attempting to cheat the exam or
13:48 steal dump exam questions if you
13:50 encounter questions you've never studied
13:52 for uh that seemed really hard keep your
13:54 cool and remember that they may be
13:56 unscored questions just really want to
13:58 emphasize that there in terms of the
14:00 duration you get 1.5 hours so you have
14:03 about 1.5 minutes per question your exam
14:07 time is 90 minutes your seat time is 120
14:08 Minutes what are we saying when we say
14:11 seat time this is the time it takes uh
14:13 or that you should allocate for the full
14:17 exam uh that includes uh things like
14:19 reviewing the instructions uh showing on
14:21 uh showing the online Proctor your
14:23 workspace reading accepting the NDA
14:26 completing the exam provide the feedback
14:28 at the exam so a lot of people go okay
14:31 my exam start star in or I have 90 or 90
14:33 minutes exam but really you want to show
14:36 up 30 minutes prior uh because that
14:37 checking process can be really really
14:40 stressful so you know just consider that
14:42 uh the full scope of time you need to
14:44 dedicate for these exams this uh
14:47 certification is valid for 36 months so
14:49 that's 3 years before recertification
14:52 some other providers uh like Azure if
14:54 you do the fundamentals it's forever um
14:57 other ones have require you to refresh
15:00 every year other ones um you don't have
15:02 to take the full exam you have a
15:04 reassessment that is free inabus likes
15:06 to do it this way the nice thing though
15:09 is that when you do pass a certification
15:11 um somewhere adus allows you to get the
15:14 next exam half off uh so at least there
15:16 are cost saving mechanisms if you do
15:18 pass an exam for the next follow-up
15:21 certification but yeah uh that is pretty
15:23 much a breakdown of uh the exam guide we
15:25 will go and take a look at the actual
15:27 exam guide so we can uh understand the
15:30 full scope of what's in there uh but
15:32 yeah we'll see you in the next one okay [Music]
15:36 [Music]
15:38 ciao hey everybody it's Andrew Brown and
15:39 we are here on the training and
15:42 certification page on the adus website
15:44 and what I want to do here is I want to
15:48 pull up the exam guide so that we can um
15:51 make sure that we know exactly what it
15:53 is that we're getting ourselves into uh
15:54 we did cover this in summary in the
15:56 previous video but uh I think it's
15:58 always useful for you to know exactly
15:59 where these things are
16:01 adabs is always changing their marketing
16:02 pages and I've already noticed a few
16:04 changes here so um just understand
16:06 that's the nature of cloud notice here
16:08 that it's talking about the uh beta exam
16:11 certification so even earlier we talked
16:12 about the data engineer or we at least
16:14 showed it on our journey map and it's
16:16 not even it's not even 100% out beta so
16:18 you can see we're kind of prepping for
16:20 the future here I also want to point out
16:21 that they have this like certifications
16:24 path uh thing and I I don't really like
16:26 it because I don't think it's very
16:28 accurate so the first thing they show is
16:30 Solutions architect and they don't even
16:32 say you need to get the other two
16:33 associate certifications which you
16:35 absolutely should do if before you go
16:36 for your Solutions architect
16:38 professional the data analytics is no
16:41 longer a uh certification that adus is
16:43 producing so this is an out-of-date
16:44 document so I just want you to
16:45 understand that these are marketing
16:47 Pages they're here to maximize the
16:49 amount of certifications you need to
16:52 obtain my goal is not to make you take
16:54 every certification my goal is to make
16:57 sure that you are prepared uh to do the
17:01 job and I just want to you know help you
17:04 avoid going down the certification route
17:05 and getting too many certifications that
17:07 aren't going to benefit you so just take
17:08 these with a grain of salt when you're
17:11 reading them okay so anyway what I want
17:13 to do is drop this down and go to Cloud
17:15 partitioner um and here on the cloud
17:17 cloud practitioner page if we scroll on
17:19 down we got prepare for the exam and
17:21 here we'll click the exam guide and
17:23 it'll open up a PDF and it'll give us
17:25 all the information we need to know this
17:26 is what AB has been doing for a long
17:29 time is making these um exam guide p F
17:31 which I really like uh but anyway the
17:33 first thing we should do is confirm the
17:35 course code so this one says CF CO2 so
17:37 we know we are on the right track and
17:39 then down below here it says this exam
17:40 validates the candidates ability to
17:42 complete the following task I want to
17:44 highlight some key words
17:47 explain understand describe and identify
17:50 so understand that this certification is
17:52 not checking whether you know how to do
17:56 Cloud it's more if you understand Cloud
17:57 um and the majority of aable
18:00 certifications in fact all of them are
18:04 multiple choice and multiple answers so
18:07 they can't really check if you were able
18:08 to do something in Cloud so just
18:10 understand the limits of certifications
18:12 at least eight of the certifications
18:14 based on their testing mechanisms so
18:16 when it says Target candidate it's
18:18 saying uh where you should be in order
18:20 to pass this exam and so they're
18:22 suggesting that if you had six months of
18:26 exposure to adabs uh with Cloud design
18:28 implementation operate operation then uh
18:30 you should be able to pass it it's just
18:32 weird uh worded strangely because it
18:33 makes it sound like you should have this
18:36 experience um before you even start
18:37 studying which is not true they just
18:39 mean like if you want to pass it you
18:41 don't need six months to pass this exam
18:43 that's crazy you just need what we
18:46 recommended which was um the amount of
18:48 hours we said the average hours is 24
18:51 hours so um I'm not sure why they put
18:53 six months I guess it's just they're for
18:55 those who are really having a hard time
18:58 with Cloud they give you a lot of uh um
19:00 scope for room there but you can see
19:01 they're pointing out from non it
19:04 backgrounds recommended knowledge Cloud
19:06 concept security core Services economics
19:08 that's that's just a repeating of the
19:11 domains um notice it says job tasks that
19:13 are out of scope is
19:17 coding um Cloud architecture design load
19:19 performance and testing I'm highlighting
19:21 these three because I just want to point
19:24 out that in associate level professional
19:27 specialty they actually do ask questions
19:29 around troubleshooting implementation
19:30 and I suppose they do architectural
19:33 design but they never ever ever No
19:35 certification in 8s is going to test
19:37 your coding skills architectural diagram
19:39 skills and they're not really good about
19:40 load and performance testing they have
19:43 like use case scenarios but um just
19:44 understand again the limits of the
19:46 certifications coming down below to the
19:48 response types we got our multiple
19:49 choice our multiple
19:52 response um so that's pretty clear there
19:55 there is uh 50 scored questions there's
19:58 15 unscored questions so that is very clear
19:59 clear
20:02 the uh uh the the the point system is
20:05 based out of a thousand to th points the
20:06 lowest you can get is 100 points I don't
20:08 know how that works why like why can't
20:10 you get zero points I don't know the
20:11 passing score is
20:15 700 so that's what we need to score
20:18 there then down below here it's just
20:19 talking about the course outline and it
20:21 actually has a comparison of the old clf
20:23 co1 so we can take a look there and see
20:26 what actually has changed so down below
20:28 here we have our Cloud Concepts as
20:30 security compliance our Cloud technology
20:33 services our billing pricing support and
20:35 then it comes in and starts describing
20:38 all this stuff now I need to make it
20:41 very clear how inabus makes their exams
20:43 they give you a huge list of things you
20:48 need to learn but if you learn um each
20:50 one of these things you can end up
20:53 overstudying or you'll find that the
20:55 like the exam guide outline is not one
20:57 to one I'll give you an example we'll
20:58 look at something else I'm going to go
21:00 to Hashi Corp here for a second hashy
21:02 Corp terraform
21:05 certification as a as an example of how
21:08 different adus certifications are so for
21:11 hashicorp they will this is their exam
21:12 guide they'll give you each of these
21:15 items and you can be 100% sure that
21:18 every single thing every one one of
21:19 these things will show up on the exam
21:22 one to one so it's very easy to know
21:25 exactly what you need to study for um
21:27 and uh if you know all these things
21:30 you'll you will pass in ad us they list
21:33 all these things but they won't all show
21:34 up they they're pulling from a very
21:37 large pool so to kind of narrow down
21:39 what you need to study you need to have
21:43 a good sense of um overall everything
21:45 and and you're just going to get some
21:48 things wrong but um anyway coming back
21:49 here the first Cloud Concepts they're
21:51 talking about the benefits of
21:53 cloud so we have a section on benefits
21:55 of cloud and so they talk about the
21:57 value proposition so there's like six or
21:59 nine of them I forget have a multiple
22:01 slides on that and so we're talking
22:03 about economics scale benefits of global
22:05 infrastructure advantages of high
22:08 availability elasticity and uh agility I
22:10 think we call these Cloud architecture
22:12 terminologies because they're not really
22:13 benefits I mean they are benefits of
22:15 cloud but I I like to group them a
22:16 little bit differently then we have
22:18 identified design principles for Abus
22:19 Cloud so we have the well architect
22:22 framework this uh was for the most part
22:26 never in the clf co1 for 90% of its
22:28 history and then they decided maybe like
22:30 last year or something to add it in um
22:33 and and uh before even wasn't even the
22:35 solution architect associate but now
22:36 it's even at this level and that's
22:38 totally fine you only need to know it at
22:41 a very high level so um it's not too
22:43 difficult to learn but it it's a white
22:46 paper it's a PDF that um you know just
22:47 describes how adus thinks that you
22:51 should design uh your architecture then
22:53 we have understand the benefits of
22:55 strategies and migration to the cloud so
22:58 we have Cloud adoption strategies Cloud
23:01 adoption framework so um this was this
23:04 was not in the last exam but luckily I
23:05 included it because I thought it was
23:07 something that was very important and so
23:09 I already have it in the certification
23:12 course even from the last one they
23:14 actually do ask quite a few questions
23:15 around the cloud adoption framework but
23:17 when you look at and again this one's
23:19 like a white paper just like this one
23:20 above here and we'll talk about what
23:22 white papers are if you you never heard
23:24 that term uh it'll make sense in the
23:26 course but the cloud adoption framework
23:28 um there's not a lot to it but the exam
23:30 they'll ask you a lot of questions
23:31 around it so you just have to have good
23:35 common sense um about uh choosing those
23:37 answers if that makes sense um
23:39 identifying appropriate migration
23:42 strategies sure I guess so I never got
23:45 any snowball questions um they they say
23:48 snowball here go down below here
23:50 understand concepts of cloud
23:53 economics so cost Savings of moving to
23:55 Cloud aspects of cloud
23:57 economics uh fixed cost compared with
23:59 variable cost
24:03 they're talking about um Opex Opex and
24:05 capex understanding the associate of on premise
24:06 premise
24:07 environments uh understand the
24:09 difference between licensing strategies
24:11 and adabs never ever really ever
24:14 mentioned uh bring your own licenses
24:16 ever in their certification courses and
24:18 I never got this on the exam and other
24:20 people I sat for the new exam never uh
24:23 encountered this still good to know but
24:24 I'm just saying that I don't know why
24:25 it's listed in here because it's
24:27 definitely not on the exam but it is a
24:29 good thing to not the basic level
24:32 understand the concept of right sizing
24:34 um and maybe I'll go back and make a
24:35 slide on that CU I don't think I
24:37 actually make a deliberate slide on that
24:39 but I think what they mean there is
24:41 understanding uh like how horizontal
24:43 scaling and stuff uh stuff like that
24:45 works but um you get no questions on the
24:48 exam for right sizing at least not from
24:50 its technical definition like that
24:52 identify benefits of
24:54 automation I think there might have been
24:56 one question of saying like hey which
24:58 one lets you automate stuff and you just
24:59 chose Cloud information but they really
25:01 don't talk a whole they don't ask a lot
25:04 of questions on the exam about IAC
25:06 infrastructure as a code identifying uh
25:09 manag ad services this is something they
25:11 do a lot in exams like describe a
25:13 service you pick it we have security and
25:15 compliance so we have the Ed shared
25:17 responsibility model you absolutely need
25:20 to know that that for sure always always
25:22 appears on the exam um customers
25:24 responsibility they'll do this a lot
25:25 they'll say like they'll give you a
25:29 scenario of um of like a typical
25:30 workload or resource and then you have
25:32 to uh determine if it's the customers's
25:34 responsibility or adab Us's
25:36 responsibility describing responsibility
25:39 the customer adus share so again this is
25:40 just all the share responsibility model
25:42 still here describing how itus respons
25:43 responsibilities and customer
25:44 responsibilities can shift depending on
25:48 the the service used so yeah this is
25:50 basically the share responsibility model
25:52 understand the cloud security governance
25:55 compliance so uh a compliance governments
25:56 governments
25:59 Concepts benefits of cloud security
26:02 they don't really talk about that uh
26:03 They Don't Really directly ask that in
26:05 the exam but yes we do cover that where
26:07 to capture and locate logs that are
26:09 associated with Cloud security they
26:11 absolutely do not ask that on the exam
26:13 I'm not sure why that's here um identify
26:15 where to find A's compliance information
26:17 that will absolutely be on the exam
26:19 understanding compliance needs among
26:21 Geographic locations and
26:24 industries sure I mean they're talking
26:26 about we have a slide in this in the um
26:28 Global infrastructure but it's um
26:32 like data sovereignty and like gov cloud
26:34 and things like that describing how
26:37 customers secure resources for ads so
26:39 just generally knowing the security
26:40 services y that absolutely is on the
26:42 exam identifying different encryption
26:45 options um I never got this on my exam I
26:47 never heard of anyone else getting this
26:48 but um if they are going to talk about
26:49 this they're probably going to talk
26:51 about it around
26:53 S3 recognizing services that Aid in
26:56 governance and compliance absolutely
26:58 absolutely for sure that the you will
27:01 get questions around uh things like fips
27:04 or Hippa or like common common
27:06 compliance certifications not specific
27:09 datab best but just in general um here
27:10 they're just talking about specific
27:11 Security Services this is kind of a
27:13 repeat of what they're talking about up
27:15 here um but there's the same there's
27:17 identity service governance service it's
27:18 all the same thing here recognizing
27:20 compliance requirements that uh vary
27:23 among ad Services sure identify itus
27:24 management capabilities so they're
27:27 talking about IM am um the itus root
27:28 account we got it uh separate slide on
27:30 that uh principal of lease privilege
27:32 absolutely absolutely will they will ask
27:34 that there a single sign on also known
27:36 as Adis am identity Center I don't know
27:37 anyone who's gotten this as a question
27:38 on their
27:42 exam but uh it's we got a slide for
27:44 it understanding access Keys yep we
27:46 cover that PO uh password policies
27:48 credential storage Secrets manager
27:52 systems manager um just a bunch of stuff
27:53 identify components and resources of
27:56 security describing a security features
28:00 so acl's uh ad US wff security groups
28:02 they really don't ask these on the exam
28:04 so I'm just trying to make a point that
28:06 they're asking for all this stuff and
28:08 they don't even it doesn't even show up
28:11 in the exam so um and you know we can
28:13 just keep going and going through this
28:15 and I could keep telling you what is and
28:17 isn't but if you go down below it gets
28:19 even crazier because they go any of this
28:20 stuff could show up in the exam it's
28:23 just like a big list it's
28:26 crazy so you know I know that seems
28:28 stressful but you know just follow
28:31 follow follow me uh in this course and I
28:32 you will absolutely pass if you go
28:34 through my content you'll have no issue
28:36 there and we'll avoid all the stuff that
28:39 doesn't show up and don't stress out
28:40 about this exam guide now let's go take
28:42 a look here and see where the rebalance
28:44 has changed so notice here that this
28:47 went from 26% to 24% they never used to
28:48 do this so I really appreciate this is
28:50 now in the exam guide but we got 25 to
28:55 30% 33 to 34% 16 to 12% why they would
28:58 reduce this one I don't know but it is
29:00 is a shuffle whatever um they of course
29:02 increased uh the technology section more
29:05 and did some basic rewarding support
29:07 should have always been in there so it
29:09 was always under that section but uh
29:13 it's nice that they labeled it as such
29:16 um so notice here it says no content was
29:19 deleted from the exam and um this was
29:21 the largest struggle for me for the
29:24 certification because I already made all
29:26 the content for the last one my old one
29:29 is not expired and I was struggling
29:31 because I already had this as well this
29:33 is the only thing that they added that
29:35 was new to the certification and then
29:37 they just rework these numbers here and
29:41 so um you know I just I added I did add
29:43 more I added more Labs I added more um
29:45 other stuff there but I'm just going to
29:47 say like I don't know why they did an
29:49 update from co1 to CO2 because barely
29:51 anything changed now I shouldn't say
29:52 that the exam questions did change I
29:55 noticed that the exam questions um the
29:57 quality of them kind of uh have dropped
29:59 I wondering if they're using generative
30:01 AI to generate out questions or or
30:03 something but um there's something the
30:05 quality of questions are are definitely
30:07 um different and I would say that
30:09 they're more uh they're not worded as
30:12 clearly as they used to be for whatever
30:14 reason um but anyway you'll still be
30:16 okay it's totally fine uh
30:18 recategorization of clf CO2 and so they
30:22 just did a shuffle of um of these points
30:24 and I again I really don't think that
30:26 the the new one is better how useful is
30:27 this exam guide I should probably give
30:30 them survey feedback but anyway just
30:32 give you an idea how much stuff there is
30:34 in here do not stress out just stick
30:36 with the course you'll absolutely pass
30:38 uh and uh you know hopefully that gives
30:39 you uh some better confidence there but
30:43 we'll see you in the next one uh chiao [Music]
30:46 [Music]
30:48 chiao hey this is Andrew Brown from exam
30:51 Pro and what we're looking at here is a
30:53 free practice exam that I provide with
30:55 you uh for this course and all you have
30:57 to do is sign up on exam Pro you don't
30:59 even need to credit card and you can
31:02 redeem uh the free available content
31:05 here and this is really up to date and
31:07 very well simulates what you will see on
31:09 the actual exam and it's a full set full
31:11 65 questions so you're getting a real
31:13 simulation here but what I'm going to do
31:15 is just start it off here we're not
31:16 going to do the whole thing I'm just
31:17 going to click through and show you a
31:19 couple of them so you have an idea um
31:21 the level of difficulty these questions
31:23 are so the first question we got
31:25 presented with here is which a support
31:27 plans provide access to the seven core
31:30 for trusted advisor checks and so that
31:32 is a question that you might need to
31:33 answer I don't want to spoil this for
31:34 you so I'm not going to tell you the
31:37 answer I will go to the next one so a
31:38 large accounting firm wants to utilize
31:40 OS to store customer accounting
31:42 information in archive storage and must
31:44 store this information for 7 years due
31:46 to Regulatory Compliance which dat
31:48 service meets this requirement so the
31:50 first one you'll notice this one is
31:52 multiple choice or sorry multiple
31:54 answers so you have to select multiples
31:57 before you can submit your answer and
31:58 the next one here is is just a single
32:00 choice so those are the two types of
32:03 questions you will see on the exam
32:04 they're not going to ask you anything
32:05 about coding you're not going to see any
32:08 kind of code um in terms of length
32:10 that's pretty much what we'll see in
32:12 terms of the uh questions I think in
32:15 many cases I wrote a little bit more
32:17 more like um in the style the solutions
32:19 architect associate to make it slightly
32:21 more difficult just so that you're a
32:23 little bit overprepared so if you do
32:24 well on these practice exams you're
32:27 going to do uh well on the real exam
32:29 okay okay so I just wanted to kind of
32:31 get you that exposure there [Music]
32:34 [Music]
32:37 okay hey everyone it's Andrew Brown and
32:40 I have opened our exam simulator this is
32:42 on the exam Pro platform and this is the
32:45 freet uh that I promised uh folks in the
32:47 course so no cost to go get this one you
32:49 just have to sign up and and access it
32:51 but the reason I have it open is because
32:53 I really want to talk about a very
32:55 specific type of question that we've
32:57 included in here that will not appear on
32:58 your exam
33:00 so uh for those who are familiar with
33:03 Azure certifications um at the associate
33:05 level or higher there's this question
33:07 type called a case study and what a case
33:10 study is I'll I'll just pull it up here
33:12 but I believe uh in this randomization
33:14 of this practice exam set I think it's
33:16 this one here but what a case study is
33:19 it gives you a scenario that you have to
33:22 read through or a a a case study about a
33:24 company so you read about the company
33:25 you look at the objective its
33:27 requirements and constraints this stuff
33:28 can all be different there could be
33:30 diagrams all sorts of stuff in here but
33:32 the idea is that you are contextualizing
33:33 a business use case and they're going to
33:36 be asked a series of questions uh
33:39 multiple choice multiple select and it
33:41 all ties back to that case study so the
33:44 reason we included this is that um we
33:45 believe that this is going to give you
33:47 better comprehension and a higher chance
33:49 of passing so it's not going to appear
33:52 in your exam but we include it uh as an
33:54 extra challenge to you so that you have
33:56 um a higher chance of passing now if you
33:58 don't like this we do have other
34:01 practice exams they of course are paid
34:03 that uh that are just the normal style
34:04 which is all multiple choice multiple
34:07 select for um this this course the cloud
34:09 practitioner um but you know we do have
34:11 them in half of the practice exam sets
34:14 because uh again I think that it's going
34:15 to be good for you so hopefully you see
34:17 that as a bonus but I just wanted to
34:19 give you a heads up um about this uh
34:21 because you'll encountering me like what
34:23 the heck is this um the other thing I
34:24 want to point out is that when you enter
34:26 a case study it's like having a mini
34:28 exam within your exam so once you've
34:30 answered all these questions uh you
34:33 can't go back and and um you can while
34:34 you're within the case study but if you
34:36 get to the end of this and submit the
34:39 case study you can't go back and update
34:41 it so just be aware of that um and you
34:44 know again hopefully you like this we
34:45 love feedback to hear what people like
34:47 but it's just they always appeared in
34:49 Azure exams and uh we want to see them
34:51 in ad us ones as well because I think
34:53 they're just really good for uh testing
34:54 your knowledge but anyway we'll see you
34:56 in the next one okay ciao [Music]
35:01 [Music]
35:02 hey everyone it's Andrew Brown your
35:04 favorite Cloud instructor and what I
35:06 want to do in this video is to show you
35:08 um a unique feature that is in our
35:11 platform um just in case you come across
35:13 it while you're while you're uh doing
35:14 the materials I can't remember if it's
35:15 in the free or paid tier I believe it's
35:18 in the paid tier so I'm not trying to
35:19 upsell anyone but I just want to make
35:21 sure people are aware of that while they
35:23 are um taking this course but sometimes
35:25 what you'll see in the follow along so
35:27 like for example we have S3 down here
35:30 here which is for uh Cloud simple
35:31 storage uh and I don't have them always
35:33 included in the videos but um at some
35:35 point I might do that but the idea is
35:37 that um we have these validators and
35:39 validators what they can do is they can
35:43 verify uh whether you actually have uh
35:46 the resources uh deployed in your cloud
35:48 account um so it's like an additional
35:51 check to make sure that you did it right
35:53 so for example we have this one for S3
35:56 so it says set up an S3 bucket it is
35:57 account validation so this tool perform
35:58 perms an automated check on your
36:00 personal cloud infrastructure to confirm
36:02 its alignment with the build project
36:04 requirements make sure you input precise
36:05 values for your infrastructure
36:07 components so let's go through that and
36:08 show you this I'm showing this as an
36:10 example but you know you'll see them in
36:12 other in other follow alongs and lookout
36:14 for for that stuff I believe in the
36:17 to-do it'll even show it uh here so if
36:19 you watch the video and you watch it to
36:20 the end or you press that button there
36:23 but you'll get your your uh your star uh
36:24 for that but the way it works let's go
36:26 through it so the first thing is I want
36:29 to uh click on this new run button and
36:30 then what we'll do is we'll have an
36:31 agreement so this agreement is
36:34 confirming that you understand that you
36:37 are using your own cloud account uh and
36:40 we are going to uh need to get readon
36:42 access to it and just understand that
36:44 you are using uh you're providing us
36:45 access to account that is your own
36:47 account and it's not your company's
36:49 account because obviously we don't want
36:50 to get in trouble for accessing data
36:52 that we're not supposed to have and you
36:53 don't want to get in trouble for that so
36:55 that's just a a friendly reminder so I'm
36:56 going to click the I agree and the
36:58 accept the next thing it's going to ask
37:01 for is your adus account ID the region
37:03 that you're deploying in and then it
37:05 there might be additional uh parameters
37:06 that it wants to know so that we can
37:08 test against it so what I'm going to do
37:10 is just log into my adus account it'll
37:12 just take me a moment and we'll fill
37:14 this out for real okay now of course I'm
37:17 filling out this example here but I just
37:20 want to point out that um uh you know
37:21 you're just going to have to follow this
37:22 procedure and it'll be slightly
37:24 different for each one uh for that okay
37:26 be back in just a second all right so
37:28 I'm logged into
37:30 and uh one of my ad accounts I have a
37:32 lot of them I think this one is my
37:35 developers one so uh for this particular
37:37 follow long you would have created an S3
37:39 bucket right and so um what I'm going to
37:42 do here is go to S3 and I already know
37:43 what to do so it's not too hard for me
37:44 but I'm going to go ahead and create
37:46 myself a new bucket I'm going to make
37:48 note of the region that I'm deploying in
37:50 so S3 is a bit unique because it shows
37:52 Global but you are still deploying to a
37:54 specific region so we'll go ahead and
37:56 create that bucket I'm just going to say
37:59 my validator bu it as a test notice
38:01 where it's deploying Us East one I could
38:03 change that to anything else like ca
38:06 Central um I am in Canada so doesn't
38:08 hurt to deploy where I am and we'll go
38:10 here and go all the way down and I'm
38:13 going to go and create this bucket okay
38:15 so um that bucket name was I forget it
38:17 was like something like validator and so
38:19 what I need to do is copy that name
38:21 we'll go back over here and so it's
38:22 asking for the bucket name so there's
38:24 the bucket name we need the it account
38:27 ID that always appears in the top right
38:29 corner and they have a nice um clipboard
38:31 button there to get that in there and
38:33 the region so we deploy that in CA
38:35 Central 1 so it says there CA Central
38:37 one you're always using this uh
38:39 programmer's name not the full name but
38:41 this this fun handle you can see them
38:42 all here on the right hand side if
38:44 you're not sure about that but what
38:46 we'll do is go back over here we'll
38:48 paste in that user region and so what
38:50 this is going to do is create a um a
38:52 cloud formation template that's going to
38:55 give access to us to uh your account so
38:57 we'll go ahead and hit save and continue
39:00 and so now we uh We've inputed our
39:01 parameters those have been saved and now
39:03 it's saying we need to access your Cloud
39:05 resources so we want you to generate
39:06 this cloud formation template we're
39:08 going to press the button we'll wait a
39:10 moment and we can either download this
39:14 template or use the ads CLI to run it um
39:16 the CLI command is a lot easier to use
39:17 and I'm going to recommend that you
39:20 always do that and uh so what we're
39:22 going to do is generate out this CLI
39:23 command and we're going to get this
39:26 oneline command and I'm going to go back
39:28 over to AWS sorry I know I'm going
39:30 really fast but it's just how it is and
39:32 at the top left corner we have this
39:33 little button here that's for cloud
39:36 shell we're going to open it up I know
39:38 coding scary but it's really important
39:39 to get as much coding experience or
39:41 scripting as you can so strongly
39:43 recommend you follow along here but uh
39:45 it's going to open up and once it's it's
39:48 open we can paste that in now sometimes
39:50 this wants to have some kind of EBS
39:52 storage so you might have to say yes and
39:54 wait a little bit um that's just the
39:56 norm for cloud storage but I'm going to
39:58 go back here I'm going to copy this
40:00 command okay and we're going to go back
40:02 over here I'm going to right click and
40:05 paste and uh this always happens when
40:06 there's a multitext line we got a pop up
40:08 here and we're just going to review it
40:09 looks good so notice it has a template
40:11 URL so that's the template it's pulling
40:15 in um there's temporary credentials to
40:17 uh to allow that uh it's going to create
40:19 a stack name called exam Pro validation
40:21 and it's going to say capability I named
40:22 I am now this might fail because I've
40:24 done it before but we'll go ahead and
40:27 paste it in I'm going to hit enter
40:29 and it looks like it's creating the
40:32 stack so we'll go over to cloud
40:39 here and I'll just get this out of the
40:41 way I don't want that open right now and
40:43 so I'm just going to give this a
40:46 refresh and did that create that right
40:49 now that was the name of the stack right
40:52 exam Pro validation that is correct and
40:53 if I go over
40:56 here uh what's the date today I don't
40:57 even know
41:00 cuz that might be an older date I mean
41:02 it's November so I I don't think that
41:04 one worked because I already had it uh
41:06 working there before um so what I'm
41:07 going to do
41:10 here I'm going to go ahead and delete
41:12 this one okay so I just want to point
41:13 out like if you're doing multiple
41:15 validators in the system you always have
41:17 to roll it back tear it down okay like
41:20 the old one so I'll delete that one
41:22 again because I just don't have a strong
41:24 confidence that it was actually deployed
41:26 so I'll be back in just a moment as it
41:27 tears down
41:29 all right it actually did uh finish
41:32 tearing down so that is um there but I'm
41:33 going to go back here I'm going to
41:36 attempt to run this command again so go
41:38 ahead and copy this and I will paste it
41:41 in again we'll say paste and I'll hit
41:44 enter and uh says already existed in the
41:46 sack well what are you talking about
41:49 it's definitely uh definitely not there
41:50 that's what I thought I would get as an
41:51 error the first time
41:56 around so this is CA Central 1 oh you
41:58 know what it is I'm in North Virginia so
42:01 you got to be very careful with your um
42:03 your regions so I go over
42:06 here so I I did I did delete one that
42:07 was from another one that's why I was
42:09 confused because I thought it already
42:11 existed I have to delete it out th this
42:13 is normal and Cloud right so just
42:16 understand that when I do follow alongs
42:18 I don't edit out the tricky Parts
42:20 because I know it makes it a little bit
42:22 confusing but it really does help to uh
42:24 demonstrate uh how confusing Cloud can
42:26 be and how to work through those
42:27 problems but over here see Central so
42:30 this is deployed 11:15 that's the date
42:31 that I've deployed this on so that makes
42:34 sense uh here uh so we just got to be
42:37 very uh aware of that so this is in C
42:39 Central one uh but we'll go back over
42:42 here and so this is done so we know that
42:43 it's done because it's here it's in the
42:45 region that we expected to be in so now
42:47 the uh the permissions are done we can
42:49 run the polar so what the polar is going
42:53 to do is it's now going to pull data
42:55 from your account uh uh and that way
42:57 we're going to uh be able to then
42:59 validate whether things are correct so
43:01 we'll go ahead and run the pull and
43:03 notice it says S3 API list buckets it
43:05 flashed it really quickly but the way
43:07 this tool works is it's actually using
43:09 the adus CLI underneath so I'm just
43:11 going to go ahead and just show you what this
43:13 this
43:15 is uh and just show you a quick
43:18 reference here so the C is a pratic way
43:23 to um uh access uh information uh for
43:24 eight of us we probably show that
43:26 somewhere in this course and so the
43:29 command was running I believe was I
43:32 should know I coded this was S3
43:36 API and then it was like list
43:38 buckets uh list buckets so that's the
43:40 command it ran so really what the
43:44 validator did it it did ads S3 API list
43:46 buckets okay and if you notice this it
43:48 returns back Json so we get back the
43:50 payload that's what we are storing in
43:52 our own itus account which by the way we
43:54 delete after a period of time I don't
43:56 remember how much time but we don't hold
43:57 on to your data for cuz we don't really
44:00 want it um but yeah so here it's
44:02 returning back that data and so
44:04 somewhere in here that there the the
44:06 buckets in here right so we've pulled
44:08 that data and it's there and so now we
44:10 can run the validator we'll click run
44:13 validator and it's super fast because we
44:15 already have the data downloaded and
44:16 it's doing one check here so it says
44:19 should have bucket matching name so you
44:21 can see it's it's doing it's loading
44:24 from a Json file that's called S3 API
44:25 list buckets we always name our the Json
44:27 files after the commands and it's
44:30 looking through buckets so if we go over
44:33 here all the top here for a moment you
44:35 can see buckets so it's looking with in
44:37 this array and it's trying to match a
44:39 name called my validator bucket which
44:41 which which you provided to
44:44 us so somewhere in here I have a lot of
44:46 buckets in this account somewhere in
44:49 here uh there it is it's there and so
44:51 that's how that works um but yeah just
44:54 look out for those validators um and uh
44:57 try to run them and and validate that uh
44:59 you are able to uh do this stuff okay
45:01 but we'll see you in the next one okay
45:03 ciao oh wait wait wait wait wait wa wait
45:05 I didn't show you how to clean up I'm
45:07 just running off screen here so once you're
45:08 you're
45:10 done uh what you can do is you can go
45:12 over to cloud formation here and you
45:14 should do this is go ahead and delete
45:16 the stack okay um because that's going
45:18 to tear down the permissions so that we
45:21 no longer have access to your account um
45:23 so that's kind of an important thing to
45:26 do um but uh we'll go ahead and the
45:27 other thing about these permissions is
45:29 that we're only asking for exactly what
45:32 we need access to so in this in this uh
45:34 permissions it only generate up to get
45:37 access to uh the S3 bucket specifically
45:39 what we're accessing for so even if you
45:41 left it up it's usually okay it's safe
45:44 but um you know if there's no reason for
45:46 us to have access anymore you should all
45:48 obviously delete it um but yeah that one
45:50 is now gone and so now we are absolutely
45:51 done I'm going to go ahead and just
45:53 close this out here but yeah hopefully
45:55 uh that makes it pretty clear how
45:56 validators work in our system and you
45:59 see the benefit uh to getting that uh
46:02 check in your real account [Music]
46:05 [Music]
46:08 ciao hey this is Andrew Brown from exam
46:09 Pro and we are at the start of our
46:10 journey asking the most important
46:13 question first which is what is cloud
46:15 computing so cloud computing is the
46:16 practice of using a network of remote
46:19 servers hosted on the internet to store
46:21 manage and process data rather than a
46:24 local server or personal computer and so
46:26 when we're talking about on premise you
46:28 own the servers you hire the IT people
46:31 you pay or rent the real estate you take
46:33 all the risks but with a cloud provider
46:35 uh someone else owns the servers someone
46:37 else hires the IT people someone else
46:39 pays or rents the real estate and you
46:41 are responsible for configuring cloud
46:43 services and code and someone takes care
46:46 of the rest of it for you [Music]
46:49 [Music]
46:52 okay so to understand cloud computing we
46:54 need to look at the evolution of cloud
46:57 hosting going all the way back to 1995
46:58 where if you wanted to host your website
47:00 or web app you'd have to get a dedicated
47:02 server so that would be one physical
47:05 machine dedicated to a single business
47:07 running a single project a site or an
47:09 app and as you can imagine these are
47:11 expensive because you have to uh buy out
47:14 right the hardware have a place to store
47:16 it the network connection having a
47:18 person to maintain it um but it did give
47:21 you a guarantee of high security um and
47:22 they still do as of today so this model
47:24 hasn't gone away but it's been
47:26 specialized for a particular use case
47:28 then came along the virtual private
47:30 server so the idea is we still had one
47:33 physical machine but now we were able to
47:36 subdivide our machine into submachines via
47:37 via
47:39 virtualization and so essentially you're
47:41 running a machine within a machine and
47:43 so you had better utilization of that
47:46 machine um running multiple web apps as
47:48 opposed to having a physical machine per
47:50 project so you got better utilization
47:54 and isolation of resources and so uh
47:56 these two options still required you to
47:57 purchase a machine machine a dedicated
47:59 machine and so that was still kind of
48:01 expensive but then came along shared
48:04 hosting and so if you remember uh the
48:07 mid 2000s like with GoDaddy or HostGator
48:09 or any of those sites where you had
48:11 really cheap hosting the idea is that
48:12 you had this one physical machine shared
48:15 by hundreds of businesses and the way
48:18 this worked it relied on uh tenants
48:20 underutilizing their resources so you
48:22 know you wouldn't have a submachine in
48:23 there but you'd have a folder with
48:26 permissions that you could use um and so
48:28 you would really share the cost and this
48:30 was very very cheap um but you were
48:32 limited to whatever that machine could
48:35 do and you were very restricted in terms
48:36 of the functionality you had and there
48:38 was just poor isolation meaning that you
48:41 know if one person decided to utilize
48:42 the server more they could hang up all
48:44 the all the websites on that single
48:47 server then came along Cloud hosting and
48:49 the idea is that you have um multiple
48:51 physical machines that act as one system
48:53 so this is distributed computing and so
48:55 the system is abstracted into multiple
48:57 cloud services
48:59 and the idea is that you basically get
49:00 the advantages of a lot of the things
49:03 above so it's flexible you can just add
49:06 more servers um it's scalable it's very
49:09 secure because you get that uh virtual
49:12 isolation you get it extremely at a low
49:13 cost because you're sharing that cost
49:15 with the users where in the shared
49:16 hosting it might be hundreds of
49:18 businesses we're looking at thousands of
49:20 businesses and it was also highly
49:21 configurable because it was a full
49:24 virtual machine now uh Cloud actually uh
49:26 still includes all of these types of of
49:29 Hosting they haven't gone away uh but
49:30 it's just the idea that you now have
49:33 more of a selection for your use case uh
49:34 but hopefully that gives you an idea uh
49:36 what cloud hosting looks like and it
49:37 really has to come down to distributed computing
49:39 computing [Music]
49:42 [Music]
49:45 okay hey this is Andrew Brown from exam
49:47 Pro and before we talk about AWS we need
49:49 to know what is Amazon so Amazon is an
49:51 American multinational computer
49:52 technology corporation headquartered in
49:55 Seattle Washington and so this is the
49:58 Seattle skyline with the Bas needle and
50:01 Amazon was founded in 1994 by Jeff Bezos
50:02 and the company started as an online
50:04 store for books and expanded to other
50:07 products so as you can see this is Jeff
50:10 Bezos a long time ago and he has this
50:12 interesting spray painted sign and his
50:14 desk is held up by cinder blocks and it
50:18 looks like his uh desk is like an old uh
50:20 table or something and he's working
50:22 really late and he used to be a
50:24 millionaire at this time and he would be
50:27 driving into work in his Honda Accord
50:29 because you know he just his motivation
50:30 was always to put all the money back in
50:32 the company so it really shows that he
50:34 worked really hard and it did pay off
50:36 because Amazon has expanded uh Beyond
50:38 just an online Ecommerce store into a
50:41 lot of different things such as cloud
50:43 computing which is Amazon web services
50:45 Digital streaming such as Amazon Prime
50:48 video Prime music they bought twitch.tv
50:50 they owned the Whole Foods Market
50:52 grocery store they have all this
50:54 artificials intelligence they own low
50:57 orbit satellites uh and a lot more stuff
51:00 it's hard to list at all and so Jeff
51:04 Bezos today is not the um the CEO it's
51:07 actually Andy jasse is the current CEO
51:08 of Amazon he was previously the CEO of
51:11 AWS so Jeff Bezos can focus on space
51:13 travel so there you [Music]
51:17 [Music]
51:19 go hey this is Andrew Brown from exam
51:21 Pro and we are taking a look at Amazon
51:24 web services and this is the name that
51:26 Amazon calls their cloud provider
51:27 service and it's commonly referred to
51:31 just as AWS so here is the old logo
51:32 where we see the full name and here is
51:34 the new logo but I like showing the old
51:36 logo because it has these cubes which
51:39 best represent what AWS is and it is a
51:41 collection of cloud services that can be
51:44 used together under a single unified API
51:46 uh to build uh a lot of different kinds
51:49 of workloads so adus was launched in
51:52 2006 and is the leading cloud service
51:54 provider in the world I put an aster
51:56 there because technically uh adus exist
52:00 before 2006 and a cloud service provider
52:02 uh which is what adus is is often
52:04 initialized as CSP so if you hear me
52:07 saying CSP I'm just saying cloud service
52:10 provider okay so just time to look at
52:12 the timeline of when Services rolled out
52:16 the first one came out in uh 2004 it was
52:19 simple Q service sqs and this service
52:21 still exists as of today but at the time
52:22 it was the only service that was
52:25 publicly available so it wasn't exactly
52:27 a cloud service provider at this time
52:30 and it was neither ads it was just sqs
52:32 but then a couple years later we had
52:34 simple storage service also known as S3
52:37 which was launched uh in March of 2006
52:39 and then a couple months later we had
52:42 elastic compute Cloud also known as ec2
52:45 um and ec2 is still uh like the most
52:47 used service within AWS and is like the
52:49 backbone for pretty much everything
52:52 there then in 2010 it was reported that
52:54 all of amazon.com's retail sites had
52:57 migrated to AWS so even Amazon was using
53:00 ads uh Full Steam and to support
53:02 industrywide training and and skill
53:04 standardization ads began offering a
53:07 certification program for computer
53:10 Engineers on April 2013 uh and this is
53:12 the type of certifications that we are
53:14 doing as we speak um so I just want you
53:16 to know that ads was the one leading uh
53:19 Cloud certifications and we just want to
53:20 take a look here at the executive level
53:23 as of today the CEO is Adam he's the
53:25 former CTO of Tableau and he spent a
53:28 decade with adus as a VP of Marketing
53:30 sales and support so he was there he had
53:32 left for a bit and now he is back then
53:35 we have uh wner and he's the CTO of AWS
53:38 he's been uh the CTO for pretty much the
53:40 entire time aw existed with the
53:42 exception of some time of the first year
53:44 he's famous for uh quoting everything
53:47 fails all the time and then there's Jeff
53:49 bar who's the chief evangelist so um if
53:51 you're ever wondering who is writing all
53:53 the blog posts and talking about anys
54:00 [Music]
54:02 all right so what I want to do here is
54:04 expand on what is a cloud service
54:06 provider also known as a CSP just
54:07 because there's a lot of things out in
54:09 the market there that might look like a
54:12 CSP uh but they actually are not so
54:14 let's go through this list and see what
54:17 makes a CSP so this is a company which
54:20 provides multiple cloud services ranging
54:23 from tens to hundreds of services those
54:24 cloud services can be chained together
54:26 to create cloud architectures those
54:28 cloud services are accessible via a
54:31 single unified API so in ad's cases that
54:35 is the adus API um and from that you can
54:37 access the CLI the SDK the Management
54:40 console those cloud services utilize
54:42 metered building based on usage so this
54:45 could be per second per hour uh vpcu
54:48 memory storage things like that those
54:49 cloud services have Rich monitoring
54:53 built in so you know every API action is
54:56 tracked and you have access to that so
54:59 this case it's a cloud trail and the
55:00 idea here is those cloud services have
55:03 infrastructure as a service offering so
55:06 IAS that means they have networking
55:09 compute uh storage databases things like
55:12 that those cloud services offers
55:14 automation via infrastructure as code so
55:17 you can write code to set everything up
55:19 and so here's just kind of a example of
55:21 an architecture where we have a very
55:23 simple uh web application running on ec2
55:25 behind a load bouncer with the domain
55:27 with r 53 but the idea is just to show
55:29 you that you know you're changing these
55:31 things together if a company offers
55:33 multiple cloud services under a single
55:36 UI but do not meet most of or all of
55:37 these requirements it would just be
55:39 referred to as a cloud platform so when
55:42 you hear about twilio or Hashi Corp or
55:45 datab bricks those are Cloud platforms
55:48 and adab US Azure gcp are cloud service providers
55:49 providers [Music]
55:52 [Music]
55:55 okay all right let's take a look here at
55:57 the landscape of CL service providers
55:59 this is generally broken down into tier
56:01 one tier 2 tier three but I've modified
56:03 it to give each tier its own name as I
56:05 don't like to think of them as rankings
56:07 and more so that uh these cloud service
56:09 providers are specialized uh for a
56:11 particular thing um and I've also added
56:13 a fourth tier because you know the
56:14 internet has always talked about three
56:16 tiers but there really is a fourth tier
56:18 and I wanted to make sure we had uh the
56:21 full scope here included so in the top
56:23 tier you're going to recognize uh some
56:25 common names there Amazon web service
56:28 Microsoft Azure Google Cloud platform
56:30 and Alibaba cloud in North America and
56:33 Europe uh adab us Azure and gcp are
56:35 known as The Big Three um but Alibaba
56:37 cloud is huge as well if you're in the
56:40 Asia region specifically China so it's
56:41 really just going to be dependent on
56:43 where you live where uh which are
56:46 considered the most um commonly known or
56:48 popular uh but we'll talk about that
56:50 here in a moment but the reason um I
56:54 call tier one top tier is that these are
56:56 you know very well-known providers
56:57 they're ear early to Market they have
57:00 strong synergies between their services
57:02 um they're just really good cloud
57:03 service providers you cannot go wrong
57:06 with uh these providers then we have our
57:08 tier two or I would call our mid- tier
57:10 uh these are backed by really well-known
57:13 tech companies but I would just say that
57:16 um their ability to become top tier uh
57:18 did not work out the way they planned so
57:21 IBM at one point was looking to be a top
57:23 tier provider um but they just did not
57:26 keep up with um AWS and and they just
57:29 slipped into this mid tier and kind of
57:32 specialized at least for a while into ml
57:34 AI services and now they're just more
57:38 like very expensive um Enterprise uh managed
57:39 managed
57:41 infrastructure for their existing
57:44 clientele Oracle um very very
57:46 inexpensive that's their play they try
57:50 to uh be the cheapest but their uh
57:55 service um overall is not uh fun to use
57:56 interestingly enough believe Microsoft
57:59 Azure was just signing a contract to use
58:00 Oracle Cloud so it's not unusual for
58:02 some of these cloud service providers or
58:04 these organizations to use other
58:06 providers because they want to use their
58:09 Global infrastructure but uh yeah Oracle
58:13 cloud is uh not doing that great there
58:16 are other ones in the Asia region like
58:19 Hawaii cloud and 10cent Cloud I honestly
58:20 don't know a whole lot about them but
58:24 they do show up on the magic quadrant so
58:25 it's possible in the Asia region that
58:29 these are are the big three and uh AWS
58:31 Azure and gcp do not play a larger role
58:33 but from our perspective I put them into
58:35 that mid tier because they just don't
58:39 have Global uh awareness or Global um
58:42 market dominance like the other three uh
58:45 up there looking at the light tier uh
58:47 these were traditionally virtual private
58:49 servers so they just specialized in that
58:52 and they turn to offer more core
58:54 infrastructure service offerings so we
58:56 have a vulture we saw it was pronounced
58:59 voler but it's actually vulture digital
59:01 ocean and aimi connected Cloud which was
59:05 formerly known as Leno or lenoe um so
59:08 they merg their companies together and I
59:10 mean they want to be like a cloud
59:12 service providers but they're very very
59:15 light in terms of their offering so um
59:17 you know they'll have things like
59:19 serverless and being able to run uh
59:21 kubernetes cluster and some cloud
59:23 storage and stuff but they won't have
59:26 things like um the the same level of of
59:30 event driven um metered billing or or
59:33 other kinds of uh functionality that you
59:35 you come to expect in the top tiers but
59:36 you know if you're working with a
59:38 smaller organization they are a lot
59:41 simpler to uh to utilize so they are a
59:42 great introduction to Cloud for
59:45 companies that find the top tier uh too
59:47 complex and then looking at the fourth
59:49 tier I call this the private tier this
59:51 is basically software that you can
59:54 deploy onto your own uh machines and
59:56 your data centers to get the same same
59:59 kind of um functionality that you would
60:01 if you were using let's say adabs or any of these other providers and um you know
60:04 of these other providers and um you know previously I would put open stack into
60:05 previously I would put open stack into the mid tier because in a sense that it
60:08 the mid tier because in a sense that it was kind of like a cloud service
60:09 was kind of like a cloud service provider that was using uh quite a bit
60:12 provider that was using uh quite a bit but I didn't feel like it had had good
60:13 but I didn't feel like it had had good fit there so that's why we made this a
60:15 fit there so that's why we made this a fourth tier and we have a few different
60:17 fourth tier and we have a few different softwares we have open stack apachi
60:19 softwares we have open stack apachi Cloud stack those are both open source
60:21 Cloud stack those are both open source and there's VMware vpar I have an aster
60:24 and there's VMware vpar I have an aster there because it's not really the same
60:26 there because it's not really the same thing but it is used a lot everywhere to
60:29 thing but it is used a lot everywhere to manage a lot of virtual machines and so
60:32 manage a lot of virtual machines and so I I kind of feel like it should fit in
60:34 I I kind of feel like it should fit in there but that gives you kind of an idea
60:36 there but that gives you kind of an idea of the landscape of cloud and we'll see
60:38 of the landscape of cloud and we'll see you in the next
60:40 you in the next [Music]
60:43 [Music] one so how do we determine who is the
60:46 one so how do we determine who is the leader in Cloud well one way of
60:47 leader in Cloud well one way of indicating that is the Gardner magic
60:49 indicating that is the Gardner magic quadrant for cloud so the magic quadrant
60:52 quadrant for cloud so the magic quadrant is a series of market research reports
60:53 is a series of market research reports published by the IT consulting firm Gard
60:56 published by the IT consulting firm Gard that rely on proprietary qualitative
60:59 that rely on proprietary qualitative qualitative data analysis methods to
61:01 qualitative data analysis methods to demonstrate market trends such as
61:02 demonstrate market trends such as Direction maturity and participants so
61:05 Direction maturity and participants so it says a series of reports uh but the
61:07 it says a series of reports uh but the only thing I've ever seen are these
61:09 only thing I've ever seen are these Graphics where they show um a uh the the
61:13 Graphics where they show um a uh the the quadrant it's a it's a diagram that
61:15 quadrant it's a it's a diagram that summarizes all the information so I
61:16 summarizes all the information so I think you have to you might have to pay
61:18 think you have to you might have to pay to access uh the reports um because it's
61:21 to access uh the reports um because it's definitely not just uh publicly
61:23 definitely not just uh publicly accessible knowledge and I don't think
61:25 accessible knowledge and I don't think they would show all of uh how this stuff
61:27 they would show all of uh how this stuff is calculated but uh let's just take a
61:30 is calculated but uh let's just take a look at this graphic here so notice we
61:31 look at this graphic here so notice we have challengers in the top left corner
61:33 have challengers in the top left corner leaders in the top right corner in the
61:36 leaders in the top right corner in the bottom left corner we have Niche players
61:38 bottom left corner we have Niche players and then in the bottom right corner we
61:39 and then in the bottom right corner we have Visionaries so the idea here is
61:41 have Visionaries so the idea here is that The Closer you are to this top
61:43 that The Closer you are to this top Corner uh the better you are doing and
61:45 Corner uh the better you are doing and the one that is closest to it is Amazon
61:47 the one that is closest to it is Amazon web services followed with Microsoft
61:50 web services followed with Microsoft pretty close uh in second Google to the
61:52 pretty close uh in second Google to the left Alibaba Cloud next Oracle and we
61:56 left Alibaba Cloud next Oracle and we have IBM 10cent and Hawaii and there are
62:00 have IBM 10cent and Hawaii and there are other players but they are so small that
62:02 other players but they are so small that they are not showing up there and we
62:03 they are not showing up there and we showed that in the landscape of csps or
62:07 showed that in the landscape of csps or um maybe this is only for first they
62:09 um maybe this is only for first they consider what we call First tier or top
62:12 consider what we call First tier or top tier cloud service providers it's really
62:14 tier cloud service providers it's really useful to look at last year's uh mq and
62:18 useful to look at last year's uh mq and to see how things have moved so it looks
62:20 to see how things have moved so it looks like uh it uh Microsoft has shifted a
62:23 like uh it uh Microsoft has shifted a little bit forward here and gone a
62:25 little bit forward here and gone a little bit closer to
62:26 little bit closer to Google has cifically moved up and um
62:30 Google has cifically moved up and um Alibaba Cloud it seems to be moving more
62:32 Alibaba Cloud it seems to be moving more uh to the right um and again I'm just
62:34 uh to the right um and again I'm just showing what their movements were from
62:36 showing what their movements were from this year to that year so they are over
62:38 this year to that year so they are over here now Oracle is way over here now and
62:41 here now Oracle is way over here now and for whatever reason Huawei cloud is on
62:44 for whatever reason Huawei cloud is on the board so it's interesting to see how
62:46 the board so it's interesting to see how they move another thing that's um
62:49 they move another thing that's um interesting here is that this one is
62:51 interesting here is that this one is 2022 of June and this one is July of
62:54 2022 of June and this one is July of 2021 and
62:56 2021 and right now as the time I'm recording this
62:58 right now as the time I'm recording this video it's 2023 near the end of the year
63:01 video it's 2023 near the end of the year um and I could not find a 2023 one so
63:04 um and I could not find a 2023 one so even if it says June or July they will
63:07 even if it says June or July they will release these out in October November
63:09 release these out in October November Etc way later in the year and so for
63:11 Etc way later in the year and so for whatever reason they have yet to make um
63:14 whatever reason they have yet to make um the latest one available so I'm still
63:16 the latest one available so I'm still curious to see what that is here so I'm
63:18 curious to see what that is here so I'm just giving you the information that we
63:19 just giving you the information that we have but you can look at this stuff um
63:22 have but you can look at this stuff um basically on the the Garder website if
63:25 basically on the the Garder website if you want to see
63:26 you want to see um any of these magic quadrants for any
63:28 um any of these magic quadrants for any of the industries there and what I find
63:30 of the industries there and what I find is that if a compan is doing really well
63:34 is that if a compan is doing really well they'll always post it on their website
63:35 they'll always post it on their website so it's very easy to find the uh Magic
63:37 so it's very easy to find the uh Magic quadrant for cloud on the a website
63:39 quadrant for cloud on the a website because they're the leader so they
63:41 because they're the leader so they definitely want to show that there uh
63:43 definitely want to show that there uh but yeah there you
63:44 but yeah there you [Music]
63:48 [Music] go so a cloud service provider can have
63:52 go so a cloud service provider can have hundreds of cloud services that are
63:54 hundreds of cloud services that are grouped into various types of services
63:56 grouped into various types of services but the four most common types of cloud
63:58 but the four most common types of cloud services for infrastructures of service
64:01 services for infrastructures of service uh and I call these the four core would
64:03 uh and I call these the four core would be compute so imagine having a virtual
64:06 be compute so imagine having a virtual computer that can run applications
64:08 computer that can run applications programs and code networking so imagine
64:11 programs and code networking so imagine having virtual Network defining internet
64:13 having virtual Network defining internet connections or network isolation between
64:15 connections or network isolation between services or outbound to the internet
64:17 services or outbound to the internet storage so imagine having a virtual hard
64:19 storage so imagine having a virtual hard drive that can store files databases so
64:22 drive that can store files databases so imagine a virtual database for storing
64:24 imagine a virtual database for storing reporting data or a database for general
64:27 reporting data or a database for general purpose web applications and uh AWS in
64:30 purpose web applications and uh AWS in particular has 200 plus cloud services
64:33 particular has 200 plus cloud services and I want to clarify what cloud
64:36 and I want to clarify what cloud computing means because notice that we
64:37 computing means because notice that we have cloud computing Cloud networking
64:39 have cloud computing Cloud networking cloud storage Cloud databases but the
64:42 cloud storage Cloud databases but the industry often just says cloud computing
64:45 industry often just says cloud computing to refer to all categories even though
64:48 to refer to all categories even though uh it has computer in the name so just
64:49 uh it has computer in the name so just understand when someone says cloud
64:50 understand when someone says cloud computing uh they don't just generally
64:52 computing uh they don't just generally mean the subcategory they're talking
64:53 mean the subcategory they're talking about all of cloud okay
64:56 about all of cloud okay [Music]
65:00 [Music] so adus has a lot of different cloud
65:02 so adus has a lot of different cloud services and I just want to kind of go
65:04 services and I just want to kind of go quickly over the types of categories
65:06 quickly over the types of categories that we can encounter here and just
65:08 that we can encounter here and just mention the four core so any CSP that
65:11 mention the four core so any CSP that has IAS will always have these four core
65:14 has IAS will always have these four core service offerings we have computes so
65:16 service offerings we have computes so Nat this would be ec2 VMS storage this
65:18 Nat this would be ec2 VMS storage this could be something like EBS virtual hard
65:20 could be something like EBS virtual hard drives database so that could be RDS SQL
65:23 drives database so that could be RDS SQL databases networking and content
65:25 databases networking and content delivery but really it's networking uh
65:28 delivery but really it's networking uh and this would be VPC so private Cloud
65:30 and this would be VPC so private Cloud Network okay so uh let's just look at
65:33 Network okay so uh let's just look at all the categories that are outside the
65:34 all the categories that are outside the four core so there could be analytics
65:36 four core so there could be analytics application integration arvr ads cost
65:39 application integration arvr ads cost management blockchain business
65:41 management blockchain business application containers customer
65:43 application containers customer engagement developer tools and user
65:45 engagement developer tools and user Computing game Tech iot Machine Learning
65:49 Computing game Tech iot Machine Learning Management governance Media Services
65:51 Management governance Media Services migration uh and transfer mobile Quantum
65:55 migration uh and transfer mobile Quantum technology s robotics satellites
65:57 technology s robotics satellites security identity and compliance if
65:59 security identity and compliance if there was more I would not be surprised
66:01 there was more I would not be surprised but you can see there's a lot of stuff
66:03 but you can see there's a lot of stuff that's going on
66:09 here so let's take a look at all the ITA services that are available to us so if
66:11 services that are available to us so if you're on the marketing website which is
66:13 you're on the marketing website which is adab.
66:14 adab. amazon.com what you'll see in the top
66:16 amazon.com what you'll see in the top left corner is products and so these are
66:19 left corner is products and so these are all the categories and for whatever we
66:21 all the categories and for whatever we want if it's like ec2 we can go into
66:23 want if it's like ec2 we can go into here and we can read all about it so
66:26 here and we can read all about it so usually we'll have our overview all
66:28 usually we'll have our overview all right and that's not very useful and
66:31 right and that's not very useful and then we'll go over to features and so
66:34 then we'll go over to features and so this is can be kind of useful to get
66:35 this is can be kind of useful to get some basic information and pricing which
66:38 some basic information and pricing which is something you'll do a lot in AWS is
66:40 is something you'll do a lot in AWS is you're always going to be going to a
66:41 you're always going to be going to a service looking up its price and so
66:44 service looking up its price and so you'll make your way over uh here every
66:46 you'll make your way over uh here every single one is different uh a very
66:48 single one is different uh a very important page would be like getting
66:49 important page would be like getting started so this will give you basic
66:51 started so this will give you basic information but what I do is I like to
66:53 information but what I do is I like to go all the way down to the bottom here
66:55 go all the way down to the bottom here and find my way over to the
66:56 and find my way over to the documentation so I'll go here to
66:58 documentation so I'll go here to documentation to get that deeper
67:00 documentation to get that deeper knowledge about that service and as you
67:02 knowledge about that service and as you can see things get pretty deep with AWS
67:05 can see things get pretty deep with AWS in terms of the information they have so
67:07 in terms of the information they have so hopefully that gives you an idea of the
67:09 hopefully that gives you an idea of the scope also when you're logged into AWS
67:11 scope also when you're logged into AWS and this will be when we create our
67:12 and this will be when we create our account uh you can explore all the
67:14 account uh you can explore all the services this way as well so these are
67:16 services this way as well so these are all the ad Services uh but you just
67:18 all the ad Services uh but you just notice that there's two ways to uh
67:20 notice that there's two ways to uh explore them where this is actually you
67:22 explore them where this is actually you just actually utilizing the services and
67:24 just actually utilizing the services and then the marketing website is you
67:26 then the marketing website is you reading about them and learning all
67:27 reading about them and learning all about them
67:28 about them [Music]
67:31 [Music] okay hey this is Andrew Brown from exam
67:34 okay hey this is Andrew Brown from exam Pro and we are looking at the evolution
67:35 Pro and we are looking at the evolution of computing your cloud service provider
67:37 of computing your cloud service provider has all of these offerings and the idea
67:39 has all of these offerings and the idea is that you need to choose the one that
67:41 is that you need to choose the one that meets your use case a lot of times this
67:43 meets your use case a lot of times this all has to come around the utilization
67:45 all has to come around the utilization of space that's what we're trying to
67:46 of space that's what we're trying to illustrate here in this section here and
67:48 illustrate here in this section here and the trade-offs of why you might want to
67:50 the trade-offs of why you might want to use some of these offerings okay for
67:53 use some of these offerings okay for dedicated we're talking about a uh a
67:55 dedicated we're talking about a uh a physically a physical server wholly
67:57 physically a physical server wholly utilized by single customer that's
67:59 utilized by single customer that's considered single tenant and uh for
68:02 considered single tenant and uh for Google Cloud we're talking about um
68:05 Google Cloud we're talking about um single node clusters and bare metal
68:07 single node clusters and bare metal machines where you have control of the
68:09 machines where you have control of the virtualization so you can install any
68:11 virtualization so you can install any kind of hypervisor or virtualization you
68:13 kind of hypervisor or virtualization you wanted the system the trade-off here
68:15 wanted the system the trade-off here though is that you have to guess upfront
68:17 though is that you have to guess upfront what your capacity is going to be and
68:19 what your capacity is going to be and you're never going to 100% utilize that
68:20 you're never going to 100% utilize that machine because it's going to have to be
68:22 machine because it's going to have to be a bit under in case the utilization goes
68:24 a bit under in case the utilization goes up that's you're choosing the CP use and
68:25 up that's you're choosing the CP use and the memories you're going to end up
68:27 the memories you're going to end up overpaying because you're uh you'll have
68:29 overpaying because you're uh you'll have under underutilized server uh it's not
68:32 under underutilized server uh it's not going to be easy to vertically scale
68:33 going to be easy to vertically scale it's not like you can just say resize it
68:35 it's not like you can just say resize it because the machine you have is what you
68:36 because the machine you have is what you have right you can't add more I mean I
68:39 have right you can't add more I mean I suppose they can insert more memory for
68:41 suppose they can insert more memory for you but that's a manual migration uh so
68:43 you but that's a manual migration uh so it's very difficult um and replacing the
68:46 it's very difficult um and replacing the server is also very difficult okay so
68:49 server is also very difficult okay so you're limited by the host operating
68:51 you're limited by the host operating system it's not virtualized so whatever
68:53 system it's not virtualized so whatever is on there is on there um and that's
68:55 is on there is on there um and that's that's what your apps are going to have
68:56 that's what your apps are going to have access to if you decide to run more than
68:58 access to if you decide to run more than one app which is not a good practice for
69:00 one app which is not a good practice for these kind of machines uh you're going
69:02 these kind of machines uh you're going to end up with uh resource sharing where
69:04 to end up with uh resource sharing where one machine might utilize more than the
69:06 one machine might utilize more than the others technically with a dedicated
69:08 others technically with a dedicated machine you have a guarantee of security
69:09 machine you have a guarantee of security privacy and full utility of the
69:11 privacy and full utility of the underlying resources I put an aster
69:12 underlying resources I put an aster there because yes it's more secure but
69:16 there because yes it's more secure but uh but it's up to you to make sure that
69:18 uh but it's up to you to make sure that it's more secure so you have that's up
69:20 it's more secure so you have that's up to your skills of security right whereas
69:22 to your skills of security right whereas if you had a virtual machine or anything
69:24 if you had a virtual machine or anything above that there's more responsibility
69:26 above that there's more responsibility on the cloud service provider to just
69:28 on the cloud service provider to just provide a secure machine and they can do
69:31 provide a secure machine and they can do a better job than you so why would you
69:33 a better job than you so why would you use a dedicated machine well maybe
69:34 use a dedicated machine well maybe you're doing high performance Computing
69:36 you're doing high performance Computing where you need these machines like very
69:38 where you need these machines like very close together and you have to choose
69:40 close together and you have to choose what kind of virtualization you need to
69:42 what kind of virtualization you need to have okay so then we're looking at
69:45 have okay so then we're looking at virtual machines the idea here is you
69:46 virtual machines the idea here is you can run a machine within a machine the
69:48 can run a machine within a machine the way that works is we have a hypervisor
69:51 way that works is we have a hypervisor this is a software layer that lets you
69:52 this is a software layer that lets you run the virtual machines uh the idea
69:55 run the virtual machines uh the idea here is now it's multi-tenant you can
69:56 here is now it's multi-tenant you can share the cost with multiple customers
69:58 share the cost with multiple customers you're paying for a fraction of the
69:59 you're paying for a fraction of the server uh you'll still end up overpaying
70:02 server uh you'll still end up overpaying for the underutilized virtual machine
70:03 for the underutilized virtual machine because a virtual machine is just like
70:05 because a virtual machine is just like you have to still say how many V vcpus
70:08 you have to still say how many V vcpus how much memory and your app is you you
70:10 how much memory and your app is you you don't want an app that uses 100% right
70:12 don't want an app that uses 100% right you want to use exactly the amount you
70:14 you want to use exactly the amount you need but you can see here you know
70:15 need but you can see here you know there's still going to be some
70:17 there's still going to be some underutilization uh you are limited by
70:19 underutilization uh you are limited by the guest operating system now but now
70:21 the guest operating system now but now it's virtualized so at least it's very
70:23 it's virtualized so at least it's very easy to uh possibly migrate away if you
70:26 easy to uh possibly migrate away if you choose to run uh more than one app on a
70:29 choose to run uh more than one app on a virtual machine it it can still run into
70:31 virtual machine it it can still run into resource sharing conflicts uh it's
70:33 resource sharing conflicts uh it's easier to export or import images for
70:35 easier to export or import images for migration it's easier to vertically or
70:38 migration it's easier to vertically or horizontally scale okay and virtual
70:40 horizontally scale okay and virtual machines are the most common and popular
70:42 machines are the most common and popular offering for compute because people are
70:44 offering for compute because people are just very comfortable with those then
70:46 just very comfortable with those then you have containers and the idea is you
70:47 you have containers and the idea is you have a virtual machine running these
70:49 have a virtual machine running these things called containers the way they do
70:51 things called containers the way they do that is similar to a hypervisor but
70:53 that is similar to a hypervisor but instead you have um like here is a
70:55 instead you have um like here is a Docker demon so it's just a um a
70:58 Docker demon so it's just a um a container uh software layer okay to run
71:01 container uh software layer okay to run those containers there different kinds
71:02 those containers there different kinds Docker is the most popular uh and the
71:04 Docker is the most popular uh and the great thing is you can maximize the uh
71:06 great thing is you can maximize the uh the the capacity because you can easily
71:09 the the capacity because you can easily add new containers resize those
71:11 add new containers resize those containers use up the rest of the space
71:13 containers use up the rest of the space it's a lot more flexible okay uh your
71:16 it's a lot more flexible okay uh your containers will share the same
71:17 containers will share the same underlying OS but they are more
71:20 underlying OS but they are more efficient than multiple VMS uh multiple
71:22 efficient than multiple VMS uh multiple apps can run side by side without being
71:24 apps can run side by side without being limited uh by the the same OS
71:25 limited uh by the the same OS requirements and not cause conflicts
71:27 requirements and not cause conflicts during resource sharing so containers
71:29 during resource sharing so containers are really good but you know the
71:31 are really good but you know the tradeoff is there a lot more work to
71:32 tradeoff is there a lot more work to maintain then you have functions
71:35 maintain then you have functions functions go an even step further and
71:38 functions go an even step further and the idea is that you uh the the
71:40 the idea is that you uh the the containers where we where we talked
71:42 containers where we where we talked about that's a lot of work to maintain
71:44 about that's a lot of work to maintain now the cloud service provider is taking
71:46 now the cloud service provider is taking care of those containers generally
71:48 care of those containers generally sometimes not it depends if it's
71:50 sometimes not it depends if it's serverless or not but the idea is that
71:52 serverless or not but the idea is that you don't even think about this is
71:54 you don't even think about this is called seress compute but you don't even
71:55 called seress compute but you don't even think about uh the OS or anything you
71:58 think about uh the OS or anything you just know that what your runtime is you
71:59 just know that what your runtime is you run Ruby or python or node and you just
72:02 run Ruby or python or node and you just upload your code and you just say uh I
72:05 upload your code and you just say uh I want this to be able to run uh uh for
72:07 want this to be able to run uh uh for this long uh and use this amount of
72:09 this long uh and use this amount of memory okay you're only responsible for
72:12 memory okay you're only responsible for your code and data nothing else it's
72:13 your code and data nothing else it's very cost effective you only pay for the
72:15 very cost effective you only pay for the time the code is running uh and VMS only
72:18 time the code is running uh and VMS only run when there is code to be executed
72:20 run when there is code to be executed but because of that there is this
72:21 but because of that there is this concept of cold starts and this is uh
72:24 concept of cold starts and this is uh where the machine has to spin up and so
72:27 where the machine has to spin up and so sometimes requests can be a bit slow so
72:29 sometimes requests can be a bit slow so there's a bit of tradeoff there but
72:30 there's a bit of tradeoff there but functions or serverless compute is
72:32 functions or serverless compute is generally one of the best offerings as
72:34 generally one of the best offerings as of today but most people are still
72:36 of today but most people are still getting kind of comfortable with that
72:37 getting kind of comfortable with that Paradigm
72:38 Paradigm [Music]
72:41 [Music] okay hey this is Andrew Brown from exam
72:43 okay hey this is Andrew Brown from exam Pro and we are taking a look at the
72:45 Pro and we are taking a look at the types of cloud computing and the best
72:47 types of cloud computing and the best way to represent this is a stacked
72:49 way to represent this is a stacked pyramid and we'll start our way at the
72:51 pyramid and we'll start our way at the top with SAS also known as software as a
72:53 top with SAS also known as software as a service so this is a product that is run
72:56 service so this is a product that is run and managed by the cloud service
72:58 and managed by the cloud service provider you don't have to worry about
73:00 provider you don't have to worry about how the service is maintained it just
73:01 how the service is maintained it just works and remains available so examples
73:03 works and remains available so examples of this and actually uh the first uh
73:05 of this and actually uh the first uh company to coin this was actually
73:07 company to coin this was actually Salesforce um then there's things like
73:09 Salesforce um then there's things like Gmail office through 65 so think
73:12 Gmail office through 65 so think Microsoft Word Excel things like that
73:14 Microsoft Word Excel things like that and they run the cloud okay and SAS is
73:17 and they run the cloud okay and SAS is generally designed for customers in mind
73:20 generally designed for customers in mind then came along platforms of service um
73:22 then came along platforms of service um also known as pass and these focus on
73:25 also known as pass and these focus on the development or sorry the deployment
73:27 the development or sorry the deployment and management of your apps so you don't
73:29 and management of your apps so you don't worry about provisioning configuring or
73:31 worry about provisioning configuring or understanding the hardware or operating
73:33 understanding the hardware or operating system and so here we' have things like
73:36 system and so here we' have things like elastic beant stock Heroku which is very
73:39 elastic beant stock Heroku which is very popular among developers that just want
73:41 popular among developers that just want to launch their code or Google app
73:43 to launch their code or Google app engine and that is the old logo but
73:45 engine and that is the old logo but that's the logo I like to use because I
73:47 that's the logo I like to use because I think it looks cool and so these are
73:49 think it looks cool and so these are intended for developers the idea is that
73:51 intended for developers the idea is that you just deploy your code um and the
73:54 you just deploy your code um and the platform does the rest
73:55 platform does the rest then there is infrastructure as a
73:57 then there is infrastructure as a service um there's no way to say that
74:00 service um there's no way to say that like it's easy to say SAS or pass but
74:02 like it's easy to say SAS or pass but there's no easy way to say IAS so this
74:05 there's no easy way to say IAS so this is the basic building blocks for cloud
74:07 is the basic building blocks for cloud it it provides access to networking
74:09 it it provides access to networking features computers and data storage
74:11 features computers and data storage space and the idea here is you don't
74:13 space and the idea here is you don't worry about the IT staff data centers
74:15 worry about the IT staff data centers and hardware and so that would be like
74:17 and hardware and so that would be like Microsoft Azure AWS Oracle Cloud things
74:21 Microsoft Azure AWS Oracle Cloud things like that and these are for
74:23 like that and these are for administrators okay so there you go
74:26 administrators okay so there you go [Music]
74:30 [Music] hey this is Andrew Brown from exam Pro
74:32 hey this is Andrew Brown from exam Pro and we are taking a look at cloud
74:33 and we are taking a look at cloud computing deployment models starting
74:35 computing deployment models starting with public cloud and the idea here is
74:38 with public cloud and the idea here is that everything when I say everything
74:39 that everything when I say everything I'm talking about the workloads the
74:41 I'm talking about the workloads the projects the code is built on the cloud
74:43 projects the code is built on the cloud service provider so here is a diagram
74:46 service provider so here is a diagram where we have a ec2 instance a virtual
74:49 where we have a ec2 instance a virtual machine running her application and then
74:51 machine running her application and then we have our database in RDS and we have
74:54 we have our database in RDS and we have the internet coming into our adus
74:56 the internet coming into our adus account and so everything is contained
74:58 account and so everything is contained all of our infrastructure is within AWS
75:01 all of our infrastructure is within AWS all right uh and so this is known as
75:03 all right uh and so this is known as being Cloud native or Cloud first and I
75:06 being Cloud native or Cloud first and I put an aster beside Cloud native because
75:08 put an aster beside Cloud native because that was a term uh that was used prior
75:11 that was a term uh that was used prior to cloud service providers to refer to
75:13 to cloud service providers to refer to Containers or open- Source um uh models
75:17 Containers or open- Source um uh models being deployed and being mobile other
75:19 being deployed and being mobile other places so just understand that it has
75:20 places so just understand that it has two meanings but in the context of this
75:22 two meanings but in the context of this Cloud native just being like native to
75:24 Cloud native just being like native to the cloud like using Cloud to begin with
75:26 the cloud like using Cloud to begin with okay then we have private Cloud so
75:29 okay then we have private Cloud so everything built on a company's data
75:31 everything built on a company's data center uh and being built on a data
75:33 center uh and being built on a data center is known as being on premise
75:35 center is known as being on premise because that is where the data center
75:37 because that is where the data center resides near where you work and so here
75:40 resides near where you work and so here you could be using Cloud but you'd be
75:41 you could be using Cloud but you'd be using openstack which would be a private
75:43 using openstack which would be a private Cloud so here we have our on- premise
75:46 Cloud so here we have our on- premise Data Center and uh the internet's coming
75:48 Data Center and uh the internet's coming into our data center and we're running
75:50 into our data center and we're running on open stack where we can launch
75:51 on open stack where we can launch virtual machines and a database okay
75:55 virtual machines and a database okay then there's the concept of a hybrid
75:57 then there's the concept of a hybrid Cloud so using both on premise and a
75:59 Cloud so using both on premise and a cloud service provider together and so
76:02 cloud service provider together and so the idea here is we have our on premise
76:04 the idea here is we have our on premise Data Center and then we have an
76:06 Data Center and then we have an established connection maybe it's a VPN
76:08 established connection maybe it's a VPN connection maybe it is a direct
76:10 connection maybe it is a direct connection um but the idea is that we're
76:12 connection um but the idea is that we're bridging that connection and uh
76:14 bridging that connection and uh utilizing both our private and our
76:17 utilizing both our private and our public uh stuff to uh create a cloud
76:20 public uh stuff to uh create a cloud workload then there is a fourth one
76:23 workload then there is a fourth one called cross Cloud um some sometimes
76:25 called cross Cloud um some sometimes it's known as multicloud and sometimes
76:27 it's known as multicloud and sometimes it's erroneously referred to as hybrid
76:30 it's erroneously referred to as hybrid Cloud but it generally is not hybrid
76:32 Cloud but it generally is not hybrid Cloud okay the idea here is when you're
76:34 Cloud okay the idea here is when you're using multiple Cloud providers and so
76:37 using multiple Cloud providers and so one example here could be using services
76:39 one example here could be using services like Azure Arc so Azure Arc allows you
76:42 like Azure Arc so Azure Arc allows you to extend your um control plane uh so
76:45 to extend your um control plane uh so that you can deploy containers for
76:47 that you can deploy containers for kubernetes in um Azure within Amazon eks
76:52 kubernetes in um Azure within Amazon eks within gcp kubernetes engine but you
76:55 within gcp kubernetes engine but you know being cross Cloud doesn't
76:56 know being cross Cloud doesn't necessarily mean that you're running a
76:59 necessarily mean that you're running a uh using a service that use Works across
77:01 uh using a service that use Works across the cloud and manages it it could just
77:02 the cloud and manages it it could just mean using multiple providers at the
77:04 mean using multiple providers at the same time another service that is
77:06 same time another service that is similar to Azure Arch but is for a
77:08 similar to Azure Arch but is for a Google Cloud uh platform is also know as
77:11 Google Cloud uh platform is also know as anthos um adab us has traditionally not
77:14 anthos um adab us has traditionally not been um cross Cloud uh friendly and so
77:17 been um cross Cloud uh friendly and so we haven't seen any kind of developments
77:19 we haven't seen any kind of developments there where we see uh these other
77:21 there where we see uh these other services that are or cloud service
77:22 services that are or cloud service providers behind AWS trying to promote
77:25 providers behind AWS trying to promote to uh grab more of the market share
77:29 to uh grab more of the market share [Music]
77:32 [Music] okay so let's talk about the different
77:35 okay so let's talk about the different deployment models and what kind of
77:36 deployment models and what kind of companies or organizations are still
77:38 companies or organizations are still utilizing uh for these particular
77:40 utilizing uh for these particular categories so for cloud again this is
77:42 categories so for cloud again this is where we fly utilizing cloud computing
77:44 where we fly utilizing cloud computing hybrid is a combination of public cloud
77:46 hybrid is a combination of public cloud and on-prem or private cloud and then on
77:49 and on-prem or private cloud and then on Prem is deploying resources on premise
77:51 Prem is deploying resources on premise using virtualization Resource Management
77:53 using virtualization Resource Management tools sometimes called private cloud or
77:55 tools sometimes called private cloud or could be utilizing something like open
77:56 could be utilizing something like open stack so for companies that are starting
77:59 stack so for companies that are starting out today or are small enough to make
78:01 out today or are small enough to make the leap from virtual private server to
78:03 the leap from virtual private server to a cloud service provider this is where
78:04 a cloud service provider this is where we're looking at Cloud so we're looking
78:06 we're looking at Cloud so we're looking at startups SAS offerings new projects
78:08 at startups SAS offerings new projects and companies um so maybe this would be
78:10 and companies um so maybe this would be like base camp Dropbox Squarespace then
78:13 like base camp Dropbox Squarespace then for hybrid these are organizations that
78:15 for hybrid these are organizations that started with their own data center but
78:16 started with their own data center but can't fully move to Cloud due to the
78:18 can't fully move to Cloud due to the effort or migration or security
78:20 effort or migration or security compliance so we're talking about Banks
78:22 compliance so we're talking about Banks fintech Investment Management large
78:24 fintech Investment Management large professional servic providers Legacy on
78:26 professional servic providers Legacy on Prem so maybe CIBC which is a bank deoe
78:29 Prem so maybe CIBC which is a bank deoe uh the CCP or CPP investment board and
78:33 uh the CCP or CPP investment board and then for on premise these are
78:34 then for on premise these are organizations that cannot run on cloud
78:36 organizations that cannot run on cloud due to strict Regulatory Compliance or
78:38 due to strict Regulatory Compliance or the sheer size of the organization or
78:40 the sheer size of the organization or they just have like an outdated uh idea
78:43 they just have like an outdated uh idea of what cloud is so they just have a lot
78:45 of what cloud is so they just have a lot of uh difficulties in terms of politics
78:47 of uh difficulties in terms of politics adopting Cloud um so this would be
78:49 adopting Cloud um so this would be public sector like government super sens
78:51 public sector like government super sens of data like hospitals large Enterprise
78:53 of data like hospitals large Enterprise with heavy regul insurance companies um
78:56 with heavy regul insurance companies um so again hospitals maybe AIG the
78:58 so again hospitals maybe AIG the government of Canada and so I shouldn't
79:01 government of Canada and so I shouldn't say that they aren't using Cloud but um
79:04 say that they aren't using Cloud but um you know because uh adabs and all the
79:07 you know because uh adabs and all the cloud service providers have um uh
79:10 cloud service providers have um uh public sector offering so um you know
79:12 public sector offering so um you know I'm just trying to Stage as an example
79:14 I'm just trying to Stage as an example of things that could be still using on
79:16 of things that could be still using on premise so you know I know the
79:18 premise so you know I know the government Canada definitely uses uh
79:20 government Canada definitely uses uh cloud in a lot of ways same with AIG and
79:23 cloud in a lot of ways same with AIG and hospitals but you know generally these
79:24 hospitals but you know generally these are the the last holdouts of on Prem
79:26 are the the last holdouts of on Prem because there really isn't a a good
79:29 because there really isn't a a good reason to be fully on premise anymore uh
79:31 reason to be fully on premise anymore uh but again there are some things that are
79:33 but again there are some things that are still doing that
79:34 still doing that [Music]
79:38 [Music] okay hey this is Andrew Brown from exam
79:40 okay hey this is Andrew Brown from exam Pro and we are at the start of our
79:41 Pro and we are at the start of our journey creating ourselves an adus
79:43 journey creating ourselves an adus account so what you need to do is go to
79:45 account so what you need to do is go to adab us. amazon.com if you don't have a
79:47 adab us. amazon.com if you don't have a lot of confidence how to get there just
79:49 lot of confidence how to get there just type in adus into Google and then click
79:52 type in adus into Google and then click here on the link where it says adabs
79:53 here on the link where it says adabs amazon.com it'll take you to the same
79:55 amazon.com it'll take you to the same place now notice we have a big orange
79:58 place now notice we have a big orange button in the top right corner so this
80:00 button in the top right corner so this says sign into the OS console um it's
80:03 says sign into the OS console um it's the if it's the first time you've ever
80:04 the if it's the first time you've ever been to this website so if I go ads.
80:07 been to this website so if I go ads. amazon.com Incognito it will have the
80:10 amazon.com Incognito it will have the create anus Account button um I don't
80:12 create anus Account button um I don't know why they don't keep this consistent
80:14 know why they don't keep this consistent across the board but I wish they did but
80:16 across the board but I wish they did but if you are on the screen you can click
80:17 if you are on the screen you can click here or there um but if you do see
80:20 here or there um but if you do see something that doesn't say uh you know
80:22 something that doesn't say uh you know create an account or or Etc you can just
80:24 create an account or or Etc you can just sign
80:25 sign in okay and then down below you can hit
80:28 in okay and then down below you can hit create a new a account so that's the way
80:31 create a new a account so that's the way you're going to get in there and so
80:32 you're going to get in there and so you're going to put an email a password
80:34 you're going to put an email a password and create an adist account name um I've
80:36 and create an adist account name um I've created this so many times and it's so
80:39 created this so many times and it's so hard to set up new emails I'm not going
80:40 hard to set up new emails I'm not going to do this again it's not complicated
80:42 to do this again it's not complicated but one thing I need to tell you is that
80:44 but one thing I need to tell you is that you do need to have a credit card you
80:45 you do need to have a credit card you cannot create an account without a
80:47 cannot create an account without a credit card um and for those who are in
80:50 credit card um and for those who are in places where maybe you don't have a
80:52 places where maybe you don't have a traditional credit card maybe you can
80:53 traditional credit card maybe you can get a prepaid one so up here here in
80:54 get a prepaid one so up here here in Canada we have a company called coo and
80:57 Canada we have a company called coo and so coo is um a Visa debit card and so
81:01 so coo is um a Visa debit card and so it's basically a virtual prepaid credit
81:03 it's basically a virtual prepaid credit card and so these do work on the
81:05 card and so these do work on the platform as well so if you have a
81:06 platform as well so if you have a traditional credit card or possibly
81:08 traditional credit card or possibly could find one of these uh you still
81:10 could find one of these uh you still have to load up with money but it does
81:11 have to load up with money but it does give you a bit more flexibility to
81:12 give you a bit more flexibility to create that account so what I want you
81:14 create that account so what I want you to do is go through that process
81:16 to do is go through that process yourself it's not complicated and I'll
81:18 yourself it's not complicated and I'll see you on the other end okay
81:26 so once you finished creating your account you should be within the adus
81:28 account you should be within the adus Management console and this is the page
81:29 Management console and this is the page you're always going to see when you log
81:31 you're always going to see when you log in it's always going to show the most
81:33 in it's always going to show the most recent Services here um and you'll
81:36 recent Services here um and you'll notice in the top right corner that I
81:37 notice in the top right corner that I have my account called exam Pro if
81:39 have my account called exam Pro if you're wondering how do you change that
81:41 you're wondering how do you change that name what you do is go to my accounts
81:44 name what you do is go to my accounts here and once there you'll have your
81:46 here and once there you'll have your account settings up here if you go to
81:48 account settings up here if you go to edit uh you can change that name here
81:51 edit uh you can change that name here okay so you know sometimes when you
81:53 okay so you know sometimes when you create your account you don't like the
81:55 create your account you don't like the account name that you gave it and so
81:56 account name that you gave it and so that's your opportunity to fix it um but
81:59 that's your opportunity to fix it um but once we're in our account what I want
82:00 once we're in our account what I want you to do is immediately log out because
82:02 you to do is immediately log out because I want you to get familiar with the way
82:04 I want you to get familiar with the way you log into AWS because it is a bit um
82:07 you log into AWS because it is a bit um different than other providers and so I
82:10 different than other providers and so I don't want you to uh get hung up later
82:12 don't want you to uh get hung up later on with your account so I've logged out
82:15 on with your account so I've logged out I'm going to go ahead and log back in so
82:17 I'm going to go ahead and log back in so you can click the orange button or what
82:18 you can click the orange button or what I like to do is drop down my account and
82:21 I like to do is drop down my account and go to adus Management console it's a lot
82:23 go to adus Management console it's a lot more clear and you notice we're going to
82:25 more clear and you notice we're going to have two options root user and I am user
82:29 have two options root user and I am user so this is what I'm talking about for
82:30 so this is what I'm talking about for the confusion so when you log into your
82:33 the confusion so when you log into your root user account you all are always
82:36 root user account you all are always using an email and when you're logging
82:38 using an email and when you're logging as an I am user you're actually going to
82:39 as an I am user you're actually going to be entering the account ID or account
82:41 be entering the account ID or account Alias but what we'll do is go to the
82:43 Alias but what we'll do is go to the root user and this is the email you use
82:45 root user and this is the email you use to sign up with the account so for me uh
82:48 to sign up with the account so for me uh I I called this one Andrew plus sandbox
82:51 I I called this one Andrew plus sandbox exampro doco I'm going to go to next
82:54 exampro doco I'm going to go to next sometimes you get this character box
82:56 sometimes you get this character box it's very annoying but it happens time
82:58 it's very annoying but it happens time to time and so what I'm going to do is
83:00 to time and so what I'm going to do is just go ahead and type that in
83:03 just go ahead and type that in okay and hopefully it likes it and then
83:06 okay and hopefully it likes it and then I'm just going to enter in my
83:08 I'm just going to enter in my password all right and I'll be back into
83:11 password all right and I'll be back into my account and so notice it takes me
83:12 my account and so notice it takes me back to abis Management console so the
83:14 back to abis Management console so the root account is not something we want to
83:16 root account is not something we want to be generally using uh except for um very
83:19 be generally using uh except for um very particular use cases and we do cover
83:22 particular use cases and we do cover that in the course uh but what I want
83:24 that in the course uh but what I want you to do is go set yourself up with a
83:26 you to do is go set yourself up with a proper account and so what we'll do is
83:29 proper account and so what we'll do is go to the top here and type in and this
83:32 go to the top here and type in and this stands for identity and access
83:33 stands for identity and access management and we'll click on I
83:36 management and we'll click on I here and on the left hand side we're
83:38 here and on the left hand side we're going to see a bunch of options here um
83:40 going to see a bunch of options here um and so notice right away we get to the I
83:42 and so notice right away we get to the I am dashboard where it's going to start
83:44 am dashboard where it's going to start to make some recommendations for us the
83:46 to make some recommendations for us the first one is always to add MFA
83:48 first one is always to add MFA multiactor
83:50 multiactor authentication another thing you can do
83:51 authentication another thing you can do is set an account Alias so you can see
83:53 is set an account Alias so you can see that I've set one here prior so if I
83:55 that I've set one here prior so if I just go ahead and remove it the way we'd
83:57 just go ahead and remove it the way we'd have to log in is via the account Alias
84:00 have to log in is via the account Alias uh which is the same as the account ID
84:02 uh which is the same as the account ID and so I don't really like that so I'm
84:03 and so I don't really like that so I'm going to just rename it to Deep Space 9
84:06 going to just rename it to Deep Space 9 and uh these are unique so you have to
84:08 and uh these are unique so you have to pick something that is unique to you so
84:10 pick something that is unique to you so it could be your company name or things
84:12 it could be your company name or things like that it's going to make it a lot
84:13 like that it's going to make it a lot easier to log in uh when we create our
84:15 easier to log in uh when we create our additional user here so we'll come back
84:17 additional user here so we'll come back to MFA at some point here what I want
84:19 to MFA at some point here what I want you to do is go over to users and go
84:21 you to do is go over to users and go ahead and make yourself a new user and
84:24 ahead and make yourself a new user and so I'm going to call this one Andrew
84:26 so I'm going to call this one Andrew Brown and I'm going to enable
84:28 Brown and I'm going to enable programmatic access I'm going to enable
84:30 programmatic access I'm going to enable adus Management console so this one's
84:32 adus Management console so this one's going to allow me to use the apis to
84:34 going to allow me to use the apis to programmatically work with ads and this
84:36 programmatically work with ads and this one here is going to allow me to just
84:38 one here is going to allow me to just log into the console which is uh pretty
84:40 log into the console which is uh pretty fair here so now that I have this we can
84:43 fair here so now that I have this we can autogenerate it or give it a custom
84:44 autogenerate it or give it a custom password I'm just going to autogenerate
84:46 password I'm just going to autogenerate for the time being and here it says You
84:48 for the time being and here it says You must create a new password at the next
84:49 must create a new password at the next sign in which sounds fair to me and we
84:52 sign in which sounds fair to me and we can go ahead and create ourselves a new
84:53 can go ahead and create ourselves a new group so it's pretty common to create a
84:56 group so it's pretty common to create a group called admin and notice here this
84:58 group called admin and notice here this is where we're going to have a bunch of
85:00 is where we're going to have a bunch of different policies so the first one here
85:01 different policies so the first one here which is admin and access provides full
85:04 which is admin and access provides full access to AO services and resources and
85:06 access to AO services and resources and this pretty much gives you almost nearly
85:09 this pretty much gives you almost nearly almost the same capabilities as the um
85:12 almost the same capabilities as the um AWS root user account uh and so that's
85:15 AWS root user account uh and so that's going to be okay because we are an admin
85:17 going to be okay because we are an admin in our account so I'll checkbox that on
85:19 in our account so I'll checkbox that on but I just want to show you here if you
85:20 but I just want to show you here if you Dro down filter policies and you went to
85:23 Dro down filter policies and you went to adus manage job functions these are a
85:25 adus manage job functions these are a bunch of uh pre-made uh adus uh policies
85:29 bunch of uh pre-made uh adus uh policies that you could apply uh to different
85:32 that you could apply uh to different users so what's really popular after the
85:34 users so what's really popular after the administrator access is to usually give
85:36 administrator access is to usually give the power user access and so this one
85:38 the power user access and so this one allows um a user to do basically
85:41 allows um a user to do basically anything they want with the exception of
85:43 anything they want with the exception of management of users and groups so you
85:45 management of users and groups so you know it could be that that's something
85:47 know it could be that that's something that you'd want to do for some of your
85:48 that you'd want to do for some of your users I just don't want to have any
85:50 users I just don't want to have any trouble so I'm going to give us um admin
85:52 trouble so I'm going to give us um admin access here and we're going to go ahead
85:54 access here and we're going to go ahead and create this
85:55 and create this group and so here is the group that we
85:58 group and so here is the group that we are creating we're going to go next we
86:00 are creating we're going to go next we can apply our tags if we want I'm not
86:02 can apply our tags if we want I'm not going to bother we're going hit next
86:03 going to bother we're going hit next review and then hit create
86:05 review and then hit create user all right and so now what it's
86:07 user all right and so now what it's doing is it's showing us the access ID
86:09 doing is it's showing us the access ID and the access uh key secret that we can
86:12 and the access uh key secret that we can use to programmatically access AWS and
86:14 use to programmatically access AWS and then there's a password here so I'm
86:15 then there's a password here so I'm going to go ahead and show it and what
86:17 going to go ahead and show it and what I'm going to do is just copy this into a
86:19 I'm going to do is just copy this into a clipboard anywhere
86:29 and so I'm just copying that off screen here because I'm going to need it to log
86:30 here because I'm going to need it to log in and I'm just going to remember my
86:32 in and I'm just going to remember my username as well all right and so what
86:34 username as well all right and so what we'll do is go ahead and hit
86:37 we'll do is go ahead and hit close so what I'll do is go back to my
86:40 close so what I'll do is go back to my dashboard here and remember I set my
86:42 dashboard here and remember I set my account Alias as Deep Space 9 but we
86:44 account Alias as Deep Space 9 but we could also use the account ID to log in
86:46 could also use the account ID to log in I'm just going to grab my account ID off
86:48 I'm just going to grab my account ID off screen here and what I want to do now is
86:50 screen here and what I want to do now is go ahead and log out and now log into
86:53 go ahead and log out and now log into this I user and this is the one that you
86:55 this I user and this is the one that you should always be using uh within your ad
86:58 should always be using uh within your ad account you shouldn't be using your root
86:59 account you shouldn't be using your root user account so what I'll do is go over
87:02 user account so what I'll do is go over to I am user here and notice now that it
87:04 to I am user here and notice now that it says account ID so 12 digits or the
87:06 says account ID so 12 digits or the account alas so here I can enter in uh
87:09 account alas so here I can enter in uh these numbers here or I can enter in my
87:12 these numbers here or I can enter in my Alias which is Deep Space 9 and again
87:15 Alias which is Deep Space 9 and again you'll have to come up with your own
87:16 you'll have to come up with your own creative uh one there for yourself and
87:19 creative uh one there for yourself and we'll go ahead and hit next and so
87:21 we'll go ahead and hit next and so notice what it's going to do is now ask
87:23 notice what it's going to do is now ask me what my IM am username name is so I
87:25 me what my IM am username name is so I defined mine as Andrew Brown and then uh
87:27 defined mine as Andrew Brown and then uh we had an autogenerated a password there
87:30 we had an autogenerated a password there so that we had saw and so I'm going to
87:31 so that we had saw and so I'm going to place that in there we'll go ahead and
87:33 place that in there we'll go ahead and hit sign in and so now right away it's
87:36 hit sign in and so now right away it's going to ask me to reset the password so
87:38 going to ask me to reset the password so I'm going to put the old password in
87:39 I'm going to put the old password in there and so now I need a new password I
87:41 there and so now I need a new password I strongly recommend that you generate out
87:44 strongly recommend that you generate out uh your passwords to be very strong I
87:46 uh your passwords to be very strong I like to go to password generator and
87:48 like to go to password generator and I'll drop this down and I'll do
87:50 I'll drop this down and I'll do something really long like 48 characters
87:52 something really long like 48 characters and um if you don't like
87:54 and um if you don't like weird characters you can take those out
87:56 weird characters you can take those out there sometimes it loads here so you got
87:58 there sometimes it loads here so you got to try it
87:59 to try it twice um and I'm going to go down to
88:01 twice um and I'm going to go down to whoops
88:02 whoops 48 there we go and so that's pretty darn
88:04 48 there we go and so that's pretty darn long so I'm going to copy that off
88:06 long so I'm going to copy that off screen here so I do not
88:08 screen here so I do not forget and you probably would want to
88:10 forget and you probably would want to put this in a password manager something
88:12 put this in a password manager something like Dashlane or some sort of thing like
88:16 like Dashlane or some sort of thing like that and we'll go ahead and we will
88:18 that and we'll go ahead and we will paste that in and we'll see whoops I
88:21 paste that in and we'll see whoops I don't want Google to save it uh and
88:23 don't want Google to save it uh and we'll see if it takes it and so there we
88:25 we'll see if it takes it and so there we go so what I'll do is now log out and
88:30 go so what I'll do is now log out and I'll make sure my new password works
88:32 I'll make sure my new password works because you really don't want to have
88:33 because you really don't want to have problems later so we'll type in Deep
88:34 problems later so we'll type in Deep Space 9 Andrew Brown again this is going
88:38 Space 9 Andrew Brown again this is going to be based on what your uh what you
88:41 to be based on what your uh what you have set and we'll go ahead and log in
88:43 have set and we'll go ahead and log in and there I am and so now notice there
88:45 and there I am and so now notice there doesn't say um exam Pro whatever it says
88:48 doesn't say um exam Pro whatever it says Andrew Brown at Deep Space 9 so it's
88:50 Andrew Brown at Deep Space 9 so it's using the county ellias and showing the
88:52 using the county ellias and showing the name and that's how I'm going to know
88:53 name and that's how I'm going to know whether I'm the root account user or
88:55 whether I'm the root account user or whether I'm logged in as an I am user
88:58 whether I'm logged in as an I am user all right so there we
89:00 all right so there we [Music]
89:04 [Music] go okay so now that we have the proper
89:07 go okay so now that we have the proper user account to log in I just want to
89:10 user account to log in I just want to point out uh about regions so in the top
89:12 point out uh about regions so in the top right corner you'll notice it says North
89:14 right corner you'll notice it says North Virginia here it possibly will say
89:17 Virginia here it possibly will say something completely else for you but
89:19 something completely else for you but what you'll do is you'll click and drop
89:21 what you'll do is you'll click and drop that down and you'll see a big list of
89:23 that down and you'll see a big list of regions and so so sometimes when I log
89:25 regions and so so sometimes when I log in ads it likes to default me to U East
89:28 in ads it likes to default me to U East uh Us East Ohio but I honestly like to
89:31 uh Us East Ohio but I honestly like to launch all my stuff in Us East North
89:33 launch all my stuff in Us East North Virginia even though I'm in Canada I
89:35 Virginia even though I'm in Canada I probably should be using the Canada
89:36 probably should be using the Canada central region down here um but the
89:38 central region down here um but the default region is going to be based on
89:40 default region is going to be based on your locality okay so just understand
89:43 your locality okay so just understand that it might be different I strongly
89:45 that it might be different I strongly recommend for um all of our follow
89:47 recommend for um all of our follow alongs you run in Us East one because us
89:50 alongs you run in Us East one because us east1 is the original um the original
89:53 east1 is the original um the original region and it also has the most access
89:57 region and it also has the most access to Ada services and some adaa Services
90:00 to Ada services and some adaa Services um such as like billing and and cost and
90:02 um such as like billing and and cost and things like that are only going to show
90:04 things like that are only going to show up in Us East uh North Virginia so just
90:07 up in Us East uh North Virginia so just to make our lives a lot easier we're
90:09 to make our lives a lot easier we're going to set it there but I want you to
90:11 going to set it there but I want you to understand that some services are Global
90:13 understand that some services are Global Services meaning that it doesn't matter
90:15 Services meaning that it doesn't matter what region you're in it's going to
90:16 what region you're in it's going to default to Global and one example could
90:18 default to Global and one example could be cloudfront so if I jump over to
90:20 be cloudfront so if I jump over to cloudfront here for a
90:22 cloudfront here for a moment and uh we do seem to have uh some
90:25 moment and uh we do seem to have uh some CLR distributions here from a prior uh
90:28 CLR distributions here from a prior uh follow along but notice up here that it
90:30 follow along but notice up here that it now says Global so CLR does not require
90:32 now says Global so CLR does not require a region selection let's make our way
90:35 a region selection let's make our way over to
90:37 over to S3 all right and this one's also Global
90:40 S3 all right and this one's also Global so again this one does not require a
90:43 so again this one does not require a region selection but if you go over to
90:45 region selection but if you go over to something like
90:52 ec2 okay this has a region dependency so just be really careful about that
90:53 just be really careful about that because a lot of times you'll be doing a
90:55 because a lot of times you'll be doing a follow along and you'll be like why
90:57 follow along and you'll be like why aren't these resources here or whatever
90:58 aren't these resources here or whatever and it's because this got switched on
91:00 and it's because this got switched on you and it can happen at any time so
91:01 you and it can happen at any time so just be uh cautious or aware of that
91:04 just be uh cautious or aware of that [Music]
91:07 [Music] okay so one of the major advantages of
91:10 okay so one of the major advantages of using ads or any cloud service provider
91:13 using ads or any cloud service provider is that it utilizes metered billing so
91:16 is that it utilizes metered billing so that is different from a fixed cost
91:17 that is different from a fixed cost where you'd say Okay I want a server for
91:19 where you'd say Okay I want a server for x amount of dollars every month but the
91:21 x amount of dollars every month but the way ATS works is that it's going to
91:23 way ATS works is that it's going to build you on the hour on the second
91:25 build you on the hour on the second based on a bunch of factors and so
91:27 based on a bunch of factors and so you're going to be able to get services
91:29 you're going to be able to get services at a lower cost however if you choose an
91:32 at a lower cost however if you choose an expensive service and you forget about
91:34 expensive service and you forget about it or there's misconfiguration where you
91:37 it or there's misconfiguration where you thought you were launching something
91:39 thought you were launching something that was cost effective but turned out
91:41 that was cost effective but turned out to be very expensive you could end up
91:42 to be very expensive you could end up with a very large Bill very very quickly
91:45 with a very large Bill very very quickly and so uh that is a major concern for a
91:47 and so uh that is a major concern for a lot of people utilizing Cloud but
91:50 lot of people utilizing Cloud but there's a lot of great toolings built
91:51 there's a lot of great toolings built into ads to allow you to catch yourself
91:55 into ads to allow you to catch yourself if you happen to make that mistake and
91:57 if you happen to make that mistake and before we go ahead and learn how to do
92:00 before we go ahead and learn how to do that I want to show you uh some place
92:02 that I want to show you uh some place where you could end up having excessive
92:04 where you could end up having excessive spend without knowing it so one example
92:07 spend without knowing it so one example and this is actually happened to me when
92:09 and this is actually happened to me when I first started using AWS uh before I
92:11 I first started using AWS uh before I even knew about all the billing tools is
92:14 even knew about all the billing tools is I wanted to launch a reddis uh instance
92:16 I wanted to launch a reddis uh instance and so you you just have to watch you
92:18 and so you you just have to watch you don't have to do this but um elasticache
92:20 don't have to do this but um elasticache is a service that allows you to launch
92:22 is a service that allows you to launch either a mem cach or
92:24 either a mem cach or uh database and I just wanted to store a
92:27 uh database and I just wanted to store a single value and so I went here and I
92:30 single value and so I went here and I scrolled down it looked all good and I
92:32 scrolled down it looked all good and I hit create but I wasn't paying attention
92:34 hit create but I wasn't paying attention because apparently itus likes to default
92:36 because apparently itus likes to default the no type here to the cash
92:38 the no type here to the cash r6g do llarge all right and you know you
92:43 r6g do llarge all right and you know you might think that adus has your best
92:44 might think that adus has your best interest in play and most services are
92:46 interest in play and most services are pretty good they they make sure that
92:48 pretty good they they make sure that they're either free or very low spend
92:50 they're either free or very low spend but some of these and elastic cash is an
92:52 but some of these and elastic cash is an older service where they just have these
92:54 older service where they just have these weird defaults so um you know if we were
92:57 weird defaults so um you know if we were to go look up this the
93:00 to go look up this the RG6 uh
93:02 RG6 uh large all right and look at its
93:09 spend all right and we would go over here whoops I think I went to the China
93:12 here whoops I think I went to the China One but if we were to go over here and
93:14 One but if we were to go over here and look for that instance I'm just trying
93:16 look for that instance I'm just trying to find it here for cost this
93:19 to find it here for cost this one down
93:21 one down below um this doesn't say pricing does
93:24 below um this doesn't say pricing does it say our pricing
93:26 it say our pricing here here it is so this one cost
93:30 here here it is so this one cost um this one costs about 2 cents per hour
93:33 um this one costs about 2 cents per hour it doesn't sound like a lot but if we go
93:35 it doesn't sound like a lot but if we go here and we do the math we say 730 730
93:38 here and we do the math we say 730 730 is the amount of hours in a month that
93:40 is the amount of hours in a month that is
93:41 is $150 okay so if you don't know about
93:44 $150 okay so if you don't know about that and forget about that that's going
93:45 that and forget about that that's going to be $150 and I'm going to tell you
93:47 to be $150 and I'm going to tell you that it used to be a lot higher I'm
93:49 that it used to be a lot higher I'm pretty sure they used to have it default
93:50 pretty sure they used to have it default to something like like this or that
93:53 to something like like this or that because I remember I did this and I had
93:56 because I remember I did this and I had a bill that came in that was like $3,000
93:58 a bill that came in that was like $3,000 USD and I'm in Canada so like $3,000 USD
94:02 USD and I'm in Canada so like $3,000 USD is like a million dollars up here and so
94:04 is like a million dollars up here and so I remember um it was a big concern and I
94:07 I remember um it was a big concern and I freaked out but that was okay because
94:09 freaked out but that was okay because all I had to do was go to support and
94:11 all I had to do was go to support and what I had done is I went to the support
94:20 center and I had opened a support case and I just said hey I had this really
94:23 and I just said hey I had this really big Bill so you go here right and you
94:26 big Bill so you go here right and you look for billing and uh you look for
94:29 look for billing and uh you look for something like charging query or
94:31 something like charging query or misspend and you say you know um you
94:36 misspend and you say you know um you know like help my bill's too
94:39 know like help my bill's too high and you just say like you explain
94:41 high and you just say like you explain the problem saying hey you know I was
94:43 the problem saying hey you know I was using elastic cash and it was set to a
94:45 using elastic cash and it was set to a large default and I wasn't aware about
94:47 large default and I wasn't aware about it can you please give me back the money
94:49 it can you please give me back the money and the great thing is that ads is going
94:51 and the great thing is that ads is going to give you a free pass if it's your
94:53 to give you a free pass if it's your first time where you've had a
94:54 first time where you've had a misspending they generally will say Okay
94:58 misspending they generally will say Okay um you know don't do it again and if it
95:00 um you know don't do it again and if it happens again you will get build but go
95:01 happens again you will get build but go ahead and learn how to set up billing
95:03 ahead and learn how to set up billing alerts or things like that okay so just
95:05 alerts or things like that okay so just so you know don't freak out if you do
95:07 so you know don't freak out if you do have a really high Bill you're going to
95:08 have a really high Bill you're going to get a single free pass but now that we
95:10 get a single free pass but now that we know that let's go learn uh how to set
95:13 know that let's go learn uh how to set up a budget
95:14 up a budget [Music]
95:18 [Music] okay all right so now that we've had a
95:21 okay all right so now that we've had a bit of a story about um over spend for
95:24 bit of a story about um over spend for misconfiguration let's learn how to
95:26 misconfiguration let's learn how to protect ourselves against it and we're
95:28 protect ourselves against it and we're going to go ahead and set up a budget so
95:31 going to go ahead and set up a budget so go to the top here and type in budget
95:34 go to the top here and type in budget and what that will do is bring us over
95:35 and what that will do is bring us over to the billing dashboard another way to
95:37 to the billing dashboard another way to get here is to go click at the top here
95:39 get here is to go click at the top here and go to my billing dashboard and then
95:41 and go to my billing dashboard and then you'll see the leftand menu here and so
95:44 you'll see the leftand menu here and so the great thing about budgets is that
95:46 the great thing about budgets is that the first two are free it says there is
95:48 the first two are free it says there is no additional charge for any those
95:49 no additional charge for any those budgets you pay for configured us usage
95:51 budgets you pay for configured us usage but I'm pretty sure that that's not true
95:55 but I'm pretty sure that that's not true because it used to be ABS budget reports
95:58 because it used to be ABS budget reports okay so that cost
96:00 okay so that cost something it used to be that Abus
96:02 something it used to be that Abus budgets um after success enabled will
96:05 budgets um after success enabled will occur 10 cents daily so in addition to
96:07 occur 10 cents daily so in addition to budget monitor you can add actions to
96:09 budget monitor you can add actions to your budgets the first two action enable
96:12 your budgets the first two action enable budgets are free okay so just be aware
96:15 budgets are free okay so just be aware that just because it says there's no
96:16 that just because it says there's no additional charge read into it because
96:19 additional charge read into it because sometimes the the Fine Line will tell
96:20 sometimes the the Fine Line will tell you it does cost something but I know
96:22 you it does cost something but I know that the first two are free what we'll
96:24 that the first two are free what we'll do is go ahead and create a budget just
96:25 do is go ahead and create a budget just going to close these other tabs here
96:27 going to close these other tabs here since we have no need for them and we're
96:29 since we have no need for them and we're going to be presented with a bunch of
96:30 going to be presented with a bunch of budget types uh we're considered about
96:32 budget types uh we're considered about cost today so we're going to go with a
96:33 cost today so we're going to go with a cost
96:34 cost budget and notice we can change the
96:36 budget and notice we can change the period from monthly to daily to
96:37 period from monthly to daily to quarterly to annually if you change it
96:39 quarterly to annually if you change it to daily um you won't get forecasting so
96:42 to daily um you won't get forecasting so I don't want that today but a monthly is
96:44 I don't want that today but a monthly is pretty good you can have a reoccurring
96:46 pretty good you can have a reoccurring which is strongly recommended and then
96:48 which is strongly recommended and then you can put a fixed cost notice that I
96:49 you can put a fixed cost notice that I already have some spend on this account
96:51 already have some spend on this account so it was like 25 bucks last month I'm
96:54 so it was like 25 bucks last month I'm going to set it my uh budget here to
96:57 going to set it my uh budget here to $100 and you can add filters here to um
97:01 $100 and you can add filters here to um uh filter that cost out so if you want
97:03 uh filter that cost out so if you want to say only for this region or things
97:05 to say only for this region or things like that you could do that uh notice
97:07 like that you could do that uh notice that this is my spend over here um so
97:09 that this is my spend over here um so this is my budget and that's the actual
97:11 this is my budget and that's the actual cost notice my cost has been going up
97:12 cost notice my cost has been going up the last few months because I've been
97:13 the last few months because I've been doing things with this account and so
97:16 doing things with this account and so what I'll do is say simple budget here
97:19 what I'll do is say simple budget here we'll hit
97:21 we'll hit next and so now it's asking us if we
97:23 next and so now it's asking us if we want to configure alerts we probably do
97:25 want to configure alerts we probably do so you'd hit ADD alert and then you'd
97:27 so you'd hit ADD alert and then you'd set a threshold like 80% or you could
97:30 set a threshold like 80% or you could say an absolute value and then you put
97:33 say an absolute value and then you put your emails like Andrew exampro
97:35 your emails like Andrew exampro doco and I want to point out that this
97:37 doco and I want to point out that this is using um itus
97:41 is using um itus SNS or it should be anyway so Amazon SNS
97:44 SNS or it should be anyway so Amazon SNS has no upfront cost based on your stuff
97:46 has no upfront cost based on your stuff here so even though you're filling out
97:47 here so even though you're filling out an email you know and it maybe it
97:50 an email you know and it maybe it doesn't show it but I'm pretty sure that
97:51 doesn't show it but I'm pretty sure that this would create an SNS
97:54 this would create an SNS topic but what we'll do is hit next here
97:56 topic but what we'll do is hit next here we have an alert so we're just uh
97:59 we have an alert so we're just uh reviewing actually this is for attaching
98:00 reviewing actually this is for attaching any actions so maybe we want some kind
98:03 any actions so maybe we want some kind of follow-up thing to happen here so we
98:04 of follow-up thing to happen here so we say add
98:06 say add action and uh require specific I and
98:09 action and uh require specific I and permissions on your
98:11 permissions on your behalf okay sure so I guess you could
98:15 behalf okay sure so I guess you could follow up actions that's no different
98:17 follow up actions that's no different than um a building alarm but we're not
98:20 than um a building alarm but we're not really worried about that right now I'm
98:22 really worried about that right now I'm not going to bother with an action and
98:25 not going to bother with an action and we'll go ahead and create a
98:26 we'll go ahead and create a budget and so here it's going to say
98:29 budget and so here it's going to say that our budget is $100 it's going to
98:30 that our budget is $100 it's going to show us the amount use forecast amount
98:32 show us the amount use forecast amount current budget sometimes this takes time
98:34 current budget sometimes this takes time to uh show up so I'm going to hit
98:36 to uh show up so I'm going to hit refresh and see if it shows up
98:39 refresh and see if it shows up yet there we go so notice we have
98:41 yet there we go so notice we have forecasted amount $23 current budget Etc
98:44 forecasted amount $23 current budget Etc forecasted budget uh forecasted versus
98:47 forecasted budget uh forecasted versus budget so it's pretty straightforward on
98:49 budget so it's pretty straightforward on how that works U I'm just curious if it
98:51 how that works U I'm just curious if it actually created an SNS event so I'm
98:53 actually created an SNS event so I'm going to go over here because a lot of
98:56 going to go over here because a lot of services utilize SNS so if I go over
98:58 services utilize SNS so if I go over here default Cloud watch alarm um so I
99:03 here default Cloud watch alarm um so I think this is something I had created
99:04 think this is something I had created before so I'm going to go ahead and just
99:06 before so I'm going to go ahead and just delete it says default Cloud watch
99:09 delete it says default Cloud watch alarms I'm going to just click into here
99:11 alarms I'm going to just click into here and see what I
99:12 and see what I have
99:14 have confirmed so I think it might have used
99:17 confirmed so I think it might have used this when we created it but um the
99:19 this when we created it but um the reason I'm bringing up SNS is that
99:20 reason I'm bringing up SNS is that there's a lot of services that allow you
99:22 there's a lot of services that allow you to uh email yourself for alerts and it
99:25 to uh email yourself for alerts and it always integrates with this service and
99:26 always integrates with this service and so I just want kind of want to point
99:27 so I just want kind of want to point that out so that you remember what SNS
99:29 that out so that you remember what SNS is for um but yeah so setting up a
99:31 is for um but yeah so setting up a budget is not too hard so there you
99:34 budget is not too hard so there you [Music]
99:37 [Music] go all right so now that we've set a
99:40 go all right so now that we've set a budget what I want to talk to you about
99:42 budget what I want to talk to you about is the free tier and the free tier is
99:44 is the free tier and the free tier is something that is available to you uh
99:45 something that is available to you uh for the first 12 months of a new adus
99:47 for the first 12 months of a new adus account and allows you to utilize adus
99:49 account and allows you to utilize adus services without incurring any cost to
99:52 services without incurring any cost to you and so it's in your advantage to
99:54 you and so it's in your advantage to utilize this free tier um as you are
99:56 utilize this free tier um as you are experimenting and learning cloud so if
99:59 experimenting and learning cloud so if you want to learn about all the
100:00 you want to learn about all the offerings what you do is go to Google
100:02 offerings what you do is go to Google type in adus free tier and you'll get
100:03 type in adus free tier and you'll get this page that explains all the sorts of
100:06 this page that explains all the sorts of things here so you can get uh 750 hours
100:09 things here so you can get uh 750 hours on ec2 RDS things like that there are
100:12 on ec2 RDS things like that there are stipulations in terms of what it would
100:14 stipulations in terms of what it would be so here this is a T2 or T3 micel mic
100:17 be so here this is a T2 or T3 micel mic uh micro running Linux Red Hat um or
100:21 uh micro running Linux Red Hat um or other type of os's okay so there are uh
100:24 other type of os's okay so there are uh details you have to read the fine print
100:26 details you have to read the fine print some services are only available for the
100:28 some services are only available for the first two months things like that so
100:31 first two months things like that so it's going to highly vary based on
100:33 it's going to highly vary based on service but it's worth giving us a read
100:35 service but it's worth giving us a read in areas that you are interested in now
100:37 in areas that you are interested in now the thing is is how do you know that you
100:39 the thing is is how do you know that you are still in the free tier or you go
100:41 are still in the free tier or you go outside of it and that's what I want to
100:43 outside of it and that's what I want to talk to you about right now so I am
100:45 talk to you about right now so I am actually in another ad account so no in
100:47 actually in another ad account so no in the top right corner it says brown. laap
100:48 the top right corner it says brown. laap or hyphen laptop exampro doco sometimes
100:51 or hyphen laptop exampro doco sometimes I will switch into different a accounts
100:53 I will switch into different a accounts during these fall alongs so I can best
100:55 during these fall alongs so I can best show you um you know the settings so if
100:58 show you um you know the settings so if you make your way over to
101:00 you make your way over to billing and actually I should show you
101:02 billing and actually I should show you up here if we go to my dealing B
101:04 up here if we go to my dealing B dashboard just trying to be consistent
101:06 dashboard just trying to be consistent here and you go to the left- hand side
101:08 here and you go to the left- hand side to billing preferences what you can do
101:10 to billing preferences what you can do is enable receive free tier usage alerts
101:13 is enable receive free tier usage alerts and then put your email in there and
101:14 and then put your email in there and save that and so turn on this feature to
101:16 save that and so turn on this feature to receive email alerts when your adabs
101:19 receive email alerts when your adabs service usage is approaching or exceeded
101:21 service usage is approaching or exceeded databus free tier usage limits if you
101:22 databus free tier usage limits if you wish to receive these alerts etc etc etc
101:26 wish to receive these alerts etc etc etc right and while you're there I want you
101:29 right and while you're there I want you to also checkbox receive billion alerts
101:32 to also checkbox receive billion alerts so I can show you how to set a billion
101:33 so I can show you how to set a billion uh a billi alert and AD us says you know
101:36 uh a billi alert and AD us says you know budgets are a new thing but bliing
101:38 budgets are a new thing but bliing alerts are still something that we use
101:40 alerts are still something that we use as of today so if you checkbox that on
101:42 as of today so if you checkbox that on we'll be able to see your cost if we go
101:45 we'll be able to see your cost if we go back here uh it should show you um it's
101:48 back here uh it should show you um it's because I'm out of the free tier on this
101:50 because I'm out of the free tier on this account but it would show you in the
101:52 account but it would show you in the alerts you know your usage there so
101:55 alerts you know your usage there so example here is if we scroll down this
101:56 example here is if we scroll down this is the documentation tracking your AIS
101:58 is the documentation tracking your AIS free tier usage you would see like a box
102:01 free tier usage you would see like a box like this and would say hey your free
102:02 like this and would say hey your free tier usage limit is here and you're over
102:05 tier usage limit is here and you're over it okay so that generally would show up
102:08 it okay so that generally would show up on this panel here but again I'm outside
102:10 on this panel here but again I'm outside of the free tier so I'm not seeing it
102:12 of the free tier so I'm not seeing it here um today okay so you know hopefully
102:17 here um today okay so you know hopefully that is clear um but yeah there you go
102:21 that is clear um but yeah there you go [Music]
102:25 [Music] all right so we created ourselves a
102:27 all right so we created ourselves a budget we're monitoring our free tier
102:30 budget we're monitoring our free tier but there's another way that we can
102:32 but there's another way that we can monitor our spend and that is through
102:33 monitor our spend and that is through building alerts or alarms and it is the
102:36 building alerts or alarms and it is the old way before uh we had it was budget
102:39 old way before uh we had it was budget this is the only way you could do it but
102:41 this is the only way you could do it but I still recommend it because there is a
102:42 I still recommend it because there is a bit more flexibility here with this
102:44 bit more flexibility here with this service and so I wanted to teach you
102:46 service and so I wanted to teach you early on so that you know it's available
102:48 early on so that you know it's available to you or if you want to play around
102:49 to you or if you want to play around with it in the future so what you'll do
102:51 with it in the future so what you'll do is go to the top here and type typ in
102:54 is go to the top here and type typ in cloudwatch and cloudwatch is one of
102:56 cloudwatch and cloudwatch is one of those Services where it's actually a
102:57 those Services where it's actually a collection of services so there's
102:59 collection of services so there's cloudwatch alarms cloudwatch logs
103:01 cloudwatch alarms cloudwatch logs cloudwatch metrics those are all
103:03 cloudwatch metrics those are all Individual Services and Abus loves to
103:06 Individual Services and Abus loves to update their interface so sometimes
103:08 update their interface so sometimes you'll be present with this option to uh
103:10 you'll be present with this option to uh change the latest interface I'm going to
103:12 change the latest interface I'm going to try out the new interface here um and
103:14 try out the new interface here um and that is one challenge with datab is you
103:16 that is one challenge with datab is you always have to expect that they're going
103:17 always have to expect that they're going to change the UI on you and you're going
103:19 to change the UI on you and you're going to have to work through it so just
103:21 to have to work through it so just understand that I try to keep my videos
103:22 understand that I try to keep my videos up to dat as best I can but part of the
103:25 up to dat as best I can but part of the challenge is getting used to that so
103:27 challenge is getting used to that so this is what they have today I don't
103:28 this is what they have today I don't know if they're going to stick with this
103:29 know if they're going to stick with this but this is what it looks like but what
103:31 but this is what it looks like but what I want you to do is make your way over
103:32 I want you to do is make your way over to alarms on the left hand
103:34 to alarms on the left hand side and notice that we actually have a
103:36 side and notice that we actually have a section just for billing which is
103:38 section just for billing which is interesting I don't remember them having
103:39 interesting I don't remember them having that before so it's new so uh here it
103:42 that before so it's new so uh here it says Abus Cloud watch help can help you
103:44 says Abus Cloud watch help can help you monitor the charges of Abus Bill
103:45 monitor the charges of Abus Bill remember that we had to turn that on get
103:48 remember that we had to turn that on get 10 free alarms with 1,000 free email
103:50 10 free alarms with 1,000 free email notifications each month as part of the
103:52 notifications each month as part of the free here so understand that if you
103:54 free here so understand that if you create billing alarms they do cost money
103:57 create billing alarms they do cost money um as well if you go over that limit but
103:59 um as well if you go over that limit but you sure get a lot 10 free alarms is
104:01 you sure get a lot 10 free alarms is quite a bit what we'll do is go ahead
104:03 quite a bit what we'll do is go ahead here and create ourselves alarm we're
104:04 here and create ourselves alarm we're going to go and choose a metric and so
104:07 going to go and choose a metric and so here are the options we can choose from
104:09 here are the options we can choose from and so we I think would like um billing
104:15 and so we I think would like um billing and see we can do buy service or total
104:17 and see we can do buy service or total estimated charge we're going to do a
104:18 estimated charge we're going to do a total estimated charge we can only
104:20 total estimated charge we can only select USD I've never seen any other
104:23 select USD I've never seen any other currency over there and so here we kind
104:25 currency over there and so here we kind of get this little graph where we can
104:26 of get this little graph where we can see stuff um but this is a lot more
104:28 see stuff um but this is a lot more powerful than budgets because you can do
104:30 powerful than budgets because you can do anomaly detection uh so like here it
104:33 anomaly detection uh so like here it will actually check base between a range
104:35 will actually check base between a range as opposed to just going through a
104:37 as opposed to just going through a particular value but what I'll do is
104:38 particular value but what I'll do is just set a value here like uh $50 right
104:43 just set a value here like uh $50 right so notice that it sets the line up here
104:45 so notice that it sets the line up here and this is my current spend here right
104:47 and this is my current spend here right and so back to anomaly detection this is
104:49 and so back to anomaly detection this is a lot smarter so uh the idea is that if
104:52 a lot smarter so uh the idea is that if something is outside inside this band of
104:54 something is outside inside this band of a certain amounts um then it would alert
104:56 a certain amounts um then it would alert okay but I'm going to go back here I'm
104:59 okay but I'm going to go back here I'm just going to set this to
105:00 just going to set this to $50 and that looks okay to me you can
105:03 $50 and that looks okay to me you can change the period 6 hours is fine um and
105:07 change the period 6 hours is fine um and there's additional configuration that's
105:09 there's additional configuration that's fine as well we're going to go ahead and
105:10 fine as well we're going to go ahead and hit next uh and so the idea is that um
105:13 hit next uh and so the idea is that um you know if it passes that red line it
105:15 you know if it passes that red line it will go to an in alarm State and then
105:18 will go to an in alarm State and then what it will do is uh we want to uh have
105:21 what it will do is uh we want to uh have it to trigger an s topic so I would
105:24 it to trigger an s topic so I would generally just create a new one here
105:26 generally just create a new one here we'll just say my billing
105:28 we'll just say my billing alarm Okay and then here we'll just set
105:31 alarm Okay and then here we'll just set the email Andre exam
105:33 the email Andre exam pro. and we will go ahead and create
105:36 pro. and we will go ahead and create that topic and so that is now set I
105:40 that topic and so that is now set I don't know if it would uh confirm it we
105:41 don't know if it would uh confirm it we might have to go to our email to confirm
105:43 might have to go to our email to confirm it so notice it says pending
105:44 it so notice it says pending confirmation so what it has done is it
105:46 confirmation so what it has done is it sent me out an email and it wants me to
105:49 sent me out an email and it wants me to click that link to confirm um that I
105:51 click that link to confirm um that I want to subscribe to it so I might just
105:53 want to subscribe to it so I might just do that offc screen to show you here
105:56 do that offc screen to show you here okay so I'm just going to pull up my
105:58 okay so I'm just going to pull up my email here just give me a
106:05 moment okay and so if I come back here this is the email that came in so I'm
106:06 this is the email that came in so I'm just going to confirm that subscription
106:08 just going to confirm that subscription says I'm confirmed good and if I refresh
106:11 says I'm confirmed good and if I refresh this page we can now see that that that
106:14 this page we can now see that that that is confirmed all right so we'll scroll
106:17 is confirmed all right so we'll scroll down here so we can uh trigger an
106:19 down here so we can uh trigger an autoscaling action so maybe you know if
106:21 autoscaling action so maybe you know if you have too many servers you say hey
106:23 you have too many servers you say hey the cost is too much shut down those
106:24 the cost is too much shut down those servers there's ec2 actions things like
106:27 servers there's ec2 actions things like that so these are kind of similar to um
106:29 that so these are kind of similar to um budgets right there's system manager
106:32 budgets right there's system manager actions I imagine all these things are
106:33 actions I imagine all these things are available in budgets as well but budgets
106:35 available in budgets as well but budgets just makes it a little bit easier to
106:37 just makes it a little bit easier to look at so I just say my simple building
106:39 look at so I just say my simple building alarm
106:42 alarm here we'll hit
106:44 here we'll hit next all right we'll hit create alarm
106:47 next all right we'll hit create alarm and there you go so billing alarms don't
106:49 and there you go so billing alarms don't have like forecasting and things like
106:51 have like forecasting and things like that um but you know they are they do
106:54 that um but you know they are they do have their own kind of special utility
106:56 have their own kind of special utility and so I utilize both okay so there we
106:58 and so I utilize both okay so there we go we'll just go back to our Management
107:00 go we'll just go back to our Management console move on to the next
107:01 console move on to the next [Music]
107:05 [Music] one so one of the strongest
107:07 one so one of the strongest recommendations that Abus gives you is
107:09 recommendations that Abus gives you is to say to set MFA on your adus root user
107:13 to say to set MFA on your adus root user account so that's something we're going
107:14 account so that's something we're going to do right now so make sure you're
107:16 to do right now so make sure you're logged into the root user account so I'm
107:17 logged into the root user account so I'm going to go log out as my IM user I'm
107:20 going to go log out as my IM user I'm going to go back and log in and I'm
107:23 going to go back and log in and I'm going to log in as my uh root user here
107:26 going to log in as my uh root user here so to do that no sometimes it will be
107:28 so to do that no sometimes it will be expanded as the I am user click and sign
107:31 expanded as the I am user click and sign into root user here we'll have root user
107:33 into root user here we'll have root user I'm going to go ahead and enter my email
107:35 I'm going to go ahead and enter my email that I used and if you do switch
107:38 that I used and if you do switch accounts frequently they will ask you
107:40 accounts frequently they will ask you these silly captures which drive me
107:41 these silly captures which drive me crazy but uh you know it happens you
107:44 crazy but uh you know it happens you probably won't encounter it as much as I
107:45 probably won't encounter it as much as I do and so I'm going to go ahead and grab
107:48 do and so I'm going to go ahead and grab my password here and paste it on in and
107:51 my password here and paste it on in and so now that I'm in what I want want to
107:53 so now that I'm in what I want want to do is make my way over to I
107:55 do is make my way over to I am and I'm going to go and look for
107:59 am and I'm going to go and look for users actually sorry just right here add
108:01 users actually sorry just right here add an MFA root user we're going to go ahead
108:04 an MFA root user we're going to go ahead and hit add
108:05 and hit add MFA all right and so that's going to
108:07 MFA all right and so that's going to bring us to this screen and so here we
108:09 bring us to this screen and so here we can activate our MFA and so we have a
108:12 can activate our MFA and so we have a few options here so we have virtual MFA
108:15 few options here so we have virtual MFA device u2f security key other Hardware
108:18 device u2f security key other Hardware like a uh Gem Gem gy Alto token so you
108:23 like a uh Gem Gem gy Alto token so you know I generally use this because I have
108:26 know I generally use this because I have a security key and I want to show you
108:27 a security key and I want to show you what I'm talking about so this is how I
108:30 what I'm talking about so this is how I log into my machine or my ad account
108:34 log into my machine or my ad account this is a security key an UB key that
108:35 this is a security key an UB key that sits on my desk I tape it so it doesn't
108:37 sits on my desk I tape it so it doesn't fall fall off the cord but the idea is
108:39 fall fall off the cord but the idea is that when I log in I have to press this
108:42 that when I log in I have to press this little button here to double confirm
108:44 little button here to double confirm before I get into my account uh but if
108:46 before I get into my account uh but if you don't have a security key you can
108:47 you don't have a security key you can just use a virtual MFA and all that
108:49 just use a virtual MFA and all that means is you're going to um use
108:52 means is you're going to um use something on your phone to log in so
108:54 something on your phone to log in so we'll click continue here and so it says
108:57 we'll click continue here and so it says install a compatible app on your mobile
108:59 install a compatible app on your mobile phone or device and so if you click and
109:01 phone or device and so if you click and open this what it will do is tell you
109:03 open this what it will do is tell you about some things that you can use um so
109:07 about some things that you can use um so if we scroll down to
109:08 if we scroll down to Virtual here they suggest uh if you have
109:11 Virtual here they suggest uh if you have Android iPhone so AI dual mobile last
109:14 Android iPhone so AI dual mobile last path Microsoft authenticator Google
109:16 path Microsoft authenticator Google Authenticator so Google Authenticator
109:18 Authenticator so Google Authenticator Microsoft authenticator and a I have all
109:20 Microsoft authenticator and a I have all those three installed um honestly aie
109:23 those three installed um honestly aie has the the nicest simplest um UI but
109:26 has the the nicest simplest um UI but I'm using Microsoft authen authenticator
109:29 I'm using Microsoft authen authenticator quite a bit so anyway whichever you want
109:31 quite a bit so anyway whichever you want to do it's fine but what we'll have to
109:32 to do it's fine but what we'll have to do is go back here and then it says use
109:35 do is go back here and then it says use your virtual MFA app on your device
109:37 your virtual MFA app on your device camera to scan your QR code so once you
109:40 camera to scan your QR code so once you have one of those apps installed like
109:42 have one of those apps installed like aie or whatever one you want what you're
109:45 aie or whatever one you want what you're going to do is open up the application
109:48 going to do is open up the application and I can't tell you exactly where it is
109:50 and I can't tell you exactly where it is but you'll have to hit add account in
109:52 but you'll have to hit add account in your in your app and then from there it
109:54 your in your app and then from there it will ask you to scan your QR code and so
109:58 will ask you to scan your QR code and so once you're ready you hit show The QR
110:00 once you're ready you hit show The QR code you hit scan the QR code on your
110:02 code you hit scan the QR code on your phone I'm holding my phone up to my my
110:05 phone I'm holding my phone up to my my um uh my computer screen here and it's
110:08 um uh my computer screen here and it's going to find it and I'm just going to
110:10 going to find it and I'm just going to take a moment here to rename the account
110:12 take a moment here to rename the account so I can tell what it is so I'm just
110:14 so I can tell what it is so I'm just naming it a
110:15 naming it a WS sandbox cuz that's what I call this
110:20 WS sandbox cuz that's what I call this account and I'm going to go ahead and
110:22 account and I'm going to go ahead and save that
110:23 save that and so now what I can do is enter uh two
110:25 and so now what I can do is enter uh two consecutive MFA codes now this always
110:27 consecutive MFA codes now this always confused me what they wanted here but
110:29 confused me what they wanted here but the idea is that you're going to see one
110:31 the idea is that you're going to see one code right whatever is on the screen
110:33 code right whatever is on the screen right now so I'm going to type in it it
110:34 right now so I'm going to type in it it says
110:35 says 734
110:36 734 051 and I'm going to wait until the new
110:40 051 and I'm going to wait until the new code shows up so there's like a timer in
110:42 code shows up so there's like a timer in all these apps and they go across the
110:44 all these apps and they go across the screen or they count down and so you
110:46 screen or they count down and so you have to wait for that to happen and so
110:48 have to wait for that to happen and so I'm just going to wait here a little bit
110:57 and once I get the new number here this one is
111:00 one is 07153 0 I'm going to hit assign MFA and
111:03 07153 0 I'm going to hit assign MFA and there we go and I can't tell you how
111:05 there we go and I can't tell you how many times I like messed that up because
111:07 many times I like messed that up because I didn't understand the consecutive
111:08 I didn't understand the consecutive numbers but you're just waiting for uh
111:10 numbers but you're just waiting for uh the number that's on the screen to enter
111:12 the number that's on the screen to enter it in and then enter the next one in to
111:13 it in and then enter the next one in to turn on MFA and so now your account is
111:16 turn on MFA and so now your account is protected and every time you log in
111:18 protected and every time you log in you're going to have to enter in MFA so
111:20 you're going to have to enter in MFA so let's log out and see what that looks
111:23 let's log out and see what that looks like so we'll go ahead and sign
111:26 like so we'll go ahead and sign in and uh again we'll put in our root
111:30 in and uh again we'll put in our root user account here we'll type in 74m
111:35 user account here we'll type in 74m 32t
111:36 32t submit and I need to go grab my password
111:39 submit and I need to go grab my password so that's in my password manager just
111:41 so that's in my password manager just give me a moment
111:47 here and now it wants the MFA code so this is in my phone and so I'm going to
111:49 this is in my phone and so I'm going to go enter it in so this one says 475
111:53 go enter it in so this one says 475 841 all right we'll hit
111:56 841 all right we'll hit submit okay and there we go so that's
111:58 submit okay and there we go so that's going to happen every single time we
112:00 going to happen every single time we want to log in uh I'm going to tell you
112:02 want to log in uh I'm going to tell you that if you get one of these they're so
112:04 that if you get one of these they're so much easier to use because you just
112:05 much easier to use because you just press the button okay so that's why I
112:07 press the button okay so that's why I have this because I cannot stand
112:09 have this because I cannot stand entering the code in time and time again
112:12 entering the code in time and time again um but you know those are your options
112:13 um but you know those are your options there
112:15 there [Music]
112:19 [Music] okay hey this is Andrew Brown from exam
112:21 okay hey this is Andrew Brown from exam Pro and we looking at the concept of
112:23 Pro and we looking at the concept of innovation waves so when we're talking
112:25 innovation waves so when we're talking about Innovation waves we're talking
112:26 about Innovation waves we're talking about krava or k waves which are
112:29 about krava or k waves which are hypothesized cyclik phenomena in the
112:32 hypothesized cyclik phenomena in the global World economy and the phenomenon
112:35 global World economy and the phenomenon is closely connected with technology
112:36 is closely connected with technology life cycles so here is an example where
112:39 life cycles so here is an example where each wave is irreversibly changes the
112:41 each wave is irreversibly changes the society on a global scale and if you
112:44 society on a global scale and if you look across the top we can kind of see
112:46 look across the top we can kind of see what they're talking about so we have
112:47 what they're talking about so we have steam engine cotton uh Railway and steel
112:50 steam engine cotton uh Railway and steel electric engineering chemistry
112:53 electric engineering chemistry pet chemicals automobiles information
112:55 pet chemicals automobiles information technology and so the idea is that cloud
112:58 technology and so the idea is that cloud technology is the latest wave and I'm
113:01 technology is the latest wave and I'm not sure if you'd fit web 3 in there as
113:03 not sure if you'd fit web 3 in there as well ml AI but maybe they're all part of
113:06 well ml AI but maybe they're all part of the same wave or they're separate waves
113:08 the same wave or they're separate waves but generally they're broken up based on
113:10 but generally they're broken up based on this
113:11 this prde here where it says perspective
113:14 prde here where it says perspective recession depression and movement uh
113:16 recession depression and movement uh Improvement sorry and so this is the
113:18 Improvement sorry and so this is the common pattern of wave where we see a
113:20 common pattern of wave where we see a change of supply and demand and so if
113:22 change of supply and demand and so if we're seeing this we know that we are in
113:24 we're seeing this we know that we are in a wave and where we are in a wave
113:27 a wave and where we are in a wave [Music]
113:30 [Music] okay hey this is Andrew Brown from exam
113:33 okay hey this is Andrew Brown from exam Pro and we are looking at the concept of
113:34 Pro and we are looking at the concept of a burning platform so burning platform
113:36 a burning platform so burning platform is a term used when a company abandons
113:38 is a term used when a company abandons old technology for new technology with
113:41 old technology for new technology with the uncertainty of success and can be
113:43 the uncertainty of success and can be motivated by fear that the
113:44 motivated by fear that the organization's future surv uh survival
113:46 organization's future surv uh survival hinges on digital transformation and
113:49 hinges on digital transformation and just to kind of give you a visualization
113:50 just to kind of give you a visualization here is a literal burning platform
113:52 here is a literal burning platform platform so imagine you have to jump to
113:54 platform so imagine you have to jump to it jump from it to make a change so um
113:57 it jump from it to make a change so um you know burning platform could be you
113:59 you know burning platform could be you know stop using on Prem and start using
114:02 know stop using on Prem and start using cloud or maybe it going from Cloud to
114:04 cloud or maybe it going from Cloud to web 3 um and that's generally the idea
114:06 web 3 um and that's generally the idea when we talk about a burning
114:09 when we talk about a burning [Music]
114:12 [Music] platform so I just want to quickly show
114:15 platform so I just want to quickly show you that digital transformation
114:16 you that digital transformation checklist that I mentioned and the way
114:18 checklist that I mentioned and the way you can get to it is by typing in
114:20 you can get to it is by typing in digital transformation aw us and so it
114:23 digital transformation aw us and so it should bring you to the public sector
114:24 should bring you to the public sector page and here it is so we click there
114:26 page and here it is so we click there and all it is is a PDF uh so it's not
114:29 and all it is is a PDF uh so it's not new it's from 2017 but that doesn't mean
114:31 new it's from 2017 but that doesn't mean that it's not uh valid anymore uh it's
114:33 that it's not uh valid anymore uh it's just that that's when it was made so we
114:35 just that that's when it was made so we scroll on down and we can see
114:36 scroll on down and we can see transforming vision and so we have a
114:38 transforming vision and so we have a checklist there so if we click into this
114:40 checklist there so if we click into this uh we can see things like communicate a
114:42 uh we can see things like communicate a vision of what success looks like Define
114:44 vision of what success looks like Define a clear governance strategy including
114:46 a clear governance strategy including the framework of achieving goals uh
114:48 the framework of achieving goals uh build a cross functional team identify
114:50 build a cross functional team identify tech technical uh part ERS they talk
114:53 tech technical uh part ERS they talk about Shifting the culture and then down
114:55 about Shifting the culture and then down below I assume that this one is related
114:57 below I assume that this one is related to that one it's unusual because you
114:59 to that one it's unusual because you know they just have a checklist here but
115:01 know they just have a checklist here but then they have a sub checklist which
115:03 then they have a sub checklist which must be clear to that so reorganize
115:05 must be clear to that so reorganize staff into smaller teams things like
115:06 staff into smaller teams things like that so it's not super complicated
115:08 that so it's not super complicated you'll see each category go go Cloud
115:10 you'll see each category go go Cloud native they'll have a
115:11 native they'll have a checklist um you know and if you are at
115:14 checklist um you know and if you are at at the executive level or the sales
115:16 at the executive level or the sales level or trying to convince your VPS or
115:18 level or trying to convince your VPS or stuff like that give this a read it
115:19 stuff like that give this a read it might give you something uh useful in
115:21 might give you something uh useful in the end uh to help better communicate
115:24 the end uh to help better communicate that transformation for you
115:26 that transformation for you [Music]
115:29 [Music] okay hey this is Andrew Brown from exam
115:32 okay hey this is Andrew Brown from exam Pro and we are looking at the evolution
115:34 Pro and we are looking at the evolution of computing power so what is computing
115:36 of computing power so what is computing power it's the throughput measured at
115:37 power it's the throughput measured at which a computer complete computational
115:40 which a computer complete computational tasks and so uh what we're pretty much
115:42 tasks and so uh what we're pretty much used to right as of these days is
115:44 used to right as of these days is general computing so good example here
115:46 general computing so good example here would be a Zeon CPU processor uh that's
115:49 would be a Zeon CPU processor uh that's more of a high-end processor not
115:51 more of a high-end processor not something you'd find your home computer
115:53 something you'd find your home computer but when we're talking about data
115:54 but when we're talking about data centers specifically uh um you know
115:56 centers specifically uh um you know inabus data centers Zeon CPU processors
115:59 inabus data centers Zeon CPU processors or what you're going to come across uh
116:01 or what you're going to come across uh then came along a new type of compute
116:03 then came along a new type of compute which is GPU Computing um when we're
116:05 which is GPU Computing um when we're talking about Google uh Cloud they have
116:08 talking about Google uh Cloud they have tensor Computing and so this is where I
116:10 tensor Computing and so this is where I get the 50 times faster based on that
116:12 get the 50 times faster based on that metric and so I didn't have an exact
116:13 metric and so I didn't have an exact metric here for AWS as um solution for
116:16 metric here for AWS as um solution for this mid tier of computing power so I
116:19 this mid tier of computing power so I just borrowed that 50 times there but
116:20 just borrowed that 50 times there but the idea is that GP Computing or tensor
116:24 the idea is that GP Computing or tensor Computing uh is is 50 times faster than
116:27 Computing uh is is 50 times faster than traditional CPU and generally that's
116:29 traditional CPU and generally that's going to be used for uh very specialized
116:31 going to be used for uh very specialized tasks when you're doing machine learning
116:34 tasks when you're doing machine learning or AI so it's not something you're going
116:35 or AI so it's not something you're going to uh be doing for your regular uh web
116:38 to uh be doing for your regular uh web workloads but just understand that all
116:41 workloads but just understand that all of these uh fits so we're not getting
116:42 of these uh fits so we're not getting rid of general computing we're just
116:44 rid of general computing we're just adding uh new levels to compute then
116:46 adding uh new levels to compute then there's the latest which is uh Quantum
116:49 there's the latest which is uh Quantum Computing and so here we have an example
116:51 Computing and so here we have an example of the rig R retti 16q Aspen 4 and so it
116:57 of the rig R retti 16q Aspen 4 and so it literally looks like it's out of um
116:59 literally looks like it's out of um science fiction and this thing is like a
117:02 science fiction and this thing is like a 100 million times faster it is super
117:05 100 million times faster it is super Cutting Edge and we don't even know
117:06 Cutting Edge and we don't even know exactly how it works and there's not
117:08 exactly how it works and there's not even anything that's very applicable
117:10 even anything that's very applicable that we can use this for but the idea is
117:12 that we can use this for but the idea is that we're not done with the evolution
117:14 that we're not done with the evolution of of computing power things are going
117:16 of of computing power things are going to get a lot faster once we solve this
117:18 to get a lot faster once we solve this last one here and so a service offering
117:21 last one here and so a service offering here would be for general computing
117:23 here would be for general computing you're looking elastic compute Cloud ec2
117:25 you're looking elastic compute Cloud ec2 so we have a variety of different uh
117:27 so we have a variety of different uh instance types and they're all going to
117:29 instance types and they're all going to have different types of Hardware with
117:30 have different types of Hardware with different types of general computing um
117:32 different types of general computing um for GPU Computing this is a specialized
117:35 for GPU Computing this is a specialized chip that adus has produced called the
117:37 chip that adus has produced called the adus um and I don't know how to say it
117:39 adus um and I don't know how to say it but we'll just abbreviate it to infer so
117:42 but we'll just abbreviate it to infer so adus infer chip um and this was designed
117:45 adus infer chip um and this was designed as a direct competitor to uh gcps uh
117:48 as a direct competitor to uh gcps uh tensor Computing uh unit the t uh TPU um
117:52 tensor Computing uh unit the t uh TPU um so this is intended for AI ml workloads
117:54 so this is intended for AI ml workloads but it works with not just um tensor
117:57 but it works with not just um tensor flow but it works with any machine
117:59 flow but it works with any machine learning framework so that is one
118:01 learning framework so that is one advantage it has over uh tpus um and
118:04 advantage it has over uh tpus um and then the last one here is adus brackets
118:06 then the last one here is adus brackets so you can actually use quantum
118:07 so you can actually use quantum Computing as a service on adus you uh as
118:10 Computing as a service on adus you uh as of even today um the way adus is able to
118:13 of even today um the way adus is able to do this is they work with Caltech so
118:15 do this is they work with Caltech so that's the California
118:16 that's the California technology um University or Institute
118:19 technology um University or Institute I'm not sure the name of it there um so
118:21 I'm not sure the name of it there um so it's not exactly adus producing this but
118:23 it's not exactly adus producing this but adus is doing this as a partnership to
118:25 adus is doing this as a partnership to give Quantum Computing accessible to you
118:33 okay so I'm here in the ab console because I just want to prove to you that
118:35 because I just want to prove to you that you can use quantum Computing on AWS
118:38 you can use quantum Computing on AWS it's that accessible so all you'd have
118:39 it's that accessible so all you'd have to do is go to the top here type in
118:41 to do is go to the top here type in bracket uh and then you make it over to
118:43 bracket uh and then you make it over to Amazon bracket and so here uh you can
118:46 Amazon bracket and so here uh you can like set up Quantum tasks the first time
118:48 like set up Quantum tasks the first time you set it up you got to uh go through
118:50 you set it up you got to uh go through this process here um I think I have to
118:53 this process here um I think I have to go through this onboarding to be able to
118:54 go through this onboarding to be able to show you the next steps so I'm going to
118:55 show you the next steps so I'm going to go ahead and enable bracket in this abis
118:59 go ahead and enable bracket in this abis account okay and I'm not going to launch
119:01 account okay and I'm not going to launch anything I'm just going to try just kind
119:03 anything I'm just going to try just kind of show you a little bit of what is
119:05 of show you a little bit of what is accessible to you because it's not super
119:07 accessible to you because it's not super exciting but the fact that you can do it
119:09 exciting but the fact that you can do it is kind of interesting so here I am on
119:11 is kind of interesting so here I am on the inside here and we have all these
119:13 the inside here and we have all these different types of quantum Computing so
119:16 different types of quantum Computing so d-wave I know I I NQ uh retti things
119:21 d-wave I know I I NQ uh retti things like that and then down below these are
119:23 like that and then down below these are the quantum processing units the qpu and
119:26 the quantum processing units the qpu and then down below you have the simulators
119:28 then down below you have the simulators so you can kind of simulate uh these
119:30 so you can kind of simulate uh these things here um so I think that's kind of
119:33 things here um so I think that's kind of interesting uh but in terms of the cost
119:36 interesting uh but in terms of the cost like if you scroll on down here um so
119:39 like if you scroll on down here um so abis bracket is part of Theus free tier
119:40 abis bracket is part of Theus free tier it gives you one free hour of quantum
119:42 it gives you one free hour of quantum circuit simulation time per month during
119:44 circuit simulation time per month during the first 12 months so it's free to do
119:47 the first 12 months so it's free to do uh a circuit simulation but if you
119:50 uh a circuit simulation but if you actually want to run it on the actual
119:52 actually want to run it on the actual Hardware you can see the cost there's
119:54 Hardware you can see the cost there's the per task price the per shot price
119:56 the per task price the per shot price things like that uh what could you do
119:58 things like that uh what could you do with this I don't know there's things
120:00 with this I don't know there's things called like quad bits or something like
120:01 called like quad bits or something like that and I can't imagine that you're
120:03 that and I can't imagine that you're going to be doing anything useful but I
120:04 going to be doing anything useful but I think it's just more so like you are
120:06 think it's just more so like you are sending out quad bits or whatever they
120:08 sending out quad bits or whatever they are and you're observing them um but
120:10 are and you're observing them um but what you could do with them I have no
120:11 what you could do with them I have no idea but it's just exciting that you can
120:13 idea but it's just exciting that you can do that I didn't have any spend just by
120:16 do that I didn't have any spend just by activating that I'm just kind of just
120:17 activating that I'm just kind of just showing you there okay
120:19 showing you there okay [Music]
120:24 [Music] hey this is Andrew Brown from exam Pro
120:26 hey this is Andrew Brown from exam Pro and we are looking at the benefits of
120:28 and we are looking at the benefits of cloud and this is a summary of reasons
120:30 cloud and this is a summary of reasons why an organization would uh consider
120:32 why an organization would uh consider adopting or migrating to utilizing
120:34 adopting or migrating to utilizing public cloud and so we'll quickly go
120:36 public cloud and so we'll quickly go through the list here uh because in the
120:38 through the list here uh because in the followup slides we actually go into them
120:40 followup slides we actually go into them a bit more detailed so we have agility
120:42 a bit more detailed so we have agility page a go economy of scale Global reach
120:45 page a go economy of scale Global reach security reliability High availability
120:48 security reliability High availability scalability um and elasticity so the
120:52 scalability um and elasticity so the thing is is that eight of us had this
120:54 thing is is that eight of us had this before it was called the six advantages
120:55 before it was called the six advantages of cloud but they have reworked it to
120:57 of cloud but they have reworked it to include additional items um and so where
121:00 include additional items um and so where you see these uh sub bullets here those
121:03 you see these uh sub bullets here those are the original six as you see 1 2 3 4
121:06 are the original six as you see 1 2 3 4 five six and so I kind of just put them
121:08 five six and so I kind of just put them where they kind of uh fall under the new
121:10 where they kind of uh fall under the new categories there and you'll notice that
121:12 categories there and you'll notice that has included High availability
121:14 has included High availability elasticity reliability and security as
121:17 elasticity reliability and security as uh new on here okay and so the thing is
121:21 uh new on here okay and so the thing is is that
121:22 is that um I have always always even in my
121:25 um I have always always even in my original uh uh I think in my original
121:27 original uh uh I think in my original cloud practitioner had Cloud
121:29 cloud practitioner had Cloud architecture as a separate section and
121:31 architecture as a separate section and included all these things in here so
121:32 included all these things in here so it's a great thing to see that abis has
121:34 it's a great thing to see that abis has included it um but in terms of how I
121:37 included it um but in terms of how I organized this course we're not going to
121:39 organized this course we're not going to cover them in this section because I
121:41 cover them in this section because I have the cloud architecture section so
121:42 have the cloud architecture section so just understand that we will come to
121:44 just understand that we will come to those eventually and I would just say
121:46 those eventually and I would just say that adab us is still missing something
121:47 that adab us is still missing something on this list which is Fault tolerance so
121:50 on this list which is Fault tolerance so you know my list like this except I
121:52 you know my list like this except I would add fault tolerance to it so you
121:55 would add fault tolerance to it so you have everything there um and Disaster
121:57 have everything there um and Disaster Recovery okay so the benefits of cloud
122:00 Recovery okay so the benefits of cloud is a reworking expansion of the six
122:01 is a reworking expansion of the six advantages of the cloud and we will look
122:03 advantages of the cloud and we will look at the original six advantages um and
122:05 at the original six advantages um and then look at another one that is more of
122:08 then look at another one that is more of a generalized one that I I've used
122:09 a generalized one that I I've used across my courses so that we fully
122:12 across my courses so that we fully understand the benefits
122:13 understand the benefits [Music]
122:17 [Music] okay all right let's take a look here at
122:19 okay all right let's take a look here at the six advantages to Cloud defined by a
122:22 the six advantages to Cloud defined by a and so these are still uh part of 's
122:24 and so these are still uh part of 's marketing Pages um but you know it's
122:27 marketing Pages um but you know it's interesting because you can't find the
122:28 interesting because you can't find the benefits of the cloud in a single page
122:30 benefits of the cloud in a single page on any at least the time of making this
122:32 on any at least the time of making this so there's a bit of Disconnect between
122:34 so there's a bit of Disconnect between the um exam guide and the actual
122:36 the um exam guide and the actual marketing material but that's okay I
122:38 marketing material but that's okay I fill it all in for you so you know I'm
122:40 fill it all in for you so you know I'm just again noting that the six advantage
122:41 just again noting that the six advantage of cloud was the original description
122:43 of cloud was the original description for cloud benefits and we'll go through
122:45 for cloud benefits and we'll go through them okay so the first is trade Capital
122:47 them okay so the first is trade Capital expense for variable variable expense so
122:49 expense for variable variable expense so you can pay on demand meaning that
122:51 you can pay on demand meaning that there's is no upfront cost and you pay
122:53 there's is no upfront cost and you pay for only what you consume or you pay by
122:55 for only what you consume or you pay by the hour minutes or seconds so instead
122:57 the hour minutes or seconds so instead of paying for upfront costs of data
122:59 of paying for upfront costs of data centers and servers the next is benefit
123:01 centers and servers the next is benefit from uh massive Eon uh economies of
123:04 from uh massive Eon uh economies of scale so you are sharing the cost with
123:07 scale so you are sharing the cost with other customers to get unbeatable
123:08 other customers to get unbeatable savings hundreds of thousands of
123:10 savings hundreds of thousands of customers utilizing a fraction of your
123:11 customers utilizing a fraction of your server stop guessing capacity so scale
123:14 server stop guessing capacity so scale up or down to meet the current needs
123:16 up or down to meet the current needs launch and Destroy Services whenever so
123:18 launch and Destroy Services whenever so instead of paying for idle or
123:19 instead of paying for idle or underutilized servers we have increase
123:22 underutilized servers we have increase Speed and Agility so launch resources
123:24 Speed and Agility so launch resources within a few clicks and minutes instead
123:25 within a few clicks and minutes instead of waiting days or weeks of your it to
123:28 of waiting days or weeks of your it to implement the solution on premise we
123:30 implement the solution on premise we have stopped spending money on running
123:31 have stopped spending money on running and maintaining data centers so focus on
123:34 and maintaining data centers so focus on your customers developing and
123:35 your customers developing and configuring applications so instead of
123:37 configuring applications so instead of operations such as racking stacking and
123:40 operations such as racking stacking and powering servers the last is Go Global
123:42 powering servers the last is Go Global in minutes so deploy your app in
123:44 in minutes so deploy your app in multiple regions around the world with a
123:46 multiple regions around the world with a few clicks provide load latency and a
123:48 few clicks provide load latency and a better experience for your customers at
123:49 better experience for your customers at minimal cost the six advantage of the
123:51 minimal cost the six advantage of the cloud still apply and um I like to
123:54 cloud still apply and um I like to include them here because they just have
123:56 include them here because they just have a different kind of lens or or or uh
124:00 a different kind of lens or or or uh angle when you're looking at this stuff
124:02 angle when you're looking at this stuff and so we've looked at the six
124:03 and so we've looked at the six advantages of cloud and now let's take a
124:05 advantages of cloud and now let's take a look at the next slide my reworking of
124:07 look at the next slide my reworking of the six advantage of the cloud to be
124:09 the six advantage of the cloud to be more generalized
124:10 more generalized [Music]
124:13 [Music] okay all right I just wanted to show you
124:15 okay all right I just wanted to show you where that six advantages of cloud
124:17 where that six advantages of cloud computing comes from it's part of the
124:18 computing comes from it's part of the itus documentation so I typed it in here
124:21 itus documentation so I typed it in here and you can see that it is still around
124:23 and you can see that it is still around uh and so it's unusual because this used
124:25 uh and so it's unusual because this used to be part of the marketing website it
124:27 to be part of the marketing website it had those nice little Graphics um but
124:29 had those nice little Graphics um but for whatever reason it's over here now
124:31 for whatever reason it's over here now in the overview of Amazon web services
124:34 in the overview of Amazon web services and by the way if you're starting
124:35 and by the way if you're starting starting out with adabs this is a very
124:37 starting out with adabs this is a very light read but it is a good read uh to
124:39 light read but it is a good read uh to get started with we obviously cover all
124:41 get started with we obviously cover all this stuff in the course um but you know
124:43 this stuff in the course um but you know maybe you'll get something different
124:44 maybe you'll get something different here but the idea is that Abus has
124:46 here but the idea is that Abus has definitely expanded on this but for
124:48 definitely expanded on this but for whatever reason this documentation
124:49 whatever reason this documentation hasn't changed so just understand that I
124:51 hasn't changed so just understand that I polyfilled that for you in this course
124:54 polyfilled that for you in this course [Music]
124:57 [Music] okay all right so this is the seven
125:00 okay all right so this is the seven advantages to Cloud I said six but I
125:02 advantages to Cloud I said six but I meant to say seven and so um you know
125:04 meant to say seven and so um you know since I've created fundamental courses
125:06 since I've created fundamental courses for all the Clusters providers I started
125:08 for all the Clusters providers I started to notice kind of a trend and so what I
125:10 to notice kind of a trend and so what I did is I normalized it into my own seven
125:13 did is I normalized it into my own seven advantages and this actually Maps up
125:16 advantages and this actually Maps up really well to the new benefits of the
125:18 really well to the new benefits of the cloud so it looks like OS was thinking
125:20 cloud so it looks like OS was thinking the same as I was
125:22 the same as I was um with the exception of those Cloud
125:23 um with the exception of those Cloud architect stuff which I keep in a
125:25 architect stuff which I keep in a separate section but let's go through it
125:27 separate section but let's go through it and see what is here so the first is
125:29 and see what is here so the first is cost effective you pay for what you
125:30 cost effective you pay for what you consume no upfront cost on demand
125:33 consume no upfront cost on demand pricing so pay as you go P YG with
125:35 pricing so pay as you go P YG with thousands of customers sharing the on uh
125:38 thousands of customers sharing the on uh sharing the cost of resources adabs used
125:40 sharing the cost of resources adabs used to refer to this always as on demand
125:42 to refer to this always as on demand pricing and Azure always said pay as you
125:44 pricing and Azure always said pay as you go and so it looks like adus now uses
125:47 go and so it looks like adus now uses both on demand and pay as you go to
125:49 both on demand and pay as you go to describe them which is great um but
125:51 describe them which is great um but there you you go then we have Global so
125:53 there you you go then we have Global so launch workloads anywhere in the world
125:55 launch workloads anywhere in the world just choose a region it's secure so
125:57 just choose a region it's secure so cloud provider takes care of physical
125:59 cloud provider takes care of physical security cloud services can be secured
126:01 security cloud services can be secured by default or you have the ability to
126:03 by default or you have the ability to configure access down to a granular
126:05 configure access down to a granular level uh it's reliable so data backup
126:08 level uh it's reliable so data backup Disaster Recovery data replication fault
126:10 Disaster Recovery data replication fault tolerance it's scalable increase or
126:12 tolerance it's scalable increase or decrease resources and services based on
126:13 decrease resources and services based on demand uh elastic so automate scaling
126:16 demand uh elastic so automate scaling during spikes and drop in demand current
126:18 during spikes and drop in demand current so the underlying hardware and and
126:20 so the underlying hardware and and managed uhof software is patched
126:22 managed uhof software is patched upgraded and replaced by the cloud
126:24 upgraded and replaced by the cloud provider without interruption to you so
126:26 provider without interruption to you so I think this is one that isn't on the
126:27 I think this is one that isn't on the benefits of the cloud which is a really
126:29 benefits of the cloud which is a really good one um but uh yeah that's the
126:33 good one um but uh yeah that's the [Music]
126:36 [Music] seven hey this is Angie Brown and we're
126:38 seven hey this is Angie Brown and we're taking a look at Aus Global
126:40 taking a look at Aus Global infrastructure so what is it well the
126:42 infrastructure so what is it well the adus global infrastructure is a globally
126:44 adus global infrastructure is a globally distributed hardware and data centers
126:47 distributed hardware and data centers that are physically networked together
126:48 that are physically networked together to act as one large resource for the end
126:50 to act as one large resource for the end customers so what does that mean well if
126:52 customers so what does that mean well if you look at the globe on the right hand
126:54 you look at the globe on the right hand side and that Globe is really cool
126:55 side and that Globe is really cool because adab us used to have a website
126:57 because adab us used to have a website where you could uh see a 3D uh globe and
127:00 where you could uh see a 3D uh globe and see where all their resources are for
127:02 see where all their resources are for whatever reason they took it down but I
127:03 whatever reason they took it down but I still have the screenshot of it but the
127:05 still have the screenshot of it but the idea is that um the global
127:07 idea is that um the global infrastructure represents all that
127:09 infrastructure represents all that hardware and the connectivity between
127:10 hardware and the connectivity between that Hardware around the world so what
127:13 that Hardware around the world so what kind of resources are we talking about
127:15 kind of resources are we talking about we're talking about regions we're
127:17 we're talking about regions we're talking about availability zones direct
127:19 talking about availability zones direct connections uh pops also known as as
127:21 connections uh pops also known as as point of presence local zones wavelength
127:24 point of presence local zones wavelength zones uh and we should point out that
127:26 zones uh and we should point out that Abus has millions of active users uh or
127:28 Abus has millions of active users uh or customers and tens of thousands of
127:30 customers and tens of thousands of Partners globally so they really are uh
127:33 Partners globally so they really are uh kind of everywhere um and if you're
127:35 kind of everywhere um and if you're wondering well what are all these
127:36 wondering well what are all these resources that's what we're going to get
127:37 resources that's what we're going to get into next we're going to break down what
127:39 into next we're going to break down what all these particular resources are
127:41 all these particular resources are because you definitely need to know what
127:42 because you definitely need to know what they are but hopefully that gives you at
127:44 they are but hopefully that gives you at a high level that adus has this thing
127:47 a high level that adus has this thing called Global infrastructure okay
127:50 called Global infrastructure okay [Music]
127:54 [Music] hey this is Andrew Brown and we are on
127:55 hey this is Andrew Brown and we are on the marketing website for adabs under
127:57 the marketing website for adabs under Global infrastructure and this is a
127:59 Global infrastructure and this is a great way if you want to explore more
128:01 great way if you want to explore more and make sense of that Global
128:03 and make sense of that Global infrastructure so if we scroll on down
128:05 infrastructure so if we scroll on down here we have a nice map and it's kind of
128:06 here we have a nice map and it's kind of indicating as to where those regions are
128:09 indicating as to where those regions are notice that there is uh ones in red
128:11 notice that there is uh ones in red which are coming soon the Canada West
128:13 which are coming soon the Canada West they've been talking about that for I
128:14 they've been talking about that for I think a couple years now so still
128:15 think a couple years now so still waiting for those but you know just like
128:17 waiting for those but you know just like every cloud service provider they're
128:19 every cloud service provider they're always expanding looks like we can get a
128:20 always expanding looks like we can get a full list here here um and it should
128:22 full list here here um and it should indicate where when they launched and if
128:25 indicate where when they launched and if they're launching more things so you
128:27 they're launching more things so you know that is a nice little list uh that
128:30 know that is a nice little list uh that we can get access to but if we go all
128:32 we can get access to but if we go all the way to the top across the top we can
128:34 the way to the top across the top we can go to Regions and azs uh and this is
128:36 go to Regions and azs uh and this is where we should get better information
128:38 where we should get better information this is definitely different from before
128:40 this is definitely different from before and I don't think the top of canidate is
128:41 and I don't think the top of canidate is supposed to look like that but uh I
128:43 supposed to look like that but uh I guess it's the best that they can do so
128:46 guess it's the best that they can do so uh what I want to point out on these
128:47 uh what I want to point out on these pages is uh the terms of uh the number
128:50 pages is uh the terms of uh the number of resources so I'm just going to bump
128:52 of resources so I'm just going to bump up the font because it's a little bit
128:53 up the font because it's a little bit small even for me if we go on down below
128:56 small even for me if we go on down below here you can see that it's describing um
128:59 here you can see that it's describing um let's say a particular region so here in
129:01 let's say a particular region so here in Canada we can see uh we have three
129:03 Canada we can see uh we have three availability zones and when it launched
129:06 availability zones and when it launched sometimes they have these Asters on here
129:07 sometimes they have these Asters on here so it says located in the Montreal uh
129:10 so it says located in the Montreal uh metropolian area so that's a good
129:12 metropolian area so that's a good indicator because central Canada could
129:13 indicator because central Canada could mean Toronto could mean Winnipeg so
129:15 mean Toronto could mean Winnipeg so that's why they put the asterisk on
129:17 that's why they put the asterisk on there um but just notice that what
129:20 there um but just notice that what you'll usually see for availability
129:22 you'll usually see for availability zones you'll never see anything beyond
129:23 zones you'll never see anything beyond six I'm not sure why but that seems to
129:25 six I'm not sure why but that seems to be the max usually when a region
129:27 be the max usually when a region launches it should have three
129:28 launches it should have three availability availability zones I think
129:31 availability availability zones I think in the past there might have been some
129:33 in the past there might have been some that did not have um at least three and
129:35 that did not have um at least three and the reason why it's important to have
129:37 the reason why it's important to have three in a zone is that is how we get
129:39 three in a zone is that is how we get high availability uh the way you do that
129:42 high availability uh the way you do that is you should have um let's say we're
129:43 is you should have um let's say we're talking about compute that compute
129:45 talking about compute that compute should be um running redundantly into
129:47 should be um running redundantly into two other uh data centers in your region
129:50 two other uh data centers in your region to ensure um that you have up time in
129:52 to ensure um that you have up time in case the other two go out so just make
129:55 case the other two go out so just make note of that if you're coming from Azure
129:57 note of that if you're coming from Azure Azure uh will launch things without
129:59 Azure uh will launch things without having all of their uh zones uh gcp is
130:03 having all of their uh zones uh gcp is really good where they'll always at
130:04 really good where they'll always at least have three so uh each provider
130:06 least have three so uh each provider Works a little bit differently there um
130:09 Works a little bit differently there um but yeah you can see here for North
130:11 but yeah you can see here for North America we just scroll through here you
130:12 America we just scroll through here you can find your particular area and look
130:15 can find your particular area and look at the map uh and wonder why it's so
130:19 at the map uh and wonder why it's so distorted but yeah hopefully that gives
130:20 distorted but yeah hopefully that gives you kind of an idea there and if you
130:22 you kind of an idea there and if you want to explore any of these other uh
130:24 want to explore any of these other uh particular offerings you absolutely can
130:26 particular offerings you absolutely can of course we do cover in the course so
130:27 of course we do cover in the course so it's not really necessary to do that but
130:29 it's not really necessary to do that but I thought uh it'd be nice to show you
130:31 I thought uh it'd be nice to show you this page okay
130:33 this page okay [Music]
130:37 [Music] ciao hey this is Andrew Brown from exam
130:39 ciao hey this is Andrew Brown from exam Pro and we are taking a look at a
130:41 Pro and we are taking a look at a regions and regions are geographically
130:43 regions and regions are geographically distinct locations consisting of one or
130:45 distinct locations consisting of one or more availability Zone and so here is a
130:48 more availability Zone and so here is a world map showing you all the regions
130:50 world map showing you all the regions that abos has in the world and the blue
130:52 that abos has in the world and the blue ones represent regions that are already
130:54 ones represent regions that are already available to you and the orange ones
130:56 available to you and the orange ones represent ones that adus is planning to
130:58 represent ones that adus is planning to open so adus is always expanding their
131:00 open so adus is always expanding their infrastructure uh in the world so always
131:02 infrastructure uh in the world so always expect there to be uh more upcoming ones
131:05 expect there to be uh more upcoming ones every region is physically isolated from
131:07 every region is physically isolated from independent of every other region in
131:09 independent of every other region in terms of location Power and Water Supply
131:12 terms of location Power and Water Supply and the most important region that you
131:13 and the most important region that you should give attention to Is Us East one
131:16 should give attention to Is Us East one uh in particular so this is Northern
131:18 uh in particular so this is Northern Virginia it was ad's first region where
131:20 Virginia it was ad's first region where we saw the launch of SQ us and S3 uh and
131:24 we saw the launch of SQ us and S3 uh and there are a lot of uh special use cases
131:26 there are a lot of uh special use cases where things only work in Us East ones
131:28 where things only work in Us East ones and we'll find that out here in a moment
131:30 and we'll find that out here in a moment what I do want to show you is what it
131:31 what I do want to show you is what it looks like for an architectural diagram
131:33 looks like for an architectural diagram when you are seeing a region so notice
131:36 when you are seeing a region so notice that we have this um uh little flag here
131:38 that we have this um uh little flag here it says Us East one US West one and
131:41 it says Us East one US West one and inside of it we have an E2 instance so
131:42 inside of it we have an E2 instance so that is going to represent a region in
131:44 that is going to represent a region in our architectural diagrams uh but let's
131:46 our architectural diagrams uh but let's look at some of the facts here and
131:48 look at some of the facts here and understand why Us East or Us East one is
131:50 understand why Us East or Us East one is so important so each region generally
131:52 so important so each region generally has three availability zones and that is
131:55 has three availability zones and that is by intention and we will talk about that
131:57 by intention and we will talk about that when we get to the availability Zone
131:58 when we get to the availability Zone section some new users are limited to
132:00 section some new users are limited to two or uh to two uh but generally
132:03 two or uh to two uh but generally there's always three okay new Services
132:05 there's always three okay new Services almost always become available first in
132:07 almost always become available first in Us East and specifically Us East one not
132:10 Us East and specifically Us East one not all services are available in all
132:11 all services are available in all regions all your billing information
132:13 regions all your billing information appears in Us East one so that's a US1
132:15 appears in Us East one so that's a US1 particular thing uh the cost of AA
132:17 particular thing uh the cost of AA Services vary per region and so if you
132:20 Services vary per region and so if you were on the marketing website or forious
132:22 were on the marketing website or forious Global infrastructure you can see uh
132:24 Global infrastructure you can see uh here in North America they will say like
132:26 here in North America they will say like when it launched how many availability
132:28 when it launched how many availability zones and there might be some conditions
132:29 zones and there might be some conditions so you'll notice there's like asteris uh
132:31 so you'll notice there's like asteris uh beside these things here or um in this
132:34 beside these things here or um in this one particular there's an asteris saying
132:36 one particular there's an asteris saying hey there are three zones but generally
132:38 hey there are three zones but generally you're limited to two Okay when you
132:40 you're limited to two Okay when you choose a region there are four factors
132:42 choose a region there are four factors you need to consider uh what are the
132:44 you need to consider uh what are the Regulatory Compliance does this region
132:47 Regulatory Compliance does this region meet what is the cost of this Inus
132:48 meet what is the cost of this Inus service in this region what in services
132:51 service in this region what in services are available in this region and what is
132:52 are available in this region and what is the distance distance or latency to my
132:55 the distance distance or latency to my end users and those are those four
132:56 end users and those are those four factors that you should remember
132:58 factors that you should remember [Music]
133:02 [Music] okay all right so we just talked about
133:04 okay all right so we just talked about adus regions now let's talk about uh how
133:07 adus regions now let's talk about uh how that affects our services versus
133:09 that affects our services versus regional and Global Services so Regional
133:12 regional and Global Services so Regional services are scoped based on what is set
133:14 services are scoped based on what is set in the adus Management console on the
133:16 in the adus Management console on the selected region so you have this drop
133:18 selected region so you have this drop down and that's what you'll do you'll
133:19 down and that's what you'll do you'll say Okay I want to have resour sources
133:21 say Okay I want to have resour sources in Canada or in Europe uh so this will
133:24 in Canada or in Europe uh so this will determine where a na service will be
133:27 determine where a na service will be launched and what will be seen within
133:28 launched and what will be seen within the ad Services console you generally
133:31 the ad Services console you generally don't explicitly set the region for a
133:33 don't explicitly set the region for a service at the time of creation I
133:35 service at the time of creation I explicitly mentioned this because when
133:36 explicitly mentioned this because when you use something like gcp or Azure when
133:39 you use something like gcp or Azure when you create the resource that's when you
133:40 you create the resource that's when you select the region but ads is it has this
133:42 select the region but ads is it has this kind of global thing which is unique to
133:44 kind of global thing which is unique to their platform um then there's the
133:46 their platform um then there's the concept of Global Services so some a
133:49 concept of Global Services so some a Services operate across multiple Reg
133:51 Services operate across multiple Reg and the region will be fixed to the word
133:53 and the region will be fixed to the word Global and for these that's services
133:55 Global and for these that's services like S3 cloudfront R 53 am so the idea
133:59 like S3 cloudfront R 53 am so the idea is if you were to go over to cloudfront
134:01 is if you were to go over to cloudfront and go into the cloudfront console
134:03 and go into the cloudfront console you'll notice that it will just say
134:04 you'll notice that it will just say Global and you can't switch out of that
134:06 Global and you can't switch out of that uh for these Global Services um at the
134:08 uh for these Global Services um at the time of creation it's a bit different so
134:10 time of creation it's a bit different so we were saying up here for regional ones
134:12 we were saying up here for regional ones that you don't select the region but
134:14 that you don't select the region but when you are clearing Global Services if
134:16 when you are clearing Global Services if you're using something like I am there
134:18 you're using something like I am there is no concept of region because they're
134:19 is no concept of region because they're just globally available so you don't
134:21 just globally available so you don't have to determine a subset of regions if
134:24 have to determine a subset of regions if you're using S3 bucket that has to be in
134:26 you're using S3 bucket that has to be in one region so you actually do have to
134:28 one region so you actually do have to select a region at time of creation um
134:31 select a region at time of creation um and then there's something like Cloud
134:32 and then there's something like Cloud firm distributions where you are
134:33 firm distributions where you are choosing a group of regions so you
134:34 choosing a group of regions so you either say all of the world or only
134:36 either say all of the world or only North America which is more like
134:38 North America which is more like geographic distribution so you don't say
134:40 geographic distribution so you don't say the region in particular but you know
134:42 the region in particular but you know hopefully that gives you a distinction
134:43 hopefully that gives you a distinction between Regional services and Global
134:46 between Regional services and Global [Music]
134:50 [Music] Services hey this is Andrew Brown from
134:52 Services hey this is Andrew Brown from exam Pro and we are taking a look at
134:54 exam Pro and we are taking a look at availability zones so availability zones
134:56 availability zones so availability zones commonly abbreviated as a and I'll
134:58 commonly abbreviated as a and I'll frequently be using the term a is
135:01 frequently be using the term a is physical locations made up of one or
135:03 physical locations made up of one or more data centers so a data center is a
135:06 more data centers so a data center is a secured building that contains hundreds
135:07 secured building that contains hundreds or thousands of computers uh and this is
135:10 or thousands of computers uh and this is one of my favorite Graphics I like to
135:12 one of my favorite Graphics I like to show of course uh you know ads would
135:14 show of course uh you know ads would never have a dog um in their data center
135:17 never have a dog um in their data center but I just thought that would be fun a
135:18 but I just thought that would be fun a region will generally contain three
135:21 region will generally contain three availability zones and I say generally
135:23 availability zones and I say generally because there are some cases where we
135:25 because there are some cases where we will see uh less than three so there
135:27 will see uh less than three so there might be two um data centers within a
135:29 might be two um data centers within a region will be isolate from each other
135:31 region will be isolate from each other um so there will be in different
135:32 um so there will be in different buildings but they will be close enough
135:34 buildings but they will be close enough to provide low latency and that is
135:36 to provide low latency and that is within the uh 10 milliseconds or less so
135:39 within the uh 10 milliseconds or less so it's very very low uh it's common
135:41 it's very very low uh it's common practice to run workloads in at least
135:43 practice to run workloads in at least three azs to ensure Services remain
135:45 three azs to ensure Services remain available in case one or two data
135:47 available in case one or two data centers fail and this is known as high
135:49 centers fail and this is known as high availability and this generally is
135:51 availability and this generally is driven based on Regulatory Compliance so
135:53 driven based on Regulatory Compliance so a lot of companies uh you know they have
135:56 a lot of companies uh you know they have to at least be running in 3 A's and
135:58 to at least be running in 3 A's and that's why itus tries to always have at
136:00 that's why itus tries to always have at least three azs within a region uh A's
136:03 least three azs within a region uh A's are represented by a region code
136:04 are represented by a region code followed by a letter so here you know
136:06 followed by a letter so here you know you'd have us East one which would be
136:08 you'd have us East one which would be the region and then the a would
136:10 the region and then the a would represent the particular availability
136:12 represent the particular availability Zone in that region um so a subnet which
136:16 Zone in that region um so a subnet which is related to availability zones is
136:18 is related to availability zones is associated with a uh two availability
136:20 associated with a uh two availability zones so you never choose an a when
136:22 zones so you never choose an a when launching resources you always choose a
136:25 launching resources you always choose a subnet which is then Associated to an a
136:28 subnet which is then Associated to an a a lot of services um you know don't even
136:31 a lot of services um you know don't even require you to choose a subnet because
136:32 require you to choose a subnet because they're fully managed by AWS but in the
136:34 they're fully managed by AWS but in the case of like virtual machines you're
136:36 case of like virtual machines you're always choosing a subnet okay so here is
136:38 always choosing a subnet okay so here is a graphical uh representation or a
136:41 a graphical uh representation or a diagram that's representing two
136:43 diagram that's representing two availability zones so here we have the
136:46 availability zones so here we have the region Us East 1 and US West 2 and then
136:48 region Us East 1 and US West 2 and then we have our 2 a so here is 1 a and 1 B
136:52 we have our 2 a so here is 1 a and 1 B and so these are effectively the subnets
136:55 and so these are effectively the subnets okay and so within those subnets then
136:58 okay and so within those subnets then you can see or availability zones you
137:00 you can see or availability zones you will see that we have two virtual
137:02 will see that we have two virtual machines okay so the US east1 region has
137:05 machines okay so the US east1 region has six azs and I thought that's just kind
137:07 six azs and I thought that's just kind of like a fun fact because it is the
137:08 of like a fun fact because it is the most out of every single one um I don't
137:11 most out of every single one um I don't think anyone comes close to us East one
137:13 think anyone comes close to us East one but of course it is the most popular it
137:15 but of course it is the most popular it is the uh first uh um region or so it's
137:19 is the uh first uh um region or so it's not a surprise that that has that many
137:23 not a surprise that that has that many [Music]
137:26 [Music] a okay so we just covered regions and
137:29 a okay so we just covered regions and availability zones but I really want to
137:30 availability zones but I really want to make it clear uh what they look like so
137:32 make it clear uh what they look like so I kind of have a visual representation
137:34 I kind of have a visual representation so let's say we have our adus region and
137:37 so let's say we have our adus region and in this particular one we have Canada
137:38 in this particular one we have Canada Central which in particular is Montreal
137:40 Central which in particular is Montreal so CA Central 1 uh and the idea here is
137:44 so CA Central 1 uh and the idea here is that a region has multiple availability
137:47 that a region has multiple availability zones so here you can see that we have
137:49 zones so here you can see that we have uh 1 a one 1B and 1D for some reason
137:53 uh 1 a one 1B and 1D for some reason adus decided to uh not launch 1 C maybe
137:56 adus decided to uh not launch 1 C maybe it's haunted who knows you know um and
137:59 it's haunted who knows you know um and then within your um availability zones
138:02 then within your um availability zones they are made up of one or more data
138:03 they are made up of one or more data centers so just understand that an a is
138:05 centers so just understand that an a is not a single data center but could be a
138:06 not a single data center but could be a collection of buildings and that these
138:09 collection of buildings and that these azs um are interconnected with high
138:11 azs um are interconnected with high bandwidth low latency networking they're
138:13 bandwidth low latency networking they're fully redundant dedicated to metrof
138:15 fully redundant dedicated to metrof fiber providing high throughput low
138:17 fiber providing high throughput low latency networking between so just very
138:19 latency networking between so just very fast Connections in between
138:21 fast Connections in between and all traffic between azs is encrypted
138:24 and all traffic between azs is encrypted and these azs are within 100 km so about
138:26 and these azs are within 100 km so about 60 mil uh of each other
138:30 60 mil uh of each other [Music]
138:33 [Music] okay so what I want to do here is just
138:36 okay so what I want to do here is just show you uh how regions and availability
138:38 show you uh how regions and availability zones work with some different adus
138:40 zones work with some different adus services so you have a general idea when
138:42 services so you have a general idea when you are selecting uh a region or a and
138:45 you are selecting uh a region or a and when you're not so within AOS when you
138:48 when you're not so within AOS when you want to select a region you're going to
138:49 want to select a region you're going to go up here and it and this is going to
138:52 go up here and it and this is going to apply to Regional Services a very famous
138:55 apply to Regional Services a very famous example of a regional service would be
138:56 example of a regional service would be ec2 so we go over to ec2 which is
138:59 ec2 so we go over to ec2 which is elastic uh cloud computing or compute
139:03 elastic uh cloud computing or compute whatever I just forget the name of it
139:05 whatever I just forget the name of it and what we can do is go over to
139:06 and what we can do is go over to instances I'm going to launch an
139:08 instances I'm going to launch an instance I'm not going to complete the
139:10 instance I'm not going to complete the process I just want to show you what
139:12 process I just want to show you what would happen when you go select some
139:13 would happen when you go select some things here so I'm going to go with
139:15 things here so I'm going to go with Amazon L 2 um we're going to just go to
139:18 Amazon L 2 um we're going to just go to uh next here and so here here is where
139:21 uh next here and so here here is where we're going to select um our
139:23 we're going to select um our availability zone so up here we have
139:25 availability zone so up here we have North Virginia that's our region and
139:27 North Virginia that's our region and when I say we're selecting availability
139:28 when I say we're selecting availability Zone we're actually selecting the subnet
139:30 Zone we're actually selecting the subnet so so here we are choosing a subnet and
139:34 so so here we are choosing a subnet and a subnet is associated to a availability
139:38 a subnet is associated to a availability Zone and every single um uh region has a
139:42 Zone and every single um uh region has a default VPC and that VPC has uh subnets
139:46 default VPC and that VPC has uh subnets set up and the subnets are defaulted to
139:48 set up and the subnets are defaulted to each of the availability zones available
139:50 each of the availability zones available so USC 1 has six of them so this server
139:52 so USC 1 has six of them so this server is going to launch in Us East 1B so this
139:56 is going to launch in Us East 1B so this is a regional service okay uh then we
139:59 is a regional service okay uh then we have Global Services like S3 so we go
140:01 have Global Services like S3 so we go over to
140:02 over to S3 and it says it's Global right and so
140:06 S3 and it says it's Global right and so we're going to go ahead and create our
140:08 we're going to go ahead and create our bucket and so here we choose the region
140:12 bucket and so here we choose the region so we go down we're going to say the
140:13 so we go down we're going to say the region we want to be in but we don't
140:15 region we want to be in but we don't choose the availability Zone because
140:18 choose the availability Zone because there's nothing to um uh choose because
140:21 there's nothing to um uh choose because adabs is going to run these in multiple
140:25 adabs is going to run these in multiple A's and it doesn't matter to you what
140:27 A's and it doesn't matter to you what it's doing there okay um so there's that
140:31 it's doing there okay um so there's that and then there's something like
140:32 and then there's something like cloudfront so Cloud front's a little bit
140:34 cloudfront so Cloud front's a little bit uh different here so we go over to
140:36 uh different here so we go over to cloudfront and we create ourselves a
140:39 cloudfront and we create ourselves a distribution um and so yeah if if you
140:41 distribution um and so yeah if if you don't have that option there because
140:42 don't have that option there because sometimes databus has like a splash
140:43 sometimes databus has like a splash screen just click on the left hand side
140:45 screen just click on the left hand side then go to
140:46 then go to distributions okay and so here well they
140:50 distributions okay and so here well they changed it again on me they're always
140:51 changed it again on me they're always changing this UI but if we scroll on
140:53 changing this UI but if we scroll on down it should allow us to
140:56 down it should allow us to change um change where this is going to
140:59 change um change where this is going to launch it's like Global stuff like that
141:01 launch it's like Global stuff like that literally they just recently changed
141:02 literally they just recently changed this and that's why I'm
141:04 this and that's why I'm confused uh we'll scroll on down
141:07 confused uh we'll scroll on down here it used to
141:10 here it used to be maybe it's under
141:13 be maybe it's under Legacy
141:15 Legacy additional
141:17 additional customized oh it's here sorry okay so
141:20 customized oh it's here sorry okay so noce here the price class that says use
141:21 noce here the price class that says use the edge locations for best performance
141:24 the edge locations for best performance North America and Europe North America
141:26 North America and Europe North America Europe Asia middle uh Middle East and
141:28 Europe Asia middle uh Middle East and Africa so we're not choosing a
141:30 Africa so we're not choosing a particular region we're picking a
141:32 particular region we're picking a geographical area and so those are
141:35 geographical area and so those are pretty much the major um uh uh examples
141:39 pretty much the major um uh uh examples of that uh then there's of course things
141:41 of that uh then there's of course things like in I am where you don't even say
141:43 like in I am where you don't even say where it is so you go into I am you know
141:46 where it is so you go into I am you know and if I create something like a group
141:48 and if I create something like a group uh over here a user group whoops
141:52 uh over here a user group whoops here I say create group you know I'm not
141:55 here I say create group you know I'm not saying oh this is for this particular
141:57 saying oh this is for this particular region or something like that okay so
142:00 region or something like that okay so yeah hopefully that makes
142:02 yeah hopefully that makes [Music]
142:05 [Music] sense hey this is Andrew Brown from exam
142:08 sense hey this is Andrew Brown from exam Pro and let's take a look here at fault
142:10 Pro and let's take a look here at fault tolerance specifically for Global
142:12 tolerance specifically for Global infrastructure and so before we jump
142:13 infrastructure and so before we jump into that let's just Define some fault
142:15 into that let's just Define some fault terminology here uh so let's describe
142:18 terminology here uh so let's describe what a fault domain is so a fault domain
142:20 what a fault domain is so a fault domain is a section of a network that is
142:22 is a section of a network that is vulnerable to damage if a critical
142:24 vulnerable to damage if a critical device or system fails and the purpose
142:26 device or system fails and the purpose of a fault domain is that if a failure
142:28 of a fault domain is that if a failure occurs it will not Cascade outside that
142:30 occurs it will not Cascade outside that domain limiting the possible damage and
142:33 domain limiting the possible damage and so uh there's this very popular meme
142:35 so uh there's this very popular meme called This is fine where uh there's
142:37 called This is fine where uh there's obviously a serious problem but uh the
142:39 obviously a serious problem but uh the person's not freaking out and I gave it
142:41 person's not freaking out and I gave it some context to say well the reason
142:43 some context to say well the reason they're not freaking out because they
142:44 they're not freaking out because they know that this is a fault domain and
142:45 know that this is a fault domain and nothing outside of this room is going to
142:47 nothing outside of this room is going to be affected okay so you can have fault
142:50 be affected okay so you can have fault domains nested inside of other fault
142:51 domains nested inside of other fault domains uh but generally they're grouped
142:53 domains uh but generally they're grouped in something called fault level so a
142:55 in something called fault level so a fault level is a collection of fault
142:56 fault level is a collection of fault domains um and the scoping of a fault
142:59 domains um and the scoping of a fault domain could be something like a
143:00 domain could be something like a specific specific servers in a rack an
143:03 specific specific servers in a rack an entire Rack in a data center an entire
143:05 entire Rack in a data center an entire room in a data center the entire data
143:07 room in a data center the entire data set are building and it's really up to
143:08 set are building and it's really up to the cloud service provider to define
143:10 the cloud service provider to define those boundaries of a domain adus
143:12 those boundaries of a domain adus abstracts it all way so you don't have
143:13 abstracts it all way so you don't have to think about it but just to compare it
143:15 to think about it but just to compare it against something else when you're using
143:16 against something else when you're using Azure you actually Define your fault
143:18 Azure you actually Define your fault domain so you might say like okay
143:21 domain so you might say like okay uh make sure that this workload is never
143:22 uh make sure that this workload is never running on the same VM on the same rack
143:24 running on the same VM on the same rack for these things uh and you know you
143:26 for these things uh and you know you might like to have that level of control
143:28 might like to have that level of control but I really like the fact that itus
143:29 but I really like the fact that itus just abstracts it away I'm not sure how
143:31 just abstracts it away I'm not sure how they segment their uh their their fault
143:33 they segment their uh their their fault domains but they they definitely are
143:36 domains but they they definitely are some broader ones which we'll describe
143:37 some broader ones which we'll describe right now so when we're looking at an
143:39 right now so when we're looking at an abis region this would be considered a
143:42 abis region this would be considered a fault level and then within that fault
143:44 fault level and then within that fault level you would have your uh
143:45 level you would have your uh availability zones and these would be
143:47 availability zones and these would be considered fault domains and of course
143:49 considered fault domains and of course those data centers can have have uh
143:51 those data centers can have have uh fault domains within them okay like
143:53 fault domains within them okay like maybe you know they have everything in a
143:54 maybe you know they have everything in a particular room and that room is secure
143:56 particular room and that room is secure so like if there's a fire in that room
143:57 so like if there's a fire in that room it's not going to affect the other room
143:58 it's not going to affect the other room things like that um so each Amazon
144:01 things like that um so each Amazon region is designed to be completely
144:02 region is designed to be completely isolated from the other Amazon region
144:05 isolated from the other Amazon region the uh they achieve this with the
144:07 the uh they achieve this with the greatest possible fault tolerance and
144:08 greatest possible fault tolerance and stability uh each availab availability
144:11 stability uh each availab availability zone is also isolated but the
144:13 zone is also isolated but the availability Zone in a region are
144:14 availability Zone in a region are connected through low latency links each
144:17 connected through low latency links each availability zone is designed as an
144:19 availability zone is designed as an independent failure Zone
144:20 independent failure Zone and so here we have some kind of
144:22 and so here we have some kind of different language that adus is using um
144:25 different language that adus is using um I've never experienced this terminology
144:26 I've never experienced this terminology in other any other cloud service
144:28 in other any other cloud service provider so I kind of feel like it's
144:29 provider so I kind of feel like it's something that it us made up but
144:31 something that it us made up but basically a failure Zone they're just
144:32 basically a failure Zone they're just basically saying a fault domain but
144:34 basically saying a fault domain but let's kind of expand on their fault uh
144:36 let's kind of expand on their fault uh failure Zone terminology so availability
144:39 failure Zone terminology so availability zones are physically separated within a
144:41 zones are physically separated within a typical Metropolitan region and are
144:43 typical Metropolitan region and are located in lower risk uh flood planes
144:46 located in lower risk uh flood planes discret uninterruptible power supply so
144:48 discret uninterruptible power supply so UPS and an on-site backup uh generation
144:51 UPS and an on-site backup uh generation facilities uh Data Centers located in
144:53 facilities uh Data Centers located in different azs are uh designed to be
144:56 different azs are uh designed to be supplied by independent substations to
144:58 supplied by independent substations to reduce the risk of an event on the power
145:00 reduce the risk of an event on the power grid impacting more than one
145:02 grid impacting more than one availability Zone availability zones are
145:05 availability Zone availability zones are all redundantly connected to multiple
145:07 all redundantly connected to multiple tier one Transit providers and we'll
145:08 tier one Transit providers and we'll talk about what those are uh in an
145:10 talk about what those are uh in an upcoming slide and just one thing I want
145:13 upcoming slide and just one thing I want to note here is that when you adopt
145:15 to note here is that when you adopt multi-az you get high availability so if
145:17 multi-az you get high availability so if an application is partitioned across A's
145:20 an application is partitioned across A's companies are better isolated and
145:22 companies are better isolated and protected from issues such as power
145:24 protected from issues such as power outages lightning strikes tornadoes
145:26 outages lightning strikes tornadoes earthquakes and more so that's the idea
145:28 earthquakes and more so that's the idea behind you know why we want to run in
145:30 behind you know why we want to run in multi-az okay because of these fault
145:33 multi-az okay because of these fault [Music]
145:36 [Music] domains hey this is Andrew Brown from
145:38 domains hey this is Andrew Brown from exam Pro and we're talking about the
145:40 exam Pro and we're talking about the adus global Network so the global
145:42 adus global Network so the global Network represents interconnections
145:44 Network represents interconnections between a global infrastructure and it's
145:47 between a global infrastructure and it's commonly referred to as the backbone of
145:49 commonly referred to as the backbone of AWS so is EC to so just understand that
145:52 AWS so is EC to so just understand that that could be used in more than one way
145:54 that could be used in more than one way but think of it as a private express way
145:55 but think of it as a private express way where things can move fast between data
145:58 where things can move fast between data centers and uh one thing that is
146:01 centers and uh one thing that is utilized a lot to get data in and out of
146:03 utilized a lot to get data in and out of AWS very quickly is Edge locations they
146:06 AWS very quickly is Edge locations they can act as on and off ramps uh to the ad
146:08 can act as on and off ramps uh to the ad Global Network of course you can uh get
146:10 Global Network of course you can uh get to the network through pops which we'll
146:12 to the network through pops which we'll talk about um you know in the upcoming
146:14 talk about um you know in the upcoming slides here but let's just talk about
146:16 slides here but let's just talk about Edge locations and what services use
146:17 Edge locations and what services use them so uh when we're talking about
146:19 them so uh when we're talking about things that are getting on to the adus
146:21 things that are getting on to the adus network we're looking at things like
146:22 network we're looking at things like Abus Global accelerator adus S3 transfer
146:26 Abus Global accelerator adus S3 transfer acceleration and so uh these use agile
146:29 acceleration and so uh these use agile locations as an on-ramp to quickly reach
146:31 locations as an on-ramp to quickly reach adus resources and other regions by
146:33 adus resources and other regions by traversing the fast adus Global Network
146:35 traversing the fast adus Global Network notice that the names in it say
146:37 notice that the names in it say accelerator acceleration so the idea is
146:39 accelerator acceleration so the idea is that they are moving really fast okay on
146:42 that they are moving really fast okay on the other side when we talk about like
146:43 the other side when we talk about like an offramp or looking at Amazon
146:44 an offramp or looking at Amazon cloudfront which is a Content
146:46 cloudfront which is a Content distribution Network this uses Edge
146:48 distribution Network this uses Edge locations to uh as an offramp to provide
146:50 locations to uh as an offramp to provide at the edge storage and compute near the
146:53 at the edge storage and compute near the end user uh and one other thing that is
146:56 end user uh and one other thing that is kind of always utilized in the global
146:57 kind of always utilized in the global Network are VPC end points now these
146:59 Network are VPC end points now these aren't using Edge locations but the idea
147:01 aren't using Edge locations but the idea here is that this ensures your resources
147:03 here is that this ensures your resources stay within the Aus Network and do not
147:05 stay within the Aus Network and do not Traverse over the public internet so you
147:07 Traverse over the public internet so you know if you have uh you know a resource
147:10 know if you have uh you know a resource running in Us East one and one in uh EU
147:13 running in Us East one and one in uh EU it would and they never have to go to
147:14 it would and they never have to go to the Internet it would make sense to
147:16 the Internet it would make sense to always enforce it to stay within the
147:17 always enforce it to stay within the network because it's going to be a lot
147:19 network because it's going to be a lot faster so there you
147:21 faster so there you [Music]
147:25 [Music] go hey this is Andrew Brown from exam
147:27 go hey this is Andrew Brown from exam Pro and we are taking a look at point of
147:29 Pro and we are taking a look at point of presence also known as Pop and this is
147:31 presence also known as Pop and this is an intermediate location between anabis
147:33 an intermediate location between anabis region and the end user and this
147:35 region and the end user and this location could be a data center or a
147:37 location could be a data center or a collection of Hardware so for AWS a
147:40 collection of Hardware so for AWS a point of presence is a data center owned
147:41 point of presence is a data center owned by AWS or trusted partner that is
147:44 by AWS or trusted partner that is utilized byus Services related for
147:46 utilized byus Services related for Content delivery or expediated upload so
147:49 Content delivery or expediated upload so a pop res could be something like an
147:51 a pop res could be something like an edge location or Regional Edge cache so
147:53 edge location or Regional Edge cache so as an example over here we see an S3
147:55 as an example over here we see an S3 bucket and it has to go through Regional
147:57 bucket and it has to go through Regional Edge cache and then get to an edge
147:59 Edge cache and then get to an edge location let's go Define what those are
148:01 location let's go Define what those are so an edge location are data centers
148:03 so an edge location are data centers that hold cache copies on the most
148:05 that hold cache copies on the most popular files so web pages images and
148:08 popular files so web pages images and videos so that the delivery of the
148:10 videos so that the delivery of the distance to the end users are reduced
148:12 distance to the end users are reduced then you have Regional Edge locations
148:15 then you have Regional Edge locations and these are data centers that hold
148:16 and these are data centers that hold much larger caches of less popular files
148:18 much larger caches of less popular files to reduce a full round trip and also to
148:21 to reduce a full round trip and also to reduce the cost of transfer
148:24 reduce the cost of transfer [Music]
148:27 [Music] fees so to kind of help put pops more in
148:31 fees so to kind of help put pops more in presence just in the general sense here
148:33 presence just in the general sense here is a uh diagram I got from Wikipedia
148:35 is a uh diagram I got from Wikipedia that kind of just shows a bunch of
148:36 that kind of just shows a bunch of different networks and notice where the
148:38 different networks and notice where the pop is it's on the edge or the
148:40 pop is it's on the edge or the intersection of uh two networks so here
148:42 intersection of uh two networks so here you know we have um you know tier three
148:45 you know we have um you know tier three and then there's tier two and there's
148:47 and then there's tier two and there's this pop that is in between them okay so
148:50 this pop that is in between them okay so tier one networks is a network that can
148:51 tier one networks is a network that can reach every other network on the
148:53 reach every other network on the internet without purchasing IP transit
148:55 internet without purchasing IP transit or paying for peering and so the inabus
148:57 or paying for peering and so the inabus availability zones or A's are all
148:59 availability zones or A's are all redundantly connected to multiple tier
149:01 redundantly connected to multiple tier one Transit providers
149:03 one Transit providers [Music]
149:07 [Music] okay all right so let's take a look at
149:09 okay all right so let's take a look at somea services that are utilizing pops
149:12 somea services that are utilizing pops or Edge locations for Content delivery
149:14 or Edge locations for Content delivery or expediated upload so Amazon
149:16 or expediated upload so Amazon cloudfront is a Content delivery network
149:18 cloudfront is a Content delivery network service and the idea here you point your
149:20 service and the idea here you point your website to cloudfront so that it will
149:22 website to cloudfront so that it will route requests to the nearest Edge
149:23 route requests to the nearest Edge location cache it's going to allow you
149:25 location cache it's going to allow you to choose an origin so that could be a
149:27 to choose an origin so that could be a web server or storage that will be the
149:29 web server or storage that will be the source of the cach and cach is the
149:31 source of the cach and cach is the content of what origin would return to
149:33 content of what origin would return to various Edge locations around the world
149:35 various Edge locations around the world then you have Amazon S3 transfer
149:37 then you have Amazon S3 transfer acceleration this allows you to generate
149:39 acceleration this allows you to generate a special URL that can be used by the
149:41 a special URL that can be used by the end users to upload files to a nearby
149:43 end users to upload files to a nearby Edge location once a file is uploaded to
149:45 Edge location once a file is uploaded to an edge location it can move much faster
149:47 an edge location it can move much faster within the adus network to reach S3
149:50 within the adus network to reach S3 then at the end here you have adus
149:52 then at the end here you have adus Global accelerator you can find the
149:54 Global accelerator you can find the optimal path from the end user to your
149:56 optimal path from the end user to your web servers so Global accelerators are
149:58 web servers so Global accelerators are deployed within Edge location so you
150:00 deployed within Edge location so you send user traffic to an edge location
150:02 send user traffic to an edge location instead of directly to your web
150:03 instead of directly to your web application this service is really
150:05 application this service is really really great for if let's say you are
150:07 really great for if let's say you are running a web server in Us East one and
150:10 running a web server in Us East one and you just don't have the time uh to set
150:12 you just don't have the time uh to set up infrastructure in other regions you
150:14 up infrastructure in other regions you turn this on and you basically get a
150:16 turn this on and you basically get a boost okay
150:21 [Music] hey this is Andrew Brown from exam Pro
150:23 hey this is Andrew Brown from exam Pro and let's take a look at itus direct
150:25 and let's take a look at itus direct connect so this is a private or
150:26 connect so this is a private or dedicated connection between your data
150:28 dedicated connection between your data center office collocation and AWS and so
150:31 center office collocation and AWS and so the idea here is imagine if you had a
150:33 the idea here is imagine if you had a fiber optic cable running from your uh
150:36 fiber optic cable running from your uh data center all the way to your ads so
150:38 data center all the way to your ads so that it feels like uh when you're using
150:40 that it feels like uh when you're using your stuff on your data center like your
150:42 your stuff on your data center like your local virtual machines that uh there's
150:44 local virtual machines that uh there's like next to no latency okay so Direct
150:46 like next to no latency okay so Direct Connect has two very fast network
150:48 Connect has two very fast network connection options we have have the
150:50 connection options we have have the lower bandwidth which is at 50 to 500
150:53 lower bandwidth which is at 50 to 500 megabytes per second and then you have
150:54 megabytes per second and then you have the higher bandwidth which is 1 GB to 10
150:58 the higher bandwidth which is 1 GB to 10 gbes per second so using Direct Connect
151:01 gbes per second so using Direct Connect helps reduce Network costs increase
151:02 helps reduce Network costs increase bandwidth throughput so great for hi
151:04 bandwidth throughput so great for hi trffic networks provides a more
151:06 trffic networks provides a more consistent Network experience than a
151:08 consistent Network experience than a typical internet-based connection so
151:10 typical internet-based connection so reliable and secure U I do want to point
151:12 reliable and secure U I do want to point out the term collocation if you never
151:13 out the term collocation if you never heard of that before a collocation or a
151:16 heard of that before a collocation or a carrier hotel is a data center where
151:18 carrier hotel is a data center where equipment space and bandwidth are
151:20 equipment space and bandwidth are available for rental uh to retail
151:22 available for rental uh to retail customers and I do want to also point
151:24 customers and I do want to also point out that even though it says private up
151:26 out that even though it says private up here and this is the language that AWS
151:27 here and this is the language that AWS used I usually just say dedicated but
151:30 used I usually just say dedicated but the connection is private but that
151:31 the connection is private but that doesn't necessarily mean it's secure
151:33 doesn't necessarily mean it's secure okay so uh we'll talk about that when we
151:35 okay so uh we'll talk about that when we reach ads vpns and how we can use that
151:37 reach ads vpns and how we can use that with direct connect to make sure our
151:39 with direct connect to make sure our connections are secure
151:40 connections are secure [Music]
151:44 [Music] okay all right so let's take a look at
151:46 okay all right so let's take a look at what a direct connect location is so a
151:48 what a direct connect location is so a direct connect location our trusted
151:50 direct connect location our trusted partner data centers that you can
151:52 partner data centers that you can establish a dedicated highspeed low
151:54 establish a dedicated highspeed low latency connection from your on- premise
151:57 latency connection from your on- premise to AWS so an example of a partner data
151:59 to AWS so an example of a partner data center would be one like here in Toronto
152:01 center would be one like here in Toronto the Allied data center so you can tell
152:03 the Allied data center so you can tell that's right down in uh the Toronto
152:05 that's right down in uh the Toronto Center and so you would use this uh uh
152:08 Center and so you would use this uh uh as part of direct connect service to
152:10 as part of direct connect service to order and establish a connection
152:13 order and establish a connection [Music]
152:16 [Music] okay hey this is Andrew Brown from exam
152:19 okay hey this is Andrew Brown from exam Pro and we are taking a look at local
152:20 Pro and we are taking a look at local zones which are Data Centers located
152:22 zones which are Data Centers located very close to densely populated areas to
152:24 very close to densely populated areas to provide singled digigit millisecond low
152:26 provide singled digigit millisecond low latency performance so thinks like 7
152:28 latency performance so thinks like 7 milliseconds for that area so here is a
152:31 milliseconds for that area so here is a map of uh local zones that exist and
152:33 map of uh local zones that exist and ones that are coming out I believe the
152:35 ones that are coming out I believe the orange ones are probably ones that are
152:36 orange ones are probably ones that are on their way and so to use a local Zone
152:38 on their way and so to use a local Zone you do need to opt in so you got to go
152:40 you do need to opt in so you got to go talk to AWS probably open a support
152:41 talk to AWS probably open a support ticket to get access to it the first one
152:43 ticket to get access to it the first one to ever be launched was uh the LA one uh
152:46 to ever be launched was uh the LA one uh and so um you know when you want to see
152:49 and so um you know when you want to see it looks just like a an availability
152:52 it looks just like a an availability Zone it's going to show up under
152:53 Zone it's going to show up under whatever region that is because these
152:54 whatever region that is because these are always tied to existing regions so
152:56 are always tied to existing regions so the la1 is tied to us West uh region and
153:00 the la1 is tied to us West uh region and the AZ would look like us West 2 hyphen
153:04 the AZ would look like us West 2 hyphen LAX hyphen 1A okay so only specific a
153:08 LAX hyphen 1A okay so only specific a Services have been made available so
153:09 Services have been made available so there's particular ec2 types EBS Amazon
153:13 there's particular ec2 types EBS Amazon FSX application load balancer Amazon VPC
153:17 FSX application load balancer Amazon VPC they probably have extended it to more
153:19 they probably have extended it to more services do you need to know that for
153:21 services do you need to know that for the exam no but you know the point is is
153:23 the exam no but you know the point is is that there's a limited subset of things
153:25 that there's a limited subset of things that are available the purpose of local
153:27 that are available the purpose of local zone is to support highly demanding
153:29 zone is to support highly demanding application sensitive Delancy so media
153:31 application sensitive Delancy so media and entertainment electronic design and
153:33 and entertainment electronic design and automation adte machine learning so it
153:36 automation adte machine learning so it kind of makes sense like you look at La
153:37 kind of makes sense like you look at La they're in the media entertainment and
153:39 they're in the media entertainment and so they're dealing with lots of media
153:41 so they're dealing with lots of media content so it has to be really low for
153:43 content so it has to be really low for them
153:49 okay hey this is Andrew Brown from exam prep and we are taking a look at Abus
153:51 prep and we are taking a look at Abus wavelength zones and these allow for
153:53 wavelength zones and these allow for Edge Computing on the 5G networks and
153:56 Edge Computing on the 5G networks and applications will have ultra low latency
153:58 applications will have ultra low latency being as close as possible to the users
154:00 being as close as possible to the users so Abus has partnered with various
154:02 so Abus has partnered with various telecom companies to utilize their 5G
154:04 telecom companies to utilize their 5G networks so we're looking at Verizon
154:06 networks so we're looking at Verizon vhone kddi SK Telecom and so the idea
154:10 vhone kddi SK Telecom and so the idea here is that you will create a subnet
154:12 here is that you will create a subnet tied to a wavelength Zone and then and
154:15 tied to a wavelength Zone and then and just think of it as like an availability
154:16 just think of it as like an availability Zone but it's a wavelength Zone and then
154:18 Zone but it's a wavelength Zone and then you can launch your VMS to the edge of
154:20 you can launch your VMS to the edge of the targeted 5G Network so that's the
154:22 the targeted 5G Network so that's the network you're using uh AWS to deploy an
154:26 network you're using uh AWS to deploy an ec2 instance and then when users uh
154:29 ec2 instance and then when users uh connect to you know those radio tower
154:31 connect to you know those radio tower those um cell towers they're going to be
154:33 those um cell towers they're going to be routed to um you know nearby hardware
154:36 routed to um you know nearby hardware that is running those virtual machines
154:38 that is running those virtual machines okay and that's all it is it's just it's
154:40 okay and that's all it is it's just it's just uh ec2 instances um but you know
154:43 just uh ec2 instances um but you know the advantage here is that it's like
154:44 the advantage here is that it's like super super low latency okay
154:51 [Music] hey this is Andrew Brown from exam Pro
154:53 hey this is Andrew Brown from exam Pro and we are taking a look at data
154:54 and we are taking a look at data residency so this is the physical or
154:57 residency so this is the physical or geographical location of where an
154:59 geographical location of where an organization or Cloud resources reside
155:01 organization or Cloud resources reside and then you have the concept of comp uh
155:03 and then you have the concept of comp uh compliance boundaries so a Regulatory
155:05 compliance boundaries so a Regulatory Compliance so legal requirement by
155:07 Compliance so legal requirement by government or organization that
155:09 government or organization that describes where data and Cloud resources
155:11 describes where data and Cloud resources are allowed to reside and then you have
155:13 are allowed to reside and then you have the idea of data sovereignty so data
155:15 the idea of data sovereignty so data sovereignty is the jurisdictional
155:17 sovereignty is the jurisdictional control or legal Authority that can be
155:19 control or legal Authority that can be asserted over data because its physical
155:22 asserted over data because its physical location is within a uh jurisdictional
155:24 location is within a uh jurisdictional boundary and so the reason we care about
155:26 boundary and so the reason we care about this stuff is that if we want to work
155:27 this stuff is that if we want to work with the Canadian government or the US
155:29 with the Canadian government or the US government and they're like hey you got
155:31 government and they're like hey you got to make sure that you know if you want
155:33 to make sure that you know if you want to work with us all the data has to stay
155:35 to work with us all the data has to stay in Canada and you need to give them that
155:36 in Canada and you need to give them that guarantee so data residency is not a
155:39 guarantee so data residency is not a guarantee it just says where your data
155:40 guarantee it just says where your data is right and compliance boundaries are
155:43 is right and compliance boundaries are those um controls that are in place to
155:45 those um controls that are in place to say okay this is going to make sure that
155:47 say okay this is going to make sure that data stays where we want to be and data
155:49 data stays where we want to be and data of sovereignty is just like the idea of
155:50 of sovereignty is just like the idea of the scope of the the legal the legal
155:53 the scope of the the legal the legal stuff that ties in with compliance
155:55 stuff that ties in with compliance boundaries so how do we do that on AWS
155:58 boundaries so how do we do that on AWS well there's a few different ways but um
156:00 well there's a few different ways but um let's just take a look at some ways that
156:01 let's just take a look at some ways that we can meet those compliance boundaries
156:04 we can meet those compliance boundaries one uh which is very expensive but also
156:06 one uh which is very expensive but also very cool is adamus outposts so this is
156:08 very cool is adamus outposts so this is a physical rack of servers that you can
156:10 a physical rack of servers that you can put in your data center and you'll know
156:12 put in your data center and you'll know exactly where the data resides because
156:14 exactly where the data resides because you know it's physical if it's in your
156:16 you know it's physical if it's in your data center and you're in Canada that's
156:18 data center and you're in Canada that's where it's going to be okay uh and I
156:20 where it's going to be okay uh and I believe that you know there is only a
156:21 believe that you know there is only a subset of uh adus services that are
156:23 subset of uh adus services that are available here but you know that is one
156:25 available here but you know that is one option to you another is using like um
156:28 option to you another is using like um services for governance so like one
156:30 services for governance so like one could be adus config this is a policy as
156:32 could be adus config this is a policy as a code service so you can create rules
156:34 a code service so you can create rules to continuously check adus resource
156:36 to continuously check adus resource configuration so if they deviate from
156:38 configuration so if they deviate from your expectations you're alerted orus
156:40 your expectations you're alerted orus config can in some cases Auto remediate
156:42 config can in some cases Auto remediate so if you were expecting you know um you
156:45 so if you were expecting you know um you know you had an adus account and you're
156:47 know you had an adus account and you're saying this account is only to be used
156:48 saying this account is only to be used for candid reason resources and somebody
156:50 for candid reason resources and somebody launches let's say something in another
156:52 launches let's say something in another region then you could get an alert or
156:55 region then you could get an alert or tell it was config to go delete that
156:57 tell it was config to go delete that resource okay now if you want to prevent
156:59 resource okay now if you want to prevent people from doing it uh Al together
157:01 people from doing it uh Al together that's where IM policies come into play
157:03 that's where IM policies come into play so these can be written explicitly to
157:05 so these can be written explicitly to deny access to specific adus regions and
157:08 deny access to specific adus regions and you know this is great if you're
157:09 you know this is great if you're applying to users or roles but if you
157:11 applying to users or roles but if you wanted to have it organizational wide
157:13 wanted to have it organizational wide across all of your um AIS accounts you
157:16 across all of your um AIS accounts you can use something called a service
157:17 can use something called a service control policy that is just an i policy
157:20 control policy that is just an i policy that is used within 's organizations
157:22 that is used within 's organizations that makes it organizational wide
157:25 that makes it organizational wide [Music]
157:28 [Music] okay hey this is Andrew Brown from exam
157:31 okay hey this is Andrew Brown from exam Pro and we are looking at ads4
157:32 Pro and we are looking at ads4 government so to answer that we first
157:34 government so to answer that we first have to understand what is public sector
157:37 have to understand what is public sector so public sector includes public goods
157:39 so public sector includes public goods and government services such as military
157:41 and government services such as military law enforcement infrastructure public
157:44 law enforcement infrastructure public transit public education Healthcare and
157:47 transit public education Healthcare and the government itself so AOS can be
157:48 the government itself so AOS can be utilized by the public sector or
157:50 utilized by the public sector or organizations developing Cloud workloads
157:52 organizations developing Cloud workloads for the public sector and AES to achieve
157:54 for the public sector and AES to achieve this by meeting Regulatory Compliance
157:56 this by meeting Regulatory Compliance programs along with specific governance
157:58 programs along with specific governance and security controls so this could be
158:01 and security controls so this could be meeting the requirements with HIPPA fed
158:03 meeting the requirements with HIPPA fed ramp um cjis uh and fips okay so IIs has
158:07 ramp um cjis uh and fips okay so IIs has a special regions or special regions for
158:10 a special regions or special regions for us regulation called gov Cloud which
158:12 us regulation called gov Cloud which we'll talk about next
158:13 we'll talk about next [Music]
158:17 [Music] okay hey this is Andrew Brown from exam
158:19 okay hey this is Andrew Brown from exam Pro and we are taking a look at govcloud
158:21 Pro and we are taking a look at govcloud and to understand what govcloud is we
158:23 and to understand what govcloud is we need to know what fedramp is so fedramp
158:25 need to know what fedramp is so fedramp stands for federal risk and
158:26 stands for federal risk and authorization Management program it's a
158:28 authorization Management program it's a US government-wide program that provides
158:30 US government-wide program that provides a standardized approach to security
158:32 a standardized approach to security assessment authorization continuous
158:34 assessment authorization continuous monitoring for cloud products and
158:36 monitoring for cloud products and services so that we know what fed ramp
158:38 services so that we know what fed ramp is what is gocloud well uh and again
158:41 is what is gocloud well uh and again it's not particular to AWS because Azure
158:43 it's not particular to AWS because Azure has go Cloud as well but a cloud service
158:46 has go Cloud as well but a cloud service provider like inabus or Azure J will
158:48 provider like inabus or Azure J will offer an isolated region to run fed ramp
158:51 offer an isolated region to run fed ramp workloads and so in it's called govcloud
158:54 workloads and so in it's called govcloud and these are specialized regions that
158:56 and these are specialized regions that allow customers to host sensitive
158:58 allow customers to host sensitive controlled unclassified information and
159:00 controlled unclassified information and other types of regulated workloads so
159:02 other types of regulated workloads so govcloud regions are only operated by
159:04 govcloud regions are only operated by you uh by US citizens on us soil they
159:07 you uh by US citizens on us soil they are only accessible to us entries and
159:09 are only accessible to us entries and root account holders who pass a
159:11 root account holders who pass a screening process customers can
159:13 screening process customers can architect secure Cloud solutions that
159:15 architect secure Cloud solutions that comply with fed ramp uh do the doj's uh
159:19 comply with fed ramp uh do the doj's uh criminal justice Information Systems
159:22 criminal justice Information Systems security policy the US International
159:25 security policy the US International traffic and arms regulation uh uh export
159:28 traffic and arms regulation uh uh export Administration regulations the
159:30 Administration regulations the Department of Defense cloud computing
159:32 Department of Defense cloud computing security requirements and guides so if
159:34 security requirements and guides so if you want to work with the US government
159:36 you want to work with the US government you want to uh engineer and use gov
159:39 you want to uh engineer and use gov Cloud
159:40 Cloud [Music]
159:43 [Music] okay hey this is Andrew Brown from exam
159:46 okay hey this is Andrew Brown from exam Pro and we're taking a look at uh
159:48 Pro and we're taking a look at uh running adab us China so adus China is
159:51 running adab us China so adus China is the adus cloud offering in mainland
159:52 the adus cloud offering in mainland China adus China is completely isolate
159:55 China adus China is completely isolate intentionally from adus Global to meet
159:57 intentionally from adus Global to meet Regulatory Compliance for mainland China
159:59 Regulatory Compliance for mainland China so that means that if you make a
160:00 so that means that if you make a workload on the adus global uh you can't
160:03 workload on the adus global uh you can't uh interact with it within the adus
160:05 uh interact with it within the adus China One okay it's basically treated
160:07 China One okay it's basically treated like a a completely separate service
160:09 like a a completely separate service like adus has its own Chinese version uh
160:12 like adus has its own Chinese version uh and so adus China is on its own domain
160:14 and so adus China is on its own domain at
160:16 at amazon.cn and for everybody else that's
160:18 amazon.cn and for everybody else that's what's considered Global so when I'm
160:20 what's considered Global so when I'm using adus from Canada or use it from
160:23 using adus from Canada or use it from the US or from India or from Europe or
160:26 the US or from India or from Europe or wherever that is the adus global okay so
160:29 wherever that is the adus global okay so in order to operate in adus China
160:31 in order to operate in adus China regions you need to have a Chinese
160:33 regions you need to have a Chinese business license so ICP license not all
160:36 business license so ICP license not all services are available in China so uh
160:39 services are available in China so uh you will not have the use of Route 53 uh
160:42 you will not have the use of Route 53 uh and you might say well why not just run
160:44 and you might say well why not just run in Singapore you it was Global and you
160:46 in Singapore you it was Global and you could do that but the advantage of
160:48 could do that but the advantage of running in mainland China means that you
160:50 running in mainland China means that you would not have to Traverse the great
160:53 would not have to Traverse the great firewall okay so all your traffic is
160:55 firewall okay so all your traffic is already within China so you don't have
160:56 already within China so you don't have to uh deal with that Abus has two
160:59 to uh deal with that Abus has two regions in mainland China so uh there's
161:01 regions in mainland China so uh there's this one here which is the northwest
161:03 this one here which is the northwest region operated by NS WCF and then you
161:07 region operated by NS WCF and then you have the one in Beijing North one
161:08 have the one in Beijing North one operated by sinnet so you know iTab us
161:11 operated by sinnet so you know iTab us just could not meet the the compliance
161:13 just could not meet the the compliance requirement so they had to partner with
161:15 requirement so they had to partner with local providers uh or data centers and
161:18 local providers uh or data centers and so that is how that works
161:20 so that is how that works [Music]
161:23 [Music] okay all right so I want to show you how
161:25 okay all right so I want to show you how you get over to the um Chinese adus
161:29 you get over to the um Chinese adus Management console so this one is adab.
161:31 Management console so this one is adab. amazon.com that is the global one for
161:34 amazon.com that is the global one for everyone outside of mainland China but
161:36 everyone outside of mainland China but if you want to run resources uh on data
161:39 if you want to run resources uh on data centers within mainland China this is at
161:42 centers within mainland China this is at amazon.cn and so it looks very similar
161:45 amazon.cn and so it looks very similar if you go to create a free account
161:46 if you go to create a free account you're going to fill in this stuff but
161:48 you're going to fill in this stuff but uh notice that you need to have your
161:50 uh notice that you need to have your business registration certificate uh and
161:52 business registration certificate uh and additional information in order to run
161:54 additional information in order to run these data centers down below that ad is
161:56 these data centers down below that ad is partnered with also notice that the logo
161:58 partnered with also notice that the logo doesn't say AWS in it and there's a good
162:01 doesn't say AWS in it and there's a good reason for that if I type in AWS
162:03 reason for that if I type in AWS trademark
162:04 trademark China uh adus is actually banned from
162:06 China uh adus is actually banned from using the adus logo in China uh for
162:09 using the adus logo in China uh for whatever reason it's a weird reason if
162:11 whatever reason it's a weird reason if you ever want to read about it but
162:12 you ever want to read about it but that's why you don't see AWS here all
162:15 that's why you don't see AWS here all right um so yeah there you go
162:18 right um so yeah there you go [Music]
162:23 [Music] hey this is Andre Brown from exam Pro
162:24 hey this is Andre Brown from exam Pro and we are looking at sustainability for
162:26 and we are looking at sustainability for adus Global infrastructure and before we
162:28 adus Global infrastructure and before we talk about that let's talk about the
162:29 talk about that let's talk about the climate pledge so Amazon co-founded the
162:32 climate pledge so Amazon co-founded the climate pledge to achieve Net Zero
162:34 climate pledge to achieve Net Zero carbon emissions by 2040 across all of
162:36 carbon emissions by 2040 across all of Amazon's businesses which includes AWS
162:39 Amazon's businesses which includes AWS if youall want to find out more
162:40 if youall want to find out more information go to to
162:42 information go to to sustainability. amazon.com there's a lot
162:45 sustainability. amazon.com there's a lot of great information there and you'll
162:46 of great information there and you'll learn exactly how uh is achieving this
162:50 learn exactly how uh is achieving this in particular like their data centers
162:51 in particular like their data centers it's very interesting okay so adus Cloud
162:54 it's very interesting okay so adus Cloud sustainabil goals are composed of three
162:55 sustainabil goals are composed of three parts the first is renewable energy so
162:57 parts the first is renewable energy so adus is working towards having their
162:59 adus is working towards having their adus Global infrastructure powered by
163:02 adus Global infrastructure powered by 100% renewable energy by
163:04 100% renewable energy by 2025 and Abus purchases and retires
163:07 2025 and Abus purchases and retires environmental attributes to cover the
163:09 environmental attributes to cover the non-renewable energy for Abus Global
163:11 non-renewable energy for Abus Global infrastructure so they would purchase
163:13 infrastructure so they would purchase things like renewable energy credits
163:15 things like renewable energy credits also known as Rec's guarantees of
163:17 also known as Rec's guarantees of Origins so go the second Point here is
163:20 Origins so go the second Point here is cloud efficiency so adus infrastructure
163:22 cloud efficiency so adus infrastructure is 3.6 times more energy efficient than
163:24 is 3.6 times more energy efficient than the medium of us Enterprises data
163:26 the medium of us Enterprises data centers surveyed so that's going to
163:28 centers surveyed so that's going to really rely on that survey surveys are
163:30 really rely on that survey surveys are not always that great so you know take
163:32 not always that great so you know take that with a grain of salt okay then we
163:34 that with a grain of salt okay then we have water uh stewardship so uh direct
163:37 have water uh stewardship so uh direct evaporative technology to cool our data
163:39 evaporative technology to cool our data centers use of non portable uh water for
163:43 centers use of non portable uh water for cooling purposes so the recycling water
163:45 cooling purposes so the recycling water on-site water treatment allows us to
163:47 on-site water treatment allows us to remove us them to remove scale forming
163:50 remove us them to remove scale forming minerals and reuse Waters uh for more
163:53 minerals and reuse Waters uh for more Cycles water efficiency metrics to
163:55 Cycles water efficiency metrics to determine and monitor optimal water use
163:57 determine and monitor optimal water use for each adus region and you'll find
164:00 for each adus region and you'll find that water plays a large part on uh
164:03 that water plays a large part on uh making these um uh these data centers
164:06 making these um uh these data centers very efficient
164:08 very efficient [Music]
164:11 [Music] okay so I just wanted to show you where
164:13 okay so I just wanted to show you where you get to that sustainability
164:15 you get to that sustainability information so I just went to Adis
164:16 information so I just went to Adis Global infrastructure you click
164:18 Global infrastructure you click sustainability
164:19 sustainability and that's going to bring us over to
164:21 and that's going to bring us over to whoops I have my Twitter open there to
164:23 whoops I have my Twitter open there to the sustainability in the cloud so if
164:25 the sustainability in the cloud so if you want to read a bunch of stuff here
164:27 you want to read a bunch of stuff here about things that are going on that it
164:29 about things that are going on that it us is up to see uh how they are
164:31 us is up to see uh how they are progressing with renewable energy um
164:34 progressing with renewable energy um there's Cloud efficiency up here so you
164:36 there's Cloud efficiency up here so you know how are they being efficient it's
164:38 know how are they being efficient it's worth the read to really understand that
164:40 worth the read to really understand that there's a lot of water involved like
164:42 there's a lot of water involved like reducing water in data centers I thought
164:43 reducing water in data centers I thought that was really interesting um I mean
164:46 that was really interesting um I mean they have as podcast but I don't think
164:49 they have as podcast but I don't think there's really much to it a bi-weekly
164:51 there's really much to it a bi-weekly podcast of bite-sized stories about how
164:53 podcast of bite-sized stories about how Tech makes the world better that's not
164:55 Tech makes the world better that's not necessarily A sustainability podcast
164:57 necessarily A sustainability podcast it's just the invis podcast in general
165:00 it's just the invis podcast in general there's a download Center um Amazon's
165:03 there's a download Center um Amazon's 2020 sustainability reports so I guess
165:05 2020 sustainability reports so I guess you can download the reports to see what
165:06 you can download the reports to see what is going on there so we can download the
165:08 is going on there so we can download the progress here and see what they've been
165:10 progress here and see what they've been up
165:12 up to okay so there's a bunch of numbers
165:14 to okay so there's a bunch of numbers things like that okay very short reports
165:17 things like that okay very short reports but hey at least you can download them
165:18 but hey at least you can download them okay so just in case you're uh very
165:21 okay so just in case you're uh very interested in sustainability all
165:23 interested in sustainability all [Music]
165:26 [Music] right hey this is Andrew Brown from exam
165:29 right hey this is Andrew Brown from exam Pro and we are taking a look at Abus
165:30 Pro and we are taking a look at Abus ground station so this is a fully
165:32 ground station so this is a fully managed service that lets you control
165:34 managed service that lets you control satellite Communications process data
165:37 satellite Communications process data and scale your operations without having
165:38 and scale your operations without having to worry about building or managing your
165:40 to worry about building or managing your own ground station infrastructure and so
165:43 own ground station infrastructure and so when we're talking about ground station
165:45 when we're talking about ground station a really good way to cement what the
165:47 a really good way to cement what the service is is just think of a big anten
165:49 service is is just think of a big anten ey dish that's pointing into the sky
165:51 ey dish that's pointing into the sky trying to communicate with satellites
165:53 trying to communicate with satellites because that's essentially what the
165:54 because that's essentially what the service is doing so the use cases here
165:56 service is doing so the use cases here could be for weather forecasting surface
165:58 could be for weather forecasting surface Imaging communications video broadcasts
166:02 Imaging communications video broadcasts and to use ground station the idea is
166:03 and to use ground station the idea is that you would schedule a contact so
166:05 that you would schedule a contact so that's where you're selecting a
166:06 that's where you're selecting a satellite a start and end time and the
166:08 satellite a start and end time and the ground location and then you use an a
166:11 ground location and then you use an a ground station ec2 Ami and Amazon
166:13 ground station ec2 Ami and Amazon machine image to launch ec2 instances
166:15 machine image to launch ec2 instances that will Uplink and downlink uh data
166:18 that will Uplink and downlink uh data during the the contact or receive
166:20 during the the contact or receive downlink data in an Amazon S3 bucket a
166:23 downlink data in an Amazon S3 bucket a use case could be something like you are
166:25 use case could be something like you are a company you've reached an agreement
166:27 a company you've reached an agreement with a satellite image provider to use
166:29 with a satellite image provider to use their satellites to take photos for a
166:30 their satellites to take photos for a specific region or time or whatever and
166:33 specific region or time or whatever and so the idea is that you are using adus
166:35 so the idea is that you are using adus ground station to communicate uh to that
166:37 ground station to communicate uh to that company satellite and download that s uh
166:40 company satellite and download that s uh that image data to your S3 bucket okay
166:51 hey this is andreww brown and we are looking at Aus outposts and this is a
166:53 looking at Aus outposts and this is a fully managed service that offers the
166:55 fully managed service that offers the same Aus infrastructure Services apis
166:57 same Aus infrastructure Services apis tools to virtually any data center
166:59 tools to virtually any data center co-cation space or on premise facility
167:01 co-cation space or on premise facility for a truly consistent hybrid experience
167:04 for a truly consistent hybrid experience and just to kind of summarize it it's a
167:05 and just to kind of summarize it it's a rack of servers running adaba stuff on
167:08 rack of servers running adaba stuff on your physical location okay so before we
167:10 your physical location okay so before we jump into the service or technology
167:13 jump into the service or technology itself uh let's talk about what is a
167:15 itself uh let's talk about what is a rack server or just a rack so it's a
167:17 rack server or just a rack so it's a frame designed to and organized it
167:20 frame designed to and organized it equipment so here's an example of a 42u
167:23 equipment so here's an example of a 42u rack uh and there's the concept of rack
167:26 rack uh and there's the concept of rack heights so the U stands for rack units
167:28 heights so the U stands for rack units or U spaces uh with it equal to 1.75 in
167:34 or U spaces uh with it equal to 1.75 in and the industry standard rack is a 48 U
167:37 and the industry standard rack is a 48 U um so that is a 7t rack so a full size
167:42 um so that is a 7t rack so a full size rack cage is commonly the 42 High okay
167:46 rack cage is commonly the 42 High okay and uh in it you might have equipment
167:48 and uh in it you might have equipment that is of different sizes so they could
167:50 that is of different sizes so they could be one u 2 U 3 U or 4 U high so here's
167:54 be one u 2 U 3 U or 4 U high so here's an example of you know of an interior of
167:56 an example of you know of an interior of a rack and notice that like one u 2 U 4
167:59 a rack and notice that like one u 2 U 4 U they're all a little bit shaped
168:00 U they're all a little bit shaped differently uh but they give you kind of
168:02 differently uh but they give you kind of an idea of um you know what those are so
168:06 an idea of um you know what those are so it Outpost comes in three form factors
168:08 it Outpost comes in three form factors the 42 U the one U and the 2 U so the uh
168:12 the 42 U the one U and the 2 U so the uh the first one here the 42u this is
168:14 the first one here the 42u this is basically a full rack of servers
168:16 basically a full rack of servers provided bys so you're not just getting
168:18 provided bys so you're not just getting the frame it actually comes with you
168:20 the frame it actually comes with you know servers uh and so adus delivers it
168:23 know servers uh and so adus delivers it to your Preferred Physical site fully
168:24 to your Preferred Physical site fully assembled and ready to be rolled into
168:26 assembled and ready to be rolled into the final position it is installed by
168:28 the final position it is installed by adus and the rack needs to be simply
168:29 adus and the rack needs to be simply plugged in to the power and network and
168:32 plugged in to the power and network and there's a lot of details about um the
168:34 there's a lot of details about um the specs on this on the adus website so you
168:36 specs on this on the adus website so you know I'm not going to go through them
168:37 know I'm not going to go through them all here um then there are servers that
168:39 all here um then there are servers that you can just Place into your existing
168:41 you can just Place into your existing racks so we have the one U so this is
168:43 racks so we have the one U so this is suitable for 19in y 24 in deep cabinets
168:47 suitable for 19in y 24 in deep cabinets it's using UST uh Gravitron 2 um CPUs
168:51 it's using UST uh Gravitron 2 um CPUs and you can have up to 64 virtual CPUs
168:54 and you can have up to 64 virtual CPUs we have 128 gigabytes uh 4 terabytes of
168:58 we have 128 gigabytes uh 4 terabytes of local
168:59 local NVM storage um and then you have the U
169:03 NVM storage um and then you have the U or sorry the 2 U so suitable for 19in
169:06 or sorry the 2 U so suitable for 19in wide 36 in deep Intel processors up to
169:09 wide 36 in deep Intel processors up to 128 virtual CPUs 256 gbt of memory 8
169:14 128 virtual CPUs 256 gbt of memory 8 terab of local nvme storage so there you
169:17 terab of local nvme storage so there you go
169:22 [Music] let's take a look at Cloud architecture
169:24 let's take a look at Cloud architecture terminologies before we do let's talk
169:26 terminologies before we do let's talk about some of the roles that are around
169:28 about some of the roles that are around uh doing Cloud architecture so the first
169:30 uh doing Cloud architecture so the first is Solutions architect this is a role in
169:32 is Solutions architect this is a role in a technical organization that Architects
169:34 a technical organization that Architects a technical solution using multiple
169:36 a technical solution using multiple systems via researching documentation
169:39 systems via researching documentation and experimentation and then you have
169:41 and experimentation and then you have the cloud architect this is a Solutions
169:43 the cloud architect this is a Solutions architect that is focused solely on
169:45 architect that is focused solely on architecting Technical Solutions using
169:47 architecting Technical Solutions using cloud services under understand that in
169:49 cloud services under understand that in the uh actual Marketplace a lot of times
169:51 the uh actual Marketplace a lot of times Solutions architect is used to describe
169:53 Solutions architect is used to describe both a cloud architect and a Solutions
169:55 both a cloud architect and a Solutions architect and you know these are going
169:58 architect and you know these are going to highly vary based on your locality
170:00 to highly vary based on your locality and how companies want to use these
170:01 and how companies want to use these terms but this is just me broadly
170:03 terms but this is just me broadly defining them here so just don't take
170:04 defining them here so just don't take them as a perfect word in terms of what
170:07 them as a perfect word in terms of what they're representing so a cloud
170:09 they're representing so a cloud architect needs to understand the
170:10 architect needs to understand the following terms and factors uh and
170:12 following terms and factors uh and Factor them into their designed
170:14 Factor them into their designed architecture based on the business
170:15 architecture based on the business requirements so we have the idea of
170:17 requirements so we have the idea of availability your ability to ensure
170:19 availability your ability to ensure service remains available scalability
170:21 service remains available scalability your ability to grow rapidly or
170:22 your ability to grow rapidly or unimpeded elasticity your ability to
170:24 unimpeded elasticity your ability to shrink and grow to meet the demand fault
170:26 shrink and grow to meet the demand fault tolerance your ability to prevent a
170:28 tolerance your ability to prevent a failure disaster recover your ability to
170:30 failure disaster recover your ability to recover from a failure and there are a
170:32 recover from a failure and there are a couple other things that uh that should
170:34 couple other things that uh that should be considered they're not terminologies
170:36 be considered they're not terminologies but they're definitely important to a
170:38 but they're definitely important to a Solutions architect or Cloud architect
170:40 Solutions architect or Cloud architect and uh these are things you always need
170:42 and uh these are things you always need to consider uh as well and this is just
170:46 to consider uh as well and this is just me talking to my Solutions architect
170:47 me talking to my Solutions architect friends where they'll always ask me
170:48 friends where they'll always ask me these two questions after presentation
170:50 these two questions after presentation they'll say how secure is the solution
170:53 they'll say how secure is the solution and how much is this going to cost all
170:55 and how much is this going to cost all right and so for the terminologies up
170:57 right and so for the terminologies up here we're going to Define these right
170:59 here we're going to Define these right away and we're going to figure these out
171:01 away and we're going to figure these out throughout the course we have two giant
171:03 throughout the course we have two giant sections just on cost and security alone
171:05 sections just on cost and security alone uh so there we
171:06 uh so there we [Music]
171:09 [Music] go the first term we're looking at is
171:12 go the first term we're looking at is high availability and this is your
171:13 high availability and this is your ability for your service to remain
171:15 ability for your service to remain available by ensuring there is no single
171:17 available by ensuring there is no single point of failure and or you ensure a
171:20 point of failure and or you ensure a certain level of performance so the way
171:22 certain level of performance so the way we're going to do that on ews is you'd
171:24 we're going to do that on ews is you'd want to run your workload across
171:26 want to run your workload across multiple availability zones to ensure
171:28 multiple availability zones to ensure that if one or two availability zones
171:30 that if one or two availability zones became unavailable your servers or
171:32 became unavailable your servers or applications remain available because
171:34 applications remain available because those other um those other servers are
171:36 those other um those other servers are going to be there and the way we would
171:38 going to be there and the way we would accomplish that is via elastic load
171:39 accomplish that is via elastic load balcer so a load balancer allows you to
171:42 balcer so a load balancer allows you to evenly distribute traffic to multiple
171:43 evenly distribute traffic to multiple servers in one or more data center if a
171:46 servers in one or more data center if a data center or server becomes
171:47 data center or server becomes unavailable or unhealthy the load
171:49 unavailable or unhealthy the load bouncer will route the traffic to only
171:51 bouncer will route the traffic to only the available data centers within the
171:53 the available data centers within the server and understand that just because
171:55 server and understand that just because you have additional servers doesn't mean
171:57 you have additional servers doesn't mean that you are uh you're available you
171:59 that you are uh you're available you have to you might need to meet a
172:00 have to you might need to meet a particular threshold of availability so
172:02 particular threshold of availability so you might need to have at least two
172:04 you might need to have at least two servers always running to meet the
172:05 servers always running to meet the demand so it's based on the the demand
172:07 demand so it's based on the the demand of traffic
172:09 of traffic [Music]
172:12 [Music] okay let's take a look here at high
172:14 okay let's take a look here at high scaleability so this is your ability to
172:16 scaleability so this is your ability to increase your capacity based on on the
172:18 increase your capacity based on on the increasing demand of traffic memory and
172:21 increasing demand of traffic memory and computing power and we have the terms
172:23 computing power and we have the terms vertical scaling so scaling up um this
172:26 vertical scaling so scaling up um this is where you upgrade to a bigger server
172:28 is where you upgrade to a bigger server and then there's horizontal scaling
172:29 and then there's horizontal scaling scaling out this is where you add more
172:31 scaling out this is where you add more servers of the same size and the great
172:33 servers of the same size and the great thing about scaling out or adding
172:35 thing about scaling out or adding additional servers is that you're also
172:36 additional servers is that you're also going to get um High availability so if
172:38 going to get um High availability so if you do need two servers it's always
172:40 you do need two servers it's always better to you know add an additional
172:42 better to you know add an additional server as opposed to having a larger
172:43 server as opposed to having a larger server but it's going to be very
172:45 server but it's going to be very dependent on a lot of factors okay
172:52 [Music] so scalability and elasticity seem very
172:55 so scalability and elasticity seem very similar but there is a crucial
172:56 similar but there is a crucial difference and this is your ability to
172:58 difference and this is your ability to automatically increase or decrease Your
173:00 automatically increase or decrease Your Capacity based on the current demand of
173:02 Capacity based on the current demand of traffic memory and computing power again
173:04 traffic memory and computing power again it's the it's the fact that it happens
173:06 it's the it's the fact that it happens automatically and you can go both ways
173:08 automatically and you can go both ways increase or decrease so for horizontal
173:10 increase or decrease so for horizontal scaling we have the concept of scaling
173:12 scaling we have the concept of scaling out so add more servers of the same size
173:15 out so add more servers of the same size and then scaling in removing
173:16 and then scaling in removing underutilized servers of the same size
173:20 underutilized servers of the same size and vertical scaling is generally hard
173:21 and vertical scaling is generally hard for traditional architectures so you'll
173:23 for traditional architectures so you'll usually only see horizontal scaling
173:25 usually only see horizontal scaling described with elasticity um and the way
173:28 described with elasticity um and the way we would accomplish uh being highly
173:30 we would accomplish uh being highly elastic is using autoscaling groups asgs
173:33 elastic is using autoscaling groups asgs and this is an naus feature that will
173:35 and this is an naus feature that will automatically add or remove servers
173:36 automatically add or remove servers based on scaling rules you define based
173:39 based on scaling rules you define based on those metrics
173:41 on those metrics [Music]
173:44 [Music] okay let's talk about being highly fault
173:47 okay let's talk about being highly fault tolerant so this is your ability for
173:48 tolerant so this is your ability for your service to ensure there is no
173:50 your service to ensure there is no single point of failure preventing the
173:52 single point of failure preventing the chance of failure and the way we could
173:54 chance of failure and the way we could do that is with fail overs so this is
173:56 do that is with fail overs so this is when you have a plan to shift traffic to
173:58 when you have a plan to shift traffic to a redundant system in case the primary
174:00 a redundant system in case the primary system fails a very common example is
174:03 system fails a very common example is having a copy or secondary uh uh uh of
174:07 having a copy or secondary uh uh uh of your database where all ongoing changes
174:09 your database where all ongoing changes are synced the secondary system is not
174:11 are synced the secondary system is not in use until a fail over occurs and it
174:13 in use until a fail over occurs and it becomes the primary database so when
174:16 becomes the primary database so when we're talking about databases on abs
174:18 we're talking about databases on abs this is the concept of RDS multi-az so
174:21 this is the concept of RDS multi-az so this is when you run a duplicate standby
174:23 this is when you run a duplicate standby database in another availability Zone in
174:25 database in another availability Zone in the case your primary database
174:28 the case your primary database [Music]
174:31 [Music] fails and last here is high durability
174:34 fails and last here is high durability so this is your ability to recover from
174:35 so this is your ability to recover from a disaster and to prevent the loss of
174:37 a disaster and to prevent the loss of data so solutions that recover a
174:39 data so solutions that recover a disaster uh from a disaster is known as
174:41 disaster uh from a disaster is known as disaster recovery so do you have a
174:43 disaster recovery so do you have a backup how fast can you restore the
174:45 backup how fast can you restore the backup does your backup still work how
174:46 backup does your backup still work how do you ensure current live data is not
174:48 do you ensure current live data is not corrupt and so maybe a solution ads
174:50 corrupt and so maybe a solution ads would be using Cloud endurer which is a
174:52 would be using Cloud endurer which is a disaster recovery uh service which
174:54 disaster recovery uh service which continuously replicates your machines in
174:56 continuously replicates your machines in a lowcost staging area in your target AB
174:58 a lowcost staging area in your target AB account and preferred region enabling
175:00 account and preferred region enabling fast and reliable recovery in the case
175:01 fast and reliable recovery in the case of an IT data center fails
175:05 of an IT data center fails [Music]
175:08 [Music] okay so to understand Disaster Recovery
175:11 okay so to understand Disaster Recovery we need to know more about uh things
175:14 we need to know more about uh things around it like business continuity plans
175:17 around it like business continuity plans BCPS and RTO and rpos so a BCP is a
175:22 BCPS and RTO and rpos so a BCP is a document that outlines how a business
175:23 document that outlines how a business will continue operating during an
175:24 will continue operating during an unplanned disruption in services so it's
175:27 unplanned disruption in services so it's basically the plan that you're going to
175:28 basically the plan that you're going to execute uh if that happens and so here
175:32 execute uh if that happens and so here we have a disaster and you can see that
175:34 we have a disaster and you can see that there's a chance of data loss and
175:35 there's a chance of data loss and downtime and these two um uh factors as
175:39 downtime and these two um uh factors as RPO and RTO are going to define the
175:41 RPO and RTO are going to define the length of these durations so recovery
175:43 length of these durations so recovery Point objective is the maximum
175:45 Point objective is the maximum acceptable amount of data loss after an
175:47 acceptable amount of data loss after an unplanned data loss incident
175:48 unplanned data loss incident Express this amount of time so how much
175:50 Express this amount of time so how much data are you willing to lose and then
175:53 data are you willing to lose and then recovery time objective so the maximum
175:55 recovery time objective so the maximum amount of downtime your business can
175:56 amount of downtime your business can tolerate without inuring a significant
175:59 tolerate without inuring a significant financial loss so how much time you're
176:01 financial loss so how much time you're willing to go down okay so those are the
176:04 willing to go down okay so those are the two there and now let's go take a look
176:05 two there and now let's go take a look at the disaster recovery options that we
176:07 at the disaster recovery options that we can use to define in our our
176:11 can use to define in our our [Music]
176:14 [Music] BCP so now let's take a look at our
176:16 BCP so now let's take a look at our disaster recovery options uh and based
176:19 disaster recovery options uh and based on what you choose they're going to be a
176:20 on what you choose they're going to be a trade of cost versus time to recover
176:22 trade of cost versus time to recover based on the rpos your RTO of course and
176:25 based on the rpos your RTO of course and so sometimes this is rep represented
176:27 so sometimes this is rep represented vertically like a a thermostat or you
176:29 vertically like a a thermostat or you can do it horizontally here um both are
176:32 can do it horizontally here um both are valid ways of displaying this
176:33 valid ways of displaying this information but I just have it
176:34 information but I just have it horizontally here today and so we have
176:37 horizontally here today and so we have low or high or you could say um even
176:40 low or high or you could say um even though I don't have it written here this
176:41 though I don't have it written here this could be cold or this could be hot okay
176:45 could be cold or this could be hot okay so um on the left hand side we got
176:47 so um on the left hand side we got backup and restore pilot light warm
176:49 backup and restore pilot light warm standby multi-active site notice we're
176:51 standby multi-active site notice we're using the like the words like pilot
176:53 using the like the words like pilot light warm things that are relating to
176:55 light warm things that are relating to temperature so again cold and hot all
176:58 temperature so again cold and hot all right so let's just walk through what
177:00 right so let's just walk through what each of these things conceptually do uh
177:03 each of these things conceptually do uh in terms of architecture so when you're
177:05 in terms of architecture so when you're doing a backup and restore you're back
177:07 doing a backup and restore you're back you basically back up your data and at
177:10 you basically back up your data and at the time of Disaster Recovery you're
177:11 the time of Disaster Recovery you're just going to restore it to New
177:12 just going to restore it to New infrastructure uh for a pilot light the
177:14 infrastructure uh for a pilot light the data is replicated to another region
177:16 data is replicated to another region with the minimal Services running to
177:18 with the minimal Services running to keep on replicating that data and so you
177:20 keep on replicating that data and so you might have some core Services running a
177:22 might have some core Services running a warm standby is a scale down copy of
177:25 warm standby is a scale down copy of your infrastructure so you basically
177:26 your infrastructure so you basically have everything that you would
177:27 have everything that you would absolutely need to run an application
177:30 absolutely need to run an application but the idea is it's not at scale and so
177:32 but the idea is it's not at scale and so at any time when there's an incident
177:33 at any time when there's an incident you're going to scale up to the capacity
177:35 you're going to scale up to the capacity that you need and then you have
177:37 that you need and then you have multi-site active active where you you
177:39 multi-site active active where you you have a scaled up copy of your
177:41 have a scaled up copy of your infrastructure in another region so
177:42 infrastructure in another region so basically everything you have
177:44 basically everything you have identically in another region and so in
177:46 identically in another region and so in terms of the rpos and the RTO for back
177:48 terms of the rpos and the RTO for back and restore you're looking at hours uh
177:50 and restore you're looking at hours uh with the pilot light you're looking at
177:52 with the pilot light you're looking at 10 minutes with a warm standby you're
177:53 10 minutes with a warm standby you're looking at minutes and multi sight uh
177:56 looking at minutes and multi sight uh active active you're looking at uh real
177:58 active active you're looking at uh real time so you know hopefully that gives
178:00 time so you know hopefully that gives you an idea of you know the difference
178:02 you an idea of you know the difference in terms of scale but let's just look at
178:03 in terms of scale but let's just look at more detail so for a backup and restore
178:06 more detail so for a backup and restore this is for low priority use cases
178:08 this is for low priority use cases restore data after event deploy
178:10 restore data after event deploy resources after an event and it's very
178:12 resources after an event and it's very cost effective uh for pilot light this
178:14 cost effective uh for pilot light this is where you have less stringent RTO and
178:17 is where you have less stringent RTO and rpos so you're going to be just running
178:19 rpos so you're going to be just running your core Services uh you're going to
178:21 your core Services uh you're going to start and scale resources after the
178:22 start and scale resources after the event and this is a little bit more
178:24 event and this is a little bit more expensive this is uh very good for warm
178:27 expensive this is uh very good for warm standby is good for business critical
178:28 standby is good for business critical services so you scale resources after
178:31 services so you scale resources after the event uh and it's uh almost very
178:34 the event uh and it's uh almost very it's very it's costly but it's not as
178:36 it's very it's costly but it's not as expensive as a multi-site active active
178:38 expensive as a multi-site active active so you get zero downtime near zero loss
178:42 so you get zero downtime near zero loss uh you have it's great for Mission
178:43 uh you have it's great for Mission critical services and it's just as
178:45 critical services and it's just as expensive as your original uh structure
178:48 expensive as your original uh structure so you're basically doubling the class
178:49 so you're basically doubling the class there
178:50 there [Music]
178:54 [Music] okay so we already defined RTO but let's
178:57 okay so we already defined RTO but let's redefine it again based on what adus
178:59 redefine it again based on what adus describes in their white paper and just
179:02 describes in their white paper and just look at how it Maps against um the
179:04 look at how it Maps against um the disaster recovery option so re recovery
179:06 disaster recovery option so re recovery time objective is the maximum acceptable
179:08 time objective is the maximum acceptable delay between the interruption of
179:10 delay between the interruption of service and restoration of service this
179:12 service and restoration of service this objective determines the uh what is
179:14 objective determines the uh what is considered an acceptable time window
179:16 considered an acceptable time window when service is unavailable and is
179:17 when service is unavailable and is defined by the organization and so this
179:19 defined by the organization and so this is the diagram found in the white paper
179:21 is the diagram found in the white paper and so on the left hand side we have
179:23 and so on the left hand side we have cost and complexity here and then
179:26 cost and complexity here and then lengths of serious Interruption and what
179:28 lengths of serious Interruption and what you can see here is that the cost and
179:30 you can see here is that the cost and complexity for a multi- sight active
179:32 complexity for a multi- sight active active is very high but the length of
179:34 active is very high but the length of service Interruption is zero and then as
179:37 service Interruption is zero and then as we go down we have warm standby so it's
179:40 we go down we have warm standby so it's significantly like at least half uh the
179:42 significantly like at least half uh the complexity of that one then we have our
179:45 complexity of that one then we have our pilot light down here and back up and
179:47 pilot light down here and back up and restore but notice backup restore takes
179:49 restore but notice backup restore takes the longest amount of time and notice
179:51 the longest amount of time and notice here we have a recovery time objective
179:53 here we have a recovery time objective so in your BCP you kind of Define where
179:55 so in your BCP you kind of Define where that is based on the cost of business
179:57 that is based on the cost of business impact so you might have to calculate
179:59 impact so you might have to calculate that saying okay what is our cost over
180:00 that saying okay what is our cost over time based on the length of service
180:02 time based on the length of service Interruption where do we want our RTO to
180:04 Interruption where do we want our RTO to be what is the acceptable recovery cost
180:07 be what is the acceptable recovery cost and this is where you're going to decide
180:09 and this is where you're going to decide what you want to do so here we have
180:11 what you want to do so here we have pilot light and backup and restore and
180:13 pilot light and backup and restore and so this company has to decide whether
180:15 so this company has to decide whether they want to do a pilot light or they're
180:17 they want to do a pilot light or they're going to do a backham restore but it
180:18 going to do a backham restore but it sounds like this is where they're going
180:19 sounds like this is where they're going to be which is at the pilot uh light for
180:22 to be which is at the pilot uh light for what is acceptable in their business use
180:24 what is acceptable in their business use case
180:25 case [Music]
180:29 [Music] okay let's do the same for RPO so
180:31 okay let's do the same for RPO so recovery Point objective is the maximum
180:33 recovery Point objective is the maximum acceptable amount of time since the last
180:35 acceptable amount of time since the last data recovery point the objective
180:36 data recovery point the objective determines what is considered an
180:38 determines what is considered an acceptable loss of data between the last
180:40 acceptable loss of data between the last recovery point and the interruption of
180:41 recovery point and the interruption of service and it's defined by the
180:42 service and it's defined by the organization again we pulled this from
180:44 organization again we pulled this from the a white paper for disaster recovery
180:47 the a white paper for disaster recovery and and uh we have cost and complexity
180:50 and and uh we have cost and complexity but this time it's replaced with data
180:52 but this time it's replaced with data loss before service Interruption so uh
180:56 loss before service Interruption so uh for multisite again it's going to be
180:57 for multisite again it's going to be very expensive and high up here as you
180:59 very expensive and high up here as you notice it's not like a perfect um uh
181:03 notice it's not like a perfect um uh curve it's just it's a bit different in
181:04 curve it's just it's a bit different in terms of what it looks like so here we
181:06 terms of what it looks like so here we have warm stand standby pilot light um
181:09 have warm stand standby pilot light um and so you'll see that the data loss is
181:12 and so you'll see that the data loss is um not a big deal but for backup and
181:14 um not a big deal but for backup and restore it really juts out there so you
181:16 restore it really juts out there so you can see that you can get pretty good
181:17 can see that you can get pretty good good results just with the pilot light
181:19 good results just with the pilot light and the cost and complexity is very low
181:21 and the cost and complexity is very low again we have to look at our cost and
181:23 again we have to look at our cost and business impact so we got to follow that
181:25 business impact so we got to follow that line and we need to see where our
181:27 line and we need to see where our acceptable uh recovery cost is and so uh
181:31 acceptable uh recovery cost is and so uh you're going to notice that uh we have a
181:33 you're going to notice that uh we have a bit of an intersection here okay and so
181:36 bit of an intersection here okay and so we need to determine you know like are
181:38 we need to determine you know like are we going to be doing a warm standby
181:40 we going to be doing a warm standby looks like we have the cost to do it um
181:43 looks like we have the cost to do it um uh but you know it just really depends
181:44 uh but you know it just really depends you know do we want to be down here or
181:46 you know do we want to be down here or down there okay so hopefully that helps
181:48 down there okay so hopefully that helps and visualize that information for
181:50 and visualize that information for [Music]
181:54 [Music] you hey this is Andrew Brown from
181:56 you hey this is Andrew Brown from exampro and what I want to show you here
181:58 exampro and what I want to show you here is a real world architectural diagram I
182:00 is a real world architectural diagram I created this a while ago this is a
182:01 created this a while ago this is a previous version of the um exam Pro or
182:03 previous version of the um exam Pro or technically teacher seat platform uh
182:05 technically teacher seat platform uh that powers The Learning Experience uh
182:07 that powers The Learning Experience uh for by class certifications and so I'm
182:09 for by class certifications and so I'm hoping that by giving you some exposure
182:11 hoping that by giving you some exposure you'll absorb some information here uh
182:13 you'll absorb some information here uh and that will carry through to really
182:15 and that will carry through to really help you cement what these services do
182:16 help you cement what these services do and how they work together
182:18 and how they work together um now you might be asking how did I
182:19 um now you might be asking how did I make this well I'm in Adobe XD it's by
182:21 make this well I'm in Adobe XD it's by Photoshop or sorry Adobe it's free to
182:23 Photoshop or sorry Adobe it's free to download but there's a lot of options
182:25 download but there's a lot of options out there and but the first thing you'll
182:27 out there and but the first thing you'll need is those AWS architectural icons so
182:29 need is those AWS architectural icons so these are free on AWS you can download
182:31 these are free on AWS you can download them in PowerPoint download them as
182:33 them in PowerPoint download them as asset as svgs and pgs which is what I
182:35 asset as svgs and pgs which is what I have done and start using them in your
182:37 have done and start using them in your um uh whatever software you like there's
182:40 um uh whatever software you like there's also third party providers out there so
182:41 also third party providers out there so like there's Lucid charts I love Lucid
182:43 like there's Lucid charts I love Lucid charts but I don't use it to make
182:44 charts but I don't use it to make architectural diagrams uh for AWS um but
182:48 architectural diagrams uh for AWS um but you know you can drag drop and stuff and
182:50 you know you can drag drop and stuff and they already have the library there and
182:51 they already have the library there and there's a bunch of them that you can
182:53 there's a bunch of them that you can choose from so uh you know that's
182:55 choose from so uh you know that's interesting but let's take a look at one
182:57 interesting but let's take a look at one that we can download maybe everyone's
182:58 that we can download maybe everyone's familiar with PowerPoint so here is the
183:01 familiar with PowerPoint so here is the adus architectural icons and the reason
183:03 adus architectural icons and the reason I'm showing you this is not because it
183:04 I'm showing you this is not because it just contains icons but it also suggests
183:07 just contains icons but it also suggests how you should build them so if I go
183:09 how you should build them so if I go through here they'll give you a
183:10 through here they'll give you a definition of those system elements uh
183:13 definition of those system elements uh how they would look like here so we have
183:14 how they would look like here so we have our group icons our layer group our
183:16 our group icons our layer group our service icons res icons where they
183:18 service icons res icons where they should go uh and then they have some
183:20 should go uh and then they have some interesting guidelines of like dos and
183:22 interesting guidelines of like dos and don'ts so here's like a simple example
183:25 don'ts so here's like a simple example of a get to an S3 bucket um here's an
183:27 of a get to an S3 bucket um here's an example of using VPC subnets and things
183:30 example of using VPC subnets and things like that on the inside um and then you
183:34 like that on the inside um and then you can see kind of like all the groups that
183:35 can see kind of like all the groups that we
183:36 we have and it'll show all like the uh the
183:39 have and it'll show all like the uh the um arrows it's a big faux PA to make U
183:43 um arrows it's a big faux PA to make U diagonal arrows that's just something
183:45 diagonal arrows that's just something eight of us toine but you'll see a lot
183:46 eight of us toine but you'll see a lot of people do them anyway
183:48 of people do them anyway and then you'll see all the icons so do
183:50 and then you'll see all the icons so do you have to make them like ad a suggest
183:52 you have to make them like ad a suggest no but you know if if you like the way
183:54 no but you know if if you like the way they look that is fine everyone just
183:56 they look that is fine everyone just does whatever they want honestly so
183:58 does whatever they want honestly so anyway now that we've seen you know how
184:00 anyway now that we've seen you know how we can go get the resources to make our
184:02 we can go get the resources to make our own I have Adobe XD open up here and so
184:04 own I have Adobe XD open up here and so I just kind of want to walk you through
184:05 I just kind of want to walk you through what's going on here so again I said
184:07 what's going on here so again I said this is a a
184:09 this is a a traditional um architecture meaning that
184:12 traditional um architecture meaning that it's powered by virtual machines and so
184:14 it's powered by virtual machines and so what we need to look for uh is ec2
184:17 what we need to look for uh is ec2 because that's where it's going to start
184:18 because that's where it's going to start that's our virtual machine and you'll
184:19 that's our virtual machine and you'll notice we have one here so there's a T2
184:22 notice we have one here so there's a T2 um uh that's running over here and then
184:25 um uh that's running over here and then over here we have a T2 okay so uh we
184:27 over here we have a T2 okay so uh we have a blue and a green environment so
184:29 have a blue and a green environment so this is our running environment so I'm
184:31 this is our running environment so I'm just going to zoom on in here okay so
184:33 just going to zoom on in here okay so the web app would be running on this and
184:37 the web app would be running on this and um and then on the outside here we have
184:39 um and then on the outside here we have an autoscaling group and so autoscaling
184:40 an autoscaling group and so autoscaling groups allow us to um manage a group of
184:43 groups allow us to um manage a group of ec2 instances and they will
184:45 ec2 instances and they will automatically scale if the demand
184:46 automatically scale if the demand increases or or or decline so if this
184:50 increases or or or decline so if this machine can't handle it it will just
184:51 machine can't handle it it will just automatically provision a new one and so
184:53 automatically provision a new one and so I've contained it in this environment
184:55 I've contained it in this environment here because I'm representing a blue
184:56 here because I'm representing a blue green deploy meaning that when I deploy
184:59 green deploy meaning that when I deploy this will get this will be the
185:00 this will get this will be the environment that replaces things and so
185:02 environment that replaces things and so you can see I have a lot of lines being
185:04 you can see I have a lot of lines being drawn around here so um over here we
185:07 drawn around here so um over here we have uh um parameter store so parameter
185:10 have uh um parameter store so parameter store is a place where we can store our
185:12 store is a place where we can store our environment variables um or application
185:15 environment variables um or application configuration variables and so I have
185:16 configuration variables and so I have this line going here and it's just
185:19 this line going here and it's just saying we're going to take these
185:20 saying we're going to take these environment variables and put them into
185:23 environment variables and put them into the application okay uh and then there's
185:26 the application okay uh and then there's also uh the database credential so here
185:28 also uh the database credential so here we are using postgress over here so and
185:31 we are using postgress over here so and then we need the database credential so
185:32 then we need the database credential so we're grabbing those database
185:33 we're grabbing those database credentials those are stored in Secrets
185:35 credentials those are stored in Secrets manager and we're giving to the
185:37 manager and we're giving to the application so the app knows how to
185:38 application so the app knows how to connect to the database and this one
185:40 connect to the database and this one knows how to uh configure it okay then
185:43 knows how to uh configure it okay then we have um a bunch of uh buckets here
185:46 we have um a bunch of uh buckets here for different organiz ganizations and so
185:49 for different organiz ganizations and so you know S3 is for storage so this is a
185:51 you know S3 is for storage so this is a way we're going to um store a variety of
185:53 way we're going to um store a variety of things so like user data assets
185:55 things so like user data assets artifacts Cloud information templates so
185:57 artifacts Cloud information templates so some of this is for the app some of them
185:59 some of this is for the app some of them is for the infrastructure so that's one
186:01 is for the infrastructure so that's one thing there okay then over here we have
186:04 thing there okay then over here we have u a cicd pipeline so we have code
186:08 u a cicd pipeline so we have code Pipeline and so code pipeline is
186:09 Pipeline and so code pipeline is triggered by GitHub so we put our code
186:12 triggered by GitHub so we put our code in GitHub and when that happens it's
186:13 in GitHub and when that happens it's going to do a code build so that's going
186:15 going to do a code build so that's going to build out a server
186:18 to build out a server um and then from there it's going to run
186:20 um and then from there it's going to run another code build server and then from
186:22 another code build server and then from there it's going to then um uh uh use
186:26 there it's going to then um uh uh use code deploy and so code deploy is going
186:28 code deploy and so code deploy is going to trigger a deploy what it will do is
186:30 to trigger a deploy what it will do is create a new environment so it's going
186:32 create a new environment so it's going to create a copy of this um sorry it's
186:36 to create a copy of this um sorry it's going to create a cop this is actually
186:37 going to create a cop this is actually the environment that's running so we'll
186:38 the environment that's running so we'll copy that and that will be our new
186:40 copy that and that will be our new environment right okay and so when the
186:44 environment right okay and so when the deploy is done it will swap and then
186:45 deploy is done it will swap and then that environment will become this new
186:47 that environment will become this new one
186:48 one um and so you know again this is
186:50 um and so you know again this is actually really the the running server
186:52 actually really the the running server it's just kind of easy to get hung up on
186:53 it's just kind of easy to get hung up on this one but the idea here is that um
186:56 this one but the idea here is that um you know that's how deployment works but
186:58 you know that's how deployment works but let's say uh you know we want to get uh
187:01 let's say uh you know we want to get uh traffic to this actual instance this is
187:03 traffic to this actual instance this is going to come through the internet and
187:05 going to come through the internet and the internet's going to probably go to
187:07 the internet's going to probably go to rid 3 so ref3 is used for domain names
187:09 rid 3 so ref3 is used for domain names so this' be like exampro doco
187:11 so this' be like exampro doco teacher.com we pass that over to our
187:13 teacher.com we pass that over to our elastic load balancer which in this case
187:16 elastic load balancer which in this case is an application load bouncer that's
187:17 is an application load bouncer that's why it's called ALB and that's going to
187:20 why it's called ALB and that's going to distribute the traffic there if we
187:21 distribute the traffic there if we wanted to run the server in another um
187:25 wanted to run the server in another um in another availability zone so that we
187:27 in another availability zone so that we make it highly available um you know ALB
187:30 make it highly available um you know ALB the elastic load bouncer application
187:31 the elastic load bouncer application load balcer is going to uh have some
187:34 load balcer is going to uh have some traffic go here and some traffic go
187:35 traffic go here and some traffic go there so this is just uh the blue
187:37 there so this is just uh the blue environment or whichever the current
187:38 environment or whichever the current environment is over here now when we
187:41 environment is over here now when we want to deploy new versions we're going
187:43 want to deploy new versions we're going to use launch templates and launch
187:45 to use launch templates and launch templates um uh are necessary when using
187:49 templates um uh are necessary when using Autos scaling groups so um you know you
187:51 Autos scaling groups so um you know you do have to Define launch template it
187:52 do have to Define launch template it just says like what is the shape of this
187:54 just says like what is the shape of this instance type like what's this family
187:56 instance type like what's this family what should it be and then we need an
187:58 what should it be and then we need an Amazon machine image so our Amazon
188:00 Amazon machine image so our Amazon machine image is custom built because we
188:02 machine image is custom built because we are installing all the stuff that we
188:03 are installing all the stuff that we want on it and so in order to automate
188:06 want on it and so in order to automate that process we are using um SSM
188:09 that process we are using um SSM automation documents so SSM stands for
188:11 automation documents so SSM stands for systems manager and automation allows
188:13 systems manager and automation allows you to automate that step so what it's
188:15 you to automate that step so what it's going to do is launch an instance
188:16 going to do is launch an instance install Ruby install postgress download
188:18 install Ruby install postgress download the codebase then it's going to create
188:20 the codebase then it's going to create that Ami and then um it will do a bunch
188:24 that Ami and then um it will do a bunch of other stuff here as well and this is
188:26 of other stuff here as well and this is going to run weekly or actually at the
188:28 going to run weekly or actually at the time uh it was running nightly so we're
188:30 time uh it was running nightly so we're doing nightly builds so that we would
188:32 doing nightly builds so that we would always get the latest um updates to our
188:35 always get the latest um updates to our server um because it's a virtual machine
188:37 server um because it's a virtual machine there could always be uh new updates for
188:39 there could always be uh new updates for that Linux version or Amazon machine Li
188:42 that Linux version or Amazon machine Li version we were using and then there's a
188:44 version we were using and then there's a bunch of other stuff here so you know um
188:47 bunch of other stuff here so you know um hopefully that kind of gives you an idea
188:48 hopefully that kind of gives you an idea like the complexity of it and you know
188:50 like the complexity of it and you know this is how I like to make my
188:51 this is how I like to make my architectural diagrams very in detailed
188:53 architectural diagrams very in detailed so that we can um look at them but yeah
188:56 so that we can um look at them but yeah if that was too much that's fine but you
188:58 if that was too much that's fine but you know that's just the complexity of it if
189:00 know that's just the complexity of it if you build your own you'll start to
189:01 you build your own you'll start to really grasp this stuff pretty well
189:03 really grasp this stuff pretty well [Music]
189:06 [Music] okay so what I want to do is just show
189:09 okay so what I want to do is just show you how high availability is built into
189:10 you how high availability is built into some ad Services where in other cases
189:13 some ad Services where in other cases you have to explicitly choose that you
189:15 you have to explicitly choose that you want something to be highly available uh
189:17 want something to be highly available uh so what I'm going to do is make my way
189:18 so what I'm going to do is make my way over to S3 and so with S3 this is where
189:21 over to S3 and so with S3 this is where you can create S3 buckets and this
189:23 you can create S3 buckets and this allows you uh to store things and so the
189:26 allows you uh to store things and so the great thing about S3 is that it's
189:27 great thing about S3 is that it's basically serverless storage so the idea
189:29 basically serverless storage so the idea is that you're just going to choose your
189:31 is that you're just going to choose your region and by default it's going to
189:33 region and by default it's going to replicate your data across multiple um
189:36 replicate your data across multiple um uh data centers or azs and so this one's
189:39 uh data centers or azs and so this one's already highly available by default with
189:41 already highly available by default with the standard tier uh so that is
189:43 the standard tier uh so that is something that's really nice but other
189:44 something that's really nice but other services uh you know like ec2 the idea
189:48 services uh you know like ec2 the idea is that you are going to launch yourself
189:50 is that you are going to launch yourself an ec2 instance so we launch that one
189:52 an ec2 instance so we launch that one and the problem with this is that if you
189:54 and the problem with this is that if you launch a single
189:55 launch a single ec2 that is not highly available because
189:58 ec2 that is not highly available because it's a single server running in a single
190:02 it's a single server running in a single um AZ so here you know we would choose
190:05 um AZ so here you know we would choose our subnet our subnet is our
190:06 our subnet our subnet is our availability Zone but you'd have to
190:08 availability Zone but you'd have to launch at least two additional servers
190:10 launch at least two additional servers and then you'd have to Route um uh you'd
190:13 and then you'd have to Route um uh you'd have to uh have something that would
190:14 have to uh have something that would balance uh the traffic to the to the
190:16 balance uh the traffic to the to the three which is a load balcer and so in
190:18 three which is a load balcer and so in this case you have to construct your
190:20 this case you have to construct your high availability then you have services
190:23 high availability then you have services like elastic beanock this is a platform
190:25 like elastic beanock this is a platform as a service um and we'll go to
190:28 as a service um and we'll go to environments here I'm not sure I wasn't
190:29 environments here I'm not sure I wasn't showing up there um and so the idea is
190:31 showing up there um and so the idea is that with elastic beant stock I'm just
190:34 that with elastic beant stock I'm just going to click on the main service here
190:35 going to click on the main service here you're going to go ahead and uh create
190:38 you're going to go ahead and uh create your application or create your
190:39 your application or create your environment you probably want to create
190:40 environment you probably want to create an environment first here okay and so I
190:43 an environment first here okay and so I would choose a web server and then the
190:46 would choose a web server and then the idea is I just name so my application
190:49 idea is I just name so my application here my uh environment and then down
190:52 here my uh environment and then down below you go configure more options
190:54 below you go configure more options whoops it wants me to choose everything
190:56 whoops it wants me to choose everything that's totally
190:58 that's totally fine and we say configure more options
191:00 fine and we say configure more options we're not going to create it because um
191:02 we're not going to create it because um we don't want to create one but the idea
191:04 we don't want to create one but the idea is that uh you you could choose whether
191:07 is that uh you you could choose whether you want this to be high highly
191:08 you want this to be high highly available or not so see it says single
191:10 available or not so see it says single instance so free tier uh and then if you
191:12 instance so free tier uh and then if you choose this what it's going to do it set
191:15 choose this what it's going to do it set up a bunch of stuff for you so it's
191:16 up a bunch of stuff for you so it's going to set up an application load
191:17 going to set up an application load balancer for you it's going to set up
191:19 balancer for you it's going to set up Auto scaling groups for you to make it
191:21 Auto scaling groups for you to make it highly available it's going to run at
191:22 highly available it's going to run at least uh between 1 to four instances so
191:26 least uh between 1 to four instances so this does everything that uh ec2 you'd
191:28 this does everything that uh ec2 you'd have to do manually setting up so that's
191:30 have to do manually setting up so that's really
191:31 really nice okay so you know some options have
191:34 nice okay so you know some options have that if we make it our way over to RDS
191:36 that if we make it our way over to RDS and again we're not cating anything
191:37 and again we're not cating anything we're just looking at the options it
191:39 we're just looking at the options it gives us when we uh start things these
191:41 gives us when we uh start things these up
191:42 up here we'll make our way over to RDS when
191:44 here we'll make our way over to RDS when it gives us a moment here
191:50 and if we go ahead and create ourselves a new
191:55 database and we look at something like a postgress database notice that we have a
191:58 postgress database notice that we have a production option and a Dev test option
192:01 production option and a Dev test option and so I mean usually it shows us the
192:03 and so I mean usually it shows us the price down here so even test Dev is $118
192:06 price down here so even test Dev is $118 which is not true you can make it
192:07 which is not true you can make it cheaper than that but the idea is that
192:09 cheaper than that but the idea is that when you choose between these two
192:11 when you choose between these two options um it's going to set up uh
192:14 options um it's going to set up uh multi-az it's going to that means that
192:16 multi-az it's going to that means that it's going to run a an additional um uh
192:19 it's going to run a an additional um uh database in another availability Zone
192:21 database in another availability Zone replicate that data over so that it
192:23 replicate that data over so that it stays highly available um you know it's
192:26 stays highly available um you know it's going to have autoscaling uh uh part of
192:29 going to have autoscaling uh uh part of it and so some Services you just choose
192:31 it and so some Services you just choose it abstractly so you just have to
192:34 it abstractly so you just have to understand what highly availability is
192:35 understand what highly availability is going to mean underneath so hopefully
192:37 going to mean underneath so hopefully that kind of gives you a picture of high
192:39 that kind of gives you a picture of high availability on
192:40 availability on [Music]
192:44 [Music] AWS hey this is Andrew Brown from exam
192:46 AWS hey this is Andrew Brown from exam Pro and we are looking at adus
192:48 Pro and we are looking at adus application programming interface also
192:50 application programming interface also known as adus API so before we talk
192:53 known as adus API so before we talk about uh the API let's describe what
192:56 about uh the API let's describe what application programming interface is so
192:57 application programming interface is so an API is software that allows two
192:59 an API is software that allows two applications or services to talk to each
193:02 applications or services to talk to each other and the most common type of API is
193:04 other and the most common type of API is via HTTP requests and so the ads API is
193:08 via HTTP requests and so the ads API is actually an HTTP API and you can
193:11 actually an HTTP API and you can interact with it by sending HPS requests
193:14 interact with it by sending HPS requests using an application interacting with
193:16 using an application interacting with apis like Postman and so here's kind of
193:19 apis like Postman and so here's kind of an example of what a request would be
193:21 an example of what a request would be that would be sent out and so the way it
193:23 that would be sent out and so the way it works is that each ad a service
193:25 works is that each ad a service generally has a service endpoint so see
193:27 generally has a service endpoint so see where it says monitoring that's going to
193:28 where it says monitoring that's going to be Cloud watch so sometimes they're
193:30 be Cloud watch so sometimes they're named after the services sometimes the
193:32 named after the services sometimes the name is a bit obscure and of course you
193:34 name is a bit obscure and of course you can't just call an uh call an API
193:37 can't just call an uh call an API request without authenticating or
193:39 request without authenticating or authorizing and so you have to sign your
193:41 authorizing and so you have to sign your request and so that's a process of
193:43 request and so that's a process of making a separate request uh with your
193:45 making a separate request uh with your adus credentials to get back a a
193:47 adus credentials to get back a a temporary token uh in order to authorize
193:50 temporary token uh in order to authorize that and I don't have room to show it
193:52 that and I don't have room to show it but the thing is is that what you'd be
193:54 but the thing is is that what you'd be also going along with those requests
193:56 also going along with those requests would be to provide an action so when
193:59 would be to provide an action so when you look at um the adus API it will show
194:03 you look at um the adus API it will show you a bunch of actions that you can call
194:05 you a bunch of actions that you can call they're basically the same ones you'll
194:06 they're basically the same ones you'll see in the IM policies so it could be
194:08 see in the IM policies so it could be like describe ec2 instances Or List
194:11 like describe ec2 instances Or List buckets um and they can also be
194:13 buckets um and they can also be accompanied with parameters okay so you
194:16 accompanied with parameters okay so you know we're probably not going to show
194:18 know we're probably not going to show you how to uh make an API request
194:20 you how to uh make an API request directly because that's not something
194:21 directly because that's not something that you would generally do um but what
194:24 that you would generally do um but what you would do is you'd probably use the
194:27 you would do is you'd probably use the abis Management console which is powered
194:29 abis Management console which is powered by the API use the Adis SDK which is
194:31 by the API use the Adis SDK which is powered by the API or using the ad CLI
194:34 powered by the API or using the ad CLI so we'll cover all those three
194:36 so we'll cover all those three [Music]
194:40 [Music] okay all right so what I want to do is
194:42 okay all right so what I want to do is just point you to where you'd find the
194:44 just point you to where you'd find the resources to use the API program
194:47 resources to use the API program automatically uh we're not going to
194:48 automatically uh we're not going to actually use the API because there's a
194:50 actually use the API because there's a lot more to it uh than what I'm going to
194:52 lot more to it uh than what I'm going to show you here but at least you'll be
194:54 show you here but at least you'll be familiar with how the API works so I'm
194:56 familiar with how the API works so I'm on the ads. amazon.com website if you
194:59 on the ads. amazon.com website if you type in docs the type top there it's
195:01 type in docs the type top there it's going to bring you to the main
195:03 going to bring you to the main documentation and what we're looking for
195:05 documentation and what we're looking for if we scroll on down there should be a
195:07 if we scroll on down there should be a general reference area where we have
195:08 general reference area where we have service endpoints if we click into here
195:11 service endpoints if we click into here it's going to uh talk about um how a
195:14 it's going to uh talk about um how a service endpoint is structured and if we
195:16 service endpoint is structured and if we go down to abis API we can see some
195:18 go down to abis API we can see some additional information of course to use
195:21 additional information of course to use um the API you're going to have to sign
195:23 um the API you're going to have to sign API requests first which is not a super
195:26 API requests first which is not a super simple process but you have to use an
195:28 simple process but you have to use an authorization header um and send along
195:31 authorization header um and send along uh some credentials and things like that
195:33 uh some credentials and things like that so if you want to know what service
195:34 so if you want to know what service endpoints are available to you if you
195:37 endpoints are available to you if you search service endpoints list for AWS
195:39 search service endpoints list for AWS this is the big list and so if I was to
195:41 this is the big list and so if I was to go down here and look for ec2 uh might
195:43 go down here and look for ec2 uh might be a common example here it's going to
195:46 be a common example here it's going to tell us what the points are and as you
195:48 tell us what the points are and as you can see they are Regional based but the
195:50 can see they are Regional based but the idea here is that I could take something
195:52 idea here is that I could take something like this okay I could grab that and
195:55 like this okay I could grab that and using something like
195:56 using something like Postman I could go and create a new
195:59 Postman I could go and create a new request and it's probably a post I'm not
196:01 request and it's probably a post I'm not sure what it's supposed to be it's
196:02 sure what it's supposed to be it's probably a post and then you'd set your
196:05 probably a post and then you'd set your authorization header there might even be
196:06 authorization header there might even be one in here for adabs see where it says
196:08 one in here for adabs see where it says adabs signature so you can go here and
196:10 adabs signature so you can go here and put your access key and secret within
196:12 put your access key and secret within here um so that's something nice about
196:15 here um so that's something nice about Postman so it's going to do the signing
196:17 Postman so it's going to do the signing requests for you so that makes your life
196:18 requests for you so that makes your life a lot easier and then from there what
196:20 a lot easier and then from there what you do is you go to your body and you'd
196:23 you do is you go to your body and you'd want to enter in Json so to do Json
196:26 want to enter in Json so to do Json would probably be raw you drop down the
196:28 would probably be raw you drop down the format Json and then you'd send your
196:30 format Json and then you'd send your payload whatever it is so I again I
196:32 payload whatever it is so I again I haven't done this in a while because
196:33 haven't done this in a while because it's not a very common uh thing that I
196:35 it's not a very common uh thing that I have to do like describe ec2 instances
196:37 have to do like describe ec2 instances but there probably is like an action and
196:39 but there probably is like an action and some additional information that you'd
196:40 some additional information that you'd send along um so you know hopefully that
196:43 send along um so you know hopefully that gives you kind of an idea how the API
196:46 gives you kind of an idea how the API works but you know you should never Pro
196:48 works but you know you should never Pro uh in practice ever have to really work
196:50 uh in practice ever have to really work with the API uh This Way directly
196:53 with the API uh This Way directly [Music]
196:56 [Music] okay hey this is Andrew Brown from exam
196:59 okay hey this is Andrew Brown from exam Pro and we are looking at the itus
197:00 Pro and we are looking at the itus Management console so the itus
197:02 Management console so the itus Management console is a web-based
197:03 Management console is a web-based unified console to build manage and
197:05 unified console to build manage and monitor everything from simple web apps
197:07 monitor everything from simple web apps to complex Cloud deployments so when you
197:09 to complex Cloud deployments so when you create your adus account and you log in
197:12 create your adus account and you log in that is what you're using the adus
197:13 that is what you're using the adus Management console and I would not be
197:15 Management console and I would not be surprised uh if you're watching this
197:17 surprised uh if you're watching this video and they've already changed um the
197:19 video and they've already changed um the default page here since AOS loves to
197:21 default page here since AOS loves to change the UI on us all the time uh but
197:24 change the UI on us all the time uh but uh the way you would access this is via
197:26 uh the way you would access this is via console. ab. amazon.com when you click
197:29 console. ab. amazon.com when you click sign in or go to the console that's the
197:31 sign in or go to the console that's the link that it's going to uh and so the
197:33 link that it's going to uh and so the idea here is that you can point and
197:35 idea here is that you can point and click to manually launch and configure
197:36 click to manually launch and configure adus Resources with limited programming
197:38 adus Resources with limited programming knowledge this is known as click Ops
197:40 knowledge this is known as click Ops since you can perform all your system
197:42 since you can perform all your system operations via clicks okay
197:48 [Music] let's talk about the adus Management
197:50 let's talk about the adus Management console in brief here so you know of
197:52 console in brief here so you know of course when you're on the homepage you
197:53 course when you're on the homepage you go to adus Management console and you
197:54 go to adus Management console and you will end up logging in and from there we
197:57 will end up logging in and from there we will uh make our way over to the adus
197:59 will uh make our way over to the adus Management console when I say adus
198:01 Management console when I say adus Management console I'm referring to uh
198:03 Management console I'm referring to uh this homepage but I'm also referring to
198:05 this homepage but I'm also referring to anything that I'm doing in this web UI
198:08 anything that I'm doing in this web UI whether it's a subservice or not so you
198:11 whether it's a subservice or not so you know a lot of times people just call
198:12 know a lot of times people just call this the dashboard uh or the homepage um
198:15 this the dashboard uh or the homepage um but you know it is technically cre the
198:16 but you know it is technically cre the adus Management console but everything
198:19 adus Management console but everything is the adus Management console you can
198:21 is the adus Management console you can drop down Services here if there's some
198:23 drop down Services here if there's some that you like you can favorite them on
198:24 that you like you can favorite them on the left hand side I don't find that
198:26 the left hand side I don't find that particularly useful you can see the most
198:28 particularly useful you can see the most recent ones here they'll also Show
198:30 recent ones here they'll also Show recently up here as well we have the
198:32 recently up here as well we have the search at the top notice that there's a
198:33 search at the top notice that there's a hotkey for alt S I don't think I ever
198:35 hotkey for alt S I don't think I ever use it but if I was to type in a service
198:37 use it but if I was to type in a service like ec2 it's going to get me the
198:39 like ec2 it's going to get me the services and then down below it's the
198:42 services and then down below it's the subfeatures of it so if I just click
198:43 subfeatures of it so if I just click into that there into this you this is
198:46 into that there into this you this is the main this is a service console so I
198:48 the main this is a service console so I would call this the ec2 console or the
198:51 would call this the ec2 console or the ec2 service console so if you ever hear
198:54 ec2 service console so if you ever hear me saying go to the ec2 console that's
198:55 me saying go to the ec2 console that's what I'm saying and you'll notice here
198:57 what I'm saying and you'll notice here like there is stuff on the left hand
198:59 like there is stuff on the left hand side so I come back here ec2 image
199:01 side so I come back here ec2 image Builder ec2 Global views these are
199:03 Builder ec2 Global views these are considered services but if you drop down
199:05 considered services but if you drop down it says top features or you go down here
199:07 it says top features or you go down here it says dashboard limits Amis you go
199:09 it says dashboard limits Amis you go over here uh the ec2 dashboard limits
199:13 over here uh the ec2 dashboard limits Amis are here and limits are somewhere
199:15 Amis are here and limits are somewhere here right there so okay so those kind
199:18 here right there so okay so those kind of map over pretty well plls and
199:20 of map over pretty well plls and documentation knowledge based articles
199:21 documentation knowledge based articles Marketplace I don't think I've ever
199:23 Marketplace I don't think I've ever touched those in my life uh this here is
199:25 touched those in my life uh this here is the cloud shell so if you click it it
199:26 the cloud shell so if you click it it will launch a cloud shell we'll cover
199:28 will launch a cloud shell we'll cover that when we get to that section here we
199:30 that when we get to that section here we have this little bell it tells us about
199:32 have this little bell it tells us about open issues I think this is for the
199:34 open issues I think this is for the personal health dashboard yeah it says
199:36 personal health dashboard yeah it says PhD in the bottom left corner or left
199:38 PhD in the bottom left corner or left corner so if I open that up it'll bring
199:40 corner so if I open that up it'll bring up the PHD the personal health dashboard
199:43 up the PHD the personal health dashboard all right uh our region selector our
199:47 all right uh our region selector our so nothing super exciting here but just
199:49 so nothing super exciting here but just kind of giving you a bit of a tour so
199:51 kind of giving you a bit of a tour so that you know there are some things you
199:53 that you know there are some things you can do um can you change the look of
199:56 can do um can you change the look of this I don't think right now as of yet
199:59 this I don't think right now as of yet um there is any way I'm sure AOS is
200:01 um there is any way I'm sure AOS is thinking about it because it's been a
200:03 thinking about it because it's been a high uh request that's in demand but uh
200:05 high uh request that's in demand but uh this is what it looks like as of today
200:08 this is what it looks like as of today [Music]
200:11 [Music] okay all right so I just want to
200:13 okay all right so I just want to describe what a service console is so an
200:15 describe what a service console is so an an a service each have their own
200:17 an a service each have their own customized console and you can access
200:19 customized console and you can access these consoles by searching the service
200:21 these consoles by searching the service name so you would go ahead and type in
200:22 name so you would go ahead and type in ec2 and then what we refer to this
200:24 ec2 and then what we refer to this screen as as the ec2 console the reason
200:27 screen as as the ec2 console the reason I'm telling you this is that when you're
200:28 I'm telling you this is that when you're going through a lot of labs or follow
200:30 going through a lot of labs or follow alongs you'll hear the instructor say go
200:32 alongs you'll hear the instructor say go to the ec2 console go to the stagemaker
200:34 to the ec2 console go to the stagemaker console go to the RDS console what
200:36 console go to the RDS console what they're telling you is to go type the
200:38 they're telling you is to go type the the name of the service and go to um
200:41 the name of the service and go to um that particular Services uh console okay
200:44 that particular Services uh console okay uh some a service consoles will act as
200:46 uh some a service consoles will act as an umbrella console containing many adus
200:48 an umbrella console containing many adus services so uh you know VPC console ec2
200:52 services so uh you know VPC console ec2 console systems manager console
200:54 console systems manager console stagemaker console uh cloudwatch console
200:57 stagemaker console uh cloudwatch console these all contain multiple services so
200:59 these all contain multiple services so you know for um for ec2 you might say
201:03 you know for um for ec2 you might say okay well I need a security group
201:04 okay well I need a security group there's no security group console it's
201:06 there's no security group console it's under the ec2 console okay uh so just be
201:09 under the ec2 console okay uh so just be aware of
201:10 aware of [Music]
201:13 [Music] that so now I want to show you some of
201:16 that so now I want to show you some of the service consoles to kind of
201:18 the service consoles to kind of distinguish how they might vary per per
201:20 distinguish how they might vary per per service okay so if we were to look up
201:23 service okay so if we were to look up ec2 um and we just did look at this but
201:25 ec2 um and we just did look at this but the interesting thing is that some uh
201:27 the interesting thing is that some uh consoles the ec2 console uh is the home
201:30 consoles the ec2 console uh is the home for other databus services and you just
201:33 for other databus services and you just have to learn this over time to know
201:34 have to learn this over time to know that so for instance elastic Block store
201:37 that so for instance elastic Block store is its own service but it's tightly uh
201:39 is its own service but it's tightly uh linked to ec2 instances so that's why
201:41 linked to ec2 instances so that's why they always have it here same thing with
201:43 they always have it here same thing with Amis uh security groups same thing with
201:46 Amis uh security groups same thing with that so these are interesting because
201:48 that so these are interesting because these are basically part of virtual
201:49 these are basically part of virtual networking and so you think they'd be
201:51 networking and so you think they'd be under the VPC console but they are
201:54 under the VPC console but they are actually under here with ec2 and so load
201:57 actually under here with ec2 and so load balancing Auto scaling groups tightly
201:58 balancing Auto scaling groups tightly coupled to um uh to ec2 if we make our
202:02 coupled to um uh to ec2 if we make our way over to
202:07 VPC um you know here it's going to contain all the new stuff does it have a
202:10 contain all the new stuff does it have a new experience no I guess this is the
202:11 new experience no I guess this is the newest one it looks a bit old and a
202:13 newest one it looks a bit old and a little bit new here but you know we have
202:15 little bit new here but you know we have a lot of different things here like fire
202:16 a lot of different things here like fire firewalls vpns Transit gateways traffic
202:19 firewalls vpns Transit gateways traffic mirroring we make our way over to Cloud
202:23 mirroring we make our way over to Cloud watch okay and cloudwatch has uh very uh
202:27 watch okay and cloudwatch has uh very uh focused Services they're all actually
202:29 focused Services they're all actually named and this is more like a s feels
202:31 named and this is more like a s feels more like a single service where you
202:32 more like a single service where you have these very focused um Services
202:35 have these very focused um Services where you have alarms logs metrics
202:37 where you have alarms logs metrics events insights right but you're going
202:39 events insights right but you're going to notice that like the UI highly varies
202:42 to notice that like the UI highly varies so we had looked at Cloud watch and then
202:44 so we had looked at Cloud watch and then we had looked at U VPC and looks like
202:47 we had looked at U VPC and looks like this and then we looked at ec2 and it
202:49 this and then we looked at ec2 and it looked like that and so there is
202:51 looked like that and so there is inconsistencies because each um Service
202:55 inconsistencies because each um Service uh Team like that work on per service or
202:58 uh Team like that work on per service or whatever they have full control over
202:59 whatever they have full control over their UI and so some of them are in um
203:03 their UI and so some of them are in um uh different states of updating so some
203:04 uh different states of updating so some people might have updated the left-and
203:06 people might have updated the left-and column but this part is old or you might
203:08 column but this part is old or you might click around like under something else
203:10 click around like under something else like ec2 dashboard um or maybe a better
203:13 like ec2 dashboard um or maybe a better example might be Amis I remember we're
203:15 example might be Amis I remember we're in here something looked old here yeah
203:16 in here something looked old here yeah see these are the old buttons and that's
203:18 see these are the old buttons and that's just how it is so everything is very uh
203:20 just how it is so everything is very uh modular and so they get updated over
203:22 modular and so they get updated over time so that is the challenge that
203:24 time so that is the challenge that you're dealing with you're always having
203:26 you're dealing with you're always having like three different versions that are
203:28 like three different versions that are cobbled together in each uh um UI one
203:32 cobbled together in each uh um UI one thing that I found really interesting is
203:33 thing that I found really interesting is that um VPC has its own console
203:36 that um VPC has its own console Management console but if you were to
203:37 Management console but if you were to look up this in the uh the SDK so if I
203:40 look up this in the uh the SDK so if I was to look up um ABS
203:42 was to look up um ABS SDK uh
203:44 SDK uh ec2 okay I'm just looking up r Ruby here
203:46 ec2 okay I'm just looking up r Ruby here as an example because that's what I know
203:48 as an example because that's what I know how to do um if you look under here
203:51 how to do um if you look under here let's say you want to pragmatically work
203:52 let's say you want to pragmatically work with vpcs you think that it would have
203:54 with vpcs you think that it would have its own top level VPC because it has in
203:57 its own top level VPC because it has in the console its own uh its own
204:00 the console its own uh its own Management console but actually VPC is
204:03 Management console but actually VPC is tightly coupled ec2 and so when you want
204:05 tightly coupled ec2 and so when you want to pragmatically use VPC you're going to
204:08 to pragmatically use VPC you're going to be um using actually ec2 uh as as how it
204:11 be um using actually ec2 uh as as how it was built so the the the what I'm trying
204:14 was built so the the the what I'm trying to get is the apis don't one to one
204:16 to get is the apis don't one to one match with this kind of stuff and so
204:18 match with this kind of stuff and so it's just kind of interesting that
204:20 it's just kind of interesting that there's those kind of uh differences uh
204:22 there's those kind of uh differences uh but again it's not that big of a deal
204:24 but again it's not that big of a deal I'm just trying to say like you know
204:26 I'm just trying to say like you know keep your mind open when you're looking
204:27 keep your mind open when you're looking at this stuff
204:29 at this stuff [Music]
204:33 [Music] okay so every adist account has a unique
204:36 okay so every adist account has a unique account ID and the account ID can be
204:38 account ID and the account ID can be easily found by dropping down the
204:39 easily found by dropping down the current user in the global navigation so
204:42 current user in the global navigation so what I'm going to do is pull up my pen
204:43 what I'm going to do is pull up my pen tool here and just show you it's right
204:45 tool here and just show you it's right there uh the ab account ID is composed
204:47 there uh the ab account ID is composed of 12 digits and so it could look like
204:49 of 12 digits and so it could look like this or this or this theab account ID is
204:52 this or this or this theab account ID is used when logging in uh with a nonroot
204:55 used when logging in uh with a nonroot user account uh but generally a lot of
204:57 user account uh but generally a lot of people like to set their own Alias
204:58 people like to set their own Alias because it's tiring to remember your
204:59 because it's tiring to remember your account uh ID the uh you use it when
205:02 account uh ID the uh you use it when you're creating cross account R so you'd
205:04 you're creating cross account R so you'd have the target account d The Source
205:05 have the target account d The Source account ID to gain access to resources
205:07 account ID to gain access to resources in another a account when you're uh
205:10 in another a account when you're uh dealing with the support cases ads will
205:13 dealing with the support cases ads will commonly ask you what your account ID is
205:15 commonly ask you what your account ID is so they can identify
205:16 so they can identify the account that they want to look at
205:19 the account that they want to look at and it is generally good to keep your
205:20 and it is generally good to keep your account ID private as it is one of the
205:22 account ID private as it is one of the many components used to dentify an
205:24 many components used to dentify an account for an attack by malicious actor
205:26 account for an attack by malicious actor uh so you don't have to be overly
205:27 uh so you don't have to be overly sensitive with it but you know try to
205:29 sensitive with it but you know try to hide it when you can when it's easy
205:31 hide it when you can when it's easy [Music]
205:35 [Music] okay all right so let's talk about the
205:37 okay all right so let's talk about the account ID which appears up here in the
205:40 account ID which appears up here in the top right corner uh where you can get
205:41 top right corner uh where you can get the account ID it also appears in IM am
205:44 the account ID it also appears in IM am so if we go over to I am and you look on
205:47 so if we go over to I am and you look on the right hand side it should show you
205:49 the right hand side it should show you the example here it keeps on trying to
205:51 the example here it keeps on trying to take us to the old dashboard that's fine
205:53 take us to the old dashboard that's fine um but you'll notice that it's over here
205:55 um but you'll notice that it's over here and I don't have MFA turned on because
205:58 and I don't have MFA turned on because I'm in my IM user account but it should
205:59 I'm in my IM user account but it should be turned on on everything that's given
206:02 be turned on on everything that's given but uh you know I just want to show you
206:04 but uh you know I just want to show you where it is and also where you might be
206:05 where it is and also where you might be using it so one example where you would
206:08 using it so one example where you would use you would need to know your account
206:10 use you would need to know your account ID would be something like creating a
206:12 ID would be something like creating a cross account policy so I went here and
206:14 cross account policy so I went here and went to policy and went create policy
206:18 went to policy and went create policy um and we went to maybe it's a roll I
206:22 um and we went to maybe it's a roll I think we actually sorry we want a cross
206:23 think we actually sorry we want a cross account roll it's not the policy sorry
206:26 account roll it's not the policy sorry we go here and we say I want to access
206:30 we go here and we say I want to access something in another A's account what we
206:31 something in another A's account what we have to do is specify the account ID
206:34 have to do is specify the account ID specify the accounts that can use this
206:36 specify the accounts that can use this role so you give I think the the ID of
206:39 role so you give I think the the ID of the other
206:40 the other account okay and so that is one place
206:43 account okay and so that is one place where you use it another place would be
206:45 where you use it another place would be when you're creating policies so if I go
206:47 when you're creating policies so if I go back to policies here I can create a
206:50 back to policies here I can create a policy
206:51 policy here and I can just choose something
206:54 here and I can just choose something like S3
206:56 like S3 okay and I'll just choose a list and
207:00 okay and I'll just choose a list and under the request
207:01 under the request conditions I might specify I think the
207:04 conditions I might specify I think the account IDE it should be in
207:07 account IDE it should be in here um I know I can limit based on
207:11 here um I know I can limit based on account
207:12 account ID principal account
207:19 so you could do principal account so if I just looked up this here ABS principal
207:26 account and you just got to get used to Googling things because that's always
207:28 Googling things because that's always what's happening here and so we should
207:30 what's happening here and so we should be able to specify an account ID yeah
207:32 be able to specify an account ID yeah like that so that would be the principle
207:35 like that so that would be the principle there so if I just took that and doesn't
207:37 there so if I just took that and doesn't matter what it is we just put the value
207:39 matter what it is we just put the value in
207:40 in here um string equals this add I should
207:45 here um string equals this add I should be able to go over here and now see the
207:46 be able to go over here and now see the full statement no sometimes that happens
207:48 full statement no sometimes that happens because we don't have it fully filled
207:55 out but um yeah so that pretty much that's pretty much how we use it like it
207:57 that's pretty much how we use it like it would normally show up as that so if I
207:59 would normally show up as that so if I just go ahead and go next the policy
208:01 just go ahead and go next the policy contains an error you are required to
208:03 contains an error you are required to choose a
208:04 choose a resource what do you mean the resource
208:06 resource what do you mean the resource is this right oh down here okay sorry uh
208:09 is this right oh down here okay sorry uh so we'll just say all resources then we
208:11 so we'll just say all resources then we flip over now it's valid and so here we
208:13 flip over now it's valid and so here we can see our condition saying only from
208:15 can see our condition saying only from this account ID that it is allowed um
208:18 this account ID that it is allowed um other places we're going to see account
208:19 other places we're going to see account IDs are in um ARS right so if we had an
208:24 IDs are in um ARS right so if we had an ec2 instance we don't have one launched
208:27 ec2 instance we don't have one launched right now but if I was to go ahead and
208:31 right now but if I was to go ahead and oh maybe we have some prior ones yeah so
208:32 oh maybe we have some prior ones yeah so if I was to checkbox this
208:35 if I was to checkbox this here and you might not have any prior
208:37 here and you might not have any prior ones so there might not be nothing for
208:39 ones so there might not be nothing for you to see but if you look for the
208:42 you to see but if you look for the AR where's our AR
208:49 sometimes it doesn't show the Arn in the services sometimes it does I wish that
208:52 services sometimes it does I wish that abot always showed the Arn to make our
208:53 abot always showed the Arn to make our lives a bit easier but it could be
208:55 lives a bit easier but it could be because of other reasons why but even
208:58 because of other reasons why but even though we don't have the R I think it
208:59 though we don't have the R I think it shows us shows us the owner ID and so
209:03 shows us shows us the owner ID and so that's the account uh the account ID
209:04 that's the account uh the account ID number you can tell because it's 12
209:05 number you can tell because it's 12 digits so hopefully that gives you kind
209:07 digits so hopefully that gives you kind of a tour of the account ID and what its
209:10 of a tour of the account ID and what its purpose is in the account okay
209:16 [Music] all right let's take a look at it tools
209:18 all right let's take a look at it tools for Powershell so what is Powershell
209:20 for Powershell so what is Powershell Powershell is a task Automation and
209:22 Powershell is a task Automation and configuration management framework is a
209:24 configuration management framework is a command like shell and a scripting
209:26 command like shell and a scripting language so here it is over here uh if
209:29 language so here it is over here uh if you are a Windows user you're used to
209:30 you are a Windows user you're used to seeing this because it has a big blue
209:32 seeing this because it has a big blue window so unlike most shells which
209:34 window so unlike most shells which accept and return text Powershell is
209:36 accept and return text Powershell is built on top of the net common language
209:38 built on top of the net common language runtime CLR and accepts and Returns the
209:41 runtime CLR and accepts and Returns the net objects so uh has a thing
209:45 net objects so uh has a thing called the adus tools for Powershell and
209:47 called the adus tools for Powershell and this lets you interact with the adus API
209:49 this lets you interact with the adus API via Powershell commandlets commandlets
209:52 via Powershell commandlets commandlets is a special type of command in
209:53 is a special type of command in powerwell in the form of the capitalized
209:56 powerwell in the form of the capitalized verb and noun so in this case it'd be
209:58 verb and noun so in this case it'd be new hyphen S3 bucket so you know we
210:01 new hyphen S3 bucket so you know we looked at the a CLI and that is
210:03 looked at the a CLI and that is generally for bash um uh you know shells
210:07 generally for bash um uh you know shells and so po shell is just another type of
210:08 and so po shell is just another type of shell that's very popular and I just
210:10 shell that's very popular and I just wanted to highlight it for those people
210:12 wanted to highlight it for those people that are uh you know used to using
210:13 that are uh you know used to using Microsoft workloads or azure workloads
210:16 Microsoft workloads or azure workloads uh that this actually exists
210:18 uh that this actually exists [Music]
210:21 [Music] okay all right let's take a look at the
210:23 okay all right let's take a look at the pow shell tools um I actually haven't
210:25 pow shell tools um I actually haven't used this one yet so I'm kind of curious
210:27 used this one yet so I'm kind of curious I am out of Windows machine so if I was
210:29 I am out of Windows machine so if I was to um open CM or
210:32 to um open CM or Powershell and you probably can't see
210:34 Powershell and you probably can't see this but if I just bring this over here
210:36 this but if I just bring this over here if I type in Powershell on my
210:38 if I type in Powershell on my computer you'll notice that I have it um
210:40 computer you'll notice that I have it um so that's how you would launch it looks
210:42 so that's how you would launch it looks like a blue screen here okay um if
210:45 like a blue screen here okay um if you're on a Mac you're not going to have
210:46 you're on a Mac you're not going to have that but that's totally fine we don't
210:47 that but that's totally fine we don't need to have a Windows machine to use
210:49 need to have a Windows machine to use Powershell because we can go ahead and
210:51 Powershell because we can go ahead and use cloud shell so make sure you're in a
210:53 use cloud shell so make sure you're in a region that supports Cloud shell so I
210:54 region that supports Cloud shell so I switch back to North Virginia uh this is
210:58 switch back to North Virginia uh this is not important for the exam but it's just
210:59 not important for the exam but it's just kind of fun for me to go through this
211:00 kind of fun for me to go through this with you and if you just like want to
211:02 with you and if you just like want to watch uh here and so I want to change
211:04 watch uh here and so I want to change this over to Powershell so I imagine
211:06 this over to Powershell so I imagine that it must be over
211:08 that it must be over here um so how do we change to
211:11 here um so how do we change to Powershell so we'll type in ad us po or
211:16 Powershell so we'll type in ad us po or it us Cloud
211:18 it us Cloud shell power shell like how do we do
211:22 shell power shell like how do we do it okay and so I'm just going to scroll
211:24 it okay and so I'm just going to scroll down
211:26 down here so the following shells are
211:28 here so the following shells are pre-installed uh The Bash the power
211:30 pre-installed uh The Bash the power shell the Z shell you can identify them
211:31 shell the Z shell you can identify them by that yeah of course to switch to New
211:33 by that yeah of course to switch to New Shell enter the Shell's program name in
211:35 Shell enter the Shell's program name in the command line prompt oh wow that's
211:37 the command line prompt oh wow that's easy so um if we want
211:39 easy so um if we want pwsh do we just type pwsh let's find out
211:49 give it a moment to think oh there we go okay so now we're using Powershell and
211:51 okay so now we're using Powershell and so I would think that ads would give
211:53 so I would think that ads would give this pre-installed for us so if we go
211:55 this pre-installed for us so if we go over here to the instructions and we
211:57 over here to the instructions and we scroll on down there's probably like oh
211:59 scroll on down there's probably like oh wait like I don't use Powershell a lot
212:01 wait like I don't use Powershell a lot it's very easy to install modules um
212:03 it's very easy to install modules um I've done it before but I never remember
212:05 I've done it before but I never remember how to do it but let's just see what we
212:07 how to do it but let's just see what we can find here so I want the
212:10 can find here so I want the documentation for Powershell here and
212:12 documentation for Powershell here and I'm going to go to the um the maybe the
212:16 I'm going to go to the um the maybe the reference here because I just want to
212:18 reference here because I just want to see some examples for the commandlets
212:21 see some examples for the commandlets and so we'll look for S3 again never
212:23 and so we'll look for S3 again never done this before but I'm always great at
212:25 done this before but I'm always great at jumping uh into these things and all I
212:27 jumping uh into these things and all I want to do is just list out the buckets
212:28 want to do is just list out the buckets so I'm going to just search for the word
212:30 so I'm going to just search for the word list um and just see if I can find
212:33 list um and just see if I can find something very simple
212:35 something very simple here and calls to get the list buckets
212:38 here and calls to get the list buckets API operation so I think that is what
212:40 API operation so I think that is what we're going to be doing here so I'm
212:42 we're going to be doing here so I'm going to click into that okay
212:47 going to click into that okay and then from there what I'm going to do
212:50 and then from there what I'm going to do is just see if I can copy this command
212:52 is just see if I can copy this command so we will go ahead and copy this and
212:55 so we will go ahead and copy this and paste it in here and I like how we got
212:57 paste it in here and I like how we got this little shell here so we can tweak
212:58 this little shell here so we can tweak it so we need the bucket name but I
213:01 it so we need the bucket name but I don't want to return a list of all the
213:03 don't want to return a list of all the buckets owned by the author so we don't
213:05 buckets owned by the author so we don't have a bucket name that we want
213:06 have a bucket name that we want explicitly set here so it's required
213:08 explicitly set here so it's required false so we can remove that okay we'll
213:11 false so we can remove that okay we'll look at the next one select required
213:14 look at the next one select required false use the select command to control
213:15 false use the select command to control the command L output the default is
213:17 the command L output the default is bucket specifying select will result in
213:20 bucket specifying select will result in turning all the whole
213:22 turning all the whole buckets for that specifying the
213:25 buckets for that specifying the name uh but it says it's not required so
213:28 name uh but it says it's not required so let's just take that out as well I don't
213:31 let's just take that out as well I don't think we need any of these actually
213:32 think we need any of these actually let's just go and put that in there and
213:35 let's just go and put that in there and I think that there must be something we
213:37 I think that there must be something we need to put in front of that right well
213:39 need to put in front of that right well let's just see what
213:45 happens uh the term is not recognized as the name of the command L function
213:46 the name of the command L function script is operable so I think we're
213:48 script is operable so I think we're missing something in front of
213:52 missing something in front of here we'll go to the user guide here
213:55 here we'll go to the user guide here quickly and we'll get to the getting
213:59 quickly and we'll get to the getting started I just want a super simple
214:02 started I just want a super simple example
214:03 example here new bucket get bucket well let's
214:07 here new bucket get bucket well let's try this one here because they have it
214:09 try this one here because they have it here and so it should just work
214:15 right I'm going change this to us East one
214:20 the term new bucket is not recognized as the name of the commandlet function so
214:22 the name of the commandlet function so I'm guessing that the commandlets not
214:23 I'm guessing that the commandlets not installed I would have thought that they
214:25 installed I would have thought that they would have installed it by default so I
214:27 would have installed it by default so I guess what we'll do is look at how to
214:29 guess what we'll do is look at how to install it so installing
214:32 install it so installing on Linux I
214:38 suppose so you can install the modulized version
214:40 so you can install the modulized version of the Powershell on computers to
214:42 of the Powershell on computers to install adus tools on Linux PW H to
214:46 install adus tools on Linux PW H to start Powershell core session so I guess
214:47 start Powershell core session so I guess that's how you must start it on Linux
214:49 that's how you must start it on Linux and then install the module this way so
214:52 and then install the module this way so yeah I said it's easy to install these
214:53 yeah I said it's easy to install these things we'll hit
214:54 things we'll hit enter cross your fingers hope this works
214:57 enter cross your fingers hope this works hope this is
215:05 fast I'm just going to take a look here peek forward here if you are not uh if
215:07 peek forward here if you are not uh if you're notified the repository is UN
215:08 you're notified the repository is UN trusted you're asked if you want to
215:10 trusted you're asked if you want to trust anyway just hit Y so we're waiting
215:12 trust anyway just hit Y so we're waiting for that here um you're installing this
215:15 for that here um you're installing this module from usted repository it's funny
215:17 module from usted repository it's funny that it's untrusted by but it's by AWS
215:20 that it's untrusted by but it's by AWS maybe that's some kind of drama between
215:21 maybe that's some kind of drama between Microsoft not letting AWS have an
215:23 Microsoft not letting AWS have an official module there but it looks like
215:24 official module there but it looks like it should be installed now so if I type
215:26 it should be installed now so if I type in get S3 buckets
215:29 in get S3 buckets here um unless I typed it wrong that
215:32 here um unless I typed it wrong that still doesn't seem to be working if I go
215:34 still doesn't seem to be working if I go up here and try to create a new bucket
215:36 up here and try to create a new bucket still does not recom recognize the
215:38 still does not recom recognize the command command lit here so there must
215:40 command command lit here so there must be more going on
215:41 be more going on here um
215:48 if you notified you can now install the module for each
215:49 module for each service okay well what did we
215:53 service okay well what did we do you're installing the the the modules
215:55 do you're installing the the the modules from untrusted if you trust it change
215:57 from untrusted if you trust it change the uh change it installation policy
215:59 the uh change it installation policy value by running set policy command are
216:01 value by running set policy command are you sure you want to install this module
216:02 you sure you want to install this module from the PS Gallery so I said yes and I
216:06 from the PS Gallery so I said yes and I gave it a capital Y and it didn't do
216:09 gave it a capital Y and it didn't do anything
216:12 anything else so
216:15 else so oh hold on here so this is the installer
216:19 oh hold on here so this is the installer and then here is the actual tool that we
216:21 and then here is the actual tool that we want to install so it install to oh so
216:23 want to install so it install to oh so we just installed this thing and now we
216:25 we just installed this thing and now we use this thing to install S3
216:27 use this thing to install S3 okay great not hard
216:30 okay great not hard okay and so we'll just say yes to
216:34 okay and so we'll just say yes to all and so that's going to install I
216:38 all and so that's going to install I guess everything oh we said ec2 and S3
216:40 guess everything oh we said ec2 and S3 well we didn't need both but that's fine
216:42 well we didn't need both but that's fine and so what I'm going to do is go get
216:44 and so what I'm going to do is go get bucket and so now recognizes it lists
216:46 bucket and so now recognizes it lists out the items here we can go and create
216:48 out the items here we can go and create ourselves a new bucket so we'll do that
216:52 ourselves a new bucket so we'll do that okay we'll make our way back over
216:53 okay we'll make our way back over databas Management console we'll go to
216:55 databas Management console we'll go to S3 just because I don't need all these
216:57 S3 just because I don't need all these buckets lying around here and I'm going
217:00 buckets lying around here and I'm going to go ahead and delete some of these
217:02 to go ahead and delete some of these buckets here so we'll say
217:04 buckets here so we'll say delete my bucket great and we'll go to
217:08 delete my bucket great and we'll go to this one here and say delete my bucket
217:13 this one here and say delete my bucket excellent all right so we have an idea
217:16 excellent all right so we have an idea how to use Powershell and so Powershell
217:17 how to use Powershell and so Powershell is just really popular because of it's
217:20 is just really popular because of it's the way you do inputs is very
217:21 the way you do inputs is very standardized and the outputs that come
217:23 standardized and the outputs that come so it's very popular um and a very
217:26 so it's very popular um and a very powerful scripting tool that's or CLI
217:28 powerful scripting tool that's or CLI tool as well so uh you know hopefully
217:30 tool as well so uh you know hopefully that's that was interesting for you but
217:32 that's that was interesting for you but what we'll do is just close these off
217:34 what we'll do is just close these off here and go back to our our homepage
217:36 here and go back to our our homepage always just clicking that logo there and
217:37 always just clicking that logo there and there we
217:38 there we [Music]
217:42 [Music] go so Amazon resource names uniquely
217:45 go so Amazon resource names uniquely identif AWS resources and ARS are
217:47 identif AWS resources and ARS are required to specify resource and
217:49 required to specify resource and Ambiguously across all of all of AWS so
217:53 Ambiguously across all of all of AWS so the AR has the following format
217:54 the AR has the following format variations so there's a few different
217:56 variations so there's a few different things here but just notice here that
217:58 things here but just notice here that sometimes it has a resource ID or it has
218:00 sometimes it has a resource ID or it has a path so with a resource type or could
218:02 a path so with a resource type or could be separated by a colon so the partition
218:05 be separated by a colon so the partition um could either be ads China or gov
218:08 um could either be ads China or gov Cloud because this is basically the adus
218:11 Cloud because this is basically the adus uh portal or URL that are completely
218:13 uh portal or URL that are completely separated from each other uh as we
218:15 separated from each other uh as we talked about those earlier in the course
218:17 talked about those earlier in the course uh then there's the service identifier
218:19 uh then there's the service identifier so ec2 S3 IM am pretty much every
218:21 so ec2 S3 IM am pretty much every service has their own uh service that uh
218:25 service has their own uh service that uh name here that would be identified then
218:27 name here that would be identified then the region would be pretty obvious Us
218:28 the region would be pretty obvious Us East one CA Central 1 you'd have a count
218:31 East one CA Central 1 you'd have a count ID which would be 12 digits uh the
218:33 ID which would be 12 digits uh the resource ID uh could be a name or a pass
218:36 resource ID uh could be a name or a pass so like for um IM users we have user Bob
218:40 so like for um IM users we have user Bob this is an ec2 instance and most of the
218:42 this is an ec2 instance and most of the irns are accessible via the AAS
218:44 irns are accessible via the AAS Management console and you can usually
218:46 Management console and you can usually click the r to copy to your clipboard so
218:48 click the r to copy to your clipboard so here is it is for an S3 bucket and
218:51 here is it is for an S3 bucket and notice that it's a little bit different
218:53 notice that it's a little bit different because it is a global Service AWS
218:55 because it is a global Service AWS there's no reason to specify the region
218:57 there's no reason to specify the region or the account ID or uh anything else
219:00 or the account ID or uh anything else there like the resource type so straight
219:02 there like the resource type so straight away we already know it's a bucket so we
219:04 away we already know it's a bucket so we can just say my bucket so that one's
219:05 can just say my bucket so that one's really short but in other cases it's
219:07 really short but in other cases it's really long so here it is for a load
219:08 really long so here it is for a load balcer and it has all the information
219:11 balcer and it has all the information there and notice that like this has a
219:13 there and notice that like this has a pass this is low bouncer app my server
219:15 pass this is low bouncer app my server will be and then it has the ID okay for
219:18 will be and then it has the ID okay for paths and ARS they can also include a
219:21 paths and ARS they can also include a wild card Aster and we'll see these like
219:23 wild card Aster and we'll see these like with IM policies or or paths these are
219:26 with IM policies or or paths these are really useful when you are doing um uh
219:29 really useful when you are doing um uh policies where you have to specify AR
219:31 policies where you have to specify AR you want to say a group of things and
219:32 you want to say a group of things and things like that so there you
219:34 things like that so there you [Music]
219:37 [Music] go all right so now let's take a look at
219:40 go all right so now let's take a look at Amazon resource name or also known as
219:42 Amazon resource name or also known as Arn um and so ARS are used to reference
219:45 Arn um and so ARS are used to reference objects they're very commonly used when
219:47 objects they're very commonly used when you're using the CLI or the SDK to
219:49 you're using the CLI or the SDK to reference to something um the easiest
219:51 reference to something um the easiest example is S3 right so we go over to S3
219:54 example is S3 right so we go over to S3 here and we create ourselves a new
219:55 here and we create ourselves a new bucket um so I'll go ahead and create
219:58 bucket um so I'll go ahead and create ourselves a new one here we'll say my
220:01 ourselves a new one here we'll say my new bucket I'm just going to put a bunch
220:03 new bucket I'm just going to put a bunch of numbers in here it doesn't matter
220:04 of numbers in here it doesn't matter we'll hit create bucket and what we will
220:07 we'll hit create bucket and what we will see if we click into this is the orange
220:11 see if we click into this is the orange should be under
220:12 should be under properties and there it is okay so so
220:15 properties and there it is okay so so there are many cases where you might
220:17 there are many cases where you might want to use the RN and a lot of times
220:19 want to use the RN and a lot of times you'll just copy it and uh a very common
220:22 you'll just copy it and uh a very common example would be again with I am
220:24 example would be again with I am policies so we go over to I am policies
220:27 policies so we go over to I am policies right and I want to get to policies here
220:30 right and I want to get to policies here to save myself some trouble and we
220:32 to save myself some trouble and we create a
220:33 create a policy you know I might want to restrict
220:35 policy you know I might want to restrict someone to use only that bucket so I say
220:38 someone to use only that bucket so I say S3 okay and then I'm going to say um I
220:41 S3 okay and then I'm going to say um I want to be able to read and write from a
220:43 want to be able to read and write from a particular bucket we go drop down the
220:45 particular bucket we go drop down the resources here and so here we have a lot
220:49 resources here and so here we have a lot of
220:50 of options um maybe I'll just get rid of
220:52 options um maybe I'll just get rid of the read
220:54 the read option and I'm going to actually expand
220:56 option and I'm going to actually expand right because it's just creating too
220:58 right because it's just creating too much work for me here and I just want to
221:00 much work for me here and I just want to have um put put object that's that's the
221:03 have um put put object that's that's the what we use to put something into a
221:05 what we use to put something into a bucket so we expand the resource here
221:07 bucket so we expand the resource here and notice it says add the irn so we go
221:09 and notice it says add the irn so we go here and we could type the bucket name
221:12 here and we could type the bucket name so do that or we just paste it on in
221:14 so do that or we just paste it on in here at the top so it's probably easier
221:16 here at the top so it's probably easier just to grab it
221:18 just to grab it sometimes but if you don't know an AR a
221:20 sometimes but if you don't know an AR a lot of times you can just expand this
221:21 lot of times you can just expand this and then fill it in and that's how you
221:22 and then fill it in and that's how you get an AR so put that there let's list
221:25 get an AR so put that there let's list oh you could also do it that way which
221:27 oh you could also do it that way which is easier too and so now if I go to Json
221:29 is easier too and so now if I go to Json is it valid there we go so here it's
221:32 is it valid there we go so here it's saying um this policy allows somebody to
221:34 saying um this policy allows somebody to put an object into this particular
221:37 put an object into this particular bucket and so that would be an example
221:38 bucket and so that would be an example where we would use um an R okay or if
221:41 where we would use um an R okay or if you're doing uh if you're using uh a the
221:44 you're doing uh if you're using uh a the support you might have to use an R to um
221:47 support you might have to use an R to um to get help from support saying hey look
221:49 to get help from support saying hey look at this particular resource exactly here
221:51 at this particular resource exactly here and then the the cloud support engineer
221:53 and then the the cloud support engineer can help you
221:54 can help you [Music]
221:58 [Music] okay hey this is Andrew Brown from exam
222:00 okay hey this is Andrew Brown from exam Pro and we are looking at the adus
222:02 Pro and we are looking at the adus command line interface but before we do
222:03 command line interface but before we do that we got to Define some terms so what
222:05 that we got to Define some terms so what is a CLI so a command line interface
222:08 is a CLI so a command line interface processes commands to computer program
222:10 processes commands to computer program in the form of lines of text operating
222:12 in the form of lines of text operating system Implement a command line
222:14 system Implement a command line interface in a sh L okay so then we have
222:16 interface in a sh L okay so then we have a terminal so a terminal is a text only
222:18 a terminal so a terminal is a text only interface so it has input output
222:19 interface so it has input output environment then you have a console this
222:21 environment then you have a console this is the physical computer to physically
222:23 is the physical computer to physically input information into a terminal then
222:26 input information into a terminal then you have the shell a shell is the
222:28 you have the shell a shell is the command line program that users interact
222:30 command line program that users interact uh with to input commands popular shell
222:33 uh with to input commands popular shell programs are bash uh zsh Powershell and
222:37 programs are bash uh zsh Powershell and uh you might remember this one MS DOS
222:39 uh you might remember this one MS DOS prompt so this has been around for
222:41 prompt so this has been around for obviously a very long time so maybe this
222:43 obviously a very long time so maybe this kind of primes your mind for what is a
222:45 kind of primes your mind for what is a shell and just so you know people
222:47 shell and just so you know people commonly erroneously use terminal shell
222:49 commonly erroneously use terminal shell or console generally describe
222:51 or console generally describe interacting with a shell so if we say
222:53 interacting with a shell so if we say shell or console or terminal we're just
222:54 shell or console or terminal we're just talking about the same thing but there
222:56 talking about the same thing but there is technically a difference between
222:58 is technically a difference between these three things but most people do
222:59 these three things but most people do not care and I wouldn't worry about it
223:01 not care and I wouldn't worry about it too much okay so now let's take a look
223:03 too much okay so now let's take a look at the itus command line interface which
223:05 at the itus command line interface which allows you to programmatically interact
223:07 allows you to programmatically interact with the itus API via entering single or
223:09 with the itus API via entering single or multi-line commands into a shell and
223:11 multi-line commands into a shell and then here I say or terminal but really
223:13 then here I say or terminal but really it's just the shell Okay so so uh here
223:16 it's just the shell Okay so so uh here is an example of one so we're trying to
223:17 is an example of one so we're trying to describe uh ec2 instances and then we're
223:20 describe uh ec2 instances and then we're getting the output because we asked to
223:22 getting the output because we asked to have it back in this table like view so
223:24 have it back in this table like view so the a CLI is a python executable program
223:27 the a CLI is a python executable program so python is required to install the a
223:29 so python is required to install the a CLI the a CLI can be installed on
223:31 CLI the a CLI can be installed on Windows Mac Linux Unix the name of the
223:34 Windows Mac Linux Unix the name of the ca program is AWS you'll notice that up
223:36 ca program is AWS you'll notice that up here in the top left corner there's a
223:38 here in the top left corner there's a lot more to this but this is all we need
223:39 lot more to this but this is all we need for now okay
223:41 for now okay [Music]
223:45 [Music] hey this is Andrew Brown from exam Pro
223:47 hey this is Andrew Brown from exam Pro and we are taking a look at the Aus CLI
223:51 and we are taking a look at the Aus CLI and the easiest way to get started with
223:52 and the easiest way to get started with this is actually via the cloud shell so
223:54 this is actually via the cloud shell so you'll notice this little icon here in
223:56 you'll notice this little icon here in the top right corner that is cloud shell
223:58 the top right corner that is cloud shell and it's going to allow us to um uh
224:01 and it's going to allow us to um uh pratically do things without having to
224:02 pratically do things without having to set up our own environments so if I just
224:04 set up our own environments so if I just click that there okay uh and I say do
224:08 click that there okay uh and I say do not show again close and by the way if
224:10 not show again close and by the way if you don't see Cloud shell here it could
224:13 you don't see Cloud shell here it could be your region so like if I go to Canada
224:15 be your region so like if I go to Canada Central it doesn't have it there and so
224:17 Central it doesn't have it there and so if I was to search cloudshell
224:20 if I was to search cloudshell here okay it's going to say it's only
224:23 here okay it's going to say it's only supported in those regions so that's a
224:24 supported in those regions so that's a bit annoying but once Cloud shell loads
224:27 bit annoying but once Cloud shell loads it already has our uh credentials loaded
224:29 it already has our uh credentials loaded within our account and so this is going
224:31 within our account and so this is going to save us a lot of time in terms of uh
224:34 to save us a lot of time in terms of uh you know trying to get set up with the
224:36 you know trying to get set up with the exception that you have to wait for this
224:37 exception that you have to wait for this environment to create so it takes a
224:39 environment to create so it takes a little bit of time but it's not that bad
224:41 little bit of time but it's not that bad um and while that is waiting what I'll
224:43 um and while that is waiting what I'll do is show you actually how you would
224:44 do is show you actually how you would install the CLI yourself so if we typed
224:46 install the CLI yourself so if we typed in itus CLI
224:48 in itus CLI install all right and uh we went here
224:51 install all right and uh we went here the way you would install I believe it's
224:53 the way you would install I believe it's a python library but if we went to
224:55 a python library but if we went to version two and we just said Linux uh
224:57 version two and we just said Linux uh you go down here they have instructions
224:59 you go down here they have instructions so you just curl it unzip it and do
225:02 so you just curl it unzip it and do that um so you know if it's this and
225:05 that um so you know if it's this and then once it's installed you'll have the
225:06 then once it's installed you'll have the a CLI commands this is still going so
225:10 a CLI commands this is still going so you know maybe I can show you what it
225:11 you know maybe I can show you what it would be like to install the CLI by hand
225:14 would be like to install the CLI by hand so if we want to do that one easy way to
225:16 so if we want to do that one easy way to do this is if we just go to GitHub
225:18 do this is if we just go to GitHub doesn't matter what repository I'm just
225:20 doesn't matter what repository I'm just looking for anything here and if I open
225:22 looking for anything here and if I open up git pod so if we go on the top here
225:23 up git pod so if we go on the top here and type in git pod
225:26 and type in git pod uh.com maybe
225:29 uh.com maybe that I just want to see
225:32 that I just want to see whoops maybe it's get
225:35 whoops maybe it's get pods
225:41 that oh get pod you're not giving me oh you know what it's doio that's why okay
225:42 you know what it's doio that's why okay so if we go back here sorry and we type
225:45 so if we go back here sorry and we type in
225:47 in doio what this will do is launch me a
225:49 doio what this will do is launch me a temporary environment and so this is
225:51 temporary environment and so this is outside of AWS so I'd actually have to
225:53 outside of AWS so I'd actually have to install the CLI so this would be a great
225:55 install the CLI so this would be a great opportunity to show you how to install
225:57 opportunity to show you how to install the CLI I'm just doing it this way
225:59 the CLI I'm just doing it this way because git pod is free to use and um
226:02 because git pod is free to use and um you know it's going to set up an
226:03 you know it's going to set up an environment and how let us simulate
226:04 environment and how let us simulate installing the CLI so here is the CLI
226:07 installing the CLI so here is the CLI here I'm going to see if I can bump up
226:09 here I'm going to see if I can bump up the font um let's make the font as large
226:11 the font um let's make the font as large as we can go light or dark dark sounds
226:14 as we can go light or dark dark sounds good to me
226:15 good to me and so if we type in
226:21 AWS give it a moment we can see that we have uh the command here so if I say ABS
226:24 have uh the command here so if I say ABS S3 LS whoops it should be able to list
226:28 S3 LS whoops it should be able to list things out in a bucket so this is what's
226:30 things out in a bucket so this is what's currently in the bucket if you're
226:31 currently in the bucket if you're wondering how do I know what these
226:32 wondering how do I know what these commands are I can just type in a CLI
226:35 commands are I can just type in a CLI commands Okay and if we go here um and
226:38 commands Okay and if we go here um and we go to the CLI ref reference then we
226:41 we go to the CLI ref reference then we have um anything we want here right so
226:44 have um anything we want here right so we go down here and I just want to see
226:45 we go down here and I just want to see what's running in S3 and I go here and I
226:49 what's running in S3 and I go here and I scroll on down it's going to show me
226:50 scroll on down it's going to show me commands like copy move remove sync uh
226:54 commands like copy move remove sync uh MBR RB uh list
226:57 MBR RB uh list right and if you're looking for a
227:01 right and if you're looking for a particular command you go down and say
227:02 particular command you go down and say okay I'll look at LS here and it will
227:04 okay I'll look at LS here and it will explain to me all the little options
227:06 explain to me all the little options that we can do with it and then it will
227:08 that we can do with it and then it will always give me examples right so I can
227:10 always give me examples right so I can see examples like that so if I wanted to
227:12 see examples like that so if I wanted to move something into an S3 bucket so
227:14 move something into an S3 bucket so let's say I want to create a new S3
227:15 let's say I want to create a new S3 bucket um we'll type in AWS S3 and just
227:19 bucket um we'll type in AWS S3 and just hit enter and it should tell
227:21 hit enter and it should tell us um the sub commands maybe if I do
227:23 us um the sub commands maybe if I do like help like
227:31 this and if we scroll on down so I guess it just pulls up documentation let's
227:33 it just pulls up documentation let's hoping it would give us like a tiny
227:40 summary okay so what we can do here because I want to create a
227:41 because I want to create a bucket type in like
227:43 bucket type in like buckets if you don't know something you
227:45 buckets if you don't know something you just go ads S3 CLI create bucket we'll
227:50 just go ads S3 CLI create bucket we'll go
227:51 go here um and then what I do is I always
227:53 here um and then what I do is I always just go to examples here so here have
227:56 just go to examples here so here have ads S3 API create bucket and I know it's
227:59 ads S3 API create bucket and I know it's unusual there's an S3 and there's an S3
228:01 unusual there's an S3 and there's an S3 API I don't know why that is but it's
228:03 API I don't know why that is but it's always been that way and I I just don't
228:04 always been that way and I I just don't question it anymore and so here I can go
228:07 question it anymore and so here I can go ahead and create a new bucket so I'll
228:08 ahead and create a new bucket so I'll just go ahead and paste that command in
228:10 just go ahead and paste that command in I do want to change it up a bit here
228:12 I do want to change it up a bit here because this name could be that has to
228:14 because this name could be that has to be unique so just to make sure I get
228:15 be unique so just to make sure I get what I want I'm putting random numbers
228:16 what I want I'm putting random numbers in here we're going to choose the region
228:18 in here we're going to choose the region as us East one if I wanted to do other
228:21 as us East one if I wanted to do other things here I could scroll up and look
228:23 things here I could scroll up and look at some Flags here
228:26 at some Flags here so uh it looks all fine to me so I think
228:29 so uh it looks all fine to me so I think I'll go back here and just
228:31 I'll go back here and just hit uh
228:33 hit uh paste okay and so it created that bucket
228:35 paste okay and so it created that bucket for me if I go over to
228:46 S3 and we'll wait here a moment we can see that bucket now exists if I wanted
228:47 see that bucket now exists if I wanted to place something in that bucket what I
228:49 to place something in that bucket what I can do is just like touch a file so I'll
228:50 can do is just like touch a file so I'll just say um touch touch is a Linux
228:52 just say um touch touch is a Linux command to make just an empty file so
228:54 command to make just an empty file so we'll say um
228:57 we'll say um hello.txt and then it'll be a S3
229:01 hello.txt and then it'll be a S3 um it would be SP to copy it and I'm
229:04 um it would be SP to copy it and I'm going to give it the local path
229:05 going to give it the local path hello.txt and then I need to give it the
229:08 hello.txt and then I need to give it the bucket address so it' be S3 colon SL SL
229:12 bucket address so it' be S3 colon SL SL the bucket name so we named it this I'm
229:15 the bucket name so we named it this I'm not going to try to type that in by hand
229:17 not going to try to type that in by hand because it's too hard and then I want to
229:19 because it's too hard and then I want to say where I want to put this file so I'm
229:20 say where I want to put this file so I'm going to say hello.txt and if I'm right
229:22 going to say hello.txt and if I'm right that should work as expected and so it
229:24 that should work as expected and so it says I uploaded that file I make my way
229:26 says I uploaded that file I make my way back over to S3 I refresh there is the
229:29 back over to S3 I refresh there is the file if I want to copy this file back
229:32 file if I want to copy this file back locally um all I have to do I'm just
229:34 locally um all I have to do I'm just going to remove I'm going to delete the
229:36 going to remove I'm going to delete the original hello txt file LS to show you
229:39 original hello txt file LS to show you that there's nothing there and what I
229:41 that there's nothing there and what I need to do oops is just revert this so
229:45 need to do oops is just revert this so instead of saying the address
229:48 instead of saying the address here we can go and type in
229:53 here we can go and type in hello.txt and if I do LS there's the
229:56 hello.txt and if I do LS there's the file if you don't know what the address
229:57 file if you don't know what the address is of the bucket um a lot of times you
229:59 is of the bucket um a lot of times you can go here and find it so it should be
230:03 can go here and find it so it should be because they're always changing this UI
230:04 because they're always changing this UI on me but we'll go to properties here
230:06 on me but we'll go to properties here and there that's the
230:11 Arn uh usually a good way to find it is if you go into an actual object so if
230:13 if you go into an actual object so if you go here it'll give you the full URL
230:14 you go here it'll give you the full URL so I could have grabbed that and I could
230:16 so I could have grabbed that and I could have just pasted that in there um but
230:19 have just pasted that in there um but you know you learn after time it's not
230:21 you know you learn after time it's not hard to remember this S3 Co SL the
230:23 hard to remember this S3 Co SL the unique name I do want to show you how to
230:26 unique name I do want to show you how to install it by hand so here I'm in git
230:28 install it by hand so here I'm in git pods um I'm not sure how I can change
230:30 pods um I'm not sure how I can change this to a dark theme because I really
230:33 this to a dark theme because I really don't like this on my eyes we'll go down
230:34 don't like this on my eyes we'll go down below here to color
230:37 below here to color theme and we'll say get PA dark there we
230:40 theme and we'll say get PA dark there we go and so this is a temporary workspace
230:43 go and so this is a temporary workspace so when I close it it'll be gone so
230:44 so when I close it it'll be gone so that'll be totally fine and so I'm going
230:45 that'll be totally fine and so I'm going to typee in AWS to see that it's not
230:47 to typee in AWS to see that it's not installed we're going to go over here
230:49 installed we're going to go over here this runs Linux by default so I already
230:51 this runs Linux by default so I already know that I'm going to use Linux we want
230:53 know that I'm going to use Linux we want to use version two here um
230:56 to use version two here um so for the latest version use this
230:59 so for the latest version use this command for a specific version no we
231:01 command for a specific version no we just want the generic one so I'm going
231:02 just want the generic one so I'm going to go ahead and copy this whoops yes
231:05 to go ahead and copy this whoops yes allow we'll paste that in we'll hit
231:07 allow we'll paste that in we'll hit enter okay then we'll take the next
231:15 command paste that in hit enter we'll go take the next command
231:17 we'll go take the next command here we'll hit
231:20 here we'll hit enter you can now run uh AWS so we type
231:24 enter you can now run uh AWS so we type AWS and there's the command so uh the
231:27 AWS and there's the command so uh the only thing is that if we do AWS S3 LS
231:30 only thing is that if we do AWS S3 LS it's not going to work because we don't
231:31 it's not going to work because we don't have any credentials set so we'll give
231:34 have any credentials set so we'll give it a moment to think so it says unable
231:36 it a moment to think so it says unable to locate credentials you can configure
231:38 to locate credentials you can configure credentials by running adus configure so
231:40 credentials by running adus configure so we type in ad
231:41 we type in ad configure and by the way if this font is
231:43 configure and by the way if this font is too small I believe I can bump it up
231:46 too small I believe I can bump it up like
231:47 like this not a great way to do it but um it
231:55 works and so it says ads access key ID so what we can do is go over to
232:02 IM and what I'm looking for is my particular user over
232:04 particular user over here and if you remember when we first
232:07 here and if you remember when we first created our account it generated out
232:08 created our account it generated out access key so I go to security
232:09 access key so I go to security credentials and so we have a key here
232:12 credentials and so we have a key here but I need the secret so this key is
232:14 but I need the secret so this key is useless to me so I'm going to go ahead
232:15 useless to me so I'm going to go ahead and deactivate
232:17 and deactivate it just cuz I don't even want this key
232:21 it just cuz I don't even want this key and I'm going to create myself a new key
232:22 and I'm going to create myself a new key so I'm going to have an access ID in
232:24 so I'm going to have an access ID in secret whenever you generate these out
232:26 secret whenever you generate these out never ever ever ever ever show anyone
232:28 never ever ever ever ever show anyone what these are these are your yours and
232:31 what these are these are your yours and yours alone okay so this is cloud shell
232:34 yours alone okay so this is cloud shell we're fine we're just going to close
232:35 we're fine we're just going to close that for now and I'm going to go back
232:38 that for now and I'm going to go back over to get pods here and hit enter so
232:40 over to get pods here and hit enter so that's the ID I'm going to go grab the
232:43 that's the ID I'm going to go grab the secret
232:45 secret hit enter paste and I want it to go to
232:48 hit enter paste and I want it to go to us East one to save myself some trouble
232:50 us East one to save myself some trouble uh you can change the output from Json
232:52 uh you can change the output from Json to tables I'm going to leave it as the
232:53 to tables I'm going to leave it as the default here and so now if I type ABS S3
232:58 default here and so now if I type ABS S3 LS I get a list and so if I want to grab
233:01 LS I get a list and so if I want to grab that file there I'm going to grab that
233:02 that file there I'm going to grab that S3 U and we type in a S3 API or sorry
233:07 S3 U and we type in a S3 API or sorry it's just LS sorry or sorry CP and we're
233:10 it's just LS sorry or sorry CP and we're going to paste that link in and we're
233:11 going to paste that link in and we're going to say hello.txt
233:16 and I must have done the command wrong it's because we're missing S3 here I
233:18 it's because we're missing S3 here I just hit up on the keyboard to get that
233:20 just hit up on the keyboard to get that command back and so I type in LS for
233:22 command back and so I type in LS for list and I mean I have some other code
233:25 list and I mean I have some other code here so you know again any repo you want
233:27 here so you know again any repo you want on GitHub doesn't really matter uh but
233:29 on GitHub doesn't really matter uh but you'll see there is that file probably
233:31 you'll see there is that file probably shouldn't have used this one because it
233:32 shouldn't have used this one because it makes a bit of a
233:33 makes a bit of a mess um but yeah it's pretty
233:35 mess um but yeah it's pretty straightforward just to one thing to
233:37 straightforward just to one thing to show you is where those credentials are
233:39 show you is where those credentials are stored so by default they're going to be
233:41 stored so by default they're going to be stored in um it's going to be in the
233:46 stored in um it's going to be in the hidden directory in your root or your
233:48 hidden directory in your root or your home directory called ad. credentials so
233:50 home directory called ad. credentials so if I just do like LS here you can see
233:53 if I just do like LS here you can see there's a config file and a credentials
233:54 there's a config file and a credentials file cat lets me print out the contents
233:56 file cat lets me print out the contents of that file so I go here and it's
233:59 of that file so I go here and it's saying the default region is us east1
234:01 saying the default region is us east1 this is a tomel file even though it
234:02 this is a tomel file even though it doesn't have a toml on the end of it I
234:04 doesn't have a toml on the end of it I just know by looking at it that's what
234:05 just know by looking at it that's what it is config lets you set uh defaults
234:08 it is config lets you set uh defaults that are going to apply to all of your
234:09 that are going to apply to all of your credentials and then uh within the
234:11 credentials and then uh within the credential file here is the actual
234:13 credential file here is the actual credentials so if you wanted to just set
234:16 credentials so if you wanted to just set them you could go in here and just set
234:18 them you could go in here and just set them in here you can also set multiple
234:20 them in here you can also set multiple credentials so if I go here and I'm
234:22 credentials so if I go here and I'm going to open up and buy because I'm not
234:24 going to open up and buy because I'm not sure how to open it up here in the main
234:25 sure how to open it up here in the main one but if you wanted multiple accounts
234:27 one but if you wanted multiple accounts you do like exam Pro and then you just
234:30 you do like exam Pro and then you just repeat these with different keys right
234:33 repeat these with different keys right and then when you wanted to use an a CLI
234:35 and then when you wanted to use an a CLI command actually I'm going to go back
234:36 command actually I'm going to go back here for a
234:45 second okay and if you want to um and by the way I'm using VI you never
234:47 and by the way I'm using VI you never use Vim it's it's a bit tricky to use uh
234:49 use Vim it's it's a bit tricky to use uh you might want to use Nano instead if
234:51 you might want to use Nano instead if you're if you're kind of new to this uh
234:53 you're if you're kind of new to this uh because this will use like regular key
234:55 because this will use like regular key key cuts and then down below it shows
234:56 key cuts and then down below it shows you what it is so this is like control X
234:58 you what it is so this is like control X or alt X alt X NOP contr X there we go
235:03 or alt X alt X NOP contr X there we go um but anyway so if I go into this file
235:05 um but anyway so if I go into this file and I delete the original one right and
235:07 and I delete the original one right and now I try to
235:14 do um this command here even though we already have that file it should either
235:16 already have that file it should either hang or complain I Could Just Kill that
235:19 hang or complain I Could Just Kill that by doing control C if I do ads S3
235:23 by doing control C if I do ads S3 LS notice that it's hanging so unable to
235:26 LS notice that it's hanging so unable to locate credentials because there's no
235:27 locate credentials because there's no default one but if I go and I put
235:29 default one but if I go and I put profile and I say exam
235:36 Pro right it it'll now use that profile so that's the way we do it um but
235:38 so that's the way we do it um but hopefully that gives you kind of a a
235:40 hopefully that gives you kind of a a crash course into the CLI um so yeah
235:44 crash course into the CLI um so yeah there you go okay so I'm just going to
235:46 there you go okay so I'm just going to go ahead and close these off you can
235:48 go ahead and close these off you can delete this bucket if you don't want it
235:51 delete this bucket if you don't want it it's probably a good idea to delete this
235:53 it's probably a good idea to delete this here and I'm just going to say
235:55 here and I'm just going to say permanently delete
235:57 permanently delete okay very very good okay close that off
236:01 okay very very good okay close that off and yeah that's the introduction to the
236:02 and yeah that's the introduction to the CLI so yeah there you
236:06 CLI so yeah there you [Music]
236:10 [Music] go hey this is Andrew Brown from exam
236:12 go hey this is Andrew Brown from exam Pro and we are taking a look at
236:14 Pro and we are taking a look at development kits uh so a software
236:16 development kits uh so a software development kit or SDK is a collection
236:18 development kit or SDK is a collection of software development tools and one
236:20 of software development tools and one installable package so you can use the
236:23 installable package so you can use the AWS SDK to programmatically create
236:26 AWS SDK to programmatically create modify delete or interact with adabs
236:28 modify delete or interact with adabs resources so the adabs SDK is offered in
236:31 resources so the adabs SDK is offered in a variety of programming languages so we
236:33 a variety of programming languages so we have Java python nodejs Ruby go.net PHP
236:39 have Java python nodejs Ruby go.net PHP JavaScript C++ and so here would be an
236:42 JavaScript C++ and so here would be an example of uh some rub code where we are
236:45 example of uh some rub code where we are creating ourselves um an S3 bucket so
236:48 creating ourselves um an S3 bucket so we're just uploading a file there
236:50 we're just uploading a file there [Music]
236:54 [Music] okay okay so now what I'm going to do is
236:56 okay okay so now what I'm going to do is show you how to use the adabs SDK and so
237:00 show you how to use the adabs SDK and so uh to do that uh we're going to need
237:01 uh to do that uh we're going to need some kind of IDE um a a basically code
237:04 some kind of IDE um a a basically code editor and so we had looked at G pods
237:07 editor and so we had looked at G pods which is a thirdparty service and that's
237:08 which is a thirdparty service and that's fine but let's take a look at Cloud9
237:10 fine but let's take a look at Cloud9 because that is built into AWS so if I
237:12 because that is built into AWS so if I just type in Cloud9 here and go over to
237:14 just type in Cloud9 here and go over to IDE I'm going to launch myself a new
237:16 IDE I'm going to launch myself a new environment so I'll hit create I'm going
237:18 environment so I'll hit create I'm going just say my SDK
237:22 just say my SDK environment EnV if you if you have hard
237:24 environment EnV if you if you have hard time typing environment like me and we
237:27 time typing environment like me and we have some options so create an new2
237:29 have some options so create an new2 instance for direct access create it via
237:31 instance for direct access create it via assistance manager run a remote with SSH
237:33 assistance manager run a remote with SSH I'm going to leave it as the default
237:34 I'm going to leave it as the default then we have the option to choose what
237:36 then we have the option to choose what size I want to leave it on T2 micro
237:38 size I want to leave it on T2 micro because that is the free tier then we're
237:40 because that is the free tier then we're going to scroll on down we have Amazon
237:41 going to scroll on down we have Amazon Linux 2 Linux Ami I'm going to stick
237:44 Linux 2 Linux Ami I'm going to stick with uh Amazon link 2 and we can have it
237:47 with uh Amazon link 2 and we can have it turn off after 30 minutes a great option
237:49 turn off after 30 minutes a great option for us here and we'll go ahead and hit
237:51 for us here and we'll go ahead and hit next and we'll hit create
237:53 next and we'll hit create environment and so we're going to have
237:55 environment and so we're going to have to wait a little bit for this to launch
237:57 to wait a little bit for this to launch it'll take a few minutes as that is
237:59 it'll take a few minutes as that is going let's go to Google type in itus
238:02 going let's go to Google type in itus SDK um to get to the main page and so
238:04 SDK um to get to the main page and so the idea here is that there are a bunch
238:06 the idea here is that there are a bunch of different languages you can use C++
238:09 of different languages you can use C++ go Java javascript. net node.js PHP
238:12 go Java javascript. net node.js PHP Python and Ruby uh and so I'm a really
238:15 Python and Ruby uh and so I'm a really big fan of Ruby I've been using Ruby
238:17 big fan of Ruby I've been using Ruby since 2005 and so that's what we're
238:18 since 2005 and so that's what we're going to do it in it's also really easy
238:20 going to do it in it's also really easy to use and it's a really great language
238:23 to use and it's a really great language so um you know down below it's just
238:26 so um you know down below it's just showing you that there's all these
238:27 showing you that there's all these different things but if we go down to
238:28 different things but if we go down to the SDK here and we click on
238:31 the SDK here and we click on Ruby we we have examples where we have
238:33 Ruby we we have examples where we have the developer guide the API reference
238:36 the developer guide the API reference and so this tells you how to get started
238:37 and so this tells you how to get started even here it's saying like hey go get
238:39 even here it's saying like hey go get started with Cloud9 which is great as
238:41 started with Cloud9 which is great as well I suppose um and so here it might
238:45 well I suppose um and so here it might show you how to install it um and when
238:48 show you how to install it um and when we open up the API references this is
238:50 we open up the API references this is what it looks like so a lot of times
238:52 what it looks like so a lot of times when I want to do something I know it's
238:53 when I want to do something I know it's like I want to do something with S3 so I
238:56 like I want to do something with S3 so I scroll on down here and I look for
238:58 scroll on down here and I look for S3
239:00 S3 right and then I just kind of like uh
239:03 right and then I just kind of like uh scroll around and look you know what I
239:05 scroll around and look you know what I mean sometimes I have to expand it go
239:06 mean sometimes I have to expand it go into the client every API is a slightly
239:08 into the client every API is a slightly different so you do have to kind of
239:10 different so you do have to kind of figure out how to navigate that I'm
239:12 figure out how to navigate that I'm actually under S3 right now so I'm
239:13 actually under S3 right now so I'm looking for for the client and I just
239:16 looking for for the client and I just know this for memory that this is where
239:17 know this for memory that this is where it is so first you create yourself a
239:18 it is so first you create yourself a client and then you can do API
239:20 client and then you can do API operations so if I wanted to like list
239:23 operations so if I wanted to like list buckets I just search the word list and
239:25 buckets I just search the word list and I just scroll on down and there it is I
239:27 I just scroll on down and there it is I click into that and I have an example of
239:29 click into that and I have an example of how to list a bucket so I'm going to go
239:31 how to list a bucket so I'm going to go back to Cloud9 and it is ready and it
239:33 back to Cloud9 and it is ready and it started in dark mode um if yours is not
239:35 started in dark mode um if yours is not in dark mode which really honestly why
239:37 in dark mode which really honestly why wouldn't you want dark mode um if we go
239:40 wouldn't you want dark mode um if we go up to I think it's like file where is it
239:43 up to I think it's like file where is it uh preferences here here got to click
239:44 uh preferences here here got to click the Cloud9 option and I'm just seeing if
239:48 the Cloud9 option and I'm just seeing if it like remembers my settings I really
239:50 it like remembers my settings I really like two two soft tabs here but uh there
239:53 like two two soft tabs here but uh there should be something for themes down
239:54 should be something for themes down below and
239:56 below and so
239:58 so um that doesn't seem like that's it used
240:01 um that doesn't seem like that's it used to be like a oh here it is if you go
240:03 to be like a oh here it is if you go here and just choose like whatever you
240:05 here and just choose like whatever you want I'm on jet dark here and so if it's
240:07 want I'm on jet dark here and so if it's on classic light or something you don't
240:10 on classic light or something you don't like you can fix that there um but I'm
240:12 like you can fix that there um but I'm just going to go here and just fiddle
240:13 just going to go here and just fiddle with my
240:14 with my settings because I really like to use
240:17 settings because I really like to use Vim uh keys I don't recommend this if
240:19 Vim uh keys I don't recommend this if you are uh to change this if you are not
240:22 you are uh to change this if you are not a programmer but I'm just going to
240:23 a programmer but I'm just going to change it so that I can type here
240:25 change it so that I can type here efficiently so I'm just looking for the
240:28 efficiently so I'm just looking for the option
240:29 option here and they moved it on me where did
240:31 here and they moved it on me where did they move
240:32 they move it it probably be like key
240:35 it it probably be like key bindings ah Bim mode there we go again
240:37 bindings ah Bim mode there we go again don't do that this is just for me so I
240:39 don't do that this is just for me so I can uh move around in a different way so
240:42 can uh move around in a different way so what I want to do and by the way looks
240:44 what I want to do and by the way looks like this default screen we could have
240:45 like this default screen we could have just changed it here I just clicked
240:47 just changed it here I just clicked through all that for nothing it was here
240:48 through all that for nothing it was here the entire time but um what we need is
240:52 the entire time but um what we need is we need to make sure that we have our
240:53 we need to make sure that we have our credentials so if we type in ads um S3
240:57 credentials so if we type in ads um S3 LS that's like my sanity check that I
240:58 LS that's like my sanity check that I always like to do to make sure I have
241:00 always like to do to make sure I have credentials notice that we didn't have
241:01 credentials notice that we didn't have to set up any credentials it was already
241:03 to set up any credentials it was already on this machine which was really nice
241:06 on this machine which was really nice and so I'm going to create a new file
241:07 and so I'm going to create a new file here and it's okay if you don't know
241:09 here and it's okay if you don't know anything about Ruby we're just going to
241:11 anything about Ruby we're just going to have fun here and just follow along so
241:12 have fun here and just follow along so I'm going to do example RB I'm going to
241:14 I'm going to do example RB I'm going to make sure Ruby's installed by doing Ruby
241:16 make sure Ruby's installed by doing Ruby hyphen V so it is installed which is
241:18 hyphen V so it is installed which is great uh you need a gem file so say new
241:21 great uh you need a gem file so say new gem file
241:23 gem file here and if we go back to the
241:26 here and if we go back to the installation guide uh we need the gem
241:29 installation guide uh we need the gem STK
241:31 STK here actually I'm going to look at how
241:32 here actually I'm going to look at how to generate a gem file gem file because
241:34 to generate a gem file gem file because there's some stuff that goes to the top
241:36 there's some stuff that goes to the top of those
241:37 of those files like this
241:39 files like this here I think we just need this line here
241:41 here I think we just need this line here so I'm just going to grab that whoops
241:44 so I'm just going to grab that whoops paste that in allow
241:47 paste that in allow good and uh I you can do gem ads SDK
241:52 good and uh I you can do gem ads SDK that will install everything but uh we
241:54 that will install everything but uh we only want to work
241:56 only want to work with S3 and so this is going to vary
241:59 with S3 and so this is going to vary based on each language but I know that
242:00 based on each language but I know that if we type in S3 we'll just get S3 and
242:02 if we type in S3 we'll just get S3 and that's all we really need and so once we
242:05 that's all we really need and so once we have that what we'll need to do is use a
242:06 have that what we'll need to do is use a bundle install so we're going to make
242:08 bundle install so we're going to make sure we're in the correct directory I'm
242:09 sure we're in the correct directory I'm going to type in LS down below notice
242:11 going to type in LS down below notice the gem file is there uh and by the way
242:13 the gem file is there uh and by the way the fonts are too small I should
242:15 the fonts are too small I should probably bump those up let's see how we
242:17 probably bump those up let's see how we can do
242:19 can do that uh editor size font user
242:31 settings good luck trying to find today um project
242:35 today um project no you think it'd have to be under user
242:37 no you think it'd have to be under user settings
242:39 settings right ah here it is okay so um this is
242:42 right ah here it is okay so um this is for
242:44 for probably the editor so we'll go to 18
242:45 probably the editor so we'll go to 18 here Co code editor
242:49 here Co code editor here I'm I'm trying to find the one for
242:51 here I'm I'm trying to find the one for the terminal probably over
242:53 the terminal probably over here there we
242:55 here there we go much easier okay so notice we have
242:58 go much easier okay so notice we have example. RB and Gem file so we're in the
243:00 example. RB and Gem file so we're in the correct directory make sure I save that
243:02 correct directory make sure I save that I'm going to type in bundle
243:04 I'm going to type in bundle install that's going to install the gems
243:07 install that's going to install the gems give it a moment there it's going to
243:08 give it a moment there it's going to fetch notice that installed um the adabs
243:12 fetch notice that installed um the adabs sdks S3 and everything that it was
243:14 sdks S3 and everything that it was dependent on and so now if we go over to
243:16 dependent on and so now if we go over to our example. RB file really when you're
243:18 our example. RB file really when you're coding for the cloud you can pretty much
243:20 coding for the cloud you can pretty much copy paste everything so over here we
243:23 copy paste everything so over here we found this code here for S3 list buckets
243:26 found this code here for S3 list buckets um and so I'm going to go ahead and
243:28 um and so I'm going to go ahead and paste that on in okay and I know it
243:31 paste that on in okay and I know it looks really complicated but we can
243:33 looks really complicated but we can quickly simplify this so I know that
243:36 quickly simplify this so I know that this is just the output so I don't need
243:38 this is just the output so I don't need that okay and in Ruby you don't need
243:40 that okay and in Ruby you don't need parentheses or curries if uh if you
243:43 parentheses or curries if uh if you don't have anything things there and so
243:44 don't have anything things there and so all I need to do is Define a client so
243:47 all I need to do is Define a client so if I click uh I go to the top here of
243:49 if I click uh I go to the top here of this file I think we're in the client
243:51 this file I think we're in the client right
243:51 right now all the way to the top all the way
243:54 now all the way to the top all the way to the top
243:55 to the top here that's what we need
243:59 here that's what we need okay and so I'm going to paste that in
244:01 okay and so I'm going to paste that in now uh we can set the region here so I'm
244:04 now uh we can set the region here so I'm going to say Us East
244:05 going to say Us East one right and then you'd have your
244:08 one right and then you'd have your credentials um because the credentials
244:10 credentials um because the credentials are on the machine in the um credentials
244:14 are on the machine in the um credentials file they're going to autoload here I
244:16 file they're going to autoload here I believe so I don't think I need to set
244:17 believe so I don't think I need to set them so I'm just going to take that out
244:19 them so I'm just going to take that out here for a
244:21 here for a second okay and I can do this if I want
244:24 second okay and I can do this if I want this is just slightly different syntax
244:25 this is just slightly different syntax it might be easier to read if I do it
244:26 it might be easier to read if I do it this way for
244:28 this way for you okay and I don't need double client
244:32 you okay and I don't need double client there so we have the client I like to
244:33 there so we have the client I like to name this like S3 so I know what it is
244:36 name this like S3 so I know what it is and I put puts for the response I'm
244:39 and I put puts for the response I'm going to do
244:40 going to do inspect and so puts is like print okay
244:43 inspect and so puts is like print okay and so now if I type in bundle exact
244:46 and so now if I type in bundle exact let's just make sure that it's in the
244:47 let's just make sure that it's in the context of our bundler file Ruby
244:49 context of our bundler file Ruby example. RB um we have a syntax error on
244:53 example. RB um we have a syntax error on this line here unexpected thing
244:56 this line here unexpected thing here oh it's because of this it's
244:59 here oh it's because of this it's because I commented it out so I'm just
245:00 because I commented it out so I'm just going to do curly parenthesis comment
245:02 going to do curly parenthesis comment out
245:03 out here
245:05 here okay actually to make it a bit easier
245:07 okay actually to make it a bit easier I'm just going to bring this down like
245:10 I'm just going to bring this down like this okay and we'll paste that there
245:17 okay and we'll try this again un initialized constants ad to us
245:20 again un initialized constants ad to us oh yeah we have to require it so we have
245:21 oh yeah we have to require it so we have to require Abus SDK S3 I think we'll hit
245:28 to require Abus SDK S3 I think we'll hit up and uh we got a struck back so it is
245:31 up and uh we got a struck back so it is working we are getting an object back if
245:34 working we are getting an object back if we want to play around with this a bit
245:35 we want to play around with this a bit more I'm just going to install another
245:36 more I'm just going to install another gem called pry pry allows us to um
245:39 gem called pry pry allows us to um inspect code so we're going to do bundle
245:41 inspect code so we're going to do bundle install and I'm going to go back to Ruby
245:44 install and I'm going to go back to Ruby here I'm going to put a binding pry in
245:47 here I'm going to put a binding pry in here and then if I hit up and I do
245:51 here and then if I hit up and I do bundle exact Ruby example.
245:53 bundle exact Ruby example. RB um I installed it right install
246:03 yes undefine method pry oh because I have to require it
246:06 pry oh because I have to require it again bad habit
246:08 again bad habit here okay we'll hit up and so now I have
246:12 here okay we'll hit up and so now I have an Interactive shall and I can kind of
246:14 an Interactive shall and I can kind of analyze that object so we have a
246:15 analyze that object so we have a response so if I type in RSP here I have
246:18 response so if I type in RSP here I have the structure object I can type in
246:20 the structure object I can type in buckets here okay and it's showing me a
246:22 buckets here okay and it's showing me a bucket I can give it get its
246:25 bucket I can give it get its name
246:27 name um oh I think it's an array so I think
246:30 um oh I think it's an array so I think I'd say like I'd say like zero here or I
246:33 I'd say like I'd say like zero here or I could say first this is just the how the
246:34 could say first this is just the how the Ruby language works we say name I get
246:36 Ruby language works we say name I get the name creation date okay so you get
246:40 the name creation date okay so you get the idea whatever you want to do you
246:43 the idea whatever you want to do you know you search for it you just say I
246:44 know you search for it you just say I want to delete a bucket I want to create
246:46 want to delete a bucket I want to create a bucket right and you look for it so I
246:48 a bucket right and you look for it so I say create bucket here I click on this
246:52 say create bucket here I click on this and I can see the options and they are
246:54 and I can see the options and they are always really good about giving me an
246:55 always really good about giving me an example and then down below they always
246:57 example and then down below they always tell you all the parameters that you
246:58 tell you all the parameters that you have there so that's how the SDK Works
247:02 have there so that's how the SDK Works uh but yeah the credentials were uh soft
247:03 uh but yeah the credentials were uh soft loaded here but you could easily provide
247:05 loaded here but you could easily provide them yourself I should just show you
247:07 them yourself I should just show you that before anything else just because
247:09 that before anything else just because there's some variations there
247:12 there's some variations there um and I'm just trying to look for it
247:14 um and I'm just trying to look for it because it is separate
247:18 because it is separate code so you could do this this is one
247:20 code so you could do this this is one way of doing it so you could do it
247:22 way of doing it so you could do it separate from the code so if you only
247:23 separate from the code so if you only wanted to configure it
247:25 wanted to configure it once right because you could you could
247:27 once right because you could you could have a lot of clients you wouldn't want
247:28 have a lot of clients you wouldn't want to keep on like for each client you
247:30 to keep on like for each client you wouldn't want to put region in every
247:31 wouldn't want to put region in every time so I could take this and put this
247:34 time so I could take this and put this right here
247:36 right here okay and this is the file here where we
247:38 okay and this is the file here where we have the credentials so this would be
247:41 have the credentials so this would be our um our access key and our ID and so
247:46 our um our access key and our ID and so you never want to put your code directly
247:48 you never want to put your code directly just in here so if I open up if we go
247:51 just in here so if I open up if we go cat you would never want to do this but
247:53 cat you would never want to do this but I'm just going to show as an example
247:55 I'm just going to show as an example here uh
247:57 here uh credentials oops I got to get out of
247:58 credentials oops I got to get out of this
247:59 this exit ads
248:05 credentials oh do they not even show it on this machine which would be smart we
248:07 on this machine which would be smart we wouldn't really want to see our
248:08 wouldn't really want to see our credentials here uh hit up say
248:11 credentials here uh hit up say LS oh no it's there okay
248:15 LS oh no it's there okay cat
248:17 cat whoops
248:20 whoops credentials there it is okay so you know
248:23 credentials there it is okay so you know if we look here we can see that there
248:24 if we look here we can see that there are credentials set it's a little bit
248:26 are credentials set it's a little bit different we have this like session
248:27 different we have this like session token I guess it's to make sure that
248:29 token I guess it's to make sure that this expires over time but if I was to
248:31 this expires over time but if I was to take these okay and I was just to paste
248:34 take these okay and I was just to paste them in
248:44 here that's one way you would do it um you never ever want to do this ever ever
248:47 you never ever want to do this ever ever ever ever you never want to do this
248:48 ever ever you never want to do this because you'll end up committing that to
248:49 because you'll end up committing that to your code um so this is really dirty to
248:52 your code um so this is really dirty to do so I don't ever recommend to do it um
248:55 do so I don't ever recommend to do it um if you wanted to have this apply to
248:57 if you wanted to have this apply to everything you could put it up here and
248:58 everything you could put it up here and so now when we call the client we don't
249:01 so now when we call the client we don't have to do it um of course if the
249:04 have to do it um of course if the they're loaded on the machine you don't
249:05 they're loaded on the machine you don't have to do it the other thing is like if
249:07 have to do it the other thing is like if you if you want you could load them in
249:09 you if you want you could load them in Via environment variables that's usually
249:11 Via environment variables that's usually what you want to do so you say ads uh
249:13 what you want to do so you say ads uh access
249:15 access key right and then we say environment
249:19 key right and then we say environment databus access
249:21 databus access secret and so you'd set those by doing I
249:24 secret and so you'd set those by doing I think it's like an
249:25 think it's like an export um environment
249:28 export um environment variables set in Linux you think I know
249:32 variables set in Linux you think I know after like 15 years of doing this but I
249:33 after like 15 years of doing this but I never remember so you type in export so
249:36 never remember so you type in export so you go down into oops here you type in
249:39 you go down into oops here you type in export and you just say something like
249:41 export and you just say something like I'm going to just show an example to see
249:43 I'm going to just show an example to see if it works so I'm going to say hello
249:45 if it works so I'm going to say hello world okay and if I do uh hello like
249:48 world okay and if I do uh hello like that Echo see it prints it out so that's
249:52 that Echo see it prints it out so that's how you would set it you'd set those
249:53 how you would set it you'd set those there but there's actually very specific
249:56 there but there's actually very specific ones that adabs uses for um the API and
249:59 ones that adabs uses for um the API and it's these ones here so you always want
250:01 it's these ones here so you always want to use
250:02 to use those okay so you put that in
250:06 those okay so you put that in there and that in there but of course
250:09 there and that in there but of course you know like if they're already said in
250:10 you know like if they're already said in your machine you don't have to even
250:11 your machine you don't have to even specify those cuz it would Auto load
250:13 specify those cuz it would Auto load those environment variables I don't
250:15 those environment variables I don't think they're set right now if we type
250:16 think they're set right now if we type in Echo just take a look here are they
250:18 in Echo just take a look here are they going to get autoloaded
250:21 going to get autoloaded here no so but anyway so we could go
250:24 here no so but anyway so we could go here just as an
250:27 here just as an example and well actually they just show
250:29 example and well actually they just show them right here so you see your access
250:30 them right here so you see your access key but we go and we type in um
250:34 key but we go and we type in um export and I going paste the key in
250:36 export and I going paste the key in there and I'm going to go to the front
250:37 there and I'm going to go to the front of it we're type adab us access key ID
250:42 of it we're type adab us access key ID equals enter and so now if I did echo on
250:45 equals enter and so now if I did echo on this ads access key ID okay it shows up
250:50 this ads access key ID okay it shows up but I just want to show you how it can
250:51 but I just want to show you how it can kind of vary and those conditions around
250:53 kind of vary and those conditions around it so yeah that is the adus SDK um and
250:56 it so yeah that is the adus SDK um and yeah a lot of times you're just copying
250:57 yeah a lot of times you're just copying pasting code and just kind of tweaking
250:59 pasting code and just kind of tweaking it you're not really writing uh real
251:01 it you're not really writing uh real programming okay so hopefully that is
251:02 programming okay so hopefully that is less intimidating so I'm just going to
251:03 less intimidating so I'm just going to close these off and I want to close down
251:06 close these off and I want to close down this Cloud9
251:07 this Cloud9 environment
251:09 environment um I might have to reopen this up in
251:11 um I might have to reopen this up in another tab
251:13 another tab and go to the Management console here
251:15 and go to the Management console here and then go over to Cloud9 and just
251:18 and then go over to Cloud9 and just close this tab and then while go ahead
251:20 close this tab and then while go ahead as and delete this environment oops I'll
251:22 as and delete this environment oops I'll just type delete here even if you didn't
251:25 just type delete here even if you didn't it would turn off after 30 minutes and
251:26 it would turn off after 30 minutes and you have that free tier so it's not that
251:28 you have that free tier so it's not that big of a deal it's up to you whether you
251:30 big of a deal it's up to you whether you want to use Cloud9 or G pods Cloud9 is
251:32 want to use Cloud9 or G pods Cloud9 is really good because it allows you to um
251:36 really good because it allows you to um uh it allows you to uh use it runs on a
251:40 uh it allows you to uh use it runs on a virtual machine right so you have a a
251:43 virtual machine right so you have a a container run time there and so it's
251:45 container run time there and so it's very easy to run containers on it um
251:47 very easy to run containers on it um whereas in like I've had some issues
251:48 whereas in like I've had some issues with G pods but um yeah those are the
251:51 with G pods but um yeah those are the two
251:52 two [Music]
251:55 [Music] okay let's take a look at itus Cloud
251:58 okay let's take a look at itus Cloud shell which is a browser based Shell
252:00 shell which is a browser based Shell built into the adus Management console
252:02 built into the adus Management console and so Cloud shell is scoped per region
252:04 and so Cloud shell is scoped per region it has the same credentials as the loged
252:06 it has the same credentials as the loged in user and it's a free service so this
252:07 in user and it's a free service so this is what it looks like and the great
252:09 is what it looks like and the great thing about this is that you know if you
252:11 thing about this is that you know if you have a hard time setting up uh your own
252:14 have a hard time setting up uh your own shell or terminal on your computer um or
252:17 shell or terminal on your computer um or maybe you just don't have access or
252:18 maybe you just don't have access or privilege to do so it's just great that
252:20 privilege to do so it's just great that databus makes this uh available to you
252:23 databus makes this uh available to you and so what you can do is click the
252:24 and so what you can do is click the shell icon up at the top and that will
252:26 shell icon up at the top and that will expand this here some things to note
252:28 expand this here some things to note about Cloud shell is that it has some
252:29 about Cloud shell is that it has some pre-installed tools so it has the CLI
252:32 pre-installed tools so it has the CLI python nodejs git make pip pseudo tar
252:35 python nodejs git make pip pseudo tar t-mo Vim WG vim and more it includes 1
252:39 t-mo Vim WG vim and more it includes 1 gab of storage free per adus region it
252:42 gab of storage free per adus region it will save your files in a home directory
252:45 will save your files in a home directory available for future sessions for the
252:46 available for future sessions for the same adus region uh and it can support
252:49 same adus region uh and it can support more than a single shell environment so
252:51 more than a single shell environment so it has bash Powershell and
252:54 it has bash Powershell and zsh um and so Adis Cloud shell is
252:56 zsh um and so Adis Cloud shell is available in select regions so when I
252:58 available in select regions so when I was in my Canada region I was like
253:00 was in my Canada region I was like where's the little shell icon but I
253:01 where's the little shell icon but I realized it's limited for some areas
253:05 realized it's limited for some areas [Music]
253:08 [Music] okay hey this is Andrew Brown from exam
253:10 okay hey this is Andrew Brown from exam Pro and we are taking a look at
253:12 Pro and we are taking a look at infrastructure as code also known as IAC
253:15 infrastructure as code also known as IAC and this allows you to write a
253:16 and this allows you to write a configuration script to automate
253:18 configuration script to automate creating updating or destroying your
253:20 creating updating or destroying your Cloud infrastructure the way you can
253:22 Cloud infrastructure the way you can think of IC it's a blueprint of your
253:24 think of IC it's a blueprint of your infrastructure and it allows you to
253:26 infrastructure and it allows you to easily share version or inventory your
253:28 easily share version or inventory your Cloud
253:29 Cloud infrastructure so adus has two different
253:31 infrastructure so adus has two different offerings for IAC the first is cloud
253:35 offerings for IAC the first is cloud formation uh a a commonly abbreviated to
253:38 formation uh a a commonly abbreviated to CFN and this is a declarative I tool and
253:41 CFN and this is a declarative I tool and then you have Aus cloud development kit
253:43 then you have Aus cloud development kit commonly known as cdk which is an
253:45 commonly known as cdk which is an imperative IAC tool so let's just talk
253:47 imperative IAC tool so let's just talk about the difference between declarative
253:49 about the difference between declarative and imperative and then we'll look at
253:50 and imperative and then we'll look at these tools a little bit closer uh each
253:53 these tools a little bit closer uh each okay so declarative means what you see
253:55 okay so declarative means what you see is what you get it's explicit it's more
253:57 is what you get it's explicit it's more of aose but uh there is zero chance of
253:59 of aose but uh there is zero chance of misconfiguration unless the file is so
254:01 misconfiguration unless the file is so big that you're missing something uh
254:03 big that you're missing something uh commonly declarative files are written
254:05 commonly declarative files are written in things like Json yaml XML so for
254:07 in things like Json yaml XML so for cloud formation it's just Json and yaml
254:10 cloud formation it's just Json and yaml uh and so that's that side there so for
254:12 uh and so that's that side there so for imperative you say what you want and the
254:14 imperative you say what you want and the rest is filled in so it's implicit uh
254:16 rest is filled in so it's implicit uh it's less for both you could end up with
254:18 it's less for both you could end up with some misconfiguration that's totally
254:20 some misconfiguration that's totally possible uh but it does more than
254:22 possible uh but it does more than declarative and you get to use your
254:24 declarative and you get to use your favorite programming language maybe
254:25 favorite programming language maybe python JavaScript actually cdk does not
254:28 python JavaScript actually cdk does not support Ruby right now but I just have
254:29 support Ruby right now but I just have that in there just as a general
254:31 that in there just as a general description of what imperative is
254:34 description of what imperative is [Music]
254:37 [Music] okay all right so just a quick look at
254:39 okay all right so just a quick look at cloud formation so cloud formation
254:40 cloud formation so cloud formation allows you to write infrastructures code
254:42 allows you to write infrastructures code as either Json or yaml the reason why it
254:45 as either Json or yaml the reason why it was adus started with Json and then
254:46 was adus started with Json and then everybody got sick of writing Json and
254:49 everybody got sick of writing Json and so they introduced jaml which is a lot
254:51 so they introduced jaml which is a lot more concise which you see on the right
254:52 more concise which you see on the right hand side so cloud formation is simple
254:54 hand side so cloud formation is simple but it can lead to large files or is
254:56 but it can lead to large files or is limited in some regards to creating
254:58 limited in some regards to creating Dynamic repeal infrastructure compared
255:00 Dynamic repeal infrastructure compared to cdk Cloud information can be easier
255:03 to cdk Cloud information can be easier for devops engineers who do not have a
255:04 for devops engineers who do not have a background in web programming languages
255:06 background in web programming languages a lot of times they just know scripting
255:08 a lot of times they just know scripting and this basically is scripting since
255:10 and this basically is scripting since cdk generates outloud information it's
255:12 cdk generates outloud information it's still important to be able to read and
255:13 still important to be able to read and understand Cloud information in order to
255:15 understand Cloud information in order to debug IAC Stacks knowing cloud formation
255:18 debug IAC Stacks knowing cloud formation is kind of a cloud essential when you go
255:21 is kind of a cloud essential when you go into the other tiers of AWS um like
255:23 into the other tiers of AWS um like Solutions architect associate
255:24 Solutions architect associate professional or any of the associates
255:26 professional or any of the associates you need to know Cloud information
255:27 you need to know Cloud information inside and out
255:29 inside and out [Music]
255:33 [Music] okay okay so what I want to do now is
255:36 okay okay so what I want to do now is introduce you to infrastructure as code
255:39 introduce you to infrastructure as code and so we're going to take a look at
255:40 and so we're going to take a look at cloud formation and so we were just
255:42 cloud formation and so we were just using Cloud d for the STK so we're going
255:44 using Cloud d for the STK so we're going to go back and create ourselves a new
255:45 to go back and create ourselves a new Cloud9 environment because we do have to
255:47 Cloud9 environment because we do have to write uh some code so I'll go ahead and
255:49 write uh some code so I'll go ahead and hit create here and I'm going to just
255:51 hit create here and I'm going to just say uh CFN that's sort for cloud
255:53 say uh CFN that's sort for cloud formation example and we'll hit next
255:56 formation example and we'll hit next step and we'll create ourselves a new
255:58 step and we'll create ourselves a new environment T2 micro uh Amazon x 2 is
256:01 environment T2 micro uh Amazon x 2 is totally fine we'll hit next it'll delete
256:03 totally fine we'll hit next it'll delete after 30 minutes we'll be fine we're
256:05 after 30 minutes we'll be fine we're within the free tier we're going to give
256:06 within the free tier we're going to give this a moment to load up um and remember
256:09 this a moment to load up um and remember you can set your theme your your
256:11 you can set your theme your your keyboard mode whatever you want as that
256:13 keyboard mode whatever you want as that loads and as that's going we're going to
256:14 loads and as that's going we're going to look up cloud formation and so cloud
256:18 look up cloud formation and so cloud formation is very intimidating at first
256:21 formation is very intimidating at first but once you get through the motions of
256:22 but once you get through the motions of it it's not too bad um so we'll go to
256:25 it it's not too bad um so we'll go to the user guide here as we always do if
256:27 the user guide here as we always do if you go to the getting
256:29 you go to the getting started it's going to just tell us some
256:31 started it's going to just tell us some things it's going to read about yaml
256:33 things it's going to read about yaml files um I don't think I really need to
256:35 files um I don't think I really need to read much about this here so I think
256:37 read much about this here so I think we'll just go start looking up some
256:39 we'll just go start looking up some codes so something that might be
256:40 codes so something that might be interesting to launch is an ec2 instance
256:42 interesting to launch is an ec2 instance cloudformation so that's what I'll do is
256:44 cloudformation so that's what I'll do is I'll type in what I want so in E2
256:46 I'll type in what I want so in E2 instance and I'll just start pasting in
256:48 instance and I'll just start pasting in code so we scroll on down below
256:51 code so we scroll on down below here going to go to examples because I
256:53 here going to go to examples because I want a small example here this is
256:55 want a small example here this is something that I might want to do and
256:57 something that I might want to do and we're going to give that a moment here
256:59 we're going to give that a moment here it's almost
257:01 it's almost done you can do it ad bu come on as that
257:04 done you can do it ad bu come on as that is going I'm going to open a new tab I'm
257:07 is going I'm going to open a new tab I'm going to make my way over to cloud
257:10 going to make my way over to cloud formation okay
257:17 and um you can see I have some older Stacks here notice Cloud9 when we create
257:21 Stacks here notice Cloud9 when we create an environment actually creates a cloud
257:22 an environment actually creates a cloud formation stack which is kind of
257:24 formation stack which is kind of interesting um but if we go here we can
257:28 interesting um but if we go here we can create a stack and we can create a file
257:30 create a stack and we can create a file and upload it here
257:32 and upload it here so okay this is good I'm going to go
257:34 so okay this is good I'm going to go ahead and make a new
257:36 ahead and make a new file we're going to call it
257:38 file we're going to call it template. yaml um just so you know yaml
257:42 template. yaml um just so you know yaml can be y ml or Y ml there's a big debate
257:46 can be y ml or Y ml there's a big debate as to which one you use um I think that
257:48 as to which one you use um I think that adabs likes it when you use the full
257:50 adabs likes it when you use the full version so I just stick with
257:57 yaml I'm going to double click into that and so in the cc2 example I'm just going
257:59 and so in the cc2 example I'm just going to copy this okay and I'm going to paste
258:02 to copy this okay and I'm going to paste this in
258:03 this in here and I'm going to type in
258:06 here and I'm going to type in resources oops
258:12 capital okay so that's a resource I want to create
258:14 to create um when you create Cloud information you
258:16 um when you create Cloud information you always have a template version so I just
258:20 always have a template version so I just need a basic example here at the
258:24 need a basic example here at the top I guess that's a simple one is like
258:26 top I guess that's a simple one is like a Hello World
258:31 Bucket maybe we should do a bucket because it'll be a lot
258:36 easier we don't have to make our Liv super hard here okay um but what I'm
258:40 super hard here okay um but what I'm looking for is the version because
258:42 looking for is the version because that's the first thing that you
258:44 that's the first thing that you specify I'm just trying to find it
258:46 specify I'm just trying to find it within an example
258:49 within an example here oh for freak's sakes cloud
258:52 here oh for freak's sakes cloud formation
258:53 formation version if I don't have the format
258:55 version if I don't have the format version it's going to complain there it
258:56 version it's going to complain there it is okay so we'll copy that we'll go back
259:00 is okay so we'll copy that we'll go back over
259:01 over here we'll paste that in there it might
259:04 here we'll paste that in there it might be fun to do like an output here so I'm
259:05 be fun to do like an output here so I'm going to do like an output
259:08 going to do like an output outputs and uh maybe instead of doing
259:11 outputs and uh maybe instead of doing this we'll type in ads S3
259:16 C formation because what I'm looking for
259:18 formation because what I'm looking for is what we can set as output so we'll
259:20 is what we can set as output so we'll say return values
259:23 say return values here
259:26 here um maybe we just
259:29 um maybe we just want Returns the domain
259:31 want Returns the domain name so we'll just say
259:35 name so we'll just say um
259:38 um value ref that that's going to get the
259:40 value ref that that's going to get the reference for it and we have to say
259:42 reference for it and we have to say hello
259:55 string say outputs cloud formation example and even though I've written
259:57 example and even though I've written tons of cloud information it's just like
259:59 tons of cloud information it's just like if you're not doing it on day in day out
260:00 if you're not doing it on day in day out you start to forget what it is so here
260:03 you start to forget what it is so here for outputs we need a logical ID
260:05 for outputs we need a logical ID description value and Export
260:07 description value and Export so um that is what I want so I'm going
260:11 so um that is what I want so I'm going to go ahead and copy that back here
260:13 to go ahead and copy that back here this is just so that when we run it
260:15 this is just so that when we run it we're going to be able to observe an
260:16 we're going to be able to observe an output from the cloud information file
260:19 output from the cloud information file okay so the logical ID is whatever we
260:20 okay so the logical ID is whatever we want so hello bucket
260:24 want so hello bucket domain it's funny because this is how
260:25 domain it's funny because this is how you do do um kind of that would be the
260:28 you do do um kind of that would be the format for terraform I was getting them
260:29 format for terraform I was getting them mixed up so the
260:32 mixed up so the domain of the bucket the value here is
260:35 domain of the bucket the value here is going to be
260:37 going to be ref
260:40 ref hello bucket
260:42 hello bucket domain
261:05 here B name oh you know what export is for uh
261:08 name oh you know what export is for uh cross Stacks we don't need to do that
261:09 cross Stacks we don't need to do that okay so that's fine so what we'll do is
261:11 okay so that's fine so what we'll do is set that and we'll take out our old one
261:14 set that and we'll take out our old one and so this should create us an S3
261:15 and so this should create us an S3 bucket so with Cloud information you can
261:18 bucket so with Cloud information you can uh provide a template here by providing
261:20 uh provide a template here by providing a URL or you can upload a file directly
261:23 a URL or you can upload a file directly so um I'm just trying to decide here how
261:26 so um I'm just trying to decide here how I want to do this you can also use a
261:28 I want to do this you can also use a sample file or create a template in the
261:30 sample file or create a template in the designer I'm going to go over to the
261:32 designer I'm going to go over to the designer because then we can just like
261:34 designer because then we can just like paste in what we want so if I go over to
261:36 paste in what we want so if I go over to yamel here and we go back over here I
261:39 yamel here and we go back over here I copy
261:40 copy this I'm just going to paste this in
261:42 this I'm just going to paste this in here
261:46 and we're going to hit the refresh button nobody ever uses the designer but
261:48 button nobody ever uses the designer but this is just kind of a easy example for
261:50 this is just kind of a easy example for me to uh place this in
262:01 here it's not really working maybe I got to go to template dude here
262:04 to go to template dude here refresh there we go so there's our
262:06 refresh there we go so there's our bucket it's nice to have a little
262:08 bucket it's nice to have a little visualization and I believe this is
262:10 visualization and I believe this is going to work as expected so now that we
262:12 going to work as expected so now that we have have our designer template I think
262:14 have have our designer template I think if we hit close what's this button say
262:17 if we hit close what's this button say validate template probably a good idea
262:18 validate template probably a good idea validating the template template
262:21 validating the template template contains errors unresolved resource
262:22 contains errors unresolved resource dependency in the output block of the
262:24 dependency in the output block of the template
262:26 template hello domain
262:30 hello domain it seems like it should be
262:37 fine let's go whoops let's go back over
262:40 whoops let's go back over here that's what I did said reference
262:43 here that's what I did said reference that
262:45 that value oh uh maybe it's get a trib
262:49 value oh uh maybe it's get a trib okay it's get ATT
262:53 okay it's get ATT sorry get a trib Cloud information can't
262:57 sorry get a trib Cloud information can't remember if there's an r on the end of
262:59 remember if there's an r on the end of it oh it's just at this is if you're
263:00 it oh it's just at this is if you're trying to get a return intrinsic value
263:03 trying to get a return intrinsic value so a reference is like what the default
263:05 so a reference is like what the default one is but when every time we do like a
263:06 one is but when every time we do like a logical name and attribute that's how we
263:08 logical name and attribute that's how we get that there so uh what I'm going to
263:10 get that there so uh what I'm going to do here is just hit refresh and I'm
263:12 do here is just hit refresh and I'm going to validate that one more time now
263:15 going to validate that one more time now it's valid if I hover over this is going
263:17 it's valid if I hover over this is going to upload it create the
263:19 to upload it create the stack we could save this save
263:22 stack we could save this save it oh we can save it in an S3 bucket so
263:24 it oh we can save it in an S3 bucket so we'll say
263:26 we'll say hello bucket and so now we have this URL
263:30 hello bucket and so now we have this URL so I'm going to copy it honestly I never
263:32 so I'm going to copy it honestly I never use this editor so it's kind of
263:33 use this editor so it's kind of interesting I'm going to
263:36 interesting I'm going to leave and we probably could hit create
263:38 leave and we probably could hit create stack but I just find it a bit easier if
263:39 stack but I just find it a bit easier if we just kind of do it through uh this
263:41 we just kind of do it through uh this here so go back create the stack we're
263:43 here so go back create the stack we're going to paste in the URL we're going to
263:45 going to paste in the URL we're going to say
263:46 say next and we're going to say uh my new
263:50 next and we're going to say uh my new stack and I didn't see what the name of
263:52 stack and I didn't see what the name of the bucket was oh there's no name so
263:55 the bucket was oh there's no name so it's going to randomize that's perfect
263:57 it's going to randomize that's perfect so we'll go next we have a bunch of
263:59 so we'll go next we have a bunch of options here we'll hit hit
264:01 options here we'll hit hit next we'll give it a moment here I guess
264:03 next we'll give it a moment here I guess we have to review it create the stack
264:06 we have to review it create the stack and this is the part where we watch so
264:07 and this is the part where we watch so it says create in progress and we wait
264:09 it says create in progress and we wait and we hit refresh
264:12 and we hit refresh and we can see what's happening trying
264:14 and we can see what's happening trying to create a
264:20 bucket and if we go to resources this is this is a lot easier to track because
264:21 this is a lot easier to track because you can see all the resources that are
264:22 you can see all the resources that are being
264:31 created if you notice that when you use the C uh when you're using databas
264:33 the C uh when you're using databas management call create s bucket it's
264:34 management call create s bucket it's instantaneous but like with Cloud
264:36 instantaneous but like with Cloud information there's a bit of delay
264:37 information there's a bit of delay because there's some communication going
264:38 because there's some communication going on board but here it is and notice if we
264:40 on board but here it is and notice if we go to our outputs this is the the value
264:43 go to our outputs this is the the value of the bucket domain name if we were to
264:45 of the bucket domain name if we were to make it with self-hosting which is not
264:47 make it with self-hosting which is not what we're doing with it we could also
264:48 what we're doing with it we could also have an export name which would be used
264:50 have an export name which would be used for cross referencing Stacks which is
264:51 for cross referencing Stacks which is not something we uh care to do um but
264:54 not something we uh care to do um but yeah that's how you create a stack that
264:56 yeah that's how you create a stack that way um but you know we can also do it
264:59 way um but you know we can also do it via the SDK here so what I can do um is
265:05 via the SDK here so what I can do um is look up what is the Adis uh CLI cloud
265:08 look up what is the Adis uh CLI cloud formation because they have their own
265:10 formation because they have their own commands here if I go here
265:13 commands here if I go here there's a new one and there's an old one
265:17 there's a new one and there's an old one so if we go create
265:23 stack yeah there's things like this like create stack
265:24 create stack update um so if we wanted to do it this
265:34 way okay and I copied this here I'm just going to put this in my read me here for
265:35 going to put this in my read me here for a
265:40 second uh so here what you do is you say my new stack
265:42 my new stack and you could provide the template URL
265:44 and you could provide the template URL or you could specify the local path here
265:48 or you could specify the local path here so we have like a template body so I'm
265:50 so we have like a template body so I'm going to go ahead and grab
265:52 going to go ahead and grab that okay this would be like
265:55 that okay this would be like yaml and um I need to specify this file
265:59 yaml and um I need to specify this file here so template.
266:02 here so template. yaml and I'm just going to go PWD here
266:05 yaml and I'm just going to go PWD here to get the full
266:07 to get the full path
266:09 path okay and I'm going just paste that in
266:11 okay and I'm going just paste that in there whoops
266:16 okay I'm going to do LS okay so that gives us the full path to the file you
266:18 gives us the full path to the file you can also specify the template URL um and
266:21 can also specify the template URL um and so this should work as well if I take
266:23 so this should work as well if I take this and paste that on as a
266:31 command unable to locate parameter file oh there's three three triple slashes
266:33 oh there's three three triple slashes there we'll just fix that
266:35 there we'll just fix that there
266:37 there paste unable to load param file no such
266:41 paste unable to load param file no such file directory and there's a t
266:44 file directory and there's a t missing okay be like don't be like me
266:47 missing okay be like don't be like me and make sure you don't have spelly
266:49 and make sure you don't have spelly mistakes okay I can type clear down here
266:51 mistakes okay I can type clear down here so I can see what I'm doing we'll hit
266:53 so I can see what I'm doing we'll hit enter
266:55 enter whoops unable to load the parameter file
266:57 whoops unable to load the parameter file no such file or
267:03 directory home well I you didn't want the for slash so another thing we can
267:06 the for slash so another thing we can try to do I think it will take it
267:07 try to do I think it will take it relative so if I do this it should work
267:12 relative so if I do this it should work I don't ever remember having to specify
267:13 I don't ever remember having to specify the entire path and err occurred while
267:15 the entire path and err occurred while calling the crate stack my stack name
267:18 calling the crate stack my stack name already exists if I go back over here
267:19 already exists if I go back over here give this a refresh oh that's what we
267:21 give this a refresh oh that's what we named our stack the the one that we did
267:23 named our stack the the one that we did so I'm going to say stack two
267:31 okay template format unsupported structure when calling the create stack
267:38 operation are you kidding me I do this all the
267:39 all the time template body y file cloud
267:51 formation unsupported structure take a look
268:00 here oh you know what I think uh this one's out of date that's why so what we
268:02 one's out of date that's why so what we can do is go to our old stack here and
268:04 can do is go to our old stack here and we can actually see the template I can
268:06 we can actually see the template I can go ahead and copy this whoops and we can
268:08 go ahead and copy this whoops and we can go ahead and paste that in there and
268:10 go ahead and paste that in there and then now what I can do
268:13 then now what I can do so you know that's that's the reason why
268:14 so you know that's that's the reason why it wasn't working okay so we'll hit
268:17 it wasn't working okay so we'll hit enter um unsupported
268:20 enter um unsupported structure it should be
268:26 supported let's see if Cloud information can help us
268:28 can help us out um apparently there was very
268:30 out um apparently there was very unhelpful error message for batting so
268:32 unhelpful error message for batting so try the validate template option I
268:35 try the validate template option I wonder if we could just do
268:37 wonder if we could just do this maybe if that would help
268:40 this maybe if that would help here I'm just hitting up to try to run
268:42 here I'm just hitting up to try to run it
268:43 it again nope I guess we can try to
268:45 again nope I guess we can try to validate it here it's like I'm not
268:48 validate it here it's like I'm not having much luck here
268:50 having much luck here today so we'll just say this here maybe
268:53 today so we'll just say this here maybe it's not even loading that file where it
269:17 okay created so for whatever reason I must have had a a bug there and so
269:19 must have had a a bug there and so putting sometimes putting on one line
269:20 putting sometimes putting on one line helps that out because I must have had
269:22 helps that out because I must have had an obvious mistake there and now we can
269:24 an obvious mistake there and now we can see the stack is cating it's doing the
269:26 see the stack is cating it's doing the exact same thing it's creating uh a
269:28 exact same thing it's creating uh a different bucket though if we go over to
269:29 different bucket though if we go over to our S3
269:36 here again you know you don't need to be able to do this yourself to pass the
269:38 able to do this yourself to pass the exam it's just so I'm just trying to
269:40 exam it's just so I'm just trying to show you like what it is so you kind of
269:41 show you like what it is so you kind of absorb any kind of knowledge about
269:43 absorb any kind of knowledge about what's going on here notes down below it
269:45 what's going on here notes down below it uses the stack name followed by uh the
269:47 uses the stack name followed by uh the re The Logical name of the resource
269:49 re The Logical name of the resource there okay um and what we'll do is wait
269:53 there okay um and what we'll do is wait for that to create once that's created
269:54 for that to create once that's created we can go ahead and delete these Stacks
269:56 we can go ahead and delete these Stacks we could also use the ad us Cloud
269:57 we could also use the ad us Cloud information to say like delete stack but
269:59 information to say like delete stack but I don't want to uh bore you with that
270:02 I don't want to uh bore you with that today and so we'll hit refresh here wait
270:05 today and so we'll hit refresh here wait for those Stacks to
270:07 for those Stacks to vanish okay those are gone uh what I'm
270:10 vanish okay those are gone uh what I'm going to do is kill this Cloud9
270:11 going to do is kill this Cloud9 environment
270:12 environment uh if there's a way to do it from here I
270:14 uh if there's a way to do it from here I have never known how to do it go back to
270:16 have never known how to do it go back to your dashboard well that's nice to know
270:19 your dashboard well that's nice to know we'll go ahead and just delete
270:22 we'll go ahead and just delete this okay we'll close that Tab and so
270:25 this okay we'll close that Tab and so now we are all in good shape and so that
270:27 now we are all in good shape and so that was our introduction to Cloud
270:30 was our introduction to Cloud information
270:31 information [Music]
270:34 [Music] okay let's take a look here at cdk so
270:37 okay let's take a look here at cdk so cdk allows you to use your favorite
270:39 cdk allows you to use your favorite programming language to write
270:40 programming language to write infrastructure as code and technically
270:42 infrastructure as code and technically that's not true because they don't have
270:44 that's not true because they don't have Ruby and that's my favorite but anyway
270:46 Ruby and that's my favorite but anyway uh some of the languages include nodejs
270:48 uh some of the languages include nodejs typescript Python
270:50 typescript Python java.net and so here's an example of
270:52 java.net and so here's an example of typescript typescript was the first
270:54 typescript typescript was the first language that was um introduced for cdk
270:56 language that was um introduced for cdk It's usually the most upto date so not
270:59 It's usually the most upto date so not always does cdk reflect exactly what's
271:01 always does cdk reflect exactly what's in cloud formation but I think they're
271:03 in cloud formation but I think they're getting better at that okay so cdk is
271:05 getting better at that okay so cdk is powered by cloud formation it generates
271:07 powered by cloud formation it generates out cloud formation templates so there
271:09 out cloud formation templates so there is an intermediate step uh it does
271:11 is an intermediate step uh it does sometimes feel a bit slow so I don't
271:12 sometimes feel a bit slow so I don't really like that but you know it's up to
271:14 really like that but you know it's up to you uh cdk has a large library of
271:16 you uh cdk has a large library of reusable Cloud components called cdk
271:18 reusable Cloud components called cdk constructs at constructs dodev this is
271:20 constructs at constructs dodev this is kind of the concept of terraform modules
271:22 kind of the concept of terraform modules and is really really useful uh and
271:24 and is really really useful uh and they're really well ridden um and they
271:26 they're really well ridden um and they can just reduce a lot of your effort
271:28 can just reduce a lot of your effort there CD cdk comes with its own CLI um
271:31 there CD cdk comes with its own CLI um and I didn't mention this before but
271:33 and I didn't mention this before but cloud formation also has its own uh CLI
271:36 cloud formation also has its own uh CLI okay cdk pipelines uh are are allow you
271:39 okay cdk pipelines uh are are allow you to quickly set up cicd pipelines for CD
271:42 to quickly set up cicd pipelines for CD K projects that is a big pain point for
271:44 K projects that is a big pain point for cloud formation where you have to write
271:45 cloud formation where you have to write a lot of code to do this whereas um this
271:48 a lot of code to do this whereas um this cdk has that off the bat makes it really
271:50 cdk has that off the bat makes it really easy for you cdk also has a testing
271:53 easy for you cdk also has a testing framework for unit and integration
271:54 framework for unit and integration testing I think this might be only
271:56 testing I think this might be only limited to typescript because I didn't
271:57 limited to typescript because I didn't see any for the rest of the languages
271:59 see any for the rest of the languages but um you know I wasn't 100% sure there
272:02 but um you know I wasn't 100% sure there uh this one thing about cdk is that it
272:05 uh this one thing about cdk is that it can be easily uh confused with SDK
272:07 can be easily uh confused with SDK because they both allow you to
272:09 because they both allow you to pragmatically work with AWS uh using
272:12 pragmatically work with AWS uh using your favorite language but the key
272:13 your favorite language but the key difference is that cdk ensures uh itap
272:17 difference is that cdk ensures uh itap poent uh of your infrastructure so what
272:19 poent uh of your infrastructure so what that means that's such a hard word to
272:21 that means that's such a hard word to say but what that means is that um you
272:25 say but what that means is that um you know if you use this cdk to say give me
272:28 know if you use this cdk to say give me an a virtual machine you'll always have
272:30 an a virtual machine you'll always have a single virtual machine uh because it's
272:33 a single virtual machine uh because it's trying to manage the state of the file
272:35 trying to manage the state of the file whereas uh when you use SDK if you run
272:37 whereas uh when you use SDK if you run it every time you'll end up with more
272:38 it every time you'll end up with more and more servers uh and it's not really
272:40 and more servers uh and it's not really managing States so hope hopefully that
272:42 managing States so hope hopefully that is clear between the difference
272:44 is clear between the difference [Music]
272:47 [Music] there okay so we looked at cloud
272:49 there okay so we looked at cloud formation but now let's take a look at
272:51 formation but now let's take a look at cdk cloud formation or cloud formation
272:54 cdk cloud formation or cloud formation Cloud development kit it's just like
272:56 Cloud development kit it's just like cloud formation but you use a a
272:57 cloud formation but you use a a programming language in order to uh
272:59 programming language in order to uh Implement your infrastructure as a code
273:01 Implement your infrastructure as a code I don't use it very often I don't
273:03 I don't use it very often I don't particularly like it but um you know if
273:05 particularly like it but um you know if you are a developer and you don't like
273:06 you are a developer and you don't like writing Cloud information files and you
273:08 writing Cloud information files and you want to have something that's more
273:09 want to have something that's more programmatic you might be used to that
273:11 programmatic you might be used to that um this I think should be deleting cuz
273:13 um this I think should be deleting cuz we were deleting the last one here and
273:14 we were deleting the last one here and notice how it's grayed out I can't
273:15 notice how it's grayed out I can't select it so don't worry about that
273:17 select it so don't worry about that create a new one we'll say cdk example
273:20 create a new one we'll say cdk example we'll hit next T2 micro ec2 instance
273:24 we'll hit next T2 micro ec2 instance Amazon X2 you know the drill it's all
273:26 Amazon X2 you know the drill it's all fine here we're go ahead and create
273:28 fine here we're go ahead and create ourselves a new environment we're going
273:29 ourselves a new environment we're going to let that spin up there and as that's
273:31 to let that spin up there and as that's going we're going to look up uh adus
273:34 going we're going to look up uh adus cdk so Adis cdk um and we probably want
273:38 cdk so Adis cdk um and we probably want to go to GitHub for this
273:42 to go to GitHub for this okay because it is open source and so I
273:45 okay because it is open source and so I want to go to getting
273:47 want to go to getting started and I have used this before but
273:49 started and I have used this before but I never can remember how to use it
273:51 I never can remember how to use it probably the easiest way to uh use this
273:53 probably the easiest way to uh use this is by using
273:55 is by using typescript
273:57 typescript so here's an example initialize the
273:59 so here's an example initialize the project make directory cdk oh first we
274:02 project make directory cdk oh first we got to install it right so give that a
274:04 got to install it right so give that a moment so this is node you know how we
274:06 moment so this is node you know how we did like bundle install this is like the
274:08 did like bundle install this is like the same thing but for uh typescript install
274:11 same thing but for uh typescript install or update the it was cdk CLI from npm we
274:14 or update the it was cdk CLI from npm we recommend using this version etc etc so
274:18 recommend using this version etc etc so again we're just waiting for that to
274:19 again we're just waiting for that to launch but uh as we wait for that it's
274:22 launch but uh as we wait for that it's very simple we're just going to install
274:24 very simple we're just going to install it create a directory um go into that
274:27 it create a directory um go into that directory initialize the example here
274:29 directory initialize the example here it's setting up an
274:32 it's setting up an sqsq which is um it's quite a complex
274:35 sqsq which is um it's quite a complex example um but you can see it's code
274:37 example um but you can see it's code right and then we run cdk deploy and
274:40 right and then we run cdk deploy and we'll deploy it and then hopefully we'll
274:41 we'll deploy it and then hopefully we'll have that
274:42 have that resource so again we're just waiting for
274:46 resource so again we're just waiting for cloud
274:52 n there we go so Cloud9 is more or less ready a terminal seems like it's still
274:55 ready a terminal seems like it's still thinking and we have a JavaScript one
274:57 thinking and we have a JavaScript one which I do not care about there we go
274:59 which I do not care about there we go there's our environment we're going to
275:00 there's our environment we're going to make sure we have mpm so we can type in
275:03 make sure we have mpm so we can type in mpm great it says version
275:07 mpm great it says version 8.1.0 and so this is asking for 10
275:12 8.1.0 and so this is asking for 10 okay I don't know if this gives us like
275:14 okay I don't know if this gives us like MVM installed MVM it does so what we can
275:17 MVM installed MVM it does so what we can do is do MVM list that stands for node
275:19 do is do MVM list that stands for node version manager Ruby has one as well and
275:22 version manager Ruby has one as well and so it's telling us what version we're on
275:24 so it's telling us what version we're on I want to update um looks like we have a
275:26 I want to update um looks like we have a pretty uh pretty new version but what I
275:29 pretty uh pretty new version but what I want is the latest version of oh but
275:32 want is the latest version of oh but that's node version that's not
275:33 that's node version that's not necessarily mpm so we'll do node version
275:35 necessarily mpm so we'll do node version Oh 17 okay we're well well in the uh
275:39 Oh 17 okay we're well well in the uh range of the new stuff so what I'm going
275:40 range of the new stuff so what I'm going to do is scroll down we're going to grab
275:43 to do is scroll down we're going to grab this link here or this code here hit
275:45 this link here or this code here hit enter and that's going to install the
275:47 enter and that's going to install the adus cdk so it
275:50 adus cdk so it says uh file already exists oh so maybe
275:53 says uh file already exists oh so maybe it's already installed on the
276:01 machine um cdk we'll type in cdk because of course adus wants to make
276:03 cdk because of course adus wants to make it very easy for us this software has
276:05 it very easy for us this software has not been tested with what was that
276:07 not been tested with what was that warning uh with node 1701 you may
276:10 warning uh with node 1701 you may encounter runtime issues great AWS
276:13 encounter runtime issues great AWS you're like the one that installed this
276:14 you're like the one that installed this stuff here so we get a bunch of the
276:15 stuff here so we get a bunch of the commands which is great and so what
276:17 commands which is great and so what we'll do is follow their simple
276:19 we'll do is follow their simple instructions we'll say hello
276:21 instructions we'll say hello cdk we will CD into
276:24 cdk we will CD into this and um now what we can do is run
276:29 this and um now what we can do is run cdk andit and this language
276:33 cdk andit and this language here and so that's going to do a bunch
276:35 here and so that's going to do a bunch of stuff creates tons of files it's
276:37 of stuff creates tons of files it's going to vary based on uh what you're
276:39 going to vary based on uh what you're using like which language because cdk
276:42 using like which language because cdk comes available in a variety of
276:44 comes available in a variety of languages so if we type in ads
276:46 languages so if we type in ads cdk um documentation
276:57 here notice up here python java.net so I think it has more than just those three
276:59 think it has more than just those three languages but um you know I wish it
277:02 languages but um you know I wish it supported more like yeah see here is C
277:05 supported more like yeah see here is C Java but I I really wish there was a
277:09 Java but I I really wish there was a ruby so we'll give this a moment here to
277:12 ruby so we'll give this a moment here to get installed and I will see you back
277:14 get installed and I will see you back here when it is done
277:21 okay okay uh it turns out I only had to wait like a second there but it says
277:23 wait like a second there but it says there's a newer version of the cdk you
277:24 there's a newer version of the cdk you probably should install it but I just
277:27 probably should install it but I just want to get going here so as long as I
277:29 want to get going here so as long as I don't run into any issues I do not care
277:31 don't run into any issues I do not care um but anyway so looking at this and I
277:34 um but anyway so looking at this and I again I rarely ever look at this but I'm
277:36 again I rarely ever look at this but I'm a developer so it's not too hard for me
277:38 a developer so it's not too hard for me to figure out but under the lib this is
277:39 to figure out but under the lib this is our stack that we're creating and here
277:42 our stack that we're creating and here is it is loading in sqs it's loading in
277:45 is it is loading in sqs it's loading in SNS and then the core Library it's
277:47 SNS and then the core Library it's creating an sqs q and it's setting the
277:50 creating an sqs q and it's setting the visibility of that timeout it's also
277:51 visibility of that timeout it's also creating an SNS topic so those are two
277:53 creating an SNS topic so those are two resources that we expect to be created
277:56 resources that we expect to be created if we scroll on down to the getting
277:58 if we scroll on down to the getting started it just says cdk deploy so what
278:01 started it just says cdk deploy so what we'll do is go ahead and hit enter and
278:05 we'll do is go ahead and hit enter and let that do whatever it wants to do
278:15 and it is thinking there we go so here we have IM statement changes so it's
278:17 we have IM statement changes so it's saying this deployment will potentially
278:18 saying this deployment will potentially make potential sensitive changes
278:20 make potential sensitive changes according to your current security
278:21 according to your current security approval options there is there may be
278:24 approval options there is there may be security related changes not in this
278:25 security related changes not in this list do you want to deploy sure we'll
278:27 list do you want to deploy sure we'll hit
278:29 hit why deploying creating cloud formation
278:32 why deploying creating cloud formation change set so cdk is using cloud
278:35 change set so cdk is using cloud formation underneath it's not
278:41 complicated um and as that is going going what we'll do is we'll make our
278:42 going what we'll do is we'll make our way over to our IUS amazon.com
278:46 way over to our IUS amazon.com console and if we go over to cloud
278:49 console and if we go over to cloud formation we'll see if we see anything
278:56 yet so it's creating a stack here we can click into it we can go over to our
278:58 click into it we can go over to our events see that things are being created
279:00 events see that things are being created this is always a confusing so I always
279:02 this is always a confusing so I always go to resources to see what is
279:03 go to resources to see what is individually being created and they're
279:05 individually being created and they're all done so we go over here and they
279:07 all done so we go over here and they exist so here it says that we have a Q
279:12 exist so here it says that we have a Q called this right sometimes they have
279:14 called this right sometimes they have links you can link through it so notice
279:17 links you can link through it so notice here I can click on the topic and get to
279:18 here I can click on the topic and get to that resource in SNS which is nice for
279:21 that resource in SNS which is nice for sqs I'm just going to type in sqs
279:25 sqs I'm just going to type in sqs enter uh and there it is okay so we
279:28 enter uh and there it is okay so we don't really understand what those are
279:29 don't really understand what those are we could delete the stack this way
279:31 we could delete the stack this way there's probably a cdk way to delete the
279:33 there's probably a cdk way to delete the stack so uh cdk
279:42 destroy I assume that's what it is destroy okay so we'll type in cdk
279:53 Destroy give it a moment we're going to say
280:00 yes okay it's deleting in progress we can even go back here and double
280:21 thinking and again you know if we deleted these for real it would take
280:22 deleted these for real it would take like a second but uh you know sometimes
280:25 like a second but uh you know sometimes they're just
280:30 slow sometimes it's because a resource can get hung as well um but uh I don't
280:33 can get hung as well um but uh I don't think anything is a problem so here we
280:35 think anything is a problem so here we can see what the problem is not not
280:38 can see what the problem is not not necessarily a problem but it's just the
280:39 necessarily a problem but it's just the sqs is taking a long longer time to
280:42 sqs is taking a long longer time to delete where the SNS subscriptions a lot
280:54 faster so I'll just see you back here in a moment okay okay so after a short
280:56 a moment okay okay so after a short little wait there it finally finished uh
280:58 little wait there it finally finished uh I just kept oning refresh until I saw it
281:00 I just kept oning refresh until I saw it deleted and so it's out of there and so
281:02 deleted and so it's out of there and so we'll get rid of our Cloud9 environment
281:04 we'll get rid of our Cloud9 environment since we are done with it so type in
281:06 since we are done with it so type in Cloud9 up at the
281:08 Cloud9 up at the top and we'll go ahead and delete and we
281:12 top and we'll go ahead and delete and we will go ahead and delete this here thank
281:15 will go ahead and delete this here thank you and we will go back to our adabs
281:18 you and we will go back to our adabs amazon. console here just so we can get
281:20 amazon. console here just so we can get our bearing straight here and there we
281:24 our bearing straight here and there we [Music]
281:28 [Music] go all right let's take a look here at
281:30 go all right let's take a look here at the adus toolkit for vs code so adus
281:32 the adus toolkit for vs code so adus toolkit is an open source plugin for vs
281:34 toolkit is an open source plugin for vs code to create debug deploy it was
281:36 code to create debug deploy it was resources since vs code is such a
281:38 resources since vs code is such a popular uh editor uh these days I use
281:41 popular uh editor uh these days I use Vim but it's very popular um I figured I
281:44 Vim but it's very popular um I figured I should make sure you're aware of this um
281:46 should make sure you're aware of this um plugin so it can do four things you get
281:48 plugin so it can do four things you get the Abus Explorer this allows you to
281:50 the Abus Explorer this allows you to explore a wide range of adus resources
281:52 explore a wide range of adus resources linked to your adus account uh and
281:55 linked to your adus account uh and sometimes you can view them sometimes
281:56 sometimes you can view them sometimes you can delete them it's going to vary
281:58 you can delete them it's going to vary per service and what's available there
282:00 per service and what's available there then you have the adabs cdk Explorer
282:02 then you have the adabs cdk Explorer this allows you to explore your Stacks
282:04 this allows you to explore your Stacks defined by cdk uh then you have Amazon
282:06 defined by cdk uh then you have Amazon elastic uh container service ECS this
282:09 elastic uh container service ECS this provides intellisense for ECS task
282:12 provides intellisense for ECS task definition files intense means that when
282:14 definition files intense means that when you type uh and you uh you'll get like
282:16 you type uh and you uh you'll get like Auto completion but you'll also get a
282:18 Auto completion but you'll also get a description as to what it is that you're
282:19 description as to what it is that you're typing out then there is serverless
282:22 typing out then there is serverless applications and this is pretty much the
282:23 applications and this is pretty much the main reason to have Theus toolkit allows
282:26 main reason to have Theus toolkit allows you to create a debug deploy service
282:28 you to create a debug deploy service applications via Sam and CFN so uh there
282:31 applications via Sam and CFN so uh there you can see the command pallet and you
282:32 you can see the command pallet and you can kind of access stuff there
282:35 can kind of access stuff there [Music]
282:38 [Music] okay let's take a look here at access
282:40 okay let's take a look here at access keys so an access key is a key and
282:42 keys so an access key is a key and secret required to have programmatic
282:44 secret required to have programmatic access to adus resources when
282:46 access to adus resources when interacting with the adabs API outside
282:49 interacting with the adabs API outside of the adus Management console so uh
282:52 of the adus Management console so uh access key is commonly referred to as
282:53 access key is commonly referred to as adus credentials so someone says adus
282:55 adus credentials so someone says adus credentials so generally you're talking
282:57 credentials so generally you're talking about the access key not necessarily
282:59 about the access key not necessarily your um username and password to log in
283:03 your um username and password to log in so a user must be granted access to use
283:05 so a user must be granted access to use access key so when you're creating a
283:07 access key so when you're creating a user you can just checkbox access key um
283:10 user you can just checkbox access key um you can always do the after the fact but
283:12 you can always do the after the fact but it's good to do that as you're creating
283:13 it's good to do that as you're creating the user and then you can generate an
283:15 the user and then you can generate an access key and secret so you should
283:17 access key and secret so you should never share your access keys with anyone
283:20 never share your access keys with anyone they are yours if you give them to
283:21 they are yours if you give them to someone else is like giving them the
283:22 someone else is like giving them the keys to your house it's dangerous uh
283:24 keys to your house it's dangerous uh never commit access keys to a code base
283:27 never commit access keys to a code base uh because that is a good place uh for
283:29 uh because that is a good place uh for it to get leaked at some point you can
283:31 it to get leaked at some point you can have uh two active keys at any given
283:34 have uh two active keys at any given time you can deactivate access Keys
283:36 time you can deactivate access Keys obviously delete them as well access
283:38 obviously delete them as well access Keys have whatever access a user has to
283:41 Keys have whatever access a user has to adus resources so uh you know if you can
283:43 adus resources so uh you know if you can do it inabus Management console so can
283:45 do it inabus Management console so can the key so access keys are to be stored
283:48 the key so access keys are to be stored in the ads. adabs credentials uh file so
283:52 in the ads. adabs credentials uh file so um and if you're not familiar with Linux
283:54 um and if you're not familiar with Linux this Tilda here this actually represents
283:56 this Tilda here this actually represents your home folder so whether you're on
283:58 your home folder so whether you're on Windows or Linux that's going to be your
284:01 Windows or Linux that's going to be your home folder and then you have this
284:02 home folder and then you have this period AWS that means that it's a hidden
284:04 period AWS that means that it's a hidden folder but you can obviously access it
284:07 folder but you can obviously access it and so in the it's just a toml like file
284:10 and so in the it's just a toml like file I think it's toml um but I never uh 100%
284:13 I think it's toml um but I never uh 100% verified that it's toml it looks just
284:14 verified that it's toml it looks just like toml uh and so what you'll have
284:17 like toml uh and so what you'll have here is your uh default profile and so
284:19 here is your uh default profile and so this is what you would use um or this is
284:22 this is what you would use um or this is what uh any of your tools you use like
284:24 what uh any of your tools you use like the CLI or anything else would
284:26 the CLI or anything else would automatically use if um if you did not
284:29 automatically use if um if you did not specify a profile you can of course
284:32 specify a profile you can of course store multiple access keys and then give
284:35 store multiple access keys and then give it a profile name um so if you are doing
284:38 it a profile name um so if you are doing this for the first time you might just
284:39 this for the first time you might just want to type in ads config and it'll
284:40 want to type in ads config and it'll prompt and you'll just enter them in
284:42 prompt and you'll just enter them in there as well I think that's that's the
284:43 there as well I think that's that's the default one when you're using the
284:46 default one when you're using the SDK uh you would rather probably use
284:49 SDK uh you would rather probably use environment variables because this is
284:50 environment variables because this is the safest way to access them when you
284:53 the safest way to access them when you are writing code all right um so there
284:55 are writing code all right um so there you
284:56 you [Music]
285:00 [Music] go all right let's talk about access
285:02 go all right let's talk about access Keys access keys are are very important
285:03 Keys access keys are are very important to your account um and so what we'll do
285:05 to your account um and so what we'll do is go to IM if you are the root user you
285:08 is go to IM if you are the root user you can go in and you can uh generate access
285:10 can go in and you can uh generate access keys for people um but generally you're
285:12 keys for people um but generally you're doing it yourself for your own account
285:14 doing it yourself for your own account so I go to users I'm going to click into
285:16 so I go to users I'm going to click into mine here and we'll go over to Security
285:18 mine here and we'll go over to Security credentials and here you're going to
285:19 credentials and here you're going to notice access keys and one thing that is
285:22 notice access keys and one thing that is interesting is that you can only ever
285:23 interesting is that you can only ever have two access keys at a time so if I
285:25 have two access keys at a time so if I hit create I'm just going to close that
285:27 hit create I'm just going to close that notice that the button is grayed out I
285:29 notice that the button is grayed out I can uh uh deactivate them if I feel that
285:32 can uh uh deactivate them if I feel that I haven't used them in a while and I can
285:35 I haven't used them in a while and I can make them active again so I can bring
285:36 make them active again so I can bring them back into access or what I can do
285:39 them back into access or what I can do is um make them in active right and then
285:43 is um make them in active right and then I can delete them and so what I
285:47 I can delete them and so what I recommend right even if you do not want
285:49 recommend right even if you do not want to programmatically be using your
285:50 to programmatically be using your account for anything you always want to
285:52 account for anything you always want to fill up both these and the reason why
285:54 fill up both these and the reason why and this is for security reasons is that
285:57 and this is for security reasons is that if somebody wanted to come in and uh uh
286:01 if somebody wanted to come in and uh uh get into your account what they would do
286:03 get into your account what they would do is they would try to find a user um
286:05 is they would try to find a user um where they have access to them and then
286:07 where they have access to them and then they would try to generate out a key so
286:09 they would try to generate out a key so if both these keys are Tak up so if you
286:12 if both these keys are Tak up so if you generate up both these
286:13 generate up both these Keys okay and this is the one you want
286:15 Keys okay and this is the one you want to use you deactivate the other one okay
286:17 to use you deactivate the other one okay we're not going to use that one and so
286:19 we're not going to use that one and so now there's no way for them to fill up
286:21 now there's no way for them to fill up that other slot okay and so that is my
286:24 that other slot okay and so that is my strong recommendation to you but there's
286:26 strong recommendation to you but there's again only ever two here I'm just going
286:28 again only ever two here I'm just going to uh Delete both of these so that when
286:32 to uh Delete both of these so that when we want to uh do whatever next in a
286:34 we want to uh do whatever next in a tutorial we'll go generate that out okay
286:37 tutorial we'll go generate that out okay go ahead and clear that
286:39 go ahead and clear that out so hopefully that is enough for you
286:43 out so hopefully that is enough for you to understand what to do with these
286:45 to understand what to do with these access Keys okay so I'm going to go back
286:48 access Keys okay so I'm going to go back here there you
286:50 here there you [Music]
286:54 [Music] go let's take a look here adus
286:57 go let's take a look here adus documentation which is a large
286:58 documentation which is a large collection of technical documentation on
287:00 collection of technical documentation on how to use adus Services which we can
287:02 how to use adus Services which we can find at doc. adab. amazon.com uh and so
287:06 find at doc. adab. amazon.com uh and so this is kind of like the landing page
287:07 this is kind of like the landing page where you can see all the guides and API
287:09 where you can see all the guides and API references if you expand them in there
287:11 references if you expand them in there uh into ec2 and you click on the user
287:13 uh into ec2 and you click on the user guide you can see HTML in PDF format
287:16 guide you can see HTML in PDF format Kindle and you'll notice there's a link
287:18 Kindle and you'll notice there's a link to GitHub and that's because all of
287:19 to GitHub and that's because all of these docs are open source and you can
287:21 these docs are open source and you can contribute to them if you choose to do
287:22 contribute to them if you choose to do so I've done so multiple times in the
287:25 so I've done so multiple times in the past it's quite fun so adus is very good
287:27 past it's quite fun so adus is very good about providing detailed information
287:29 about providing detailed information about every adus service and the basis
287:30 about every adus service and the basis of this course and any adus
287:32 of this course and any adus certification will derive mostly from uh
287:35 certification will derive mostly from uh the adus documentation so I like to say
287:38 the adus documentation so I like to say that I'm not really coming up with new
287:40 that I'm not really coming up with new information I'm just uh taking what's in
287:41 information I'm just uh taking what's in the docs and trying to make it more
287:43 the docs and trying to make it more digestible and I think that's the thing
287:44 digestible and I think that's the thing is like the docs are really good you can
287:46 is like the docs are really good you can read them end to end but they are very
287:48 read them end to end but they are very dense um and so it can be a bit hard to
287:51 dense um and so it can be a bit hard to figure out what you should read and what
287:52 figure out what you should read and what you should not um but uh they are a
287:55 you should not um but uh they are a really great resource and you should
287:56 really great resource and you should spend some time in there
287:58 spend some time in there [Music]
288:01 [Music] okay so I just want to quickly show you
288:03 okay so I just want to quickly show you the adabs documentation like give you a
288:05 the adabs documentation like give you a bit of a tour of it so if we go to ad.
288:08 bit of a tour of it so if we go to ad. amazon.com and type in docs and I'm sure
288:10 amazon.com and type in docs and I'm sure you might have seen this through other
288:12 you might have seen this through other tutorials but the idea is that you have
288:14 tutorials but the idea is that you have basically documentation for basically
288:16 basically documentation for basically any possible service that you want and a
288:18 any possible service that you want and a lot of times you'll click into it and
288:20 lot of times you'll click into it and what you'll get are these little boxes
288:21 what you'll get are these little boxes and they'll show you different guides
288:23 and they'll show you different guides and it's going to vary based on service
288:25 and it's going to vary based on service but a lot of times there's a user guide
288:27 but a lot of times there's a user guide there's an API reference those are the
288:29 there's an API reference those are the two that you'll see there if we go to
288:31 two that you'll see there if we go to something simpler like
288:33 something simpler like S3 that might be a simpler example yeah
288:35 S3 that might be a simpler example yeah user guide API API reference and so all
288:38 user guide API API reference and so all of these are on GitHub right if you open
288:40 of these are on GitHub right if you open these up the documentation is here if
288:42 these up the documentation is here if you find something you don't like you
288:44 you find something you don't like you can submit issues and uh and correct
288:47 can submit issues and uh and correct things you can even submit your own
288:48 things you can even submit your own examples I have um I have uh committed
288:52 examples I have um I have uh committed uh example code to the uh docs
288:55 uh example code to the uh docs specifically for AI services so you
288:57 specifically for AI services so you might be looking at examples that I
288:58 might be looking at examples that I implemented or even Ruby examples since
289:00 implemented or even Ruby examples since I really like to promote Ruby on AWS you
289:03 I really like to promote Ruby on AWS you can download as a PDF or you can take it
289:05 can download as a PDF or you can take it as HTML a lot of times you're going to
289:07 as HTML a lot of times you're going to the user guide and the way I build the
289:09 the user guide and the way I build the courses here is actually go through and
289:11 courses here is actually go through and I read these end to end so you know if
289:13 I read these end to end so you know if you wanted to do that and you wanted to
289:14 you wanted to do that and you wanted to be like me uh you can do that or you can
289:16 be like me uh you can do that or you can just watch my courses and save yourself
289:18 just watch my courses and save yourself the trouble and not worry about
289:20 the trouble and not worry about everything that is here but generally
289:22 everything that is here but generally the documentation is extremely extremely
289:24 the documentation is extremely extremely good there are some exceptions like
289:26 good there are some exceptions like Amazon Cognito where the content is good
289:29 Amazon Cognito where the content is good but it's just not well organized so I
289:31 but it's just not well organized so I would say it best out of every other
289:33 would say it best out of every other provider they they have the most
289:35 provider they they have the most complete documentation uh they generally
289:37 complete documentation uh they generally don't keep their examples or like
289:39 don't keep their examples or like tutorials within here it's usually
289:41 tutorials within here it's usually pretty light they'll have some examples
289:43 pretty light they'll have some examples um but like they like they have adus
289:45 um but like they like they have adus Labs separately so you type AB Labs
289:47 Labs separately so you type AB Labs GitHub right you go here and a lot of
289:50 GitHub right you go here and a lot of stuff is in here instead so you have a
289:52 stuff is in here instead so you have a lot of great tutorials and examples over
289:55 lot of great tutorials and examples over there okay um but yeah pretty much
289:58 there okay um but yeah pretty much that's all there is to it is there
289:59 that's all there is to it is there consistency between documentations no
290:01 consistency between documentations no they kind of vary um you know but uh
290:04 they kind of vary um you know but uh it's all there is my point and they're
290:06 it's all there is my point and they're always keeping up to date so yeah that's
290:08 always keeping up to date so yeah that's all you need to know about the inabus
290:10 all you need to know about the inabus documentation
290:11 documentation [Music]
290:15 [Music] hey this is Andrew Brown from exam Pro
290:17 hey this is Andrew Brown from exam Pro and we are taking a look at the Shared
290:19 and we are taking a look at the Shared responsibility model which is a cloud
290:21 responsibility model which is a cloud security framework that defines the
290:22 security framework that defines the security obligations of the customer
290:25 security obligations of the customer versus the cloud service provider in
290:26 versus the cloud service provider in this case we're talking about AWS and
290:28 this case we're talking about AWS and they have their own shared
290:29 they have their own shared responsibility model it's this big ugly
290:31 responsibility model it's this big ugly blob here um and the thing is is that
290:34 blob here um and the thing is is that every single CSP has their own variant
290:36 every single CSP has their own variant on the model uh so they're generally all
290:39 on the model uh so they're generally all the same but some visualizations make it
290:41 the same but some visualizations make it a little bit uh easier to understand or
290:43 a little bit uh easier to understand or they kind of uh include a little bit
290:45 they kind of uh include a little bit more information at different parts of
290:47 more information at different parts of it and so just to get make sure that you
290:49 it and so just to get make sure that you have well-rounded knowledge I'm going to
290:50 have well-rounded knowledge I'm going to go beyond the aws's shared
290:52 go beyond the aws's shared responsibility model and just show you
290:54 responsibility model and just show you some variants uh there's also variants
290:56 some variants uh there's also variants not just per uh CSP but also the type of
290:59 not just per uh CSP but also the type of cloud deployment model and sometimes
291:01 cloud deployment model and sometimes these are also scoped uh based on a
291:03 these are also scoped uh based on a cloud service category like compute or
291:04 cloud service category like compute or machine learning uh and these can uh
291:06 machine learning uh and these can uh result in specialized share
291:08 result in specialized share responsibility models so that's what
291:09 responsibility models so that's what we'll look at in this section
291:11 we'll look at in this section [Music]
291:15 [Music] okay all right so let's take a look at
291:17 okay all right so let's take a look at the ad Shar responsibility model and so
291:19 the ad Shar responsibility model and so I've reworked the graphic because it is
291:21 I've reworked the graphic because it is a bit hard to uh digest and so I'm
291:24 a bit hard to uh digest and so I'm hoping that this way will be a little
291:25 hoping that this way will be a little bit easier for you I cannot include the
291:27 bit easier for you I cannot include the in and of here just because we're
291:28 in and of here just because we're limited for space but don't worry we'll
291:29 limited for space but don't worry we'll follow that up with the next slide here
291:31 follow that up with the next slide here so there are two people that are
291:33 so there are two people that are responsible or two um organizations that
291:35 responsible or two um organizations that are responsible the customer and AWS and
291:38 are responsible the customer and AWS and on aws's side they're going to be
291:39 on aws's side they're going to be responsible for or anything that is
291:42 responsible for or anything that is physical so we're talking about Hardware
291:44 physical so we're talking about Hardware Global infrastructure so the regions the
291:46 Global infrastructure so the regions the availability zones The Edge locations
291:48 availability zones The Edge locations the physical security so think of all
291:50 the physical security so think of all that Hardware that's there those data
291:52 that Hardware that's there those data centers um everything like that then
291:55 centers um everything like that then there's also software the services that
291:57 there's also software the services that they're offering and so um you know this
291:59 they're offering and so um you know this extends to all their services but
292:01 extends to all their services but generally it breaks down to the four
292:02 generally it breaks down to the four core and so we're talking about compute
292:04 core and so we're talking about compute storage database and networking okay and
292:07 storage database and networking okay and when we say networking we're talking
292:08 when we say networking we're talking about like physically setting up the wi
292:10 about like physically setting up the wi and also you know the software to set up
292:12 and also you know the software to set up the routing and all that kind of stuff
292:14 the routing and all that kind of stuff there uh now looking at the customer
292:16 there uh now looking at the customer side of it they're responsible for
292:18 side of it they're responsible for configuration of managed services or
292:19 configuration of managed services or thirdparty software so the platforms
292:22 thirdparty software so the platforms they use so whether they choose to use a
292:24 they use so whether they choose to use a particular type of os uh the
292:26 particular type of os uh the applications so if they want to use like
292:28 applications so if they want to use like Ruby on Rails uh am so identity and
292:31 Ruby on Rails uh am so identity and access management so if you uh create a
292:34 access management so if you uh create a user and you grant them permissions if
292:36 user and you grant them permissions if you give them things they're not
292:37 you give them things they're not supposed to have access to that's on you
292:39 supposed to have access to that's on you right then there's configur of virtual
292:41 right then there's configur of virtual infrastructure and systems so that would
292:43 infrastructure and systems so that would be choosing your OS that would be uh the
292:46 be choosing your OS that would be uh the networking so there could be networking
292:47 networking so there could be networking on the um the virtual machines
292:50 on the um the virtual machines themselves or we could be talking about
292:52 themselves or we could be talking about Cloud networking in this case then there
292:54 Cloud networking in this case then there are firewalls so we're talking about
292:55 are firewalls so we're talking about virtual fire walls again they could be
292:57 virtual fire walls again they could be on the virtual machine or it could be
292:59 on the virtual machine or it could be configuring like knackles or security
293:01 configuring like knackles or security groups on AWS then there's security
293:03 groups on AWS then there's security configuration of data uh and so there is
293:06 configuration of data uh and so there is client side data encryption so if you're
293:08 client side data encryption so if you're moving something from S3 from your local
293:09 moving something from S3 from your local machine to S3 you might need to encrypt
293:12 machine to S3 you might need to encrypt that first before you send it over then
293:14 that first before you send it over then there's server side encryption so that
293:15 there's server side encryption so that might be turning on server side
293:17 might be turning on server side encryption within S3 or turning it
293:19 encryption within S3 or turning it encryption on your EBS volume then
293:22 encryption on your EBS volume then there's networking traffic protection so
293:24 there's networking traffic protection so you know that's turning on VPC flow log
293:26 you know that's turning on VPC flow log so you can monitor them turning on AIS
293:29 so you can monitor them turning on AIS guard Duty so that it can detect
293:31 guard Duty so that it can detect anomalies with your traffic or or
293:33 anomalies with your traffic or or activities within your um adus account
293:36 activities within your um adus account and then there's customer data so that's
293:37 and then there's customer data so that's the data that you upload on the behalf
293:39 the data that you upload on the behalf of your customer customers or yourself
293:42 of your customer customers or yourself and what you decide to um you know like
293:45 and what you decide to um you know like what levels of sensitivity that you want
293:46 what levels of sensitivity that you want to lock it down do you want to use
293:48 to lock it down do you want to use Amazon Macy to see if there's any public
293:51 Amazon Macy to see if there's any public facing uh personally identifi
293:53 facing uh personally identifi information that's up to you so there's
293:55 information that's up to you so there's a lot here and honestly it's a lot
293:57 a lot here and honestly it's a lot easier than you think um instead of
293:59 easier than you think um instead of thinking about this big diagram what I
294:01 thinking about this big diagram what I do is I break it down into this and so
294:03 do is I break it down into this and so we have the in and the of and that's
294:05 we have the in and the of and that's what I said I could not fit on the um
294:07 what I said I could not fit on the um previous slide there the idea is
294:09 previous slide there the idea is customers are responsible for the
294:10 customers are responsible for the security in the cloud so that's your
294:13 security in the cloud so that's your data and configuration so if it's data
294:15 data and configuration so if it's data that's resigning on there or there
294:17 that's resigning on there or there something you can configure you are
294:18 something you can configure you are responsible for it on the adus side they
294:21 responsible for it on the adus side they are responsible for the security of the
294:23 are responsible for the security of the cloud so if it's anything physical or
294:25 cloud so if it's anything physical or Hardware the operation of managed
294:27 Hardware the operation of managed services or Global infrastructure that's
294:29 services or Global infrastructure that's going to be on them and this in and of
294:31 going to be on them and this in and of thing is very important for the exam so
294:33 thing is very important for the exam so you should absolutely know the
294:34 you should absolutely know the difference between the two this is kind
294:36 difference between the two this is kind of an adist concept I don't see any
294:38 of an adist concept I don't see any other cloud service provider talking
294:39 other cloud service provider talking about in and of uh so you definitely
294:41 about in and of uh so you definitely need to know it
294:43 need to know it [Music]
294:46 [Music] okay so one variant we might see for the
294:50 okay so one variant we might see for the uh shared responsibility model would be
294:52 uh shared responsibility model would be on the types of cloud computing this
294:54 on the types of cloud computing this could also be applicable to the types of
294:56 could also be applicable to the types of uh deployment models but we're doing
294:58 uh deployment models but we're doing types of cloud computing here and so we
295:00 types of cloud computing here and so we have the customers responsibility and
295:02 have the customers responsibility and then the cloud service providers
295:03 then the cloud service providers responsibility so we're seeing on
295:05 responsibility so we're seeing on premise infrastructure as a service
295:08 premise infrastructure as a service platform as a service and software as as
295:10 platform as a service and software as as a service and so when you are on Prem
295:14 a service and so when you are on Prem you're basically responsible for
295:15 you're basically responsible for everything apps data runtime middleware
295:18 everything apps data runtime middleware OS virtualization servers storage
295:20 OS virtualization servers storage networking basically everything and just
295:23 networking basically everything and just by adopting the cloud you're almost
295:26 by adopting the cloud you're almost cutting your responsibilities in half
295:27 cutting your responsibilities in half here so now the cloud service provider
295:30 here so now the cloud service provider is going to be responsible for the
295:31 is going to be responsible for the physical networking uh the physical
295:34 physical networking uh the physical storage those physical servers and
295:37 storage those physical servers and because they're offering virtual
295:38 because they're offering virtual machines to you they're setting up a
295:39 machines to you they're setting up a hyper visor uh on your behalf so
295:42 hyper visor uh on your behalf so virtualization is taking care of for you
295:44 virtualization is taking care of for you and so um you know if you launch an ec2
295:47 and so um you know if you launch an ec2 instance you know you're going to have
295:48 instance you know you're going to have to choose the OS so that's why you're
295:50 to choose the OS so that's why you're responsible whatever middleware there
295:52 responsible whatever middleware there the runtime so whatever kind of programs
295:54 the runtime so whatever kind of programs you install on it uh the data that
295:56 you install on it uh the data that resides on it and any kind of like major
295:58 resides on it and any kind of like major applications okay then we have platform
296:01 applications okay then we have platform as a service uh and so you know the
296:04 as a service uh and so you know the class service provider is going to take
296:05 class service provider is going to take even more responsibility there so when
296:07 even more responsibility there so when we're talking about this we're thinking
296:08 we're talking about this we're thinking like a elastic beant stock right so you
296:11 like a elastic beant stock right so you know the you just choose what you want
296:13 know the you just choose what you want and it's all managed so you might say I
296:14 and it's all managed so you might say I want a ruby on real server but you're
296:16 want a ruby on real server but you're not saying what OS you need um you're
296:19 not saying what OS you need um you're not uh saying exact you might say what
296:22 not uh saying exact you might say what version of Ruby you want but you don't
296:23 version of Ruby you want but you don't have to manage it if it breaks uh or it
296:26 have to manage it if it breaks uh or it might be managed updates and things like
296:27 might be managed updates and things like that the last thing here is like
296:29 that the last thing here is like software as a service and this is
296:31 software as a service and this is something where the CSP is responsible
296:33 something where the CSP is responsible for everything so if you're thinking of
296:35 for everything so if you're thinking of a of a software's a service think of
296:37 a of a software's a service think of like Microsoft Word where you're just
296:39 like Microsoft Word where you're just writing
296:40 writing uh you know writing stuff in there and
296:43 uh you know writing stuff in there and you know you you are responsible for
296:45 you know you you are responsible for where you might choose to store your
296:47 where you might choose to store your data but the data is like still handled
296:49 data but the data is like still handled by the cloud service fighter because you
296:51 by the cloud service fighter because you know it's on the cloud so on their
296:53 know it's on the cloud so on their servers right um so yeah hopefully that
296:56 servers right um so yeah hopefully that gives you kind of an idea across types
296:57 gives you kind of an idea across types of cloud computing
297:00 of cloud computing [Music]
297:04 [Music] responsibilities all right so what I
297:06 responsibilities all right so what I want to do here is just shift the lens a
297:08 want to do here is just shift the lens a bit and look at the share responsibility
297:10 bit and look at the share responsibility model if we were just uh observing a
297:13 model if we were just uh observing a subset of cloud services such as compute
297:16 subset of cloud services such as compute and so we're going to see
297:17 and so we're going to see infrastructures of service platform as a
297:19 infrastructures of service platform as a service software as a service and now we
297:21 service software as a service and now we have function as a service and so that's
297:23 have function as a service and so that's what I mean when we shift the lens we
297:25 what I mean when we shift the lens we get new information uh and so you can
297:27 get new information uh and so you can just see that you really don't want to
297:28 just see that you really don't want to look at this uh from one perspective
297:30 look at this uh from one perspective okay so starting at the top here we have
297:32 okay so starting at the top here we have bare metal uh and so iTab Us's offering
297:34 bare metal uh and so iTab Us's offering is called the ec2 bare metal instance
297:37 is called the ec2 bare metal instance and this is where you basically get the
297:39 and this is where you basically get the whole machine uh you can configure the
297:41 whole machine uh you can configure the entire machine with with the exception
297:43 entire machine with with the exception of the physical machine itself so as a
297:45 of the physical machine itself so as a customer you can install the host OS um
297:48 customer you can install the host OS um uh the host OS so the operating system
297:51 uh the host OS so the operating system that runs on the physical machine and
297:53 that runs on the physical machine and then you can install your own hypervisor
297:55 then you can install your own hypervisor um and then databas is going to be
297:57 um and then databas is going to be responsible for the rest the physical
297:58 responsible for the rest the physical machine now normally The Next Step Up
298:00 machine now normally The Next Step Up would be dedicated but dedicated doesn't
298:03 would be dedicated but dedicated doesn't exactly give you more responsibility it
298:05 exactly give you more responsibility it gives you more Assurance because it's a
298:07 gives you more Assurance because it's a single tenant virtual machine and that's
298:09 single tenant virtual machine and that's why I kind of left it out here um but
298:11 why I kind of left it out here um but we'll see it in the next slide that it
298:13 we'll see it in the next slide that it is kind of on the model and shares the
298:14 is kind of on the model and shares the same spot as uh ec2 um but ec2 is a
298:18 same spot as uh ec2 um but ec2 is a virtual machine and so um here the
298:21 virtual machine and so um here the customer is responsible for the guest OS
298:24 customer is responsible for the guest OS so that means that you can choose what
298:26 so that means that you can choose what OS you want whether it is Ubuntu or
298:28 OS you want whether it is Ubuntu or Debian or Windows but that's not the
298:31 Debian or Windows but that's not the actual OS that is running on the
298:33 actual OS that is running on the physical machine and so you're not going
298:35 physical machine and so you're not going to have control of that ads is going to
298:36 to have control of that ads is going to take care of that then there's the
298:38 take care of that then there's the container runtime so you know you you
298:41 container runtime so you know you you can install Docker on this or any kind
298:43 can install Docker on this or any kind of container layer that you want um so
298:46 of container layer that you want um so that's another thing that you can do so
298:47 that's another thing that you can do so ads is going to be responsible for the
298:49 ads is going to be responsible for the hypervisor uh the physical machine and
298:51 hypervisor uh the physical machine and the host OS all right then looking at
298:54 the host OS all right then looking at containers it says more than one
298:56 containers it says more than one offering for containers but we'll just
298:58 offering for containers but we'll just look at ECS here and so um this is where
299:01 look at ECS here and so um this is where you are going to uh have uh you don't
299:04 you are going to uh have uh you don't you don't install the guest OS right the
299:06 you don't install the guest OS right the guest OS is already there for you what
299:09 guest OS is already there for you what you are going to do is choose your
299:11 you are going to do is choose your configuration of containers you're going
299:13 configuration of containers you're going to uh deploy your containers you're
299:16 to uh deploy your containers you're going to determine where you need to
299:18 going to determine where you need to access storage for your containers or
299:20 access storage for your containers or attach storage to your containers and
299:22 attach storage to your containers and adus is going to be responsible for the
299:24 adus is going to be responsible for the guest OS it it the and there might not
299:27 guest OS it it the and there might not even be a guest OS but there the host OS
299:30 even be a guest OS but there the host OS the guest OS the hypervisor the
299:32 the guest OS the hypervisor the container runtime uh and you're just
299:34 container runtime uh and you're just responsible for your containers okay
299:37 responsible for your containers okay then going to the next level here we
299:38 then going to the next level here we have platform as a service and so this
299:41 have platform as a service and so this one also is a little bit odd where it
299:43 one also is a little bit odd where it fits um because the thing is is that
299:45 fits um because the thing is is that this could be using anything underneath
299:47 this could be using anything underneath it could be using containers it could be
299:49 it could be using containers it could be using virtual machines um and so that's
299:52 using virtual machines um and so that's where it doesn't exactly fit well on a
299:54 where it doesn't exactly fit well on a linear graph but let's just take a look
299:55 linear graph but let's just take a look at some things here so this is where
299:57 at some things here so this is where you're just uploading your code uh you
300:00 you're just uploading your code uh you have some configuration of the
300:01 have some configuration of the environment you have options of
300:03 environment you have options of deployment strategies um the
300:05 deployment strategies um the configuration of the associated services
300:07 configuration of the associated services and then Abus is going to be responsible
300:08 and then Abus is going to be responsible for the servers the OS the networking
300:10 for the servers the OS the networking the storage the security so it is taking
300:13 the storage the security so it is taking on more responsibility than
300:14 on more responsibility than infrastructures of service um whereas
300:17 infrastructures of service um whereas you know adus is just going to be
300:19 you know adus is just going to be responsible that so if it's a virtual
300:21 responsible that so if it's a virtual machine it's being under uh under the
300:23 machine it's being under uh under the use is going to be responsible for this
300:25 use is going to be responsible for this customer stuff okay you're not if it's
300:27 customer stuff okay you're not if it's containers then Abus is going to be
300:28 containers then Abus is going to be responsible for this but it just depends
300:30 responsible for this but it just depends on how that platform is a service is set
300:31 on how that platform is a service is set up actually the way elastic beanock is
300:34 up actually the way elastic beanock is set up is that you actually have access
300:35 set up is that you actually have access to all that infrastructure and you can
300:37 to all that infrastructure and you can fiddle with it and so in that case um
300:40 fiddle with it and so in that case um whereas like if you were to use Heroku
300:41 whereas like if you were to use Heroku which is a a third party provider um you
300:44 which is a a third party provider um you know they would take care of all this
300:45 know they would take care of all this stuff up here um and so you would not
300:47 stuff up here um and so you would not have to worry about it but on AWS you
300:49 have to worry about it but on AWS you actually are responsible for uh the
300:51 actually are responsible for uh the underlying infrastructure because you
300:53 underlying infrastructure because you can you can configure it you can touch
300:55 can you can configure it you can touch it so that's where you know again these
300:57 it so that's where you know again these do not fit perfectly you can't look at
300:59 do not fit perfectly you can't look at platform as a service meaning that um
301:01 platform as a service meaning that um you're not responsible for certain
301:03 you're not responsible for certain things it really comes down to the
301:04 things it really comes down to the service offering okay then we're taking
301:06 service offering okay then we're taking a look at software of service so on AWS
301:09 a look at software of service so on AWS um this is is going to be something like
301:11 um this is is going to be something like um Amazon work docs which is I believe a
301:14 um Amazon work docs which is I believe a competitor uh not a very popular
301:16 competitor uh not a very popular competitor but a competitor to Microsoft
301:18 competitor but a competitor to Microsoft SharePoint and this is for Content
301:20 SharePoint and this is for Content collaboration so as the customer you're
301:22 collaboration so as the customer you're responsible for the contents of the
301:23 responsible for the contents of the document management of the files
301:25 document management of the files configuration of sharing access controls
301:27 configuration of sharing access controls and the databas is responsible for the
301:29 and the databas is responsible for the servers the OS networking the the
301:31 servers the OS networking the the storage the security and everything else
301:33 storage the security and everything else so you know if you use a Microsoft Word
301:34 so you know if you use a Microsoft Word Doc and you type stuff in it you say
301:36 Doc and you type stuff in it you say where to say it that's what you're
301:37 where to say it that's what you're responsible for okay the last one here
301:39 responsible for okay the last one here on the list is our functions here and so
301:42 on the list is our functions here and so 's offer is it Lambda and so as the
301:45 's offer is it Lambda and so as the customer all you're doing is you're
301:46 customer all you're doing is you're uploading your code and databus is going
301:48 uploading your code and databus is going to take care of the rest so deployment
301:50 to take care of the rest so deployment container runtime networking Storage
301:51 container runtime networking Storage security physical machine basically
301:54 security physical machine basically everything um and so you're really just
301:57 everything um and so you're really just left to uh develop okay so you know
301:59 left to uh develop okay so you know hopefully that gives you kind of an idea
302:01 hopefully that gives you kind of an idea and again you know we could have thrown
302:02 and again you know we could have thrown in a few other services like what we
302:04 in a few other services like what we could not fit on this slide here was um
302:08 could not fit on this slide here was um uh adus fargate which is a a serverless
302:11 uh adus fargate which is a a serverless container as a function or sorry
302:13 container as a function or sorry serverless serverless container as a
302:15 serverless serverless container as a service or container as a service so uh
302:17 service or container as a service so uh you know that has its own unique
302:19 you know that has its own unique properties in the model as well okay so
302:21 properties in the model as well okay so let's just have kind of a visualization
302:23 let's just have kind of a visualization on a linear graph here so we have the
302:25 on a linear graph here so we have the customers responsibility on the left
302:26 customers responsibility on the left hand side and itus is responsibility on
302:28 hand side and itus is responsibility on the right and we'll look at our broad
302:29 the right and we'll look at our broad category so we got bare metal dedicated
302:32 category so we got bare metal dedicated virtual machines containers and
302:34 virtual machines containers and functions and so no matter uh which uh
302:38 functions and so no matter uh which uh type of compute you're using using
302:40 type of compute you're using using you're always responsible for your code
302:42 you're always responsible for your code for um containers you know if uh you
302:45 for um containers you know if uh you know like uh the functions when you're
302:47 know like uh the functions when you're using functions there are pre-built
302:49 using functions there are pre-built containers so you say I want to use Ruby
302:52 containers so you say I want to use Ruby and there's a ruby container and you
302:54 and there's a ruby container and you don't have to configure it but obviously
302:56 don't have to configure it but obviously um you know when you are using container
302:58 um you know when you are using container service you are configuring that
302:59 service you are configuring that container you are responsible for it for
303:01 container you are responsible for it for um virtual machines you know you're
303:03 um virtual machines you know you're responsible for the runtime so you can
303:05 responsible for the runtime so you can install a container runtime on there or
303:07 install a container runtime on there or install a bunch of different packages
303:09 install a bunch of different packages like Ruby and stuff like that uh the
303:11 like Ruby and stuff like that uh the operating system you have control over
303:13 operating system you have control over in the virtual machines for the
303:14 in the virtual machines for the dedicated and we saw with bare metal you
303:16 dedicated and we saw with bare metal you have both uh controls of the host OS and
303:19 have both uh controls of the host OS and the guest OS and then only bare metal
303:22 the guest OS and then only bare metal allows you to have control of the
303:23 allows you to have control of the virtualization where you can install
303:25 virtualization where you can install that hypervisor so hopefully that gives
303:27 that hypervisor so hopefully that gives you an idea of compute and it is
303:29 you an idea of compute and it is offering there and also kind of how
303:31 offering there and also kind of how there's a lot of little caveats when
303:32 there's a lot of little caveats when we're looking at the Shared
303:33 we're looking at the Shared responsibility model okay
303:40 [Music] all right so I have one more variant of
303:41 all right so I have one more variant of the share responsibility model and this
303:43 the share responsibility model and this one is actually what is used by Google
303:45 one is actually what is used by Google so um we're going to apply to AWS and uh
303:48 so um we're going to apply to AWS and uh see how it works so let's just kind of
303:50 see how it works so let's just kind of redefine share responsibility model or
303:51 redefine share responsibility model or just in a slightly different way so we
303:53 just in a slightly different way so we fully understand it so the share
303:55 fully understand it so the share responsibility model is a simple
303:56 responsibility model is a simple visualization that helps determine what
303:58 visualization that helps determine what the customer is responsible for and what
304:00 the customer is responsible for and what the CSP is responsible for related to
304:02 the CSP is responsible for related to AWS and so across the top we have
304:05 AWS and so across the top we have infrastructure as a service platform as
304:07 infrastructure as a service platform as a service software as a service but
304:09 a service software as a service but remember there's other ones out there
304:10 remember there's other ones out there like functions and service it's just not
304:11 like functions and service it's just not going to fit on here um okay so and then
304:15 going to fit on here um okay so and then uh along the side here we have content
304:17 uh along the side here we have content access policies usage deployment web
304:20 access policies usage deployment web application security identity operations
304:24 application security identity operations access and authentication network
304:26 access and authentication network security remember that's Cloud
304:27 security remember that's Cloud networking security the guest OS data
304:29 networking security the guest OS data and content audit logging now we have
304:32 and content audit logging now we have the actual traditional networking or
304:34 the actual traditional networking or physical networking storage and
304:35 physical networking storage and encryption and here we're probably
304:37 encryption and here we're probably talking about the physical storage
304:39 talking about the physical storage Harden kernel IPC uh the boot the
304:43 Harden kernel IPC uh the boot the hardware and so then here we have our
304:46 hardware and so then here we have our bars so we have the csp's responsibility
304:48 bars so we have the csp's responsibility and the customer responsibility so when
304:49 and the customer responsibility so when we're looking at a SAS software as a
304:52 we're looking at a SAS software as a service uh the customer is going to be
304:54 service uh the customer is going to be responsible for the content remember
304:55 responsible for the content remember like think of like a word processor
304:57 like think of like a word processor you're writing the content the access
304:58 you're writing the content the access policies like say I want to share this
305:00 policies like say I want to share this document with someone the usage like how
305:02 document with someone the usage like how you utilize it can you upgrade your plan
305:04 you utilize it can you upgrade your plan things like that then next on our list
305:06 things like that then next on our list here is platform as a service so
305:08 here is platform as a service so generally uh you know platform is a
305:10 generally uh you know platform is a services for developers to De develop
305:12 services for developers to De develop and deploy applications and so they will
305:15 and deploy applications and so they will generally have more than one deploy
305:17 generally have more than one deploy strategy and uh you know there might be
305:19 strategy and uh you know there might be some cost-saving measures to choose like
305:22 some cost-saving measures to choose like uh you might have to pay additional for
305:23 uh you might have to pay additional for security uh or you it's up to you to
305:26 security uh or you it's up to you to configure in a particular way or you
305:27 configure in a particular way or you might have to integrate it with other
305:29 might have to integrate it with other services uh and you know we saw that
305:31 services uh and you know we saw that pass is not a perfect uh definition or
305:34 pass is not a perfect uh definition or fit because you know when we look at
305:35 fit because you know when we look at elastic bean stock if you have access to
305:37 elastic bean stock if you have access to those resources and you can change the
305:39 those resources and you can change the underneath then you might have more
305:42 underneath then you might have more responsibility there than you think that
305:43 responsibility there than you think that you would okay the next one here is
305:46 you would okay the next one here is infrastructure the service and so this
305:48 infrastructure the service and so this is extending to Identity so who's
305:50 is extending to Identity so who's allowed to uh you know log into your
305:53 allowed to uh you know log into your adabs account operations the things that
305:56 adabs account operations the things that they're allowed to do in the account
305:58 they're allowed to do in the account access and authentication do they have
306:00 access and authentication do they have to use MFA uh things like that network
306:02 to use MFA uh things like that network security obviously you can configure the
306:04 security obviously you can configure the security of your uh Cloud infrastructure
306:07 security of your uh Cloud infrastructure or Cloud Network um you know so you know
306:09 or Cloud Network um you know so you know do you isolate everything a single VPC
306:12 do you isolate everything a single VPC how do you set up your security groups
306:13 how do you set up your security groups things like that uh we know with virtual
306:15 things like that uh we know with virtual machines you can set up the guest OS
306:17 machines you can set up the guest OS there's data and content but remember
306:19 there's data and content but remember that bare metal is part of the uh
306:21 that bare metal is part of the uh infrastructure service offering and so
306:23 infrastructure service offering and so that's where we'd see Hardware or not
306:25 that's where we'd see Hardware or not Hardware but you'd have the host o the
306:27 Hardware but you'd have the host o the host Os or virtualization and so this
306:30 host Os or virtualization and so this again is not a perfect representation uh
306:32 again is not a perfect representation uh but it generally works okay and then
306:34 but it generally works okay and then last and list there um or just looking
306:37 last and list there um or just looking at what the ads is responsible for auto
306:40 at what the ads is responsible for auto logging so of course adus has cloud
306:42 logging so of course adus has cloud trail which is for uh uh logging uh API
306:46 trail which is for uh uh logging uh API um events but Auto loging could be
306:48 um events but Auto loging could be things that are uh internally happening
306:50 things that are uh internally happening with those physical servers then the
306:52 with those physical servers then the networking the physical storage uh
306:54 networking the physical storage uh Harding the kernel OS has I think what's
306:56 Harding the kernel OS has I think what's called the Nitro system where they have
306:57 called the Nitro system where they have like a security chip that's uh installed
307:00 like a security chip that's uh installed on all their servers then it's the the
307:03 on all their servers then it's the the boot OS uh and then the hardware itself
307:06 boot OS uh and then the hardware itself okay so just remember the customer is
307:08 okay so just remember the customer is responsible for the data
307:10 responsible for the data and configuration of access controls
307:12 and configuration of access controls that reside in AWS so if you can
307:14 that reside in AWS so if you can configure it or you can put data on it
307:16 configure it or you can put data on it you're responsible forward okay the
307:18 you're responsible forward okay the customer is responsible for the
307:20 customer is responsible for the configuration of cloud services and
307:21 configuration of cloud services and granting access to users via permissions
307:23 granting access to users via permissions right so if you give uh one of your
307:26 right so if you give uh one of your employees access to do it um you know
307:29 employees access to do it um you know even if it's their fault it's your fault
307:31 even if it's their fault it's your fault so remember that um and again the CSP is
307:34 so remember that um and again the CSP is generally responsible for the underlying
307:36 generally responsible for the underlying infrastructure we say generally because
307:38 infrastructure we say generally because you know there's edge cases like bare
307:39 you know there's edge cases like bare metal and coming back to adses in the
307:42 metal and coming back to adses in the cloud and of the cloud so in the cloud
307:44 cloud and of the cloud so in the cloud so if you configure it or store it then
307:46 so if you configure it or store it then you the customer responsible for it and
307:48 you the customer responsible for it and of the cloud if you cannot configure it
307:51 of the cloud if you cannot configure it then the CSP is probably responsible for
307:53 then the CSP is probably responsible for it
307:55 it [Music]
307:58 [Music] okay hey this is Andrew Brown from exam
308:01 okay hey this is Andrew Brown from exam Pro and we are looking at the share
308:02 Pro and we are looking at the share responsibility model from the
308:03 responsibility model from the perspective of architecture and if
308:06 perspective of architecture and if you're getting sick of share
308:07 you're getting sick of share responsibility model don't worry I think
308:08 responsibility model don't worry I think this will be the last
308:09 this will be the last slide in this section but let's take a
308:11 slide in this section but let's take a look here so we have uh less
308:15 look here so we have uh less responsibility more responsibility at
308:16 responsibility more responsibility at the bottom so what we have down here is
308:18 the bottom so what we have down here is traditional or virtual machine
308:20 traditional or virtual machine architecture so Global Workforce is most
308:22 architecture so Global Workforce is most familiar with this kind of architecture
308:24 familiar with this kind of architecture and there's lots of documentation
308:25 and there's lots of documentation Frameworks and support so maybe this
308:27 Frameworks and support so maybe this would be using elastic beanock with
308:28 would be using elastic beanock with platform as a service or using ec2
308:30 platform as a service or using ec2 instances alongside with autoscaling
308:33 instances alongside with autoscaling groups uh code deploy uh load balancers
308:36 groups uh code deploy uh load balancers things like that the next level here is
308:38 things like that the next level here is microservices or containers this is
308:40 microservices or containers this is where you mix and match languages better
308:42 where you mix and match languages better utilization of resources so maybe you're
308:44 utilization of resources so maybe you're using fargate which is seress containers
308:45 using fargate which is seress containers or elastic container service or elastic
308:48 or elastic container service or elastic kubernetes service for containers and at
308:51 kubernetes service for containers and at the top here we have serverless or
308:52 the top here we have serverless or commonly with functions as a service so
308:55 commonly with functions as a service so there are no more servers you just worry
308:56 there are no more servers you just worry about the data or uh and the code right
308:59 about the data or uh and the code right so literally just functions of code and
309:01 so literally just functions of code and so you could be using the amplify
309:02 so you could be using the amplify serverless framework or maybe abess
309:04 serverless framework or maybe abess Lambda for creating serverless
309:06 Lambda for creating serverless architecture so there you go
309:12 [Music] hey this is Andrew Brown from exam Pro
309:14 hey this is Andrew Brown from exam Pro and we are looking at Computing Services
309:16 and we are looking at Computing Services and before we jump into uh the entire
309:18 and before we jump into uh the entire Suite of Computing Services they was
309:20 Suite of Computing Services they was have let's just talk about ec2 for a
309:22 have let's just talk about ec2 for a moment which allows you to launch
309:24 moment which allows you to launch virtual machines so what is a virtual
309:26 virtual machines so what is a virtual machine well a virtual machine or VM is
309:28 machine well a virtual machine or VM is an emulation of a physical computer
309:30 an emulation of a physical computer using software server virtualization
309:33 using software server virtualization allows you to easily create copy resize
309:35 allows you to easily create copy resize or migrate your server multiple VMS can
309:37 or migrate your server multiple VMS can run on the same physical servers so you
309:39 run on the same physical servers so you can share the cost with other customers
309:41 can share the cost with other customers so imagine if your server or computer
309:43 so imagine if your server or computer was an executable file on your computer
309:45 was an executable file on your computer okay so that's the kind of way you want
309:47 okay so that's the kind of way you want to think about it when we launch a VM uh
309:50 to think about it when we launch a VM uh we call it an instance and so ec2 is
309:52 we call it an instance and so ec2 is highly configurable server where you can
309:54 highly configurable server where you can choose the Ami so the Amazon machine
309:56 choose the Ami so the Amazon machine image that affects options such as
309:58 image that affects options such as amount of CPUs or vcpus virtual CPUs
310:02 amount of CPUs or vcpus virtual CPUs amount of memory so Ram the amount of
310:04 amount of memory so Ram the amount of network bandwidth the operating system
310:06 network bandwidth the operating system so whether it's Windows Ubuntu Amazon 2
310:10 so whether it's Windows Ubuntu Amazon 2 uh the ability to attach multiple
310:12 uh the ability to attach multiple virtual hard drives for storage so
310:14 virtual hard drives for storage so elastic Block store um and so the Amazon
310:17 elastic Block store um and so the Amazon machine image is a predefined
310:18 machine image is a predefined configuration for AVM so just remember
310:21 configuration for AVM so just remember that and so ec2 is also considered the
310:24 that and so ec2 is also considered the backbone of ads because the majority of
310:26 backbone of ads because the majority of a services are using uc2 as the
310:28 a services are using uc2 as the underlying servers whether it's S3 RDS
310:30 underlying servers whether it's S3 RDS 10B or lambdas that is what it's using
310:33 10B or lambdas that is what it's using so um what I say also it's just because
310:36 so um what I say also it's just because when we talk about the it Network that
310:37 when we talk about the it Network that is the backbone for Global
310:40 is the backbone for Global infrastructure and the networking at
310:42 infrastructure and the networking at large and so ec2 is for the services
310:46 large and so ec2 is for the services [Music]
310:50 [Music] okay hey this is Andrew Brown from exam
310:53 okay hey this is Andrew Brown from exam Pro so we just looked at what ec2 is
310:55 Pro so we just looked at what ec2 is well let's look at more of the broader
310:56 well let's look at more of the broader services for computing and these are the
310:58 services for computing and these are the more uh common ones that you'll come
311:00 more uh common ones that you'll come across there's definitely more than just
311:02 across there's definitely more than just what we're going to see on the single
311:03 what we're going to see on the single slide here so we'll break this down with
311:05 slide here so we'll break this down with virtual machines containers and then
311:06 virtual machines containers and then serverless for for virtual machines
311:08 serverless for for virtual machines remember that's an UL ation of a
311:09 remember that's an UL ation of a physical computer using software and ec2
311:12 physical computer using software and ec2 is the main one but for our VM category
311:15 is the main one but for our VM category we have Amazon light sale this is a
311:17 we have Amazon light sale this is a manage virtual server service it is the
311:20 manage virtual server service it is the friendly version of ec2 virtual machines
311:22 friendly version of ec2 virtual machines so when you need to launch a Linux or
311:24 so when you need to launch a Linux or Windows server but you don't have much
311:25 Windows server but you don't have much adus knowledge you could launch a
311:27 adus knowledge you could launch a WordPress here and uh you could hook up
311:29 WordPress here and uh you could hook up your domain and stuff like that um so
311:32 your domain and stuff like that um so this is a very good options for
311:33 this is a very good options for beginners we have containers so
311:35 beginners we have containers so virtualizing an operating system or Os
311:37 virtualizing an operating system or Os to run multiple workloads on a single OS
311:40 to run multiple workloads on a single OS instance so containers are generally
311:41 instance so containers are generally used in microservice architecture when
311:44 used in microservice architecture when you divide your application into smaller
311:46 you divide your application into smaller applications that talk to each other so
311:48 applications that talk to each other so here we would have ECS elastic container
311:50 here we would have ECS elastic container service this is a container
311:52 service this is a container orchestration service that supports
311:54 orchestration service that supports Docker containers launches a cluster of
311:56 Docker containers launches a cluster of servers on these2 instances with Docker
311:58 servers on these2 instances with Docker installed so when you need Dockers a
312:00 installed so when you need Dockers a service or you need to run containers we
312:03 service or you need to run containers we have elastic container registry ECR this
312:05 have elastic container registry ECR this is a repository of container images so
312:08 is a repository of container images so in order to launch a container you need
312:10 in order to launch a container you need an image an image just means a save copy
312:13 an image an image just means a save copy a repository just means a storage that
312:16 a repository just means a storage that has Version Control we have ECS fargate
312:19 has Version Control we have ECS fargate or just fargate now people are kind of
312:21 or just fargate now people are kind of forgetting that it's it runs on ECS
312:23 forgetting that it's it runs on ECS these days that's why I have it in there
312:25 these days that's why I have it in there it is a servess orchestration container
312:28 it is a servess orchestration container service is the same as ECS ex except you
312:31 service is the same as ECS ex except you pay on demand per running containers so
312:34 pay on demand per running containers so with ECS you have to keep a ec2 server
312:37 with ECS you have to keep a ec2 server running even if you have no containers
312:39 running even if you have no containers is running so it manages the underlying
312:41 is running so it manages the underlying server so you don't have to scale or
312:43 server so you don't have to scale or upgrade the ec2 server so there's the
312:45 upgrade the ec2 server so there's the advantage over ECS okay then we have
312:48 advantage over ECS okay then we have elastic kubernetes service eks this is a
312:50 elastic kubernetes service eks this is a fully managed kubernetes service kuber
312:53 fully managed kubernetes service kuber or so kubernetes commonly rated to K8 is
312:56 or so kubernetes commonly rated to K8 is an open-source orchestration software
312:58 an open-source orchestration software that was created by Google is generally
313:00 that was created by Google is generally the standard for managing microservices
313:02 the standard for managing microservices so when you need to run kubernetes as a
313:04 so when you need to run kubernetes as a service then we have serverless category
313:07 service then we have serverless category so when the underlying servers are
313:08 so when the underlying servers are managed by B to us you don't worry or
313:11 managed by B to us you don't worry or configure servers saus Lambda is a
313:13 configure servers saus Lambda is a serverless function service you can run
313:15 serverless function service you can run code without provisioning or managing
313:17 code without provisioning or managing servers you upload small pieces of code
313:19 servers you upload small pieces of code choose much uh how much memory how how
313:21 choose much uh how much memory how how long you want the function to run is
313:23 long you want the function to run is allowed to run before timing out and you
313:25 allowed to run before timing out and you are charged based on the runtime of the
313:26 are charged based on the runtime of the Serv function rounded to the nearest 100
313:28 Serv function rounded to the nearest 100 milliseconds so there you
313:30 milliseconds so there you [Music]
313:33 [Music] go hey this is Andrew Brown from exam
313:36 go hey this is Andrew Brown from exam Pro and what I want to do is just show
313:37 Pro and what I want to do is just show you a variety of different Computing
313:39 you a variety of different Computing Services on AWS so I'm going to try to
313:41 Services on AWS so I'm going to try to launch them and uh we're not going to do
313:43 launch them and uh we're not going to do anything with them just going to Simply
313:44 anything with them just going to Simply launch them okay so the first I want to
313:46 launch them okay so the first I want to show you is ec2 and by the way we will
313:48 show you is ec2 and by the way we will go more in depth in ec2 later on in this
313:51 go more in depth in ec2 later on in this course here um but what I'm going to do
313:53 course here um but what I'm going to do is go ahead and launch the instance
313:54 is go ahead and launch the instance don't worry about all this stuff but
313:56 don't worry about all this stuff but just choose the Amazon Linux 2 so it's
313:57 just choose the Amazon Linux 2 so it's in the free tier all right we're going
313:59 in the free tier all right we're going to choose an instance type of a T2 micro
314:01 to choose an instance type of a T2 micro so that's part of the free tier it's
314:03 so that's part of the free tier it's going to be set as one all these options
314:05 going to be set as one all these options are fine I want you to go ahead and
314:07 are fine I want you to go ahead and review and launch we're going to launch
314:09 review and launch we're going to launch and I don't want to generate on any key
314:11 and I don't want to generate on any key pair I'm going to proceed without a key
314:13 pair I'm going to proceed without a key pair I'm going to acknowledge that
314:14 pair I'm going to acknowledge that because I don't want it and that's all
314:16 because I don't want it and that's all there is to launching an ec2 instance
314:19 there is to launching an ec2 instance and so I can go here and view my
314:20 and so I can go here and view my instances and what you'll see is it's
314:23 instances and what you'll see is it's pending okay and usually it has like a
314:26 pending okay and usually it has like a little spinning icon maybe they've
314:28 little spinning icon maybe they've updated it since
314:29 updated it since then so I go here it's hard to see
314:32 then so I go here it's hard to see because there's all these terminated
314:33 because there's all these terminated ones but I don't need to do anything
314:35 ones but I don't need to do anything with it I just wanted to show you the
314:37 with it I just wanted to show you the actions that you'd have to do to launch
314:38 actions that you'd have to do to launch it actually we'll leave it alone maybe
314:40 it actually we'll leave it alone maybe we'll see it when it's launched the next
314:41 we'll see it when it's launched the next one I want to show you is e elastic
314:43 one I want to show you is e elastic container
314:45 container service um and wow this this is old
314:48 service um and wow this this is old let's go let's get the new experience
314:50 let's go let's get the new experience please so old okay checkbox that
314:54 please so old okay checkbox that on and we'll hit get started and we'll
314:57 on and we'll hit get started and we'll say create a
314:59 say create a cluster and we have some options here
315:01 cluster and we have some options here networking only ec2 Linux plus
315:03 networking only ec2 Linux plus networking uh for use with either ads
315:06 networking uh for use with either ads fargate or external windows
315:10 fargate or external windows um uh this is if you're doing fargate
315:13 um uh this is if you're doing fargate which we're not doing right now fargate
315:14 which we're not doing right now fargate is part of elastic container service it
315:16 is part of elastic container service it used it well used to be it is called ECS
315:19 used it well used to be it is called ECS fargate but it us markets it as a
315:21 fargate but it us markets it as a separate service we'll go to next and
315:23 separate service we'll go to next and say my ECS
315:25 say my ECS cluster um we can create an empty
315:27 cluster um we can create an empty cluster but that would make it a fargate
315:29 cluster but that would make it a fargate cluster which we don't want there's an
315:30 cluster which we don't want there's an ond demand server look it's M6 I large
315:34 ond demand server look it's M6 I large if you're very afraid of a lot of spend
315:36 if you're very afraid of a lot of spend here you don't have to do this you can
315:37 here you don't have to do this you can just watch me do it and just learn
315:39 just watch me do it and just learn well what I'm going to do is try to find
315:41 well what I'm going to do is try to find something super cheap so I want a T2
315:43 something super cheap so I want a T2 micro or a T3 micro T2 micro is part of
315:46 micro or a T3 micro T2 micro is part of the free tier I don't know if we get to
315:48 the free tier I don't know if we get to choose T2 anymore in here they might not
315:50 choose T2 anymore in here they might not let
315:52 let you there it is you know T3 micro is
315:55 you there it is you know T3 micro is great too I just whatever says it's free
315:58 great too I just whatever says it's free that's what I'm going to go for number
315:59 that's what I'm going to go for number of instances one the Amazon lytic
316:01 of instances one the Amazon lytic version is fine I don't care about a key
316:04 version is fine I don't care about a key pair uh use the existing VPC I don't
316:07 pair uh use the existing VPC I don't want to have to make a new one select
316:09 want to have to make a new one select the existing ones
316:12 the existing ones okay uh let it create a new security
316:15 okay uh let it create a new security group that's totally fine allow those to
316:17 group that's totally fine allow those to be fine create a new role that's fine
316:21 be fine create a new role that's fine create okay and so that's going to
316:24 create okay and so that's going to create ourselves a
316:26 create ourselves a cluster um I'm going to just make a new
316:28 cluster um I'm going to just make a new tab here let's just check on our ec2
316:31 tab here let's just check on our ec2 instance and so if we look at our ec2
316:34 instance and so if we look at our ec2 instance it is running okay great so it
316:36 instance it is running okay great so it has a private IP address it has a public
316:40 has a private IP address it has a public IP address all right um there's not much
316:43 IP address all right um there's not much we can do with it I can't even log into
316:44 we can do with it I can't even log into it because we didn't generate out a key
316:45 it because we didn't generate out a key pair L times you want to name these
316:47 pair L times you want to name these things so I just go here and name it my
316:49 things so I just go here and name it my server okay go back to our ECS instance
316:54 server okay go back to our ECS instance and the cluster is ready so we'll go
316:57 and the cluster is ready so we'll go here and oh nice we got a new UI and so
317:00 here and oh nice we got a new UI and so if we wanted to deploy something as a
317:02 if we wanted to deploy something as a service or a
317:04 service or a task
317:05 task um we would need to create a t template
317:09 um we would need to create a t template like a task definition
317:12 like a task definition file uh they don't have a new UI for
317:14 file uh they don't have a new UI for this you're being redirected to the
317:15 this you're being redirected to the previous version console because this
317:16 previous version console because this isn't available in the new experience
317:18 isn't available in the new experience yet of course it isn't so we can create
317:19 yet of course it isn't so we can create a new task definition file that's what's
317:21 a new task definition file that's what's used to run it it's basically like a
317:23 used to run it it's basically like a Docker file composed file whatever you
317:25 Docker file composed file whatever you want um we have fargate or ec2 we are
317:28 want um we have fargate or ec2 we are doing ECS so we're going to have to do
317:29 doing ECS so we're going to have to do ec2 so we'll say my ECS uh Tas def
317:33 ec2 so we'll say my ECS uh Tas def file um task Ru opt optional IM roll I
317:37 file um task Ru opt optional IM roll I don't need one network mode I I don't
317:39 don't need one network mode I I don't care um and then this is the idea is
317:42 care um and then this is the idea is that because a container allows you to
317:44 that because a container allows you to use up a particular amount of the um
317:46 use up a particular amount of the um thing we don't have to use all of the
317:48 thing we don't have to use all of the memory so we should look up what a T2
317:50 memory so we should look up what a T2 micro is because I don't even remember
317:53 micro is because I don't even remember what size it is okay T2 micro AWS so we
317:56 what size it is okay T2 micro AWS so we go here we look at the instance types
317:59 go here we look at the instance types and we're going to flip over to T2 and
318:01 and we're going to flip over to T2 and it says that it's one
318:03 it says that it's one vcpu one gab of memory so what I'll do
318:07 vcpu one gab of memory so what I'll do one yeah yeah one okay that's fine so
318:11 one yeah yeah one okay that's fine so what we want and this is in megabytes so
318:13 what we want and this is in megabytes so we'll say 500 megabytes and um I don't
318:17 we'll say 500 megabytes and um I don't know if we can do less than one but I'm
318:18 know if we can do less than one but I'm going to do one
318:20 going to do one here
318:22 here um the task CPU must be an integer
318:25 um the task CPU must be an integer greater than or equal to 128 okay fine
318:27 greater than or equal to 128 okay fine 128 oh I guess it's 1024 would utilize
318:30 128 oh I guess it's 1024 would utilize the whole thing so I could say
318:32 the whole thing so I could say 512 okay and this is where we would add
318:36 512 okay and this is where we would add our
318:37 our container so
318:39 container so I don't do this every day so I don't
318:41 I don't do this every day so I don't remember how to do this we'll say my
318:43 remember how to do this we'll say my container um and I need a repository
318:46 container um and I need a repository here so I need like dockerhub Hello
318:53 World okay I don't care what it is I just need a image that's
319:01 simple and I'm looking for the address here
319:09 um I'm hoping that's just this dockerhub
319:16 URL so it' be something like this right docker.io probably Docker IO Docker
319:19 docker.io probably Docker IO Docker image um Docker Hub URL in
319:31 ECS okay goes to show how often I'm launch launching these things so
319:34 launch launching these things so repository URL Docker image so I think
319:37 repository URL Docker image so I think that what we're going to do here
319:46 I would really just like the URL please
319:49 please reviews
319:51 reviews tags where is
319:52 tags where is it where is it it's somewhere here
320:05 uh well let's just try it we'll go and we'll type in says image and tags so
320:09 we'll type in says image and tags so docker.io
320:11 docker.io hello world I really need an image ID
320:15 hello world I really need an image ID image URL hello
320:17 image URL hello world Docker
320:20 world Docker Hub they're not making my life easy here
320:30 today anything I just want to see like a single example docker.io
320:40 docker iio URL
320:42 URL examples
320:45 examples ECS this is what it's like you know this
320:47 ECS this is what it's like you know this is what you're going to be doing if you
320:49 is what you're going to be doing if you are um you know a cloud engineer you're
320:51 are um you know a cloud engineer you're going to be Googling a lot and just
320:52 going to be Googling a lot and just trying to find examples
320:55 trying to find examples here so here it says docker.io the name
320:58 here so here it says docker.io the name the host name okay so we'll just try it
321:01 the host name okay so we'll just try it okay so I think that the the the name
321:04 okay so I think that the the the name here is underscore and then it's hello
321:07 here is underscore and then it's hello world and that's what's throwing me off
321:08 world and that's what's throwing me off here
321:09 here right Docker
321:16 IO just hold on here repository URL and then there's the
321:19 here repository URL and then there's the tag I don't know if like is the tag
321:21 tag I don't know if like is the tag going to be like latest view available
321:24 going to be like latest view available tags latest okay so what I'll do
321:28 tags latest okay so what I'll do here and that's the thing you got to
321:30 here and that's the thing you got to have a lot of confidence too so hard
321:32 have a lot of confidence too so hard limits soft limit um do I have to set
321:35 limits soft limit um do I have to set it do I have to set any of these things
321:37 it do I have to set any of these things can I just go to the bottom and hit
321:40 can I just go to the bottom and hit add looks like I
321:42 add looks like I can okay so we'll scroll on down create
321:47 can okay so we'll scroll on down create we create our task definition file which
321:48 we create our task definition file which is fine we're going to go back to our
321:50 is fine we're going to go back to our cluster it's going to bring us back to
321:52 cluster it's going to bring us back to the new experience we're going to click
321:54 the new experience we're going to click into this
321:55 into this cluster holy smokes uh we're going to
321:58 cluster holy smokes uh we're going to hit
321:59 hit deploy and we are going to choose
322:02 deploy and we are going to choose service that means it's going to
322:03 service that means it's going to continuously run task means that when
322:04 continuously run task means that when it's done running it ends we're going to
322:06 it's done running it ends we're going to choose our family our version that's
322:08 choose our family our version that's that's the task definition file there is
322:10 that's the task definition file there is not compatible with the selected compute
322:29 that okay some maybe some you have to like code it so that it continuously
322:30 like code it so that it continuously runs I don't care we don't need to run a
322:32 runs I don't care we don't need to run a service here the selected task
322:34 service here the selected task definition is not compatible with the
322:35 definition is not compatible with the selected compute strategy
322:47 why uh can you double check if you're using fargate strategy instead of the
322:49 using fargate strategy instead of the ec2 uh blog designed for the ec2
322:51 ec2 uh blog designed for the ec2 strategy so probably what it's
322:53 strategy so probably what it's suggesting is that the the strategy file
322:55 suggesting is that the the strategy file I made is not for the right one here Tas
322:58 I made is not for the right one here Tas [Music]
322:59 [Music] definitions go back over
323:02 definitions go back over here well what's wrong with it
323:12 task roll none my container so what I'm going to do because I don't trust this
323:15 going to do because I don't trust this just going to go ahead and delete this
323:17 just going to go ahead and delete this can I delete this how do I delete
323:21 can I delete this how do I delete this oh boy
323:24 this oh boy actions deregister
323:27 actions deregister deregister we'll create a new one and so
323:30 deregister we'll create a new one and so it us has tools like it us co-pilot um
323:33 it us has tools like it us co-pilot um CLI to make this a lot easier because
323:35 CLI to make this a lot easier because you can see this is very frustrating but
323:36 you can see this is very frustrating but I chose this
323:39 I chose this so my task
323:42 so my task def requires compatibility of
323:57 512 add container we're going
324:00 container we're going to uh was it docker.io
324:21 here and we'll just say uh 512 which is fine I don't care about any port
324:23 fine I don't care about any port mappings I'm just reading it carefully
324:25 mappings I'm just reading it carefully here to see what it wants we'll say 512
324:27 here to see what it wants we'll say 512 maybe because I didn't specify them it's
324:30 maybe because I didn't specify them it's complaining this looks fine we'll hit
324:36 add okay constraints type this all looks
324:39 okay constraints type this all looks fine so we'll try this
324:41 fine so we'll try this again and so we now have our file let's
324:44 again and so we now have our file let's see if we can just run this task from
324:46 see if we can just run this task from here you
324:48 here you see2 this is just another way to do it
324:50 see2 this is just another way to do it so we just choose the cluster this is
324:51 so we just choose the cluster this is actually a lot easier to do it this is
324:53 actually a lot easier to do it this is old old old Eh this is ugly and so now
324:57 old old old Eh this is ugly and so now it launches so you know if you have
324:59 it launches so you know if you have trouble one way then just do it another
325:01 trouble one way then just do it another way and uh sometimes it'll work here so
325:04 way and uh sometimes it'll work here so I don't expect this task to really work
325:05 I don't expect this task to really work in any particular way if it's pending
325:08 in any particular way if it's pending that that's fine if it fails that's fine
325:09 that that's fine if it fails that's fine if it's successful that's fine I don't
325:12 if it's successful that's fine I don't care I just want to go through the
325:14 care I just want to go through the motion so it was successful it it ran
325:16 motion so it was successful it it ran and then it stopped I don't know if we
325:19 and then it stopped I don't know if we could see like the output anywhere
325:20 could see like the output anywhere probably what it would do is it would
325:22 probably what it would do is it would log out something like into somewhere
325:26 log out something like into somewhere and so I don't know if like there's logs
325:28 and so I don't know if like there's logs turned on for this if I go over to like
325:30 turned on for this if I go over to like Cloud watch logs maybe I could see
325:34 Cloud watch logs maybe I could see something a lot of these services will
325:36 something a lot of these services will automatically create cloudwatch logs so
325:38 automatically create cloudwatch logs so sometimes you can just go look at them
325:39 sometimes you can just go look at them there so we'll drop down we'll go to log
325:41 there so we'll drop down we'll go to log groups
325:43 groups here there is some stuff here um there's
325:46 here there is some stuff here um there's a couple that I created from before just
325:48 a couple that I created from before just go ahead delete
325:51 go ahead delete those and so what I'm looking for is
325:53 those and so what I'm looking for is like ECS so no there's no logging
325:55 like ECS so no there's no logging happening here which is totally fine so
325:56 happening here which is totally fine so that is ECS um for fargate it's pretty
325:59 that is ECS um for fargate it's pretty much uh the same the difference is that
326:02 much uh the same the difference is that fargate is like it has to start up and
326:04 fargate is like it has to start up and run so it's a lot slower to
326:06 run so it's a lot slower to watch okay
326:09 watch okay and now let's go take a look at a
326:11 and now let's go take a look at a Lambda okay so this is our serverless
326:15 Lambda okay so this is our serverless compute so we go ahead and create
326:17 compute so we go ahead and create ourselves a function uh we can start
326:19 ourselves a function uh we can start from a blueprint that doesn't sound too
326:22 from a blueprint that doesn't sound too bad and I personally like Ruby so no I'm
326:26 bad and I personally like Ruby so no I'm not getting much here but we can do is
326:28 not getting much here but we can do is look for something like hello do we have
326:31 look for something like hello do we have like a hello
326:33 like a hello world there we go hello world and we'll
326:36 world there we go hello world and we'll click that we'll say my hello
326:39 click that we'll say my hello world uh it's going to create those
326:41 world uh it's going to create those permissions that's fine it's showing us
326:43 permissions that's fine it's showing us the code it's very simple okay it's
326:46 the code it's very simple okay it's going to console log out these values
326:48 going to console log out these values not a very good hello world function
326:49 not a very good hello world function doesn't even say hello world how can you
326:52 doesn't even say hello world how can you call it a hello world function if it
326:53 call it a hello world function if it doesn't say hello world I don't
326:55 doesn't say hello world I don't understand so we're going to go ahead
326:57 understand so we're going to go ahead and create this function usually doesn't
326:58 and create this function usually doesn't take this
327:01 take this long okay so uh here is our function
327:04 long okay so uh here is our function here is our code notice that this is
327:06 here is our code notice that this is Cloud9
327:08 Cloud9 okay and you can even move that over to
327:09 okay and you can even move that over to Cloud9 they didn't have this button here
327:11 Cloud9 they didn't have this button here before that's kind of cool I hit test
327:13 before that's kind of cool I hit test they used to have it up
327:16 they used to have it up here but I guess they wanted to make it
327:18 here but I guess they wanted to make it more obvious so they moved it down here
327:19 more obvious so they moved it down here which is nice so what I can do is hit
327:22 which is nice so what I can do is hit this oops my test it's going to send a
327:25 this oops my test it's going to send a payload here to the actual function uh
327:28 payload here to the actual function uh and it's going to tell us if it
327:36 worked okay so can I run my test go over here to test
327:38 here to test they changed it a bit so I guess I
327:39 they changed it a bit so I guess I created there it succeeded so I have my
327:41 created there it succeeded so I have my logs okay so it's it's going to Output
327:44 logs okay so it's it's going to Output those values there so there are the
327:46 those values there so there are the three values which basically is
327:48 three values which basically is nothing maybe you were supposed to set
327:50 nothing maybe you were supposed to set those an environment variable but you
327:51 those an environment variable but you can see you're just uploading uh some
327:53 can see you're just uploading uh some code right it's just a bit of code it's
327:56 code right it's just a bit of code it's not like a full app or anything so we
327:59 not like a full app or anything so we launched an E2 container we did a a um
328:03 launched an E2 container we did a a um sorry ec2 instance a container we did a
328:05 sorry ec2 instance a container we did a seress function there's other things
328:07 seress function there's other things like EKF yes but that is really really
328:09 like EKF yes but that is really really hard to set up okay cuz you'd have to
328:12 hard to set up okay cuz you'd have to use like kubernetes commands and stuff
328:14 use like kubernetes commands and stuff like that and my kubernetes knowledge is
328:16 like that and my kubernetes knowledge is always very poor um I'm just taking a
328:18 always very poor um I'm just taking a peek here to see if they've updated it
328:20 peek here to see if they've updated it so yeah you create the cluster but like
328:21 so yeah you create the cluster but like deploying it is forget it I'm just
328:24 deploying it is forget it I'm just trying to think if there's anything else
328:25 trying to think if there's anything else I kind of want to show you um no those
328:27 I kind of want to show you um no those are the main three I would say so I'm
328:30 are the main three I would say so I'm pretty happy with that um what I'm going
328:32 pretty happy with that um what I'm going to do is go and kill all these things so
328:35 to do is go and kill all these things so we're going to go over to Lambda okay
328:39 we're going to go over to Lambda okay and I'm going to go ahead and delete
328:42 and I'm going to go ahead and delete this as you saw ECS was the hardest and
328:45 this as you saw ECS was the hardest and no matter how many times I've built
328:47 no matter how many times I've built things on ECS and I've deployed full
328:49 things on ECS and I've deployed full things on ECS I can't remember I always
328:51 things on ECS I can't remember I always have so much trouble with task
328:53 have so much trouble with task definition files it's unbelievable we'll
328:55 definition files it's unbelievable we'll go over to our cluster
329:00 here and ECS cluster up here make sure you're
329:03 and ECS cluster up here make sure you're not in the fargate cluster I know I'm
329:05 not in the fargate cluster I know I'm clicking really fast but there's just so
329:06 clicking really fast but there's just so many things to click and I'm going to
329:08 many things to click and I'm going to click into this cluster we're going to
329:10 click into this cluster we're going to go hit edit because this is running an
329:11 go hit edit because this is running an ec2 instance right I need to destroy it
329:16 ec2 instance right I need to destroy it um it just took me back to the old one
329:18 um it just took me back to the old one here um I want to delete no I want to
329:20 here um I want to delete no I want to delete the cluster click back
329:23 delete the cluster click back here where do I delete it up
329:33 here here I can't checkbox anything uh how do I delete this do I
329:38 anything uh how do I delete this do I have to delete the task first maybe so
329:40 have to delete the task first maybe so we'll go here I mean it's already
329:42 we'll go here I mean it's already stopped there's nothing to
329:44 stopped there's nothing to do
329:54 edit uh huh account settings wow this is
329:56 settings wow this is confusing
329:58 confusing okay how to delete ECS
330:03 okay how to delete ECS cluster got to be kidding me I have to
330:05 cluster got to be kidding me I have to actually look this up so open the USS
330:07 actually look this up so open the USS console from navigation in the
330:08 console from navigation in the navigation choose clusters and the new
330:12 navigation choose clusters and the new turn off the E uh turn off new ECS
330:15 turn off the E uh turn off new ECS experience and choose the old console
330:16 experience and choose the old console the delete cluster workflow is not
330:18 the delete cluster workflow is not supported in the EC ECS console are you
330:21 supported in the EC ECS console are you serious then
330:23 serious then why why do you have it like why even let
330:26 why why do you have it like why even let people use the new experience if that
330:27 people use the new experience if that you don't have all the functionality
330:28 you don't have all the functionality there um oh I was going to give it
330:31 there um oh I was going to give it feedback but it didn't let me here it
330:32 feedback but it didn't let me here it says uh I need to delete an ECS cluster
330:45 no okay so I'm here there's my big ugly
330:48 here there's my big ugly cluster delete
330:50 cluster delete cluster okay so yeah it it's a struggle
330:54 cluster okay so yeah it it's a struggle okay like things are always changing on
330:56 okay like things are always changing on me but uh you just have to have
330:57 me but uh you just have to have confidence and if you've done it a few
330:59 confidence and if you've done it a few times you know that you can do it right
331:02 times you know that you can do it right um and that's one of the biggest
331:02 um and that's one of the biggest Hang-Ups to Cloud I would say so it's
331:04 Hang-Ups to Cloud I would say so it's going to take a few minutes apparently
331:06 going to take a few minutes apparently to delete the cluster as that is going
331:07 to delete the cluster as that is going let's let's go over to ec2 I didn't
331:10 let's let's go over to ec2 I didn't close it I kept this tab
331:13 close it I kept this tab open and uh there's our ec2
331:16 open and uh there's our ec2 instance we can go ahead and terminate
331:19 instance we can go ahead and terminate that instance terminate
331:28 okay and if this says it's terminating then we're in good shape Terminator is
331:29 then we're in good shape Terminator is shutting down that's fine and notice
331:32 shutting down that's fine and notice here that's the ECS instance just make
331:33 here that's the ECS instance just make sure you shut down the my server not the
331:36 sure you shut down the my server not the um the ECS instance cuz that's to stop
331:38 um the ECS instance cuz that's to stop and so this has already terminated but
331:40 and so this has already terminated but if we go back here notice that it says
331:42 if we go back here notice that it says that it's not done but
331:45 that it's not done but clearly clearly has shut
331:48 clearly clearly has shut down okay so I'm going to wait here for
331:51 down okay so I'm going to wait here for a bit even though I know it's been
331:53 a bit even though I know it's been deleted maybe it's deleting things like
331:54 deleted maybe it's deleting things like the autoscaling group so we go down
331:56 the autoscaling group so we go down below
331:57 below here right so that's probably what it's
331:59 here right so that's probably what it's doing it's probably trying to destroy
332:00 doing it's probably trying to destroy the auto scaling
332:01 the auto scaling group but it doesn't show any here so it
332:03 group but it doesn't show any here so it must have already destroyed
332:06 must have already destroyed it yeah so task Services delete so I'll
332:09 it yeah so task Services delete so I'll be back here in a bit but I know it's
332:11 be back here in a bit but I know it's safe it's already deleted but I'll see
332:12 safe it's already deleted but I'll see you back here in a bit okay so I waited
332:15 you back here in a bit okay so I waited literally a second and it's now deleted
332:17 literally a second and it's now deleted so we deleted our Lambda we deleted our
332:20 so we deleted our Lambda we deleted our oh did we delete our
332:22 oh did we delete our Lambda good
332:24 Lambda good question now I'm not really worried
332:26 question now I'm not really worried about the Lambda because I guess we did
332:29 about the Lambda because I guess we did but I'm not really worried about it
332:30 but I'm not really worried about it because um you know at when it rests at
332:35 because um you know at when it rests at idle it's not costing us anything where
332:37 idle it's not costing us anything where the EC s and the ec2 are backed by ec2
332:40 the EC s and the ec2 are backed by ec2 instances so we do have to shut those
332:42 instances so we do have to shut those down okay and again remember make sure
332:44 down okay and again remember make sure you're in the correct region sometimes
332:46 you're in the correct region sometimes that gets flipped over and then you
332:47 that gets flipped over and then you think those resources are gone but
332:49 think those resources are gone but they're actually not they're just
332:50 they're actually not they're just running in another region so uh there
332:53 running in another region so uh there you
332:54 you [Music]
332:57 [Music] go hey this is Andrew Brown from exam
332:59 go hey this is Andrew Brown from exam Pro and we're taking a look at higher
333:00 Pro and we're taking a look at higher performance Computing Services on AWS so
333:03 performance Computing Services on AWS so before we do we got to talk about the
333:04 before we do we got to talk about the Nitro system so this is a combination of
333:06 Nitro system so this is a combination of dedicated hardware and lightweight
333:08 dedicated hardware and lightweight hypervisor enabling faster Innovation
333:10 hypervisor enabling faster Innovation and enhanced security all new ec2
333:12 and enhanced security all new ec2 instant types use the nitro system and
333:14 instant types use the nitro system and the Nitro system is designed uh by AWS
333:17 the Nitro system is designed uh by AWS okay so this is made up of a few things
333:19 okay so this is made up of a few things we have Nitro cards these are
333:22 we have Nitro cards these are specialized cards for vpcs EBS instant
333:25 specialized cards for vpcs EBS instant storage and uh controller cards you have
333:27 storage and uh controller cards you have Nitro security chips these are
333:28 Nitro security chips these are integrated into the motherboard protects
333:30 integrated into the motherboard protects Hardware resources and we have the Nitro
333:32 Hardware resources and we have the Nitro hypervisor this is the lightweight hyper
333:34 hypervisor this is the lightweight hyper visor memory and CPU allocation bare
333:36 visor memory and CPU allocation bare metal like performance there's also uh
333:39 metal like performance there's also uh Nitro enclaves but you that's a bit out
333:41 Nitro enclaves but you that's a bit out of scope here but that's has to do with
333:43 of scope here but that's has to do with like ec2 isolation Okay uh then we have
333:45 like ec2 isolation Okay uh then we have bare metal instances so you can launch
333:47 bare metal instances so you can launch ec2 instances that have no hypervisor so
333:50 ec2 instances that have no hypervisor so you can run workloads directly on the
333:51 you can run workloads directly on the hardware for maximum performance and
333:53 hardware for maximum performance and control we have the M5 the R5 um ec2
333:57 control we have the M5 the R5 um ec2 instances that can run bare metal
333:59 instances that can run bare metal there's other ones I believe I've seen
334:00 there's other ones I believe I've seen as well but um you know if you are
334:03 as well but um you know if you are running bare metal you can just go
334:04 running bare metal you can just go investigate at the time of okay we have
334:06 investigate at the time of okay we have bottle rocket this is a Linux based open
334:08 bottle rocket this is a Linux based open source operating system that is purpose
334:10 source operating system that is purpose built by adus for running containers on
334:12 built by adus for running containers on VMS or bare metal hosts then uh let's
334:15 VMS or bare metal hosts then uh let's just Define what HBC is so it's a
334:17 just Define what HBC is so it's a cluster of a hundred of thousands of
334:20 cluster of a hundred of thousands of servers with fast connections between
334:21 servers with fast connections between each of them with the purpose of
334:23 each of them with the purpose of boosting Computing capacity so when you
334:25 boosting Computing capacity so when you need a supercomputer to perform
334:27 need a supercomputer to perform computational problems too large to run
334:29 computational problems too large to run on a standard computer or computers or
334:32 on a standard computer or computers or would take too long this is where you
334:34 would take too long this is where you know HBC comes into play one solution
334:37 know HBC comes into play one solution here is databus parallel cluster which
334:39 here is databus parallel cluster which is uh an adus supported open source
334:41 is uh an adus supported open source cluster management tool that makes it
334:43 cluster management tool that makes it easy for you to deploy and manage higher
334:45 easy for you to deploy and manage higher performance Computing HBC clusters on
334:47 performance Computing HBC clusters on AWS so hopefully that gives you an idea
334:50 AWS so hopefully that gives you an idea of this stuff
334:51 of this stuff [Music]
334:55 [Music] okay all right so let's take a look at
334:57 okay all right so let's take a look at HPC or high performance Computing on AWS
335:01 HPC or high performance Computing on AWS so HPC is for uh running large complex
335:03 so HPC is for uh running large complex simulations and deep learning workloads
335:05 simulations and deep learning workloads in the cloud with a complete Suite of
335:06 in the cloud with a complete Suite of high performance Computing product
335:08 high performance Computing product Services gains Insight faster and
335:10 Services gains Insight faster and quickly move from idea to Market blah
335:12 quickly move from idea to Market blah blah blah blah blah it's for ML or very
335:14 blah blah blah blah it's for ML or very complex scientific Computing stuff these
335:16 complex scientific Computing stuff these run at least on C5 NS okay and the way
335:21 run at least on C5 NS okay and the way it works is that you use this um CLI
335:23 it works is that you use this um CLI called P cluster or a parallel compute U
335:26 called P cluster or a parallel compute U or a parallel cluster stuff and so let's
335:29 or a parallel cluster stuff and so let's see if we can get this installed very
335:31 see if we can get this installed very easily um so what I'm going to
335:34 easily um so what I'm going to do is see how hard it is to install
335:37 do is see how hard it is to install stall now I don't recommend you running
335:39 stall now I don't recommend you running this cuz I don't know what it's going to
335:41 this cuz I don't know what it's going to cost me and if I make a misconfiguration
335:43 cost me and if I make a misconfiguration I don't want you to have that spend here
335:45 I don't want you to have that spend here but I don't think it's that dangerous so
335:47 but I don't think it's that dangerous so I'm going to go back over to us East one
335:49 I'm going to go back over to us East one here I'm going to open up
335:54 cloudshell and I'm going to give it a moment to load and so as that is loading
335:57 moment to load and so as that is loading let's take a look at how we would go
335:59 let's take a look at how we would go ahead and install this so install the
336:00 ahead and install this so install the current parallel um it was parallel I
336:03 current parallel um it was parallel I think we just copy that line
336:05 think we just copy that line okay and so we have to wait for our
336:08 okay and so we have to wait for our environment to spin up all right so once
336:10 environment to spin up all right so once it has spun up we will install it and
336:14 it has spun up we will install it and then we will jump over to this tutorial
336:18 then we will jump over to this tutorial here okay so we'll give this a
336:25 moment and after waiting a little while here it looks like our shell is ready it
336:27 here it looks like our shell is ready it looks like it's in bash um I'm just
336:29 looks like it's in bash um I'm just going to type in ads S3 LS that's a
336:31 going to type in ads S3 LS that's a sanity
336:33 sanity check okay and it works that's great so
336:37 check okay and it works that's great so go back over here and I'm going to go
336:38 go back over here and I'm going to go back up to install for
336:40 back up to install for Linux and what I need is that single
336:45 Linux and what I need is that single command where is
336:47 command where is it so I'm certain that we already have
336:51 it so I'm certain that we already have Linux or python installed but I just
336:55 Linux or python installed but I just want the command to install
336:57 want the command to install it we saw it a moment ago here I'm just
337:00 it we saw it a moment ago here I'm just going to back out till I can find
337:09 it uh one more there it is so it's under oh it's this link here and that's what I
337:10 oh it's this link here and that's what I talk about the documentations being
337:11 talk about the documentations being tricky sometimes you have to click these
337:13 tricky sometimes you have to click these uh headings here to find stuff so this
337:17 uh headings here to find stuff so this is the first time installing it so we'll
337:18 is the first time installing it so we'll grab that usually you're supposed to
337:20 grab that usually you're supposed to create in Virtual environments with
337:21 create in Virtual environments with python I don't care this is my cloud
337:23 python I don't care this is my cloud shell it doesn't matter to me so we're
337:25 shell it doesn't matter to me so we're going to go ahead and download that and
337:26 going to go ahead and download that and hopefully it is fast and it was super
337:28 hopefully it is fast and it was super fast which was really nice and so what
337:30 fast which was really nice and so what we'll do is go check out the pcluster
337:37 version okay and that looks fine to me I'm going to go down below here to run
337:39 I'm going to go down below here to run our first job um the returns the it
337:42 our first job um the returns the it gives outputs I don't think we need to
337:45 gives outputs I don't think we need to configure it because we already have our
337:46 configure it because we already have our CLI so what I'm going to do is go ahead
337:48 CLI so what I'm going to do is go ahead and create ourselves a new cluster um
337:51 and create ourselves a new cluster um beginning cluster creation configuration
337:53 beginning cluster creation configuration file config not found so I guess we do
337:55 file config not found so I guess we do have to configure
338:01 this configure and it's asking what region do
338:04 configure and it's asking what region do we want to be in um if I have us East
338:06 we want to be in um if I have us East one I would choose it for some reason
338:07 one I would choose it for some reason it's all the way for number 13 that is
338:09 it's all the way for number 13 that is not a lucky number but I'm going to
338:11 not a lucky number but I'm going to choose it anyway anyway no key pair
338:13 choose it anyway anyway no key pair found in Us East one region please
338:15 found in Us East one region please create one of the following um so create
338:18 create one of the following um so create an ec2 key
338:20 an ec2 key pairs uh no options found for ec2 key
338:22 pairs uh no options found for ec2 key pairs that's fine so what what I'll do
338:25 pairs that's fine so what what I'll do is go over
338:26 is go over here and we'll go over to
338:35 ec2 and we will go over to key pairs key pairs key pairs key pairs we'll create
338:36 pairs key pairs key pairs we'll create ourselves a new new one here so we'll
338:38 ourselves a new new one here so we'll say um HPC key pair or just my
338:44 say um HPC key pair or just my HPC so we know what it it's for we have
338:48 HPC so we know what it it's for we have putty or PM we're going to do pem
338:49 putty or PM we're going to do pem because we're on Linux we'll create that
338:53 because we're on Linux we'll create that and notice that it downloaded the pem
338:55 and notice that it downloaded the pem down down here and we're going to need
338:57 down down here and we're going to need that for later um and so what I'll
339:00 that for later um and so what I'll do as I'll type in P cluster here again
339:03 do as I'll type in P cluster here again configure we'll choose 13 we'll choose
339:05 configure we'll choose 13 we'll choose number one here
339:07 number one here uh allowed values for the scheduler I
339:10 uh allowed values for the scheduler I have no idea what these are uh let's
339:14 have no idea what these are uh let's choose the number one allowed values for
339:17 choose the number one allowed values for the operating system Amazon L 2 I know
339:19 the operating system Amazon L 2 I know what that is minimum cluster size one
339:23 what that is minimum cluster size one maximum cluster size two head notice
339:27 maximum cluster size two head notice instance oh T2 micro you can do that
339:30 instance oh T2 micro you can do that yeah let's do it I didn't know we could
339:32 yeah let's do it I didn't know we could do that enter compute type uh T2 micro
339:35 do that enter compute type uh T2 micro sure so I thought that we'd have to use
339:38 sure so I thought that we'd have to use a c5n but I guess apparently not
339:40 a c5n but I guess apparently not automate VPN uh VPC creation yes of
339:43 automate VPN uh VPC creation yes of course network configuration so allow
339:45 course network configuration so allow values for the network configuration uh
339:47 values for the network configuration uh head node in a public subnet and and
339:50 head node in a public subnet and and compute Fleet in a private subnet uh
339:52 compute Fleet in a private subnet uh head node in compute yeah we'll do it in
339:54 head node in compute yeah we'll do it in the both just to make our lives easier I
339:56 the both just to make our lives easier I don't care first one sounds more secure
339:58 don't care first one sounds more secure of course and so oh it's creating Cloud
340:01 of course and so oh it's creating Cloud information sack wow this is easy I
340:03 information sack wow this is easy I thought this was going to be super
340:04 thought this was going to be super painful okay so we'll go over here we'll
340:07 painful okay so we'll go over here we'll go take a look at what cloud formation's
340:09 go take a look at what cloud formation's doing all
340:10 doing all right now I don't care if we actually
340:13 right now I don't care if we actually run a task on here but it was just
340:14 run a task on here but it was just interesting to go through the process to
340:15 interesting to go through the process to see how hard it was and we will go look
340:19 see how hard it was and we will go look at what resources are being created so
340:21 at what resources are being created so it's creating an internet gateway so
340:23 it's creating an internet gateway so it's literally creating a isolate VPC
340:25 it's literally creating a isolate VPC for it which is totally fine I guess um
340:27 for it which is totally fine I guess um it's creating a subnet it's creating a
340:29 it's creating a subnet it's creating a route table refresh
340:32 route table refresh here um I'm not sure how much it wants
340:34 here um I'm not sure how much it wants to create here it just looks like VPC
340:37 to create here it just looks like VPC that's all it's creating I thought maybe
340:38 that's all it's creating I thought maybe the ec2 instances would show up here but
340:40 the ec2 instances would show up here but maybe it's going to launch that on a
340:43 maybe it's going to launch that on a need be
340:49 basis okay so that's all created oh now it's doing a VPC
340:52 it's doing a VPC Gateway I think VPC gateways cost money
340:55 Gateway I think VPC gateways cost money let's go take a look here VPC
341:04 pricing yeah there's a uh transfer fee so just be careful about that you know
341:07 so just be careful about that you know and you just can just watch along here
341:08 and you just can just watch along here you don't have to do
341:10 you don't have to do it default route depends on public so
341:14 it default route depends on public so now it's creating ec2
341:20 route I don't know what an ads ec2 route is I've never seen that before sometimes
341:23 is I've never seen that before sometimes what we can do is go into ec2 and then
341:25 what we can do is go into ec2 and then take a look on the left hand side you
341:27 take a look on the left hand side you see anything in here we don't know what
341:28 see anything in here we don't know what it is we just type in ec2 route cloud
341:30 it is we just type in ec2 route cloud formation sometimes cloud formation is
341:32 formation sometimes cloud formation is great for figuring out what a component
341:34 great for figuring out what a component is not all components are represented in
341:36 is not all components are represented in the um inabus um Management console so
341:40 the um inabus um Management console so specify route in the route table oh it's
341:41 specify route in the route table oh it's just a route
341:44 just a route okay and we'll go back here we'll
341:48 okay and we'll go back here we'll refresh so that is done is the stack
341:51 refresh so that is done is the stack done created complete good we'll go back
341:53 done created complete good we'll go back to our Cloud shell it says you can edit
341:56 to our Cloud shell it says you can edit your configuration file or simply do Etc
341:58 your configuration file or simply do Etc so now let's see if we can create the
342:00 so now let's see if we can create the cluster I assume this would create ec2
342:03 cluster I assume this would create ec2 instances so the job schedule you are
342:06 instances so the job schedule you are using is sge this is deprecated in
342:08 using is sge this is deprecated in future use parallel cluster well should
342:10 future use parallel cluster well should have told me okay there is a new version
342:13 have told me okay there is a new version of 301 parallel available I don't
342:16 of 301 parallel available I don't understand because I just installed it
342:18 understand because I just installed it right we'll go back to cloud formation
342:20 right we'll go back to cloud formation just going to probably create nested
342:22 just going to probably create nested Stacks which that's what I thought it
342:24 Stacks which that's what I thought it would do n Stacks means that it's
342:25 would do n Stacks means that it's Reliant so there's one main one and then
342:27 Reliant so there's one main one and then there's uh children stack so go here see
342:30 there's uh children stack so go here see what resources it's creating oh whole
342:33 what resources it's creating oh whole bunch of stuff wow so many things that
342:36 bunch of stuff wow so many things that sqs Q
342:38 sqs Q SNS uh network interface a Dynamo DB
342:42 SNS uh network interface a Dynamo DB table Yeah you you probably don't want
342:44 table Yeah you you probably don't want to run this you just want to watch me do
342:46 to run this you just want to watch me do it and then we go into here it's
342:48 it and then we go into here it's creating uh an ec2 volume so that's
342:51 creating uh an ec2 volume so that's going to be
342:52 going to be EBS and then here we
342:55 EBS and then here we have uh a log group I don't know why
342:58 have uh a log group I don't know why they separated those out seem very
343:02 they separated those out seem very necessary we are waiting on the elastic
343:05 necessary we are waiting on the elastic IP that always takes forever ever
343:07 IP that always takes forever ever creating elastic IP root instance
343:09 creating elastic IP root instance profile that is the IM Ru for
343:12 profile that is the IM Ru for it that didn't take too long these these
343:16 it that didn't take too long these these take a long time I I never know why
343:18 take a long time I I never know why create a roll it's really easy but
343:20 create a roll it's really easy but attaching an I am policy you're always
343:21 attaching an I am policy you're always waiting for
343:24 waiting for those um so I'm going to just stop it
343:28 those um so I'm going to just stop it here I'll be back in a second because I
343:29 here I'll be back in a second because I don't want to have to make you watch me
343:32 don't want to have to make you watch me stare at the screen here okay all right
343:35 stare at the screen here okay all right so after a really really long wait um
343:37 so after a really really long wait um and it always takes some time there it
343:39 and it always takes some time there it finally created I'm not sure what it's
343:41 finally created I'm not sure what it's made I mean we generally saw over here
343:44 made I mean we generally saw over here in the outputs but usually the cost that
343:46 in the outputs but usually the cost that I'm worried about is whatever it's
343:47 I'm worried about is whatever it's launching under uc2 it might not even
343:50 launching under uc2 it might not even have launched any servers here we're
343:52 have launched any servers here we're going to take a look here see if there's
343:53 going to take a look here see if there's anything so we have a master and a
343:56 anything so we have a master and a compute and they're T2 micros so seems
343:59 compute and they're T2 micros so seems pretty safe here um this compute is not
344:03 pretty safe here um this compute is not running yet so I'm assuming that this is
344:06 running yet so I'm assuming that this is like the machine machine that does the
344:07 like the machine machine that does the Computing and maybe if you had multiple
344:10 Computing and maybe if you had multiple machines here like that would be the
344:11 machines here like that would be the cluster where I could manage multiple
344:13 cluster where I could manage multiple computes um I'm not particularly sure
344:15 computes um I'm not particularly sure but let's just keep going through the
344:16 but let's just keep going through the tutorial and see what we can do the next
344:18 tutorial and see what we can do the next step is we need to get this pem key in
344:21 step is we need to get this pem key in our Cloud shell here so this I don't
344:23 our Cloud shell here so this I don't know where this is but what I'm going to
344:25 know where this is but what I'm going to do is I'm going to move it to my desktop
344:27 do is I'm going to move it to my desktop I'm doing this off screen by the way so
344:30 I'm doing this off screen by the way so I'm moving it to my desktop and then I'm
344:31 I'm moving it to my desktop and then I'm just going to go and upload the file
344:34 just going to go and upload the file okay and there it is so we'll say open
344:37 okay and there it is so we'll say open and we'll say
344:39 and we'll say upload and it's going to upload it here
344:42 upload and it's going to upload it here onto this machine and I believe this is
344:44 onto this machine and I believe this is on like uh I think this used as an EFS
344:46 on like uh I think this used as an EFS instance like if you're wondering where
344:48 instance like if you're wondering where the storage for cloud shell is if we go
344:51 the storage for cloud shell is if we go over here I think it's
344:52 over here I think it's EFS is
344:54 EFS is it h i don't know where it is okay maybe
344:57 it h i don't know where it is okay maybe it's just a maybe it's somewhere else
344:59 it's just a maybe it's somewhere else okay I can't remember where it is but
345:01 okay I can't remember where it is but anyway um so
345:03 anyway um so now it's created the cluster can I hit
345:06 now it's created the cluster can I hit enter here
345:08 enter here here okay can I create a tab like if I
345:14 here okay can I create a tab like if I quit this is it going to kill it it
345:16 quit this is it going to kill it it exited it which is I think it's fine I
345:18 exited it which is I think it's fine I don't think it stopped running and so
345:20 don't think it stopped running and so now if I do an LS there's my key and so
345:23 now if I do an LS there's my key and so we can go back to our instructions just
345:27 we can go back to our instructions just have too many tabs open here drag this
345:29 have too many tabs open here drag this all the way to the left here and so we
345:31 all the way to the left here and so we can try to use our key here to log in so
345:35 can try to use our key here to log in so what I'm going to do is
345:42 go here and we'll say my HPC pm and see if that works we'll say
345:45 if that works we'll say yes and permission denied it is required
345:47 yes and permission denied it is required your private key is not accessible
345:49 your private key is not accessible that's because we have to chamod
345:51 that's because we have to chamod it um um I never remember the command
345:56 it um um I never remember the command anymore because I rarely SSH into
345:58 anymore because I rarely SSH into machines but if we go to
346:00 machines but if we go to connect and we go to SSH client it'll
346:03 connect and we go to SSH client it'll tell us what we need to
346:05 tell us what we need to run chamad 400 okay so that's what we
346:08 run chamad 400 okay so that's what we need to do is we need to do a chamad 400
346:11 need to do is we need to do a chamad 400 just wanted to grab that code
346:13 just wanted to grab that code there okay and now if we hit up we
346:16 there okay and now if we hit up we should SSH into the machine there we
346:19 should SSH into the machine there we are we are in the
346:21 are we are in the instance we'll type in exit and so now
346:24 instance we'll type in exit and so now we want to run our job on this
346:28 we want to run our job on this machine and if we go back over to here I
346:32 machine and if we go back over to here I guess we can go create our first job so
346:35 guess we can go create our first job so I'm just doing this in VI
346:41 and I'm going to paste that in yep and I don't want the first line oh
346:44 yep and I don't want the first line oh okay that's perfect
346:46 okay that's perfect great right
346:49 great right quit oh there's no file name hold on
346:51 quit oh there's no file name hold on here so I need to name this file
346:54 here so I need to name this file something so I'm going to say job
346:57 something so I'm going to say job Dosh and we're going to paste that again
346:59 Dosh and we're going to paste that again here we'll say
347:01 here we'll say paste and I don't know if that's cut off
347:04 paste and I don't know if that's cut off yeah it is okay great is that one okay
347:12 I don't trust that the first line is there so what I'm going to
347:15 there so what I'm going to do is go back to our tutorial here it's
347:20 do is go back to our tutorial here it's shebang SL bin SL
347:23 shebang SL bin SL bash
347:25 bash uh this then that slash bin SL bash just
347:30 uh this then that slash bin SL bash just double check it looks good to me we're
347:32 double check it looks good to me we're going to quit that I'm just going to
347:34 going to quit that I'm just going to make sure that it is what it we said it
347:36 make sure that it is what it we said it is so job sh looks correct to me good
347:40 is so job sh looks correct to me good and so we'll try to run our job here so
347:41 and so we'll try to run our job here so I'm going to say
347:43 I'm going to say Q um job.
347:47 Q um job. sh
347:49 sh LS and I guess it really depends on what
347:51 LS and I guess it really depends on what we decided to use when we set up that
347:53 we decided to use when we set up that thing I can't remember what we choose as
347:55 thing I can't remember what we choose as our Q we do Q
347:58 our Q we do Q stat oh okay okay okay so I think the
348:01 stat oh okay okay okay so I think the thing is like you see how we have sge I
348:03 thing is like you see how we have sge I think that that's what we use to queue
348:05 think that that's what we use to queue up jobs and so we have to have that
348:06 up jobs and so we have to have that install probably so
348:10 install probably so install configure surid
348:26 Linux oh boy that looks like a lot of work so I don't think we need to do
348:29 work so I don't think we need to do anything further here but as far as
348:30 anything further here but as far as understand the idea is that you're
348:32 understand the idea is that you're choosing uh some kind of way to manage
348:35 choosing uh some kind of way to manage these and so I'm not sure what cu Q sub
348:37 these and so I'm not sure what cu Q sub is let's go look up what that is what is
348:39 is let's go look up what that is what is Q sub oh that is the sun grid engine
348:42 Q sub oh that is the sun grid engine okay so how do we installed
348:53 that um I'm just going to see if we can install it so I'm going to do I think
348:55 install it so I'm going to do I think this is using
348:56 this is using yum so if I do clear here
349:00 yum so if I do clear here clear yum install Q sub let's see if I
349:03 clear yum install Q sub let's see if I can do
349:05 can do it s kud yum install Q sub no package
349:09 it s kud yum install Q sub no package available Amazon Linux 2 Q sub because
349:14 available Amazon Linux 2 Q sub because that's probably what we're running in
349:15 that's probably what we're running in Cloud
349:25 shell Q sub doesn't tell us how to install
349:26 install it that's
349:28 it that's great so that's probably what it is and
349:31 great so that's probably what it is and so in order to use this we would have to
349:33 so in order to use this we would have to install that sun whatever whatever and
349:37 install that sun whatever whatever and then we go through we do Q sub it would
349:38 then we go through we do Q sub it would queue it up um we could do qat cat hello
349:41 queue it up um we could do qat cat hello and destroy it that's pretty much all we
349:43 and destroy it that's pretty much all we really need to know to understand this
349:45 really need to know to understand this um it would have been nice to queue up a
349:46 um it would have been nice to queue up a job and see it work but you know we're
349:48 job and see it work but you know we're getting kind of into a hairy territory
349:50 getting kind of into a hairy territory here and I think that we fundamentally
349:52 here and I think that we fundamentally understand how this does work so what
349:54 understand how this does work so what I'm going to do is I'm going to go here
349:55 I'm going to do is I'm going to go here I'm going to remove the job Dosh here
349:58 I'm going to remove the job Dosh here and I want to destroy this
350:00 and I want to destroy this cluster um so I'm going to do pcluster
350:05 cluster um so I'm going to do pcluster commands to figure out what all the
350:07 commands to figure out what all the commands are and there's probably a
350:10 commands are and there's probably a delete command so we'll go back up
350:17 here B cluster where is our crate so we'll say
350:25 delete okay and so what that's going to do is just tear down all the stuff
350:27 do is just tear down all the stuff now so if we go over to cloud formation
350:41 okay and it looks like it's destroying so yeah I'll see you here uh back in a
350:43 so yeah I'll see you here uh back in a bit when it's all destroyed okay all
350:45 bit when it's all destroyed okay all right so after a short little wait there
350:47 right so after a short little wait there it has destroyed it been so long that I
350:49 it has destroyed it been so long that I uh my connection vanished but just make
350:50 uh my connection vanished but just make sure if you did follow along for
350:52 sure if you did follow along for whatever reason uh you know make sure
350:54 whatever reason uh you know make sure that the stuff is deleted and it looks
350:56 that the stuff is deleted and it looks like it did not destroy uh this so I'm
350:58 like it did not destroy uh this so I'm going to go ahead and delete that that's
350:59 going to go ahead and delete that that's just VPC stuff so I'm not too worried
351:02 just VPC stuff so I'm not too worried about it I know that's going to roll
351:03 about it I know that's going to roll back no problem and so I'm going to
351:04 back no problem and so I'm going to consider this done so I'm going to make
351:06 consider this done so I'm going to make my way back to the Management console
351:08 my way back to the Management console close this stuff up and we are good to
351:11 close this stuff up and we are good to go uh for our next
351:13 go uh for our next [Music]
351:16 [Music] thing hey this is Andrew Brown from exam
351:18 thing hey this is Andrew Brown from exam Pro and we're taking a look at Edge and
351:20 Pro and we're taking a look at Edge and hybrid Computing Services so what is
351:23 hybrid Computing Services so what is Edge Computing when you push your
351:25 Edge Computing when you push your Computing workloads outside of your
351:26 Computing workloads outside of your network to run close to the destination
351:29 network to run close to the destination location uh so an example would be
351:31 location uh so an example would be pushing Computing to run on phones iot
351:33 pushing Computing to run on phones iot devices external servers not within your
351:35 devices external servers not within your Cloud Network
351:37 Cloud Network what is Hy Computing when you're able to
351:39 what is Hy Computing when you're able to run workloads on both your on premise
351:41 run workloads on both your on premise Data Center and the a uh VPC okay so we
351:45 Data Center and the a uh VPC okay so we have a few Services here starting with
351:47 have a few Services here starting with ads Outpost this is a physical rack of
351:49 ads Outpost this is a physical rack of servers that you can put into your data
351:51 servers that you can put into your data center ads Outpost allows you to use
351:53 center ads Outpost allows you to use adus API and services uh such as ec2 WR
351:57 adus API and services uh such as ec2 WR in your data center then we have adus
351:59 in your data center then we have adus wavelength this allows you to build and
352:01 wavelength this allows you to build and launch your applications in a telecom
352:03 launch your applications in a telecom data center by doing this your
352:04 data center by doing this your applications will have ultra low latency
352:06 applications will have ultra low latency since they will be pushed over the 5G
352:08 since they will be pushed over the 5G Network and be closest as possible to
352:10 Network and be closest as possible to the end user um so they've partnered
352:13 the end user um so they've partnered with things like Verizon Vodaphone uh
352:15 with things like Verizon Vodaphone uh business and a few others but those are
352:18 business and a few others but those are the two noticeable ones okay we have
352:20 the two noticeable ones okay we have VMware Cloud on AWS so this allows you
352:22 VMware Cloud on AWS so this allows you to manage on premise virtual machines
352:23 to manage on premise virtual machines using VMware uh within ec2 instances the
352:27 using VMware uh within ec2 instances the data center must uh be using uh VMware
352:30 data center must uh be using uh VMware for virtualization for this to work okay
352:33 for virtualization for this to work okay then we have AB local zones which are
352:34 then we have AB local zones which are Edge uh data centers Loc at outside of
352:37 Edge uh data centers Loc at outside of the adus region so you can use adus
352:39 the adus region so you can use adus closer to the edge destination when you
352:41 closer to the edge destination when you need faster Computing storage databases
352:43 need faster Computing storage databases in populated areas that are outside of
352:45 in populated areas that are outside of AWS region you could do this there's
352:47 AWS region you could do this there's some other Edge offerings on AWS that
352:49 some other Edge offerings on AWS that aren't listed here like sagemaker has
352:51 aren't listed here like sagemaker has what's called like Neo stage maker let
352:54 what's called like Neo stage maker let you do Edge Computing with um ml but I
352:57 you do Edge Computing with um ml but I mean this is good enough
352:59 mean this is good enough [Music]
353:02 [Music] okay all right so I wanted just to show
353:04 okay all right so I wanted just to show an example of edge computer
353:07 an example of edge computer because we didn't cover it in our
353:08 because we didn't cover it in our generic uh compute and so there's a
353:10 generic uh compute and so there's a variety of services that allow you to do
353:11 variety of services that allow you to do Edge Computing like wavelength and so um
353:14 Edge Computing like wavelength and so um I've never actually launched wavelength
353:16 I've never actually launched wavelength before and I think that uh you have to
353:19 before and I think that uh you have to request it so if I go over to support
353:22 request it so if I go over to support here again I've never done this before
353:23 here again I've never done this before but I'm sure we can figure it out pretty
353:25 but I'm sure we can figure it out pretty easily I feel that if we create a
353:33 case um maybe it's like service limit we type in wavelength here NOP not
353:36 limit we type in wavelength here NOP not there
353:38 there so how do we get wavelength wavelength
353:40 so how do we get wavelength wavelength AB us
353:57 here okay how do I use wavelength AWS
354:05 whoops and sometimes what I'll do is go to the docs here here opt into
354:07 to the docs here here opt into wavelength zones before you specify
354:10 wavelength zones before you specify wavelength zone for resource or service
354:11 wavelength zone for resource or service you must opt into it to opt in go to the
354:14 you must opt into it to opt in go to the Adis console okay so we'll go to
354:24 ec2 and then it's going to say use the region selector in the navigation bar to
354:25 region selector in the navigation bar to select the region which supports your
354:33 wavelength so I know that there's stuff in uh Us West because of Las Vegas right
354:38 in uh Us West because of Las Vegas right or not Las Vegas but Los Angeles right
354:40 or not Las Vegas but Los Angeles right so if we go over here there's definitely
354:42 so if we go over here there's definitely that over there on the navigation pane
354:44 that over there on the navigation pane on the ec2 dashboard under account
354:46 on the ec2 dashboard under account attributes select
354:53 zones okay do we see zones here
354:56 here zones oh ec2
355:00 zones oh ec2 dashboard zones let's go check here
355:02 dashboard zones let's go check here again on the navigation pane choose ec2
355:05 again on the navigation pane choose ec2 dashboard we are there
355:12 right and under account attributes uh settings account
355:15 settings account attributes oh over here okay oh it's
355:18 attributes oh over here okay oh it's here
355:19 here zones and so there we have two zones and
355:23 zones and so there we have two zones and we see switch regions to make uh zones a
355:26 we see switch regions to make uh zones a different
355:28 different region okay so under Zone groups turn on
355:33 region okay so under Zone groups turn on wavelengths Zone groups
355:37 wavelengths Zone groups okay nothing there so I'm just going to
355:38 okay nothing there so I'm just going to switch over to another one
355:40 switch over to another one here maybe
355:43 here maybe Oregon maybe uswest 2 oh look at all the
355:46 Oregon maybe uswest 2 oh look at all the stuff we have here I've never seen these
355:49 stuff we have here I've never seen these before okay so here is the wavelength
355:52 before okay so here is the wavelength one so that is the Los Angeles
355:55 one so that is the Los Angeles one we can go ahead and enable this
355:57 one we can go ahead and enable this before disabling The Zone group I'm not
355:59 before disabling The Zone group I'm not sure what zone groups cost so wavelength
356:03 sure what zone groups cost so wavelength Zone pricing again you might just want
356:06 Zone pricing again you might just want to watch me do this because it might
356:07 to watch me do this because it might cost money um and so you might not want
356:11 cost money um and so you might not want to have to spend for
356:13 to have to spend for that
356:20 pricing uh provides mobile networks wavelengths are available across
356:22 wavelengths are available across whatever learn about the data transfers
356:25 whatever learn about the data transfers in price about ec2
356:27 in price about ec2 instances okay so what's the
356:29 instances okay so what's the price if we go into
356:36 here all right so what I'm going to suggest to use don't do this but I'm
356:37 suggest to use don't do this but I'm going to do it and we're just going to
356:39 going to do it and we're just going to see what the experience is like okay so
356:41 see what the experience is like okay so I'm going to update my zone so now I
356:43 I'm going to update my zone so now I have this one we'll say enable I'm going
356:46 have this one we'll say enable I'm going to assume that it has to do with like
356:47 to assume that it has to do with like data transfer
356:49 data transfer costs okay and uh we're going to go over
356:52 costs okay and uh we're going to go over to
356:57 ec2 and we're going to go over to instances
356:58 instances here we're going to launch an instance
357:01 here we're going to launch an instance and we're going to see if we we have
357:03 and we're going to see if we we have that available now I don't know if we're
357:04 that available now I don't know if we're restricted to particular
357:06 restricted to particular uh instances I assume we can launch a
357:08 uh instances I assume we can launch a Linux machine it' be really weird if we
357:10 Linux machine it' be really weird if we couldn't you know we'll go over to
357:12 couldn't you know we'll go over to configuration and what we want to do is
357:16 configuration and what we want to do is choose uh the zone so how do we do it so
357:19 choose uh the zone so how do we do it so once it's turned on confirmation confirm
357:22 once it's turned on confirmation confirm it configure your network so create a
357:24 it configure your network so create a VPC create a carrier Gateway so you can
357:26 VPC create a carrier Gateway so you can connect your resources into the VPC to
357:28 connect your resources into the VPC to the telecommunication Network holy
357:31 the telecommunication Network holy smokes This is
357:32 smokes This is complicated but it's just kind of
357:34 complicated but it's just kind of interesting to see like the process
357:35 interesting to see like the process right
357:37 right you know it's not for our use case but
357:39 you know it's not for our use case but uh carrier Gateway
357:41 uh carrier Gateway right and as I do this I always check up
357:43 right and as I do this I always check up all the costs here so I say carrier
357:46 all the costs here so I say carrier Gateway pricing AWS because maybe that's
357:49 Gateway pricing AWS because maybe that's where the price
357:52 where the price is okay if you don't get a pricing page
357:54 is okay if you don't get a pricing page then usually that's hard to say
357:56 then usually that's hard to say logically isolated virtual
357:59 logically isolated virtual networks again it's not telling me
358:02 networks again it's not telling me what um to use carrier you need to opt
358:05 what um to use carrier you need to opt into at least one one wavelength Zone
358:07 into at least one one wavelength Zone but I did
358:09 but I did right and sometimes what happens is that
358:11 right and sometimes what happens is that it just takes time for the optin to to
358:15 it just takes time for the optin to to go so go here manage the Zone settings
358:19 go so go here manage the Zone settings that was a lot easier way so we have one
358:20 that was a lot easier way so we have one it's we're opted in right here
358:24 it's we're opted in right here okay
358:27 okay and okay we'll we'll go here again if
358:29 and okay we'll we'll go here again if that one didn't work
358:32 that one didn't work um we can try so I guess these are all
358:36 um we can try so I guess these are all the regions Denver things like
358:39 the regions Denver things like that can I opt opt into this one opt
358:49 in it's not super exciting like all we're going to do is launch an ec2
358:50 we're going to do is launch an ec2 instance but you know we'll go through
358:51 instance but you know we'll go through the process here a
358:53 the process here a bit and I don't know why I can't create
358:55 bit and I don't know why I can't create one so we'll go back over to the
358:57 one so we'll go back over to the instructions
358:58 instructions here crate so you can connect so create
359:00 here crate so you can connect so create a route table using the VPC to the route
359:02 a route table using the VPC to the route table so I think that's as far as we're
359:04 table so I think that's as far as we're going to get here because I'm not seeing
359:05 going to get here because I'm not seeing any options here but the idea was that
359:08 any options here but the idea was that we would have to create a carrier
359:09 we would have to create a carrier Gateway we'd update our route tables and
359:11 Gateway we'd update our route tables and all we would be doing is launching an
359:13 all we would be doing is launching an ec2 instance so you know it's no
359:15 ec2 instance so you know it's no different than launching it you just
359:17 different than launching it you just choose a different subnet so I think
359:19 choose a different subnet so I think you'd have to create a subnet for that
359:20 you'd have to create a subnet for that zone and launch it in there and that
359:22 zone and launch it in there and that would be Edge Computing another example
359:24 would be Edge Computing another example of edge Computing would be something
359:26 of edge Computing would be something like via cloudfront which we have uh
359:28 like via cloudfront which we have uh these um Edge functions or not Edge
359:32 these um Edge functions or not Edge functions yeah functions here and so
359:34 functions yeah functions here and so these are functions that are deploy to
359:36 these are functions that are deploy to cloudfront
359:37 cloudfront so my cloudfront
359:45 function and these would be deployed to um Edge locations right and all you can
359:48 um Edge locations right and all you can use here is Javascript so here's an
359:50 use here is Javascript so here's an example of one and um I'm fine with this
359:55 example of one and um I'm fine with this development live this function is not
359:57 development live this function is not published we'll go to
359:59 published we'll go to test test the function it's
360:02 test test the function it's good publish publish that function and
360:05 good publish publish that function and so
360:06 so the advantage of this is that you know
360:08 the advantage of this is that you know if you have functions that are in it was
360:11 if you have functions that are in it was Lambda there's a chance of cold start um
360:14 Lambda there's a chance of cold start um whereas if they're deployed on the edge
360:16 whereas if they're deployed on the edge here there's still probably a cold start
360:17 here there's still probably a cold start but it's going to be a lot faster
360:19 but it's going to be a lot faster because it's a lot closer to the edge
360:21 because it's a lot closer to the edge location so um you know it's just a
360:24 location so um you know it's just a different uh different cases but yeah
360:26 different uh different cases but yeah there was one where we're launching ec2
360:28 there was one where we're launching ec2 workload into wavelength which we
360:30 workload into wavelength which we couldn't complete which is totally fine
360:31 couldn't complete which is totally fine and then we have these functions on the
360:33 and then we have these functions on the edge there's other uh Edge Computing ser
360:36 edge there's other uh Edge Computing ser like within Sage maker you can deploy I
360:38 like within Sage maker you can deploy I think it's called like Neo sagemaker and
360:40 think it's called like Neo sagemaker and then for iot devices those are obviously
360:42 then for iot devices those are obviously on the edge so you can deploy those as
360:44 on the edge so you can deploy those as well uh but generally that gives you an
360:46 well uh but generally that gives you an idea of edge Computing
360:47 idea of edge Computing [Music]
360:51 [Music] okay hey it's Andrew Brown from exam Pro
360:53 okay hey it's Andrew Brown from exam Pro and we're looking at cost and capacity
360:55 and we're looking at cost and capacity management Computing Services so before
360:57 management Computing Services so before we talk about them let's define what is
360:59 we talk about them let's define what is cost management so this is how do we
361:01 cost management so this is how do we save money and we have capacity
361:03 save money and we have capacity management how do we meet the demand of
361:05 management how do we meet the demand of traffic and use usages through adding or
361:07 traffic and use usages through adding or upgrading servers so let's get to it the
361:09 upgrading servers so let's get to it the first are the different types of EC
361:12 first are the different types of EC pricing models so you got spot instances
361:14 pricing models so you got spot instances reserved instances saving plans these
361:17 reserved instances saving plans these are ways to save on Computing by paying
361:19 are ways to save on Computing by paying up in full or partially or by committing
361:22 up in full or partially or by committing to a yearly contract or multi-year
361:24 to a yearly contract or multi-year contract uh or by being flexible about
361:26 contract uh or by being flexible about the availability Interruption to
361:28 the availability Interruption to Computing Services we have adus batch so
361:30 Computing Services we have adus batch so this plans schedules and executes your
361:32 this plans schedules and executes your batch computer workloads across the full
361:34 batch computer workloads across the full range of adist computing Services which
361:36 range of adist computing Services which can utilize spot instances to save money
361:39 can utilize spot instances to save money we have aist compute Optimizer so
361:42 we have aist compute Optimizer so suggest how to reduce cost and improve
361:44 suggest how to reduce cost and improve performance by using machine learning to
361:46 performance by using machine learning to analyze uh you uh your previous usage
361:49 analyze uh you uh your previous usage history we have ec2 auto scan groups so
361:52 history we have ec2 auto scan groups so asgs these automatically add or remove
361:54 asgs these automatically add or remove ec2 servers to meet the current demand
361:57 ec2 servers to meet the current demand all of traffic they will save you money
362:00 all of traffic they will save you money and meet capacity since you only run the
362:02 and meet capacity since you only run the amount of servers you need then we have
362:04 amount of servers you need then we have elb so elastic load balcer so this
362:07 elb so elastic load balcer so this distributes traffic to multiple
362:08 distributes traffic to multiple instances we can reroute traffic from
362:10 instances we can reroute traffic from unhealthy instances to healthy instances
362:13 unhealthy instances to healthy instances and can Route traffic to ec2 instances
362:15 and can Route traffic to ec2 instances running in different availability zones
362:18 running in different availability zones and then we have elastic beant stock
362:19 and then we have elastic beant stock here which is easy for deploying web
362:21 here which is easy for deploying web applications without developers having
362:23 applications without developers having to worry about setting up and
362:25 to worry about setting up and understanding the underlying ad Services
362:27 understanding the underlying ad Services similar to Heroku it's a platform as a
362:29 similar to Heroku it's a platform as a service so not all of these are about
362:31 service so not all of these are about cost some of them are about capacity
362:33 cost some of them are about capacity management like elb um but yeah yeah
362:36 management like elb um but yeah yeah there you
362:36 there you [Music]
362:40 [Music] go hey this is Andrew Brown from exam
362:42 go hey this is Andrew Brown from exam Pro and we are looking at the types of
362:44 Pro and we are looking at the types of storage services and no matter what
362:46 storage services and no matter what cloud service provider you're using
362:47 cloud service provider you're using they're usually broken down into these
362:48 they're usually broken down into these three where we have blocks file and um
362:52 three where we have blocks file and um uh object okay so let's take a look at
362:54 uh object okay so let's take a look at the first so this is going to be for
362:56 the first so this is going to be for Block storage so for AWS this is called
362:58 Block storage so for AWS this is called elastic Block store data is split into
363:00 elastic Block store data is split into evenly split blocks directly accessed by
363:03 evenly split blocks directly accessed by the operating system and supports only a
363:05 the operating system and supports only a single right volume so imagine you have
363:07 single right volume so imagine you have an application over here and that
363:10 an application over here and that application is using a virtual machine
363:12 application is using a virtual machine that has a specific operating system and
363:14 that has a specific operating system and then it has a drive mounted to it uh
363:17 then it has a drive mounted to it uh could be using FC or uh scuzzy here um
363:20 could be using FC or uh scuzzy here um but the idea here is when you need a
363:22 but the idea here is when you need a virtual Drive attached to your VM is
363:23 virtual Drive attached to your VM is when you're going to be using block okay
363:26 when you're going to be using block okay the next one here is for um file or it's
363:29 the next one here is for um file or it's just basically a file system so this is
363:31 just basically a file system so this is Aus elastic file storage so the file is
363:33 Aus elastic file storage so the file is stored with data and metadata
363:36 stored with data and metadata multiple connections via a network share
363:38 multiple connections via a network share supports multiple reads writes locks the
363:41 supports multiple reads writes locks the file so over here uh we could have an
363:44 file so over here uh we could have an application but it doesn't necessarily
363:45 application but it doesn't necessarily have to be an application and so it's
363:47 have to be an application and so it's using NASA exports as the means to uh
363:50 using NASA exports as the means to uh communicate and so the protocols here
363:51 communicate and so the protocols here can be NFS or SMB which are very common
363:55 can be NFS or SMB which are very common uh file system protocols and so the idea
363:58 uh file system protocols and so the idea here is when you need a file share where
364:00 here is when you need a file share where multiple users or VMS need to access the
364:02 multiple users or VMS need to access the same drive so this is pretty common
364:04 same drive so this is pretty common where you might have multiple virtual
364:05 where you might have multiple virtual machines and you just want to act as
364:07 machines and you just want to act as like one uh Drive uh one example that
364:10 like one uh Drive uh one example that could be like let's say you're running a
364:11 could be like let's say you're running a Minecraft server you're only allowed to
364:12 Minecraft server you're only allowed to have one world on a particular single
364:14 have one world on a particular single drive but you want to be able to have
364:16 drive but you want to be able to have multiple virtual machines to maximize
364:18 multiple virtual machines to maximize that compute that'd be a case for that
364:20 that compute that'd be a case for that um so there you go then the last one
364:22 um so there you go then the last one here is like object storage and so fors
364:25 here is like object storage and so fors this is called Amazon simple storage
364:27 this is called Amazon simple storage service or also known as S3 so object is
364:30 service or also known as S3 so object is stored with data metadata and a unique
364:32 stored with data metadata and a unique ID scales with limmited uh uh with
364:35 ID scales with limmited uh uh with limited no file limit or storage limit
364:39 limited no file limit or storage limit so there's really very there's very
364:41 so there's really very there's very little limit to this it just basically
364:43 little limit to this it just basically scales up supports multiple reads and
364:45 scales up supports multiple reads and wrs so there are no locks and so the
364:47 wrs so there are no locks and so the protocol here we're going to be using
364:49 protocol here we're going to be using htps and API so when you just want to
364:52 htps and API so when you just want to upload files and not have to worry about
364:54 upload files and not have to worry about the underlying infrastructure not
364:55 the underlying infrastructure not intended for high uh I op so input and
364:58 intended for high uh I op so input and outputs per seconds okay so depending on
365:00 outputs per seconds okay so depending on how fast you have to do your read and
365:02 how fast you have to do your read and wrs are going to determine uh you know
365:04 wrs are going to determine uh you know whether you're going uh this direction
365:06 whether you're going uh this direction or the other way um or you know how many
365:09 or the other way um or you know how many need to actually connect at at the same
365:11 need to actually connect at at the same time and whether it has to be connected
365:12 time and whether it has to be connected as a mount drive to the virtual machine
365:15 as a mount drive to the virtual machine [Music]
365:18 [Music] okay hey it's Andrew Brown from exam Pro
365:21 okay hey it's Andrew Brown from exam Pro and we're going to do a short
365:22 and we're going to do a short introduction into S3 because on the
365:24 introduction into S3 because on the certified Cloud practitioner they ask
365:25 certified Cloud practitioner they ask you a little bit more than they used to
365:28 you a little bit more than they used to and so we need to be a bit familiar with
365:29 and so we need to be a bit familiar with S3 because it is um at least I think
365:32 S3 because it is um at least I think that Abus considers its Flagship uh
365:35 that Abus considers its Flagship uh storage
365:36 storage service and it really is one of the
365:38 service and it really is one of the earliest Services it was the second one
365:39 earliest Services it was the second one ever launched okay so what is object
365:42 ever launched okay so what is object storage or object based storage so data
365:44 storage or object based storage so data storage architecture that manages data
365:46 storage architecture that manages data as objects as opposed to other storage
365:48 as objects as opposed to other storage architectures so file systems where uh
365:50 architectures so file systems where uh these are others right so which manages
365:52 these are others right so which manages data as files and a hierarchy and block
365:55 data as files and a hierarchy and block storage which manages data as blocks
365:56 storage which manages data as blocks with with ins sectors and tracks that
365:58 with with ins sectors and tracks that get stored on an actual uh drive and so
366:01 get stored on an actual uh drive and so uh the idea here is we have S3 which
366:03 uh the idea here is we have S3 which provides basically unlimited storage you
366:05 provides basically unlimited storage you don't need to think about the underlying
366:07 don't need to think about the underlying infrastructure the S3 console provides
366:09 infrastructure the S3 console provides interface for you to upload and access
366:10 interface for you to upload and access your data okay so we have the concept of
366:12 your data okay so we have the concept of S3 object so objects contain your data
366:16 S3 object so objects contain your data they are like files but objects may
366:18 they are like files but objects may consist of a key this is the name of the
366:20 consist of a key this is the name of the object a value the data itself made up
366:22 object a value the data itself made up of a sequence of bytes the version ID
366:24 of a sequence of bytes the version ID when versioning enabled the version of
366:26 when versioning enabled the version of the object metadata additional
366:28 the object metadata additional information attached to the object and
366:30 information attached to the object and then you have your S3 buckets so buckets
366:31 then you have your S3 buckets so buckets hold objects buckets can also have
366:33 hold objects buckets can also have folders which in turn hold objects S3 is
366:36 folders which in turn hold objects S3 is a universal name space so bucket names
366:38 a universal name space so bucket names must be unique it's like having a domain
366:40 must be unique it's like having a domain name okay and one other interesting
366:42 name okay and one other interesting thing is an individual object can be
366:44 thing is an individual object can be between Z bytes and up to 5 terabytes so
366:48 between Z bytes and up to 5 terabytes so you have unlimited storage but you can't
366:49 you have unlimited storage but you can't have uh files of uh incredible size uh I
366:53 have uh files of uh incredible size uh I mean 5 terabytes is a lot but nothing
366:55 mean 5 terabytes is a lot but nothing beyond that for a single file but just
366:57 beyond that for a single file but just understand that you can actually have a
366:59 understand that you can actually have a zerob byte file uh and for like
367:01 zerob byte file uh and for like associate certifications that can be a
367:04 associate certifications that can be a an actual question so that's why it's
367:06 an actual question so that's why it's [Music]
367:10 [Music] there all right let's take a look at S3
367:12 there all right let's take a look at S3 storage classes um and so for the
367:14 storage classes um and so for the certified Cloud practitioner we need to
367:16 certified Cloud practitioner we need to know generally what these are for
367:17 know generally what these are for associate levels we need more detail
367:19 associate levels we need more detail than we have here but let's get through
367:20 than we have here but let's get through it so adus offers a range of S3 storage
367:23 it so adus offers a range of S3 storage classes that trade retrieval time
367:25 classes that trade retrieval time accessibility durability for cheaper
367:27 accessibility durability for cheaper storage and so the farther down we go
367:29 storage and so the farther down we go here the more cost effective uh it
367:31 here the more cost effective uh it should get uh pending uh you know
367:34 should get uh pending uh you know certain conditions okay so when you put
367:36 certain conditions okay so when you put something into S3 it's going to go into
367:37 something into S3 it's going to go into the standard uh tier the default tier
367:40 the standard uh tier the default tier here and this is uh incredibly fast it
367:43 here and this is uh incredibly fast it has
367:43 has 99.99% availability 119 durability and
367:47 99.99% availability 119 durability and it's replicated across 3 azs and so uh
367:51 it's replicated across 3 azs and so uh you know we have this cheaper meter here
367:53 you know we have this cheaper meter here here on the left hand side and that
367:55 here on the left hand side and that would apply this is very expensive and
367:56 would apply this is very expensive and it's not actually expensive but it is
367:58 it's not actually expensive but it is expensive at scale when you can uh
368:00 expensive at scale when you can uh better optimize it with these other
368:01 better optimize it with these other tiers so just understand that um then
368:04 tiers so just understand that um then you have the S3 intellig tiering so this
368:06 you have the S3 intellig tiering so this uses ml to analyze objects and usage and
368:08 uses ml to analyze objects and usage and determine the appropriate storage class
368:10 determine the appropriate storage class dat is moveed to the most cost effective
368:12 dat is moveed to the most cost effective access tier without any performance
368:14 access tier without any performance impact or added overhead then you have
368:16 impact or added overhead then you have S3 standard IIA which stands for
368:18 S3 standard IIA which stands for infrequent access this is just as fast
368:21 infrequent access this is just as fast as S3 standard but it's cheaper if you
368:23 as S3 standard but it's cheaper if you access the files less than once a month
368:25 access the files less than once a month there's going to be an additional
368:26 there's going to be an additional retrieval fee applied so if you do try
368:29 retrieval fee applied so if you do try to retrieve data as frequently as S3
368:31 to retrieve data as frequently as S3 standard it's going to actually end up
368:32 standard it's going to actually end up costing you more so you don't want to do
368:34 costing you more so you don't want to do that okay then you have S3 one zone IIA
368:38 that okay then you have S3 one zone IIA so as it says it's running in a single
368:40 so as it says it's running in a single zone so it's as fast as S3 standard but
368:42 zone so it's as fast as S3 standard but it's going to have lowered availability
368:44 it's going to have lowered availability but you're going to save money okay
368:46 but you're going to save money okay there is one caveat though your data
368:47 there is one caveat though your data could get destroyed because it's
368:49 could get destroyed because it's remaining in a single uh a so if that a
368:52 remaining in a single uh a so if that a or data centers um suffer a catastrophe
368:55 or data centers um suffer a catastrophe you're not going to have a duplicate of
368:57 you're not going to have a duplicate of your data to retrieve it okay um and
369:00 your data to retrieve it okay um and then you have S3 Glacier so for
369:01 then you have S3 Glacier so for long-term clothed storage retrieval of
369:03 long-term clothed storage retrieval of data can take minutes to hour
369:05 data can take minutes to hour but it's very very very cheap and then
369:08 but it's very very very cheap and then you have S3 Glacier uh deep archive
369:10 you have S3 Glacier uh deep archive which is the lowest cost storage class
369:12 which is the lowest cost storage class but the data retrieval is 12 hours and
369:15 but the data retrieval is 12 hours and so you know um all of these here to here
369:18 so you know um all of these here to here these are all going to be in the same uh
369:19 these are all going to be in the same uh a S3 console or Amazon S3 console S3
369:23 a S3 console or Amazon S3 console S3 Glacier is basically like its own
369:24 Glacier is basically like its own service but it's part of S3 so kind of
369:27 service but it's part of S3 so kind of lives in this weird State there's one
369:28 lives in this weird State there's one here that we didn't have on the list
369:30 here that we didn't have on the list here which is S3 outputs because it has
369:31 here which is S3 outputs because it has its own storage class and doesn't
369:33 its own storage class and doesn't exactly fit well into um this kind of
369:36 exactly fit well into um this kind of linear cheaper uh thing here
369:39 linear cheaper uh thing here [Music]
369:43 [Music] okay hey it's Andrew Brown from exam Pro
369:45 okay hey it's Andrew Brown from exam Pro and we are taking a look at the ous snow
369:47 and we are taking a look at the ous snow family so this is storage and compute
369:49 family so this is storage and compute devices used to physically move data in
369:51 devices used to physically move data in or out of the cloud when moving data
369:53 or out of the cloud when moving data over the Internet or Prov private
369:55 over the Internet or Prov private connection that is too slow difficult or
369:57 connection that is too slow difficult or costly so we have snow cone snowball
370:00 costly so we have snow cone snowball Edge and snow mobile and so there
370:03 Edge and snow mobile and so there originally was just snowball and and
370:05 originally was just snowball and and then they came out with snowball Edge uh
370:07 then they came out with snowball Edge uh and Edge introduced Edge Computing
370:09 and Edge introduced Edge Computing that's why there's Edge in the name but
370:11 that's why there's Edge in the name but pretty much all of these devices have
370:13 pretty much all of these devices have Edge Computing uh and they do
370:15 Edge Computing uh and they do individually come with some variant so
370:17 individually come with some variant so with the snowball a snow cone it comes
370:18 with the snowball a snow cone it comes in two sizes where it has 8 terabyt of
370:20 in two sizes where it has 8 terabyt of usable storage and then there's one with
370:22 usable storage and then there's one with 14 terabytes of usable storage for
370:25 14 terabytes of usable storage for snowball Edge it technically has like
370:27 snowball Edge it technically has like four versions but I'm going to break it
370:28 four versions but I'm going to break it down to two for you we have storage
370:30 down to two for you we have storage optimized where we have 80 terab of you
370:33 optimized where we have 80 terab of you um uh of usable storage there and then
370:37 um uh of usable storage there and then compute optimize
370:39 compute optimize 3.9.5 terab and even though it's not
370:41 3.9.5 terab and even though it's not here you get a lot of vcpus and
370:43 here you get a lot of vcpus and increased memory which could be very
370:45 increased memory which could be very important if you need to do Edge
370:46 important if you need to do Edge Computing before you send that over to
370:48 Computing before you send that over to AWS and then last here we have
370:50 AWS and then last here we have snowmobile which can store up to 100
370:53 snowmobile which can store up to 100 pedabytes of storage um in the uh
370:57 pedabytes of storage um in the uh Associates I cover these in a lot more
370:59 Associates I cover these in a lot more detail because there's so much more
371:00 detail because there's so much more about these like the security of them
371:02 about these like the security of them how they're tamper proof like how they
371:04 how they're tamper proof like how they have networking buil in the the
371:06 have networking buil in the the connection to them but you know for this
371:07 connection to them but you know for this exam that's just too much information um
371:10 exam that's just too much information um you just need to know that there are
371:11 you just need to know that there are three uh three ones in the family and
371:13 three uh three ones in the family and generally what the sizes are and that
371:15 generally what the sizes are and that they're going to be all placed into
371:16 they're going to be all placed into Amazon S3 what's interesting is that you
371:19 Amazon S3 what's interesting is that you know snowmobile only does 100 pedabytes
371:21 know snowmobile only does 100 pedabytes but adabs markets it as you can move
371:24 but adabs markets it as you can move exabytes of of um content because you
371:26 exabytes of of um content because you can order more than one of these devices
371:28 can order more than one of these devices so they'll market it saying like
371:30 so they'll market it saying like snowball EDG is when you want to move
371:32 snowball EDG is when you want to move pedabytes of data and snowball mobile is
371:34 pedabytes of data and snowball mobile is when you want to move exabytes but you
371:36 when you want to move exabytes but you can see that a single thing isn't in the
371:38 can see that a single thing isn't in the exabyte it's just in the petabyte
371:40 exabyte it's just in the petabyte [Music]
371:44 [Music] okay hey this is Andrew Brown from exam
371:46 okay hey this is Andrew Brown from exam Pro and we are taking a look at all the
371:48 Pro and we are taking a look at all the itaba storage services in brief here so
371:50 itaba storage services in brief here so let's get to it so the first is simple
371:52 let's get to it so the first is simple storage service S3 this is a seress
371:54 storage service S3 this is a seress object storage service you can upload
371:56 object storage service you can upload very large files and an unlimited amount
371:58 very large files and an unlimited amount of files you pay for what you store you
372:00 of files you pay for what you store you don't worry about the unine file system
372:01 don't worry about the unine file system or upgrading the dis size you have S3
372:03 or upgrading the dis size you have S3 Glacier this is a cold storage service
372:05 Glacier this is a cold storage service it's designed as a lowcost storage
372:07 it's designed as a lowcost storage solution for archiving and long-term
372:09 solution for archiving and long-term backup it uses previous generation uh
372:11 backup it uses previous generation uh HDD drives to get that low cost and it's
372:14 HDD drives to get that low cost and it's highly secure and durable we have
372:16 highly secure and durable we have elastic Block store EBS this is a
372:18 elastic Block store EBS this is a persistent block storage service it is a
372:20 persistent block storage service it is a virtual hard drive in the cloud and you
372:21 virtual hard drive in the cloud and you attach to ec2 instances you can choose
372:24 attach to ec2 instances you can choose different kinds of hard drives so SSD
372:26 different kinds of hard drives so SSD iops SSD throughput HDD and um a cold
372:30 iops SSD throughput HDD and um a cold hhd okay we have elastic file storage so
372:33 hhd okay we have elastic file storage so EFS it is a cloud native NFS file system
372:36 EFS it is a cloud native NFS file system service so file storage uh you can mount
372:39 service so file storage uh you can mount to multiple ec2 instances at the same
372:41 to multiple ec2 instances at the same time when you need to share files
372:43 time when you need to share files between multiple servers we have storage
372:45 between multiple servers we have storage Gateway this is a hybrid cloud storage
372:47 Gateway this is a hybrid cloud storage service that extends your on premise
372:48 service that extends your on premise storage to the cloud we got three
372:50 storage to the cloud we got three offerings here file Gateway so extend
372:51 offerings here file Gateway so extend your local storage to Amazon S3 volume
372:54 your local storage to Amazon S3 volume Gateway caches your local drive to S3 so
372:57 Gateway caches your local drive to S3 so you have a continuous backup of the
372:58 you have a continuous backup of the local files in the cloud tape Gateway so
373:00 local files in the cloud tape Gateway so stores files onto virtual tapes for
373:03 stores files onto virtual tapes for backing up your files on very
373:05 backing up your files on very costeffective long-term storage we got
373:07 costeffective long-term storage we got one more page here cuz there's a lot of
373:08 one more page here cuz there's a lot of services here we have adab us snow
373:11 services here we have adab us snow family so these are storage devices used
373:13 family so these are storage devices used to physically migrate large amounts of
373:15 to physically migrate large amounts of data to the cloud and so we have
373:17 data to the cloud and so we have snowball and snowball Edge these are
373:19 snowball and snowball Edge these are briefcase size data storage devices
373:21 briefcase size data storage devices between 50 to 80 terabytes I don't
373:23 between 50 to 80 terabytes I don't believe snowball is available anymore
373:25 believe snowball is available anymore it's just snowball Edge uh but it's good
373:27 it's just snowball Edge uh but it's good to have all of them in here so we can
373:29 to have all of them in here so we can see what's going on we have snowmobile
373:31 see what's going on we have snowmobile this is a cargo container filled with
373:32 this is a cargo container filled with racks of storage and compute that is
373:34 racks of storage and compute that is transported a semi trailer tractor truck
373:37 transported a semi trailer tractor truck to transfer up to 100 pedabytes of data
373:39 to transfer up to 100 pedabytes of data per trailer I don't think we're going to
373:41 per trailer I don't think we're going to be ordering that anytime soon cuz that's
373:42 be ordering that anytime soon cuz that's pretty darn expensive but that's cool we
373:44 pretty darn expensive but that's cool we have snow cone this is a very small
373:46 have snow cone this is a very small version of snowball that can transfer 8
373:48 version of snowball that can transfer 8 terabytes of data we have adab us backup
373:50 terabytes of data we have adab us backup a fully managed backup service that
373:52 a fully managed backup service that makes it easy to centralize and automate
373:54 makes it easy to centralize and automate the backup of data across multiple a
373:56 the backup of data across multiple a services so ec2 EBS RDS TB EFS storage
374:00 services so ec2 EBS RDS TB EFS storage Gateway you create the backup plans we
374:02 Gateway you create the backup plans we have Cloud endure disaster recovery so
374:05 have Cloud endure disaster recovery so continuously replicates your machine in
374:06 continuously replicates your machine in a lowcost staging area in your target
374:09 a lowcost staging area in your target abl's account and preferred region
374:11 abl's account and preferred region enabling fast and reliable recovery in
374:13 enabling fast and reliable recovery in case of it data center failures we have
374:15 case of it data center failures we have Amazon FSX this is a feature Rich and
374:17 Amazon FSX this is a feature Rich and highly performant file system that can
374:19 highly performant file system that can be used for uh windows so that would be
374:21 be used for uh windows so that would be using SMB or Linux which uses luster and
374:25 using SMB or Linux which uses luster and so there we have the Amazon FS FSX for
374:27 so there we have the Amazon FS FSX for Windows file server so use SMB protocol
374:30 Windows file server so use SMB protocol and allow you to mount FSX to Windows
374:32 and allow you to mount FSX to Windows servers and then the luster one which
374:34 servers and then the luster one which uses uh Linux luster file system it
374:37 uses uh Linux luster file system it allows you to mount F FSX Linux servers
374:40 allows you to mount F FSX Linux servers are there any storage Services missing
374:41 are there any storage Services missing here not really I mean you could count
374:43 here not really I mean you could count elastic container repository as one but
374:46 elastic container repository as one but um that's kind of something else or you
374:48 um that's kind of something else or you could also count maybe um uh code commit
374:52 could also count maybe um uh code commit but you know I kind of put those in a
374:53 but you know I kind of put those in a separate category where we where those
374:55 separate category where we where those are in our developer tools or our
374:57 are in our developer tools or our containers
374:58 containers [Music]
375:02 [Music] okay all right so what I want to do is
375:04 okay all right so what I want to do is show you around S3 so we'll make our way
375:06 show you around S3 so we'll make our way up here and type in
375:09 up here and type in S3 and we'll let it load here and what
375:12 S3 and we'll let it load here and what we're going to do is create a new bucket
375:13 we're going to do is create a new bucket if you do not see the screen just click
375:15 if you do not see the screen just click on the side here go to buckets and we'll
375:17 on the side here go to buckets and we'll create ourselves a new bucket so bucket
375:19 create ourselves a new bucket so bucket names are unique so let say my
375:22 names are unique so let say my bucket and we'll just pound in a bunch
375:24 bucket and we'll just pound in a bunch of numbers I'm sure you're getting used
375:25 of numbers I'm sure you're getting used to making buckets in this um in this
375:28 to making buckets in this um in this course so
375:29 course so far um so if we scroll on down notice
375:32 far um so if we scroll on down notice that it says block public access
375:33 that it says block public access settings for this bucket this is turned
375:35 settings for this bucket this is turned on uh like the blocking is turned on by
375:38 on uh like the blocking is turned on by default because S3 buckets are the
375:40 default because S3 buckets are the number one thing that are a point of
375:43 number one thing that are a point of entry for malicious actors where people
375:44 entry for malicious actors where people leave their buckets open so if we want
375:46 leave their buckets open so if we want to uh Grant access to this bucket for
375:50 to uh Grant access to this bucket for people to see this publically we'd have
375:51 people to see this publically we'd have to turn this off okay but for now we're
375:53 to turn this off okay but for now we're going to leave that on you can version
375:55 going to leave that on you can version things in buckets which is pretty cool
375:57 things in buckets which is pretty cool you can turn on encryption which you
375:58 you can turn on encryption which you should turn on by default and use the
376:00 should turn on by default and use the Amazon S3 key on the certified Cloud
376:02 Amazon S3 key on the certified Cloud partitioner it's going to ask you about
376:04 partitioner it's going to ask you about client side encryption and server side
376:06 client side encryption and server side encryption so you definitely want to
376:07 encryption so you definitely want to know what these are I'm going to turn it
376:09 know what these are I'm going to turn it off for the time being so we can kind of
376:11 off for the time being so we can kind of explore uh here by oursel here um then
376:14 explore uh here by oursel here um then there's object lock so we can lock files
376:16 there's object lock so we can lock files so that um you know they're you know
376:18 so that um you know they're you know people aren't writing to them multiple
376:20 people aren't writing to them multiple times so we'll go ahead and create a
376:22 times so we'll go ahead and create a bucket and it's very quick so here is
376:24 bucket and it's very quick so here is the new bucket we made and you'll notice
376:27 the new bucket we made and you'll notice we have nothing here which is totally
376:28 we have nothing here which is totally fine if I go to
376:30 fine if I go to properties um you know we can see that
376:34 properties um you know we can see that uh we can turn on Buck conversing turn
376:35 uh we can turn on Buck conversing turn on encryption what I'm going to do is
376:37 on encryption what I'm going to do is I'm going to go grab some files I
376:39 I'm going to go grab some files I remember I saved uh some files recently
376:41 remember I saved uh some files recently here I'm just going to make a new folder
376:43 here I'm just going to make a new folder called Star Trek I just have some
376:45 called Star Trek I just have some graphics you can pull anything off the
376:46 graphics you can pull anything off the internet you want to do this
376:48 internet you want to do this yourself U but I'm just going to prepare
376:50 yourself U but I'm just going to prepare a folder here it'll take me a
376:53 a folder here it'll take me a moment
376:55 moment okay just a
376:58 okay just a moment okay great so now I have my
377:01 moment okay great so now I have my folder prepared and so what I want to do
377:03 folder prepared and so what I want to do is upload my first file so I can go here
377:05 is upload my first file so I can go here in upload and actually I can upload
377:07 in upload and actually I can upload multiple files you can even add a folder
377:09 multiple files you can even add a folder which is nice and so in here if I want
377:11 which is nice and so in here if I want to upload these files here whoops I'll
377:13 to upload these files here whoops I'll just select multiples I'll hit open
377:15 just select multiples I'll hit open it'll cue them up which is really nice
377:17 it'll cue them up which is really nice we can see the destination details here
377:19 we can see the destination details here if we want to turn it versioning on we
377:21 if we want to turn it versioning on we could there uh we could apply
377:23 could there uh we could apply permissions for outside access but we
377:25 permissions for outside access but we have uh things turned on but what's
377:27 have uh things turned on but what's really important is the properties where
377:28 really important is the properties where we have these different tiers and So
377:31 we have these different tiers and So based on the tier that you use the lower
377:34 based on the tier that you use the lower you go at least it should be the cheaper
377:36 you go at least it should be the cheaper it's going to get uh but it's going to
377:39 it's going to get uh but it's going to have some tradeoffs and we cover that
377:40 have some tradeoffs and we cover that through the course then there's that
377:41 through the course then there's that server side encryption um and I'm going
377:44 server side encryption um and I'm going to hit upload we'll just individually
377:45 to hit upload we'll just individually turn it on so you're going to see this
377:47 turn it on so you're going to see this progress go across the top these have
377:49 progress go across the top these have all been uploaded I'm going to cck click
377:51 all been uploaded I'm going to cck click on my destination bucket and so what we
377:53 on my destination bucket and so what we can do is we can uh open these if
377:56 can do is we can uh open these if they're images they'll show us right
377:58 they're images they'll show us right here in the browser we can download them
378:01 here in the browser we can download them so if we need to get them again all
378:04 so if we need to get them again all right we can create a folder here and
378:06 right we can create a folder here and just say Star Trek or Enterprise
378:10 just say Star Trek or Enterprise D Enterprise D
378:14 D Enterprise D here okay but it's not really easy it's
378:16 here okay but it's not really easy it's not like I can drag this into there um I
378:19 not like I can drag this into there um I might be able there's no move option so
378:21 might be able there's no move option so you'd actually have to copy it into the
378:23 you'd actually have to copy it into the destination and then delete the old one
378:25 destination and then delete the old one it's not like using a file system you
378:27 it's not like using a file system you know um there's a lot more work involved
378:30 know um there's a lot more work involved but you know it's a great storage
378:32 but you know it's a great storage solution um so let's look at concpt so I
378:35 solution um so let's look at concpt so I have this selected here if I click into
378:37 have this selected here if I click into it I can go to permissions I can go to
378:40 it I can go to permissions I can go to versions see that I'm looking for H
378:43 versions see that I'm looking for H encryption here we go so if I turn it on
378:46 encryption here we go so if I turn it on I can enable encryption and I can choose
378:48 I can enable encryption and I can choose whether I want to use an Amazon S3 key
378:50 whether I want to use an Amazon S3 key so
378:51 so SS S3 so an encryption key that Amazon
378:55 SS S3 so an encryption key that Amazon S3 creates manages and uses for you then
378:57 S3 creates manages and uses for you then you have
378:58 you have ibus SS KMS and I believe this uses AES
379:02 ibus SS KMS and I believe this uses AES up here which is totally fine then you
379:04 up here which is totally fine then you you have KMS down here and it's
379:06 you have KMS down here and it's interesting because they're like ads
379:07 interesting because they're like ads will manage the key for you and then
379:09 will manage the key for you and then this one ads will manage the key for you
379:10 this one ads will manage the key for you it's just slightly different this one of
379:12 it's just slightly different this one of course is a lot simpler there's not many
379:14 course is a lot simpler there's not many reasons not to turn on encryption but U
379:16 reasons not to turn on encryption but U I'm going to go turn this one so that it
379:18 I'm going to go turn this one so that it is encrypted
379:19 is encrypted here and just because it's encrypted
379:21 here and just because it's encrypted doesn't mean we can't access the file I
379:23 doesn't mean we can't access the file I can still download it I can still view
379:24 can still download it I can still view it because databus is going to decrypt
379:26 it because databus is going to decrypt it right so if I go and click on this
379:28 it right so if I go and click on this one and I say open okay even though it's
379:31 one and I say open okay even though it's encrypted I can still view it right it
379:33 encrypted I can still view it right it just means that it's encrypted on the
379:35 just means that it's encrypted on the storage right so if somebody were to
379:36 storage right so if somebody were to steal that hard drive whatever hard
379:38 steal that hard drive whatever hard drive it's sitting on on ads if they
379:40 drive it's sitting on on ads if they didn't figure it out it's encrypted
379:42 didn't figure it out it's encrypted they're not going to be able to open up
379:43 they're not going to be able to open up the file right so that is the logic
379:45 the file right so that is the logic there but through here um I can get it
379:48 there but through here um I can get it something that's really interesting with
379:50 something that's really interesting with um um S3 is the ability to um uh have
379:55 um um S3 is the ability to um uh have life cycle events so I'm just kind of
379:57 life cycle events so I'm just kind of looking where that is it's usually in
379:58 looking where that is it's usually in the bucket so if I go to management up
380:00 the bucket so if I go to management up here I can set up a life cycle rule and
380:03 here I can set up a life cycle rule and what I can do is say like move this to
380:06 what I can do is say like move this to deep
380:07 deep storage okay and then I can say what it
380:11 storage okay and then I can say what it is that I want to filter so maybe it's
380:13 is that I want to filter so maybe it's like data.
380:16 like data. jpg I can say apply to all objects in
380:18 jpg I can say apply to all objects in the bucket I acknowledge that and we say
380:20 the bucket I acknowledge that and we say move current versions of objects between
380:21 move current versions of objects between storage classes and I checkbox that on
380:23 storage classes and I checkbox that on and I can say move them to Glacier after
380:26 and I can say move them to Glacier after 30 days I think if I go lower it'll
380:29 30 days I think if I go lower it'll complain uh probably when I save there
380:31 complain uh probably when I save there and so the idea is that we can move
380:33 and so the idea is that we can move things and distort some so maybe you
380:35 things and distort some so maybe you have files coming in down below it's
380:36 have files coming in down below it's showing you here right so a file is
380:38 showing you here right so a file is uploaded and then after 30 days then
380:40 uploaded and then after 30 days then move them in the glacier so we save
380:42 move them in the glacier so we save money okay that's a big advantage of S3
380:44 money okay that's a big advantage of S3 there's a lot of things going on in S3
380:46 there's a lot of things going on in S3 here like you can turn on
380:49 here like you can turn on um uh wherever it is you can turn
380:52 um uh wherever it is you can turn on web hosting so you can turn this into
380:55 on web hosting so you can turn this into like a website down below here there's a
380:58 like a website down below here there's a whole whole bunch of things that you can
380:59 whole whole bunch of things that you can do okay so uh we're not going to get
381:01 do okay so uh we're not going to get into that because that's just too much
381:03 into that because that's just too much work but uh you know we learned the
381:05 work but uh you know we learned the basics of S3 so what I want to do to
381:07 basics of S3 so what I want to do to delete this I have to empty it first
381:08 delete this I have to empty it first watch it'll be like you cannot delete it
381:10 watch it'll be like you cannot delete it you need to empty the bucket first so go
381:12 you need to empty the bucket first so go ahead and empty it and I'll say my
381:14 ahead and empty it and I'll say my bucket
381:20 empty or sorry I guess I have to type in permanently
381:23 permanently delete
381:24 delete [Music]
381:27 [Music] Perman delete no they used to oh yeah I
381:31 Perman delete no they used to oh yeah I can copy it okay great and so once the
381:34 can copy it okay great and so once the bucket is is emptied I can go back to
381:36 bucket is is emptied I can go back to the
381:42 bucket and I'll go back one layer and then I'll go ahead and delete my
381:45 then I'll go ahead and delete my bucket and you can only have so many
381:47 bucket and you can only have so many buckets I think it's like a 100 you have
381:49 buckets I think it's like a 100 you have like a 100
381:51 like a 100 buckets how many buckets can you have in
381:55 buckets how many buckets can you have in a
381:56 a WS 100 buckets yeah I was
381:58 WS 100 buckets yeah I was right and I think if you wanted to know
382:01 right and I think if you wanted to know how many you Pro there's probably like a
382:02 how many you Pro there's probably like a service limits page service limits
382:05 service limits page service limits service
382:07 service quotas so you go here you say a Services
382:18 S3 how many buckets 100 right there okay so you know that gives you kind of an
382:19 so you know that gives you kind of an idea what's going on there but there you
382:21 idea what's going on there but there you go that's
382:27 S3 all right so let's go take a look at elastic Block store which is uh virtual
382:30 elastic Block store which is uh virtual hard drives for ec2 so what I'm going to
382:32 hard drives for ec2 so what I'm going to do is make my way over to the ec2
382:33 do is make my way over to the ec2 console because that is where it's at
382:35 console because that is where it's at and on the left hand side if we scroll
382:37 and on the left hand side if we scroll on down you'll see elastic block volumes
382:39 on down you'll see elastic block volumes or elastic Block store volumes and so we
382:41 or elastic Block store volumes and so we can go here and the idea is we can go
382:43 can go here and the idea is we can go ahead and create ourselves a volume and
382:45 ahead and create ourselves a volume and what you'll notice is that we have a few
382:46 what you'll notice is that we have a few different options here we have general
382:48 different options here we have general purpose provisioned iops cold HDD
382:51 purpose provisioned iops cold HDD throughput optimized magnetic magnetic
382:54 throughput optimized magnetic magnetic being um basically like uh physical tape
382:57 being um basically like uh physical tape that you can use to back up like the old
382:58 that you can use to back up like the old school stuff and so you have all these
383:00 school stuff and so you have all these options here and you can choose the size
383:02 options here and you can choose the size so when you change these options you're
383:04 so when you change these options you're going to notice that some things are
383:05 going to notice that some things are going to change like the through uh
383:06 going to change like the through uh throughput or iops so notice that
383:09 throughput or iops so notice that general purpose is fixed at between 300
383:11 general purpose is fixed at between 300 to 3,000 and notice that it goes from 1
383:14 to 3,000 and notice that it goes from 1 Gigabyte to how many ever that is that's
383:16 Gigabyte to how many ever that is that's a lot there and so it's not too
383:18 a lot there and so it's not too complicated but in practicality I don't
383:20 complicated but in practicality I don't really create volumes this way what I do
383:22 really create volumes this way what I do is I'll just go launch an ec2 instance
383:24 is I'll just go launch an ec2 instance so I'll say launch ec2 instance and
383:27 so I'll say launch ec2 instance and we'll choose Amazon lytic 2 and again
383:29 we'll choose Amazon lytic 2 and again you know if we haven't done the uc2 uh
383:31 you know if we haven't done the uc2 uh follow along we'll cover all this stuff
383:33 follow along we'll cover all this stuff in more detail don't worry about about
383:34 in more detail don't worry about about it um we go to configure instance then
383:37 it um we go to configure instance then we go to add storage and this is what
383:38 we go to add storage and this is what you're going to be doing when adding EBS
383:41 you're going to be doing when adding EBS volumes um to your ec2 instances and
383:44 volumes um to your ec2 instances and you'll notice we always have a root
383:46 you'll notice we always have a root volume that's attached to the ec2
383:48 volume that's attached to the ec2 instance that we cannot remove we can
383:50 instance that we cannot remove we can change the size up here I believe the oh
383:52 change the size up here I believe the oh it shows us right here that we have up
383:53 it shows us right here that we have up to 30 gigabytes so sometimes you might
383:55 to 30 gigabytes so sometimes you might want to Max that out to take advantage
383:57 want to Max that out to take advantage of the free tier you notice we can also
384:00 of the free tier you notice we can also change uh this there might be some
384:01 change uh this there might be some limitations in terms of the root volume
384:03 limitations in terms of the root volume so notice that we have a few more
384:05 so notice that we have a few more options here we can have a cold HDD or
384:09 options here we can have a cold HDD or HDD as our root volume uh notice we have
384:13 HDD as our root volume uh notice we have a delete on termination so EBS volume
384:15 a delete on termination so EBS volume persists independently from the running
384:16 persists independently from the running life so you can choose to automatically
384:18 life so you can choose to automatically delete uh EBS volume when the associated
384:21 delete uh EBS volume when the associated instance is terminated so if you take
384:22 instance is terminated so if you take this off if the ec2 instance is deleted
384:24 this off if the ec2 instance is deleted the volume will still remain which could
384:26 the volume will still remain which could be something that's important to you uh
384:28 be something that's important to you uh for encryption here um you might want to
384:30 for encryption here um you might want to turn it on and so generally adus always
384:33 turn it on and so generally adus always has a KMS manage key which is free so
384:35 has a KMS manage key which is free so you checkbox that on it will be
384:37 you checkbox that on it will be encrypted uh you can turn it on later um
384:40 encrypted uh you can turn it on later um but you can never turn encryption off
384:41 but you can never turn encryption off but you should always uh turn encryption
384:43 but you should always uh turn encryption on and so just be aware to turn that on
384:45 on and so just be aware to turn that on you can also add file systems down below
384:47 you can also add file systems down below here but maybe we'll talk about that
384:49 here but maybe we'll talk about that later because I think that gets
384:51 later because I think that gets into um e EFS okay so that is a
384:54 into um e EFS okay so that is a different type of file storage there but
384:56 different type of file storage there but that's pretty much all there is to it uh
384:59 that's pretty much all there is to it uh you just go ahead and create uh your
385:00 you just go ahead and create uh your volume there and then it would show up
385:03 volume there and then it would show up under EBS we could take snapshots of
385:05 under EBS we could take snapshots of them to back them up that goes to S3 but
385:07 them to back them up that goes to S3 but that's all we really need to know here
385:10 that's all we really need to know here [Music]
385:13 [Music] okay all right let's take a look at
385:15 okay all right let's take a look at elastic file uh system or EFS uh storage
385:19 elastic file uh system or EFS uh storage manage file storage what does EFS stand
385:22 manage file storage what does EFS stand for EFS system elastic file system okay
385:25 for EFS system elastic file system okay sorry and so what we can do is go ahead
385:27 sorry and so what we can do is go ahead and create a file system here so I'm
385:29 and create a file system here so I'm going to say my EFS and the great thing
385:31 going to say my EFS and the great thing is that it basically a serverless so
385:33 is that it basically a serverless so it's only going to be white you consume
385:35 it's only going to be white you consume right so what you store and what you
385:36 right so what you store and what you consume um and I think that's what it's
385:39 consume um and I think that's what it's going to be based on we have to choose a
385:40 going to be based on we have to choose a VPC I want to launch it in my default
385:42 VPC I want to launch it in my default VPC and we have the choice of regional
385:45 VPC and we have the choice of regional or one zone um I guess this is going to
385:48 or one zone um I guess this is going to be based on what gets backed up to S3
385:51 be based on what gets backed up to S3 possibly so onezone probably is more
385:53 possibly so onezone probably is more cost effective but I'm going to choose
385:54 cost effective but I'm going to choose Regional and that's a new Option I never
385:56 Regional and that's a new Option I never noticed before I just opened it up to
385:57 noticed before I just opened it up to see a few more things here we have
385:59 see a few more things here we have General Max IO bursting provision things
386:02 General Max IO bursting provision things like that we'll hit next
386:04 like that we'll hit next we'll choose our
386:06 we'll choose our azs and uh then you might have to set up
386:09 azs and uh then you might have to set up a policy so I'm going to hit next here
386:12 a policy so I'm going to hit next here you'll go ahead and hit create so you
386:14 you'll go ahead and hit create so you know this is really interesting but the
386:16 know this is really interesting but the trick to it is really mounting it to a
386:19 trick to it is really mounting it to a dc2 instance and that's kind of the pain
386:22 dc2 instance and that's kind of the pain okay so if we go into this um you have
386:25 okay so if we go into this um you have to mount it and there are commands for
386:29 to mount it and there are commands for it so like EFS mounting Linux
386:33 it so like EFS mounting Linux commands Okay
386:35 commands Okay I've done this in my Solutions architect
386:37 I've done this in my Solutions architect associate uh but you know again I'm not
386:39 associate uh but you know again I'm not doing on a regular basis so I don't
386:40 doing on a regular basis so I don't remember and so if we go here I'm just
386:44 remember and so if we go here I'm just trying to see if we can see some code
386:45 trying to see if we can see some code that tells us how to mount it so
386:47 that tells us how to mount it so mounting on an E2 uh uh ec2 Linux
386:51 mounting on an E2 uh uh ec2 Linux instance with the EFS Mount helper um so
386:55 instance with the EFS Mount helper um so I don't know if they had that before but
386:56 I don't know if they had that before but that sounds interesting so pseudo Mount
386:58 that sounds interesting so pseudo Mount hyphen T the file system the EFS
387:00 hyphen T the file system the EFS mounting
387:01 mounting Point yeah this looks a lot easier I
387:04 Point yeah this looks a lot easier I than what we had before okay so before I
387:07 than what we had before okay so before I had to enter a bunch of weird commands
387:09 had to enter a bunch of weird commands but now looks like they've boiled it
387:10 but now looks like they've boiled it down to single command but once you have
387:12 down to single command but once you have your EFS
387:13 your EFS instance
387:15 instance um I'm going to assume that there is an
387:17 um I'm going to assume that there is an entry point here just clicking around
387:20 entry point here just clicking around here seeing what we can see I would
387:22 here seeing what we can see I would imagine we have to create an access
387:23 imagine we have to create an access point so my access
387:27 point so my access point sure I don't know if it's going to
387:30 point sure I don't know if it's going to let me just do that it did and so I
387:33 let me just do that it did and so I would imagine that you probably use an
387:34 would imagine that you probably use an access point let's go back here ifs
387:36 access point let's go back here ifs Mount point I think that's the same
387:38 Mount point I think that's the same thing I think the mount point and the
387:40 thing I think the mount point and the access point you create access points
387:41 access point you create access points and that's what you use uh we can go
387:44 and that's what you use uh we can go here we can attach it so oh yeah here's
387:45 here we can attach it so oh yeah here's the command
387:47 the command so um Mount via DNS or Mount via IP
387:51 so um Mount via DNS or Mount via IP address
387:53 address so it doesn't look too hard we can try
387:56 so it doesn't look too hard we can try to give it a go I haven't done it in a
387:58 to give it a go I haven't done it in a while it looks like they've made it
387:59 while it looks like they've made it easier so maybe we'll try it out okay so
388:03 easier so maybe we'll try it out okay so we go to ec2 here
388:06 we go to ec2 here and I'm going to launch an instance I'm
388:09 and I'm going to launch an instance I'm going to choose Amazon
388:11 going to choose Amazon 2 okay we're going to go and choose that
388:15 2 okay we're going to go and choose that and then we want to choose a file
388:19 and then we want to choose a file system and
388:22 system and so it's going to mount to here okay and
388:27 so it's going to mount to here okay and storage is fine all this is fine and I'm
388:30 storage is fine all this is fine and I'm going to go ahead and launch
388:32 going to go ahead and launch this and and I need a new key pair so
388:37 this and and I need a new key pair so create a new key pair um this will be
388:39 create a new key pair um this will be for EFS example
388:42 for EFS example okay we're going to download that key
388:44 okay we're going to download that key pair there we're going to launch this
388:53 instance okay and then we're going to go view this and as that is launching what
388:55 view this and as that is launching what I'm going to do is open up my cloud
388:58 I'm going to do is open up my cloud shell and I'm going to want to upload
389:00 shell and I'm going to want to upload this pen so again like before I'm going
389:03 this pen so again like before I'm going to drag it to my desktop off screen and
389:06 to drag it to my desktop off screen and then what I'm going to do is upload this
389:09 then what I'm going to do is upload this file so I have
389:11 file so I have it EFS example okay we're going to
389:14 it EFS example okay we're going to upload
389:16 upload it because I just want to see if we can
389:18 it because I just want to see if we can access that EFS volume and so if I do
389:23 access that EFS volume and so if I do LS that's our old one which I can delete
389:26 LS that's our old one which I can delete by the way I'm never going to use that
389:27 by the way I'm never going to use that anytime soon
389:28 anytime soon yes LS and I'm going just delete the
389:31 yes LS and I'm going just delete the hello text there so it's a bit cleaner
389:34 hello text there so it's a bit cleaner for what we're doing and so we need to
389:35 for what we're doing and so we need to chod that
389:38 chod that 400 uh EFS
389:41 400 uh EFS example and we saw that's how like if
389:43 example and we saw that's how like if you want to try to connect to a server
389:45 you want to try to connect to a server remotely that's what you do right so I
389:48 remotely that's what you do right so I believe that the drive is
389:50 believe that the drive is mounted if I go to storage does it show
389:52 mounted if I go to storage does it show up
389:53 up here doesn't show up under
389:56 here doesn't show up under here but
389:58 here but um what we're waiting for are these two
390:00 um what we're waiting for are these two status checks to pass and then we can
390:02 status checks to pass and then we can SSH into this machine
390:07 and I'm just going to go back here and take a look here so using the EFS Mount
390:10 take a look here so using the EFS Mount helper so pseudo Mount hyphen T EFS TLS
390:15 helper so pseudo Mount hyphen T EFS TLS this volume to EFS and so I imagine it's
390:17 this volume to EFS and so I imagine it's going to mount it to EFS here using the
390:18 going to mount it to EFS here using the NFS client so I guess it just depends on
390:21 NFS client so I guess it just depends on what we're going to have available to us
390:23 what we're going to have available to us even if the status checks haven't passed
390:25 even if the status checks haven't passed I'm going to try to get into this
390:27 I'm going to try to get into this anyway um so what we can do is click on
390:31 anyway um so what we can do is click on this grab the public IP address we'll
390:34 this grab the public IP address we'll type in
390:35 type in SSH uh ec2 hyphen user at sign paste
390:38 SSH uh ec2 hyphen user at sign paste this in hyphen I EFS example pem I
390:42 this in hyphen I EFS example pem I usually don't log in Via
390:44 usually don't log in Via SSH um but you know just for this
390:47 SSH um but you know just for this example I will and so I want to see if
390:50 example I will and so I want to see if this drive
390:51 this drive exists usually be under mount right
390:55 exists usually be under mount right there it is okay so it already mounted
390:57 there it is okay so it already mounted for us so I can do touch hello
391:02 for us so I can do touch hello world. text
391:05 world. text say pseudo
391:07 say pseudo here I can say pseudo VI I'm going to
391:09 here I can say pseudo VI I'm going to open up the file and say hello from
391:12 open up the file and say hello from another computer
391:15 another computer okay and so I've saved that file and
391:17 okay and so I've saved that file and what I want to do
391:19 what I want to do now
391:21 now oops oh okay sorry I'm in the cloud
391:24 oops oh okay sorry I'm in the cloud shell here but what I want to do now is
391:25 shell here but what I want to do now is I want to kill this
391:27 I want to kill this machine okay and what I'm going to do is
391:29 machine okay and what I'm going to do is spin up another ec2 instance I'm going
391:31 spin up another ec2 instance I'm going to see if when I mount that if that file
391:33 to see if when I mount that if that file is there if it actually worked but wow
391:36 is there if it actually worked but wow that is so much easier than before I
391:38 that is so much easier than before I can't tell you how hard it was to attach
391:40 can't tell you how hard it was to attach an EFS volume the last time I did it um
391:42 an EFS volume the last time I did it um so we'll go ahead We'll add that and the
391:45 so we'll go ahead We'll add that and the storage is fine we're going to go to
391:46 storage is fine we're going to go to review here we're going to say launch
391:48 review here we're going to say launch and I'm just going to stick with the
391:49 and I'm just going to stick with the same key pair
391:51 same key pair there we're going to give that moment to
391:55 there we're going to give that moment to launch and we're going to go to view
391:58 launch and we're going to go to view instances and so now this one is
392:00 instances and so now this one is launching as it's launching let's just
392:01 launching as it's launching let's just go peek around and see what we can see
392:03 go peek around and see what we can see so you know I imagine if we didn't add
392:05 so you know I imagine if we didn't add that file system during the the boot um
392:08 that file system during the the boot um and we were we're adding it after the
392:10 and we were we're adding it after the fact we probably could just ran that
392:11 fact we probably could just ran that line and added it really easily um I'm
392:13 line and added it really easily um I'm not going to bother testing that because
392:15 not going to bother testing that because I just don't want to go through that
392:17 I just don't want to go through that trouble to do that um I still can't
392:19 trouble to do that um I still can't remember what these access points are
392:21 remember what these access points are for um but uh it's okay let kind of out
392:24 for um but uh it's okay let kind of out of the scope for the certified Cloud
392:26 of the scope for the certified Cloud practitioner and then so I'm just
392:28 practitioner and then so I'm just curious so we get some nice monitoring
392:31 curious so we get some nice monitoring here right so that's kind of nice
392:37 um I guess they're trying to suggest here like anabis backup data sync
392:43 transfer so that would just be backing up simplify uh automates accelerates
392:46 up simplify uh automates accelerates moving data okay that's pretty
392:47 moving data okay that's pretty straightforward transfer family fully
392:49 straightforward transfer family fully managed F SFTP okay so nothing exciting
392:54 managed F SFTP okay so nothing exciting there and we're going to refresh that
392:56 there and we're going to refresh that there and this is initializing so let's
392:58 there and this is initializing so let's go see if we can connect to this one so
393:00 go see if we can connect to this one so I'm going to go ahead grab that public
393:02 I'm going to go ahead grab that public IP address I'm going to hit up
393:04 IP address I'm going to hit up okay I'm going to swap out that IP
393:06 okay I'm going to swap out that IP address and we're going to see if we can
393:07 address and we're going to see if we can connect to that machine yet so we'll say
393:10 connect to that machine yet so we'll say yes and we got into it so that's great
393:12 yes and we got into it so that's great and so what I'm going to do is go again
393:14 and so what I'm going to do is go again into the mount directory EFS FS1 LS and
393:17 into the mount directory EFS FS1 LS and there it is I'm going to do cat hello
393:18 there it is I'm going to do cat hello world and so it works and so that's the
393:21 world and so it works and so that's the cool thing about DFS is that you have a
393:24 cool thing about DFS is that you have a a file system that you can share among
393:26 a file system that you can share among other um uh ec2 instances I'm sure users
393:29 other um uh ec2 instances I'm sure users could connect to it using the NFS
393:31 could connect to it using the NFS protocol I'm not the best at like
393:33 protocol I'm not the best at like Network or storage networking so I'm not
393:35 Network or storage networking so I'm not going to show that here to you today but
393:37 going to show that here to you today but that gives you a general idea of how EFS
393:39 that gives you a general idea of how EFS works again you only pay for what you
393:41 works again you only pay for what you store it is serverless so we'll go here
393:44 store it is serverless so we'll go here and type delete CU I'm done with this
393:45 and type delete CU I'm done with this I'll probably uh destroy the instance
393:48 I'll probably uh destroy the instance first it doesn't get mixed
393:51 first it doesn't get mixed up and just so we clean up a little bit
393:54 up and just so we clean up a little bit better here I'm going to delete these
393:55 better here I'm going to delete these Keys
393:56 Keys here
394:04 delete okay and we'll go ahead and delete this one as
394:11 well delete since I'm done with that uh we'll make sure that that is
394:13 that uh we'll make sure that that is tearing down that is good and we'll make
394:16 tearing down that is good and we'll make our way back over here and it says enter
394:19 our way back over here and it says enter probably the ID's name in so we'll enter
394:21 probably the ID's name in so we'll enter that in and we hit
394:22 that in and we hit confirm and we'll see is it deleting I'm
394:25 confirm and we'll see is it deleting I'm not confident with it I'm going to do it
394:26 not confident with it I'm going to do it one more time confirm it by entering the
394:28 one more time confirm it by entering the the file systems ID so we'll put it in
394:30 the file systems ID so we'll put it in again
394:38 is it destroying I cannot tell there we go so it's destroying we are in good
394:40 go so it's destroying we are in good shape it is gone our data is gone um but
394:43 shape it is gone our data is gone um but yeah that is
394:45 yeah that is [Music]
394:48 [Music] EFS all right let's take a look at um
394:51 EFS all right let's take a look at um the snow family in ads so if we type in
394:53 the snow family in ads so if we type in snow up here and we click into ads snow
394:56 snow up here and we click into ads snow family this is where we can probably
394:57 family this is where we can probably order ourselves a device um I might not
395:01 order ourselves a device um I might not be able to order them at least when I
395:02 be able to order them at least when I originally looked at this like way back
395:04 originally looked at this like way back in the day uh it wasn't available in
395:06 in the day uh it wasn't available in Canada so I'm kind of curious to see
395:07 Canada so I'm kind of curious to see what there is but the idea is that
395:09 what there is but the idea is that you're going to go here and Order and
395:11 you're going to go here and Order and you have some options so you can import
395:12 you have some options so you can import into S3 or export from S3 and then down
395:15 into S3 or export from S3 and then down below we have local compute storage so
395:17 below we have local compute storage so perform local comput storage workloads
395:19 perform local comput storage workloads without transferring data you can order
395:21 without transferring data you can order multiple devices and clusters for
395:22 multiple devices and clusters for increased durability and storage
395:24 increased durability and storage capacity so it sounds like you're not
395:26 capacity so it sounds like you're not you're not um transferring data you're
395:28 you're not um transferring data you're just using it uh locally on uh to um
395:31 just using it uh locally on uh to um it's like basically buying renting
395:33 it's like basically buying renting temporary computers was just kind of
395:34 temporary computers was just kind of interesting I never saw that option
395:36 interesting I never saw that option before but we're going to choose import
395:38 before but we're going to choose import into ads3 and we're just going to read
395:40 into ads3 and we're just going to read through this stuff and it's not my
395:42 through this stuff and it's not my expectation that we're going to even be
395:43 expectation that we're going to even be able to submit a job here and you
395:45 able to submit a job here and you probably don't want to because it's
395:46 probably don't want to because it's going to cost money but I just want to
395:47 going to cost money but I just want to show you the process so we can see what
395:49 show you the process so we can see what there is here so snow job assistance if
395:52 there is here so snow job assistance if you're new to snow family run a pilot of
395:54 you're new to snow family run a pilot of one to two devices so batch file smaller
395:56 one to two devices so batch file smaller than 1 Megabyte Benchmark and optimize
395:59 than 1 Megabyte Benchmark and optimize deploy St uh staging
396:01 deploy St uh staging workstations discover remediate
396:03 workstations discover remediate environment m al uh issues early files
396:05 environment m al uh issues early files and folders name must conform to Amazon
396:07 and folders name must conform to Amazon S3 prepare your Ami once the pilot is
396:10 S3 prepare your Ami once the pilot is completed confirm the number of snow
396:11 completed confirm the number of snow family devices that you can copy devices
396:14 family devices that you can copy devices to simultaneously follow the best
396:16 to simultaneously follow the best practices use the following resources to
396:18 practices use the following resources to manage your snow devices so we have iTab
396:20 manage your snow devices so we have iTab us openhub and then there's the edge
396:22 us openhub and then there's the edge client
396:24 client CLI so openhub is a graphical user
396:26 CLI so openhub is a graphical user interface you can use to manage snow
396:28 interface you can use to manage snow devices so that's kind of cool and then
396:30 devices so that's kind of cool and then we have the CLI which I imagine is
396:32 we have the CLI which I imagine is something that's very useful to use so
396:35 something that's very useful to use so just close those off here and then we
396:36 just close those off here and then we have other things so I'm going to say I
396:37 have other things so I'm going to say I acknowledge I know what I'm doing which
396:39 acknowledge I know what I'm doing which I don't really but that's okay and then
396:41 I don't really but that's okay and then here we are going to enter in our
396:43 here we are going to enter in our address so we say Andrew Brown and I'm
396:46 address so we say Andrew Brown and I'm not going to I'm not going to enter this
396:47 not going to I'm not going to enter this in for real just whatever so it would be
396:50 in for real just whatever so it would be Toronto exam Pro um Canada oh see so
396:55 Toronto exam Pro um Canada oh see so there's there's the thing you can only
396:56 there's there's the thing you can only ship it to the US and so that's as far
396:59 ship it to the US and so that's as far as I can get okay um and that's the
397:02 as I can get okay um and that's the thing is like if you really want to know
397:04 thing is like if you really want to know ad us inside and not you got to be in
397:06 ad us inside and not you got to be in the US but let's pretend that we do have
397:08 the US but let's pretend that we do have an address in the states what's a very
397:10 an address in the states what's a very famous address so what is the address of
397:14 famous address so what is the address of the White House
397:16 the White House okay there it
397:18 okay there it is so I'm just going to copy that
397:22 is so I'm just going to copy that in because again we're not going to
397:24 in because again we're not going to submit this for real I just want to see
397:27 submit this for real I just want to see what's farther down the line here
397:30 what's farther down the line here okay uh what's NW
397:34 okay uh what's NW is that the state it's in Washington
397:37 is that the state it's in Washington right is is this part of it NW Northwest
397:40 right is is this part of it NW Northwest is that a thing I'm from Canada so I
397:42 is that a thing I'm from Canada so I couldn't tell you um so we'll go down
397:45 couldn't tell you um so we'll go down here and we have Washington do we have a
397:47 here and we have Washington do we have a second address line it doesn't look like
397:49 second address line it doesn't look like it
397:50 it um we have a zip code I believe this is
397:53 um we have a zip code I believe this is the zip
397:55 the zip code and do we need a phone number looks
397:58 code and do we need a phone number looks like we do
397:59 like we do 416 uh 111 11111 okay okay we have one
398:04 416 uh 111 11111 okay okay we have one day or two day shipping why not just
398:06 day or two day shipping why not just have one right and so then we can choose
398:09 have one right and so then we can choose our type of device so we have snow cone
398:11 our type of device so we have snow cone snow cone SSD snow cone optimized I'm
398:15 snow cone SSD snow cone optimized I'm surprised I never took a screenshot of
398:16 surprised I never took a screenshot of this earlier um compute optimized things
398:19 this earlier um compute optimized things like that so you can choose which one
398:20 like that so you can choose which one you want it looks like we're going to
398:21 you want it looks like we're going to see some different options but we'll go
398:23 see some different options but we'll go with snow cone my snow
398:30 cone and snow cones do not ship with a power supply or ethernet cable snow cone
398:32 power supply or ethernet cable snow cone devices are powered by by 45 wat CB C uh
398:36 devices are powered by by 45 wat CB C uh USBC power supply I'll provide my own
398:39 USBC power supply I'll provide my own power supply and cable do not ship with
398:41 power supply and cable do not ship with a power supply re cable that's fine uh
398:44 a power supply re cable that's fine uh snow con Wireless snow con connect to
398:46 snow con Wireless snow con connect to your wireless connection connect the
398:48 your wireless connection connect the buckets you want there's a bucket we
398:49 buckets you want there's a bucket we created
398:50 created earlier Computing use comp using ec2
398:54 earlier Computing use comp using ec2 instances use a device as a mobile data
398:56 instances use a device as a mobile data center by loading ec2 Ami so here's an
398:59 center by loading ec2 Ami so here's an Ami that I might want to
399:01 Ami that I might want to use uh ad iot green validated Ami not
399:04 use uh ad iot green validated Ami not interested in Remote device management
399:05 interested in Remote device management you can use Ops Hub or Etc to monitor
399:09 you can use Ops Hub or Etc to monitor reboot your device that's fine and so
399:12 reboot your device that's fine and so then we need to choose our security
399:15 then we need to choose our security key I don't know if we'll have to set
399:17 key I don't know if we'll have to set the service R we'll see what happens
399:19 the service R we'll see what happens here and uh we'll let it update that's
399:22 here and uh we'll let it update that's fine and so then I guess we just hit
399:25 fine and so then I guess we just hit create job and so I don't really want to
399:27 create job and so I don't really want to order one um so I'm not going to hit
399:29 order one um so I'm not going to hit that button and also it's going to go to
399:31 that button and also it's going to go to the White House and they're going to be
399:32 the White House and they're going to be like Andrew Brown why did you do that so
399:34 like Andrew Brown why did you do that so that's not something I feel like doing
399:36 that's not something I feel like doing today but at least that gives you an
399:38 today but at least that gives you an idea of that process there and I imagine
399:40 idea of that process there and I imagine that uh if you go the other way it's
399:42 that uh if you go the other way it's going to be pretty similar you know it's
399:43 going to be pretty similar you know it's just like same stuff I think uh so you
399:47 just like same stuff I think uh so you it saved that address it's not a real
399:49 it saved that address it's not a real address and the the options are a little
399:52 address and the the options are a little bit uh limited here and it's like NFS
399:55 bit uh limited here and it's like NFS Bas S3 base so it's slightly different
399:57 Bas S3 base so it's slightly different but it's basically the same process just
399:59 but it's basically the same process just curious we'll take a look at the last
400:00 curious we'll take a look at the last one
400:02 one there since there are three options just
400:07 there since there are three options just curious okay Sim similar thing okay so
400:10 curious okay Sim similar thing okay so yeah that's pretty much all I want you
400:12 yeah that's pretty much all I want you to know about um the snow family and
400:14 to know about um the snow family and that's about it
400:15 that's about it [Music]
400:18 [Music] okay hey this is Andrew Brown from exam
400:21 okay hey this is Andrew Brown from exam Pro and we are taking a look at what is
400:23 Pro and we are taking a look at what is a database so a database is a data store
400:26 a database so a database is a data store that stores semi-structured and
400:28 that stores semi-structured and structured data and just to emphasize a
400:30 structured data and just to emphasize a bit more a database stores more complex
400:33 bit more a database stores more complex data stores because it requires using
400:35 data stores because it requires using formal design and modeling techniques so
400:38 formal design and modeling techniques so databases can generally be categorized
400:39 databases can generally be categorized as either being relational so structured
400:41 as either being relational so structured data that strongly represents tabular
400:44 data that strongly represents tabular data so we're talking about tables rows
400:46 data so we're talking about tables rows and columns so there's a concept of row
400:49 and columns so there's a concept of row oriented or colum oriented and then we
400:51 oriented or colum oriented and then we have non relational databases so these
400:54 have non relational databases so these are semi-structured that may or may not
400:56 are semi-structured that may or may not distinctly resemble tabular data so here
400:59 distinctly resemble tabular data so here is a very uh simple example the idea is
401:01 is a very uh simple example the idea is that you might use some kind of language
401:03 that you might use some kind of language like SQL put in your database and you'll
401:05 like SQL put in your database and you'll get back out tables for relational
401:07 get back out tables for relational databases let's just talk about some of
401:08 databases let's just talk about some of the functionality that these databases
401:10 the functionality that these databases have so they can be uh using a special
401:13 have so they can be uh using a special specialized language to uh query so
401:15 specialized language to uh query so retrieve data so in this case SQL
401:17 retrieve data so in this case SQL specialized modeling strategies to
401:19 specialized modeling strategies to optimize retrieval for different use
401:21 optimize retrieval for different use cases uh more fine-tune control over the
401:23 cases uh more fine-tune control over the transformation of the data into useful
401:26 transformation of the data into useful data structures or reports and normally
401:28 data structures or reports and normally a database infers uh someone is usually
401:30 a database infers uh someone is usually using a a relational row oriented data
401:33 using a a relational row oriented data dat store so um you know just understand
401:35 dat store so um you know just understand that when people say database that's
401:37 that when people say database that's usually what they're talking about like
401:38 usually what they're talking about like postgress MySQL relational row store is
401:41 postgress MySQL relational row store is usually the default but uh obviously
401:43 usually the default but uh obviously there's a lot more broader terms there
401:45 there's a lot more broader terms there [Music]
401:48 [Music] okay hey this is Andrew Brown from exam
401:51 okay hey this is Andrew Brown from exam Pro and we are taking a look at what is
401:53 Pro and we are taking a look at what is a data warehouse so it's a relational
401:55 a data warehouse so it's a relational data store designed for analytical
401:57 data store designed for analytical workloads which is generally column
401:59 workloads which is generally column oriented data store okay so companies
402:02 oriented data store okay so companies will have terab and millions of rows of
402:04 will have terab and millions of rows of data and they'll need a fast way to be
402:06 data and they'll need a fast way to be able to produce analytics reports so
402:09 able to produce analytics reports so data warehouses generally perform
402:10 data warehouses generally perform aggregation so aggregation is the idea
402:13 aggregation so aggregation is the idea of grouping data together so find a
402:14 of grouping data together so find a total or an average uh and data
402:16 total or an average uh and data warehouses are optimized around columns
402:18 warehouses are optimized around columns since they need to quickly aggregate
402:20 since they need to quickly aggregate column data and so here is kind of a
402:23 column data and so here is kind of a diagram of um a data warehouse and so
402:26 diagram of um a data warehouse and so the idea is that it could be ingesting
402:28 the idea is that it could be ingesting data uh from a regular database here I'm
402:31 data uh from a regular database here I'm just getting out my pen tool so it could
402:32 just getting out my pen tool so it could be regular database or it be coming from
402:34 be regular database or it be coming from a different data source that isn't
402:35 a different data source that isn't compatible in terms of the schema and
402:37 compatible in terms of the schema and you use like ETL or El or ETL to get
402:41 you use like ETL or El or ETL to get that data into uh that data warehouse so
402:44 that data into uh that data warehouse so data warehouses are generally designed
402:46 data warehouses are generally designed uh to be hot so hot means that they can
402:48 uh to be hot so hot means that they can return queries very fast even though
402:50 return queries very fast even though they have vast amounts of data data
402:52 they have vast amounts of data data warehouses are infrequently accessed
402:54 warehouses are infrequently accessed meaning they aren't intended for
402:55 meaning they aren't intended for real-time reporting but maybe once or
402:57 real-time reporting but maybe once or twice a day uh or once a week to
402:59 twice a day uh or once a week to generate business and uh user reports of
403:02 generate business and uh user reports of course it's going to vary based B on the
403:04 course it's going to vary based B on the um the service that is offering the data
403:06 um the service that is offering the data warehouse a data warehouse needs to
403:07 warehouse a data warehouse needs to consume data from a relational database
403:09 consume data from a relational database on a regular basis and again it can
403:11 on a regular basis and again it can consume it from other places but you'll
403:12 consume it from other places but you'll have to transform it to get it in there
403:15 have to transform it to get it in there [Music]
403:18 [Music] okay hey this is Andrew Brown from exam
403:21 okay hey this is Andrew Brown from exam Pro and we're taking a look at a key
403:22 Pro and we're taking a look at a key value store so a key value store or
403:24 value store so a key value store or database is a type of non-relational
403:26 database is a type of non-relational database or nosql that uses a simple key
403:28 database or nosql that uses a simple key Value method to store data and so key
403:31 Value method to store data and so key value stores are dumb and fast uh but
403:33 value stores are dumb and fast uh but they generally lack features like
403:34 they generally lack features like relationships indexes aggregation of
403:37 relationships indexes aggregation of course there are going to be providers
403:38 course there are going to be providers out there have managed solutions that
403:40 out there have managed solutions that might uh poly fill some of those uh
403:42 might uh poly fill some of those uh issues there but I want to show you the
403:44 issues there but I want to show you the underlying way that key value stores
403:45 underlying way that key value stores work to kind to kind of distinguish them
403:48 work to kind to kind of distinguish them between document stores so a key value
403:50 between document stores so a key value stores literally a unique key alongside
403:53 stores literally a unique key alongside a value and the reason I'm representing
403:55 a value and the reason I'm representing that as zeros and ones is because I want
403:57 that as zeros and ones is because I want you to understand that that's what it is
404:00 you to understand that that's what it is it's basically just some kind of of
404:03 it's basically just some kind of of there and how the key value uh store
404:06 there and how the key value uh store interprets it is going to determine what
404:08 interprets it is going to determine what it is so when you look at a document
404:09 it is so when you look at a document database that is just a key value store
404:12 database that is just a key value store that uh uh interprets the value as being
404:15 that uh uh interprets the value as being documents right and so key value stores
404:18 documents right and so key value stores can and do commonly store um uh multiple
404:23 can and do commonly store um uh multiple uh like an associate array that's pretty
404:24 uh like an associate array that's pretty common so even for Dynamo DB that's how
404:27 common so even for Dynamo DB that's how it does it and so that's why when you
404:28 it does it and so that's why when you look at a key Value Store it looks like
404:31 look at a key Value Store it looks like it uh a a table but it's not actually a
404:34 it uh a a table but it's not actually a table it's schema list because
404:36 table it's schema list because underneath it's really just um you know
404:38 underneath it's really just um you know that associative array and so that's why
404:40 that associative array and so that's why you can have uh columns or sorry rows
404:43 you can have uh columns or sorry rows that have uh different amounts of
404:46 that have uh different amounts of columns okay so due to the design they
404:49 columns okay so due to the design they are able to scale very well beyond a
404:52 are able to scale very well beyond a relational database and they can kind of
404:53 relational database and they can kind of work like a relational database without
404:55 work like a relational database without all the bells and whistles so hopefully
404:57 all the bells and whistles so hopefully you know that makes sense okay
405:03 [Music] all right let's take a look at document
405:05 all right let's take a look at document stores so a document store is a nosql
405:07 stores so a document store is a nosql database that stores documents as its
405:09 database that stores documents as its primary data structure and a document
405:12 primary data structure and a document could be an XML uh type of uh structure
405:15 could be an XML uh type of uh structure but it also could be something like Json
405:17 but it also could be something like Json or Json like document stores are
405:19 or Json like document stores are subclasses of key value stores uh and
405:22 subclasses of key value stores uh and the components of a document store are
405:25 the components of a document store are very uh comparable to relational
405:27 very uh comparable to relational databases so just kind of an example
405:29 databases so just kind of an example here where in a relational database
405:32 here where in a relational database that' be called tables now you have
405:33 that' be called tables now you have collections they were called rows now
405:35 collections they were called rows now they're called documents you had columns
405:37 they're called documents you had columns they had Fields they may have indexes
405:40 they had Fields they may have indexes and then joins might be called embedding
405:41 and then joins might be called embedding and linking so you can translate that
405:43 and linking so you can translate that knowledge over uh you know they they're
405:46 knowledge over uh you know they they're not as um they don't have the same kind
405:48 not as um they don't have the same kind of feature set as a relational database
405:50 of feature set as a relational database but you have better scalability and
405:52 but you have better scalability and honestly document stores are just key
405:54 honestly document stores are just key value stores with some additional
405:55 value stores with some additional features built on top of it
405:57 features built on top of it [Music]
406:01 [Music] okay hey it's Andre Brown from exam Pro
406:03 okay hey it's Andre Brown from exam Pro and we're going to take a look at the
406:04 and we're going to take a look at the nosql database services that are
406:06 nosql database services that are available on AWS so we have Dynamo DB
406:08 available on AWS so we have Dynamo DB which is a serverless nosql key value
406:10 which is a serverless nosql key value and document database it is designed to
406:12 and document database it is designed to scale to billions of records with
406:14 scale to billions of records with guaranteed consistent data returned in
406:17 guaranteed consistent data returned in at least a second you do not have to
406:19 at least a second you do not have to worry about managing shards and Dynamo
406:22 worry about managing shards and Dynamo DB is ad's Flagship database service
406:25 DB is ad's Flagship database service meaning whenever we think of a database
406:27 meaning whenever we think of a database service that just scales is cost
406:28 service that just scales is cost effective and very fast we should think
406:30 effective and very fast we should think of Dynamo DB and in 2019 Amazon the
406:33 of Dynamo DB and in 2019 Amazon the online shopping retail shut down their
406:36 online shopping retail shut down their last Oracle database and completed their
406:38 last Oracle database and completed their migration to Dynamo DB so they had 7,500
406:41 migration to Dynamo DB so they had 7,500 Oracle databases with 75 pedabytes of
406:44 Oracle databases with 75 pedabytes of data and with Dynamo DB they reduce that
406:46 data and with Dynamo DB they reduce that cost by 60% and reduced the latency by
406:48 cost by 60% and reduced the latency by 40% so that's kind of to be like a
406:51 40% so that's kind of to be like a testimonial between relational and a no
406:53 testimonial between relational and a no escal database so when we want a
406:55 escal database so when we want a massively scalable database that is what
406:58 massively scalable database that is what we want Dynamo db4 and I really just
407:00 we want Dynamo db4 and I really just want to put that there because it if you
407:02 want to put that there because it if you remember that you're going to always be
407:04 remember that you're going to always be able to pass uh or get those questions
407:06 able to pass uh or get those questions right on the exam okay then we have
407:08 right on the exam okay then we have document DB so this is a nol document
407:10 document DB so this is a nol document database that is mongod DB compatible uh
407:13 database that is mongod DB compatible uh so mongodb is very popular no SC among
407:16 so mongodb is very popular no SC among developers there were open source
407:18 developers there were open source licensing issues around using open
407:20 licensing issues around using open source mongodb so ad us got around it by
407:21 source mongodb so ad us got around it by just building their own mongodb database
407:23 just building their own mongodb database basically so when you want a mongod DB
407:26 basically so when you want a mongod DB like database you're going to be using
407:28 like database you're going to be using document DB we have Amazon key spaces
407:31 document DB we have Amazon key spaces this is a fully managed apoe Cassandra
407:33 this is a fully managed apoe Cassandra database so Cassandra is an open source
407:35 database so Cassandra is an open source nosql key value database similar to
407:37 nosql key value database similar to Dynamo DB that is column or store
407:39 Dynamo DB that is column or store database but has some additional
407:41 database but has some additional functionality so when you want to use
407:42 functionality so when you want to use Apache Cassandra you're using Amazon key
407:46 Apache Cassandra you're using Amazon key [Music]
407:49 [Music] spaces hey this is Andrew Brown from
407:52 spaces hey this is Andrew Brown from exam Pro and we are taking a look at
407:53 exam Pro and we are taking a look at relational database Services starting
407:55 relational database Services starting with relational database service RDS and
407:57 with relational database service RDS and this is a relational database service
407:59 this is a relational database service that supports multiple SQL engines so
408:02 that supports multiple SQL engines so relational is synomous with SQL and
408:04 relational is synomous with SQL and online transactional processing
408:06 online transactional processing oltp and relational databases are the
408:08 oltp and relational databases are the most commonly used type of database
408:11 most commonly used type of database among tech companies and startups just
408:13 among tech companies and startups just because they're so easy to use I use
408:15 because they're so easy to use I use them I love them um RDS supports the
408:17 them I love them um RDS supports the following SQL engines we first have
408:20 following SQL engines we first have MySQL so this is the most popular open
408:22 MySQL so this is the most popular open source SQL database uh and it was
408:24 source SQL database uh and it was purchased and is now owned by Oracle uh
408:27 purchased and is now owned by Oracle uh and there's an interesting story there
408:29 and there's an interesting story there because when Oracle purchased it they
408:31 because when Oracle purchased it they weren't supposed to have it Mario DB was
408:33 weren't supposed to have it Mario DB was or sorry myell was sold to Oracle Sun
408:35 or sorry myell was sold to Oracle Sun systems and then within the year um uh
408:39 systems and then within the year um uh Oracle purchased it from them and the
408:42 Oracle purchased it from them and the original creators never wanted it to go
408:43 original creators never wanted it to go to Oracle um just because of their uh
408:46 to Oracle um just because of their uh the way they do licensing and things
408:47 the way they do licensing and things like that and so um the original
408:50 like that and so um the original creators came back and they decided to
408:52 creators came back and they decided to fork myql and then maintain it as Mario
408:55 fork myql and then maintain it as Mario DB just so that uh you know oracle never
408:58 DB just so that uh you know oracle never kind of pushed away the most popular um
409:00 kind of pushed away the most popular um database so that everyone had to go to a
409:02 database so that everyone had to go to a p solution then you have postest so psql
409:05 p solution then you have postest so psql as it's commonly known is the most
409:07 as it's commonly known is the most popular open source SQL database among
409:09 popular open source SQL database among developers this is the one I like to use
409:11 developers this is the one I like to use because it has so many Rich features
409:13 because it has so many Rich features over my SQL uh but but it does come with
409:15 over my SQL uh but but it does come with added complexity then Oracle has its own
409:18 added complexity then Oracle has its own SQL proprietary database which is well
409:20 SQL proprietary database which is well used by Enterprise companies but you
409:22 used by Enterprise companies but you have to buy a license to use it then you
409:25 have to buy a license to use it then you have Microsoft SQL so Microsoft's
409:27 have Microsoft SQL so Microsoft's proprietary SQL database and with this
409:29 proprietary SQL database and with this one you have to buy a license to use it
409:31 one you have to buy a license to use it uh then you have Aurora so this is a
409:33 uh then you have Aurora so this is a fully managed database uh and there's a
409:36 fully managed database uh and there's a lot more to uh going on here with Aurora
409:38 lot more to uh going on here with Aurora so we'll talk about it it almost acts as
409:40 so we'll talk about it it almost acts as a separate service but it is powered by
409:42 a separate service but it is powered by RDS so aora is a fully managed database
409:45 RDS so aora is a fully managed database of either myell so five times faster or
409:48 of either myell so five times faster or postest SQL three times faster database
409:51 postest SQL three times faster database so when you want a highly available
409:53 so when you want a highly available durable and scalable and secure
409:55 durable and scalable and secure relational database for post mqu you
409:58 relational database for post mqu you want to use Aurora uh then you have
410:00 want to use Aurora uh then you have Aurora serverless so this is a ser on
410:03 Aurora serverless so this is a ser on demand version of Aurora so when you
410:04 demand version of Aurora so when you want the most of the benefits of Aurora
410:06 want the most of the benefits of Aurora but you can trade uh off to have cold
410:09 but you can trade uh off to have cold starts or you don't have lots of traffic
410:11 starts or you don't have lots of traffic or demand uh this is a way you can use
410:13 or demand uh this is a way you can use Aurora in a serverless way then you have
410:15 Aurora in a serverless way then you have RDS on VMware so this allows you to
410:17 RDS on VMware so this allows you to deploy RDS supported engines to on
410:19 deploy RDS supported engines to on premise data centers uh the data center
410:22 premise data centers uh the data center must be using VMware for Server
410:24 must be using VMware for Server virtualization so when you want
410:26 virtualization so when you want databases managed by RDS on your own
410:28 databases managed by RDS on your own database Center uh and yeah I realize
410:31 database Center uh and yeah I realize that this is a small spelling mistake so
410:32 that this is a small spelling mistake so say just on here but yeah there you
410:35 say just on here but yeah there you [Music]
410:38 [Music] go hey this is Andrew Brown from exam
410:40 go hey this is Andrew Brown from exam Pro and we're looking at the other
410:42 Pro and we're looking at the other database services that abos has because
410:44 database services that abos has because there's just a few loose ones here so
410:45 there's just a few loose ones here so let's talk about redshift so it is a
410:47 let's talk about redshift so it is a petabyte size data warehouse and data
410:50 petabyte size data warehouse and data warehouses uh are for online analytical
410:52 warehouses uh are for online analytical processing oap and data warehouses can
410:55 processing oap and data warehouses can be expensive because they are keeping
410:57 be expensive because they are keeping data hot meaning that they can run a
410:59 data hot meaning that they can run a very complex query and a large amount of
411:01 very complex query and a large amount of data and get that data back very fast so
411:03 data and get that data back very fast so when you need to quickly generate
411:05 when you need to quickly generate analytics or reports from a large amount
411:07 analytics or reports from a large amount of data you're going to be using red
411:09 of data you're going to be using red shift then you have elastic cache so
411:11 shift then you have elastic cache so this is a managed database of an
411:12 this is a managed database of an inmemory and caching open source
411:15 inmemory and caching open source databases such as reddis or memcache so
411:17 databases such as reddis or memcache so when you need to improve the performance
411:18 when you need to improve the performance of an application by adding a caching
411:20 of an application by adding a caching layer in front of your web servers or
411:21 layer in front of your web servers or database you're going to be using
411:23 database you're going to be using elastic cache then you have Neptune this
411:26 elastic cache then you have Neptune this is a managed graph database the data is
411:28 is a managed graph database the data is represented as interconnected nodes I
411:31 represented as interconnected nodes I believe that it uses gremlin is the way
411:33 believe that it uses gremlin is the way to interface with it which is no
411:34 to interface with it which is no surprise because that's what it looks
411:36 surprise because that's what it looks like most class providers are using so
411:39 like most class providers are using so when you need to understand the
411:40 when you need to understand the connections between data so mapping
411:42 connections between data so mapping fraud Rings or social media
411:43 fraud Rings or social media relationships uh very relational
411:45 relationships uh very relational database heavy information you're going
411:47 database heavy information you're going to want to use Neptune we have Amazon
411:49 to want to use Neptune we have Amazon time streams it's a fully managed time
411:51 time streams it's a fully managed time series database so think of devices that
411:53 series database so think of devices that send lots of data that are
411:54 send lots of data that are time-sensitive such as iot devices so
411:57 time-sensitive such as iot devices so when you need to measure how things
411:58 when you need to measure how things change over time we have Amazon Quantum
412:01 change over time we have Amazon Quantum Ledger database this is a fully managed
412:04 Ledger database this is a fully managed uh Ledger database that provides
412:05 uh Ledger database that provides transparent immutable cryptographically
412:08 transparent immutable cryptographically variable transaction logs so when you
412:10 variable transaction logs so when you need to record a history of financial
412:12 need to record a history of financial activities that can be trusted and the
412:15 activities that can be trusted and the last one here is database migration
412:16 last one here is database migration service DMS it's not a database per se
412:19 service DMS it's not a database per se but it's a migration service so you can
412:22 but it's a migration service so you can migrate from on premise database to
412:24 migrate from on premise database to adabs from two databases in different or
412:27 adabs from two databases in different or same adus accounts using different SQL
412:28 same adus accounts using different SQL engines and from an SQL to a nosql
412:31 engines and from an SQL to a nosql database and I'm pretty sure we cover
412:32 database and I'm pretty sure we cover this in a bit uh greater detail in this
412:34 this in a bit uh greater detail in this course
412:36 course [Music]
412:39 [Music] okay all right let's go take a look at
412:42 okay all right let's go take a look at Dynamo DB uh which is ad's nosql
412:45 Dynamo DB uh which is ad's nosql database so we'll go over to Dynamo
412:52 DB and what we'll do is create ourselves a new table and we'll just say my Dynamo
412:56 a new table and we'll just say my Dynamo DB table and you always have to choose a
412:59 DB table and you always have to choose a partition key you don't necessarily have
413:01 partition key you don't necessarily have to have a sort key but it could be
413:02 to have a sort key but it could be something
413:03 something like um like you want it to be really
413:07 like um like you want it to be really unique so it could be like email and
413:09 unique so it could be like email and this one could be created at
413:12 this one could be created at right and so we have string binary
413:15 right and so we have string binary notice that the the types are very
413:17 notice that the the types are very simple then for settings we have default
413:19 simple then for settings we have default settings or customized settings so the
413:20 settings or customized settings so the default is use provision capacity mode
413:22 default is use provision capacity mode rewrite five rules Etc custom no
413:26 rewrite five rules Etc custom no secondary indexes use KMS so I'm going
413:28 secondary indexes use KMS so I'm going to just expand that to see what I'm
413:30 to just expand that to see what I'm looking at we have two options here on
413:33 looking at we have two options here on demand uh so simplify billing by paying
413:35 demand uh so simplify billing by paying the actual reads and rights you use or
413:37 the actual reads and rights you use or provisioned which is this is where you
413:39 provisioned which is this is where you get a guarantee of performance so if you
413:41 get a guarantee of performance so if you want to be able to do you know whatever
413:43 want to be able to do you know whatever it is a thousand I don't know what it
413:45 it is a thousand I don't know what it goes up to but like a thousand read
413:47 goes up to but like a thousand read writes per second then that's what
413:48 writes per second then that's what you're paying for okay you're paying for
413:50 you're paying for okay you're paying for being a having a guarantee of that um of
413:55 being a having a guarantee of that um of that capacity okay I'm not going to
413:56 that capacity okay I'm not going to create any secondary indexes but that's
413:58 create any secondary indexes but that's just like another way to uh look at data
414:01 just like another way to uh look at data notice down below that we have a cost of
414:04 notice down below that we have a cost of $2.1 uh then we have encryption at rest
414:06 $2.1 uh then we have encryption at rest so you can do owned by Amazon Dynamo DB
414:08 so you can do owned by Amazon Dynamo DB that's pretty much the same as like adab
414:11 that's pretty much the same as like adab us has or S3
414:12 us has or S3 has ssse S3 there you could use uh CM
414:18 has ssse S3 there you could use uh CM actually I guess both of these are
414:19 actually I guess both of these are probably KMS I would imagine we'll go
414:21 probably KMS I would imagine we'll go ahead and create the table
414:23 ahead and create the table here and let going to create the table
414:25 here and let going to create the table this is usually really really
414:28 this is usually really really fast we'll go here and what we can do is
414:32 fast we'll go here and what we can do is is insert some data so as it's just
414:34 is insert some data so as it's just starting up here we can go over
414:36 starting up here we can go over to our tables they recently changed this
414:39 to our tables they recently changed this UI so that's why I look a bit
414:42 UI so that's why I look a bit confused U view items up here okay and
414:45 confused U view items up here okay and then from here we can create an item so
414:47 then from here we can create an item so I can add something to say so Andrew
414:50 I can add something to say so Andrew exampro doco and
414:57 2021 uh well we'll just do the future so
414:59 uh well we'll just do the future so let's say 20
415:01 let's say 20 25 505 I don't want to have to think too
415:03 25 505 I don't want to have to think too hard here but we can add additional
415:05 hard here but we can add additional information so I can say like uh today
415:11 information so I can say like uh today true we could say
415:14 true we could say um make like a
415:17 um make like a list uh you know food and then I could
415:22 list uh you know food and then I could go here and then add a
415:24 go here and then add a string it is not working oh there we go
415:28 string it is not working oh there we go there we are so we could say like um
415:31 there we are so we could say like um banana and then we could say pizza right
415:34 banana and then we could say pizza right we can go ahead and create that
415:36 we can go ahead and create that item and so now that item is in our
415:39 item and so now that item is in our database uh we can do a scan that will
415:41 database uh we can do a scan that will return all items we can query we can
415:42 return all items we can query we can actually have uh some limitations of
415:44 actually have uh some limitations of what we're choosing there's the party Q
415:46 what we're choosing there's the party Q editor so we can use SQL to select it um
415:51 editor so we can use SQL to select it um I have not used this
415:53 I have not used this before party Q um AWS or party Q Dynamo
416:00 before party Q um AWS or party Q Dynamo DB
416:07 examples I'm hoping I can just find like an example of some of the language
416:08 an example of some of the language getting started here I don't need to I
416:10 getting started here I don't need to I don't need an explanation I just show me
416:12 don't need an explanation I just show me an example query here and I will I'll
416:15 an example query here and I will I'll get to it
416:17 get to it here okay so here's some examples right
416:19 here okay so here's some examples right so maybe we can give this a
416:21 so maybe we can give this a go um so we have our table here so my
416:27 go um so we have our table here so my Dynamo DB
416:30 Dynamo DB table and I just want the email that
416:33 table and I just want the email that back we don't need a
416:46 works there we go I'm not sure if we could select additional data there so I
416:47 could select additional data there so I know that we had some other things like
416:49 know that we had some other things like uh
416:55 food there it is okay so that's really nice um addition to it dynb can stream
417:00 nice um addition to it dynb can stream things into a Dynamo DB stream to go to
417:02 things into a Dynamo DB stream to go to and do a lot of fun things so there all
417:04 and do a lot of fun things so there all sorts of things you can do with Dynamo
417:05 sorts of things you can do with Dynamo DB but um I'm pretty much done with this
417:08 DB but um I'm pretty much done with this so I'm going to go ahead and delete this
417:11 so I'm going to go ahead and delete this table and notice that it also created
417:13 table and notice that it also created some cloudwatch alarms so we want to
417:14 some cloudwatch alarms so we want to delete those as well create a backup no
417:16 delete those as well create a backup no we do not care go ahead and delete
417:19 we do not care go ahead and delete that and that is Dynamo
417:22 that and that is Dynamo [Music]
417:26 [Music] DB okay so now I want to show you uh RDS
417:29 DB okay so now I want to show you uh RDS or relational database service so go to
417:31 or relational database service so go to the top here type in RDS and we'll make
417:34 the top here type in RDS and we'll make our way over there and so RDS is great
417:37 our way over there and so RDS is great because it allows us to launch
417:39 because it allows us to launch relational databases um sometimes the UI
417:42 relational databases um sometimes the UI is slow I'm not sure why it's taking so
417:44 is slow I'm not sure why it's taking so long to load today but every day is a
417:46 long to load today but every day is a bit different and so what we're going to
417:47 bit different and so what we're going to do is go ahead and create a new database
417:50 do is go ahead and create a new database uh you're going to notice that we're
417:51 uh you're going to notice that we're going to have the option between
417:53 going to have the option between creating a standard or easy I stick with
417:55 creating a standard or easy I stick with standard just because I don't like how
417:57 standard just because I don't like how easy hides a lot of stuff from us even
418:00 easy hides a lot of stuff from us even here like it says two cents per hour but
418:02 here like it says two cents per hour but it's not giving us the full cost so I
418:05 it's not giving us the full cost so I really don't trust it because if you go
418:06 really don't trust it because if you go down here and you chose their Dev test
418:08 down here and you chose their Dev test here look it's like $100 it's not
418:10 here look it's like $100 it's not showing the the cost preview right now
418:13 showing the the cost preview right now maybe because we didn't choose the
418:14 maybe because we didn't choose the database type sorry I wanted to choose
418:16 database type sorry I wanted to choose postgress but before we do that let's
418:18 postgress but before we do that let's look at the engine types we have Amazon
418:20 look at the engine types we have Amazon Aurora so we have between MySQL and
418:22 Aurora so we have between MySQL and postgress MySQL Marb postgress Oracle
418:25 postgress MySQL Marb postgress Oracle microsoftsql notice for Microsoft SQL it
418:28 microsoftsql notice for Microsoft SQL it comes with a license you don't have to
418:30 comes with a license you don't have to do anything with that it might change
418:33 do anything with that it might change based on the addition
418:34 based on the addition here uh nope comes with a license for
418:37 here uh nope comes with a license for all them which is great if you want to
418:39 all them which is great if you want to bring your own license that's where you
418:40 bring your own license that's where you need a dedicated host right running uh
418:43 need a dedicated host right running uh Microsoft SQL for Oracle uh you have to
418:46 Microsoft SQL for Oracle uh you have to bring your own license that's going to
418:48 bring your own license that's going to be based on um importing with the Abus
418:50 be based on um importing with the Abus license manager if we go over to postest
418:53 license manager if we go over to postest which is what I like to use uh we're
418:55 which is what I like to use uh we're going to set it to Dev test to try to
418:56 going to set it to Dev test to try to get the cheapest cost scroll down look
418:57 get the cheapest cost scroll down look $118 we can get it cheaper we get super
419:00 $118 we can get it cheaper we get super cheap so here are the password going to
419:02 cheap so here are the password going to be testing 1 2 3 a capital on the T so
419:06 be testing 1 2 3 a capital on the T so and an explanation mark on the end okay
419:08 and an explanation mark on the end okay because it has a bunch of requirements
419:09 because it has a bunch of requirements of what it wants here I want a T2 micro
419:13 of what it wants here I want a T2 micro so I'm just going to scroll down
419:16 so I'm just going to scroll down here what is going on here standard oh
419:19 here what is going on here standard oh look M classes I don't want an m class I
419:22 look M classes I don't want an m class I want a burstable class that's the cheap
419:24 want a burstable class that's the cheap ones and so we go here can we still do a
419:27 ones and so we go here can we still do a T2 micro or is it now
419:29 T2 micro or is it now T3 so I don't see
419:32 T3 so I don't see T2 so I imagine a T3 micro must be the
419:35 T2 so I imagine a T3 micro must be the new itus free tier so we go it free tier
419:38 new itus free tier so we go it free tier here right and if I go
419:42 here right and if I go to
419:51 databases um RDS on the t2 micro 750 hours but I can't select
419:53 hours but I can't select it
419:55 it so I'm going to assume that the T3 micro
419:59 so I'm going to assume that the T3 micro must be the new tier if it's not there
420:01 must be the new tier if it's not there right unless it's saying include
420:03 right unless it's saying include previous
420:04 previous generations and then maybe I can see it
420:14 then okay so I don't see it there I really don't like how they've
420:16 there I really don't like how they've changed this on
420:19 changed this on me okay so the oldest I can choose is a
420:21 me okay so the oldest I can choose is a T3 micro which is fine I just I just
420:24 T3 micro which is fine I just I just know T2 being the free tier that's all
420:26 know T2 being the free tier that's all uh this is fine we don't want Auto
420:28 uh this is fine we don't want Auto scaling turned on for our example here
420:30 scaling turned on for our example here we do not want a multi-az so do not
420:33 we do not want a multi-az so do not create a standby that's going to really
420:35 create a standby that's going to really jump up our cost we don't need Public
420:37 jump up our cost we don't need Public Access it will create a VPC that is fine
420:40 Access it will create a VPC that is fine password authentication is fine we have
420:42 password authentication is fine we have to go in here which I don't know why
420:43 to go in here which I don't know why they just don't keep that expanded
420:44 they just don't keep that expanded because you always have to come in here
420:46 because you always have to come in here name your database so my database we
420:49 name your database so my database we choose our postest version here I'm
420:51 choose our postest version here I'm going to turn backups off uh because if
420:53 going to turn backups off uh because if we
420:53 we don't if we don't it's going to take
420:55 don't if we don't it's going to take forever to launch this thing encryption
420:58 forever to launch this thing encryption is turned on you can turn it off but
421:00 is turned on you can turn it off but generally it's not recom commended we
421:03 generally it's not recom commended we can have performance insights turned on
421:04 can have performance insights turned on I'm going to turn the retention oh we'll
421:06 I'm going to turn the retention oh we'll leave it to 7 days cuz we can't turn
421:08 leave it to 7 days cuz we can't turn that off we don't need enhanced
421:10 that off we don't need enhanced monitoring so I'm just going to turn
421:11 monitoring so I'm just going to turn that
421:12 that off and uh that's fine we're not going
421:15 off and uh that's fine we're not going to enable delete protection here and so
421:19 to enable delete protection here and so we are good we can now go ahead and
421:21 we are good we can now go ahead and create our
421:29 database and what we'll do here is wait for that database to be created so the
421:31 for that database to be created so the thing is is like
421:32 thing is is like if we're doing the solutions architect
421:34 if we're doing the solutions architect or the developer social stuff I'd
421:37 or the developer social stuff I'd actually show you how to connect to the
421:38 actually show you how to connect to the database um it's not that hard to do
421:41 database um it's not that hard to do like you just have to connect uh grab
421:42 like you just have to connect uh grab all the database information so it's
421:45 all the database information so it's going to have an endpoint a port stuff
421:46 going to have an endpoint a port stuff like that and you use something like
421:48 like that and you use something like table Plus or something to connect to
421:50 table Plus or something to connect to the database but that's out of scope of
421:52 the database but that's out of scope of the certified Cloud partitioner I'm just
421:54 the certified Cloud partitioner I'm just going through the motions to show you
421:56 going through the motions to show you that you can create an RDS database very
421:58 that you can create an RDS database very easily but not how to connect to it and
422:00 easily but not how to connect to it and actually utilize it okay and so that
422:03 actually utilize it okay and so that would spin up and we would have a server
422:05 would spin up and we would have a server and after that we can just go ahead and
422:07 and after that we can just go ahead and delete the server here so I just say
422:08 delete the server here so I just say delete me
422:12 delete me okay and that's all there really is to
422:15 okay and that's all there really is to it there is the special type of um
422:17 it there is the special type of um database like Aurora doesn't have its
422:19 database like Aurora doesn't have its own like console page it's part of RDS
422:21 own like console page it's part of RDS so if you want to spend up Aurora you
422:23 so if you want to spend up Aurora you just choose the compatibility you want
422:25 just choose the compatibility you want you can choose between provisioned or
422:27 you can choose between provisioned or serverless um and serverless is supposed
422:29 serverless um and serverless is supposed to be really good for um scaling to zero
422:32 to be really good for um scaling to zero cost so that's something there so you
422:34 cost so that's something there so you fill that all out but the initial cost
422:36 fill that all out but the initial cost is a lot more expensive you can't choose
422:37 is a lot more expensive you can't choose a T2 micro here um unless it lets you
422:41 a T2 micro here um unless it lets you now it is
422:43 now it is for provision it's
422:46 for provision it's uh oh T2 T3 medium is the smallest you
422:50 uh oh T2 T3 medium is the smallest you can go okay so if you reach to the point
422:52 can go okay so if you reach to the point where using a a mediumsized database
422:55 where using a a mediumsized database then you might consider moving over to
422:56 then you might consider moving over to Aurora just because it's going to be
422:58 Aurora just because it's going to be highly scalable Etc like that um so
423:01 highly scalable Etc like that um so that's a consider there there's also
423:02 that's a consider there there's also something called Babble fish um that us
423:05 something called Babble fish um that us announced last year when I when I shot
423:07 announced last year when I when I shot this um or when I'm shooting this as of
423:09 this um or when I'm shooting this as of now and the idea was to make it
423:11 now and the idea was to make it compatible with myql SQL Server to
423:13 compatible with myql SQL Server to migrate over to Aurora post SQL which is
423:16 migrate over to Aurora post SQL which is kind of interesting um but that's about
423:18 kind of interesting um but that's about it so if our database is destroying I
423:20 it so if our database is destroying I think it is just going to go back over
423:22 think it is just going to go back over here to
423:27 RDS it's taking a long time to load today
423:35 and uh I think it's already deleted maybe we go to databases here it's
423:36 maybe we go to databases here it's deleting so I'm confident it's going to
423:39 deleting so I'm confident it's going to delete so there we
423:40 delete so there we [Music]
423:43 [Music] go all right let's take a look at Red
423:46 go all right let's take a look at Red shift so red shift is a data warehouse
423:48 shift so red shift is a data warehouse and it's generally really expensive so
423:50 and it's generally really expensive so it's not something that you're going to
423:51 it's not something that you're going to want to launch uh dayto day here but
423:53 want to launch uh dayto day here but let's see how far we can get with it um
423:55 let's see how far we can get with it um just by running through it so what we'll
423:58 just by running through it so what we'll do is go ahead and create a cluster and
423:59 do is go ahead and create a cluster and again you can just watch me do this you
424:00 again you can just watch me do this you don't have to create uh you don't have
424:01 don't have to create uh you don't have to create one yourself uh so free trial
424:04 to create one yourself uh so free trial configure for learning that sounds good
424:05 configure for learning that sounds good to me uh is free for limited time if
424:07 to me uh is free for limited time if your organization has never created a
424:09 your organization has never created a cluster I rarely ever create these so
424:11 cluster I rarely ever create these so when the trial ends delete your cluster
424:12 when the trial ends delete your cluster to avoid the charges of on demand okay
424:15 to avoid the charges of on demand okay that sounds fair um so here we're going
424:18 that sounds fair um so here we're going to have two vpcu it's going to launch a
424:20 to have two vpcu it's going to launch a d a
424:22 d a dc2
424:24 dc2 large so it's look that up for
424:39 please um I think it's loading right here okay
424:42 um I think it's loading right here okay so I don't know how much it is but I
424:44 so I don't know how much it is but I know it is not cheap and down below we
424:47 know it is not cheap and down below we have sample data is loaded into your red
424:49 have sample data is loaded into your red shift cluster that sounds good to me
424:51 shift cluster that sounds good to me ticket is the sample data
424:53 ticket is the sample data okay ticket sample
424:56 okay ticket sample data red shift I just imagine they
424:59 data red shift I just imagine they probably have like a tutorial for it
425:00 probably have like a tutorial for it here
425:02 here they do right
425:04 they do right here and so because I want to know what
425:06 here and so because I want to know what we need to do to query it right if we
425:08 we need to do to query it right if we can even query it via the interface here
425:10 can even query it via the interface here so the admin user is adus user um and
425:13 so the admin user is adus user um and the password is going to be capital T
425:15 the password is going to be capital T testing 1 2 3 4 5 6 exclamation and
425:18 testing 1 2 3 4 5 6 exclamation and we'll hit create
425:20 we'll hit create cluster oh cool we can create the data
425:22 cluster oh cool we can create the data right in here so that's what I wasn't
425:23 right in here so that's what I wasn't sure about whether we would be able to
425:26 sure about whether we would be able to just query it in line because before
425:28 just query it in line because before you'd have to use Java with j jdbc or
425:31 you'd have to use Java with j jdbc or odbc driver and download the jar and
425:35 odbc driver and download the jar and it's not as fun as it sounds of course
425:38 it's not as fun as it sounds of course but it looks like we can query data once
425:39 but it looks like we can query data once the data is
425:41 the data is loaded so that looks really good I guess
425:44 loaded so that looks really good I guess we can pull data in from um the
425:46 we can pull data in from um the marketplace so that's looks pretty nice
425:49 marketplace so that's looks pretty nice too and I guess we could probably
425:51 too and I guess we could probably integrate into other things like quick
425:52 integrate into other things like quick site because you probably want to adjust
425:54 site because you probably want to adjust your data over
425:55 your data over there again I usually don't spend a lot
425:58 there again I usually don't spend a lot of time in red shift um but looks like
426:00 of time in red shift um but looks like it's a lot easier to use very impressed
426:02 it's a lot easier to use very impressed with this so I don't know how long it
426:04 with this so I don't know how long it takes to uh launch a red shift cluster I
426:06 takes to uh launch a red shift cluster I mean it is 160 GB uh of of of storage
426:10 mean it is 160 GB uh of of of storage there it's uh even at the smallest it's
426:13 there it's uh even at the smallest it's pretty large so what I'm going to do is
426:14 pretty large so what I'm going to do is to stop the video and I'll be back when
426:16 to stop the video and I'll be back when this is done
426:17 this is done okay okay so after a short little wait
426:20 okay okay so after a short little wait here um it was a lot faster than I was
426:22 here um it was a lot faster than I was expecting but uh it's available and so
426:24 expecting but uh it's available and so looks like here it says to query the
426:25 looks like here it says to query the sample data use red shift version two so
426:28 sample data use red shift version two so I'm going to click that and I'm sure
426:29 I'm going to click that and I'm sure there's tons of buttons to get here and
426:31 there's tons of buttons to get here and it'd be great if it just populated the
426:33 it'd be great if it just populated the query for me um it doesn't but this
426:35 query for me um it doesn't but this looks really nice really nice UI I
426:38 looks really nice really nice UI I wonder if it has like some existing
426:40 wonder if it has like some existing queries no that's okay so what I'm going
426:43 queries no that's okay so what I'm going to do here is I'm going to go ahead and
426:47 to do here is I'm going to go ahead and pull out this query and see if we can
426:49 pull out this query and see if we can get this to work here never found out
426:51 get this to work here never found out what those prices were
426:53 what those prices were though okay and what we'll do is hit run
426:57 though okay and what we'll do is hit run I like how there's like a limit of 100
426:59 I like how there's like a limit of 100 but here it has that so we'll go ahead
427:00 but here it has that so we'll go ahead and hit run and see what data we get so
427:03 and hit run and see what data we get so relation sales does not
427:06 relation sales does not exist okay
427:08 exist okay so what's going on
427:15 here um we'll go up here so most of the examples in the red shift documentation
427:17 examples in the red shift documentation uses uh a sample database called ticket
427:19 uses uh a sample database called ticket this sample this small database consists
427:21 this sample this small database consists of seven tables you can load the ticket
427:23 of seven tables you can load the ticket data set by following the this
427:27 data set by following the this here okay so to load the sample data
427:30 here okay so to load the sample data from Amazon S
427:38 3 okay so I would have thought it already had
427:40 so I would have thought it already had the data in there I could have swore it
427:42 the data in there I could have swore it would
427:44 would have
427:46 have Dev
427:53 public tables zero
427:55 tables zero tables okay so I don't think there's any
427:58 tables okay so I don't think there's any data in here and so we're going to have
428:00 data in here and so we're going to have to load it ourselves
428:02 to load it ourselves I really thought it would have added it
428:03 I really thought it would have added it for us uh but let's go ahead and create
428:05 for us uh but let's go ahead and create these tables and see if this is as easy
428:08 these tables and see if this is as easy as we think so run that create that
428:16 table cool okay we got it down here we'll run that we'll just run each
428:18 here we'll run that we'll just run each at a
428:20 at a time I think there's seven of them so
428:35 date already exists okay that's fine event already exists saying all these
428:37 event already exists saying all these tables
428:39 tables exist maybe I just wasn't
428:49 patient okay
428:51 okay um interesting all right so maybe we'll
428:54 um interesting all right so maybe we'll go back and uh run that query maybe we
428:56 go back and uh run that query maybe we just had to wait a little while for that
428:57 just had to wait a little while for that data to
428:59 data to load run
429:03 load run okay so you know what I think it was
429:05 okay so you know what I think it was doing this for us like if if if it did
429:07 doing this for us like if if if it did not create it for us we would have to go
429:09 not create it for us we would have to go through all these steps which is fine
429:11 through all these steps which is fine because we're learning a little bit
429:12 because we're learning a little bit about um uh red shift but um uh it looks
429:17 about um uh red shift but um uh it looks like we just had to wait there so it
429:18 like we just had to wait there so it looks like you would run those you
429:19 looks like you would run those you download that you use the copy command
429:22 download that you use the copy command to bring it over there um it looks like
429:24 to bring it over there um it looks like you can do all of this via the uh this
429:26 you can do all of this via the uh this interface here and we've done a queries
429:28 interface here and we've done a queries that's kind of
429:29 that's kind of cool um I imagine you probably could
429:32 cool um I imagine you probably could like save it or export it what if we
429:33 like save it or export it what if we chart it what happens okay you can chart
429:36 chart it what happens okay you can chart it that's kind of
429:39 it that's kind of fun can we export it out to oh just we
429:42 fun can we export it out to oh just we can save it I thought maybe it could
429:43 can save it I thought maybe it could export out to Quick site but I I suppose
429:45 export out to Quick site but I I suppose you'd rebuild it in quick site a but
429:47 you'd rebuild it in quick site a but yeah I guess that's it right there so
429:49 yeah I guess that's it right there so that's pretty darn simple so what I'm
429:51 that's pretty darn simple so what I'm going to do is make my way back over to
429:53 going to do is make my way back over to Red shift because we are done for this
430:01 example and we will go over to clusters here and I'm going to go ahead
430:04 here and I'm going to go ahead and delete my
430:11 cluster delete create file snap shot
430:14 delete create file snap shot nope
430:16 nope delete delete the cluster there we go so
430:20 delete delete the cluster there we go so I'm pretty sure that will succeed no
430:21 I'm pretty sure that will succeed no problem there and we are done with red
430:23 problem there and we are done with red shift and red shift is super expensive
430:25 shift and red shift is super expensive so just make sure that thing deletes
430:27 so just make sure that thing deletes okay
430:32 [Music] hey this is Andrew Brown from exam Pro
430:34 hey this is Andrew Brown from exam Pro and we are taking a look here at Cloud
430:36 and we are taking a look here at Cloud native networking Services um and so I
430:39 native networking Services um and so I have this architectural diagram I
430:40 have this architectural diagram I created which has a lot of networking
430:41 created which has a lot of networking components uh when people create
430:43 components uh when people create networking diagrams for AWS they don't
430:45 networking diagrams for AWS they don't always include all these things here
430:47 always include all these things here even though they're there so we're just
430:48 even though they're there so we're just being a little bit verbo so you can see
430:50 being a little bit verbo so you can see okay the first thing is our VPC our
430:52 okay the first thing is our VPC our virtual private Cloud this is a
430:54 virtual private Cloud this is a logically isolated section of the aabus
430:56 logically isolated section of the aabus cloud where you can launch adus
430:57 cloud where you can launch adus resources that's where your uh resources
431:00 resources that's where your uh resources are going to reside not all services uh
431:02 are going to reside not all services uh require you to select a VPC uh because
431:05 require you to select a VPC uh because they're managed by AWS but I wouldn't be
431:07 they're managed by AWS but I wouldn't be surprised if under the hood they are in
431:08 surprised if under the hood they are in their own VPC Okay then if you want uh
431:12 their own VPC Okay then if you want uh the internet to reach your services
431:13 the internet to reach your services you're going to need an internet gateway
431:15 you're going to need an internet gateway um then you need to figure out a way to
431:17 um then you need to figure out a way to Route things to your uh various subnets
431:20 Route things to your uh various subnets and that's where route tables uh come in
431:23 and that's where route tables uh come in then we need to Def Define a region that
431:26 then we need to Def Define a region that it's going to be which is a geographical
431:28 it's going to be which is a geographical location on your network then you have
431:30 location on your network then you have your availability zones which are
431:32 your availability zones which are basically your data centers where your
431:33 basically your data centers where your A's resources are going to reside then
431:35 A's resources are going to reside then you have subnets which is a logical
431:37 you have subnets which is a logical partition of an IP network into multiple
431:39 partition of an IP network into multiple smaller Network segments um and these
431:42 smaller Network segments um and these pretty much map to your uh availability
431:44 pretty much map to your uh availability zones if you're making one per a and
431:47 zones if you're making one per a and then we have knackles these act as a
431:49 then we have knackles these act as a firewall at the subnet level then we
431:51 firewall at the subnet level then we have security groups that act as a
431:52 have security groups that act as a firewall at the instance level so
431:54 firewall at the instance level so hopefully that gives you a good overview
431:56 hopefully that gives you a good overview [Music]
432:00 [Music] okay all right so now let's take a look
432:02 okay all right so now let's take a look at Enterprise or hybrid networking so we
432:04 at Enterprise or hybrid networking so we have our on premise uh environment or
432:06 have our on premise uh environment or your private cloud and then we have our
432:08 your private cloud and then we have our ads account or our public Cloud so
432:10 ads account or our public Cloud so there's a couple Services here that we
432:11 there's a couple Services here that we can Bridge them together the first is
432:13 can Bridge them together the first is ADS virtual private Network VPN it's a
432:16 ADS virtual private Network VPN it's a secure connection between on premise
432:18 secure connection between on premise remote offices and mobile employees then
432:21 remote offices and mobile employees then you have direct connect this is a
432:22 you have direct connect this is a dedicated gigabit connection from on
432:24 dedicated gigabit connection from on premise data center to adabs so it's a
432:26 premise data center to adabs so it's a very fast connection a lot of times the
432:28 very fast connection a lot of times the direct we say it's a a private
432:30 direct we say it's a a private connection but doesn't necessarily mean
432:31 connection but doesn't necessarily mean secure it's not encrypting uh the data
432:34 secure it's not encrypting uh the data in transit so very commonly these
432:36 in transit so very commonly these services are used together not just
432:38 services are used together not just singular okay um and then uh we have
432:41 singular okay um and then uh we have private links and so this is where you
432:43 private links and so this is where you already uh are using ads but you want to
432:46 already uh are using ads but you want to keep it all within ads never going out
432:47 keep it all within ads never going out to the internet okay so these are
432:49 to the internet okay so these are generally called VPC interface endpoints
432:52 generally called VPC interface endpoints and then the marketing Pages call them
432:53 and then the marketing Pages call them private links which is a bit confusing
432:55 private links which is a bit confusing but you know it just keeps traffic
432:57 but you know it just keeps traffic within the aabus network so it does not
432:58 within the aabus network so it does not transverse out to the internet okay
433:05 [Music] hey this is Andrew Brown from exam Pro
433:07 hey this is Andrew Brown from exam Pro and we are taking a look at vpcs and
433:09 and we are taking a look at vpcs and subnets so a VPC is a logically isolated
433:11 subnets so a VPC is a logically isolated section of the adus network where you
433:13 section of the adus network where you launch your adus resources and you
433:15 launch your adus resources and you choose a range of ips using a cider
433:17 choose a range of ips using a cider range so a cider range is an IP address
433:20 range so a cider range is an IP address followed by uh this uh net mask or sub
433:23 followed by uh this uh net mask or sub submask that's going to determine how
433:24 submask that's going to determine how many IP addresses there are um and
433:26 many IP addresses there are um and there's a bunch of math behind that
433:28 there's a bunch of math behind that which we're not going to get into um but
433:31 which we're not going to get into um but anyway so here is an architectural
433:32 anyway so here is an architectural diagram just showing a VPC with a couple
433:35 diagram just showing a VPC with a couple subnets so subnets is a logical
433:37 subnets so subnets is a logical partition of an IP network into multiple
433:40 partition of an IP network into multiple uh smaller Network segments and so
433:42 uh smaller Network segments and so you're essentially breaking up your IP
433:44 you're essentially breaking up your IP ranges for vpcs into smaller networks so
433:46 ranges for vpcs into smaller networks so just thinking about cutting up a pie
433:48 just thinking about cutting up a pie okay so subnets need to have a smaller
433:50 okay so subnets need to have a smaller cider range uh to uh the vpcs represent
433:54 cider range uh to uh the vpcs represent for their portion so uh 424 is actually
433:58 for their portion so uh 424 is actually smaller which is interesting the the
434:00 smaller which is interesting the the higher the gets the smaller it gets and
434:02 higher the gets the smaller it gets and so this would allocate 256 IP addresses
434:05 so this would allocate 256 IP addresses and so that's well smaller than 16 okay
434:08 and so that's well smaller than 16 okay we have the concept of a public subnet
434:11 we have the concept of a public subnet so this is one that can reach the
434:12 so this is one that can reach the internet and a private subnet the one
434:14 internet and a private subnet the one that cannot reach the internet and um
434:16 that cannot reach the internet and um these are not uh strictly enforced by
434:19 these are not uh strictly enforced by AWS so the idea is that when you have a
434:21 AWS so the idea is that when you have a subnet you can just say don't by default
434:24 subnet you can just say don't by default assign publicly assignable IP addresses
434:27 assign publicly assignable IP addresses but it's totally possible to launch an
434:28 but it's totally possible to launch an ec2 instance into your priv private
434:31 ec2 instance into your priv private subnet and then turn on um uh the IP
434:35 subnet and then turn on um uh the IP address so you got to do other things to
434:36 address so you got to do other things to ensure that they stay private or public
434:39 ensure that they stay private or public [Music]
434:42 [Music] okay hey it's Andrew Brown from exam Pro
434:45 okay hey it's Andrew Brown from exam Pro and we are comparing security groups
434:46 and we are comparing security groups versus knackles so I have this nice
434:49 versus knackles so I have this nice architectural diagram that has both
434:50 architectural diagram that has both knackles and security groups in them and
434:52 knackles and security groups in them and we'll just kind of talk about these two
434:54 we'll just kind of talk about these two so knackles stand for network access
434:56 so knackles stand for network access control list and they act as a virtual
434:58 control list and they act as a virtual firewall at the subnet level and so here
435:00 firewall at the subnet level and so here you can create an allow uh and deny
435:03 you can create an allow uh and deny rules and this is really useful if you
435:05 rules and this is really useful if you want to block a specific IP address
435:07 want to block a specific IP address known for abuse and and I'm going to
435:09 known for abuse and and I'm going to just kind of um compare that against
435:11 just kind of um compare that against security groups because that's going to
435:12 security groups because that's going to be a very important difference okay so
435:14 be a very important difference okay so secur security groups act as a firewall
435:16 secur security groups act as a firewall at the instance level and they
435:18 at the instance level and they implicitly deny all traffic so you
435:20 implicitly deny all traffic so you create only allow rules so you can allow
435:23 create only allow rules so you can allow an E2 instance to access port on uh Port
435:27 an E2 instance to access port on uh Port 22 for SSH but you cannot block a single
435:30 22 for SSH but you cannot block a single IP address and the reason I say that is
435:32 IP address and the reason I say that is because in order for you to block a
435:33 because in order for you to block a single IP address in Security Group you
435:35 single IP address in Security Group you would literally have to block or you
435:37 would literally have to block or you literally have to allow everything but
435:39 literally have to allow everything but that IP address and that's just not
435:40 that IP address and that's just not feasible okay and so if you can remember
435:42 feasible okay and so if you can remember that one particular example you'll
435:44 that one particular example you'll always be able to remember the
435:46 always be able to remember the difference between these two one other
435:48 difference between these two one other thing that um adab us likes to do is is
435:50 thing that um adab us likes to do is is ask which ones are stateless which ones
435:52 ask which ones are stateless which ones are stateful but at the uh Cloud
435:54 are stateful but at the uh Cloud partitioner level they're not going to
435:55 partitioner level they're not going to be asking that
435:56 be asking that [Music]
435:59 [Music] okay all right all right let's learn a
436:01 okay all right all right let's learn a bit about U networking with AWS so what
436:04 bit about U networking with AWS so what I want you to do is go to the top and
436:05 I want you to do is go to the top and type in VPC which stands for virtual
436:08 type in VPC which stands for virtual private cloud and what we'll do is set
436:09 private cloud and what we'll do is set up our own VPC it's not so important
436:11 up our own VPC it's not so important that you remember all the little bit of
436:13 that you remember all the little bit of details but you get through this so that
436:15 details but you get through this so that you can remember the major components so
436:16 you can remember the major components so what I'll do is create a new VPC I'm
436:18 what I'll do is create a new VPC I'm going to call this my
436:20 going to call this my VPC uh tutorial and here I'm going to
436:22 VPC uh tutorial and here I'm going to say
436:23 say 10.0.0.0 for sl16 the reason you're
436:27 10.0.0.0 for sl16 the reason you're wondering why I'm doing that if we go to
436:29 wondering why I'm doing that if we go to xyx
436:31 xyx y z here um this tells you the size of
436:34 y z here um this tells you the size of it so I go here and I put 16 so you can
436:36 it so I go here and I put 16 so you can see we have a lot of room if we do
436:38 see we have a lot of room if we do 24 it takes up it it it's smaller see so
436:41 24 it takes up it it it's smaller see so this is basically the size of it right
436:43 this is basically the size of it right the empty blocks over here so we're
436:45 the empty blocks over here so we're going to have a lot of room so we do 10
436:47 going to have a lot of room so we do 10 006 we don't need IPv6 we're going to go
436:51 006 we don't need IPv6 we're going to go ahead and create that and once we have
436:53 ahead and create that and once we have that we can go ahead and create a subnet
436:55 that we can go ahead and create a subnet which we will need so we're going to
436:56 which we will need so we're going to choose our VPC we'll go down here and
436:59 choose our VPC we'll go down here and say my Subnet tutorial
437:04 and we'll choose the first a z you can leave it blank and'll choose it random
437:06 leave it blank and'll choose it random and then we need to choose a block that
437:07 and then we need to choose a block that is smaller than the current one so 16
437:10 is smaller than the current one so 16 would be definitely um uh well 16 is the
437:14 would be definitely um uh well 16 is the size that we have now so we can match
437:15 size that we have now so we can match that size but 10.0.0.0 424 would be
437:20 that size but 10.0.0.0 424 would be absolutely smaller okay so we go ahead
437:22 absolutely smaller okay so we go ahead and create that
437:24 and create that subnet and so that is all set up now um
437:30 subnet and so that is all set up now um let's see if our route tables hooked up
437:32 let's see if our route tables hooked up so our route table says where it links
437:34 so our route table says where it links to and it says to local so it's not
437:36 to and it says to local so it's not going anywhere and that's because we
437:38 going anywhere and that's because we need to attach a u internet gateway that
437:41 need to attach a u internet gateway that allows us to reach the internet so if we
437:43 allows us to reach the internet so if we go over here and create a new internet
437:45 go over here and create a new internet gateway we'll say myig
437:48 gateway we'll say myig GW and we'll go ahead and create
437:50 GW and we'll go ahead and create that and what we'll do is associate that
437:54 that and what we'll do is associate that with our VPC we created here okay and so
437:59 with our VPC we created here okay and so now that we have the internet gateway
438:00 now that we have the internet gateway attached we want that subnet to make its
438:03 attached we want that subnet to make its way out to the Internet so if we go to
438:05 way out to the Internet so if we go to the route table we can edit the uh route
438:08 the route table we can edit the uh route table Association here I like how it
438:10 table Association here I like how it keeps on showing me this as if I don't
438:12 keeps on showing me this as if I don't know what I'm doing um but I do and
438:16 know what I'm doing um but I do and so this would change that particular
438:19 so this would change that particular Association but I want to add to that
438:21 Association but I want to add to that route table so I thought when I clicked
438:24 route table so I thought when I clicked that it would allow me to add more but
438:25 that it would allow me to add more but apparently I got to go to Route tables
438:26 apparently I got to go to Route tables over
438:27 over here and I'm looking for the one that is
438:30 here and I'm looking for the one that is ours we can see that it's over here we
438:32 ours we can see that it's over here we could even name it if we wanted to like
438:34 could even name it if we wanted to like my rote
438:36 my rote table Noti then we apply uh uh U names
438:39 table Noti then we apply uh uh U names it's actually just applying a tag see
438:41 it's actually just applying a tag see over here it's always what that
438:43 over here it's always what that is so we'll go over to routes and we
438:46 is so we'll go over to routes and we want to edit the routes and we want to
438:48 want to edit the routes and we want to add a route and we want this to go to 00
438:51 add a route and we want this to go to 00 and we're going to choose the internet
438:52 and we're going to choose the internet gateway
438:54 gateway okay we're going to say save
438:57 okay we're going to say save changes and what that's going to allow
438:59 changes and what that's going to allow us to do is to reach the internet
439:05 um and so what I want to do is go back to subnet I was just curious about this
439:07 to subnet I was just curious about this I've never used this
439:09 I've never used this before um so looks like we can just
439:12 before um so looks like we can just choose some options here I'm not too
439:14 choose some options here I'm not too concerned about that but I assume like
439:16 concerned about that but I assume like that's used for debugging azure's had
439:18 that's used for debugging azure's had those kind of services for a long time
439:19 those kind of services for a long time and so it was has been starting to add
439:21 and so it was has been starting to add those so you can easily debug your
439:22 those so you can easily debug your network which is nice so we have a
439:26 network which is nice so we have a subnet the subnet uh can reach the
439:28 subnet the subnet uh can reach the internet because there's a there's um
439:32 internet because there's a there's um uh internet gateway and it's hooked up
439:34 uh internet gateway and it's hooked up via the route table one thing that
439:36 via the route table one thing that matters is will it assign a public IP
439:38 matters is will it assign a public IP address um so that is something that we
439:41 address um so that is something that we might want to look into it's not the
439:44 might want to look into it's not the default subnet which is totally fine so
439:46 default subnet which is totally fine so it says Auto assign is no so that might
439:49 it says Auto assign is no so that might be something that you might want to
439:50 be something that you might want to change so here we go to edit the r table
439:53 change so here we go to edit the r table Association no it's not there they
439:56 Association no it's not there they changed it on me used to be part of the
439:58 changed it on me used to be part of the uh setup instructions us to just
439:59 uh setup instructions us to just checkbox it now they moved it modify the
440:02 checkbox it now they moved it modify the auto assign so we'll say enable so that
440:04 auto assign so we'll say enable so that means it's always going to give it a
440:05 means it's always going to give it a public IP address on
440:08 public IP address on launch and while we're here I'm just
440:10 launch and while we're here I'm just going to double check if I have any
440:11 going to double check if I have any elastic IPS I did not release okay just
440:13 elastic IPS I did not release okay just double checking here and
440:15 double checking here and so this is all set up and we should be
440:18 so this is all set up and we should be able to launch a um ec2 now within our
440:21 able to launch a um ec2 now within our our new VPC so I'll go over here to
440:25 our new VPC so I'll go over here to ec2
440:27 ec2 okay and I'm going to launch a new
440:29 okay and I'm going to launch a new instance
440:31 instance say Amazon elix
440:33 say Amazon elix 2 we're going to choose this tier
440:36 2 we're going to choose this tier Here and Now what we should be able to
440:38 Here and Now what we should be able to do is Select
440:40 do is Select that and that is our subnet there
440:44 that and that is our subnet there okay go ahead and launch that I don't
440:46 okay go ahead and launch that I don't care if we use a key whatsoever so I'm
440:48 care if we use a key whatsoever so I'm going to go ahead and launch that
440:58 back and so there you go it is launching so we created our VPC and we launched uh
441:01 so we created our VPC and we launched uh in it no problem
441:02 in it no problem whatsoever so hopefully that is pretty
441:04 whatsoever so hopefully that is pretty darn
441:05 darn clear um so yeah uh what I'm going to do
441:08 clear um so yeah uh what I'm going to do is I'm going to let that launch because
441:10 is I'm going to let that launch because I want to show you security groups So
441:13 I want to show you security groups So within AWS you can set security groups
441:15 within AWS you can set security groups and
441:15 and knackles and that's going to allow or
441:18 knackles and that's going to allow or deny access based on stuff and when we
441:20 deny access based on stuff and when we launch this eccu instance it has a
441:22 launch this eccu instance it has a default security group that was assigned
441:24 default security group that was assigned we could have created a new one but what
441:25 we could have created a new one but what I might want to do is create myself a
441:27 I might want to do is create myself a new Security Group
441:28 new Security Group here okay and you can end up with a lot
441:32 here okay and you can end up with a lot really fast like here is a bunch and I
441:34 really fast like here is a bunch and I can't even tell what's what so like
441:36 can't even tell what's what so like there's Bunch for load balancers and
441:38 there's Bunch for load balancers and things like that and so I might just go
441:40 things like that and so I might just go ahead and delete a bunch of these
441:41 ahead and delete a bunch of these because I cannot tell what is going on
441:44 because I cannot tell what is going on here and um we'll delete these security
441:49 here and um we'll delete these security groups and sometimes they won't let you
441:51 groups and sometimes they won't let you delete them because they're associated
441:52 delete them because they're associated with something like a network interface
441:53 with something like a network interface or
442:01 something all right but um we need to find out which one we're using right now
442:03 find out which one we're using right now so the one that we are using is the
442:05 so the one that we are using is the launch wizard 4 so we'll go into
442:08 launch wizard 4 so we'll go into here and I don't know if you can rename
442:11 here and I don't know if you can rename them after they've been created I don't
442:12 them after they've been created I don't think so which is kind of frustrating
442:14 think so which is kind of frustrating because if you want to rename it it's
442:15 because if you want to rename it it's like I don't want that to be the name so
442:18 like I don't want that to be the name so what's interesting is you can go here
442:19 what's interesting is you can go here and you can edit the
442:21 and you can edit the routes uh the rules sorry the inbound
442:24 routes uh the rules sorry the inbound rules and the outbound rules and so here
442:25 rules and the outbound rules and so here it's open on Port 22 so that allows us
442:28 it's open on Port 22 so that allows us to ssh in we could drop this down and
442:30 to ssh in we could drop this down and choose different things so if we want
442:32 choose different things so if we want people to access a website we go Port 80
442:34 people to access a website we go Port 80 and we say from anywhere ipv 46 so now
442:37 and we say from anywhere ipv 46 so now anyone can access it um you might want
442:40 anyone can access it um you might want to do something like give it access to
442:43 to do something like give it access to postgress that runs on Port 5432 things
442:46 postgress that runs on Port 5432 things like that um could be something else
442:49 like that um could be something else like maybe you need to connect to Red
442:50 like maybe you need to connect to Red shift that's on that Port you can go
442:52 shift that's on that Port you can go ahead and save those rules we're just
442:54 ahead and save those rules we're just going to say uh from anywhere you can
442:56 going to say uh from anywhere you can say my IP so maybe only I'm allowed to
442:59 say my IP so maybe only I'm allowed to connect to it right so you added inbound
443:01 connect to it right so you added inbound rules you don't really ever have to
443:03 rules you don't really ever have to touch outbound rules it's set for all
443:05 touch outbound rules it's set for all traffic so it's stuff that's
443:07 traffic so it's stuff that's leaving uh the that there one
443:10 leaving uh the that there one interesting thing to note about uh
443:12 interesting thing to note about uh security groups is
443:14 security groups is that you don't have a deny option right
443:18 that you don't have a deny option right so let's say you only wanted a
443:19 so let's say you only wanted a particular IP address you only wanted um
443:22 particular IP address you only wanted um let's say what's my IP my IP
443:25 let's say what's my IP my IP address so that is my IP address and
443:27 address so that is my IP address and let's
443:28 let's say I wanted to block it right so I go
443:32 say I wanted to block it right so I go here and I say okay I want to
443:35 here and I say okay I want to block on all TCP I want to block this
443:38 block on all TCP I want to block this number right but I can't do that all I
443:41 number right but I can't do that all I can say is I allow this number so in
443:43 can say is I allow this number so in order to do it I would have to enter
443:44 order to do it I would have to enter everything but this number in here and
443:46 everything but this number in here and you can enter ranges in with like these
443:49 you can enter ranges in with like these forward slashes and stuff like that but
443:50 forward slashes and stuff like that but You' imagine that'd be really hard
443:51 You' imagine that'd be really hard because you have to start and go like
443:53 because you have to start and go like you'd have to start and go through every
443:54 you'd have to start and go through every single IP address in the world to get it
443:56 single IP address in the world to get it out of here and that's almost impossible
443:58 out of here and that's almost impossible and that's the key thing I want you to
443:59 and that's the key thing I want you to remember about security
444:01 remember about security groups um so that's security groups and
444:04 groups um so that's security groups and there's also
444:09 knackles knackles um they're associated with subnets so they probably show up
444:10 with subnets so they probably show up under VPC I rarely touch knackles rarely
444:13 under VPC I rarely touch knackles rarely ever have
444:14 ever have to um I mean they're great tools but you
444:18 to um I mean they're great tools but you know for me I I just don't ever need
444:19 know for me I I just don't ever need them so knackles are associated with
444:23 them so knackles are associated with subnets so we can go here and try to see
444:26 subnets so we can go here and try to see my Subnet tutorial so we created our
444:28 my Subnet tutorial so we created our subnet we got a knle for free and we can
444:30 subnet we got a knle for free and we can set inbound and outbound rules and so
444:33 set inbound and outbound rules and so here here is where we could say Okay I
444:36 here here is where we could say Okay I want to add a new rule and I want to and
444:39 want to add a new rule and I want to and I want to make the rule number
444:41 I want to make the rule number 150 you always do these in hundreds okay
444:44 150 you always do these in hundreds okay or the power of tens so that you can
444:45 or the power of tens so that you can move them around easily and I can say
444:47 move them around easily and I can say all traffic that comes from this IP
444:52 all traffic that comes from this IP address I'm going to put the forward SL
444:54 address I'm going to put the forward SL Z that just means a single IP address I
444:57 Z that just means a single IP address I say deny right and so now
445:00 say deny right and so now uh this my address I can't access that
445:03 uh this my address I can't access that ec2 instance okay if I try to go there's
445:05 ec2 instance okay if I try to go there's nothing running on the server but if I
445:06 nothing running on the server but if I was to try to use it I wouldn't be able
445:08 was to try to use it I wouldn't be able to do it and and this applies to
445:10 to do it and and this applies to anything for that subnet it's not for a
445:12 anything for that subnet it's not for a particular instance it's for anything in
445:13 particular instance it's for anything in that subnet so hopefully that is is
445:15 that subnet so hopefully that is is pretty clear there um but that's pretty
445:18 pretty clear there um but that's pretty much all you really need to know I mean
445:19 much all you really need to know I mean there's lots of other stuff like Network
445:21 there's lots of other stuff like Network firewalls all these other things it gets
445:23 firewalls all these other things it gets pretty
445:24 pretty complicated um it's well beyond what we
445:26 complicated um it's well beyond what we need to learn here but uh what we'll do
445:28 need to learn here but uh what we'll do is tear down that ec2 instance
445:35 okay we'll terminate that and once that instance is destroyed
445:37 that and once that instance is destroyed we can get rid of our security group and
445:38 we can get rid of our security group and a bunch of other
445:43 stuff and there's always a bunch of these darn
445:46 these darn things so we'll say
445:58 Associated so we go here this is the one we are using but I want to get rid of
445:59 we are using but I want to get rid of all these other ones
446:07 okay if I go here it could be because like of inbound
446:09 like of inbound rules so see this one because you can
446:12 rules so see this one because you can reference another Security Group within
446:14 reference another Security Group within a security group so I'm just going to go
446:15 a security group so I'm just going to go save that there say any my IP there
446:23 whoops it's set to n uh NFS so that might have been set up for our access
446:30 point or I can just delete delet it that would probably be
446:32 would probably be easier okay so that's one that's kind of
446:35 easier okay so that's one that's kind of of a
446:36 of a pain so I'm just looking for rules that
446:39 pain so I'm just looking for rules that might be referencing other security
446:46 groups to get rid of them okay let's try this
446:58 again we go ahead and delete I'm leaving the um
447:01 the um I'm leaving the uh the defaults alone
447:03 I'm leaving the uh the defaults alone because those come with your vpcs and
447:05 because those come with your vpcs and you don't want to get rid of
447:12 those so it won't let me delete this one so I'm going to go edit that
447:13 so I'm going to go edit that rule delete it save it you might not
447:17 rule delete it save it you might not have this kind of clean up to do it's
447:18 have this kind of clean up to do it's just might be me here you
447:22 just might be me here you know um outbound
447:25 know um outbound inbound let's try this again here
447:45 up must be this one that is referencing the other
447:58 rule and this is something that's just kind of frustrating with AWS but it's
448:00 kind of frustrating with AWS but it's just just how it is where sometimes it's
448:02 just just how it is where sometimes it's hard to get rid of resources because you
448:04 hard to get rid of resources because you have to click through stuff so it's not
448:05 have to click through stuff so it's not always a clean you might have like
448:07 always a clean you might have like lingering resources and this isn't going
448:09 lingering resources and this isn't going to cost us anything but it's just the
448:10 to cost us anything but it's just the fact that
448:12 fact that um that it just makes things harder to
448:16 um that it just makes things harder to see what you're doing you
448:22 know this last one really doesn't want to go
448:27 away so I'm just trying to delete all the rules out of here get rid of it
448:30 the rules out of here get rid of it can I delete this one
448:36 now one group Associated it will not show me what it's talking about okay
448:37 show me what it's talking about okay here it
448:38 here it is
448:45 um okay this is referencing it I think it was the one there was an
448:47 it I think it was the one there was an old one I don't know what this
449:00 is we'll go down here and we'll go here and delete that and
449:02 and we'll go here and delete that and while I've been cleaning all these up
449:04 while I've been cleaning all these up now we can go over to our inst instance
449:06 now we can go over to our inst instance make sure that it's terminated it is
449:07 make sure that it's terminated it is good because if our instance is not
449:09 good because if our instance is not terminated we cannot destroy the VPC uh
449:12 terminated we cannot destroy the VPC uh prior the VPC could not be destroyed
449:13 prior the VPC could not be destroyed unless you detach the internet gateway I
449:15 unless you detach the internet gateway I wonder if it's going to still complain
449:17 wonder if it's going to still complain about
449:18 about that we'll say yes it actually looks
449:20 that we'll say yes it actually looks like it includes it in the
449:23 like it includes it in the cleanup type delete here
449:32 there we go so we're all good we're all cleaned up there you
449:34 cleaned up there you [Music]
449:37 [Music] are hey this is angre Brown from exam
449:39 are hey this is angre Brown from exam Pro and in this video I just want to
449:41 Pro and in this video I just want to show you cloudfront so let's make our
449:42 show you cloudfront so let's make our way over to cloudfront cloudfront is a
449:45 way over to cloudfront cloudfront is a Content delivery Network and it's used
449:47 Content delivery Network and it's used to cash your data all over the place as
449:49 to cash your data all over the place as you can see I have some older ones here
449:51 you can see I have some older ones here if you have a splash screen what you can
449:53 if you have a splash screen what you can do is just look for the left hand side
449:54 do is just look for the left hand side there might be hamburger menu open that
449:56 there might be hamburger menu open that up and then click on distributions and
449:58 up and then click on distributions and what we're going to do is create a new
450:00 what we're going to do is create a new distribution if you don't want to create
450:02 distribution if you don't want to create one cuz these do take forever to create
450:04 one cuz these do take forever to create um you can just kind of watch along I
450:05 um you can just kind of watch along I don't even feel like I'm going to hit
450:07 don't even feel like I'm going to hit the um the create distribution button
450:09 the um the create distribution button because I just hate waiting for so long
450:10 because I just hate waiting for so long but the idea is that you have to choose
450:12 but the idea is that you have to choose an origin and so the origin could be
450:13 an origin and so the origin could be something like an S3 bucket load bouncer
450:16 something like an S3 bucket load bouncer media store this is where um the the
450:19 media store this is where um the the content distribution network is going to
450:21 content distribution network is going to Source its content right so if I say
450:24 Source its content right so if I say this bucket here um and I just it will
450:27 this bucket here um and I just it will probably default to the root path the
450:29 probably default to the root path the idea is that it's going to be able to
450:30 idea is that it's going to be able to pull content from there and then cach it
450:32 pull content from there and then cach it everywhere and then down below you can
450:34 everywhere and then down below you can say okay set the type of protocol
450:37 say okay set the type of protocol redirect to here you can set up uh
450:40 redirect to here you can set up uh caching rules or like how often do you
450:42 caching rules or like how often do you want it to uh cash like cash a lot don't
450:45 want it to uh cash like cash a lot don't cash a lot the great thing is like you
450:47 cash a lot the great thing is like you have these Edge or these um Lambda Edge
450:49 have these Edge or these um Lambda Edge functions so you can uh read and modify
450:53 functions so you can uh read and modify the request and response to the CDN
450:55 the request and response to the CDN which is very powerful but what I'm
450:57 which is very powerful but what I'm going to do is I'm just going to go look
450:58 going to do is I'm just going to go look at what we already have cuz again I said
450:59 at what we already have cuz again I said said they take forever to spin up and
451:02 said they take forever to spin up and we're not going to see too much if we do
451:04 we're not going to see too much if we do so once it's spun up um this is what it
451:06 so once it's spun up um this is what it looks like so you'll have an origin it
451:09 looks like so you'll have an origin it says where it's pointed to you can
451:10 says where it's pointed to you can create multiple Origins group them uh
451:13 create multiple Origins group them uh you can modify your behavior so that was
451:15 you can modify your behavior so that was basically what we're looking at before
451:16 basically what we're looking at before as you can see we have our Behavior
451:17 as you can see we have our Behavior there nothing super exciting we can set
451:20 there nothing super exciting we can set up error Pages you can restrict based on
451:22 up error Pages you can restrict based on geographical location so if you're for
451:24 geographical location so if you're for whatever reason if you if you're not
451:26 whatever reason if you if you're not allowed to serve content in UK you could
451:28 allowed to serve content in UK you could say exclude this geographical region
451:31 say exclude this geographical region right so you have an allow list or a
451:33 right so you have an allow list or a block list saying like Okay we can't do
451:35 block list saying like Okay we can't do UK because like let's say you just don't
451:37 UK because like let's say you just don't want to do um say England you don't want
451:40 want to do um say England you don't want to do um uh gdpr for whatever reason you
451:43 to do um uh gdpr for whatever reason you could block out I don't know why I'm
451:45 could block out I don't know why I'm having a hard time here Britain England
451:47 having a hard time here Britain England it's England right United Kingdom there
451:50 it's England right United Kingdom there we go so you just say okay forget United
451:52 we go so you just say okay forget United Kingdom I don't have to do GDP now uh
451:54 Kingdom I don't have to do GDP now uh for invalidations the idea is that you
451:56 for invalidations the idea is that you know it is a cash so things can get
451:59 know it is a cash so things can get stale or just persist and so here you
452:01 stale or just persist and so here you can just type in say I want to get rid
452:03 can just type in say I want to get rid of image.jpg and then you create that in
452:06 of image.jpg and then you create that in validation and then it will go delete it
452:08 validation and then it will go delete it out of the cache and so the next time
452:10 out of the cache and so the next time someone requests they'll get the the
452:11 someone requests they'll get the the fresh content this usually doesn't take
452:13 fresh content this usually doesn't take that long but that's pretty much
452:14 that long but that's pretty much cloudfront in a nutshell
452:17 cloudfront in a nutshell [Music]
452:20 [Music] okay hey this is Andrew Brown from exam
452:22 okay hey this is Andrew Brown from exam Pro and we are taking a look at ec2 also
452:24 Pro and we are taking a look at ec2 also known as elastic cloud and so this is a
452:27 known as elastic cloud and so this is a highly uh configurable virtual server or
452:30 highly uh configurable virtual server or it's also known as a virtual machine and
452:32 it's also known as a virtual machine and that's what we're going to generally
452:33 that's what we're going to generally refer to it uh ec2 is resizable compute
452:36 refer to it uh ec2 is resizable compute capacity it takes minutes to launch new
452:38 capacity it takes minutes to launch new instances and anything and everything on
452:40 instances and anything and everything on adus uses ec2 instances underneath
452:43 adus uses ec2 instances underneath that's why we generally call it the
452:44 that's why we generally call it the backbone to all the adus services and uh
452:47 backbone to all the adus services and uh you're going to just have to choose a
452:48 you're going to just have to choose a few options here so the first thing
452:49 few options here so the first thing you'll need to do is choose your OS via
452:52 you'll need to do is choose your OS via your Amazon machine image so that's
452:54 your Amazon machine image so that's where you get red hat Ubuntu Windows
452:56 where you get red hat Ubuntu Windows Amazon Linux Seuss it might also come
452:58 Amazon Linux Seuss it might also come with pre-installed libraries and things
453:00 with pre-installed libraries and things like that then you're going to choose
453:01 like that then you're going to choose your instance type that's going to
453:02 your instance type that's going to determine things like your vcpus your
453:04 determine things like your vcpus your memory so here you can see how many
453:07 memory so here you can see how many there are and you'll have like a monthly
453:09 there are and you'll have like a monthly cost and that's the name of the instance
453:11 cost and that's the name of the instance type then you have to add storage so
453:14 type then you have to add storage so very commonly you're attaching elastic
453:16 very commonly you're attaching elastic block storage or elastic files system or
453:19 block storage or elastic files system or service uh and so you know if you do
453:22 service uh and so you know if you do choose your EBS uh you are going to have
453:24 choose your EBS uh you are going to have to determine what type it is so whether
453:26 to determine what type it is so whether it's a solid state drive a hard disk
453:29 it's a solid state drive a hard disk drive a Magnetic Tape or even attaching
453:32 drive a Magnetic Tape or even attaching multiple volumes not just a single one
453:34 multiple volumes not just a single one and the last thing is configuring your
453:35 and the last thing is configuring your instance so this is configuring the
453:37 instance so this is configuring the security groups the key pairs user data
453:39 security groups the key pairs user data IM roles placement groups all sorts of
453:41 IM roles placement groups all sorts of things so we will experience in that
453:43 things so we will experience in that because we will show you how to launch
453:45 because we will show you how to launch it easy to instance and it'll make a lot
453:46 it easy to instance and it'll make a lot of sense if it does not make sense right
453:48 of sense if it does not make sense right now
453:49 now [Music]
453:53 [Music] okay all right let's take a look here at
453:55 okay all right let's take a look here at ec2 instance families so what are
453:56 ec2 instance families so what are instance families well instance families
453:58 instance families well instance families are different combinations of CPU memory
454:01 are different combinations of CPU memory storage and networking capacity and
454:04 storage and networking capacity and instance families allow you to choose
454:05 instance families allow you to choose the appropriate combination of capacity
454:08 the appropriate combination of capacity to meet your application's unique
454:09 to meet your application's unique requirements different instance families
454:11 requirements different instance families are different because of the varying
454:13 are different because of the varying Hardware used to give them their unique
454:15 Hardware used to give them their unique properties and we do talk about this
454:17 properties and we do talk about this thing about uh capacity reservation
454:20 thing about uh capacity reservation where adus can actually run out of a
454:21 where adus can actually run out of a particular type of instance family
454:23 particular type of instance family because they just don't have enough
454:24 because they just don't have enough Hardware in that data center and so you
454:26 Hardware in that data center and so you have to reserve it but let's go through
454:27 have to reserve it but let's go through the different types of instance families
454:29 the different types of instance families the first is general purpose and these
454:31 the first is general purpose and these are the names of the different families
454:33 are the names of the different families uh very popular ones is the t2 um the t2
454:37 uh very popular ones is the t2 um the t2 and one that's really interesting is the
454:39 and one that's really interesting is the Mac which actually allows you to run um
454:42 Mac which actually allows you to run um a a Mac server so these are great
454:44 a a Mac server so these are great balance of compute memory and network
454:46 balance of compute memory and network resources so you're going to be using
454:48 resources so you're going to be using these most of the time the use cases
454:50 these most of the time the use cases here would be web servers code
454:51 here would be web servers code repositories things like that then you
454:53 repositories things like that then you have compute optimize so um they all
454:56 have compute optimize so um they all start with C no surprise there they're
454:58 start with C no surprise there they're ideal for compute bound applications
455:00 ideal for compute bound applications that benefit from high performance
455:01 that benefit from high performance processor their edge cases here are
455:03 processor their edge cases here are scientific modeling dedicated gaming
455:05 scientific modeling dedicated gaming servers ad server engines things like
455:06 servers ad server engines things like that then you have memory optimized um
455:10 that then you have memory optimized um and so there's a variety here these are
455:11 and so there's a variety here these are fast performance for workloads that
455:13 fast performance for workloads that process large data sets in memory um
455:16 process large data sets in memory um they're great for in-memory caches
455:17 they're great for in-memory caches in-memory databases real-time big data
455:19 in-memory databases real-time big data analytics then you have accelerated
455:21 analytics then you have accelerated optimize so this is your P2 P3 P4 things
455:24 optimize so this is your P2 P3 P4 things like that these are Hardware
455:26 like that these are Hardware accelerators or co-processors these are
455:29 accelerators or co-processors these are great for machine learning computational
455:30 great for machine learning computational Finance seismic analysis speech
455:33 Finance seismic analysis speech recognition if you're doing um uh ML on
455:36 recognition if you're doing um uh ML on AWS you're you'll start coming across
455:38 AWS you're you'll start coming across these types ads technically has a
455:40 these types ads technically has a separate page on sagemaker ML machines
455:42 separate page on sagemaker ML machines but they're all pulling from these
455:43 but they're all pulling from these instance families okay then you have
455:45 instance families okay then you have storage optimize so I3 i3en things like
455:48 storage optimize so I3 i3en things like that these are highly High sequential
455:51 that these are highly High sequential read and write access to very large data
455:53 read and write access to very large data sets on local storage the use cases here
455:55 sets on local storage the use cases here would be nosql in memory or
455:56 would be nosql in memory or transactional databases data warehousing
455:59 transactional databases data warehousing for the certified Cloud practitioner you
456:01 for the certified Cloud practitioner you just need to generally know these five
456:02 just need to generally know these five categories not the names of the instance
456:05 categories not the names of the instance families if you're doing um Associates
456:07 families if you're doing um Associates or above you definitely want to know
456:09 or above you definitely want to know these things in a bit more detail and I
456:11 these things in a bit more detail and I want to say that commonly instance
456:12 want to say that commonly instance families are called instance types but
456:14 families are called instance types but an instance type is a combination of
456:15 an instance type is a combination of size and family but even aws's
456:18 size and family but even aws's documentation doesn't make this family
456:20 documentation doesn't make this family distinction clear but I know this
456:22 distinction clear but I know this because you know an Azure they make that
456:24 because you know an Azure they make that very clear and and gcp and so I'm bring
456:26 very clear and and gcp and so I'm bring that language over here to just kind of
456:28 that language over here to just kind of normalize it for you okay
456:30 normalize it for you okay [Music]
456:34 [Music] let's take a look at what ec2 instance
456:36 let's take a look at what ec2 instance types are so an instance type is a
456:38 types are so an instance type is a particular instance size and instance
456:40 particular instance size and instance family and a common pattern for instance
456:42 family and a common pattern for instance sizes you'll see is things like Nano
456:44 sizes you'll see is things like Nano micro small uh medium large x large 2x
456:49 micro small uh medium large x large 2x large 4X large 8X large and you know
456:53 large 4X large 8X large and you know generally they're to the power of twos
456:55 generally they're to the power of twos but sometimes it'll be like 12 14 16 or
456:57 but sometimes it'll be like 12 14 16 or it's even uh and so when you you go to
456:59 it's even uh and so when you you go to launch your ec2 instance you're going to
457:01 launch your ec2 instance you're going to have to choose that instance type and so
457:03 have to choose that instance type and so here you can see you know here is our T2
457:06 here you can see you know here is our T2 micro and then we have um the small the
457:09 micro and then we have um the small the medium the large the x large okay but
457:13 medium the large the x large okay but there are exceptions to this pattern for
457:14 there are exceptions to this pattern for sizes so you know there is one
457:17 sizes so you know there is one particular one called uh metal and so
457:19 particular one called uh metal and so that's going to indicate that this is a
457:20 that's going to indicate that this is a bare metal machine and then sometimes
457:22 bare metal machine and then sometimes you get these Oddball ones like 9x large
457:25 you get these Oddball ones like 9x large so you know the rule of power of two or
457:27 so you know the rule of power of two or even numbers is not always the case uh
457:29 even numbers is not always the case uh but generally it'll be pretty even for
457:31 but generally it'll be pretty even for you know the start here okay uh just
457:34 you know the start here okay uh just talking about instant sizes so the E2
457:36 talking about instant sizes so the E2 instant sizes generally double in price
457:38 instant sizes generally double in price and attribute so uh just bringing up
457:40 and attribute so uh just bringing up these numbers a little bit closer
457:42 these numbers a little bit closer starting at the small here you're going
457:43 starting at the small here you're going to notice one two doesn't maybe double
457:46 to notice one two doesn't maybe double there but four and here we see 12 24 uh
457:50 there but four and here we see 12 24 uh almost doubles there almost doubles
457:52 almost doubles there almost doubles there but I want to I show you that the
457:54 there but I want to I show you that the price is generally almost double so 16
457:56 price is generally almost double so 16 33 67 135 and so a lot of times like you
458:01 33 67 135 and so a lot of times like you always have the option to say okay do I
458:03 always have the option to say okay do I want to go to the next instance size up
458:04 want to go to the next instance size up or have uh an additional instance of the
458:07 or have uh an additional instance of the same size and sometimes it's a better
458:08 same size and sometimes it's a better approach to get an additional instance
458:11 approach to get an additional instance because then you can distribute it
458:12 because then you can distribute it across another a uh but then you also
458:14 across another a uh but then you also meet additional capacity so there you
458:17 meet additional capacity so there you [Music]
458:21 [Music] go so we talked about dedicated
458:23 go so we talked about dedicated instances and hosts a little bit but
458:25 instances and hosts a little bit but let's just make that distinction very
458:26 let's just make that distinction very clear so dedicated hosts are single
458:28 clear so dedicated hosts are single tenant easy to instances designed to let
458:30 tenant easy to instances designed to let you bring your own license so Bol based
458:33 you bring your own license so Bol based on machine characteristics and so we'll
458:35 on machine characteristics and so we'll compare the dedicated instance to the
458:37 compare the dedicated instance to the dedicated host across isolation billing
458:40 dedicated host across isolation billing uh physical characteristics visibility
458:42 uh physical characteristics visibility Affinity between a host and instance
458:44 Affinity between a host and instance targeted instance placement automatic
458:46 targeted instance placement automatic instance placement and add capacity
458:49 instance placement and add capacity using allocation request so for
458:51 using allocation request so for isolation for dedicated instance you're
458:53 isolation for dedicated instance you're going to get instance isolation so you
458:55 going to get instance isolation so you can have the same customer on the same
458:57 can have the same customer on the same physical machine but there is
458:58 physical machine but there is virtualization there for them and
459:00 virtualization there for them and there's a guarantee of that um for a
459:02 there's a guarantee of that um for a dedicated host you have physical server
459:04 dedicated host you have physical server isolation so you get the whole server
459:06 isolation so you get the whole server for billing uh on a dedicated instance
459:09 for billing uh on a dedicated instance it's per instance billing and it's going
459:11 it's per instance billing and it's going to have an additional fee of $2 per
459:12 to have an additional fee of $2 per region and for dedicated host it's per
459:15 region and for dedicated host it's per host building so it's a lot more
459:16 host building so it's a lot more expensive but you get the whole machine
459:18 expensive but you get the whole machine uh for visibility of physical
459:20 uh for visibility of physical characteristics you're not going to get
459:21 characteristics you're not going to get any of that information for dedicated
459:23 any of that information for dedicated instance for dedicated host you are such
459:25 instance for dedicated host you are such as sockets core host host ID and this is
459:28 as sockets core host host ID and this is really important when you have a bring
459:30 really important when you have a bring your own license and they're saying this
459:32 your own license and they're saying this license is for x amount of cores or x
459:35 license is for x amount of cores or x amount of sockets then we have Affinity
459:38 amount of sockets then we have Affinity so there's no affinity for dedicated
459:39 so there's no affinity for dedicated instance for dedicated hosts you'll have
459:41 instance for dedicated hosts you'll have consistency with deploys to the same
459:43 consistency with deploys to the same instance to the same physical server uh
459:45 instance to the same physical server uh there's no control of Target instance
459:47 there's no control of Target instance placement for dedicated instance you do
459:49 placement for dedicated instance you do have control on a dedicated host for
459:52 have control on a dedicated host for auto automatic instance placements you
459:53 auto automatic instance placements you have it for both and to add capacity
459:56 have it for both and to add capacity using allocation requests it's a no for
459:59 using allocation requests it's a no for dedic at instance and it's a yes for
460:00 dedic at instance and it's a yes for dedicated host so I want to come back to
460:03 dedicated host so I want to come back to the main point that's what's highlighted
460:05 the main point that's what's highlighted here is that on a dedicated host you
460:06 here is that on a dedicated host you have visibility of sockets core host ID
460:09 have visibility of sockets core host ID and this is really really important when
460:11 and this is really really important when you're bringing your own licensed byol
460:14 you're bringing your own licensed byol such as um you know Microsoft SQL
460:17 such as um you know Microsoft SQL servers where you have to specify the
460:20 servers where you have to specify the manacor and things like that
460:22 manacor and things like that [Music]
460:25 [Music] okay so we've been talking about uh
460:28 okay so we've been talking about uh tendency and I just want to make it very
460:30 tendency and I just want to make it very clear uh the difference between the
460:32 clear uh the difference between the different levels of tendency on AWS so
460:34 different levels of tendency on AWS so we have three okay so we got dedicated
460:37 we have three okay so we got dedicated host so your server lives here and you
460:39 host so your server lives here and you have control of the physical attribute
460:41 have control of the physical attribute so basically the whole server okay uh
460:44 so basically the whole server okay uh then we have dedicated instances so your
460:46 then we have dedicated instances so your server is on the same uh physical
460:49 server is on the same uh physical machine as other customers but the
460:51 machine as other customers but the actual slot that you have the dedicated
460:53 actual slot that you have the dedicated instance will always be the same uh and
460:56 instance will always be the same uh and then we have uh the default so your
460:58 then we have uh the default so your instance will live somewhere on the
461:00 instance will live somewhere on the server uh and when you reboot it it's
461:02 server uh and when you reboot it it's going to be somewhere else so there's no
461:04 going to be somewhere else so there's no guarantee that it's going to be in the
461:05 guarantee that it's going to be in the same place every single time
461:07 same place every single time [Music]
461:10 [Music] okay hey this is Andrew Brown from exam
461:13 okay hey this is Andrew Brown from exam Pro and in this follow along we're going
461:14 Pro and in this follow along we're going to be looking at ec2 and also um
461:17 to be looking at ec2 and also um services that are adjacent to it so like
461:18 services that are adjacent to it so like autoscaling groups load balancers
461:20 autoscaling groups load balancers elastic IPS things like that so we fully
461:23 elastic IPS things like that so we fully understand ec2 um you don't have to know
461:25 understand ec2 um you don't have to know tons for the exam but you should be able
461:27 tons for the exam but you should be able to go through the motions of this with
461:29 to go through the motions of this with me me so that you can cement that
461:30 me me so that you can cement that knowledge um for some of those deeper
461:32 knowledge um for some of those deeper Concepts like working with key Pairs and
461:34 Concepts like working with key Pairs and things like that so let's make our way
461:37 things like that so let's make our way over to the ec2 console and learn what
461:39 over to the ec2 console and learn what we can learn um and generally when you
461:42 we can learn um and generally when you go to the ec2 console it'll bring you to
461:44 go to the ec2 console it'll bring you to the dashboard for whatever reason it
461:45 the dashboard for whatever reason it didn't bring me there and then the idea
461:47 didn't bring me there and then the idea here is that on the left hand side we
461:49 here is that on the left hand side we can make our way over to
461:50 can make our way over to instances okay and this is where we can
461:53 instances okay and this is where we can launch our first instance so if we go
461:56 launch our first instance so if we go here and launch our instance the first
461:57 here and launch our instance the first thing we're going to be presented with
461:59 thing we're going to be presented with is to choose our Ami or Amazon machine
462:02 is to choose our Ami or Amazon machine image and so that is a template that
462:04 image and so that is a template that contains the software configuration so
462:06 contains the software configuration so the operating system applications and
462:08 the operating system applications and other binaries that would be installed
462:10 other binaries that would be installed on that OS by default all right and so
462:13 on that OS by default all right and so we have a variety that we can choose
462:14 we have a variety that we can choose from in the quick starts and generally
462:16 from in the quick starts and generally the ones that you're going to see first
462:17 the ones that you're going to see first are the ones that ad support so there
462:20 are the ones that ad support so there are uh um Amis or operating systems that
462:23 are uh um Amis or operating systems that a ads will support when you contact them
462:25 a ads will support when you contact them and then there's ones that are outside
462:26 and then there's ones that are outside that where uh they'll still help you
462:28 that where uh they'll still help you with but they might not have the
462:29 with but they might not have the knowledge on so just understand that if
462:31 knowledge on so just understand that if you pick from these core ones you're
462:32 you pick from these core ones you're going to be in good shape uh the most
462:34 going to be in good shape uh the most popular is the Amazon Linux 2 because
462:36 popular is the Amazon Linux 2 because it's part of the free tier and it is is
462:39 it's part of the free tier and it is is very minimal and well hardened by AWS so
462:41 very minimal and well hardened by AWS so it's a very good choice there but you
462:42 it's a very good choice there but you can see you can install a bunch of
462:44 can see you can install a bunch of things so like if you want to launch a
462:46 things so like if you want to launch a Mac OS server you can absolutely do that
462:48 Mac OS server you can absolutely do that a red hat uh Suzie Ubuntu a Windows
462:52 a red hat uh Suzie Ubuntu a Windows Server you name it they have it um if
462:55 Server you name it they have it um if you wanted something more farther out
462:57 you wanted something more farther out there you can go to the market
462:59 there you can go to the market Marketplace and uh subscribe to one that
463:01 Marketplace and uh subscribe to one that is managed by company basically
463:03 is managed by company basically everything exists Under the Sun here or
463:05 everything exists Under the Sun here or you could get a community Ami so these
463:07 you could get a community Ami so these are ones that are contributed by the
463:08 are ones that are contributed by the community for free but we're going to go
463:10 community for free but we're going to go back to quick start here and what I want
463:12 back to quick start here and what I want you to notice is that there is this Ami
463:14 you to notice is that there is this Ami ID that's how we can uniquely identify
463:17 ID that's how we can uniquely identify what we are using if we were to change
463:18 what we are using if we were to change region even with the same Amazon L 2
463:21 region even with the same Amazon L 2 instance this thing will change so just
463:23 instance this thing will change so just understand that it is regional based and
463:25 understand that it is regional based and it comes in a 64-bit variant and a arm
463:28 it comes in a 64-bit variant and a arm variant and so we're going to be using
463:29 variant and so we're going to be using the x86 here you can notice here you can
463:32 the x86 here you can notice here you can change it on the right hand side we're
463:34 change it on the right hand side we're going to stick with x86 I'm going to go
463:36 going to stick with x86 I'm going to go ahead and hit next so now we're going to
463:38 ahead and hit next so now we're going to choose our instance type and so this is
463:40 choose our instance type and so this is going to decide um uh greatly how much
463:43 going to decide um uh greatly how much we're going to be spending because the
463:45 we're going to be spending because the larger it is the more we're going to
463:46 larger it is the more we're going to spend so see this T2 micro if we want to
463:48 spend so see this T2 micro if we want to know the pricing for that we go to
463:50 know the pricing for that we go to ec2 pricing
463:53 ec2 pricing AWS and once we get to ec2
463:57 AWS and once we get to ec2 pricing we want to go to on
464:00 pricing we want to go to on demand and from here this will
464:02 demand and from here this will load and so down below we can kind of go
464:05 load and so down below we can kind of go find our price it should show
464:07 find our price it should show us should show us the list ah here it is
464:10 us should show us the list ah here it is okay so I can say a T2
464:12 okay so I can say a T2 micro and we can see the On Demand is
464:14 micro and we can see the On Demand is this so it seems really cheap what you
464:17 this so it seems really cheap what you got to do is do the math so if you do
464:18 got to do is do the math so if you do time 7:30 that's how many hours there
464:20 time 7:30 that's how many hours there are in a month if we launch a T2 micro
464:23 are in a month if we launch a T2 micro and let's say we didn't have the free
464:25 and let's say we didn't have the free tier we you do if you first made your
464:27 tier we you do if you first made your account you're going to have 7 750 hours
464:30 account you're going to have 7 750 hours for free with a free tier but if you
464:32 for free with a free tier but if you didn't it would only cost you $8 and 46
464:36 didn't it would only cost you $8 and 46 USD okay so just be aware of that and if
464:39 USD okay so just be aware of that and if you ever need to figure something out go
464:40 you ever need to figure something out go there copy it do the math 730 it's
464:42 there copy it do the math 730 it's pretty easy so here we have a T2 micro
464:45 pretty easy so here we have a T2 micro and the t2 family it's going to have one
464:47 and the t2 family it's going to have one V vcpu notice it has a V for virtual so
464:50 V vcpu notice it has a V for virtual so there could be more than a single CPU on
464:54 there could be more than a single CPU on the underlying Hardware but we're only
464:56 the underlying Hardware but we're only going to have access to one virtual CPU
464:59 going to have access to one virtual CPU we have 1 GB of memory it's for low to
465:02 we have 1 GB of memory it's for low to moderate Network performance so that's a
465:03 moderate Network performance so that's a factor that can change if you need like
465:05 factor that can change if you need like uh uh gigabit stuff like really fast
465:07 uh uh gigabit stuff like really fast connections for on Prem hybrid
465:09 connections for on Prem hybrid connections and you have specialized
465:11 connections and you have specialized servers for that but for this this is
465:13 servers for that but for this this is fine the TT micro is great uh if you
465:15 fine the TT micro is great uh if you want you can also search uh this way to
465:17 want you can also search uh this way to see all the instance families and things
465:19 see all the instance families and things like that you can filter for current
465:20 like that you can filter for current Generations all generations so this is
465:22 Generations all generations so this is fine okay so from there we're going to
465:25 fine okay so from there we're going to go to configure our instance type you
465:27 go to configure our instance type you can say let's launch multiple of these
465:29 can say let's launch multiple of these instances let's turn on spot to save
465:32 instances let's turn on spot to save money and try to bid for a particular
465:34 money and try to bid for a particular price we can change our VPC it's going
465:36 price we can change our VPC it's going to default to the default VPC um if you
465:39 to default to the default VPC um if you have no subnets just going to pick one
465:41 have no subnets just going to pick one at random here which is fine um whether
465:44 at random here which is fine um whether to autoassign a public IP address if you
465:46 to autoassign a public IP address if you do not have an IP address you cannot
465:48 do not have an IP address you cannot reach the internet so generally you want
465:50 reach the internet so generally you want this to be enabled this is dependent on
465:52 this to be enabled this is dependent on the subnet whether it will default
465:54 the subnet whether it will default enabled but doesn't matter if you have
465:56 enabled but doesn't matter if you have an ec2 instance in a private or public
465:58 an ec2 instance in a private or public subnet you can always override this and
466:00 subnet you can always override this and give it a public IP address you have
466:02 give it a public IP address you have placement groups which allows you to
466:04 placement groups which allows you to place servers together closely not
466:05 place servers together closely not something for the certified Cloud
466:06 something for the certified Cloud partitioner there's capacity
466:08 partitioner there's capacity reservations so if you're worried about
466:10 reservations so if you're worried about any us running out of this you can
466:12 any us running out of this you can reserve capacity so that's kind of
466:14 reserve capacity so that's kind of interesting domain join directory this
466:16 interesting domain join directory this isn't something that I've done much with
466:18 isn't something that I've done much with but I imagine that has something to do
466:19 but I imagine that has something to do with um direct active directory or
466:21 with um direct active directory or something like that to join information
466:24 something like that to join information then you need to uh uh have an IM roll
466:27 then you need to uh uh have an IM roll and we absolutely do need an IM roll
466:28 and we absolutely do need an IM roll here so what I want you to do is create
466:30 here so what I want you to do is create a new rooll just going to close off
466:32 a new rooll just going to close off these other tabs here and we will go
466:35 these other tabs here and we will go wait a moment create a new roll here and
466:37 wait a moment create a new roll here and we want to do this for ec2 so we say ec2
466:40 we want to do this for ec2 so we say ec2 is what we're creating the rule for
466:42 is what we're creating the rule for we'll hit next and um I don't know if I
466:45 we'll hit next and um I don't know if I have a policy but I'm going to go ahead
466:46 have a policy but I'm going to go ahead and um well I don't need to make a new
466:48 and um well I don't need to make a new policy but I just want SSM and the
466:51 policy but I just want SSM and the reason I want SSM is so that I can um uh
466:56 reason I want SSM is so that I can um uh use sessions manager to log in so we
466:57 use sessions manager to log in so we don't have to use key pairs we will use
466:59 don't have to use key pairs we will use key pairs but if we didn't want to use
467:01 key pairs but if we didn't want to use it that's what we could do and this used
467:02 it that's what we could do and this used to be the old rle and it'll tell you hey
467:04 to be the old rle and it'll tell you hey go use this new one here so just want to
467:06 go use this new one here so just want to make sure I know which one it is and so
467:09 make sure I know which one it is and so we'll just checkbox that on we'll hit
467:10 we'll just checkbox that on we'll hit next we can add tags right here it' be
467:13 next we can add tags right here it' be uh well actually we don't need to add
467:15 uh well actually we don't need to add any tags here so that's fine we'll sit
467:16 any tags here so that's fine we'll sit next and then I'll just say U my SSM ec2
467:20 next and then I'll just say U my SSM ec2 roll okay and we'll create that
467:23 roll okay and we'll create that roll and now that we have created that
467:26 roll and now that we have created that roll we can go back to our first tab
467:28 roll we can go back to our first tab here and and give this a refresh and
467:30 here and and give this a refresh and then drop down and it should show up
467:32 then drop down and it should show up here if we go down here a little bit we
467:34 here if we go down here a little bit we could turn on extra monitoring there is
467:36 could turn on extra monitoring there is monitoring built in but if you wanted to
467:39 monitoring built in but if you wanted to uh monitor it to a lower uh like it more
467:42 uh monitor it to a lower uh like it more frequently you could do that as well we
467:44 frequently you could do that as well we want share tendency right this is where
467:46 want share tendency right this is where you change to Dedicated instance or
467:48 you change to Dedicated instance or dedicated host obviously these cost more
467:50 dedicated host obviously these cost more but we're going to stick with shared
467:51 but we're going to stick with shared elastic inference so this is for um uh
467:55 elastic inference so this is for um uh attaching a a fractional GPU great for
467:57 attaching a a fractional GPU great for ML not something that we want there's
468:00 ML not something that we want there's credit specification I don't remember
468:01 credit specification I don't remember seeing this before selecting unlimited
468:03 seeing this before selecting unlimited for credit specification allows for to
468:05 for credit specification allows for to burst beyond the Baseline so as for
468:07 burst beyond the Baseline so as for bursting here you can attach an uh EFS
468:10 bursting here you can attach an uh EFS uh so if you need a file system that you
468:12 uh so if you need a file system that you want to mount or attach um then there's
468:14 want to mount or attach um then there's the Enclave option so Nitro Enclave
468:16 the Enclave option so Nitro Enclave enables you to create isolated compute
468:18 enables you to create isolated compute environments to further protect your uh
468:20 environments to further protect your uh and securely process highly sensitive
468:22 and securely process highly sensitive data so it might be something you might
468:23 data so it might be something you might want to checkbox on um based on your use
468:26 want to checkbox on um based on your use case and then down below are we have the
468:28 case and then down below are we have the ability to enter our user data and this
468:30 ability to enter our user data and this is something we want to do because we
468:32 is something we want to do because we want to install aachi so that we have
468:35 want to install aachi so that we have something to work with here so what I'm
468:36 something to work with here so what I'm going to do is make a shebang so that is
468:38 going to do is make a shebang so that is a pound and an exclamation mark I know
468:41 a pound and an exclamation mark I know that's really small so I'll try to bump
468:42 that's really small so I'll try to bump up my font here so you can see what I'm
468:44 up my font here so you can see what I'm doing and we're going to do a forward SL
468:46 doing and we're going to do a forward SL bin and a for SL bash on the next line
468:48 bin and a for SL bash on the next line here we're going to do yum install
468:50 here we're going to do yum install hyphen y
468:51 hyphen y httpd um that's going to install apachi
468:55 httpd um that's going to install apachi and why it's not called Apache I don't
468:56 and why it's not called Apache I don't know why but they call it http D there's
469:00 know why but they call it http D there's no Apachi in the name there and so we'll
469:02 no Apachi in the name there and so we'll say system CTL start httpd system CTL
469:07 say system CTL start httpd system CTL enable htpd so we're saying start up
469:09 enable htpd so we're saying start up Apachi and then make sure that it stays
469:11 Apachi and then make sure that it stays running if we restart our machine very
469:14 running if we restart our machine very simple so from there we will go to our
469:17 simple so from there we will go to our storage we'll say add our storage and
469:19 storage we'll say add our storage and this is at 8 gigabytes by default we
469:21 this is at 8 gigabytes by default we could uh uh turn that up to 30 if we
469:24 could uh uh turn that up to 30 if we like so you can go all the way up to 30
469:25 like so you can go all the way up to 30 if you like um and you might want to do
469:27 if you like um and you might want to do that but I'm going to leave at 8 we
469:29 that but I'm going to leave at 8 we could change our volume type I'm fine
469:31 could change our volume type I'm fine with gp2 because it's very cost
469:33 with gp2 because it's very cost effective and if we want to turn on
469:35 effective and if we want to turn on encryption and you should always turn on
469:36 encryption and you should always turn on encryption there's no reason not to and
469:38 encryption there's no reason not to and so we'll turn that on it's not like it's
469:39 so we'll turn that on it's not like it's going to cost you more it's going to be
469:41 going to cost you more it's going to be the same cost it's just your choice
469:43 the same cost it's just your choice there if do want to add a tag yes we're
469:45 there if do want to add a tag yes we're going to add a name and we're going to
469:46 going to add a name and we're going to say my ec2
469:49 say my ec2 instance
469:50 instance okay and so that's going to give us a
469:52 okay and so that's going to give us a name which is something we would really
469:54 name which is something we would really like to have then we have our security
469:55 like to have then we have our security group I'm going to just create a new
469:57 group I'm going to just create a new security group called my um um ec2 SG
470:00 security group called my um um ec2 SG here and just say my ec2 SG something
470:04 here and just say my ec2 SG something you cannot do is rename a security group
470:06 you cannot do is rename a security group once you've made it so make sure you
470:07 once you've made it so make sure you don't make a spelling mistake up here
470:10 don't make a spelling mistake up here and we want to be uh accessing that httt
470:14 and we want to be uh accessing that httt HTT or it's going to launch a website so
470:17 HTT or it's going to launch a website so in order to do that we need to make sure
470:18 in order to do that we need to make sure we have HTTP as a type with the port ad
470:21 we have HTTP as a type with the port ad open and we want it from anywhere so
470:23 open and we want it from anywhere so we'll say anywhere and that will be
470:26 we'll say anywhere and that will be 0.0.0.0 forze 0 and that that's for the
470:29 0.0.0.0 forze 0 and that that's for the ipv4 this is for the IPv6 okay so we'll
470:32 ipv4 this is for the IPv6 okay so we'll just say
470:34 just say internet and this is for SSH right and
470:37 internet and this is for SSH right and for this um I would probably suggest to
470:39 for this um I would probably suggest to say my IP but since we might be using a
470:42 say my IP but since we might be using a cloud shell to do that we're going to
470:43 cloud shell to do that we're going to leave it as anywhere so that we don't
470:45 leave it as anywhere so that we don't have any issues connecting so from here
470:47 have any issues connecting so from here we'll review and launch and you can
470:50 we'll review and launch and you can review what it is that's going on here
470:53 review what it is that's going on here it's going to say here hey you have an
470:55 it's going to say here hey you have an open port that's okay we we want the
470:57 open port that's okay we we want the internet to see our website cuz that's
470:59 internet to see our website cuz that's the whole point there and we'll go ahead
471:01 the whole point there and we'll go ahead and launch it it's going to ask for a
471:02 and launch it it's going to ask for a key pair we can go down and say proceed
471:04 key pair we can go down and say proceed without key pair but what I'm going to
471:05 without key pair but what I'm going to do is I'm going to create a new key pair
471:07 do is I'm going to create a new key pair because I want to show you how those
471:08 because I want to show you how those work and I'm sure we've already done in
471:10 work and I'm sure we've already done in this course once but we'll do it again
471:12 this course once but we'll do it again and so I'm going to just name this as my
471:14 and so I'm going to just name this as my ec2 instance here and then we're going
471:16 ec2 instance here and then we're going to go download that key pair it's going
471:18 to go download that key pair it's going to download a PM file there and so now
471:22 to download a PM file there and so now we can go ahead and launch that
471:25 we can go ahead and launch that instance and while that is launching so
471:27 instance and while that is launching so I'm going to just close this other t
471:28 I'm going to just close this other t here we're going to click on The View
471:30 here we're going to click on The View instances and so here is that instance
471:33 instances and so here is that instance that's why we put the tag so we could
471:34 that's why we put the tag so we could have a name there we're going to wait
471:35 have a name there we're going to wait for that to start but as that's going
471:37 for that to start but as that's going I'm going to make a new tab by just
471:38 I'm going to make a new tab by just right clicking here on the logo click
471:41 right clicking here on the logo click anywhere pretty much to do that and uh
471:43 anywhere pretty much to do that and uh once we do that we'll click on cloud
471:49 shell and as that is going what I want to do is take this pen down below I'm
471:52 to do is take this pen down below I'm going to move it to my desktop to make
471:53 going to move it to my desktop to make it easier for me to upload I'm doing
471:55 it easier for me to upload I'm doing this off screen okay
472:03 and uh once this environment is running I'm going to go ahead and upload that
472:05 I'm going to go ahead and upload that okay so we'll just give it a moment to
472:07 okay so we'll just give it a moment to do that we're also waiting for the
472:10 do that we're also waiting for the server to spin up as you'll notice there
472:12 server to spin up as you'll notice there is a public IP address here it says it's
472:15 is a public IP address here it says it's running so if we want we can copy it
472:17 running so if we want we can copy it we're looking for those two checks to
472:19 we're looking for those two checks to pass so the server could be available
472:22 pass so the server could be available but generally you want to wait for those
472:23 but generally you want to wait for those two system checks because one says Hey
472:25 two system checks because one says Hey the Hardware's fine the Network's fine
472:27 the Hardware's fine the Network's fine things like that okay if I take that IP
472:29 things like that okay if I take that IP address paste it on it up here we have
472:31 address paste it on it up here we have the web page so that is working uh no
472:34 the web page so that is working uh no problem there so that's great and we'll
472:36 problem there so that's great and we'll go over to Cloud shell and that is still
472:38 go over to Cloud shell and that is still starting uh it's not the fastest but
472:41 starting uh it's not the fastest but that's just how it is and um you know
472:43 that's just how it is and um you know we'll get going here in a second as soon
472:47 we'll get going here in a second as soon as this decides to
472:50 as this decides to load there we go so it's loaded I can
472:53 load there we go so it's loaded I can type clear here just to clear that
472:55 type clear here just to clear that screen out and so what I want to do is
472:57 screen out and so what I want to do is upload that pen file so I'm going to go
472:58 upload that pen file so I'm going to go and upload that file we're going to go
473:00 and upload that file we're going to go ahead and select it I'm going to go to
473:01 ahead and select it I'm going to go to my desktop here whoops my desktop and we
473:04 my desktop here whoops my desktop and we are going to choose my ec2 instance pen
473:07 are going to choose my ec2 instance pen all right and from there we'll hit
473:08 all right and from there we'll hit upload and that's going to upload that
473:10 upload and that's going to upload that pem
473:12 pem file once that is uploaded we're going
473:14 file once that is uploaded we're going to do
473:16 to do LS okay and so uh this is from a
473:18 LS okay and so uh this is from a previous tutorial so I'm going to go
473:19 previous tutorial so I'm going to go ahead and just delete that other one
473:21 ahead and just delete that other one there we'll say remove EFS example pem
473:25 there we'll say remove EFS example pem yes okay we'll type clear
473:29 yes okay we'll type clear and then what we can do here is Type in
473:30 and then what we can do here is Type in chamod and um I believe it's
473:33 chamod and um I believe it's 400 and what do we call this my ec2
473:36 400 and what do we call this my ec2 instance pen if you hit tab it will
473:38 instance pen if you hit tab it will autocomplete which is nice and if you do
473:40 autocomplete which is nice and if you do lsen la we can take a look at that file
473:43 lsen la we can take a look at that file and see it should look like this it
473:46 and see it should look like this it should have only one R here so the idea
473:48 should have only one R here so the idea is you're locking it down so it's not
473:49 is you're locking it down so it's not writable or executable it's just
473:51 writable or executable it's just readable because that's what you have to
473:53 readable because that's what you have to have it if you want to SSH and so if we
473:55 have it if you want to SSH and so if we want to ssh what we'll do is hit the
473:57 want to ssh what we'll do is hit the connect button here
473:59 connect button here and we have four options they just give
474:01 and we have four options they just give you too many options it's going to be a
474:02 you too many options it's going to be a fifth one for sure soon but right now
474:04 fifth one for sure soon but right now we're talking about SSH so for SSH um we
474:07 we're talking about SSH so for SSH um we had to chamod our file which we did and
474:09 had to chamod our file which we did and then we need to use this DNS to connect
474:11 then we need to use this DNS to connect to it and so this is the full line here
474:13 to it and so this is the full line here if you click on this copy that over and
474:15 if you click on this copy that over and paste it
474:16 paste it in that should be everything and noce
474:18 in that should be everything and noce we're doing ec2 user followed by this
474:21 we're doing ec2 user followed by this you could put the IP address in here
474:23 you could put the IP address in here instead if you preferred so if you were
474:26 instead if you preferred so if you were over here
474:28 over here you could go and take that IP address
474:30 you could go and take that IP address which is I think shorter nicer but um
474:33 which is I think shorter nicer but um you know if you just click that one
474:34 you know if you just click that one button it works that's fine you always
474:36 button it works that's fine you always have to accept the uh the fingerprint
474:39 have to accept the uh the fingerprint then you'll be inside the instance you
474:40 then you'll be inside the instance you can type who am I to see which user you
474:42 can type who am I to see which user you are you're the ec2 user that's the user
474:45 are you're the ec2 user that's the user that ads creates for their Amazon Linux
474:47 that ads creates for their Amazon Linux instances um it's going to vary per um
474:51 instances um it's going to vary per um Ami so not all Amis have an ec2 user it
474:54 Ami so not all Amis have an ec2 user it might be something else but that's
474:55 might be something else but that's generally the ones that Aus uses for
474:57 generally the ones that Aus uses for their supported ones and so if we do um
474:59 their supported ones and so if we do um an LS again we're in the server right
475:01 an LS again we're in the server right now we can tell because it says right
475:03 now we can tell because it says right here or if we do a PWD we can kind of
475:05 here or if we do a PWD we can kind of just kind of look around so I think it's
475:07 just kind of look around so I think it's going to be at VAR ww that's where HT
475:10 going to be at VAR ww that's where HT httpd or Apachi always uh puts their
475:13 httpd or Apachi always uh puts their files here so if I go in here whoops I'm
475:16 files here so if I go in here whoops I'm just looking for um the index file so I
475:20 just looking for um the index file so I thought the index file was
475:23 thought the index file was in cdar
475:27 in cdar WW H
475:30 WW H HTML well where the heck is it so I'm
475:32 HTML well where the heck is it so I'm going to just touch a file here and see
475:34 going to just touch a file here and see if it overrides
475:36 if it overrides it oh I don't care I'll just type
475:39 it oh I don't care I'll just type pseudo and what we can do is just try to
475:41 pseudo and what we can do is just try to restart this system CTL um there's a
475:46 restart this system CTL um there's a very similar command that's like uh
475:47 very similar command that's like uh service and so I always forget the order
475:49 service and so I always forget the order of it so I think it'd be I'm just
475:51 of it so I think it'd be I'm just checking um probably uh restart httpd
476:01 and so failed to restart the policy was not provided as the name service um
476:12 Service uh maybe pseudo there we go and so if we go back
476:15 pseudo there we go and so if we go back here I'm going to see if it changed
476:17 here I'm going to see if it changed because it will take whatever is in the
476:18 because it will take whatever is in the index HTML file so if there's no file
476:20 index HTML file so if there's no file there it's going to uh show that there
476:22 there it's going to uh show that there and so what I can do is I can edit this
476:25 and so what I can do is I can edit this file so going type VI index HTML and um
476:28 file so going type VI index HTML and um I'm going to hit I for insert mode oh
476:31 I'm going to hit I for insert mode oh says it's readon so what we have to do Q
476:34 says it's readon so what we have to do Q uh colon Q
476:36 uh colon Q quit oops uh clear LS and so what we
476:40 quit oops uh clear LS and so what we need to do is do pseudo VI index HTML
476:45 need to do is do pseudo VI index HTML and so Vim every single key is a hotkey
476:48 and so Vim every single key is a hotkey okay um and I'm not teaching Vim here
476:50 okay um and I'm not teaching Vim here but I'm going to teach you the basics
476:51 but I'm going to teach you the basics but the idea is that when you're here
476:53 but the idea is that when you're here notice that the cursor is blinking when
476:55 notice that the cursor is blinking when I hit I it enters insert mode now I can
476:58 I hit I it enters insert mode now I can type normally so I'd say hello uh hello
477:02 type normally so I'd say hello uh hello Cloud okay and I'm going to hit escape
477:04 Cloud okay and I'm going to hit escape to go back to um navigation mode
477:07 to go back to um navigation mode whatever you want to call it I'm going
477:08 whatever you want to call it I'm going to hit colon so it brings up the command
477:11 to hit colon so it brings up the command I'm going to type in uh write and quit
477:14 I'm going to type in uh write and quit Okay and hit enter and so I'll type
477:17 Okay and hit enter and so I'll type clear and so whoops clear and so we'll
477:20 clear and so whoops clear and so we'll hit up till we get that command pseudo
477:23 hit up till we get that command pseudo system CTL restart hbd we'll hit that
477:26 system CTL restart hbd we'll hit that hit enter
477:29 hit enter okay and it should restart pretty fast
477:33 okay and it should restart pretty fast there it is so it says hello Cloud I
477:35 there it is so it says hello Cloud I probably didn't even have to restart it
477:36 probably didn't even have to restart it to do that but anyway so now that
477:38 to do that but anyway so now that instance uh you can see how we're
477:40 instance uh you can see how we're updating that so what I want to do is
477:42 updating that so what I want to do is just do a sanity check and make sure
477:44 just do a sanity check and make sure that if we restart this instance that
477:46 that if we restart this instance that we're going to be able to um have aachi
477:49 we're going to be able to um have aachi running that's something you should
477:50 running that's something you should always do if you have an app and you or
477:52 always do if you have an app and you or anything you install it restart your
477:53 anything you install it restart your server make sure that everything works
477:55 server make sure that everything works so what I'm going to do is uh just hit
477:58 so what I'm going to do is uh just hit hit exit here so we go back to the top
478:00 hit exit here so we go back to the top level cloudshell type clear I'm going to
478:02 level cloudshell type clear I'm going to go back over to my ec2
478:04 go back over to my ec2 instance going have to click around to
478:06 instance going have to click around to find it here and what I want to do is
478:08 find it here and what I want to do is reboot it okay and if I reboot the
478:11 reboot it okay and if I reboot the machine the IP address is going to stay
478:13 machine the IP address is going to stay the same okay so if we reboot it the IP
478:16 the same okay so if we reboot it the IP address is going to stay the same and
478:17 address is going to stay the same and the reboot is going to happen really
478:19 the reboot is going to happen really fast if we want to observe that reboot
478:21 fast if we want to observe that reboot we could go over to um here on the right
478:25 we could go over to um here on the right hand side go to the system log and it
478:27 hand side go to the system log and it would show us that it it had
478:29 would show us that it it had rebooted I think so yeah it does a cloud
478:31 rebooted I think so yeah it does a cloud in it there I think it
478:33 in it there I think it rebooted not sure um but anyway if it's
478:36 rebooted not sure um but anyway if it's rebooted then we can go ahead and
478:38 rebooted then we can go ahead and connect and make sure everything's fine
478:39 connect and make sure everything's fine so let's just go here and hit enter and
478:42 so let's just go here and hit enter and let's see if the what the web page is
478:49 here notice that it's hanging right so it's probably because it's still
478:51 it's probably because it's still restarting even though it doesn't look
478:53 restarting even though it doesn't look like it is and that's something that you
478:54 like it is and that's something that you have to understand about the cloud is
478:56 have to understand about the cloud is that you have to think about what you're
478:58 that you have to think about what you're doing and have confidence that it is
479:00 doing and have confidence that it is happening and also just double check it
479:02 happening and also just double check it but uh that's something that can be kind
479:04 but uh that's something that can be kind of frustrating because these are
479:06 of frustrating because these are globally available Services uh uh
479:08 globally available Services uh uh they're massively scalable and so one of
479:10 they're massively scalable and so one of the trade-offs is that you don't always
479:11 the trade-offs is that you don't always have the most uh responsive uh uis ads
479:15 have the most uh responsive uh uis ads has one of the most responsive uis out
479:16 has one of the most responsive uis out of all the major providers but even
479:18 of all the major providers but even still like sometimes I have to second
479:19 still like sometimes I have to second guess myself but the page uh right now
479:22 guess myself but the page uh right now it was not working now it is so it's
479:24 it was not working now it is so it's fine so it just took time for that to
479:25 fine so it just took time for that to reboot and so um what I want to do is
479:28 reboot and so um what I want to do is connect a different way so we're going
479:29 connect a different way so we're going to go here and we're going to hit um
479:31 to go here and we're going to hit um we're going to checkbox that on we're
479:32 we're going to checkbox that on we're going to hit connect and instead of
479:34 going to hit connect and instead of using SSH client we're just going to go
479:35 using SSH client we're just going to go to sessions manager and hit
479:37 to sessions manager and hit connect and this is the preferred way of
479:39 connect and this is the preferred way of connecting because you don't have to
479:42 connecting because you don't have to have this this SSH key and that's a lot
479:45 have this this SSH key and that's a lot more secure because if someone has that
479:47 more secure because if someone has that key and you you know you hand it to
479:48 key and you you know you hand it to someone they could hand it to somebody
479:49 someone they could hand it to somebody else and then you have a big problem on
479:51 else and then you have a big problem on your hands so here this looks very
479:53 your hands so here this looks very similar but if you type who am I it
479:55 similar but if you type who am I it actually logs in as the SSM user which
479:57 actually logs in as the SSM user which is kind of annoying so I type in P sudo
479:59 is kind of annoying so I type in P sudo Su I have to do this hyphen here and
480:01 Su I have to do this hyphen here and then I'm going to say the user I want to
480:02 then I'm going to say the user I want to be which is ec2 user and then if I type
480:05 be which is ec2 user and then if I type who am I we are the correct user you
480:06 who am I we are the correct user you can't do anything in that SSM hyphen
480:08 can't do anything in that SSM hyphen user or SSM user so you got to switch
480:11 user or SSM user so you got to switch that over and I can bump this up to make
480:13 that over and I can bump this up to make it a bit larger so this is obviously not
480:15 it a bit larger so this is obviously not as nice as working over here or even in
480:17 as nice as working over here or even in your own terminal but it's a lot more
480:19 your own terminal but it's a lot more secure and it's tracked and all these
480:21 secure and it's tracked and all these other things so we really should be
480:23 other things so we really should be using it
480:24 using it okay and um I really don't like having
480:27 okay and um I really don't like having to bump this up with my HTML I'm going
480:29 to bump this up with my HTML I'm going to just go back to zero there there's
480:30 to just go back to zero there there's probably like a way to configure that
480:32 probably like a way to configure that but anyway uh let's just go and take a
480:35 but anyway uh let's just go and take a look at our
480:36 look at our file I'm going to type VI again and
480:38 file I'm going to type VI again and we're going to do VAR www HTML index
480:42 we're going to do VAR www HTML index HTML I'm going to put pseudo in front of
480:44 HTML I'm going to put pseudo in front of there and again remember you have to hit
480:47 there and again remember you have to hit I to go into insert
480:49 I to go into insert mode and uh what I'm going to do is just
480:52 mode and uh what I'm going to do is just take capitalize that hello Cloud give
480:54 take capitalize that hello Cloud give that exclamation mark colon WQ to quit
480:57 that exclamation mark colon WQ to quit right quick
480:58 right quick going to go back here refresh okay so we
481:00 going to go back here refresh okay so we don't have to restart our server which
481:01 don't have to restart our server which is nice all right so um that's that
481:06 is nice all right so um that's that that's pretty clear so I'll hit
481:07 that's pretty clear so I'll hit terminate
481:08 terminate here and I don't think we need Cloud
481:10 here and I don't think we need Cloud shell for anything so I'm just going to
481:11 shell for anything so I'm just going to close that and so that's pretty much it
481:14 close that and so that's pretty much it when it when it comes to working with an
481:17 when it when it comes to working with an an ec2 instance and so the next thing I
481:18 an ec2 instance and so the next thing I want to show you is elastic IP
481:21 want to show you is elastic IP [Music]
481:24 [Music] okay okay so now I want to show you
481:26 okay okay so now I want to show you elastic IP uh commonly abbreviated to
481:29 elastic IP uh commonly abbreviated to EIP and so all that is it's just a um a
481:33 EIP and so all that is it's just a um a static IP an IP that does not change
481:35 static IP an IP that does not change because this ec2 instance here notice
481:37 because this ec2 instance here notice that it's 54 163
481:39 that it's 54 163 4104 and what would happen if we were to
481:42 4104 and what would happen if we were to stop this instance not reboot it but
481:43 stop this instance not reboot it but stop it because for whatever reason we
481:45 stop it because for whatever reason we had to or or um for whatever reason and
481:50 had to or or um for whatever reason and if we were to stop this instance and we
481:52 if we were to stop this instance and we were to restart
481:54 were to restart it
481:55 it okay uh and we have to wait for to stop
481:58 okay uh and we have to wait for to stop but that IP address is going to change
482:02 but that IP address is going to change okay so 54 1634 104 hopefully we can
482:06 okay so 54 1634 104 hopefully we can observe that I'm just going to write
482:08 observe that I'm just going to write that down so we do not forget so I can
482:11 that down so we do not forget so I can prove to you that it does
482:18 change and now that it it's still stopping here so as that's stopping
482:20 stopping here so as that's stopping we're just going to go ahead and get our
482:22 we're just going to go ahead and get our elastic IP and I will prove that as we
482:25 elastic IP and I will prove that as we go here so I'm going to go over to here
482:27 go here so I'm going to go over to here and so what I want to do is Reserve or
482:29 and so what I want to do is Reserve or allocate an elastic IP address and so
482:31 allocate an elastic IP address and so I'm going to say Us East one and it's
482:34 I'm going to say Us East one and it's going to say from the Amazon Pool of
482:36 going to say from the Amazon Pool of ipv4 addresses so adabs has a bunch of
482:38 ipv4 addresses so adabs has a bunch of IP addresses they're holding on to and
482:40 IP addresses they're holding on to and so you can just allocate one and once
482:43 so you can just allocate one and once you've allocated that's your IP address
482:46 you've allocated that's your IP address so coming back to here okay this is
482:49 so coming back to here okay this is stopped notice there is no public IP
482:51 stopped notice there is no public IP address we're going to start it
482:58 again okay and will'll just checkbox it on and we just have to wait a little
483:00 on and we just have to wait a little while to see what the IP address is
483:02 while to see what the IP address is going to be I'm going to tell you it's
483:04 going to be I'm going to tell you it's going to be something
483:06 going to be something else so if I go back here this is 54
483:10 else so if I go back here this is 54 2352 1110 and our original one was 54
483:13 2352 1110 and our original one was 54 1634 104 so the reason why it's
483:17 1634 104 so the reason why it's important to have the same address is
483:18 important to have the same address is that if uh you have a load balancer well
483:21 that if uh you have a load balancer well not a load balcer but if you have a
483:23 not a load balcer but if you have a domain pointing to your I uh your server
483:26 domain pointing to your I uh your server and you reboot then and the you have a
483:28 and you reboot then and the you have a dang a dangling um path or route where
483:32 dang a dangling um path or route where Revue 3 was going to be pointing to
483:34 Revue 3 was going to be pointing to nothing and so adus does have things to
483:36 nothing and so adus does have things to mitigate that like aliases and things
483:38 mitigate that like aliases and things like that but um in general you know
483:40 like that but um in general you know there's cases where you just have to
483:41 there's cases where you just have to have a static IP address and so we had
483:44 have a static IP address and so we had allocated one over here and if we want
483:46 allocated one over here and if we want to assign it we're going to associate
483:48 to assign it we're going to associate that elastic IP address we're going to
483:50 that elastic IP address we're going to drop it down choose the cc2 instance um
483:53 drop it down choose the cc2 instance um I suppose the private IP as well and
483:56 I suppose the private IP as well and then we're going to go ahead and hit
483:57 then we're going to go ahead and hit allocate or
483:59 allocate or associate and once it's Associated it
484:01 associate and once it's Associated it should now have 34 199 121 116 so we go
484:06 should now have 34 199 121 116 so we go over
484:11 here and we're going to take a look here and that's its IP address we can pull it
484:13 and that's its IP address we can pull it up okay and that's that so yeah that's
484:17 up okay and that's that so yeah that's thetic
484:18 thetic [Music]
484:22 [Music] IP okay so now that we um have our
484:24 IP okay so now that we um have our lastic IP we have our ec2 instance
484:26 lastic IP we have our ec2 instance running let's say um you know we lose
484:28 running let's say um you know we lose the server we terminate it so we would
484:30 the server we terminate it so we would lose all of our configuration so if we
484:32 lose all of our configuration so if we wanted to bake this Ami to save it for
484:34 wanted to bake this Ami to save it for later what we'd have to do is go and
484:35 later what we'd have to do is go and create an image so to do that we go to
484:37 create an image so to do that we go to the top here and we go to images and
484:39 the top here and we go to images and templates and we can create an image or
484:41 templates and we can create an image or we can create a a template which is a
484:43 we can create a a template which is a lot better but for the time being we're
484:44 lot better but for the time being we're going just go ahead and create an image
484:45 going just go ahead and create an image and when you create an image you're
484:46 and when you create an image you're basically creating an Ami and so here
484:49 basically creating an Ami and so here I'm just going to say uh my
484:51 I'm just going to say uh my ec2 and I'm going to go 0 0 0 to just
484:53 ec2 and I'm going to go 0 0 0 to just kind of like number it so that's a very
484:55 kind of like number it so that's a very common numbering just do three zeros and
484:57 common numbering just do three zeros and then Inc by one and so here I can just
484:59 then Inc by one and so here I can just say my Apachi server and so it's going
485:03 say my Apachi server and so it's going to save some settings like the fact that
485:04 to save some settings like the fact that there is a a volume you could uh save
485:07 there is a a volume you could uh save some tags there and so I might go ahead
485:09 some tags there and so I might go ahead and add a tag and just say name and
485:11 and add a tag and just say name and we'll just say my ec2 server or so that
485:14 we'll just say my ec2 server or so that it remembers
485:16 it remembers that okay and then what we'll do is go
485:19 that okay and then what we'll do is go ahead and create our image and so this
485:21 ahead and create our image and so this can take a little bit of time if we go
485:23 can take a little bit of time if we go over to uh images
485:26 over to uh images here it's going to to be spinning for a
485:28 here it's going to to be spinning for a while and uh we'll just wait until it's
485:30 while and uh we'll just wait until it's done okay all right so after waiting a
485:32 done okay all right so after waiting a little while here our Ami is ready so
485:34 little while here our Ami is ready so we're just waiting for it to go
485:35 we're just waiting for it to go available if you do not see it just make
485:36 available if you do not see it just make sure you hit the refresh um because
485:39 sure you hit the refresh um because sometimes ads will just spin forever um
485:41 sometimes ads will just spin forever um and so that's just something you'll have
485:43 and so that's just something you'll have to do so you know hopefully that makes
485:45 to do so you know hopefully that makes sense what we'll do is go make our way
485:47 sense what we'll do is go make our way back over to instances here and we can
485:50 back over to instances here and we can launch one this way well actually we can
485:52 launch one this way well actually we can do it over from um the Ami page so what
485:55 do it over from um the Ami page so what I'm going to do is just terminate this
485:57 I'm going to do is just terminate this instance we're all done with it okay and
486:00 instance we're all done with it okay and we'll hit terminate it's totally fine
486:02 we'll hit terminate it's totally fine and it had a message about elastic IPS
486:04 and it had a message about elastic IPS about releasing them so when it does
486:05 about releasing them so when it does that the elastic IP is still over here
486:08 that the elastic IP is still over here so it did not release it so what we're
486:10 so it did not release it so what we're going to do is go ahead and disassociate
486:12 going to do is go ahead and disassociate the elastic
486:14 the elastic IP okay and then we're also going to
486:17 IP okay and then we're also going to release the IP address because if we
486:19 release the IP address because if we don't we're going to have this IP
486:20 don't we're going to have this IP address and sticking around that we're
486:22 address and sticking around that we're not using it is going to charge us a
486:23 not using it is going to charge us a dollar month over month so just be aware
486:25 dollar month over month so just be aware of those because that's just kind of
486:26 of those because that's just kind of like a hidden cost there but what we're
486:28 like a hidden cost there but what we're going to do is go over to
486:30 going to do is go over to Ami and we're going to select it here
486:32 Ami and we're going to select it here we're going to go to actions we're going
486:33 we're going to go to actions we're going to go ahead and
486:34 to go ahead and launch and what it's going to do is make
486:36 launch and what it's going to do is make us fill out all this other stuff again
486:38 us fill out all this other stuff again so if you had made a launch template uh
486:40 so if you had made a launch template uh we wouldn't have to fill out all this
486:42 we wouldn't have to fill out all this stuff it'd be part of it but that's what
486:43 stuff it'd be part of it but that's what I'm trying to show you with this Ami
486:45 I'm trying to show you with this Ami stuff so um instead of filling out all
486:47 stuff so um instead of filling out all this what I'm going to do is now go
486:49 this what I'm going to do is now go create a launch template just to kind of
486:51 create a launch template just to kind of show you that that would be a much
486:53 show you that that would be a much easier way to
486:55 easier way to work so we go over to E2 instance es and
486:58 work so we go over to E2 instance es and then left hand side we're looking for a
487:01 then left hand side we're looking for a launch template launch launch
487:02 launch template launch launch configurations is the old thing um
487:05 configurations is the old thing um launch templates here we go so what
487:08 launch templates here we go so what we'll do is create ourselves a launch
487:09 we'll do is create ourselves a launch template we'll just say my Apachi
487:12 template we'll just say my Apachi server and then down below we need to
487:16 server and then down below we need to choose our Ami so we're going to go here
487:18 choose our Ami so we're going to go here and we need to type it in so what do we
487:20 and we need to type it in so what do we call it my
487:26 ec2 I really don't like this uh search here it's very slow frustrating but once
487:28 here it's very slow frustrating but once we find it whoops that's why I don't
487:30 we find it whoops that's why I don't like it because a lot of times it'll be
487:32 like it because a lot of times it'll be loading and you'll end up clicking the
487:33 loading and you'll end up clicking the wrong
487:34 wrong thing okay
487:37 thing okay so I don't like this okay we'll type in
487:42 so I don't like this okay we'll type in my give it a
487:46 my give it a second there it is just wait because it
487:48 second there it is just wait because it will keep loading and then once it's
487:50 will keep loading and then once it's loaded hit
487:52 loaded hit enter and so it has that instance
487:54 enter and so it has that instance selected and then from there uh don't
487:56 selected and then from there uh don't include in the launch template so here
487:59 include in the launch template so here we could be explicit I would say I want
488:01 we could be explicit I would say I want this to be 22 T2 micro but we could
488:03 this to be 22 T2 micro but we could exclude it if we wanted to we could
488:05 exclude it if we wanted to we could specify the key pair here um not that we
488:08 specify the key pair here um not that we really want to use key pairs we'll say
488:09 really want to use key pairs we'll say my ec2 instance then down down here for
488:12 my ec2 instance then down down here for the networking we can specify uh that
488:14 the networking we can specify uh that security group we created so we created
488:15 security group we created so we created one here called my ec2
488:17 one here called my ec2 SG um storage is fine it's going to be
488:21 SG um storage is fine it's going to be encrypted network interface is fine
488:23 encrypted network interface is fine Advanced details what I want to do is
488:25 Advanced details what I want to do is set the IM instance profile that's
488:27 set the IM instance profile that's really important because we don't want
488:28 really important because we don't want to have to figure out that roll every
488:30 to have to figure out that roll every single time so we put that there and
488:34 single time so we put that there and that should be everything and we could
488:36 that should be everything and we could put user data in there but it's already
488:37 put user data in there but it's already baked into our Ami so we don't have to
488:39 baked into our Ami so we don't have to worry about anything so what I'm going
488:40 worry about anything so what I'm going to do here is go ahead and create this
488:42 to do here is go ahead and create this launch template and then we're going to
488:45 launch template and then we're going to view this launch template and so now
488:47 view this launch template and so now what we can do is then use it to launch
488:50 what we can do is then use it to launch an instance okay and so we're going to
488:53 an instance okay and so we're going to look here and it's very similar to dc2
488:55 look here and it's very similar to dc2 but except it's vertical so we're going
488:57 but except it's vertical so we're going to have one instance it's going to use
488:59 to have one instance it's going to use that Ami that instance type so you can
489:00 that Ami that instance type so you can see how you can override them which is
489:02 see how you can override them which is nice we're going to check the advanced
489:04 nice we're going to check the advanced details make sure that I profile is set
489:06 details make sure that I profile is set and we'll go ahead and launch this from
489:08 and we'll go ahead and launch this from a
489:09 a template so from there we can go ahead
489:11 template so from there we can go ahead and click the instance value there and
489:14 and click the instance value there and just be aware that when you do click
489:16 just be aware that when you do click through links like that you'll end up
489:17 through links like that you'll end up with the search so I always just
489:18 with the search so I always just checkbox that off so I can see what I'm
489:19 checkbox that off so I can see what I'm doing and so we're just waiting for this
489:21 doing and so we're just waiting for this instance to show up and the only thing I
489:23 instance to show up and the only thing I noticed is it didn't set our darn tags
489:25 noticed is it didn't set our darn tags so I wanted the name and there and I
489:27 so I wanted the name and there and I think it's because we said it in the Ami
489:29 think it's because we said it in the Ami but it didn't carry over to the launch
489:31 but it didn't carry over to the launch template so I'd have to go back to the
489:32 template so I'd have to go back to the launch template and update it probably
489:34 launch template and update it probably so if I go into here into the launch
489:37 so if I go into here into the launch template um we can probably modify
489:40 template um we can probably modify create a new
489:42 create a new version and then add tags there so we'
489:46 version and then add tags there so we' say
489:47 say name uh my uh Apachi
489:51 name uh my uh Apachi server I realize I'm changing it between
489:54 server I realize I'm changing it between them and so that should allow us to have
489:56 them and so that should allow us to have a version two so we'll create that and
489:59 a version two so we'll create that and but anyway that will be for the next
490:01 but anyway that will be for the next time we launch it okay and so this
490:03 time we launch it okay and so this instance is running I'm going to go grab
490:05 instance is running I'm going to go grab the IP
490:06 the IP address the server may or may not be
490:08 address the server may or may not be ready we'll take a look here and so it's
490:11 ready we'll take a look here and so it's just spinning if it's spinning it's
490:13 just spinning if it's spinning it's either the server is not ready or um our
490:16 either the server is not ready or um our ports not open so it was just getting
490:18 ports not open so it was just getting ready to work there so it is working now
490:20 ready to work there so it is working now so that is our launch template so now
490:23 so that is our launch template so now you know we don't have to worry about
490:24 you know we don't have to worry about losing our stuff and if we need to make
490:26 losing our stuff and if we need to make new versions We can just B new Amis and
490:30 new versions We can just B new Amis and increment them as uh Inc and attach them
490:32 increment them as uh Inc and attach them as new versions of that launch template
490:34 as new versions of that launch template [Music]
490:38 [Music] okay all right so what I want to show
490:40 okay all right so what I want to show you in this follow along is to set up an
490:42 you in this follow along is to set up an autoscaling group for our ec2 instance
490:45 autoscaling group for our ec2 instance and the idea behind this is that um
490:47 and the idea behind this is that um we'll be able to always ensure that a
490:49 we'll be able to always ensure that a single server is running or uh increase
490:52 single server is running or uh increase the capacity if the demand requires it
490:54 the capacity if the demand requires it so in order to create an autoscaling
490:56 so in order to create an autoscaling group we can go all all the way down
490:57 group we can go all all the way down below to here um and so you know I
491:01 below to here um and so you know I really don't like the Autos scaling
491:02 really don't like the Autos scaling group form but it's okay we'll work our
491:04 group form but it's okay we'll work our way through it so the first thing is
491:05 way through it so the first thing is we'll have to create our or name our
491:07 we'll have to create our or name our autoc scan group so we'll just say my
491:09 autoc scan group so we'll just say my ASG and then we'll have to select a
491:11 ASG and then we'll have to select a launch template which is great because
491:12 launch template which is great because we already have one and then we'll have
491:14 we already have one and then we'll have to select the version I'm going to
491:15 to select the version I'm going to select version two so that it applies
491:17 select version two so that it applies that tag name and we'll go to next and
491:20 that tag name and we'll go to next and so here um it's going to need to select
491:23 so here um it's going to need to select a VPC and then we need some subnets so
491:26 a VPC and then we need some subnets so we're going to choose three just because
491:28 we're going to choose three just because to have high availability you have to be
491:30 to have high availability you have to be running in at least three different
491:32 running in at least three different availability zones so that's why we have
491:33 availability zones so that's why we have three different subnets and then down
491:35 three different subnets and then down below we have the instance type
491:36 below we have the instance type requirements so uh T2 micro launch
491:40 requirements so uh T2 micro launch template looks good to me so we'll go
491:41 template looks good to me so we'll go ahead and hit
491:44 ahead and hit next and then from here we can choose to
491:46 next and then from here we can choose to do a load balancer and so I want to do
491:48 do a load balancer and so I want to do the load balancer separate so we won't
491:50 the load balancer separate so we won't do it as of yet but very often if you're
491:52 do it as of yet but very often if you're going to have an on group you're going
491:54 going to have an on group you're going to usually have a load balancer but
491:55 to usually have a load balancer but we'll talk about that when we get to
491:57 we'll talk about that when we get to that point there so we'll just go to the
492:00 that point there so we'll just go to the bottom here and hit next and so this is
492:02 bottom here and hit next and so this is what's important so how many do you want
492:04 what's important so how many do you want to be always running and so we always
492:06 to be always running and so we always want to have one and maybe the maximum
492:08 want to have one and maybe the maximum capacity is two and you want the desired
492:10 capacity is two and you want the desired C capacity to be around a particular
492:12 C capacity to be around a particular number so if you had three and you said
492:14 number so if you had three and you said the desired is two um there are things
492:16 the desired is two um there are things that could try to work to always make
492:17 that could try to work to always make sure there's two but we just want to
492:19 sure there's two but we just want to have one for this example we can set up
492:21 have one for this example we can set up a scaling policy so I do Target tracking
492:23 a scaling policy so I do Target tracking scaling policy and so here we could do
492:26 scaling policy and so here we could do it based on a bunch of different things
492:27 it based on a bunch of different things so if the CP utilization went over 50%
492:29 so if the CP utilization went over 50% it would launch another server so that
492:31 it would launch another server so that might be something we might want to set
492:33 might be something we might want to set so I'll we're not going to uh try to
492:35 so I'll we're not going to uh try to trigger the scaling policy but we might
492:36 trigger the scaling policy but we might as well just apply because it's not too
492:38 as well just apply because it's not too hard then you can also do a scaling uh
492:40 hard then you can also do a scaling uh scale in protection policy so if you
492:42 scale in protection policy so if you want to make sure it does not um uh
492:45 want to make sure it does not um uh reduce the amount of servers that's
492:47 reduce the amount of servers that's something you could do we can add a
492:49 something you could do we can add a notification to say hey there's a
492:50 notification to say hey there's a scaling policy happening here which is
492:52 scaling policy happening here which is fine we don't have to worry about that
492:54 fine we don't have to worry about that um and there's tags so add tags to help
492:56 um and there's tags so add tags to help you search filter Etc um so I'm going to
492:59 you search filter Etc um so I'm going to put a tag here I'm going to say name I'm
493:01 put a tag here I'm going to say name I'm just wondering if this is going to
493:02 just wondering if this is going to attach to the ec2 and or this is for the
493:04 attach to the ec2 and or this is for the Autos scaling group you can optionally
493:05 Autos scaling group you can optionally choose to add tags to instances by
493:08 choose to add tags to instances by specifying tags in your launch templates
493:09 specifying tags in your launch templates so we already did that so I don't need
493:11 so we already did that so I don't need to put a tag here and so we can review
493:15 to put a tag here and so we can review our um Auto scaling group and go ahead
493:17 our um Auto scaling group and go ahead and create that auto scaling
493:19 and create that auto scaling group okay and so that auto scaling
493:23 group okay and so that auto scaling group expects there to be a single
493:24 group expects there to be a single instance so what it's going to do is
493:26 instance so what it's going to do is it's going to start launching an
493:28 it's going to start launching an instance and so what I'm going to do is
493:29 instance and so what I'm going to do is just get rid of this old server because
493:31 just get rid of this old server because we don't need it anymore this old one
493:33 we don't need it anymore this old one here
493:35 here okay and you can already see okay that
493:38 okay and you can already see okay that the load balancer is launching this new
493:41 the load balancer is launching this new one here and remember we updated our
493:43 one here and remember we updated our version two to have that name so that's
493:44 version two to have that name so that's how we know that it is so if we go back
493:46 how we know that it is so if we go back over to our autoscaling
493:53 group okay it's now saying there is an instance we don't have a status as of
493:55 instance we don't have a status as of yet
493:57 yet and so there are ways of doing uh status
494:00 and so there are ways of doing uh status checks to for it to determine whether or
494:02 checks to for it to determine whether or not the server is
494:03 not the server is working um because if the server is
494:05 working um because if the server is unhealthy what it would do is it would
494:07 unhealthy what it would do is it would actually kill it and then start up a new
494:09 actually kill it and then start up a new one right so if I go down below it's
494:11 one right so if I go down below it's right now doing an ec2 health check and
494:12 right now doing an ec2 health check and the ec2 health check just means that is
494:14 the ec2 health check just means that is the server working right um is it
494:16 the server working right um is it running it doesn't necessarily mean like
494:18 running it doesn't necessarily mean like hey can I load this web app um but you
494:20 hey can I load this web app um but you know it's very simple so we'll give it a
494:22 know it's very simple so we'll give it a moment here to start up and just make
494:25 moment here to start up and just make sure that it's working
494:32 okay and I think it's ready so if I take that public IP address here and paste it
494:34 that public IP address here and paste it in there it is okay so if we were to
494:38 in there it is okay so if we were to tell it to increase the capacity to
494:40 tell it to increase the capacity to three then what it would do is it would
494:42 three then what it would do is it would launch three and then it should probably
494:44 launch three and then it should probably launch it all evenly to those other it
494:47 launch it all evenly to those other it should evenly launch it to all those
494:49 should evenly launch it to all those other uh availability zones and then
494:51 other uh availability zones and then we'll have something that is highly
494:52 we'll have something that is highly available okay so that's pretty much it
494:55 available okay so that's pretty much it for this and then we'll move on to autos
494:56 for this and then we'll move on to autos scaling
494:57 scaling [Music]
495:01 [Music] groups all right so we have our uh ec2
495:04 groups all right so we have our uh ec2 instance now managed by an Autos scaling
495:06 instance now managed by an Autos scaling group and the great thing is that if we
495:07 group and the great thing is that if we terminate this instance this Auto
495:10 terminate this instance this Auto scaling group will launch another uh
495:12 scaling group will launch another uh instance to meet our particular capacity
495:14 instance to meet our particular capacity um the only thing though is that if we
495:16 um the only thing though is that if we were to have multiple E2 instances
495:18 were to have multiple E2 instances running like three of them um how would
495:21 running like three of them um how would you distribute traffic to the mall right
495:23 you distribute traffic to the mall right so you know you have an IP address
495:25 so you know you have an IP address coming in from the internet uh but let's
495:27 coming in from the internet uh but let's say you want to evenly distribute it and
495:29 say you want to evenly distribute it and that's where a load bouncer comes into
495:31 that's where a load bouncer comes into play and even if you have a single
495:33 play and even if you have a single server you should always have a load
495:34 server you should always have a load bouncer because it just makes it a lot
495:36 bouncer because it just makes it a lot easier for you to scale when you need to
495:39 easier for you to scale when you need to and you it acts as an intermediate layer
495:41 and you it acts as an intermediate layer where you can attach a web application
495:42 where you can attach a web application firewall you can attach an SSL
495:45 firewall you can attach an SSL certificate for free so there's a lot of
495:47 certificate for free so there's a lot of reasons to have a load balancer so what
495:50 reasons to have a load balancer so what we'll do is go down below on the left
495:52 we'll do is go down below on the left hand side and we're going to make our
495:53 hand side and we're going to make our way over to load bouncers and we're
495:54 way over to load bouncers and we're going to create ourselves a new load
495:56 going to create ourselves a new load boun bcer so I'm going to hit create
495:58 boun bcer so I'm going to hit create load balcer here and you're going to see
496:00 load balcer here and you're going to see we have a lot of options application
496:02 we have a lot of options application load balcer Network load balcer Gateway
496:04 load balcer Network load balcer Gateway load balcer and then the classic load
496:06 load balcer and then the classic load Bouncer and so we are uh running an
496:09 Bouncer and so we are uh running an application so I'm going to create an
496:10 application so I'm going to create an application load balcer and here I'm
496:12 application load balcer and here I'm going to say my ALB um for an
496:15 going to say my ALB um for an application load balancer this is going
496:16 application load balancer this is going to be internet facing it's going to be
496:18 to be internet facing it's going to be ipv4 um we're going to let it launch in
496:21 ipv4 um we're going to let it launch in the default um subnet and we're going to
496:23 the default um subnet and we're going to choose the same the same uh uh azs right
496:29 choose the same the same uh uh azs right so that we get the same subnets as our
496:32 so that we get the same subnets as our that are in our autosan group and that's
496:33 that are in our autosan group and that's really important okay and then here um
496:37 really important okay and then here um you know we need to have a security
496:39 you know we need to have a security group and I just feel like selecting the
496:41 group and I just feel like selecting the same one here because that should work
496:43 same one here because that should work no problem there and we want to make
496:46 no problem there and we want to make sure that we can listen on Port 80 and
496:48 sure that we can listen on Port 80 and that it's going to forward it to a a um
496:51 that it's going to forward it to a a um a Target group and it looks like I might
496:53 a Target group and it looks like I might have a Target group there from before so
496:55 have a Target group there from before so just to reduce that confusion you won't
496:58 just to reduce that confusion you won't have this problem I'm just going to
496:59 have this problem I'm just going to double check if that's true so do I have
497:01 double check if that's true so do I have a Target group from there from before
497:03 a Target group from there from before yes I do that came
497:06 yes I do that came from I'm not sure it might have been
497:08 from I'm not sure it might have been created by um elastic beanock and wasn't
497:12 created by um elastic beanock and wasn't deleted okay so I'll go back over to
497:14 deleted okay so I'll go back over to here just so there's less confusion
497:18 here just so there's less confusion and we were selecting our Target group
497:20 and we were selecting our Target group so we're going to have to create a new
497:21 so we're going to have to create a new Target group so we go over here and here
497:25 Target group so we go over here and here you can choose whether it's instance IP
497:27 you can choose whether it's instance IP Lambda application load balancer so you
497:29 Lambda application load balancer so you could point it specifically to an IP
497:31 could point it specifically to an IP address and so if it was a static IP
497:33 address and so if it was a static IP address that would make sense uh
497:35 address that would make sense uh apparently you can Port uh point it
497:37 apparently you can Port uh point it directly to instances I don't remember
497:39 directly to instances I don't remember seeing that option before I guess that
497:41 seeing that option before I guess that makes sense yeah no sorry that makes
497:43 makes sense yeah no sorry that makes sense because that would go to uh vpcs
497:45 sense because that would go to uh vpcs okay or sorry uh asgs Autos scaling
497:48 okay or sorry uh asgs Autos scaling groups it's just that you are pointing
497:50 groups it's just that you are pointing them to Auto scaling groups you're not
497:51 them to Auto scaling groups you're not pointing them to instances so that's why
497:52 pointing them to instances so that's why that's confusing so I'm going to say my
497:55 that's confusing so I'm going to say my um Target group it'll be for Port 80
497:57 um Target group it'll be for Port 80 here um protocol http1 is fine we want
498:01 here um protocol http1 is fine we want to be in the same um VPC so that's fine
498:04 to be in the same um VPC so that's fine as well and down below we have our
498:06 as well and down below we have our health check and so the for slash means
498:08 health check and so the for slash means that it's going to hit the index HTML
498:10 that it's going to hit the index HTML page and so if it gets back um something
498:13 page and so if it gets back um something healthy and that that something healthy
498:14 healthy and that that something healthy is going to be um uh Port 80 then it's
498:18 is going to be um uh Port 80 then it's going to be considered good and then we
498:20 going to be considered good and then we can say the threshold of check so I'm
498:22 can say the threshold of check so I'm just going to reduce this so it's not so
498:23 just going to reduce this so it's not so crazy so we'll say three uh two and then
498:27 crazy so we'll say three uh two and then 10 okay and then it expects back a 200
498:31 10 okay and then it expects back a 200 which I think that's what we'll get back
498:33 which I think that's what we'll get back so we'll go ahead and hit next and so
498:36 so we'll go ahead and hit next and so now we have our Target group and it
498:38 now we have our Target group and it should register instances so it's saying
498:41 should register instances so it's saying hey we detected this and this fits the
498:43 hey we detected this and this fits the requirements for this so this is now uh
498:45 requirements for this so this is now uh this E2 instance is now in this target
498:47 this E2 instance is now in this target group okay so we can go back over here
498:50 group okay so we can go back over here and we can now drop down and choose
498:52 and we can now drop down and choose whoops hit the refresh
498:54 whoops hit the refresh button and choose our Target group
498:58 button and choose our Target group so I'm not seeing it here so I'm going
499:01 so I'm not seeing it here so I'm going to go back over here oh we didn't create
499:03 to go back over here oh we didn't create it
499:04 it okay and now we can go back hit refresh
499:07 okay and now we can go back hit refresh and there it
499:10 and there it is and yeah that looks all good so we'll
499:13 is and yeah that looks all good so we'll go ahead and hit create load
499:14 go ahead and hit create load balcer we can view the load balcers and
499:17 balcer we can view the load balcers and these create really fast if we scroll on
499:19 these create really fast if we scroll on up what we can do is now access our
499:22 up what we can do is now access our server through this DNS name okay so we
499:24 server through this DNS name okay so we copy that paste that in
499:27 copy that paste that in there does it
499:36 work not as of yet so if it's not working there because we did say look at
499:38 working there because we did say look at these instances another way is to
499:40 these instances another way is to directly associate your Autos scaling
499:41 directly associate your Autos scaling group with the load balancer so if I go
499:44 group with the load balancer so if I go into here and we hit uh
499:48 into here and we hit uh edit there is a way aha load bouncer
499:53 edit there is a way aha load bouncer so we want to associate this way and we
499:56 so we want to associate this way and we want to say this Target group
499:58 want to say this Target group here and also while we're here we might
500:00 here and also while we're here we might as well set it to elb so it's going to
500:02 as well set it to elb so it's going to use the elb tech so that makes it so the
500:04 use the elb tech so that makes it so the autoscaling group if it wants to uh
500:06 autoscaling group if it wants to uh restart server it's going to use the
500:07 restart server it's going to use the elb's check which is a lot more
500:09 elb's check which is a lot more sophisticated and then what we'll do is
500:11 sophisticated and then what we'll do is go hit
500:12 go hit update
500:15 update okay and now if we go back over to our
500:19 okay and now if we go back over to our load balancer just going to close some
500:20 load balancer just going to close some of these tabs so it's a less
500:23 of these tabs so it's a less confusing uh load balcer here
500:30 I think we should be able to see through here whether it is seeing it let's go
500:34 here whether it is seeing it let's go down below listeners monitoring
500:36 down below listeners monitoring integrated Services no it's going to be
500:38 integrated Services no it's going to be through the target
500:48 okay I mean it already had it there so maybe it's just that it hasn't finished
500:49 maybe it's just that it hasn't finished the check so over here it has a health
500:51 the check so over here it has a health status check oh now it's healthy okay so
500:54 status check oh now it's healthy okay so if it's healthy in the Target group and
500:55 if it's healthy in the Target group and the load bouncer is point to it then it
500:57 the load bouncer is point to it then it should technically work so we're going
500:59 should technically work so we're going to go ahead
501:01 to go ahead and uh copy the DNS again here make a
501:05 and uh copy the DNS again here make a new tab paste it
501:12 in and there it is okay so that's how you're going to access um all your all
501:14 you're going to access um all your all your instances that are within your
501:15 your instances that are within your autoc groups you're going to always go
501:17 autoc groups you're going to always go through the DNS and so if you had a row
501:19 through the DNS and so if you had a row 53 uh domain like you your domain
501:22 53 uh domain like you your domain managed by AWS you just point to the
501:24 managed by AWS you just point to the load balancer and that's how you hook it
501:26 load balancer and that's how you hook it up so that's pretty much it so yeah
501:28 up so that's pretty much it so yeah there you
501:29 there you [Music]
501:32 [Music] go all right so there you go we learned
501:34 go all right so there you go we learned everything we wanted to know about ec2
501:36 everything we wanted to know about ec2 so the the last thing to do is to tear
501:38 so the the last thing to do is to tear everything down so we have a load
501:40 everything down so we have a load balancer we have an autoc scanner group
501:42 balancer we have an autoc scanner group um and those are the two things we'll
501:43 um and those are the two things we'll have to pull on down so the first thing
501:46 have to pull on down so the first thing would be to take down the autoscaling
501:47 would be to take down the autoscaling group and when you delete an autoscaling
501:49 group and when you delete an autoscaling group it's going to delete all the ec2
501:51 group it's going to delete all the ec2 instances so we'll do it that way if you
501:53 instances so we'll do it that way if you tried to delete the ec2 it would just
501:55 tried to delete the ec2 it would just keep on spinning up so you have to
501:57 keep on spinning up so you have to delete that first and so as that's
501:59 delete that first and so as that's deleting then we'll be able to delete
502:00 deleting then we'll be able to delete our load balancer I'm going to try
502:02 our load balancer I'm going to try anyway to see if I can delete it at the
502:03 anyway to see if I can delete it at the same
502:05 same time and so I'll go up here I'm going to
502:08 time and so I'll go up here I'm going to go ahead and delete that uh load
502:09 go ahead and delete that uh load balancer actually it did work no
502:12 balancer actually it did work no problem going to make sure I don't have
502:14 problem going to make sure I don't have any elastic
502:15 any elastic IPS I'm going to also make sure I don't
502:18 IPS I'm going to also make sure I don't have any key pairs you can keep your key
502:20 have any key pairs you can keep your key pairs around but like I just want to
502:22 pairs around but like I just want to kind of clean this up so
502:40 okay okay and that instance should be terminating got to go back to the Autos
502:42 terminating got to go back to the Autos scan group
502:49 here if we click into it we can check um its activity
502:55 here so it's just saying successful so it is waiting on elb connection draining
502:58 it is waiting on elb connection draining which is kind of annoying because we
503:00 which is kind of annoying because we deleted at elb so there's nothing to
503:03 deleted at elb so there's nothing to drain um draining is just to make sure
503:05 drain um draining is just to make sure that uh you know there's no
503:07 that uh you know there's no interruptions when terminating services
503:09 interruptions when terminating services so just trying to be smart about
503:22 it and all I want to see is that it's just saying terminating over here and
503:24 just saying terminating over here and then I think we're done
503:26 then I think we're done okay so we'll just have to wait a little
503:28 okay so we'll just have to wait a little while here okay and I'll see you back in
503:30 while here okay and I'll see you back in a moment okay all right so after waiting
503:33 a moment okay all right so after waiting a very long time it did destroy so if I
503:36 a very long time it did destroy so if I go down over to uh my load balancer here
503:39 go down over to uh my load balancer here we're going to see that it does not
503:40 we're going to see that it does not exist so there was that connection
503:42 exist so there was that connection draining thing which was kind of
503:43 draining thing which was kind of annoying it's probably because I deleted
503:44 annoying it's probably because I deleted the load balancer first and then the um
503:48 the load balancer first and then the um the uh the Autos SC group second and
503:51 the uh the Autos SC group second and probably connection draining was turned
503:52 probably connection draining was turned on but it's not a big deal we just
503:53 on but it's not a big deal we just waited and it did eventually delete so
503:56 waited and it did eventually delete so we're pretty pretty much all done here
503:57 we're pretty pretty much all done here so there you
503:58 so there you [Music]
504:01 [Music] go hey this is Andrew Brown from exam
504:04 go hey this is Andrew Brown from exam Pro and we are taking a look at ec2
504:05 Pro and we are taking a look at ec2 pricing models and there are five
504:06 pricing models and there are five different ways to pay with ec2 remember
504:08 different ways to pay with ec2 remember ec2 are virtual machines so we have on
504:10 ec2 are virtual machines so we have on demand spot uh reserved dedicated and
504:13 demand spot uh reserved dedicated and adus savings plans so what we'll do is
504:16 adus savings plans so what we'll do is look at these in summary here and then
504:18 look at these in summary here and then we'll dive deep onto each of these
504:20 we'll dive deep onto each of these different pricing models so for on
504:22 different pricing models so for on demand you are paying the a low cost and
504:24 demand you are paying the a low cost and also you have a lot of flexibility with
504:26 also you have a lot of flexibility with this plan uh you are paying per hour so
504:28 this plan uh you are paying per hour so this is a pay as you go model uh or you
504:30 this is a pay as you go model uh or you could be paying down to the second which
504:33 could be paying down to the second which we'll talk about uh the caveats there
504:35 we'll talk about uh the caveats there when we get to the on demand section
504:36 when we get to the on demand section this is suitable for workloads that are
504:38 this is suitable for workloads that are going to be short-term spiky
504:40 going to be short-term spiky unpredictable workloads uh that cannot
504:42 unpredictable workloads uh that cannot be interrupted and it's great for
504:43 be interrupted and it's great for first-time applications and the ond
504:45 first-time applications and the ond demand uh pricing model is great when
504:47 demand uh pricing model is great when you need the least amount of commitment
504:49 you need the least amount of commitment for spot pricing you can see we can save
504:51 for spot pricing you can see we can save up to 90% which is the greatest Savings
504:53 up to 90% which is the greatest Savings of out of all these models here uh the
504:55 of out of all these models here uh the idea here is you're requesting spare
504:56 idea here is you're requesting spare Computing capacity that adus is not
504:58 Computing capacity that adus is not using and that's where you're going to
504:59 using and that's where you're going to get that savings you have flexible start
505:01 get that savings you have flexible start and end times uh but your workloads have
505:03 and end times uh but your workloads have to be able to handle interruptions
505:05 to be able to handle interruptions because these servers can be stopped at
505:07 because these servers can be stopped at any time to be giving to more priority
505:09 any time to be giving to more priority customers uh and this is great for
505:11 customers uh and this is great for non-critical background jobs very common
505:13 non-critical background jobs very common for like scientific Computing uh where
505:15 for like scientific Computing uh where jobs can be started and stopped at any
505:17 jobs can be started and stopped at any given time this has the greatest amount
505:18 given time this has the greatest amount of savings then you have Reserve or
505:21 of savings then you have Reserve or reserved instances this allows you to
505:22 reserved instances this allows you to save up to 75% this is great for a
505:25 save up to 75% this is great for a steady state or pred ible usage you're
505:27 steady state or pred ible usage you're committing uh with AWS uh for ec2 usage
505:30 committing uh with AWS uh for ec2 usage over a period of 1 or 3E terms you can
505:33 over a period of 1 or 3E terms you can resell on uh unused reserved instances
505:36 resell on uh unused reserved instances so you're not totally stuck with this if
505:38 so you're not totally stuck with this if you buy them this is great for the best
505:40 you buy them this is great for the best long-term savings then you have
505:43 long-term savings then you have dedicated so these are just dedicated
505:44 dedicated so these are just dedicated servers and technically not a pricing
505:47 servers and technically not a pricing model but more so that the fact that it
505:48 model but more so that the fact that it can be utilized with pricing models um
505:51 can be utilized with pricing models um but the idea here is it can be used with
505:53 but the idea here is it can be used with on demand reserved or even spot this is
505:55 on demand reserved or even spot this is great when you need to uh have a
505:57 great when you need to uh have a guarantee of isolate hardware for
505:59 guarantee of isolate hardware for Enterprise requirements and this is
506:00 Enterprise requirements and this is going to be the most expensive uh so
506:03 going to be the most expensive uh so yeah there you go and we'll dive deep
506:04 yeah there you go and we'll dive deep here
506:05 here [Music]
506:10 [Music] okay so the on demand pricing model is a
506:13 okay so the on demand pricing model is a pay as you go model where you consume
506:15 pay as you go model where you consume compute and then you pay later so when
506:18 compute and then you pay later so when you launch an ec2 instance by default
506:20 you launch an ec2 instance by default you are using that on demand pricing and
506:23 you are using that on demand pricing and On Demand has no upfront payment and no
506:25 On Demand has no upfront payment and no long long-term commitment you are
506:27 long long-term commitment you are charged by the second up to a minimum of
506:30 charged by the second up to a minimum of 60 seconds so technically a minute or
506:32 60 seconds so technically a minute or the hour so let's just talk about the
506:34 the hour so let's just talk about the difference between those uh per second
506:37 difference between those uh per second billing and those per hour billing so
506:39 billing and those per hour billing so per second are for Linux windows windows
506:42 per second are for Linux windows windows with SQL Enterprise windows with SQL
506:44 with SQL Enterprise windows with SQL standard windows with SQL web instances
506:47 standard windows with SQL web instances that do not have a separate hourly
506:49 that do not have a separate hourly charge and then everything else is going
506:51 charge and then everything else is going to be um per hour and so you know when
506:54 to be um per hour and so you know when I'm launching ec2 instance I can't can't
506:56 I'm launching ec2 instance I can't can't even tell when something's per second or
506:57 even tell when something's per second or per hour you just have to know that it
506:59 per hour you just have to know that it has a separate hourly charge but
507:01 has a separate hourly charge but generally you know if you're just
507:02 generally you know if you're just launching things it's going to probably
507:03 launching things it's going to probably be the perc billing when you look up the
507:06 be the perc billing when you look up the hourly or the uh the pricing it's always
507:09 hourly or the uh the pricing it's always shown in the hourly rate so even if it
507:10 shown in the hourly rate so even if it is using uh per second billing when you
507:14 is using uh per second billing when you uh look up that pricing it's always
507:15 uh look up that pricing it's always going to show it to you like that but on
507:17 going to show it to you like that but on your bill you'll see it down to the
507:18 your bill you'll see it down to the second okay up to the first 60 seconds
507:21 second okay up to the first 60 seconds uh an on demand is great for workloads
507:23 uh an on demand is great for workloads that are shortterm spiky or
507:25 that are shortterm spiky or unpredictable
507:26 unpredictable uh but when you have a new app
507:28 uh but when you have a new app development this is where you want to
507:29 development this is where you want to experiment and then when you're ready to
507:32 experiment and then when you're ready to uh start saving because you know exactly
507:34 uh start saving because you know exactly what that workload is going to be over
507:35 what that workload is going to be over the span of a year or three that's where
507:37 the span of a year or three that's where we're going to get into reserved
507:38 we're going to get into reserved instances which we'll cover
507:40 instances which we'll cover [Music]
507:44 [Music] next hey this is Andrew Brown from exam
507:46 next hey this is Andrew Brown from exam Pro and we are taking a look at reserved
507:48 Pro and we are taking a look at reserved instances also known as RI and this is
507:51 instances also known as RI and this is um a bit of a complex topic but uh you
507:53 um a bit of a complex topic but uh you know if we do get through it it's going
507:55 know if we do get through it it's going to serve you well through uh multiple ad
507:58 to serve you well through uh multiple ad certifications so let's give it a bit of
508:00 certifications so let's give it a bit of attention here so RI is designed for
508:02 attention here so RI is designed for applications that have a steady state
508:04 applications that have a steady state predictable usage or required Reserve
508:06 predictable usage or required Reserve capacity so the idea is that you were
508:08 capacity so the idea is that you were saying to ads I'm going to make a
508:09 saying to ads I'm going to make a guaranteed commitment uh saying this is
508:12 guaranteed commitment uh saying this is what I'm going to use and I'm going to
508:13 what I'm going to use and I'm going to get savings because adus knows that
508:15 get savings because adus knows that you're going to be spending that money
508:17 you're going to be spending that money okay so the idea here is that the
508:19 okay so the idea here is that the reduced pricing is based on this kind of
508:21 reduced pricing is based on this kind of formula where we have term class
508:23 formula where we have term class offering the ra attributes and payment
508:25 offering the ra attributes and payment options technically the ra tributes
508:27 options technically the ra tributes don't exactly factor into it other the
508:29 don't exactly factor into it other the fact that they an RA tribute could be
508:31 fact that they an RA tribute could be like the instance type size uh but I'm
508:33 like the instance type size uh but I'm going to put that in the formula there
508:34 going to put that in the formula there just because it is an important
508:35 just because it is an important component so let's take a look at each
508:37 component so let's take a look at each of these uh components of the formula to
508:40 of these uh components of the formula to understand how we're going to save so
508:41 understand how we're going to save so the first is the term so the term uh the
508:44 the first is the term so the term uh the idea here is the longer the term the
508:45 idea here is the longer the term the greater the savings so you're committing
508:47 greater the savings so you're committing to a one-year or three-year contract
508:50 to a one-year or three-year contract with AWS um and one thing you need to
508:52 with AWS um and one thing you need to know is that these do not renew so at
508:56 know is that these do not renew so at the end of the year the idea is that you
508:58 the end of the year the idea is that you have to purchase again and when they do
509:00 have to purchase again and when they do expire your instances are just going to
509:02 expire your instances are just going to flip back over to On Demand with no
509:04 flip back over to On Demand with no interruptions to service then you have
509:06 interruptions to service then you have class offerings and so the idea here is
509:08 class offerings and so the idea here is the less flexible the offering the
509:10 the less flexible the offering the greater the savings so the first is
509:11 greater the savings so the first is standard and this is up to a 75
509:14 standard and this is up to a 75 reduction in the price compared to on
509:16 reduction in the price compared to on demand and the idea here is you can
509:18 demand and the idea here is you can modify some ra attributes which we'll
509:20 modify some ra attributes which we'll we'll talk about when we get to the um
509:23 we'll talk about when we get to the um ra tribute section there then you have
509:25 ra tribute section there then you have convertible so you save up to 54%
509:27 convertible so you save up to 54% reduced pricing compared to on demand
509:29 reduced pricing compared to on demand and you can exchange RIS based on the r
509:32 and you can exchange RIS based on the r attributes if the value is greater or
509:34 attributes if the value is greater or equal in value and there used to be a
509:37 equal in value and there used to be a third class called schedule but this no
509:38 third class called schedule but this no longer exists so if you do come across
509:40 longer exists so if you do come across it just know that ads is not planning on
509:42 it just know that ads is not planning on offering this uh again for whatever
509:44 offering this uh again for whatever reason I'm not sure why uh then there
509:46 reason I'm not sure why uh then there are the payment options so the greater
509:48 are the payment options so the greater upfront the greater the savings so here
509:50 upfront the greater the savings so here we have all upfront so full payment is
509:52 we have all upfront so full payment is made at the start of the term partial
509:54 made at the start of the term partial upfront so a portion of the cost must be
509:57 upfront so a portion of the cost must be paid upfront and the remaining hours in
509:59 paid upfront and the remaining hours in the terms are built at a discounted rate
510:01 the terms are built at a discounted rate and then there's no upfront so you are
510:02 and then there's no upfront so you are build at a discounted hourly rate for
510:05 build at a discounted hourly rate for every hour within the term regardless of
510:07 every hour within the term regardless of whether the reserv is being used and
510:09 whether the reserv is being used and this is really great this last option
510:11 this is really great this last option here because basically you're saying to
510:12 here because basically you're saying to AWS you're saying like I'm just going to
510:14 AWS you're saying like I'm just going to pay my bill as usual but I'm going to
510:16 pay my bill as usual but I'm going to just tell you what it's going to be and
510:17 just tell you what it's going to be and I'm going to save money so if you know
510:19 I'm going to save money so if you know uh that you're going to be using a T2
510:21 uh that you're going to be using a T2 medium for the next year uh you can do
510:24 medium for the next year uh you can do that and you're just going to save money
510:25 that and you're just going to save money okay okay so RIS can be shared between
510:28 okay okay so RIS can be shared between multiple accounts within an organization
510:30 multiple accounts within an organization and unused RIS can be sold in the
510:32 and unused RIS can be sold in the reserved instance Marketplace but we'll
510:33 reserved instance Marketplace but we'll talk about the limitations around that
510:35 talk about the limitations around that when we get a bit deeper in here just to
510:37 when we get a bit deeper in here just to kind of show you what it would look like
510:38 kind of show you what it would look like in inabus console and they updated it I
510:40 in inabus console and they updated it I love this new uh UI here the idea here
510:42 love this new uh UI here the idea here is you're going to filter based on your
510:44 is you're going to filter based on your requirements and that's going to show
510:45 requirements and that's going to show you RIS that are available and then
510:47 you RIS that are available and then you'll just choose the desired quantity
510:49 you'll just choose the desired quantity you can see the pricing stuff there
510:50 you can see the pricing stuff there you're going to add it to cart you're
510:51 you're going to add it to cart you're going to check out and that's how you're
510:53 going to check out and that's how you're going to purchase it okay
510:55 going to purchase it okay [Music]
510:59 [Music] so another factor to that formula were
511:01 so another factor to that formula were RI attributes and sometimes the
511:03 RI attributes and sometimes the documentation calls them R attributes
511:05 documentation calls them R attributes sometimes they call them instance
511:06 sometimes they call them instance attributes but these are limited based
511:08 attributes but these are limited based on class offering and can be uh uh can
511:11 on class offering and can be uh uh can affect the final price of the ra
511:12 affect the final price of the ra instance and there are four ra
511:15 instance and there are four ra attributes so the first is the instance
511:16 attributes so the first is the instance type so this could be like an M4 large
511:19 type so this could be like an M4 large and this is composed of an instance
511:21 and this is composed of an instance family so the M4 and the instance size
511:23 family so the M4 and the instance size so large okay then you have region so
511:26 so large okay then you have region so this is where the reserved instance is
511:28 this is where the reserved instance is purchased then you have the tency
511:30 purchased then you have the tency whether your instance runs on shared so
511:32 whether your instance runs on shared so the default which uh would be
511:34 the default which uh would be multi-tenant or a single tenant which
511:36 multi-tenant or a single tenant which would be dedicated hardware and then you
511:38 would be dedicated hardware and then you have the platform whether you're using
511:39 have the platform whether you're using Windows or Linux even if you're using on
511:41 Windows or Linux even if you're using on demand of course this would just affect
511:43 demand of course this would just affect your pricing but there are some
511:44 your pricing but there are some limitations around here which we'll get
511:46 limitations around here which we'll get into as we dive a bit deeper here with
511:48 into as we dive a bit deeper here with RI
511:49 RI [Music]
511:53 [Music] okay all right let's compare Regional
511:55 okay all right let's compare Regional and and zonal Ri so when you purchase an
511:57 and and zonal Ri so when you purchase an RI you have to determine the scope uh
512:00 RI you have to determine the scope uh for it okay so this is not going to
512:02 for it okay so this is not going to affect your price but it's going to
512:03 affect your price but it's going to affect the flexibility of the instance
512:05 affect the flexibility of the instance uh so this is something you have to
512:07 uh so this is something you have to decide so we're going to talk about
512:08 decide so we're going to talk about Regional RI which is when you purchase
512:09 Regional RI which is when you purchase it for a regional and zonal RI when you
512:12 it for a regional and zonal RI when you purchase it for an availability zone so
512:14 purchase it for an availability zone so when you purchase it for regional RI it
512:17 when you purchase it for regional RI it does not Reserve capacity meaning that
512:19 does not Reserve capacity meaning that there's no guarantee that those servers
512:21 there's no guarantee that those servers will be available so if ad us runs out
512:22 will be available so if ad us runs out of those servers uh you're just not
512:24 of those servers uh you're just not going to have them but when when it's
512:26 going to have them but when when it's zonal uh you are reserving capacity so
512:28 zonal uh you are reserving capacity so there's a guarantee that those will be
512:30 there's a guarantee that those will be there when you need them um in terms of
512:33 there when you need them um in terms of uh AZ flexibility uh you can use the
512:36 uh AZ flexibility uh you can use the regional RI for any a within that region
512:39 regional RI for any a within that region but for the zonal ri you can only use it
512:41 but for the zonal ri you can only use it for that particular region we're talking
512:43 for that particular region we're talking about instance flexibility um you can
512:46 about instance flexibility um you can apply the discount to uh any instance in
512:49 apply the discount to uh any instance in the family regardless of the size uh but
512:52 the family regardless of the size uh but then when we're looking at AZ there is
512:53 then when we're looking at AZ there is no instance flexibility Okay so just
512:55 no instance flexibility Okay so just going to use it for exactly what you
512:57 going to use it for exactly what you defined you can cue purchases for
512:59 defined you can cue purchases for regional R you cannot cue purchases for
513:02 regional R you cannot cue purchases for zonal Ri so there you
513:05 zonal Ri so there you [Music]
513:08 [Music] go let's talk about some ra limits here
513:10 go let's talk about some ra limits here so there's a limit to the number of
513:12 so there's a limit to the number of reserved instances that you can purchase
513:14 reserved instances that you can purchase per month and so uh the idea here is
513:16 per month and so uh the idea here is that you can purchase 20 Regional
513:18 that you can purchase 20 Regional reserved instances per region and then
513:20 reserved instances per region and then 20 zonal reserved instances per a so if
513:24 20 zonal reserved instances per a so if you have a region that has three A's you
513:26 you have a region that has three A's you can have uh 60 um zonal reserved
513:29 can have uh 60 um zonal reserved instances in that region okay there are
513:32 instances in that region okay there are some other limitations here so for
513:34 some other limitations here so for regional limits you cannot exceed the
513:36 regional limits you cannot exceed the running on demand instance limit by
513:38 running on demand instance limit by purchasing Regional reserved instances
513:40 purchasing Regional reserved instances the default for on demand limit is 20 so
513:43 the default for on demand limit is 20 so before purchasing your RI ensure on
513:45 before purchasing your RI ensure on demand limit is equal to or greater than
513:48 demand limit is equal to or greater than your RI you intend to purchase you might
513:50 your RI you intend to purchase you might even want to open up a service uh limit
513:52 even want to open up a service uh limit increase just to make sure you don't hit
513:54 increase just to make sure you don't hit that wall for zonal limits you can
513:56 that wall for zonal limits you can exceed your running on demand uh
513:58 exceed your running on demand uh instance limit by purchasing zonal
514:00 instance limit by purchasing zonal reserved instances if you're already uh
514:02 reserved instances if you're already uh have 20 ond demand instances and you
514:04 have 20 ond demand instances and you purchase 20 zal reserved instances you
514:07 purchase 20 zal reserved instances you can launch a further 20 ond demand
514:08 can launch a further 20 ond demand instances that match the specification
514:10 instances that match the specification of your zonal reserved instances so
514:12 of your zonal reserved instances so there you
514:13 there you [Music]
514:17 [Music] go let's talk about capacity reservation
514:20 go let's talk about capacity reservation so ec2 instances are backed by different
514:22 so ec2 instances are backed by different kinds of hardware and so there is a
514:24 kinds of hardware and so there is a finite amount of servers of available
514:26 finite amount of servers of available within an availability Zone per instance
514:28 within an availability Zone per instance type of family remember an availability
514:29 type of family remember an availability zone is just a data center or a
514:31 zone is just a data center or a collection of data centers and they only
514:33 collection of data centers and they only have so many servers in there so if they
514:35 have so many servers in there so if they run out because the demand is too great
514:37 run out because the demand is too great you just cannot spin anything up and so
514:39 you just cannot spin anything up and so that's what's happening you go to launch
514:40 that's what's happening you go to launch specific ec2 instant type but AB is like
514:42 specific ec2 instant type but AB is like sorry we don't have any right now and so
514:45 sorry we don't have any right now and so the solution to that is capacity
514:46 the solution to that is capacity reservation so it is a service of ec2
514:49 reservation so it is a service of ec2 that allows you to request uh a reserve
514:51 that allows you to request uh a reserve of ECC instance type for a specific
514:54 of ECC instance type for a specific region and a so here you would see that
514:56 region and a so here you would see that you just select the instance type
514:58 you just select the instance type platform a tendency the quantity and
515:01 platform a tendency the quantity and then here you might manually do it
515:03 then here you might manually do it specify time or you might say okay I
515:05 specify time or you might say okay I can't get exactly what I want but can
515:07 can't get exactly what I want but can give me something generally around uh
515:09 give me something generally around uh that kind of stuff or that type that I
515:11 that kind of stuff or that type that I want so the reserve capacity is charged
515:13 want so the reserve capacity is charged at the selected instance type on demand
515:15 at the selected instance type on demand rate whether an instance is running in
515:17 rate whether an instance is running in it or not and you can also use Regional
515:19 it or not and you can also use Regional Reserve instances With Your Capacity
515:21 Reserve instances With Your Capacity reservations to benefit from billing
515:24 reservations to benefit from billing discounts so there you go
515:26 discounts so there you go [Music]
515:30 [Music] so there are some key differences
515:32 so there are some key differences between standard and convertible Ri so
515:34 between standard and convertible Ri so let's take a look at it here so the
515:36 let's take a look at it here so the first is that with standard RI you can
515:37 first is that with standard RI you can modify your tributes so you can change
515:40 modify your tributes so you can change the a within the same region you can
515:42 the a within the same region you can change the scope uh from a zonal r to
515:45 change the scope uh from a zonal r to original RI or vice versa you can change
515:47 original RI or vice versa you can change the instance size uh as long as it's a
515:50 the instance size uh as long as it's a Linux and it has the default tendency
515:52 Linux and it has the default tendency you can change the network from ec2
515:54 you can change the network from ec2 classic to VPC and vice versa but when
515:56 classic to VPC and vice versa but when you're looking at convertible you you
515:58 you're looking at convertible you you don't modify ra tributes you perform in
516:01 don't modify ra tributes you perform in exchange okay and so standard RIS cannot
516:03 exchange okay and so standard RIS cannot do exchanges where convertible RI you
516:06 do exchanges where convertible RI you can uh exchange during the term for
516:09 can uh exchange during the term for another convertible RI with new R
516:10 another convertible RI with new R attributes and this includes the
516:12 attributes and this includes the instance family instant type platform
516:15 instance family instant type platform scope and tency um in terms of the
516:18 scope and tency um in terms of the marketplace you uh they can be bought in
516:21 marketplace you uh they can be bought in standard RI uh in the marketplace or you
516:23 standard RI uh in the marketplace or you can sell your RI if you uh don't need
516:25 can sell your RI if you uh don't need them anymore uh but for convertible R
516:28 them anymore uh but for convertible R they cannot be sold or bought in the
516:30 they cannot be sold or bought in the marketplace you're just dealing with ads
516:31 marketplace you're just dealing with ads directly
516:33 directly [Music]
516:36 [Music] okay hey this is Andrew Brown from exam
516:39 okay hey this is Andrew Brown from exam Pro and we are taking a look at the
516:40 Pro and we are taking a look at the reserved instance Marketplace we had
516:42 reserved instance Marketplace we had mentioned it prior so let's give it a
516:44 mentioned it prior so let's give it a little more attention here so it allows
516:45 little more attention here so it allows you to sell your unused standard RI to
516:47 you to sell your unused standard RI to recoup your spend for R right you do not
516:50 recoup your spend for R right you do not intend or cannot use so reserved
516:53 intend or cannot use so reserved instances can be sold after they have
516:54 instances can be sold after they have been active for at least 30 days and
516:56 been active for at least 30 days and once databus has received the upfront
516:58 once databus has received the upfront payment you must have a US bank account
517:00 payment you must have a US bank account to sell RI on the ri Marketplace there
517:03 to sell RI on the ri Marketplace there must be at least one month remaining in
517:04 must be at least one month remaining in the term for the ri you are listing you
517:07 the term for the ri you are listing you will retain the pricing and capacity
517:09 will retain the pricing and capacity benefit of your reservation until it's
517:11 benefit of your reservation until it's sold and the transaction is complete
517:13 sold and the transaction is complete your company name and address upon
517:14 your company name and address upon request will be shared with the buyer
517:16 request will be shared with the buyer for tax purposes a seller can set Only
517:19 for tax purposes a seller can set Only The Upfront price of an RI the usage
517:21 The Upfront price of an RI the usage price and other configurations such as
517:23 price and other configurations such as instance type availability Zone platform
517:25 instance type availability Zone platform will remain the same as when the ri was
517:27 will remain the same as when the ri was initially purchased the term length will
517:29 initially purchased the term length will be rounded down to the nearest month for
517:31 be rounded down to the nearest month for example a reservation with 9 months and
517:33 example a reservation with 9 months and 15 days remaining will appear as 9
517:35 15 days remaining will appear as 9 months on the R Market you can sell up
517:38 months on the R Market you can sell up to 20,000 USD in reserved instances per
517:41 to 20,000 USD in reserved instances per year if you need to sell more RI
517:43 year if you need to sell more RI reserved instances in the gov Cloud uh
517:45 reserved instances in the gov Cloud uh region cannot be sold on the ri
517:47 region cannot be sold on the ri Marketplace so there you
517:49 Marketplace so there you [Music]
517:53 [Music] go hey it's Andrew Brown from examp Pro
517:55 go hey it's Andrew Brown from examp Pro and we are taking a look at spot
517:57 and we are taking a look at spot instances so adus has unused compute
517:59 instances so adus has unused compute capacity that they want to maximize the
518:01 capacity that they want to maximize the utility of their idle servers all right
518:04 utility of their idle servers all right so the idea is just like when a hotel
518:06 so the idea is just like when a hotel offers booking discounts to fill vacant
518:08 offers booking discounts to fill vacant Suites or planes offer discounts to fill
518:11 Suites or planes offer discounts to fill vacant seats all right so spot instances
518:14 vacant seats all right so spot instances provide a discount of 90% compared to On
518:16 provide a discount of 90% compared to On Demand pricing spot instances can be
518:19 Demand pricing spot instances can be terminated if the Computing capacity is
518:21 terminated if the Computing capacity is needed by other on demand customers but
518:23 needed by other on demand customers but from what I hear rarely rarely does spot
518:25 from what I hear rarely rarely does spot instances ever get terminated um it's
518:28 instances ever get terminated um it's designed for applications that have
518:29 designed for applications that have flexible start and end times or
518:31 flexible start and end times or applications that are only feasible at
518:33 applications that are only feasible at very low compute cost so you see some
518:35 very low compute cost so you see some options here like load balancing
518:36 options here like load balancing workloads flexible workloads Big Data
518:38 workloads flexible workloads Big Data workloads things like that um there is
518:40 workloads things like that um there is another service called Aus batch which
518:43 another service called Aus batch which is for doing batch processing and this
518:44 is for doing batch processing and this is very common what you use um spot with
518:47 is very common what you use um spot with and so you know if you find the spot
518:48 and so you know if you find the spot interface too complicated you're doing
518:50 interface too complicated you're doing batch processing you want to use this
518:51 batch processing you want to use this service instead um there are some
518:54 service instead um there are some termination conditions so instances can
518:56 termination conditions so instances can be terminated by adabs at any time if
518:58 be terminated by adabs at any time if your instance is terminated by ads you
519:00 your instance is terminated by ads you don't get charged for a partial hour of
519:02 don't get charged for a partial hour of usage if you terminate an instance you
519:04 usage if you terminate an instance you will be still charged for an hour uh
519:07 will be still charged for an hour uh that it ran so there you
519:09 that it ran so there you [Music]
519:13 [Music] go hey this is Andrew Brown from exam
519:15 go hey this is Andrew Brown from exam Pro and we are taking a look here at
519:17 Pro and we are taking a look here at dedicated instances so dedicate
519:19 dedicated instances so dedicate instances is designed to help meet
519:21 instances is designed to help meet regulatory requirements inabus also has
519:23 regulatory requirements inabus also has this concept called dedicated hosts and
519:25 this concept called dedicated hosts and this is more for when you have strict
519:27 this is more for when you have strict server bound licensing that won't
519:28 server bound licensing that won't support multi- tendency or cloud
519:30 support multi- tendency or cloud deployments and we'll definitely
519:31 deployments and we'll definitely distinguish that in this course but just
519:33 distinguish that in this course but just not in this slide in particular um and
519:35 not in this slide in particular um and so to understand uh dedicated instances
519:38 so to understand uh dedicated instances or hosts we need to understand the
519:39 or hosts we need to understand the difference between multi- tendency and
519:40 difference between multi- tendency and single tendency so multi- tendency you
519:42 single tendency so multi- tendency you can think of it like everyone living in
519:44 can think of it like everyone living in the same apartment and single tendency
519:46 the same apartment and single tendency you can think of it everyone having
519:47 you can think of it everyone having their own house so the idea here is that
519:50 their own house so the idea here is that you have a server I'm just going to get
519:52 you have a server I'm just going to get my uh cursor or my pen out here to say
519:54 my uh cursor or my pen out here to say server and you have have multiple
519:56 server and you have have multiple customers running workloads on the same
519:58 customers running workloads on the same hardware and the idea is that they are
520:00 hardware and the idea is that they are separated via virtual isolation so
520:02 separated via virtual isolation so they're using the same server but it's
520:03 they're using the same server but it's just software that might be separating
520:05 just software that might be separating them okay and then we have the idea of
520:08 them okay and then we have the idea of single tency so we have a single
520:10 single tency so we have a single customer that has dedicated Hardware so
520:13 customer that has dedicated Hardware so the physical location is what separates
520:15 the physical location is what separates customers um and the idea here is that
520:18 customers um and the idea here is that dedicated can be offered via on demand
520:20 dedicated can be offered via on demand reserved and spot so that's why we're
520:22 reserved and spot so that's why we're talking about dedicated here in the
520:24 talking about dedicated here in the pricing model just so you know that you
520:25 pricing model just so you know that you know even though these are a lot more
520:27 know even though these are a lot more expensive than on demand uh you can
520:29 expensive than on demand uh you can still save by using reserved and also
520:31 still save by using reserved and also spot which I was very surprised about um
520:34 spot which I was very surprised about um and when you want to choose dedicated
520:36 and when you want to choose dedicated you're just going to launch your ec2 and
520:38 you're just going to launch your ec2 and you'll have a drop down where you have
520:39 you'll have a drop down where you have that shared so that's the default
520:41 that shared so that's the default dedicated so you have dedicated instance
520:43 dedicated so you have dedicated instance and dedicated host and again we'll talk
520:44 and dedicated host and again we'll talk about dedicated host uh later when we
520:46 about dedicated host uh later when we need to here um and so again the reason
520:49 need to here um and so again the reason why um you know Enterprises or large
520:52 why um you know Enterprises or large organizations may want to use dedicated
520:54 organizations may want to use dedicated instances is because they have a sec uh
520:56 instances is because they have a sec uh a security concern or obligation about
520:59 a security concern or obligation about uh against sharing the same Hardware
521:01 uh against sharing the same Hardware with other adus customers
521:03 with other adus customers [Music]
521:07 [Music] okay hey this is Andrew Brown from exam
521:09 okay hey this is Andrew Brown from exam Pro and we are taking a look at ABA
521:11 Pro and we are taking a look at ABA savings plans and this is similar to
521:13 savings plans and this is similar to reserved instances but simplifies the
521:15 reserved instances but simplifies the purchasing process so it's going to look
521:16 purchasing process so it's going to look a lot like RI at the start here but I'll
521:19 a lot like RI at the start here but I'll tell you how it's a bit different okay
521:20 tell you how it's a bit different okay so there are three types of saving plans
521:22 so there are three types of saving plans you have compute Savings Plan ec2
521:24 you have compute Savings Plan ec2 instance saving plan plans and sagemaker
521:26 instance saving plan plans and sagemaker saving plans uh and so you just go ahead
521:28 saving plans uh and so you just go ahead and choose that you can choose two
521:30 and choose that you can choose two different terms so one year threee so
521:32 different terms so one year threee so would be simple as that and then you
521:34 would be simple as that and then you choose the following payment options so
521:36 choose the following payment options so you have all upfront partial payment and
521:38 you have all upfront partial payment and no upfront and then you're going to
521:39 no upfront and then you're going to choose that hour of the commitment
521:41 choose that hour of the commitment you're not having to think about
521:42 you're not having to think about standard versus convertible uh uh
521:45 standard versus convertible uh uh Regional versus zonal RI attributes it's
521:48 Regional versus zonal RI attributes it's a lot simpler uh and let's just talk
521:50 a lot simpler uh and let's just talk about the three different saving plans
521:52 about the three different saving plans or types in a bit more detail so you
521:54 or types in a bit more detail so you have compute so compute savings plans
521:56 have compute so compute savings plans provides the most flexibility and helps
521:58 provides the most flexibility and helps to reduce your cost by 66% these plans
522:01 to reduce your cost by 66% these plans automatically apply to ec2 instances
522:03 automatically apply to ec2 instances usage ads fargate 8s Lambda service
522:06 usage ads fargate 8s Lambda service usage regardless of the instance family
522:07 usage regardless of the instance family size AZ region Os or tency then you have
522:11 size AZ region Os or tency then you have ec2 instances so this provides the
522:13 ec2 instances so this provides the lowest prices offering saving up to 72%
522:16 lowest prices offering saving up to 72% in exchange for commitment to usage of
522:18 in exchange for commitment to usage of instance uh individual instance families
522:20 instance uh individual instance families in a region so automatically reduce uh
522:22 in a region so automatically reduce uh your cost on the selected instance
522:24 your cost on the selected instance family in the region regardless of a
522:26 family in the region regardless of a size OS tendency gives you the
522:28 size OS tendency gives you the flexibility to change your usage between
522:30 flexibility to change your usage between instances with a within a family in that
522:33 instances with a within a family in that region and the last is sagemaker so
522:35 region and the last is sagemaker so helps you reduce Sage maker cost by up
522:37 helps you reduce Sage maker cost by up to 64% automatically apply to Sage maker
522:40 to 64% automatically apply to Sage maker usage regardless of instance family size
522:43 usage regardless of instance family size component adus region if you don't know
522:45 component adus region if you don't know what sagemaker is that's adab Us's ml
522:47 what sagemaker is that's adab Us's ml service and it uses ec2 instances or
522:50 service and it uses ec2 instances or specifically ml ec2 instances so
522:52 specifically ml ec2 instances so everything's basically using ec2 here um
522:55 everything's basically using ec2 here um but there you
522:56 but there you [Music]
522:59 [Music] go all right let's take a look at the
523:01 go all right let's take a look at the zero trust model and the Zer trust model
523:03 zero trust model and the Zer trust model is a security uh model which operates on
523:06 is a security uh model which operates on the principle of trust no one and verify
523:08 the principle of trust no one and verify everything so what I mean by that is
523:10 everything so what I mean by that is malicious actors being able to bypass
523:12 malicious actors being able to bypass conventional access controls
523:14 conventional access controls demonstrates traditional security
523:15 demonstrates traditional security measures are no longer sufficient and
523:17 measures are no longer sufficient and that's where the zero trust model comes
523:19 that's where the zero trust model comes into play so with the zero trust model
523:22 into play so with the zero trust model identity becomes the primary security
523:24 identity becomes the primary security perimeter
523:25 perimeter uh and so you might be asking what do we
523:27 uh and so you might be asking what do we mean by primary security perimeter the
523:29 mean by primary security perimeter the primary or new security perimeter
523:30 primary or new security perimeter defines the first line of defense and
523:32 defines the first line of defense and it's security controls that protect a
523:35 it's security controls that protect a company's Cloud resources and assets um
523:38 company's Cloud resources and assets um if it still doesn't make sense we do
523:39 if it still doesn't make sense we do cover a part of the defense in depth
523:42 cover a part of the defense in depth where you see the layers of Defense from
523:45 where you see the layers of Defense from data all the way to physical and so you
523:47 data all the way to physical and so you can kind of see you know what we're
523:48 can kind of see you know what we're talking about in that model there but
523:51 talking about in that model there but the old way that we used to do things is
523:53 the old way that we used to do things is Network Centric so we had traditional
523:55 Network Centric so we had traditional focused on firewalls and VPN since there
523:57 focused on firewalls and VPN since there were few employees or workstations
523:59 were few employees or workstations outside the office or they were in a
524:00 outside the office or they were in a specific remote office so we treat the
524:03 specific remote office so we treat the network uh the network as kind of like
524:05 network uh the network as kind of like the the boundary so if you're in in
524:07 the the boundary so if you're in in office there's nothing to worry about
524:09 office there's nothing to worry about but we don't think like that anymore
524:10 but we don't think like that anymore because everything is identity Centric
524:13 because everything is identity Centric so this is where we have bring your own
524:15 so this is where we have bring your own device remote workstations which are
524:17 device remote workstations which are becoming more common uh we can't always
524:19 becoming more common uh we can't always trust that the employee is in a secure
524:20 trust that the employee is in a secure location we have uh identity based
524:22 location we have uh identity based security controls like MFA providing
524:25 security controls like MFA providing provisional access based on the level
524:26 provisional access based on the level risk from where when and what a user
524:29 risk from where when and what a user wants to access and identity Centric
524:31 wants to access and identity Centric does not replace uh but it augments
524:33 does not replace uh but it augments Network Centric security so it's just an
524:35 Network Centric security so it's just an additional layer of consideration for uh
524:38 additional layer of consideration for uh security when we're thinking about our
524:40 security when we're thinking about our Aus Cloud workloads
524:42 Aus Cloud workloads [Music]
524:45 [Music] okay all right so we just Loosely
524:47 okay all right so we just Loosely defined what the zero trust model is so
524:49 defined what the zero trust model is so let's talk about how we would do zero
524:50 let's talk about how we would do zero trust on AWS and so zero trust has to do
524:53 trust on AWS and so zero trust has to do a lot with identity security controls
524:56 a lot with identity security controls and so let's talk about what is at our
524:57 and so let's talk about what is at our disposal on AWS so on AWS we have
525:00 disposal on AWS so on AWS we have identity and access management IM this
525:02 identity and access management IM this is where we create users or groups or
525:04 is where we create users or groups or policies so I policy is a set of
525:06 policies so I policy is a set of permissions that allow you to say okay
525:08 permissions that allow you to say okay this user is allowed to use uh these
525:11 this user is allowed to use uh these services with these particular actions
525:13 services with these particular actions uh then you have the concept of
525:14 uh then you have the concept of permission boundaries and so these are
525:16 permission boundaries and so these are saying okay um these aren't the
525:18 saying okay um these aren't the permissions the user has currently but
525:20 permissions the user has currently but these are the boundaries to which we
525:21 these are the boundaries to which we want them to have so they should never
525:23 want them to have so they should never have access to um uh ml services and if
525:27 have access to um uh ml services and if someone's to uh apply them uh uh
525:30 someone's to uh apply them uh uh permissions it'll always be within these
525:32 permissions it'll always be within these boundaries then you have service control
525:34 boundaries then you have service control policies and these are organization-wide
525:36 policies and these are organization-wide policies so if you have a policy where
525:37 policies so if you have a policy where you don't want anyone to run anything in
525:39 you don't want anyone to run anything in the Canada region you can apply that
525:41 the Canada region you can apply that policy at the organizational level and
525:43 policy at the organizational level and it will be enforced then within an
525:45 it will be enforced then within an policy there are the concept of
525:47 policy there are the concept of conditions and so these are all the kind
525:49 conditions and so these are all the kind of like uh little knobs you can uh tweak
525:52 of like uh little knobs you can uh tweak to say how do I uh control based on a
525:54 to say how do I uh control based on a bunch of different factors so there's
525:56 bunch of different factors so there's Source IP so restrict where the IP
525:58 Source IP so restrict where the IP address is coming from a requested
526:00 address is coming from a requested region so restrict based on the region
526:02 region so restrict based on the region as we just mentioned as an example uh
526:05 as we just mentioned as an example uh multiactor off presence so restrict if
526:07 multiactor off presence so restrict if MFA is turned off uh current time so
526:10 MFA is turned off uh current time so restrict access based on time of day
526:12 restrict access based on time of day maybe you know your employees should
526:13 maybe you know your employees should never be really using things at night
526:15 never be really using things at night and so that could be an indicator that
526:17 and so that could be an indicator that someone is doing something malicious so
526:19 someone is doing something malicious so you know only give them access during a
526:20 you know only give them access during a certain time a day and so that's where
526:22 certain time a day and so that's where we're going to figure out you know based
526:24 we're going to figure out you know based on all these type of controls security
526:26 on all these type of controls security controls uh to our adus resources we can
526:29 controls uh to our adus resources we can kind of enforce the zero trust model
526:31 kind of enforce the zero trust model adus adus does not have a ready to use
526:33 adus adus does not have a ready to use identity controls that are intelligent
526:36 identity controls that are intelligent which is why adus is considered not to
526:37 which is why adus is considered not to have a zero trust offering for customers
526:39 have a zero trust offering for customers and thirdparty services need to be used
526:41 and thirdparty services need to be used so what I'm saying is that technically
526:44 so what I'm saying is that technically you know this checkbox is this thing
526:46 you know this checkbox is this thing saying okay we can kind of do zero trust
526:48 saying okay we can kind of do zero trust on AWS but there's a lot of manual work
526:51 on AWS but there's a lot of manual work and you know if I was to say okay um I
526:56 and you know if I was to say okay um I don't want anyone using this at
526:58 don't want anyone using this at nighttime that doesn't really detect you
527:00 nighttime that doesn't really detect you know what I'm saying it's not going to
527:01 know what I'm saying it's not going to say oh I think this time is suspicious
527:04 say oh I think this time is suspicious or malicious so then restrict access
527:06 or malicious so then restrict access only to these core services and anything
527:07 only to these core services and anything outside of the services can't be used it
527:10 outside of the services can't be used it just can't exactly do that without a lot
527:12 just can't exactly do that without a lot of U work yourself and that's what I'm
527:13 of U work yourself and that's what I'm talking about here where we have a
527:15 talking about here where we have a collection of aable services that can be
527:16 collection of aable services that can be set up in an intelligence intelligent is
527:19 set up in an intelligence intelligent is detection way for identity concerns but
527:21 detection way for identity concerns but requires expert knowledge so the way you
527:23 requires expert knowledge so the way you might do on AWS is that everything all
527:25 might do on AWS is that everything all the API calls go through ad's cloud
527:27 the API calls go through ad's cloud trail and so what you could do is feed
527:30 trail and so what you could do is feed those into Amazon guard Duty and guard
527:31 those into Amazon guard Duty and guard duty is an intrusion uh uh intrusion
527:35 duty is an intrusion uh uh intrusion detection and protection system so it
527:37 detection and protection system so it could detect suspicious or malicious
527:38 could detect suspicious or malicious activity on those cloud trail logs and
527:40 activity on those cloud trail logs and you could follow that up with
527:42 you could follow that up with remediation or you could pass that on to
527:44 remediation or you could pass that on to Amazon detective that could analyze
527:46 Amazon detective that could analyze investigate and quickly identify
527:47 investigate and quickly identify security issues uh that it could ingest
527:50 security issues uh that it could ingest from guard duty but I'm telling you that
527:52 from guard duty but I'm telling you that this stuff here is not as easy um for
527:55 this stuff here is not as easy um for the consumer and so you of course you
527:58 the consumer and so you of course you can do zero trust model but it's going
527:59 can do zero trust model but it's going to take a lot of work here and there are
528:01 to take a lot of work here and there are some limitations which we'll talk about
528:02 some limitations which we'll talk about next
528:03 next [Music]
528:07 [Music] here so now let's see how we would do
528:09 here so now let's see how we would do zero trust on OS with third Pary so os
528:11 zero trust on OS with third Pary so os does does technically Implement a zero
528:13 does does technically Implement a zero trust model but does not allow for
528:15 trust model but does not allow for intelligent identity security controls
528:17 intelligent identity security controls which you know you can do it but it's a
528:20 which you know you can do it but it's a lot of work so uh let's kind of compare
528:22 lot of work so uh let's kind of compare it against kind of a third party where
528:24 it against kind of a third party where we would get the controls that we would
528:25 we would get the controls that we would not necessarily get with AWS so for
528:27 not necessarily get with AWS so for example aure active directory has a real
528:29 example aure active directory has a real time and calculated risk detection Based
528:31 time and calculated risk detection Based on data points than AWS and this is
528:34 on data points than AWS and this is based on device and application time of
528:36 based on device and application time of day location whether MFA is turned on
528:39 day location whether MFA is turned on what is being accessed and the security
528:41 what is being accessed and the security controls verification or logic
528:43 controls verification or logic restriction is much more robust so you
528:46 restriction is much more robust so you know just as one particular example like
528:48 know just as one particular example like device and application is not something
528:50 device and application is not something that ads factors in uh with the existing
528:53 that ads factors in uh with the existing controls or at least not in a way that
528:55 controls or at least not in a way that is consumer friendly and you know I
528:57 is consumer friendly and you know I can't say onus okay when you think that
529:00 can't say onus okay when you think that this is the type of threat only allow
529:02 this is the type of threat only allow them access to these things or if you
529:04 them access to these things or if you think they're in a risky area or risky
529:06 think they're in a risky area or risky uh location only give them access to you
529:08 uh location only give them access to you know these things where there's not
529:10 know these things where there's not sensitive data you can't exactly do that
529:12 sensitive data you can't exactly do that on itus very easily and so this is where
529:14 on itus very easily and so this is where third party Solutions are going to come
529:15 third party Solutions are going to come into play so you have Azure active
529:17 into play so you have Azure active directory Google Beyond Corp jump Cloud
529:20 directory Google Beyond Corp jump Cloud all these have more intelligent security
529:21 all these have more intelligent security controls for realtime detection um and
529:24 controls for realtime detection um and so way you would use these is these
529:25 so way you would use these is these would be your primary directories uh for
529:28 would be your primary directories uh for Google beond Corp is just a zero trust
529:30 Google beond Corp is just a zero trust framework so I guess you'd use uh
529:33 framework so I guess you'd use uh Google's uh Cloud directory but the idea
529:36 Google's uh Cloud directory but the idea anyway here is that you'd use single
529:37 anyway here is that you'd use single sign on to connect those directories to
529:40 sign on to connect those directories to your adus account and that's how You'
529:42 your adus account and that's how You' access access those uh itus resources
529:44 access access those uh itus resources and you get this more robust
529:46 and you get this more robust functionality
529:53 okay hey it's Andrew Brown from exam Pro and we're looking at ident now we need
529:55 and we're looking at ident now we need to know a bunch of Concepts before we
529:57 to know a bunch of Concepts before we talk about identity on AWS so let's jump
529:59 talk about identity on AWS so let's jump into it the first is a directory service
530:01 into it the first is a directory service so what is directory service well it's a
530:03 so what is directory service well it's a service that Maps the names of network
530:05 service that Maps the names of network resources to network addresses and a
530:07 resources to network addresses and a directory service is shared uh
530:09 directory service is shared uh infrastructure or information in
530:11 infrastructure or information in infrastructure for locating managing
530:13 infrastructure for locating managing administrating and organizing resources
530:15 administrating and organizing resources such as volumes folders files printers
530:18 such as volumes folders files printers users groups devices telephone numbers
530:20 users groups devices telephone numbers and other objects a directory service is
530:23 and other objects a directory service is a critical component of a network
530:25 a critical component of a network operating system and a directory server
530:27 operating system and a directory server or a name server is a server which
530:30 or a name server is a server which provides a directory service so each
530:32 provides a directory service so each resource on the network is considered an
530:34 resource on the network is considered an object by the directory server
530:36 object by the directory server information about a particular resource
530:38 information about a particular resource is stored as a collection of attributes
530:40 is stored as a collection of attributes associated with that resource or object
530:43 associated with that resource or object uh well-known directory Services would
530:45 uh well-known directory Services would be a domain name service um so the
530:48 be a domain name service um so the directory service for the internet
530:50 directory service for the internet Microsoft active directory and uh they
530:53 Microsoft active directory and uh they have a cloud hosted one called Azure
530:55 have a cloud hosted one called Azure active directory we have aachi directory
530:58 active directory we have aachi directory service Oracle inter internet directory
531:01 service Oracle inter internet directory so o ID uh open ldap uh cloud and
531:06 so o ID uh open ldap uh cloud and identity and jump Cloud
531:08 identity and jump Cloud [Music]
531:11 [Music] okay hey this is Andrew Brown from exam
531:13 okay hey this is Andrew Brown from exam Pro and we are taking a look at active
531:15 Pro and we are taking a look at active directory now you might say well we're
531:16 directory now you might say well we're doing adab best why are we looking at
531:18 doing adab best why are we looking at this well no matter what cloud service
531:20 this well no matter what cloud service provider you're using you should know
531:21 provider you're using you should know what active directory is uh especially
531:23 what active directory is uh especially when it comes to Identity you can use it
531:25 when it comes to Identity you can use it with AWS um so let's talk about it so
531:28 with AWS um so let's talk about it so Microsoft introduced active directory
531:30 Microsoft introduced active directory domain services in Windows 2000 to give
531:32 domain services in Windows 2000 to give organizations's ability to manage
531:33 organizations's ability to manage multiple on- premise infrastructure
531:35 multiple on- premise infrastructure components and systems using a single
531:37 components and systems using a single identity per user and since then it's uh
531:40 identity per user and since then it's uh involved uh evolved obviously it's uh
531:42 involved uh evolved obviously it's uh running Beyond Windows 2000 as of today
531:45 running Beyond Windows 2000 as of today and uh they even have a managed one
531:47 and uh they even have a managed one called Azure ad which is on Microsoft
531:49 called Azure ad which is on Microsoft Azure but just to kind of give you an
531:51 Azure but just to kind of give you an architectural diagram here the idea is
531:53 architectural diagram here the idea is that you would have your domain servers
531:55 that you would have your domain servers here uh and they might have child
531:57 here uh and they might have child domains and the idea is that you have
531:59 domains and the idea is that you have these running on multiple machines so
532:00 these running on multiple machines so that you have redundant ability to log
532:02 that you have redundant ability to log in from various places when you have a
532:04 in from various places when you have a bunch of domains it's called a forest
532:06 bunch of domains it's called a forest and then within a domain you actually
532:08 and then within a domain you actually have organizational units and when then
532:10 have organizational units and when then within organizational units you have all
532:11 within organizational units you have all your objects like your users your
532:12 your objects like your users your printers your computers your servers uh
532:14 printers your computers your servers uh all things like that
532:16 all things like that [Music]
532:20 [Music] okay hey it's Andrew Brown from xam Pro
532:22 okay hey it's Andrew Brown from xam Pro and we're talking about identity
532:23 and we're talking about identity providers
532:25 providers ipds so
533:05 hey this is Andrew Brown from exam Pro and we are talking about identity
533:06 and we are talking about identity providers also known as
533:09 providers also known as idps so an identity provider is a system
533:12 idps so an identity provider is a system entity that creates maintains and
533:13 entity that creates maintains and manages identity information for
533:15 manages identity information for principles and also provides
533:16 principles and also provides authentication services to Applications
533:18 authentication services to Applications with a federation or distributor Network
533:21 with a federation or distributor Network a trusted provider of your user identity
533:23 a trusted provider of your user identity that lets you use authent uh lets you
533:25 that lets you use authent uh lets you authenticate to access other service
533:27 authenticate to access other service identity providers so this could be like
533:28 identity providers so this could be like Facebook Amazon Google Twitter GitHub
533:31 Facebook Amazon Google Twitter GitHub LinkedIn uh Federate identity is a
533:33 LinkedIn uh Federate identity is a method of linking a user's identity
533:35 method of linking a user's identity across multiple separate identity
533:37 across multiple separate identity management systems and so some things
533:39 management systems and so some things that uh we can use for that is like open
533:41 that uh we can use for that is like open ID so this is an open standard and
533:43 ID so this is an open standard and decentralized Authentication Protocol
533:45 decentralized Authentication Protocol allows you to be able to log in to
533:47 allows you to be able to log in to different social media platforms using
533:49 different social media platforms using Google or Facebook account open ideas
533:51 Google or Facebook account open ideas about providing who you are then we have
533:53 about providing who you are then we have ooth 2.0 this is an industry standard
533:56 ooth 2.0 this is an industry standard protocol for authorization oath doesn't
533:58 protocol for authorization oath doesn't share password data but instead uses
534:01 share password data but instead uses authorization tokens to prove an
534:03 authorization tokens to prove an identity between consumers and service
534:05 identity between consumers and service providers oath is about granting access
534:07 providers oath is about granting access to functionality and then we have saml
534:10 to functionality and then we have saml the security assertion markup language
534:13 the security assertion markup language which is an open standard for exchanging
534:15 which is an open standard for exchanging authentication and authorization between
534:16 authentication and authorization between an identity provider and a service
534:18 an identity provider and a service provider and this is important use for
534:21 provider and this is important use for samle which we use for single sign on
534:23 samle which we use for single sign on Via the browser
534:26 Via the browser [Music]
534:30 [Music] okay hey this is Andrew Brown from exam
534:32 okay hey this is Andrew Brown from exam Pro we're looking at the concept of
534:34 Pro we're looking at the concept of single sign on so SSO is an
534:36 single sign on so SSO is an authentication scheme that allows a user
534:37 authentication scheme that allows a user to log in with a single ID and password
534:39 to log in with a single ID and password to different systems and software SSO
534:42 to different systems and software SSO allows it departments to administer a
534:43 allows it departments to administer a single identity that can access many
534:45 single identity that can access many machines and cloud services so the idea
534:47 machines and cloud services so the idea is you have Azure active directory this
534:49 is you have Azure active directory this is just an example of a very popular one
534:51 is just an example of a very popular one You' use samle to do SSO and you can
534:53 You' use samle to do SSO and you can connect to all things bu Google
534:55 connect to all things bu Google workspaces Salesforce or your computer
534:58 workspaces Salesforce or your computer uh the idea here is uh once you uh log
535:01 uh the idea here is uh once you uh log in um you don't have to log in multiple
535:03 in um you don't have to log in multiple times so you log into your primary
535:05 times so you log into your primary directory and then after that you're not
535:06 directory and then after that you're not going to be presented with a login
535:07 going to be presented with a login screen some Services might show an
535:09 screen some Services might show an intermediate screen but the idea is
535:10 intermediate screen but the idea is you're not entering your credentials in
535:13 you're not entering your credentials in multiple times so it's
535:14 multiple times so it's [Music]
535:17 [Music] seamless all right let's talk about ldap
535:20 seamless all right let's talk about ldap so lightweight directory access protocol
535:22 so lightweight directory access protocol is an open vendor neutral industry
535:24 is an open vendor neutral industry standard application protocol for
535:26 standard application protocol for accessing and maintaining distributed
535:27 accessing and maintaining distributed directory information Services over uh
535:30 directory information Services over uh IP network so a common use of ldap is to
535:34 IP network so a common use of ldap is to provide a central place to store
535:36 provide a central place to store usernames and passwords ldap enables for
535:39 usernames and passwords ldap enables for same signon so same sign on allows users
535:41 same signon so same sign on allows users to uh use a single ID and password but
535:44 to uh use a single ID and password but they have to enter it every single time
535:45 they have to enter it every single time they want to log in so maybe you have
535:47 they want to log in so maybe you have your on premise active directory and
535:50 your on premise active directory and then it's going to store it in that ldap
535:52 then it's going to store it in that ldap directory and so the idea is that um you
535:55 directory and so the idea is that um you know all these services like Google
535:57 know all these services like Google kubernetes um jenkings is going to uh
536:00 kubernetes um jenkings is going to uh deal with that ldap server so why would
536:02 deal with that ldap server so why would you use ldap over SSO which is more
536:05 you use ldap over SSO which is more convenient or seamless so most SSO
536:08 convenient or seamless so most SSO systems are using ldap under the hood
536:10 systems are using ldap under the hood but ldap was not designed neighly to
536:12 but ldap was not designed neighly to work with web applications so some
536:14 work with web applications so some systems only support integration with
536:15 systems only support integration with ldap and not SSO so you got to take what
536:19 ldap and not SSO so you got to take what you can get
536:20 you can get [Music]
536:23 [Music] okay let's let's take a look here at
536:24 okay let's let's take a look here at multifactor authentication also known as
536:27 multifactor authentication also known as MFA and this is a security control where
536:29 MFA and this is a security control where after you fill in your user's name and
536:31 after you fill in your user's name and email password you have to use a second
536:34 email password you have to use a second device such as a phone to confirm that
536:36 device such as a phone to confirm that it's you that is logging in so MFA
536:38 it's you that is logging in so MFA protects against people who have stolen
536:40 protects against people who have stolen your password MFA is an option in most
536:42 your password MFA is an option in most Cloud providers and even social media
536:44 Cloud providers and even social media websites such as Facebook so the idea is
536:47 websites such as Facebook so the idea is I have my uh username or email and
536:49 I have my uh username or email and password I'm going to try to log in this
536:51 password I'm going to try to log in this is the first factor and the second
536:53 is the first factor and the second Factor multiactor is I'm going to use a
536:56 Factor multiactor is I'm going to use a secondary device so maybe my phone we're
536:57 secondary device so maybe my phone we're going to enter in different codes or
536:59 going to enter in different codes or maybe it's passwordless so I just have
537:01 maybe it's passwordless so I just have to press a button to confirm that it's
537:02 to press a button to confirm that it's me and then I'll get access so in the
537:04 me and then I'll get access so in the context to AWS it's strongly recommended
537:07 context to AWS it's strongly recommended that you turn on MFA for all your
537:09 that you turn on MFA for all your accounts especially the adus root
537:11 accounts especially the adus root account uh we'll see that when we do the
537:13 account uh we'll see that when we do the follow
537:14 follow [Music]
537:18 [Music] alongs let's take a look at security
537:20 alongs let's take a look at security keys so a security key is a second
537:22 keys so a security key is a second device used as a second step in
537:24 device used as a second step in authentication process to gain access to
537:25 authentication process to gain access to a device workstation or application a
537:28 a device workstation or application a security key can resemble a memory stick
537:30 security key can resemble a memory stick and when your finger makes contact with
537:32 and when your finger makes contact with a button of exposed metal on the device
537:34 a button of exposed metal on the device it will generate and autofill a security
537:35 it will generate and autofill a security token a popular brand of security Keys
537:38 token a popular brand of security Keys is the UB key and this is the one I use
537:40 is the UB key and this is the one I use and is looks exactly like the one that's
537:41 and is looks exactly like the one that's right beside my desk it works out of the
537:43 right beside my desk it works out of the box with Gmail Facebook and hundreds
537:45 box with Gmail Facebook and hundreds more supports pho2 web o n uh u2f it's
537:51 more supports pho2 web o n uh u2f it's waterproof and crust resistance it uh
537:53 waterproof and crust resistance it uh has Vari like usba us NFC dual
537:57 has Vari like usba us NFC dual connectors on a single key can do a
537:59 connectors on a single key can do a variety of things so when you turn on
538:01 variety of things so when you turn on MFA on your ads account you'll have
538:03 MFA on your ads account you'll have virtual MFA device so that's when you're
538:05 virtual MFA device so that's when you're using something like a phone or using
538:07 using something like a phone or using software on your phone to do that then
538:09 software on your phone to do that then there's the u2f security key so this is
538:11 there's the u2f security key so this is what we're talking about right now and
538:13 what we're talking about right now and there's even other kinds of Hardware MFA
538:15 there's even other kinds of Hardware MFA devices um which we're not really going
538:17 devices um which we're not really going to talk about but um you know just
538:20 to talk about but um you know just security Keys tie into MFA and this is a
538:23 security Keys tie into MFA and this is a lot better way than using a phone
538:25 lot better way than using a phone because you know you can have it on your
538:26 because you know you can have it on your desk and press it um and you know you
538:28 desk and press it um and you know you don't have to worry about your phone
538:29 don't have to worry about your phone being not charged
538:31 being not charged [Music]
538:34 [Music] okay hey this is Andrew Brown from exam
538:36 okay hey this is Andrew Brown from exam Pro and we are taking a look at itus
538:38 Pro and we are taking a look at itus identity and access management also
538:40 identity and access management also known as IM am and you can use this
538:42 known as IM am and you can use this service to create and manage adus users
538:44 service to create and manage adus users groups uh use permissions to allow and
538:47 groups uh use permissions to allow and deny their access to adus resources so
538:50 deny their access to adus resources so there's quite a few components here
538:51 there's quite a few components here let's get to it so the first is I am
538:53 let's get to it so the first is I am policies so these are Json documents
538:55 policies so these are Json documents which Grant permissions for specific
538:57 which Grant permissions for specific users groups or a role to access
538:59 users groups or a role to access services and policies are attached to IM
539:01 services and policies are attached to IM IM identities then you have I am
539:03 IM identities then you have I am permissions or a permission and this is
539:05 permissions or a permission and this is an API action that can or cannot be
539:07 an API action that can or cannot be performed and they represented in the IM
539:10 performed and they represented in the IM policy document then there's the IM
539:12 policy document then there's the IM identity so we have IM users these are
539:15 identity so we have IM users these are end users who log into the console or
539:17 end users who log into the console or interact with ad resources
539:18 interact with ad resources programmatically or via clicking UI
539:20 programmatically or via clicking UI interfaces you have IM groups so these
539:23 interfaces you have IM groups so these these uh group up your users so they all
539:25 these uh group up your users so they all share the same permission levels so
539:28 share the same permission levels so maybe it's admins developers or Auditors
539:30 maybe it's admins developers or Auditors then you have IM roles so these roles
539:32 then you have IM roles so these roles Grant adus resources uh permissions to
539:34 Grant adus resources uh permissions to specific adus API actions and Associate
539:37 specific adus API actions and Associate policies to a role and then assign it to
539:39 policies to a role and then assign it to an adus resource just understand that
539:41 an adus resource just understand that roles are when you're attaching these to
539:44 roles are when you're attaching these to resources so like if you have an ec2
539:46 resources so like if you have an ec2 instance and you say it has to access S3
539:48 instance and you say it has to access S3 you're going to be attaching a a role
539:50 you're going to be attaching a a role not a policy directly okay
539:53 not a policy directly okay [Music]
539:57 [Music] hey this is Andrew Brown from exam Pro
539:59 hey this is Andrew Brown from exam Pro and we are looking at I impulses a
540:01 and we are looking at I impulses a little bit closer here and they are
540:03 little bit closer here and they are written in Json and contain the
540:04 written in Json and contain the permissions which determine the API
540:06 permissions which determine the API actions that are allowed or denied um
540:08 actions that are allowed or denied um and rarely do I write these out by hand
540:11 and rarely do I write these out by hand uh because they have a a little wizard
540:13 uh because they have a a little wizard that you can use to write out the code
540:15 that you can use to write out the code for you but if you want to you
540:17 for you but if you want to you absolutely can write it out by hand but
540:18 absolutely can write it out by hand but we should know the contents of it and
540:20 we should know the contents of it and how these Json files work so the first
540:22 how these Json files work so the first thing is the version um which is the
540:24 thing is the version um which is the policy language version and it's been
540:26 policy language version and it's been 2012 for a very long time I don't see
540:28 2012 for a very long time I don't see that changing anytime soon if they
540:30 that changing anytime soon if they happen to
540:31 happen to change what or what the structure of the
540:33 change what or what the structure of the Json is then you have the statements and
540:36 Json is then you have the statements and these are for policy elements uh and
540:38 these are for policy elements uh and you're allowed to have multiples of them
540:40 you're allowed to have multiples of them so the idea is that this is the the
540:42 so the idea is that this is the the policies or permissions we should say uh
540:45 policies or permissions we should say uh that you uh plan on applying then you
540:48 that you uh plan on applying then you have the Sid this is a way of labeling
540:49 have the Sid this is a way of labeling your statements um this is useful for
540:52 your statements um this is useful for like visualization or for ref
540:53 like visualization or for ref referencing it for later on but a lot of
540:55 referencing it for later on but a lot of times you don't have to have a sid um
540:57 times you don't have to have a sid um then there's the effect it's either
540:59 then there's the effect it's either allow or deny then you have the action
541:01 allow or deny then you have the action so here we're saying give access to S3
541:05 so here we're saying give access to S3 for all actions under it there's another
541:07 for all actions under it there's another action down below where it's saying give
541:10 action down below where it's saying give access I'm going to get my pen tool out
541:11 access I'm going to get my pen tool out here just to create a service link rle
541:13 here just to create a service link rle so that's a cross account rule there
541:15 so that's a cross account rule there then there's the principal so this is
541:17 then there's the principal so this is the account user role or Federated user
541:19 the account user role or Federated user to which you would like to allow access
541:21 to which you would like to allow access or deny so we're specifically saying uh
541:24 or deny so we're specifically saying uh this IM user named Barkley um in our
541:27 this IM user named Barkley um in our adus account there uh then there are the
541:29 adus account there uh then there are the resources so the resources to which the
541:31 resources so the resources to which the action applies um so in this one up here
541:34 action applies um so in this one up here we are specifying a specific adus bucket
541:36 we are specifying a specific adus bucket here we're saying all possible resources
541:38 here we're saying all possible resources in in anus account and then the
541:40 in in anus account and then the condition so there's all sorts of
541:42 condition so there's all sorts of different kinds of conditions so this is
541:43 different kinds of conditions so this is a string like one and it's saying look
541:45 a string like one and it's saying look at the service name and if it starts
541:47 at the service name and if it starts with this or that then they'll have
541:48 with this or that then they'll have access to that so this person even
541:50 access to that so this person even though it says all resources they're
541:51 though it says all resources they're really only going to have access to RDS
541:53 really only going to have access to RDS okay
541:54 okay [Music]
541:58 [Music] so in this follow along we're going to
541:59 so in this follow along we're going to take a closer look at I am policies so
542:02 take a closer look at I am policies so go to the top and type in I am and what
542:04 go to the top and type in I am and what we'll do is make our way over here uh
542:07 we'll do is make our way over here uh all the way over to policies and what I
542:09 all the way over to policies and what I want to do is create a new policy that
542:11 want to do is create a new policy that only has access to uh um limited
542:14 only has access to uh um limited resources
542:15 resources so um let's say we want to create an
542:18 so um let's say we want to create an Amazon ec2 instance and that ec2
542:20 Amazon ec2 instance and that ec2 instance has access to a very particular
542:22 instance has access to a very particular S3 bucket so what I want you to do is
542:25 S3 bucket so what I want you to do is make your way over to S3 and we're going
542:27 make your way over to S3 and we're going to create ourselves a new
542:32 bucket and I'm going to go ahead and create a bucket here we're going to call
542:34 create a bucket here we're going to call this
542:35 this um policy
542:38 um policy tutorial and I'm going to just put a
542:40 tutorial and I'm going to just put a bunch of numbers here you'll have to
542:42 bunch of numbers here you'll have to randomize it for your use
542:44 randomize it for your use case and so now that we have our bucket
542:47 case and so now that we have our bucket what we're going to do is go ahead and
542:48 what we're going to do is go ahead and create a
542:54 policy and the policy is going to choose a service we're going to say S3 and what
542:56 a service we're going to say S3 and what I want to do is only be able to list out
542:58 I want to do is only be able to list out actions I'm going to expand this so I
543:00 actions I'm going to expand this so I don't want everything so we're just
543:01 don't want everything so we're just going to say list
543:02 going to say list buckets okay and then what we'll do is
543:07 buckets okay and then what we'll do is uh expand this here and I want to save
543:08 uh expand this here and I want to save for a particular bucket so we'll go back
543:11 for a particular bucket so we'll go back over here click into our
543:13 over here click into our bucket and uh we're going to go ahead
543:16 bucket and uh we're going to go ahead and set those
543:18 and set those permissions by finding that Arn we're
543:22 permissions by finding that Arn we're going to paste that
543:24 going to paste that we're going to paste that RN up there
543:25 we're going to paste that RN up there sometimes it's a bit tricky it vanishes
543:27 sometimes it's a bit tricky it vanishes on
543:27 on you and we could set other conditions if
543:30 you and we could set other conditions if we wanted to but this is pretty simple
543:32 we wanted to but this is pretty simple as it
543:33 as it is and so that's our rule here right so
543:36 is and so that's our rule here right so we're saying this policy allows us to
543:38 we're saying this policy allows us to list this bucket for that
543:40 list this bucket for that okay so what we'll do is go ahead and
543:42 okay so what we'll do is go ahead and hit next we'll hit review and we'll just
543:45 hit next we'll hit review and we'll just say my bucket
543:48 say my bucket policy and we'll create that policy
543:57 okay so there's a few other things I think that I'd like to do with this
543:58 think that I'd like to do with this policy I'm going to pull it back up here
544:00 policy I'm going to pull it back up here so if we want to find it uh they used to
544:03 so if we want to find it uh they used to be able to filter these based on the
544:04 be able to filter these based on the ones that you
544:06 ones that you created but
544:08 created but um yeah these are like the little icons
544:11 um yeah these are like the little icons so these are ones that I've created up
544:13 so these are ones that I've created up here and so there's my bucket
544:16 here and so there's my bucket policy and I feel like I want to update
544:19 policy and I feel like I want to update this policy to have a bit of extra
544:22 this policy to have a bit of extra information here so I'm going to go edit
544:24 information here so I'm going to go edit this
544:25 this policy no you know what I think this is
544:27 policy no you know what I think this is fine so what I want to do is now create
544:29 fine so what I want to do is now create a
544:34 ro and we're going to create a new role and I'm going to call this
544:36 and I'm going to call this um well before I do I need to choose
544:38 um well before I do I need to choose what it's for so it's going to be for
544:39 what it's for so it's going to be for ec2 so we're going to go ahead and hit
544:41 ec2 so we're going to go ahead and hit next we're going to choose our policy so
544:43 next we're going to choose our policy so my bucket policy there it is and I want
544:46 my bucket policy there it is and I want to add another one here because I want
544:48 to add another one here because I want to be able to use sessions manager
544:49 to be able to use sessions manager because I really don't want to use an
544:50 because I really don't want to use an SSH key to check that this works and
544:55 SSH key to check that this works and so um for this I I need to use SSM so
545:00 so um for this I I need to use SSM so I'm going to type in SSM
545:02 I'm going to type in SSM here and I'm going just make sure this
545:04 here and I'm going just make sure this is the new one so this policy will soon
545:06 is the new one so this policy will soon be deprecated use Amazon SSM manag for
545:09 be deprecated use Amazon SSM manag for instance should always open these up and
545:10 instance should always open these up and read them to see what they do and so
545:13 read them to see what they do and so that's the one that's going to allow us
545:14 that's the one that's going to allow us to access uh Simpson manager so we can
545:16 to access uh Simpson manager so we can use um sessions manager okay and so I'm
545:19 use um sessions manager okay and so I'm going to say my ec2 roll for S3
545:24 going to say my ec2 roll for S3 we going go ahead and create ourselves a
545:31 roll so now that we have our roll I'm going to go over to
545:33 going to go over to ec2 and I'm going to go ahead and launch
545:35 ec2 and I'm going to go ahead and launch myself a new
545:37 myself a new instance we're going to choose Amazon L
545:40 instance we're going to choose Amazon L 2 we're going to stick with T2 micro I'm
545:43 2 we're going to stick with T2 micro I'm going to go over to configuration here
545:45 going to go over to configuration here everything is fine here um I'm fine with
545:48 everything is fine here um I'm fine with all that storage is fine we'll go to
545:50 all that storage is fine we'll go to Security Group and I don't want any
545:52 Security Group and I don't want any ports open because I'm not going to be
545:54 ports open because I'm not going to be using
545:56 using SSH we're going to launch this instance
545:58 SSH we're going to launch this instance I don't even want to key
546:00 I don't even want to key pair
546:03 pair okay and then we're going to go over
546:05 okay and then we're going to go over here and so what we're waiting for is
546:07 here and so what we're waiting for is this instance to launch as that is going
546:09 this instance to launch as that is going what I want to do is go over to my S3
546:11 what I want to do is go over to my S3 bucket and I want to place something in
546:13 bucket and I want to place something in this bucket so I do have some files here
546:17 this bucket so I do have some files here um so what I'm going to
546:18 um so what I'm going to do is create a new folder here whoops uh
546:22 do is create a new folder here whoops uh I'm going to go back
546:24 I'm going to go back and I'm just going to create a folder
546:25 and I'm just going to create a folder first create a folder Enterprise
546:34 D and I'm going to click into this and then I'm going to upload all my images
546:36 then I'm going to upload all my images here so you'll have to find your own
546:38 here so you'll have to find your own images off the internet this is just the
546:40 images off the internet this is just the ones I have and we'll go ahead and
546:43 ones I have and we'll go ahead and upload
546:44 upload those give that a
546:53 moment okay and so we don't have access to read those files we'll adjust our
546:55 to read those files we'll adjust our policy as we go so that we can do that
546:58 policy as we go so that we can do that okay so this instance should be running
547:01 okay so this instance should be running um it does doesn't have the two status
547:03 um it does doesn't have the two status checks pass we should be able to uh
547:05 checks pass we should be able to uh connect to it so click on connect here
547:07 connect to it so click on connect here and so we have options like E2 instance
547:08 and so we have options like E2 instance connect sessions manager SSH client I
547:10 connect sessions manager SSH client I want you to go to sessions manager it
547:12 want you to go to sessions manager it says we weren't able to connect to your
547:14 says we weren't able to connect to your instance common reasons SSM agent wasn't
547:16 instance common reasons SSM agent wasn't installed we absolutely have it
547:17 installed we absolutely have it installed the required IM profile oh
547:20 installed the required IM profile oh right so we were supposed to attach I
547:23 right so we were supposed to attach I forgot we were supposed to attach an ion
547:24 forgot we were supposed to attach an ion profile right so an ion profile is the
547:27 profile right so an ion profile is the RO uh it or the it holds the role uh
547:32 RO uh it or the it holds the role uh that's going to give the permissions to
547:33 that's going to give the permissions to that instance and since we didn't add it
547:35 that instance and since we didn't add it we have to go retroactively added after
547:37 we have to go retroactively added after the
547:39 the fact and so I'm going to have to modify
547:41 fact and so I'm going to have to modify the IM roll and we're going to choose my
547:45 the IM roll and we're going to choose my ec2 roll for S3 and we're going to save
547:48 ec2 roll for S3 and we're going to save that and actually when that happens you
547:50 that and actually when that happens you have to reboot the machine you only have
547:53 have to reboot the machine you only have to do that if you have no Ro attached
547:55 to do that if you have no Ro attached like prior no profile attached and
547:57 like prior no profile attached and you're attaching for the first time but
547:59 you're attaching for the first time but after that you never have to reboot the
548:00 after that you never have to reboot the machine this is the only case where
548:01 machine this is the only case where you'd have to do
548:03 you'd have to do that that's why when I launch an ec2
548:05 that that's why when I launch an ec2 instance I always at least have the SSM
548:07 instance I always at least have the SSM R attached the managed one that gets
548:09 R attached the managed one that gets sessions manager so that I don't ever
548:10 sessions manager so that I don't ever have to do a reboot in case I have to
548:12 have to do a reboot in case I have to update the
548:14 update the policy and so we will give that a moment
548:18 policy and so we will give that a moment there it says initializing so I'm going
548:21 there it says initializing so I'm going to try again to connect to it okay
548:28 and we still don't have that option there um so I'm going to go back to my
548:31 there um so I'm going to go back to my instances I'm going to check to see if
548:33 instances I'm going to check to see if the RO the RO or policy is
548:35 the RO the RO or policy is attached or profile I should
548:47 here there it is and so if I click into this into the
548:50 is and so if I click into this into the r we can see that we have the Amazon SSM
548:54 r we can see that we have the Amazon SSM managed instance core there so that's
548:56 managed instance core there so that's set up and the my uh bucket policy so
549:00 set up and the my uh bucket policy so this has everything that it should be
549:03 this has everything that it should be able to do it no
549:10 problem okay so I'm going to try that again okay so now the connect shows up
549:13 again okay so now the connect shows up OS is finicky like that you just have to
549:15 OS is finicky like that you just have to have confidence in knowing what you're
549:17 have confidence in knowing what you're doing is correct okay we'll go ahead and
549:19 doing is correct okay we'll go ahead and hit
549:20 hit connect and I didn't have to use SSH
549:23 connect and I didn't have to use SSH keys or anything and this is a lot more
549:25 keys or anything and this is a lot more secure way to connect your instances
549:27 secure way to connect your instances when it logs Us in it's going to set us
549:28 when it logs Us in it's going to set us as the SSM user but we want to be
549:32 as the SSM user but we want to be the um the ec2 user
549:35 the um the ec2 user okay that's uh ads always makes their uh
549:38 okay that's uh ads always makes their uh am like their Linux versions as the ec2
549:41 am like their Linux versions as the ec2 user and that's what you're supposed to
549:42 user and that's what you're supposed to use but it's just you just that's how
549:45 use but it's just you just that's how you have to get to that you just have to
549:46 you have to get to that you just have to type that pseudo Su hyphen ec2 user okay
549:49 type that pseudo Su hyphen ec2 user okay just once and if you type who am I
549:52 just once and if you type who am I that's who you are if you type type exit
549:53 that's who you are if you type type exit you'll go back to that user so if I type
549:55 you'll go back to that user so if I type exit and I type who am I I'm now this
549:57 exit and I type who am I I'm now this person so I'm going to go back hit up go
549:59 person so I'm going to go back hit up go back in there type clear so now I want
550:02 back in there type clear so now I want to see if I have access to S3 so I have
550:04 to see if I have access to S3 so I have to do a S3 LS want to see if I can list
550:08 to do a S3 LS want to see if I can list buckets it says access
550:10 buckets it says access denied
550:12 denied so I mean that kind of makes sense
550:14 so I mean that kind of makes sense because if you have list buckets and
550:16 because if you have list buckets and we're just saying only that bucket that
550:17 we're just saying only that bucket that might not make a whole lot of
550:19 might not make a whole lot of sense so I'm GNA go back to my policy I
550:22 sense so I'm GNA go back to my policy I might just written a a crummy policy but
550:25 might just written a a crummy policy but we'll say I am here if we have that one
550:27 we'll say I am here if we have that one open we should just go
550:28 open we should just go here and click on this policy
550:34 here and click on this policy here I'm going to edit that
550:36 here I'm going to edit that policy so I'm going to do is I'm just
550:39 policy so I'm going to do is I'm just going to change it and we say all
550:40 going to change it and we say all resources review the policy save changes
550:43 resources review the policy save changes and we'll see how fast that
550:46 and we'll see how fast that propagates okay
550:57 because I'm pretty sure I don't have to do anything here it should just now give
550:59 do anything here it should just now give me full access to
551:01 me full access to S3 just going to keep on hitting up
551:04 S3 just going to keep on hitting up here so what I'm going to do is I'm just
551:06 here so what I'm going to do is I'm just going to take like a three four minute
551:07 going to take like a three four minute break going to get a drink I'm going to
551:09 break going to get a drink I'm going to go back here and see if this propagates
551:11 go back here and see if this propagates I'm pretty sure I don't have to do
551:12 I'm pretty sure I don't have to do anything for that to propagate and I
551:15 anything for that to propagate and I think that I've attached everything
551:16 think that I've attached everything correctly here
551:21 okay okay so I haven't had much luck here it's still having the same issue so
551:23 here it's still having the same issue so if that is happening what I'm going to
551:25 if that is happening what I'm going to do um is I'm just going to reboot it
551:28 do um is I'm just going to reboot it because maybe I didn't give it a good
551:30 because maybe I didn't give it a good opportunity to reboot there again I
551:32 opportunity to reboot there again I don't think we should have to reboot it
551:33 don't think we should have to reboot it every time when we're we're changing um
551:36 every time when we're we're changing um uh things there but we will give it
551:37 uh things there but we will give it another go here and see if that fixes
551:41 another go here and see if that fixes that problem there so no sessions manner
551:43 that problem there so no sessions manner is going to time out here which is
551:44 is going to time out here which is totally
551:46 totally fine it's going to kill that session
551:48 fine it's going to kill that session there um and so what we'll have to do is
551:51 there um and so what we'll have to do is close this out because there's not much
551:53 close this out because there's not much we can do with
551:54 we can do with that and we're going to go ahead and go
551:56 that and we're going to go ahead and go back to connect and so we're waiting for
551:58 back to connect and so we're waiting for this button to appear because it is
552:00 this button to appear because it is rebooting so if we want to monitor that
552:03 rebooting so if we want to monitor that stuff usually there is an option here to
552:07 stuff usually there is an option here to monitor where it'll show us the system
552:09 monitor where it'll show us the system logs of what it's doing so here it's
552:11 logs of what it's doing so here it's just like restarting the
552:23 machine I'm not sure if we expect to see something after
552:25 something after this so I can click that
552:33 there and uh yeah it's easy to get turned around this so I can connect to
552:35 turned around this so I can connect to it again
552:42 now we'll type in pseudo Su hyphen ec2 user ads S3
552:46 user ads S3 LS and we still
552:49 LS and we still have access deny for list buckets so if
552:52 have access deny for list buckets so if that's the case it could be that um
552:55 that's the case it could be that um sometimes you need other permissions
552:57 sometimes you need other permissions when doing list policy like uh list
552:59 when doing list policy like uh list buckets so if that's the case we're
553:01 buckets so if that's the case we're going to do a sanity check I'm just
553:03 going to do a sanity check I'm just going to say all permissions here okay
553:05 going to say all permissions here okay and this way there's no way that I've
553:06 and this way there's no way that I've set this incorrectly um it just has to
553:09 set this incorrectly um it just has to work now so type this
553:12 work now so type this in there we go okay so there has to be
553:15 in there we go okay so there has to be something more to it so just because you
553:16 something more to it so just because you say list buckets you know like means
553:19 say list buckets you know like means there must be more to it right so if I
553:21 there must be more to it right so if I go here to this
553:23 go here to this right and I say
553:24 right and I say whoops and I say uh list buckets here
553:27 whoops and I say uh list buckets here we'll say
553:29 we'll say copy paste
553:40 okay here it's saying maybe I need get object as well so I just know from using
553:44 object as well so I just know from using it us a long time that that's the case
553:47 it us a long time that that's the case that it could be more than one thing so
553:49 that it could be more than one thing so you know that was in the back of my mind
553:50 you know that was in the back of my mind that that could be happening and I guess
553:52 that that could be happening and I guess that is but notice that didn't have to
553:53 that is but notice that didn't have to restart my uh my server boot my server
553:55 restart my uh my server boot my server to get those to work um uh but anyway
553:59 to get those to work um uh but anyway let's go lock that down and see if we
554:00 let's go lock that down and see if we can just kind of make this uh more
554:02 can just kind of make this uh more focused so let's say um all resources
554:06 focused so let's say um all resources I'm going to
554:07 I'm going to specify the
554:10 specify the condition so I might want to just say
554:12 condition so I might want to just say for particular
554:14 for particular buckets we say
554:16 buckets we say specific when you checkbox everything
554:18 specific when you checkbox everything then you have to do this so for storage
554:19 then you have to do this so for storage accounts these are fine any for object
554:28 objects that could be something we'll say multi- region access bucket any
554:31 say multi- region access bucket any bucket but what I'm going to say is I
554:33 bucket but what I'm going to say is I want to only allow them to access things
554:35 want to only allow them to access things in a particular bucket and so if I go to
554:37 in a particular bucket and so if I go to Arn
554:39 Arn here um what is our bucket
554:51 name our bucket name is policy tutorial 34141
554:53 34141 whatever right and so we can actually
554:57 whatever right and so we can actually give it a wild card or we can say
555:00 give it a wild card or we can say Enterprise
555:03 Enterprise D and we learned this in the course that
555:05 D and we learned this in the course that uh you can provide arms with
555:08 uh you can provide arms with randomize things there I don't know if I
555:10 randomize things there I don't know if I spelled it wrong over here so I should
555:11 spelled it wrong over here so I should really double check I should probably
555:13 really double check I should probably just copy
555:21 it oops I just don't want to type it wrong
555:23 oops I just don't want to type it wrong and so
555:25 and so this
555:27 this okay means that we should only be able
555:29 okay means that we should only be able to get stuff from there I'm going to
555:31 to get stuff from there I'm going to review the policy let see if it takes
555:32 review the policy let see if it takes save the
555:35 save the changes and if I just view the Json
555:39 changes and if I just view the Json here notice it says anything from here
555:42 here notice it says anything from here right so allow S3 anything as long as
555:46 right so allow S3 anything as long as it's within here and then it also broke
555:47 it's within here and then it also broke it up into sub1 4 here okay um so anyway
555:51 it up into sub1 4 here okay um so anyway what I want to see is what
555:53 what I want to see is what happens if I upload something into the
555:56 happens if I upload something into the loose area here so I'm say
555:58 loose area here so I'm say upload and I'm going to just say add a
556:02 upload and I'm going to just say add a file we're just going to grab data here
556:05 file we're just going to grab data here and upload
556:06 and upload it go back to our bucket there's our
556:10 it go back to our bucket there's our file we have that stuff in there and so
556:11 file we have that stuff in there and so if I go back over to my ec2 instance
556:13 if I go back over to my ec2 instance which I'm still connected
556:15 which I'm still connected to uh who am I okay great clear um so
556:20 to uh who am I okay great clear um so I'm going to say ads S3 LS see if that
556:22 I'm going to say ads S3 LS see if that works still it does good and so what I
556:25 works still it does good and so what I want to do is see if I can copy a file
556:26 want to do is see if I can copy a file locally so I'm going to do Abus S3
556:31 locally so I'm going to do Abus S3 copy I think it was S3 a no it's just S3
556:35 copy I think it was S3 a no it's just S3 copy POC uh S3 SL SL
556:40 copy POC uh S3 SL SL policy
556:42 policy tutorial
556:45 tutorial 34 141 whoops
556:48 34 141 whoops 34 tutorial
556:51 34 tutorial hyphen
556:54 hyphen 34141
556:56 34141 slash Enterprise
556:59 slash Enterprise D data.jpg I think it's a JPG let's go
557:03 D data.jpg I think it's a JPG let's go double check yeah it is okay and then I
557:06 double check yeah it is okay and then I just want to say data.
557:09 just want to say data. jpg it downloaded it right so I'm going
557:12 jpg it downloaded it right so I'm going to remove that one and so now what I'm
557:14 to remove that one and so now what I'm going to do is I'm just going to see if
557:16 going to do is I'm just going to see if my policy is working or maybe my
557:18 my policy is working or maybe my permissions aren't exactly what I think
557:19 permissions aren't exactly what I think they are and I was able to download it
557:21 they are and I was able to download it so
557:23 so it's these policies can get kind of
557:25 it's these policies can get kind of tricky because like this one says allow
557:27 tricky because like this one says allow all actions for these but then these say
557:29 all actions for these but then these say all actions and
557:32 all actions and so that makes it hard because I want get
557:42 object so another thing we can do and if that one doesn't work really
557:44 do and if that one doesn't work really well I'm just going to write one by hand
557:47 well I'm just going to write one by hand it's not that scary to write these by
557:48 it's not that scary to write these by hand you just get used to it so I'm
557:50 hand you just get used to it so I'm going to say effect
558:01 deny deny
558:11 action S3 get object I believe that's what it
558:13 what it is
558:15 is resource and then I'm going to specify
558:17 resource and then I'm going to specify exactly the resource I don't want it to
558:18 exactly the resource I don't want it to allow so we're going to say
558:20 allow so we're going to say AR AWS s three three
558:24 AR AWS s three three colons policy
558:37 34141 uh and just say data.jpg now if this is not valid it's going to
558:39 now if this is not valid it's going to complain and say hey you didn't write
558:40 complain and say hey you didn't write this right and it and it's fine okay
558:44 this right and it and it's fine okay so we'll save those
558:47 so we'll save those changes and so that should deny access
558:50 changes and so that should deny access to that right
558:52 to that right hopefully I got the policy
558:59 right okay so that one doesn't work which is
559:00 which is fine and that one's fine so that worked
559:03 fine and that one's fine so that worked we were able to deny that but you can
559:05 we were able to deny that but you can see there's a little bit of an art to
559:06 see there's a little bit of an art to creating these policies uh as you make
559:08 creating these policies uh as you make more of them it becomes a lot easier so
559:11 more of them it becomes a lot easier so hopefully it's not too scary but uh
559:13 hopefully it's not too scary but uh that's all there really is uh to it that
559:15 that's all there really is uh to it that I want to show you today so what we're
559:16 I want to show you today so what we're going to do is clear out this bucket
559:18 going to do is clear out this bucket we're done with this bucket here so
559:19 we're done with this bucket here so we'll say delete whoops we got to empty
559:21 we'll say delete whoops we got to empty it first
559:27 and we'll just say permanently delete here okay and we will exit that out
559:31 here okay and we will exit that out we're going to go ahead and delete that
559:39 bucket grab its name here and uh we'll go back over
559:42 here and uh we'll go back over here I think I forgot to delete this
559:44 here I think I forgot to delete this Bucket from earlier I'm just going to
559:46 Bucket from earlier I'm just going to delete that because I don't need that
559:47 delete that because I don't need that bucket so that's okay with you just
559:50 bucket so that's okay with you just going to go ahead and delete that
559:53 going to go ahead and delete that and we have that ec2 instance running so
559:55 and we have that ec2 instance running so we want to stop
560:01 that go ahead and we're going to terminate that yes
560:04 terminate that yes please and then we'll go to IM and do
560:06 please and then we'll go to IM and do some
560:11 cleanup I have some custom roles I've been creating um you know from prior
560:13 been creating um you know from prior things a lot of those usually there's a
560:16 things a lot of those usually there's a way to uh We've redesigned it okay
560:19 way to uh We've redesigned it okay where's the redesign this is the
560:20 where's the redesign this is the redesign that can't be it because
560:22 redesign that can't be it because there'll be like rolls that ads makes I
560:24 there'll be like rolls that ads makes I think these are all rolls that I've
560:32 made um I don't want to delete service rolls but I want to get rid of some of
560:34 rolls but I want to get rid of some of these because I just have too many you
560:36 these because I just have too many you know it's getting out of hand for me and
560:39 know it's getting out of hand for me and I'm going to just see if it will let
560:42 I'm going to just see if it will let me
560:59 there we go just clean up a bit I still have a lot here but there's like service
561:00 have a lot here but there's like service roles that OS creates once and you
561:02 roles that OS creates once and you really don't want to delete those
561:05 really don't want to delete those because you
561:07 because you don't um and then I have a bunch of
561:09 don't um and then I have a bunch of these like I'm never going to use these
561:10 these like I'm never going to use these so I might as well detach them delete
561:18 detach you really don't want to keep like rolls that you're never going to
561:19 like rolls that you're never going to use
561:21 use around things like that like gauze we're
561:23 around things like that like gauze we're going to be using that
561:25 going to be using that again
561:43 created anyway you get the idea so uh yeah that's uh that's I am
561:45 yeah that's uh that's I am [Music]
561:48 [Music] okay principle of least privilege PP is
561:52 okay principle of least privilege PP is the computer computer security concept
561:53 the computer computer security concept of providing a user role or application
561:55 of providing a user role or application the least amount of permissions to
561:56 the least amount of permissions to perform an operation or an action and
561:59 perform an operation or an action and the way we can look at it is that we
562:01 the way we can look at it is that we have just enough AIS so Jaa permitting
562:04 have just enough AIS so Jaa permitting only the exact actions for the identity
562:06 only the exact actions for the identity perform a task and then we have just in
562:08 perform a task and then we have just in time jit permitting the smallest length
562:11 time jit permitting the smallest length of duration an identity can use
562:13 of duration an identity can use permission so usually when we're talking
562:14 permission so usually when we're talking about PLP it's usually a focus on here U
562:17 about PLP it's usually a focus on here U but now these days uh there's a larger
562:20 but now these days uh there's a larger focus on jit as well and so J is the
562:22 focus on jit as well and so J is the difference between having longlived um
562:25 difference between having longlived um uh permissions or access Keys versus
562:27 uh permissions or access Keys versus short-lived ones and the most
562:29 short-lived ones and the most Progressive thing in PP is now
562:31 Progressive thing in PP is now risk-based adaptive policies so each
562:33 risk-based adaptive policies so each attempt to access a resource generates a
562:35 attempt to access a resource generates a risk score of How likely the request is
562:37 risk score of How likely the request is to be from a compromized source so the
562:39 to be from a compromized source so the risk score could be based on many
562:41 risk score could be based on many factors such as device user location IP
562:43 factors such as device user location IP address what service is being accessed
562:45 address what service is being accessed and when did they use MFA did they use
562:47 and when did they use MFA did they use Biometrics things like that and right
562:49 Biometrics things like that and right now as of this time itus does not have a
562:52 now as of this time itus does not have a risk-based adaptive policies built into
562:55 risk-based adaptive policies built into I am you can roll your own um what's
562:58 I am you can roll your own um what's interesting is Cognito has risk-based
563:00 interesting is Cognito has risk-based adaptive policies they call like um
563:02 adaptive policies they call like um adaptive authentication but that's for
563:04 adaptive authentication but that's for user pools and not identity pools user
563:07 user pools and not identity pools user pools is for getting access to an app uh
563:09 pools is for getting access to an app uh that you have built through an ipd where
563:12 that you have built through an ipd where identity pools in cognito is about
563:15 identity pools in cognito is about getting access to aabus resources so uh
563:17 getting access to aabus resources so uh you know I'm sure abos will get it
563:19 you know I'm sure abos will get it eventually but they just don't have it
563:20 eventually but they just don't have it right now and you have to rely on third
563:22 right now and you have to rely on third part party um identity Solutions uh to
563:25 part party um identity Solutions uh to get risk-based adaptive policies now
563:27 get risk-based adaptive policies now talking about just enough access and
563:29 talking about just enough access and just in time just in time is like you
563:31 just in time just in time is like you think how would you do that with the ads
563:32 think how would you do that with the ads you just add and remove permissions
563:33 you just add and remove permissions manually well one thing you could do is
563:35 manually well one thing you could do is use something like console me so this is
563:37 use something like console me so this is an open- Source Netflix project to self-
563:39 an open- Source Netflix project to self- serve short-lived IM policies so an end
563:42 serve short-lived IM policies so an end user can access ad resources while
563:44 user can access ad resources while enforcing Jaa and jit and so there's a
563:46 enforcing Jaa and jit and so there's a repo there as well um the idea is they
563:49 repo there as well um the idea is they have like this self- sered wizard so you
563:50 have like this self- sered wizard so you say I want these things and then the
563:52 say I want these things and then the machine decides okay you can have them
563:54 machine decides okay you can have them or you you don't need them and it just
563:56 or you you don't need them and it just freezes you up asking people and
563:58 freezes you up asking people and worrying about the length and stuff like
564:00 worrying about the length and stuff like that
564:01 that [Music]
564:04 [Music] okay hey this is Andrew Brown from exam
564:06 okay hey this is Andrew Brown from exam Pro and we are taking a look at the
564:08 Pro and we are taking a look at the idibus root user uh and this gets
564:11 idibus root user uh and this gets confusing because there's an account
564:13 confusing because there's an account root user and regular user so let's
564:15 root user and regular user so let's distinguish what those three things are
564:17 distinguish what those three things are so here we have an adus account and the
564:18 so here we have an adus account and the account which holds all the adus
564:20 account which holds all the adus resources including the different types
564:21 resources including the different types of user
564:22 of user then you have the root user this is a
564:24 then you have the root user this is a special account with full access that
564:26 special account with full access that cannot be deleted and then you have just
564:28 cannot be deleted and then you have just a user and this is a user for common
564:31 a user and this is a user for common tasks that is assigned permissions so
564:34 tasks that is assigned permissions so just understand that sometimes people
564:35 just understand that sometimes people say it was account they're actually
564:36 say it was account they're actually referring to the user and sometimes when
564:38 referring to the user and sometimes when they're saying account they're actually
564:39 they're saying account they're actually referring to the AES account that holds
564:41 referring to the AES account that holds the users I know it's confusing it just
564:43 the users I know it's confusing it just it's based on what people decide the
564:45 it's based on what people decide the context is when they're speaking so the
564:47 context is when they're speaking so the ads account user is a special user who's
564:49 ads account user is a special user who's created at the time of the ABS account
564:51 created at the time of the ABS account creation
564:52 creation and they can do uh they have a lot of
564:54 and they can do uh they have a lot of conditions around them so the re user
564:56 conditions around them so the re user account uses an email and password to
564:58 account uses an email and password to log in as opposed to the regular user
565:01 log in as opposed to the regular user who's going to provide their account ID
565:02 who's going to provide their account ID Alias username and password the root
565:05 Alias username and password the root user account cannot be deleted the root
565:07 user account cannot be deleted the root user account has full permissions to the
565:09 user account has full permissions to the account and its permissions and cannot
565:10 account and its permissions and cannot be limited and when we say it cannot be
565:12 be limited and when we say it cannot be limited we're saying that if you take an
565:14 limited we're saying that if you take an IM am policy to explicitly deny the user
565:16 IM am policy to explicitly deny the user access resources it's not something you
565:18 access resources it's not something you can do however you can do it in the case
565:20 can do however you can do it in the case of adab organizations service control
565:23 of adab organizations service control policies because a service control
565:25 policies because a service control policy applies to a bunch of accounts so
565:27 policy applies to a bunch of accounts so it just it's one level above and so that
565:29 it just it's one level above and so that is a way of limiting root users but
565:31 is a way of limiting root users but generally you can't limit them within
565:32 generally you can't limit them within their own account uh there can only be
565:35 their own account uh there can only be one root user uh per ad of us account
565:37 one root user uh per ad of us account the root user is instead for very spe
565:40 the root user is instead for very spe specific and specialized tasks that are
565:42 specific and specialized tasks that are infrequently or rarely performed and
565:43 infrequently or rarely performed and there's a big list and we'll get into
565:45 there's a big list and we'll get into that here in a moment and the root uh
565:47 that here in a moment and the root uh account should uh not be used for daily
565:49 account should uh not be used for daily or common tasks it's strong strongly
565:51 or common tasks it's strong strongly recommended to to never use the root
565:53 recommended to to never use the root users access keys because you can
565:55 users access keys because you can generate those and use them it's
565:56 generate those and use them it's strongly recommended to turn on MFA for
565:59 strongly recommended to turn on MFA for the root user and AD us will bug you to
566:01 the root user and AD us will bug you to no ends to tell you to turn it on so
566:03 no ends to tell you to turn it on so let's talk about the uh tasks that you
566:06 let's talk about the uh tasks that you should be performing with a root user
566:07 should be performing with a root user and only the root user can perform so
566:10 and only the root user can perform so changing your account settings this
566:11 changing your account settings this includes account name email address root
566:13 includes account name email address root user password root user access Keys
566:16 user password root user access Keys other account settings such as contact
566:17 other account settings such as contact information payment currency preference
566:19 information payment currency preference regions do not require the root user
566:22 regions do not require the root user credentials so not everything um restore
566:25 credentials so not everything um restore IM user permissions so if there's an i
566:28 IM user permissions so if there's an i IM admin so it's just a user that has
566:30 IM admin so it's just a user that has admin access who actually revokes their
566:32 admin access who actually revokes their own permissions you can sign into the
566:33 own permissions you can sign into the root user to edit policies and restore
566:35 root user to edit policies and restore those permissions um so you can also
566:37 those permissions um so you can also activate IM access to the billing and
566:40 activate IM access to the billing and cost Management console you can view
566:42 cost Management console you can view certain tax invoices you can close your
566:45 certain tax invoices you can close your ads account you can change or cancel
566:47 ads account you can change or cancel your adus support plan register as a
566:49 your adus support plan register as a seller in the reserved instance
566:50 seller in the reserved instance Marketplace enable MFA delete on S3
566:53 Marketplace enable MFA delete on S3 buckets edit or delete an Amazon S3
566:56 buckets edit or delete an Amazon S3 bucket policy that includes an invalid
566:59 bucket policy that includes an invalid VPC ID or VPC endpoint ID sign up for
567:03 VPC ID or VPC endpoint ID sign up for govcloud and something that's not in
567:04 govcloud and something that's not in here which this I took this from the
567:06 here which this I took this from the documentation but uh you can use the
567:08 documentation but uh you can use the adus uh account user to create the
567:10 adus uh account user to create the organization you can't create that with
567:12 organization you can't create that with any other user so um you know the ones I
567:14 any other user so um you know the ones I highlighted in red are very likely to
567:16 highlighted in red are very likely to show up your exam and that's uh why I
567:18 show up your exam and that's uh why I highlighted them there for you but there
567:20 highlighted them there for you but there you go
567:25 [Music] hey this is Andre Brown from exam Pro
567:27 hey this is Andre Brown from exam Pro and we are taking a look at adus single
567:29 and we are taking a look at adus single sign on also known as adus SSO and so
567:32 sign on also known as adus SSO and so this is where you create or connect your
567:33 this is where you create or connect your Workforce identities in adabs once and
567:35 Workforce identities in adabs once and manage access centrally across your adus
567:38 manage access centrally across your adus organization so the idea here is you're
567:40 organization so the idea here is you're going to choose your identity Source
567:41 going to choose your identity Source whether it's it SSO itself active
567:44 whether it's it SSO itself active directory samle 2.0 IDP you're going to
567:47 directory samle 2.0 IDP you're going to M manage user permission centrally to
567:49 M manage user permission centrally to ads accounts applications samle
567:51 ads accounts applications samle application
567:53 application and it uses it can you get single click
567:55 and it uses it can you get single click access to all these things so you know
567:56 access to all these things so you know just to kind of zoom in on this graphic
567:59 just to kind of zoom in on this graphic here uh you know you have your on
568:01 here uh you know you have your on premise active directory it's
568:04 premise active directory it's establishing a ad trust connection over
568:06 establishing a ad trust connection over to Able single sign on you're going to
568:09 to Able single sign on you're going to be able to apply permissions to access
568:11 be able to apply permissions to access resources within your adus account so
568:13 resources within your adus account so via adus organizations in your
568:15 via adus organizations in your organizational units down to your
568:17 organizational units down to your resources you can also use ads SSO to
568:20 resources you can also use ads SSO to access custom samle based application so
568:23 access custom samle based application so you know if I built a web app and I uh
568:25 you know if I built a web app and I uh like the exam Pro platform and I wanted
568:28 like the exam Pro platform and I wanted to use sample based uh connections for
568:31 to use sample based uh connections for single sign on there I could do that as
568:33 single sign on there I could do that as well and you can connect out SSO access
568:35 well and you can connect out SSO access to your business Cloud application so
568:37 to your business Cloud application so Office 365 Dropbox slack things like
568:40 Office 365 Dropbox slack things like that so there you
568:41 that so there you [Music]
568:45 [Music] go let's take a look here at application
568:47 go let's take a look here at application integration so this is the process of
568:49 integration so this is the process of letting to Independent applications to
568:51 letting to Independent applications to community Comm unicate and work with
568:53 community Comm unicate and work with each other commonly facilitated by an
568:55 each other commonly facilitated by an intermediate system so Cloud workloads
568:58 intermediate system so Cloud workloads uh strongly encourage systems and
569:00 uh strongly encourage systems and services to be Loosely coupled and so
569:02 services to be Loosely coupled and so inabus has many services for the
569:04 inabus has many services for the specific purpose of application
569:05 specific purpose of application integration and these are based around
569:08 integration and these are based around common systems or design patterns that
569:10 common systems or design patterns that utilize application integration and this
569:12 utilize application integration and this would be things like queuing streaming
569:15 would be things like queuing streaming Pub sub API gateways State machines
569:18 Pub sub API gateways State machines event buses and I'm sure there are more
569:21 event buses and I'm sure there are more but that's what I could uh think about
569:23 but that's what I could uh think about that are the most common ones
569:25 that are the most common ones [Music]
569:28 [Music] okay so to understand queuing we need to
569:31 okay so to understand queuing we need to know what is a messaging system so this
569:34 know what is a messaging system so this is used to provide asynchronous
569:35 is used to provide asynchronous communication and decouple processes via
569:37 communication and decouple processes via messages and events from a sender
569:39 messages and events from a sender receiver or a producer and a consumer so
569:42 receiver or a producer and a consumer so a queing system is a messaging system
569:45 a queing system is a messaging system that generally will delete messages once
569:46 that generally will delete messages once they are consumed it's for simple
569:49 they are consumed it's for simple communication it's not real time you
569:50 communication it's not real time you have to pull the data it's not reactive
569:53 have to pull the data it's not reactive and uh a good analogy would be imagine
569:55 and uh a good analogy would be imagine people that are queuing in a line to go
569:57 people that are queuing in a line to go do something so fre TOS it's called
570:01 do something so fre TOS it's called Simple queuing service sqs it's a fully
570:03 Simple queuing service sqs it's a fully managed queuing service that enables you
570:05 managed queuing service that enables you to decouple and scale microservices
570:07 to decouple and scale microservices distributed systems and serverless
570:09 distributed systems and serverless applications so a very common use case
570:11 applications so a very common use case in a web application would be to queue
570:13 in a web application would be to queue up transactional emails uh to be sent
570:16 up transactional emails uh to be sent like sign up reset password and the
570:18 like sign up reset password and the reason why we have queing to decouple uh
570:20 reason why we have queing to decouple uh those kind of actions is that if you had
570:22 those kind of actions is that if you had a long running task um and you had too
570:25 a long running task um and you had too many of them it could hang your
570:27 many of them it could hang your applications so by decoupling them and
570:29 applications so by decoupling them and letting a separate compute uh service
570:31 letting a separate compute uh service take care of that um that would be
570:33 take care of that um that would be something that would be very useful
570:35 something that would be very useful [Music]
570:38 [Music] okay let's take a look here at streaming
570:41 okay let's take a look here at streaming and so this is a different kind of
570:43 and so this is a different kind of messaging system um but the idea here is
570:45 messaging system um but the idea here is you have multiple cons consumers that
570:47 you have multiple cons consumers that can react to events and so in streaming
570:50 can react to events and so in streaming we call messages events and then in a
570:52 we call messages events and then in a queing system we just call them messages
570:54 queing system we just call them messages but events live in the Stream for long
570:56 but events live in the Stream for long periods of time so complex operations
570:58 periods of time so complex operations can be applied and generally streaming
571:00 can be applied and generally streaming is used for Real Time stuff whereas
571:02 is used for Real Time stuff whereas queuing is not necessarily real time and
571:06 queuing is not necessarily real time and so ad's solution here is Amazon Kinesis
571:09 so ad's solution here is Amazon Kinesis you could also use Kafka but we'll focus
571:10 you could also use Kafka but we'll focus on Kinesis here so Amazon Kinesis is the
571:13 on Kinesis here so Amazon Kinesis is the adist fully managed solution for
571:14 adist fully managed solution for collecting processing and analyzing
571:16 collecting processing and analyzing streaming data in the cloud so the idea
571:18 streaming data in the cloud so the idea is that you have these producers so that
571:21 is that you have these producers so that are producing events could be ec2
571:22 are producing events could be ec2 instances mobile devices could be a
571:25 instances mobile devices could be a computer or traditional server they're
571:28 computer or traditional server they're going to go into the data stream there's
571:30 going to go into the data stream there's a bunch of shards that scale and there's
571:31 a bunch of shards that scale and there's consumers on the other side so maybe red
571:33 consumers on the other side so maybe red shift wants that data Dynamo DB S3 or
571:36 shift wants that data Dynamo DB S3 or EMR okay but the thing you have to
571:38 EMR okay but the thing you have to remember is that streaming Is For Real
571:40 remember is that streaming Is For Real Time data and as you can imagine because
571:43 Time data and as you can imagine because it's real time and it's doing a lot more
571:44 it's real time and it's doing a lot more work than um a queuing system it's going
571:47 work than um a queuing system it's going to cost more okay
571:55 so we have another type of messaging system known as pubsub so this stands
571:58 system known as pubsub so this stands for publish subscribe pattern commonly
572:01 for publish subscribe pattern commonly implemented in messaging systems and a
572:03 implemented in messaging systems and a pub sub system the sender of messages
572:05 pub sub system the sender of messages the Publishers do not send their message
572:07 the Publishers do not send their message directly to receivers they instead send
572:09 directly to receivers they instead send their messages to an event bus the event
572:11 their messages to an event bus the event bus categorizes their messages into
572:13 bus categorizes their messages into groups then receivers of messages
572:15 groups then receivers of messages subscribers subscribe to these groups
572:17 subscribers subscribe to these groups whenever new messages appear within
572:19 whenever new messages appear within their subscriptions the messages are
572:22 their subscriptions the messages are immediately delivered to them so the
572:24 immediately delivered to them so the idea is you have Publishers event bus
572:25 idea is you have Publishers event bus subscribers and event buses appear more
572:28 subscribers and event buses appear more than once so it actually appears in
572:29 than once so it actually appears in streaming appears in this Pub sub model
572:32 streaming appears in this Pub sub model and then it can appear in other
572:34 and then it can appear in other variations so you're going to hear it
572:35 variations so you're going to hear it more than once the word event bus um so
572:37 more than once the word event bus um so the idea here is the publisher has no
572:39 the idea here is the publisher has no knowledge of who the subscribers are
572:41 knowledge of who the subscribers are subscribers do not pull for messages
572:42 subscribers do not pull for messages messages are instead automatically
572:44 messages are instead automatically immediately pushed to the subscribers
572:46 immediately pushed to the subscribers and messages and events are
572:47 and messages and events are interchangeable terms in Pub sub all
572:50 interchangeable terms in Pub sub all right and so you know the idea here with
572:53 right and so you know the idea here with Publisher subscribers just imagine
572:55 Publisher subscribers just imagine getting like a um a magazine
572:57 getting like a um a magazine subscription right if you think of that
572:58 subscription right if you think of that you kind of think of the mechanisms that
573:00 you kind of think of the mechanisms that are going here in terms of practicality
573:02 are going here in terms of practicality it's very common to use these as a
573:04 it's very common to use these as a real-time chat system or a web hook
573:07 real-time chat system or a web hook system so you know hopefully that gives
573:09 system so you know hopefully that gives you an idea there in terms of aws's
573:10 you an idea there in terms of aws's solution we're using simple notification
573:12 solution we're using simple notification service SNS this is a highly available
573:15 service SNS this is a highly available durable secure fully managed Pub sub
573:17 durable secure fully managed Pub sub messaging service that enables you to
573:20 messaging service that enables you to decouple micros Services distributed
573:22 decouple micros Services distributed systems and serverless applications so
573:25 systems and serverless applications so here we have a variety of Publishers
573:27 here we have a variety of Publishers like the SDK the CLI cloudwatch a with
573:30 like the SDK the CLI cloudwatch a with Services you'll have your SNS topic you
573:33 Services you'll have your SNS topic you can uh filter things fan them out and
573:35 can uh filter things fan them out and then you have your subscribers so Lambda
573:36 then you have your subscribers so Lambda sqs emails HPS looks very similar to
573:40 sqs emails HPS looks very similar to streaming but again you know um you know
573:42 streaming but again you know um you know there's not a lot of communication going
573:44 there's not a lot of communication going back between it it's just Publishers and
573:46 back between it it's just Publishers and subscribers and it's limited to you know
573:50 subscribers and it's limited to you know these things here so it's a very managed
573:52 these things here so it's a very managed service right whereas uh Kinesis you can
573:55 service right whereas uh Kinesis you can do a lot more with it
573:57 do a lot more with it [Music]
574:01 [Music] okay so what is API Gateway well it is a
574:05 okay so what is API Gateway well it is a program that sits between a single entry
574:07 program that sits between a single entry point and a and multiple backends API
574:09 point and a and multiple backends API Gateway allows for throttling logging
574:11 Gateway allows for throttling logging routing logic or formatting of the
574:13 routing logic or formatting of the requests and response when we say
574:15 requests and response when we say request and response we're talking about
574:17 request and response we're talking about https uh requests and responses and so
574:21 https uh requests and responses and so the service for ads is called Amazon API
574:23 the service for ads is called Amazon API Gateway so API Gateway is just a type of
574:26 Gateway so API Gateway is just a type of pattern and this is the few cases where
574:28 pattern and this is the few cases where ADS has named the thing after what it is
574:32 ADS has named the thing after what it is and so we have Amazon API Gateway which
574:34 and so we have Amazon API Gateway which is a solution for creating secure apis
574:36 is a solution for creating secure apis in your Cloud environment at any scale
574:39 in your Cloud environment at any scale create apis that act as a front door for
574:41 create apis that act as a front door for applications to Access Data Business
574:42 applications to Access Data Business logic or functionality from backend
574:45 logic or functionality from backend services so the idea is that you have
574:47 services so the idea is that you have data coming in from uh mobile apps web
574:49 data coming in from uh mobile apps web apps iot devices and you Define the API
574:53 apps iot devices and you Define the API calls and then you say where do you want
574:55 calls and then you say where do you want them to go so maybe tasks are going to
574:56 them to go so maybe tasks are going to go to your lambdas um and then other
574:59 go to your lambdas um and then other routes are going to go to RDS Kinesis
575:01 routes are going to go to RDS Kinesis ec2 uh or your web application and so
575:05 ec2 uh or your web application and so these are really great for having um
575:07 these are really great for having um this uh being able to Define your API
575:10 this uh being able to Define your API routes and change them on the Fly and
575:12 routes and change them on the Fly and then and always route them to the same
575:14 then and always route them to the same place
575:15 place [Music]
575:19 [Music] okay so what is a state machine it is an
575:22 okay so what is a state machine it is an abstract model which decides how one
575:24 abstract model which decides how one state moves to another based on a series
575:25 state moves to another based on a series ofad conditions think of a state machine
575:28 ofad conditions think of a state machine like a flowchart and for AWS the
575:30 like a flowchart and for AWS the solution here is adus Step function so
575:32 solution here is adus Step function so coordinate multiple adus Services into a
575:34 coordinate multiple adus Services into a serverless workflow a graphical console
575:37 serverless workflow a graphical console to visualize the components of your
575:38 to visualize the components of your application as a series of steps
575:40 application as a series of steps automatically trigger and track each
575:42 automatically trigger and track each step and retries when there are errors
575:45 step and retries when there are errors so your application executes in order as
575:47 so your application executes in order as expected every time logs the state of
575:50 expected every time logs the state of each step so when things go wrong you
575:52 each step so when things go wrong you can diagnose and debug problems quickly
575:55 can diagnose and debug problems quickly and so here's the example of using a
575:57 and so here's the example of using a bunch of um uh steps together on the uh
576:02 bunch of um uh steps together on the uh the adus step functions service and so
576:05 the adus step functions service and so you know this is generally applied for
576:06 you know this is generally applied for servess workflows but it is something
576:08 servess workflows but it is something that is very useful in application
576:10 that is very useful in application integration
576:11 integration [Music]
576:15 [Music] okay so what is an event bus an event
576:18 okay so what is an event bus an event bus receives events from a source and
576:19 bus receives events from a source and routes events to a Target based on rules
576:22 routes events to a Target based on rules so I'll get my pen tool out here so we
576:24 so I'll get my pen tool out here so we have an event it enters the event bus we
576:25 have an event it enters the event bus we have a rules tell it to go to the Target
576:27 have a rules tell it to go to the Target it's that simple and we have been seeing
576:30 it's that simple and we have been seeing event buses in other things like uh
576:33 event buses in other things like uh streaming and uh Pub sub but adus has
576:37 streaming and uh Pub sub but adus has this kind of event bus offering uh that
576:39 this kind of event bus offering uh that is kind of uh high level it's called
576:41 is kind of uh high level it's called event bridge and it's a service event
576:42 event bridge and it's a service event bus service that is used for application
576:44 bus service that is used for application integration by streaming realtime data
576:46 integration by streaming realtime data to your applications the service was
576:48 to your applications the service was formerly known as event Amazon
576:50 formerly known as event Amazon cloudwatch events they gave give it a
576:51 cloudwatch events they gave give it a renaming to give it a a better um
576:54 renaming to give it a a better um opportunity for users to know that it's
576:57 opportunity for users to know that it's there to use uh and they also extended
576:59 there to use uh and they also extended its
577:00 its capabilities and so the thing is is that
577:02 capabilities and so the thing is is that a lot of AD services are always
577:03 a lot of AD services are always admitting events and they're already
577:05 admitting events and they're already going into this bus and so if you
577:06 going into this bus and so if you utilize this service um it's a lot
577:08 utilize this service um it's a lot easier than having to roll your own
577:09 easier than having to roll your own thing uh with other services so Amazon
577:13 thing uh with other services so Amazon event bridge will just Define an event
577:14 event bridge will just Define an event bus so there is an event bus holds event
577:16 bus so there is an event bus holds event data defines the rules on event bus to
577:18 data defines the rules on event bus to react to events you always get a default
577:20 react to events you always get a default event for every single adus account you
577:22 event for every single adus account you can create custom event buses scope to
577:24 can create custom event buses scope to multiple accounts or other adus accounts
577:26 multiple accounts or other adus accounts you have a SAS event bus scope to
577:28 you have a SAS event bus scope to thirdparty SAS providers you have
577:30 thirdparty SAS providers you have producers these are ad services that
577:31 producers these are ad services that emit events you have events these are
577:34 emit events you have events these are data emitted by Services they're jent
577:35 data emitted by Services they're jent objects that uh travel the stream within
577:37 objects that uh travel the stream within the event bus you have partnered sources
577:39 the event bus you have partnered sources these are third-party apps that can emit
577:42 these are third-party apps that can emit events to event buses you have rules
577:44 events to event buses you have rules these determine what events to capture
577:45 these determine what events to capture and pass to targets and then targets
577:47 and pass to targets and then targets which are a services that consume events
577:50 which are a services that consume events so yeah it's all just this great
577:52 so yeah it's all just this great built-in um uh uh stuff that's going on
577:55 built-in um uh uh stuff that's going on here and so you know there there might
577:57 here and so you know there there might be a case where you can use event bridge
577:59 be a case where you can use event bridge and save your time uh a lot of time and
578:01 and save your time uh a lot of time and effort uh doing application integration
578:04 effort uh doing application integration [Music]
578:07 [Music] okay hey this is Andrew Brown from exam
578:09 okay hey this is Andrew Brown from exam Pro and we are taking a look at
578:11 Pro and we are taking a look at application integration services at a
578:13 application integration services at a glance here so let's get through them so
578:15 glance here so let's get through them so the first is simple notification service
578:17 the first is simple notification service SNS this is a pub sub messaging system
578:20 SNS this is a pub sub messaging system sends notific ation via various formats
578:22 sends notific ation via various formats such as plain text email htps web hooks
578:25 such as plain text email htps web hooks SMS text messages sqs and Lambda pushes
578:29 SMS text messages sqs and Lambda pushes messages which are then sent to
578:31 messages which are then sent to subscribers you have sqs this is a
578:33 subscribers you have sqs this is a queuing messaging system or service that
578:37 queuing messaging system or service that sends events to a queue other
578:39 sends events to a queue other applications pull the queue for messages
578:40 applications pull the queue for messages commonly used for background jobs we
578:42 commonly used for background jobs we have step functions this is a state
578:44 have step functions this is a state machine service it is it coordinates
578:46 machine service it is it coordinates multiple a Services into a servess
578:48 multiple a Services into a servess workflow easily share data among lambdas
578:51 workflow easily share data among lambdas have a group of lambdas wait for each
578:53 have a group of lambdas wait for each other create logical steps also works
578:55 other create logical steps also works with fargate tasks we have a rent Bridge
578:57 with fargate tasks we have a rent Bridge formerly known as cloudwatch events it
578:59 formerly known as cloudwatch events it is a service event bus that makes it
579:01 is a service event bus that makes it easy to connect applications together
579:03 easy to connect applications together from your own application thirdparty
579:04 from your own application thirdparty services and adus services then there's
579:06 services and adus services then there's Kinesis a real-time streaming data
579:08 Kinesis a real-time streaming data service creates producers which send
579:10 service creates producers which send data to a stream multiple consumers can
579:12 data to a stream multiple consumers can consume data within a stream used for
579:14 consume data within a stream used for realtime analytics click streams
579:16 realtime analytics click streams ingesting data from a fleet of iot
579:18 ingesting data from a fleet of iot devices you have Amazon mq this is is a
579:21 devices you have Amazon mq this is is a manage message broker service that uses
579:23 manage message broker service that uses Apachi active mq so if you want to use
579:26 Apachi active mq so if you want to use Apachi active mq there it is manage
579:29 Apachi active mq there it is manage kofka service and this gets me every
579:31 kofka service and this gets me every time because it says
579:33 time because it says msk and that is the proper
579:35 msk and that is the proper initialization but you'd think it'd be
579:37 initialization but you'd think it'd be MKS it is a fully managed Apachi Kafka
579:40 MKS it is a fully managed Apachi Kafka service kofka is an open source platform
579:42 service kofka is an open source platform for building realtime streaming data
579:44 for building realtime streaming data pipelines and applications similar to
579:45 pipelines and applications similar to Kinesis but more robust very popular by
579:48 Kinesis but more robust very popular by the way we have API Gateway a fully
579:50 the way we have API Gateway a fully managed service for developers to create
579:52 managed service for developers to create publish maintain Monitor and secure apis
579:54 publish maintain Monitor and secure apis you can create API endpoints and wrote
579:56 you can create API endpoints and wrote them to ad Services we have appsync this
579:58 them to ad Services we have appsync this is a fully managed graphql service
580:01 is a fully managed graphql service graphql is an open- Source agnostic
580:02 graphql is an open- Source agnostic query adapter that allows you to query
580:04 query adapter that allows you to query data from many different data sources so
580:07 data from many different data sources so there you
580:08 there you [Music]
580:12 [Music] go hey this is Andrew Brown from exam
580:15 go hey this is Andrew Brown from exam Pro and we are comparing virtual
580:16 Pro and we are comparing virtual machines to Containers so I know we
580:19 machines to Containers so I know we covered this prior but I just want to do
580:20 covered this prior but I just want to do it one more time just to make sure that
580:22 it one more time just to make sure that we fundamentally understand the
580:23 we fundamentally understand the difference before we jump into
580:25 difference before we jump into containers so the idea is that if you
580:27 containers so the idea is that if you were to request an ec2 instance it has a
580:29 were to request an ec2 instance it has a host operating system that we don't
580:31 host operating system that we don't really know much about but we don't
580:33 really know much about but we don't really need to know uh and then the idea
580:35 really need to know uh and then the idea is you have a hypervisor which allows
580:37 is you have a hypervisor which allows you to deploy virtual
580:39 you to deploy virtual machines and so when you launch an ec2
580:41 machines and so when you launch an ec2 instance you're actually launching a VM
580:43 instance you're actually launching a VM on top of a hypervisor on a server uh
580:45 on top of a hypervisor on a server uh with on uh within the adabs uh data
580:47 with on uh within the adabs uh data centers servers there and you're going
580:49 centers servers there and you're going to choose an operating system so like
580:51 to choose an operating system so like fun to and it might come with some
580:52 fun to and it might come with some pre-installed packages or you're going
580:54 pre-installed packages or you're going to install your own libraries packages
580:55 to install your own libraries packages and binaries and then you're going to
580:57 and binaries and then you're going to decide what kind of workloads you want
580:58 decide what kind of workloads you want to run on there so it could be D Jango
581:00 to run on there so it could be D Jango uh mongodb so your database and some
581:03 uh mongodb so your database and some kind of queuing system like rabbit mq
581:05 kind of queuing system like rabbit mq the difficulties with virtual machines
581:07 the difficulties with virtual machines you're always going to end up with some
581:09 you're always going to end up with some unused space because you're going to
581:10 unused space because you're going to want to have some Headroom uh to make
581:13 want to have some Headroom uh to make sure that uh you know if you know Dango
581:15 sure that uh you know if you know Dango needs more memory or or mongod DB needs
581:18 needs more memory or or mongod DB needs more storage that you have that room
581:19 more storage that you have that room that you can grow into
581:21 that you can grow into but the idea is that you're always
581:23 but the idea is that you're always paying for that even when you're not
581:25 paying for that even when you're not utilizing it and so you know that can be
581:28 utilizing it and so you know that can be uh not as cost effective as you'd like
581:30 uh not as cost effective as you'd like it to be so when we're looking at um
581:32 it to be so when we're looking at um doing this again and we are using
581:35 doing this again and we are using containers um instead of the hypervisor
581:38 containers um instead of the hypervisor we have container virtualization a very
581:40 we have container virtualization a very common one would be called Docker Damon
581:41 common one would be called Docker Damon for Docker of course and so now you're
581:43 for Docker of course and so now you're launching containers and so maybe you
581:45 launching containers and so maybe you have Alpine and this is for your web app
581:47 have Alpine and this is for your web app and then you install exactly the
581:49 and then you install exactly the libraries packages and binaries you need
581:50 libraries packages and binaries you need for that and then for mongodb you want
581:53 for that and then for mongodb you want to have a different OS different
581:55 to have a different OS different packages and same thing with Rabbid mq
581:58 packages and same thing with Rabbid mq maybe you want to run it on FreeBSD and
581:59 maybe you want to run it on FreeBSD and the idea is that uh you know you're not
582:02 the idea is that uh you know you're not going to have this waste because it it's
582:04 going to have this waste because it it's kind of changed in the sense that these
582:06 kind of changed in the sense that these containers are flexible so they can
582:08 containers are flexible so they can expand or decrease based on the the use
582:11 expand or decrease based on the the use case of what they need uh and you know
582:13 case of what they need uh and you know if you use particular services like it
582:15 if you use particular services like it fargate you know you're paying like for
582:18 fargate you know you're paying like for running the containers not necessarily
582:20 running the containers not necessarily uh for over provisioning okay so VMS do
582:23 uh for over provisioning okay so VMS do not make best use of space apps are not
582:25 not make best use of space apps are not isolated which could cause config
582:27 isolated which could cause config conflict security problems or resource
582:30 conflict security problems or resource hogging containers allow you to run
582:32 hogging containers allow you to run multiple apps which are virtually
582:33 multiple apps which are virtually isolated from each other launch new
582:35 isolated from each other launch new containers configure OS uh dependencies
582:37 containers configure OS uh dependencies per container
582:38 per container [Music]
582:42 [Music] okay hey this is Andrew Brown from exam
582:44 okay hey this is Andrew Brown from exam Pro and we are taking a look at the
582:46 Pro and we are taking a look at the concept of microservices and to
582:48 concept of microservices and to understand microservices we first need
582:50 understand microservices we first need to understand monoliths or monolithic
582:52 to understand monoliths or monolithic architecture and the idea here is that
582:54 architecture and the idea here is that we have one app which is responsible for
582:56 we have one app which is responsible for everything and the functionality is
582:58 everything and the functionality is tightly coupled so I'm going to get my
582:59 tightly coupled so I'm going to get my pen tool out here and just to highlight
583:01 pen tool out here and just to highlight notice that there is a server and
583:03 notice that there is a server and everything is running on a single server
583:05 everything is running on a single server whether it's load balancing caching the
583:08 whether it's load balancing caching the database um maybe the marketing website
583:10 database um maybe the marketing website the front-end JavaScript framework the
583:12 the front-end JavaScript framework the back end with its API uh the uh
583:15 back end with its API uh the uh om connected to background tasks things
583:18 om connected to background tasks things like that and that's the idea of a
583:19 like that and that's the idea of a monolith and that's what um a lot of
583:21 monolith and that's what um a lot of people are used to doing but the idea
583:23 people are used to doing but the idea with microservice architecture is that
583:25 with microservice architecture is that you have multiple apps which are
583:26 you have multiple apps which are responsible for one uh one thing and the
583:28 responsible for one uh one thing and the functionality is isolate and stateless
583:31 functionality is isolate and stateless and so just by uh leveraging um various
583:34 and so just by uh leveraging um various cloud services or bolting it onto your
583:36 cloud services or bolting it onto your service um you know you are technically
583:38 service um you know you are technically using microservice architecture so maybe
583:41 using microservice architecture so maybe your web app is all hosted um in
583:44 your web app is all hosted um in containers so you have your apis your or
583:46 containers so you have your apis your or your orm your reports maybe you've
583:48 your orm your reports maybe you've abstracted out some particular functions
583:50 abstracted out some particular functions into Lambda functions you have your um
583:54 into Lambda functions you have your um marketing website hosted on S3 you have
583:56 marketing website hosted on S3 you have your frontend JavaScript hosted on S3
583:58 your frontend JavaScript hosted on S3 You're Now using elastic load balancer
584:01 You're Now using elastic load balancer uh elastic cache
584:03 uh elastic cache RDS sqs and that's the idea between
584:06 RDS sqs and that's the idea between monoliths and microservices
584:09 monoliths and microservices [Music]
584:12 [Music] okay let's take a look here at
584:14 okay let's take a look here at kubernetes which is an open-source
584:16 kubernetes which is an open-source container orchestration system for
584:18 container orchestration system for automating deployment scaling and
584:20 automating deployment scaling and management of containers it was
584:21 management of containers it was originally created by Google and now
584:23 originally created by Google and now maintained by the cloud native Computing
584:25 maintained by the cloud native Computing foundation so the
584:26 foundation so the cncf kubernetes is commonly called K8
584:30 cncf kubernetes is commonly called K8 the8 represents the remaining letters
584:31 the8 represents the remaining letters for kuti which is odd because everyone
584:34 for kuti which is odd because everyone calls it kubernetes with the S on there
584:36 calls it kubernetes with the S on there but that's just what it is the advantage
584:38 but that's just what it is the advantage of kubernetes over Docker is the ability
584:40 of kubernetes over Docker is the ability to run containers distributed across
584:42 to run containers distributed across multiple VMS a unique component of
584:44 multiple VMS a unique component of kubernetes are pods a pod is a group of
584:47 kubernetes are pods a pod is a group of one or more containers with with shared
584:49 one or more containers with with shared storage network resources and other
584:51 storage network resources and other shared settings so here is kind of an
584:53 shared settings so here is kind of an example where you have your kubernetes
584:55 example where you have your kubernetes master it has a schedule controller etcd
584:58 master it has a schedule controller etcd you might be using it uses an API server
585:00 you might be using it uses an API server to run nodes within the nodes we have
585:03 to run nodes within the nodes we have pods and within the pods we have
585:05 pods and within the pods we have containers kubernetes is ideally for
585:07 containers kubernetes is ideally for microservice architectures where company
585:09 microservice architectures where company has tens to hundreds of services they
585:13 has tens to hundreds of services they need to manage I need to really
585:14 need to manage I need to really emphasize that tens to hundreds of
585:17 emphasize that tens to hundreds of services all right so you know crimin is
585:19 services all right so you know crimin is great but just understand that it is
585:21 great but just understand that it is really designed uh to be used for
585:23 really designed uh to be used for massive amounts of microservices if you
585:25 massive amounts of microservices if you don't have that need you might want to
585:28 don't have that need you might want to look at something just easier to use
585:30 look at something just easier to use [Music]
585:34 [Music] okay all right let's take a look here at
585:36 okay all right let's take a look here at Docker which is a set of platforms of
585:38 Docker which is a set of platforms of service products that use OS level
585:40 service products that use OS level virtualization to deliver software in
585:42 virtualization to deliver software in packages called containers so Docker was
585:45 packages called containers so Docker was the earliest popularized open source
585:48 the earliest popularized open source container platform meaning there's lots
585:49 container platform meaning there's lots of tutorials there's a lot of services
585:52 of tutorials there's a lot of services that uh integrate with Docker or make it
585:54 that uh integrate with Docker or make it really easy to use and so when people
585:55 really easy to use and so when people think of containers they generally think
585:57 think of containers they generally think of Docker there's of course a lot more
585:59 of Docker there's of course a lot more options out there than Docker to run
586:01 options out there than Docker to run containers but this is what people think
586:03 containers but this is what people think of and so we said it's a suite of tools
586:05 of and so we said it's a suite of tools so the idea is you have this Docker CLI
586:07 so the idea is you have this Docker CLI so these are CLI commands to download
586:09 so these are CLI commands to download upload build run and debug containers a
586:11 upload build run and debug containers a Docker file a configuration file on how
586:13 Docker file a configuration file on how to provision a container Docker compose
586:16 to provision a container Docker compose uh which is a tool and configuration
586:18 uh which is a tool and configuration file when working with multiple
586:19 file when working with multiple containers Docker swarm an orchestration
586:22 containers Docker swarm an orchestration tool for managing deployed
586:23 tool for managing deployed multicontainer architectures Docker Hub
586:26 multicontainer architectures Docker Hub a public online repository for
586:28 a public online repository for containers published by the community
586:29 containers published by the community for download and one really interesting
586:31 for download and one really interesting thing uh that came out of Docker was the
586:33 thing uh that came out of Docker was the open container initiative oci which is
586:36 open container initiative oci which is an open government structure for
586:37 an open government structure for creating open industry standards around
586:39 creating open industry standards around container formats and runtimes so Docker
586:42 container formats and runtimes so Docker established the OC oci and it is now
586:44 established the OC oci and it is now maintained by the Linux foundation and
586:47 maintained by the Linux foundation and so the idea is that you can write a
586:49 so the idea is that you can write a Docker file or or do things very
586:51 Docker file or or do things very similarly and use different types of um
586:54 similarly and use different types of um technologies that can use containers as
586:57 technologies that can use containers as long as they're oci compatible you can
586:58 long as they're oci compatible you can use them so Docker has been losing favor
587:01 use them so Docker has been losing favor with developers due to their handling of
587:02 with developers due to their handling of introducing a paid open source model and
587:05 introducing a paid open source model and Alternatives like podman are growing and
587:07 Alternatives like podman are growing and that's why we're going to talk about
587:08 that's why we're going to talk about podman next
587:09 podman next [Music]
587:12 [Music] okay so let's take a quick look here at
587:15 okay so let's take a quick look here at podman which is a container engine that
587:17 podman which is a container engine that is oci compliant and is a drop in
587:19 is oci compliant and is a drop in replacement for Docker I just just want
587:21 replacement for Docker I just just want to get you exposure here because I want
587:22 to get you exposure here because I want you to know about this um and that you
587:24 you to know about this um and that you can uh use it as opposed to using Docker
587:27 can uh use it as opposed to using Docker um there are a few differences or
587:29 um there are a few differences or advantages that podman has so podman is
587:31 advantages that podman has so podman is Damon list where Docker uses a container
587:33 Damon list where Docker uses a container D Damon podman allows you to create pods
587:35 D Damon podman allows you to create pods like KU brunetes where Docker does not
587:37 like KU brunetes where Docker does not have pods podman only replaces one part
587:40 have pods podman only replaces one part of Docker podman is is to be used
587:42 of Docker podman is is to be used alongside builda and uh scopio so you
587:45 alongside builda and uh scopio so you know Docker is an all-in-one kind of
587:47 know Docker is an all-in-one kind of tool uh everything is done via single
587:49 tool uh everything is done via single CLI and everything is there but you know
587:51 CLI and everything is there but you know they just wanted to make it more module
587:53 they just wanted to make it more module and so uh these other tools anytime you
587:55 and so uh these other tools anytime you say podman it usually means we're
587:56 say podman it usually means we're talking about podman builda and scopio
587:59 talking about podman builda and scopio so builda is a tool used to build the
588:01 so builda is a tool used to build the oci images and scopio is a tool for
588:03 oci images and scopio is a tool for moving container images between
588:05 moving container images between different types of container storages p
588:07 different types of container storages p is not going to show up in your exam but
588:08 is not going to show up in your exam but you should practically know it um just
588:11 you should practically know it um just for your own benefit
588:12 for your own benefit [Music]
588:16 [Music] okay let's take a look here at the
588:18 okay let's take a look here at the container services offered on AWS
588:21 container services offered on AWS so we have primary services that
588:22 so we have primary services that actually run containers provisioning and
588:24 actually run containers provisioning and deployment on you know tooling around
588:26 deployment on you know tooling around provisioning and deployment and
588:27 provisioning and deployment and supporting services so the first here is
588:29 supporting services so the first here is a lock stick container service ECS um
588:32 a lock stick container service ECS um and the advantage of this service is
588:34 and the advantage of this service is that it has no cold starts but it is a
588:36 that it has no cold starts but it is a self-managed dc2 so that means that
588:39 self-managed dc2 so that means that you're going to be always paying for the
588:40 you're going to be always paying for the resource as it is running all right then
588:43 resource as it is running all right then you have ads fargate so this is more
588:45 you have ads fargate so this is more robust than uh using a Lambda it can
588:47 robust than uh using a Lambda it can scale to zero cost um and it's uh being
588:51 scale to zero cost um and it's uh being managed by adus managed ec2 however it
588:53 managed by adus managed ec2 however it does have cold starts so you know if you
588:55 does have cold starts so you know if you need containers launching really fast
588:57 need containers launching really fast you might be wanting to use ECS then you
589:00 you might be wanting to use ECS then you have elastic kubernetes service eks this
589:02 have elastic kubernetes service eks this is uh open source it runs kubernetes um
589:06 is uh open source it runs kubernetes um and this is really useful if you want to
589:07 and this is really useful if you want to avoid vendor lockin um which is not
589:11 avoid vendor lockin um which is not really a problem but uh that or it's
589:13 really a problem but uh that or it's just you want to run kubernetes then you
589:15 just you want to run kubernetes then you have itus Lambda so you only think about
589:17 have itus Lambda so you only think about the code uh it's designed for short
589:19 the code uh it's designed for short running tasks uh if you need something
589:21 running tasks uh if you need something that runs longer You' want to use that
589:23 that runs longer You' want to use that is serverless you'd use aess fargate
589:25 is serverless you'd use aess fargate which is serverless containers you can
589:27 which is serverless containers you can deploy custom containers so prior it us
589:30 deploy custom containers so prior it us Lambda just had um pre-built runtimes
589:32 Lambda just had um pre-built runtimes which were containers but now you can
589:33 which were containers but now you can create any kind of container and uh use
589:35 create any kind of container and uh use that uh on it was Lambda for
589:38 that uh on it was Lambda for provisioning deployment you can use
589:40 provisioning deployment you can use elastic Bean sock so um it can uh deploy
589:44 elastic Bean sock so um it can uh deploy elastic container service for you um
589:46 elastic container service for you um which is very useful there now there's
589:48 which is very useful there now there's app Runner which kind of overlaps on
589:50 app Runner which kind of overlaps on what elastic beanock does but it
589:52 what elastic beanock does but it specializes it specializes for
589:54 specializes it specializes for containers um and I believe that it can
589:57 containers um and I believe that it can actually I don't know what it uses
589:58 actually I don't know what it uses underneath because it is a managed
589:59 underneath because it is a managed service so elastic beanock is um open
590:02 service so elastic beanock is um open you can see what is running underneath
590:04 you can see what is running underneath and app Runner I don't believe you can
590:05 and app Runner I don't believe you can see what is running underneath it's just
590:07 see what is running underneath it's just taken care of by AWS then there's AWS uh
590:10 taken care of by AWS then there's AWS uh co-pilot CLI so this allows you to build
590:13 co-pilot CLI so this allows you to build release operate production ready
590:14 release operate production ready containerized applications on app Runner
590:16 containerized applications on app Runner ECS and Abus fargate for supporting
590:19 ECS and Abus fargate for supporting services you have elastic container Reg
590:20 services you have elastic container Reg indry this is reple for your containers
590:22 indry this is reple for your containers not necessarily just Docker containers
590:24 not necessarily just Docker containers but containers in general probably oci
590:26 but containers in general probably oci compliant containers x-ray so analyze
590:28 compliant containers x-ray so analyze and debug between microservices so you
590:31 and debug between microservices so you know it's distributed tracing then you
590:33 know it's distributed tracing then you have step functions so stitch together
590:34 have step functions so stitch together lambas and ECS tasks to uh create um um
590:39 lambas and ECS tasks to uh create um um a state machine and the only thing I
590:41 a state machine and the only thing I don't have on here would be you know
590:43 don't have on here would be you know being able to launch an ec2 instance
590:44 being able to launch an ec2 instance from the marketplace that has um a uh a
590:48 from the marketplace that has um a uh a container runtime installed like doer U
590:51 container runtime installed like doer U I just don't feel that that's very
590:52 I just don't feel that that's very relevant for the exam but it is another
590:54 relevant for the exam but it is another option for containers not something that
590:56 option for containers not something that people do very often but there you
590:58 people do very often but there you [Music]
591:01 [Music] go hey this is Angie Brown from exam Pro
591:04 go hey this is Angie Brown from exam Pro and we are taking a look here at
591:05 and we are taking a look here at organizations and accounts so adus
591:07 organizations and accounts so adus organizations allow the creation of new
591:09 organizations allow the creation of new adus accounts and allows you to
591:11 adus accounts and allows you to centrally manage building control access
591:13 centrally manage building control access compliance security and share resources
591:15 compliance security and share resources across your adus accounts so here's kind
591:18 across your adus accounts so here's kind of a bit of a structure of um
591:21 of a bit of a structure of um the architecture of adus organizations
591:23 the architecture of adus organizations and we'll just kind of walk through the
591:24 and we'll just kind of walk through the components so the first thing you have
591:26 components so the first thing you have is a root account user this is a single
591:29 is a root account user this is a single signin identity that has complete access
591:30 signin identity that has complete access to all adus services and resources in an
591:33 to all adus services and resources in an account and each account has a root
591:35 account and each account has a root account user so generally you will have
591:37 account user so generally you will have a master or root account and even within
591:40 a master or root account and even within that you'll have a root account user and
591:42 that you'll have a root account user and for every additional account that you
591:44 for every additional account that you have you'll notice over here we have a
591:46 have you'll notice over here we have a root account
591:47 root account user then there's the concept of
591:49 user then there's the concept of organizational unit
591:51 organizational unit uh these are commonly abbreviated to OU
591:53 uh these are commonly abbreviated to OU so they are a group of adus accounts
591:55 so they are a group of adus accounts within an organization which can contain
591:57 within an organization which can contain other organizational units creating a
591:59 other organizational units creating a hierarchy so here is one where we have
592:02 hierarchy so here is one where we have called Starfleet and here's one called
592:04 called Starfleet and here's one called Federation planets and underneath we
592:05 Federation planets and underneath we have multiple uh accounts it was
592:08 have multiple uh accounts it was accounts within that organizational unit
592:10 accounts within that organizational unit and even though it does not show it here
592:12 and even though it does not show it here you can create an organizational unit
592:14 you can create an organizational unit within an organizational unit then we
592:16 within an organizational unit then we have service control policies scps and
592:19 have service control policies scps and these give uh Central control over the
592:21 these give uh Central control over the allowed permissions for all adus
592:22 allowed permissions for all adus accounts in your organization helping to
592:25 accounts in your organization helping to ensure your accounts stay within your
592:27 ensure your accounts stay within your organization's guidelines what they're
592:29 organization's guidelines what they're trying to say here is that um there's
592:31 trying to say here is that um there's this concept of adus I am policies and
592:34 this concept of adus I am policies and all you're doing is you're creating a
592:35 all you're doing is you're creating a policy that's going to be uh
592:37 policy that's going to be uh organizational uniwide or organizational
592:40 organizational uniwide or organizational wide or for select accounts so it's just
592:42 wide or for select accounts so it's just a way of applying I am policies across
592:45 a way of applying I am policies across multiple accounts AIS organizations must
592:48 multiple accounts AIS organizations must be turned on and once it's turned on it
592:49 be turned on and once it's turned on it cannot be turned off it's generally
592:51 cannot be turned off it's generally recommended that you do turn it on um
592:53 recommended that you do turn it on um because basically when if you're going
592:55 because basically when if you're going to run any kind of serious workload
592:57 to run any kind of serious workload you're going to be using adus
592:58 you're going to be using adus organizations to uh isolate your adus
593:00 organizations to uh isolate your adus accounts based on workloads you can
593:02 accounts based on workloads you can create as many adus accounts as you like
593:04 create as many adus accounts as you like One account will be the master or root
593:06 One account will be the master or root account um and I say root account here
593:09 account um and I say root account here because this is the new language here
593:10 because this is the new language here and some of the documentation still
593:12 and some of the documentation still calls it master account so just
593:13 calls it master account so just understand this is the root account not
593:15 understand this is the root account not to be confused with the root account
593:18 to be confused with the root account user so another clarification I want to
593:21 user so another clarification I want to make is an ad account is not the same as
593:23 make is an ad account is not the same as a user account which is another thing
593:26 a user account which is another thing that is confusing so when you sign up
593:28 that is confusing so when you sign up for AWS you get um an adus account and
593:31 for AWS you get um an adus account and then it creates you a user account which
593:33 then it creates you a user account which happens to be a root user account so
593:35 happens to be a root user account so hopefully that is
593:36 hopefully that is [Music]
593:40 [Music] clear so adus control tower helps
593:42 clear so adus control tower helps Enterprises quickly set up a secure ads
593:45 Enterprises quickly set up a secure ads multi account it provides you with a
593:46 multi account it provides you with a baseline environment to get started with
593:48 baseline environment to get started with a multi-count architecture so it does
593:50 a multi-count architecture so it does this a few uh a few different ways the
593:53 this a few uh a few different ways the first thing is it provides you a landing
593:54 first thing is it provides you a landing Zone this is a baseline environment
593:56 Zone this is a baseline environment following well architected and best
593:58 following well architected and best practices to start launching production
594:00 practices to start launching production ready workloads so imagine you wanted to
594:02 ready workloads so imagine you wanted to go have um you know the perfect
594:05 go have um you know the perfect environment that you know secure um is
594:08 environment that you know secure um is correctly configured and has good
594:10 correctly configured and has good logging in place that's what a landing
594:11 logging in place that's what a landing zone is and so os's Landing zone for
594:14 zone is and so os's Landing zone for control tower is going to have SSO
594:16 control tower is going to have SSO enabled by default so it's very easy to
594:17 enabled by default so it's very easy to move between it accounts it will have
594:19 move between it accounts it will have centralized logging for ad cloud trail
594:21 centralized logging for ad cloud trail so that you know they're going to be
594:23 so that you know they're going to be tamper evident or tamper proof away from
594:25 tamper evident or tamper proof away from your workloads where they can't be
594:27 your workloads where they can't be affected it'll have cross account
594:28 affected it'll have cross account security auditing um so yeah Landing
594:31 security auditing um so yeah Landing zones are really great to have then
594:32 zones are really great to have then there's the account Factory they used to
594:34 there's the account Factory they used to call this um uh a vending machine but uh
594:38 call this um uh a vending machine but uh they changed it to account Factory the
594:39 they changed it to account Factory the idea is that it automates provisioning
594:41 idea is that it automates provisioning of new accounts in your organization it
594:43 of new accounts in your organization it standardizes the provisioning of new
594:45 standardizes the provisioning of new accounts with pre-approved account
594:47 accounts with pre-approved account configuration you can configure account
594:49 configuration you can configure account Factory with pre-approved Network
594:50 Factory with pre-approved Network configuration and region selections uh
594:52 configuration and region selections uh enable sell service for your Builders to
594:55 enable sell service for your Builders to configure and provision to accounts
594:56 configure and provision to accounts using AA service catalog AA service
594:58 using AA service catalog AA service catalog is just pre-approved uh
595:00 catalog is just pre-approved uh workloads uh via Cloud information
595:02 workloads uh via Cloud information templates you created to say okay you're
595:03 templates you created to say okay you're allowed to launch This Server these
595:06 allowed to launch This Server these resources um and the third and most
595:08 resources um and the third and most important thing that a control tower
595:09 important thing that a control tower comes with is guard rails so these are
595:11 comes with is guard rails so these are prepackaged governance rules for
595:13 prepackaged governance rules for security operations compliance the
595:15 security operations compliance the customers can select and apply
595:16 customers can select and apply enterprise-wide or to specific groups of
595:19 enterprise-wide or to specific groups of accounts
595:20 accounts so adus control tower is the replacement
595:23 so adus control tower is the replacement of the retired adus Landing zone so if
595:25 of the retired adus Landing zone so if you remember adus Landing zones which
595:27 you remember adus Landing zones which was never a selfs serve easy thing to
595:30 was never a selfs serve easy thing to sign up for it required a lot of money
595:32 sign up for it required a lot of money and uh stuff to go in there they just
595:34 and uh stuff to go in there they just don't really have it anymore and it was
595:36 don't really have it anymore and it was control tower is the new offering um
595:38 control tower is the new offering um there
595:39 there [Music]
595:43 [Music] okay hey this is Andrew Brown from exam
595:45 okay hey this is Andrew Brown from exam Pro and we are taking a look at 's
595:47 Pro and we are taking a look at 's config and to understand adus config we
595:49 config and to understand adus config we need to know what compliance as code is
595:51 need to know what compliance as code is and to understand compliance as code we
595:53 and to understand compliance as code we need to understand what change
595:54 need to understand what change management is so change management in
595:56 management is so change management in the context of cloud infrastructure is
595:59 the context of cloud infrastructure is when we have a formal process to monitor
596:01 when we have a formal process to monitor changes enforce changes and remediate
596:04 changes enforce changes and remediate changes and compliances code also known
596:07 changes and compliances code also known as CAC is when we utilize programming to
596:10 as CAC is when we utilize programming to automate the monitoring enforcing and
596:12 automate the monitoring enforcing and remediating changes to stay compliant
596:14 remediating changes to stay compliant with the compliance program or expected
596:17 with the compliance program or expected configuration so what is adus config
596:20 configuration so what is adus config well it's a compliances code framework
596:22 well it's a compliances code framework that allows us to manage change in your
596:24 that allows us to manage change in your it accounts on a per region basis
596:27 it accounts on a per region basis meaning that you have to turn this on
596:29 meaning that you have to turn this on for every region that you need it for
596:31 for every region that you need it for and so here is a very simple example
596:33 and so here is a very simple example where let's say we create a config Rule
596:36 where let's say we create a config Rule and we have an ec2 instance and we
596:38 and we have an ec2 instance and we expect it to be in a particular State
596:40 expect it to be in a particular State and then in the other case we have a an
596:43 and then in the other case we have a an RDS instance and it's in a state that we
596:45 RDS instance and it's in a state that we do not like so the idea is that we try
596:47 do not like so the idea is that we try to remediate it to put it in the state
596:49 to remediate it to put it in the state that we want it to be and those config
596:50 that we want it to be and those config rules are just powered by lambdas as you
596:53 rules are just powered by lambdas as you can see based on the Lambda icon there
596:55 can see based on the Lambda icon there so when should you use Adis config well
596:58 so when should you use Adis config well this is when I want this resource to
596:59 this is when I want this resource to stay configured a specific way for
597:01 stay configured a specific way for compliance I want to keep track of
597:03 compliance I want to keep track of configuration changes to resources I
597:06 configuration changes to resources I want a list of all resources within a
597:08 want a list of all resources within a region and I want to use uh uh analyze
597:11 region and I want to use uh uh analyze potential security weaknesses and you
597:13 potential security weaknesses and you need detailed historical information so
597:16 need detailed historical information so there you go
597:21 [Music] hey this is Andrew Brown from exam Pro
597:23 hey this is Andrew Brown from exam Pro and in this follow along we're going to
597:24 and in this follow along we're going to take a look at adus config so adus
597:26 take a look at adus config so adus config is a tool that allows you to
597:27 config is a tool that allows you to ensure that your services are configured
597:30 ensure that your services are configured as expected so I've already activated it
597:32 as expected so I've already activated it in my North Virginia region so what I'm
597:34 in my North Virginia region so what I'm going to do is just go over to Ohio here
597:37 going to do is just go over to Ohio here uh because it is per region activated
597:39 uh because it is per region activated and I'll go over to config and then what
597:41 and I'll go over to config and then what we'll have to do is set it up so there
597:44 we'll have to do is set it up so there is this oneclick setup and it did Skip
597:46 is this oneclick setup and it did Skip me to the review step because it's kind
597:47 me to the review step because it's kind of piggybacking on the configuration of
597:49 of piggybacking on the configuration of my original one here but the idea is
597:51 my original one here but the idea is that you'll just say uh record all
597:54 that you'll just say uh record all resources in this region or things like
597:56 resources in this region or things like that you'll have to create a service
597:58 that you'll have to create a service roll link if you have not done so so
598:00 roll link if you have not done so so this will look a little bit different
598:01 this will look a little bit different but here it's using the existing one
598:03 but here it's using the existing one you'll have to choose a bucket so or
598:05 you'll have to choose a bucket so or create a bucket uh it's not super
598:08 create a bucket uh it's not super complicated so you get through there you
598:09 complicated so you get through there you hit confirm and basically you're going
598:11 hit confirm and basically you're going to end up with this so the inventory um
598:14 to end up with this so the inventory um lets you see all the the resources that
598:17 lets you see all the the resources that or not all of them but most resources
598:19 or not all of them but most resources that are in your account in this
598:20 that are in your account in this particular region it this will not
598:22 particular region it this will not populate right away so you will have to
598:25 populate right away so you will have to wait a little bit of time for that to
598:27 wait a little bit of time for that to appear one really nice thing are
598:29 appear one really nice thing are conformance packs I really love these
598:31 conformance packs I really love these things when ad of us first brought these
598:33 things when ad of us first brought these out there was only like a couple but now
598:34 out there was only like a couple but now they have tons and tons and tons of
598:37 they have tons and tons and tons of conformance packs so you can go deploy a
598:38 conformance packs so you can go deploy a conformance pack and you can open up the
598:41 conformance pack and you can open up the templates I just want to show you look
598:42 templates I just want to show you look at how many they have so there some of
598:45 at how many they have so there some of you might recognize like
598:47 you might recognize like nist uh CIS things like that well
598:50 nist uh CIS things like that well detected uh stuff and all these are um
598:53 detected uh stuff and all these are um and I'm not sure if it's easy to open
598:55 and I'm not sure if it's easy to open these up but all these are if we open
598:56 these up but all these are if we open them up they're on GitHub is these are
598:58 them up they're on GitHub is these are just Cloud foration templates to set up
599:00 just Cloud foration templates to set up configuration rules so there's a variety
599:03 configuration rules so there's a variety of suggested rules uh like around IM
599:06 of suggested rules uh like around IM best practices and things like that that
599:07 best practices and things like that that we can load in um but the idea is that
599:10 we can load in um but the idea is that you're just going to create rules so you
599:11 you're just going to create rules so you go here and you add a rule and they have
599:13 go here and you add a rule and they have a bunch of manage rules here um that we
599:15 a bunch of manage rules here um that we can look at but I think it might be fun
599:17 can look at but I think it might be fun to actually run a um a conformance pack
599:20 to actually run a um a conformance pack I'll just show you what it looks like to
599:21 I'll just show you what it looks like to add a rule first so let's say we wanted
599:23 add a rule first so let's say we wanted to do something for
599:25 to do something for S3 um and it was making sure that we are
599:28 S3 um and it was making sure that we are blocking Public Access so we go next
599:30 blocking Public Access so we go next here generally you'll have a trigger
599:32 here generally you'll have a trigger type you can choose whether it's uh
599:34 type you can choose whether it's uh configured when it happens or it's
599:36 configured when it happens or it's periodic this is disabled in this case
599:38 periodic this is disabled in this case here and you just scroll on down um and
599:40 here and you just scroll on down um and then once you've added the rule what you
599:44 then once you've added the rule what you can
599:45 can do is also manage remediation so if this
599:50 do is also manage remediation so if this rule said hey this thing is
599:52 rule said hey this thing is non-compliant we want you to take a
599:54 non-compliant we want you to take a particular action and you have all these
599:56 particular action and you have all these adus actions that you can perform and
599:58 adus actions that you can perform and you can notify the right people to
600:00 you can notify the right people to correct it or have it auto correct if
600:02 correct it or have it auto correct if you choose to do so um for rules you can
600:05 you choose to do so um for rules you can also make your own custom one so that's
600:07 also make your own custom one so that's just you providing your own Lambda
600:09 just you providing your own Lambda functions you're providing that Lambda
600:10 functions you're providing that Lambda Arn and so basically you can have it do
600:13 Arn and so basically you can have it do anything that you want whatever you want
600:14 anything that you want whatever you want to put in a Lambda you can make adist
600:16 to put in a Lambda you can make adist config check for okay so it's not super
600:19 config check for okay so it's not super complic at here but um this one here is
600:22 complic at here but um this one here is just going to go ahead and check and so
600:24 just going to go ahead and check and so if we go and
600:26 if we go and reevaluate it might just take some time
600:27 reevaluate it might just take some time to show up it's either going to say that
600:29 to show up it's either going to say that it's compliant or non-compliant okay and
600:32 it's compliant or non-compliant okay and I it should be compliant but while we're
600:33 I it should be compliant but while we're waiting for that to happen let's just
600:35 waiting for that to happen let's just see how hard it is to deploy a
600:36 see how hard it is to deploy a conformance pack because I feel like
600:37 conformance pack because I feel like that's something that's really important
600:39 that's something that's really important oh you can just drop them down and
600:40 oh you can just drop them down and choose them that's great so we might
600:41 choose them that's great so we might want to go to I am here oops identity
600:44 want to go to I am here oops identity and access
600:46 and access management and hit next and say uh my my
600:51 management and hit next and say uh my my um uh IM best practices and you might
600:55 um uh IM best practices and you might not want to do this because it does have
600:57 not want to do this because it does have spend and I want I say spend it's not
600:58 spend and I want I say spend it's not going to happen instantly but the idea
601:00 going to happen instantly but the idea is that if you turn this on and forget
601:01 is that if you turn this on and forget to remove it uh you will see some kind
601:04 to remove it uh you will see some kind of charges over time because it does
601:05 of charges over time because it does check based on the rules it's not super
601:07 check based on the rules it's not super expensive but it is something to
601:09 expensive but it is something to consider about um but anyway so it looks
601:11 consider about um but anyway so it looks like we created that conformance pack so
601:12 like we created that conformance pack so if I refresh it looks like it's in
601:15 if I refresh it looks like it's in progress I wonder if that's going to set
601:16 progress I wonder if that's going to set up a cloud formation template I'm kind
601:18 up a cloud formation template I'm kind of curious about that so we'll make our
601:20 of curious about that so we'll make our way over to cloud
601:26 formation and it is so that's really nice because once that is done what we
601:28 nice because once that is done what we can do is just tear it down by deleting
601:30 can do is just tear it down by deleting the stack so I'm going to go back over
601:31 the stack so I'm going to go back over to our conformance pack
601:34 to our conformance pack here let's take a look here and so it
601:37 here let's take a look here and so it still says it's in progress but it is
601:39 still says it's in progress but it is completed and we can click into
601:41 completed and we can click into it and we can see all the things that
601:44 it and we can see all the things that it's doing so it says item groups have
601:46 it's doing so it says item groups have user check informance pack um and so it
601:49 user check informance pack um and so it looks like there's a bunch of of uh cool
601:50 looks like there's a bunch of of uh cool rules uh here so what we'll do is we'll
601:55 rules uh here so what we'll do is we'll just wait a little while and we'll come
601:56 just wait a little while and we'll come back here and then just see if um this
601:59 back here and then just see if um this updates and see how compliant we are
602:01 updates and see how compliant we are from a uh a basic account okay all right
602:04 from a uh a basic account okay all right so after waiting a little while there it
602:06 so after waiting a little while there it looks like some of them are being set so
602:07 looks like some of them are being set so I just gave it a hard refresh here uh
602:10 I just gave it a hard refresh here uh and here you can see that it's saying is
602:11 and here you can see that it's saying is root account um whoops we give it a
602:13 root account um whoops we give it a moment here to refresh but uh is the
602:15 moment here to refresh but uh is the root account MFA applied yes have we
602:18 root account MFA applied yes have we done a password policy no and actually I
602:20 done a password policy no and actually I never did a password policy which is
602:22 never did a password policy which is something I forgot to do but here
602:23 something I forgot to do but here they're just talking about the minimums
602:25 they're just talking about the minimums and maximums of things that you can
602:27 and maximums of things that you can do okay so that's a conformance pack um
602:30 do okay so that's a conformance pack um but if we go to rules actually I guess
602:32 but if we go to rules actually I guess it's all the rules here I can't really
602:34 it's all the rules here I can't really tell the difference between the
602:35 tell the difference between the conformance pack rules and our plane
602:37 conformance pack rules and our plane rules kind it's kind of all mixed
602:39 rules kind it's kind of all mixed together here I
602:42 together here I think yeah so it's a bit hard to see
602:44 think yeah so it's a bit hard to see what's going on there if we go to the
602:46 what's going on there if we go to the performance pack and click in again it
602:48 performance pack and click in again it might show the rules yeah there we go so
602:50 might show the rules yeah there we go so here's the rules there just see a little
602:51 here's the rules there just see a little bit more information so use a hardware
602:53 bit more information so use a hardware MFA so you know how they're talking
602:55 MFA so you know how they're talking about using a security key like what I
602:57 about using a security key like what I showed you that I had earlier in the
602:59 showed you that I had earlier in the course things like that um I am password
603:02 course things like that um I am password policy things like that so you know not
603:05 policy things like that so you know not too complicated but um I think I'm all
603:07 too complicated but um I think I'm all done here so what I'm going to do is I'm
603:10 done here so what I'm going to do is I'm going to go over to cloud formation and
603:11 going to go over to cloud formation and tear that on down but you get the
603:13 tear that on down but you get the idea well I might want to show you uh
603:16 idea well I might want to show you uh drift so there used to be a way it's go
603:19 drift so there used to be a way it's go like keep changing things on me here but
603:21 like keep changing things on me here but there's a way to see uh history over
603:24 there's a way to see uh history over time and so that was
603:27 time and so that was something that they used to show and I'm
603:30 something that they used to show and I'm just trying to like find where they put
603:32 just trying to like find where they put it because it is like somewhere else
603:36 it because it is like somewhere else resources
603:41 maybe ah resource timeline okay so they moved it over into the resource
603:43 moved it over into the resource inventory and so if we were to take a
603:45 inventory and so if we were to take a look at something anything maybe this
603:47 look at something anything maybe this here resource timeline um and there
603:50 here resource timeline um and there might not be much here but the idea is
603:52 might not be much here but the idea is it will show you over time how things
603:53 it will show you over time how things have changed so the idea is that not
603:55 have changed so the idea is that not only can you say with a config is
603:57 only can you say with a config is something compliant but when was it
603:59 something compliant but when was it compliant and that is something that is
604:00 compliant and that is something that is really important to know okay so very
604:02 really important to know okay so very simple example maybe not the best but
604:04 simple example maybe not the best but the idea is that we can see when it was
604:06 the idea is that we can see when it was and was not compliant based on uh
604:08 and was not compliant based on uh changes to our stuff but uh anyway that
604:11 changes to our stuff but uh anyway that looks all good to me here so I'm going
604:13 looks all good to me here so I'm going to make my way over to cloud formation
604:14 to make my way over to cloud formation actually already already have it open
604:16 actually already already have it open over here we're going to go ahead and
604:17 over here we're going to go ahead and delete that stack um um termination
604:21 delete that stack um um termination protection is enabled you must first
604:23 protection is enabled you must first disable it so we'll edit it disable it
604:27 disable it so we'll edit it disable it whatever okay we'll hit delete there and
604:29 whatever okay we'll hit delete there and as that's deleting I'm going to go look
604:30 as that's deleting I'm going to go look for and config my
604:33 for and config my original rule there again I'm not really
604:37 original rule there again I'm not really worried about it I don't think it's
604:38 worried about it I don't think it's going to really cost me anything but uh
604:39 going to really cost me anything but uh I'm also just kind of clear the house
604:41 I'm also just kind of clear the house here just so you're you're okay as well
604:44 here just so you're you're okay as well and so if we go over to our rules um the
604:47 and so if we go over to our rules um the one that I spun up that was custom um I
604:50 one that I spun up that was custom um I think was this one here because these
604:51 think was this one here because these are all grayed out right so I can go
604:53 are all grayed out right so I can go ahead there delete that rule type in
604:56 ahead there delete that rule type in delete and we are good so there you
604:59 delete and we are good so there you go that
605:01 go that is it all
605:03 is it all [Music]
605:07 [Music] right adabs quick starts are pre-built
605:09 right adabs quick starts are pre-built templates by adabs and adus partners to
605:12 templates by adabs and adus partners to help deploy a wide range of stacks it
605:14 help deploy a wide range of stacks it reduces hundreds of manual uh procedures
605:16 reduces hundreds of manual uh procedures into just a few steps the uh Quick Start
605:19 into just a few steps the uh Quick Start is composed of three parts it has a
605:21 is composed of three parts it has a reference architecture for the
605:22 reference architecture for the deployment an itus cloud formation
605:24 deployment an itus cloud formation templates that automate and configure
605:27 templates that automate and configure the deployment a deployment guide
605:28 the deployment a deployment guide explain the architecture implementation
605:30 explain the architecture implementation in detail so here's an example of one
605:32 in detail so here's an example of one that you might want to launch like the
605:33 that you might want to launch like the adus Q&A bot and then you will get an
605:36 adus Q&A bot and then you will get an architectural diagram and a lot of
605:38 architectural diagram and a lot of information about it and from there you
605:39 information about it and from there you can just go press the button and launch
605:42 can just go press the button and launch this infrastructure most quick start
605:44 this infrastructure most quick start reference deployments enable you to spin
605:46 reference deployments enable you to spin up a fully functional architecture in
605:47 up a fully functional architecture in less than an hour and there is a lot as
605:50 less than an hour and there is a lot as we will see here when we take a look for
605:53 we will see here when we take a look for [Music]
605:56 [Music] ourselves all right so here is uh adus
605:59 ourselves all right so here is uh adus quick starts where we have a bunch of
606:01 quick starts where we have a bunch of cloudformation templates uh built by
606:03 cloudformation templates uh built by adabs or Amazon or adus partner networks
606:06 adabs or Amazon or adus partner networks APM partners and uh there's a variety of
606:09 APM partners and uh there's a variety of different things here so I'm just going
606:11 different things here so I'm just going to try to find something like Q&A
606:13 to try to find something like Q&A bot Q&A bot just type in bot here and I
606:17 bot Q&A bot just type in bot here and I don't know why it was here the other day
606:19 don't know why it was here the other day now it's not showing up which is totally
606:21 now it's not showing up which is totally fine but um you know I just want
606:23 fine but um you know I just want anything to deploy just to kind of show
606:24 anything to deploy just to kind of show you what we can do with it so you scroll
606:27 you what we can do with it so you scroll on down we have uh this graphic here
606:29 on down we have uh this graphic here that's representing what will get
606:31 that's representing what will get deployed so we have cloudfront S3 Dynamo
606:33 deployed so we have cloudfront S3 Dynamo DB assistance manager Lex paully all
606:36 DB assistance manager Lex paully all these kind of fun stuff um and there's
606:39 these kind of fun stuff um and there's some information about how it is
606:40 some information about how it is architected and the idea is you can go
606:43 architected and the idea is you can go ahead and launch in the console or view
606:44 ahead and launch in the console or view the implementation guide let's go take a
606:46 the implementation guide let's go take a look here um and there's a bunch of
606:49 look here um and there's a bunch of stuff so we have Solutions and things
606:51 stuff so we have Solutions and things like that conversational things like
606:53 like that conversational things like that but what I'm going to do is go
606:55 that but what I'm going to do is go ahead and see how far I can get to
606:57 ahead and see how far I can get to launching with this it doesn't really
606:59 launching with this it doesn't really matter if we do launch it it's it's just
607:00 matter if we do launch it it's it's just the fact that um I want to just show you
607:02 the fact that um I want to just show you what you can do with it so if we go to
607:04 what you can do with it so if we go to the designer it's always fun to look at
607:06 the designer it's always fun to look at it in there because then we can kind of
607:08 it in there because then we can kind of visualize all the resources that are
607:10 visualize all the resources that are available and I thought that that would
607:12 available and I thought that that would populate over there but maybe we did the
607:15 populate over there but maybe we did the wrong thing so I'm just going to go back
607:16 wrong thing so I'm just going to go back and
607:18 and click I'm just going to click out of
607:21 click I'm just going to click out of this oops cancel let's close that leave
607:25 this oops cancel let's close that leave yes and we will launch that
607:32 again and so this oh viewing the designer I hit the wrong button
607:39 okay so now this should show us the template might just be
607:45 loading there we go so this is what it's going to launch and you can see there's
607:46 going to launch and you can see there's a lot going on here just going to shrink
607:49 a lot going on here just going to shrink that there
607:50 that there uh and I don't know if you can make any
607:51 uh and I don't know if you can make any sense of it but clearly it's doing a lot
607:54 sense of it but clearly it's doing a lot and so if we were happy with this and we
607:56 and so if we were happy with this and we wanted to launch it I know I keep
607:57 wanted to launch it I know I keep backing out of this but we're going to
607:59 backing out of this but we're going to go back into it one more
608:01 go back into it one more time we can go here and we can go next
608:04 time we can go here and we can go next and then we would just fill in what we
608:06 and then we would just fill in what we want so you name it put the language in
608:08 want so you name it put the language in and this is stuff that they set up so
608:09 and this is stuff that they set up so maybe you want a mail voice set the ab
608:12 maybe you want a mail voice set the ab in and stuff like that and it's that
608:14 in and stuff like that and it's that simple really um and every stack is
608:17 simple really um and every stack is going to be different so they're all
608:18 going to be different so they're all going to have different configurations
608:19 going to have different configurations ation options but hopefully that gives
608:21 ation options but hopefully that gives you kind of an idea of what you can do
608:23 you kind of an idea of what you can do with quick starts
608:25 with quick starts [Music]
608:29 [Music] okay let's take a look at the concept of
608:31 okay let's take a look at the concept of tagging within AWS so a tag is a key and
608:34 tagging within AWS so a tag is a key and value pair that you can assign to anus
608:37 value pair that you can assign to anus resource so as you are creating a
608:39 resource so as you are creating a resource it's going to prompt you to say
608:41 resource it's going to prompt you to say hey what tags do you want to add you're
608:43 hey what tags do you want to add you're going to give a key you're going to give
608:44 going to give a key you're going to give a value and so some examples could be
608:46 a value and so some examples could be something like based on Department the
608:49 something like based on Department the status
608:49 status the team the environment uh the project
608:53 the team the environment uh the project as we have the example here the location
608:55 as we have the example here the location um and so tags allow you to organize
608:57 um and so tags allow you to organize your resources in the following way for
608:58 your resources in the following way for resource management so specific
609:00 resource management so specific workloads so you can say you know
609:02 workloads so you can say you know developer environments cost management
609:04 developer environments cost management and optimization so cost tracking
609:06 and optimization so cost tracking budgets and alerts operations management
609:08 budgets and alerts operations management so business commitments SLA operations
609:10 so business commitments SLA operations Mission critical Services security so
609:13 Mission critical Services security so classification of data security impact
609:15 classification of data security impact governance and Regulatory Compliance
609:17 governance and Regulatory Compliance automation workload Automation and so
609:20 automation workload Automation and so it's important to understand that
609:21 it's important to understand that tagging can be used in Junction with um
609:24 tagging can be used in Junction with um IM policy so that you can restrict
609:26 IM policy so that you can restrict access or things like that based on
609:28 access or things like that based on those tags
609:29 those tags [Music]
609:33 [Music] okay all right I just want to show you
609:35 okay all right I just want to show you one interesting thing about tags um and
609:38 one interesting thing about tags um and it's just the fact that it's used as the
609:40 it's just the fact that it's used as the name for some services so when you go to
609:43 name for some services so when you go to ec2 and you launch an instance uh the
609:46 ec2 and you launch an instance uh the way you set the name is by giving it a
609:47 way you set the name is by giving it a tag called name and I just want to prove
609:49 tag called name and I just want to prove prove that to you just like one of those
609:52 prove that to you just like one of those little exceptions here so we choose an
609:53 little exceptions here so we choose an instance
609:54 instance here we go to configure storage and then
609:57 here we go to configure storage and then what we do is we add a tag and we say
610:00 what we do is we add a tag and we say name um and my server name okay and then
610:04 name um and my server name okay and then we go ahead and review and launch we're
610:06 we go ahead and review and launch we're going to launch this I don't need a key
610:08 going to launch this I don't need a key pair so we'll just say proceed without
610:09 pair so we'll just say proceed without key pair I
610:12 key pair I acknowledge
610:15 acknowledge okay and we will go view the instances
610:18 okay and we will go view the instances and you'll see that is the name so um
610:20 and you'll see that is the name so um that's just like one of those exceptions
610:22 that's just like one of those exceptions or things that you can do with tags if
610:24 or things that you can do with tags if there's other things with tags I have no
610:26 there's other things with tags I have no idea that's just like a a basic one that
610:29 idea that's just like a a basic one that everybody should know and that's why I'm
610:31 everybody should know and that's why I'm shown to you with the tags but there you
610:34 shown to you with the tags but there you [Music]
610:37 [Music] go so we just looked at tags now let's
610:39 go so we just looked at tags now let's see what we can do with resource groups
610:41 see what we can do with resource groups which are a collection of resources that
610:43 which are a collection of resources that share one or more tags or another way to
610:45 share one or more tags or another way to look at it it it's a way for you to take
610:48 look at it it it's a way for you to take multiple tags and organize them uh into
610:51 multiple tags and organize them uh into resource groups so it helps you organize
610:53 resource groups so it helps you organize and consolidate information based on
610:55 and consolidate information based on your project and the resources that you
610:57 your project and the resources that you use resource groups can display details
610:59 use resource groups can display details about a group of resources based on
611:01 about a group of resources based on metrics alarms configuration settings
611:04 metrics alarms configuration settings and at any time you can modify the
611:06 and at any time you can modify the settings of your resource groups to
611:07 settings of your resource groups to change what resources appear resource
611:10 change what resources appear resource groups appear in the global console
611:12 groups appear in the global console header uh which is over here and under
611:15 header uh which is over here and under the systems manager so technically it's
611:17 the systems manager so technically it's part of an simple system assists manager
611:19 part of an simple system assists manager or System Manager interface but it's
611:21 or System Manager interface but it's also part of the global interface so
611:24 also part of the global interface so sometimes that's a bit confusing but uh
611:26 sometimes that's a bit confusing but uh that's where you can find it
611:27 that's where you can find it [Music]
611:30 [Music] okay all right so what I want to do is
611:33 okay all right so what I want to do is explore resource groups and also um
611:36 explore resource groups and also um tagging so what I want you to do is type
611:38 tagging so what I want you to do is type in resource groups at the top here and
611:41 in resource groups at the top here and it used to be
611:42 it used to be accessible not sure where they put it
611:44 accessible not sure where they put it but it used to be accessible here at the
611:45 but it used to be accessible here at the top but they might have moved it over to
611:47 top but they might have moved it over to systems manager so I'm going to go to
611:48 systems manager so I'm going to go to SSA here not sure why I can't seem to
611:51 SSA here not sure why I can't seem to find it today and on the left hand side
611:54 find it today and on the left hand side we're going to look
611:56 we're going to look for resource
613:47 all right so what I want to do is take a look at resource groups and I'm really
613:49 look at resource groups and I'm really surprised because it used to be
613:50 surprised because it used to be somewhere in the global now but I think
613:53 somewhere in the global now but I think they might have changed it um and what's
613:56 they might have changed it um and what's also frustrating is if I go over to
613:58 also frustrating is if I go over to systems manager it was over here as well
614:01 systems manager it was over here as well and so on the left hand side I'm looking
614:03 and so on the left hand side I'm looking for resource groups it's not showing up
614:06 for resource groups it's not showing up so I don't know best you keep moving
614:08 so I don't know best you keep moving things around on me and I'm I can only
614:10 things around on me and I'm I can only update things so quickly in my courses
614:12 update things so quickly in my courses but if you type in resource groups and
614:14 but if you type in resource groups and tag editor it's actually over here um I
614:17 tag editor it's actually over here um I guess it's its own Standalone service
614:19 guess it's its own Standalone service now why they keep changing things I
614:20 now why they keep changing things I don't know but uh the idea is we want to
614:23 don't know but uh the idea is we want to create a resource Group so you can
614:25 create a resource Group so you can create unlimited single region groups in
614:28 create unlimited single region groups in your ab account use the group to view
614:30 your ab account use the group to view related insights things like that so I'm
614:32 related insights things like that so I'm going to go ahead and create a resource
614:33 going to go ahead and create a resource Group you can see it can be tag based or
614:35 Group you can see it can be tag based or cloud formation based but I don't have
614:37 cloud formation based but I don't have any tags I don't really have anything
614:39 any tags I don't really have anything tags so what I'm going to do is make my
614:41 tags so what I'm going to do is make my way over to S3 we're just going to
614:42 way over to S3 we're just going to create some resources or a couple
614:44 create some resources or a couple resources here with some tags so that we
614:46 resources here with some tags so that we can do some filtration so I can go ahead
614:48 can do some filtration so I can go ahead and create a bucket I'm going to say my
614:51 and create a bucket I'm going to say my bucket uh this like that
614:54 bucket uh this like that whoops and then down below I'm going to
614:56 whoops and then down below I'm going to go down to tags and we're going to say
614:58 go down to tags and we're going to say project and we're going to say um RG for
615:02 project and we're going to say um RG for Resource
615:07 Group okay and then I can go back over here and then I'm going to just say I
615:09 here and then I'm going to just say I can say exactly what type I want I'm
615:11 can say exactly what type I want I'm going to support all resource
615:12 going to support all resource types and I'm going to say
615:16 types and I'm going to say project RG see how it aut completes and
615:20 project RG see how it aut completes and we'll go down below we'll just
615:23 we'll go down below we'll just say my
615:25 say my RG a test
615:28 RG a test RG we'll create
615:34 that and so now we have a resource Group and we can see them all in one place uh
615:36 and we can see them all in one place uh resource groups are probably useful for
615:38 resource groups are probably useful for using in um policies so I can say say
615:41 using in um policies so I can say say like Resource Group IM
615:44 like Resource Group IM policies that's probably what they're
615:46 policies that's probably what they're used for
615:51 okay so before you use I am managed to access resour groups you should
615:52 access resour groups you should understand I am features things like
615:55 understand I am features things like that and so administrators can use Json
615:59 that and so administrators can use Json policies to specify who has access to
616:01 policies to specify who has access to what and so a policy action or Resource
616:04 what and so a policy action or Resource Group is used following the prefix
616:05 Group is used following the prefix resource groups so my thought process
616:09 resource groups so my thought process there is that if you want to say okay
616:12 there is that if you want to say okay you have access to a resource you can
616:14 you have access to a resource you can just specify a resource Group and it
616:16 just specify a resource Group and it will include all the resources within
616:18 will include all the resources within there and so that might be um a better
616:21 there and so that might be um a better way to apply permissions at a per
616:23 way to apply permissions at a per project basis um and that could save you
616:26 project basis um and that could save you a lot of time writing out IM policies so
616:29 a lot of time writing out IM policies so that's basically all there really is to
616:30 that's basically all there really is to it also you kind of get an overview of
616:33 it also you kind of get an overview of of the U resources that are there so
616:36 of the U resources that are there so that can be kind of useful as well
616:38 that can be kind of useful as well there's the tag editor here I can't
616:40 there's the tag editor here I can't remember what you use this for you can
616:42 remember what you use this for you can set up tag
616:44 set up tag policies um tag policies help you
616:46 policies um tag policies help you standardize tags on resource groups in
616:47 standardize tags on resource groups in your accounts use uh to Define Tech
616:50 your accounts use uh to Define Tech policies and Abus org to attach them to
616:51 policies and Abus org to attach them to the entire organization um we're not in
616:54 the entire organization um we're not in the OR account so I'm not going to show
616:55 the OR account so I'm not going to show you this and it's not that important um
616:58 you this and it's not that important um but just understand that resource groups
616:59 but just understand that resource groups can be created and they are used within
617:01 can be created and they are used within I policies in order to um uh Grant or
617:04 I policies in order to um uh Grant or deny access to stuff I'm go ahead and
617:07 deny access to stuff I'm go ahead and delete that Resource Group and really
617:09 delete that Resource Group and really stop moving that on me if you move it
617:11 stop moving that on me if you move it one more time I'm just never going to
617:12 one more time I'm just never going to talk about resource groups again
617:14 talk about resource groups again [Music]
617:17 [Music] okay hey hey this is Andrew Brown from
617:19 okay hey hey this is Andrew Brown from exam Pro and we are taking a look at
617:21 exam Pro and we are taking a look at business Centric services and you might
617:23 business Centric services and you might say well why because in the exam guide
617:25 say well why because in the exam guide It's explicitly says that these are not
617:27 It's explicitly says that these are not covered but the thing is is that when
617:29 covered but the thing is is that when you're taking the exam some of the uh
617:31 you're taking the exam some of the uh choices might be some of these Services
617:34 choices might be some of these Services as distractors and if you know what they
617:36 as distractors and if you know what they are it's going to help make sure that
617:38 are it's going to help make sure that you um uh guess correctly and the thing
617:41 you um uh guess correctly and the thing is that some of these services are
617:42 is that some of these services are useful you should know about them so
617:44 useful you should know about them so that's another reason why I'm talking
617:46 that's another reason why I'm talking about them here so first one is Amazon
617:48 about them here so first one is Amazon connction this is a virtual call center
617:50 connction this is a virtual call center you can create workflows to Route
617:51 you can create workflows to Route callers you can record phone calls
617:53 callers you can record phone calls manage a que of callers based on the
617:55 manage a que of callers based on the same proven system used by Amazon
617:57 same proven system used by Amazon customer service teams we have
617:59 customer service teams we have workspaces this is a virtual Remote
618:00 workspaces this is a virtual Remote Desktop Service secure manage service
618:02 Desktop Service secure manage service for provision either windows or Linux
618:04 for provision either windows or Linux desktops in just a few minutes which
618:06 desktops in just a few minutes which quickly scales up to thousands of
618:07 quickly scales up to thousands of desktops we have work docs which is a
618:09 desktops we have work docs which is a shared collaboration service
618:11 shared collaboration service essentialized storage to share content
618:13 essentialized storage to share content in files it is similar to Microsoft
618:14 in files it is similar to Microsoft SharePoint think of it as a shared
618:16 SharePoint think of it as a shared folder where the company has ownership
618:18 folder where the company has ownership we have chime which is a video
618:20 we have chime which is a video conference service it is similar to zoom
618:22 conference service it is similar to zoom or Skype you can screen share have
618:24 or Skype you can screen share have multiple people on the on the same call
618:26 multiple people on the on the same call it is secure by default and can show you
618:28 it is secure by default and can show you a calendar of upcoming calls we have
618:30 a calendar of upcoming calls we have workmail this is a manag business uh
618:32 workmail this is a manag business uh email contacts calendar service with
618:34 email contacts calendar service with support of existing desktop and mobile
618:36 support of existing desktop and mobile email client applications that can
618:38 email client applications that can handle things like IMAP similar to Gmail
618:41 handle things like IMAP similar to Gmail or exchange we have pinpoint this is a
618:43 or exchange we have pinpoint this is a marketing campaign Management Service
618:45 marketing campaign Management Service pinpoint is for sending targeted emails
618:47 pinpoint is for sending targeted emails Via SMS push notifications voice
618:50 Via SMS push notifications voice messages you can perform um A to B
618:53 messages you can perform um A to B testing or create Journey so complex
618:55 testing or create Journey so complex email response workflows we have sces
618:58 email response workflows we have sces this is a transactional email service
619:00 this is a transactional email service you can integrate sces into your
619:02 you can integrate sces into your application to send emails you can
619:04 application to send emails you can create common templates track open rates
619:06 create common templates track open rates keep track of your reputation we have
619:08 keep track of your reputation we have quick site this is a business
619:09 quick site this is a business intelligence uh service connect multiple
619:11 intelligence uh service connect multiple data sources and quickly visualize data
619:13 data sources and quickly visualize data in the form of graphs with little to no
619:15 in the form of graphs with little to no knowledge definitely you want to
619:16 knowledge definitely you want to remember quick site SCS pinpoint Point
619:19 remember quick site SCS pinpoint Point uh cuz those definitely will show up in
619:20 uh cuz those definitely will show up in the exam the rest probably not but they
619:22 the exam the rest probably not but they could show up as distractors
619:25 could show up as distractors [Music]
619:28 [Music] okay hey this is Andrew Brown from exam
619:30 okay hey this is Andrew Brown from exam Pro and we are taking a look at
619:32 Pro and we are taking a look at provisioning services so let's first
619:34 provisioning services so let's first Define what is provisioning so
619:35 Define what is provisioning so provisioning is the allocation or
619:36 provisioning is the allocation or creation of resources and services to a
619:38 creation of resources and services to a customer and IT provisioning services
619:40 customer and IT provisioning services are responsible for setting up and
619:42 are responsible for setting up and managing those adaus Services we have a
619:44 managing those adaus Services we have a lot of services that do provisioning
619:46 lot of services that do provisioning most of them are just using cloud
619:47 most of them are just using cloud formation underneath which we will
619:48 formation underneath which we will mention here but let's get to it the
619:50 mention here but let's get to it the first is elastic beanock this is a
619:52 first is elastic beanock this is a platform as a service to easily deploy
619:54 platform as a service to easily deploy web apps eie will provision various a
619:56 web apps eie will provision various a with services like ec2 S3 SNS cloudwatch
619:59 with services like ec2 S3 SNS cloudwatch ec2 Auto scaling groups load balancers
620:02 ec2 Auto scaling groups load balancers uh and you can think of it as the Heroku
620:04 uh and you can think of it as the Heroku equivalent to AWS then you have opsworks
620:07 equivalent to AWS then you have opsworks this is a configuration Management
620:08 this is a configuration Management Service that also provides managed
620:10 Service that also provides managed instances of Open Source configuration
620:12 instances of Open Source configuration managed software such as chef and p
620:13 managed software such as chef and p puppet so you'll say I want to have a
620:16 puppet so you'll say I want to have a load balcer or I want to have servers
620:18 load balcer or I want to have servers and it will provision those for you uh
620:20 and it will provision those for you uh indirectly then you have Cloud
620:22 indirectly then you have Cloud information itself this is an
620:23 information itself this is an infrastructure modeling and provisioning
620:25 infrastructure modeling and provisioning service it automates the provisioning of
620:27 service it automates the provisioning of AD Services by writing Cloud information
620:28 AD Services by writing Cloud information templates in either Json or yaml and
620:30 templates in either Json or yaml and this is known as IAC or infrastructures
620:32 this is known as IAC or infrastructures of code you have quick starts these are
620:34 of code you have quick starts these are pre-made packages that can uh be
620:36 pre-made packages that can uh be launched and configure your Aus compute
620:38 launched and configure your Aus compute network storage and other services
620:40 network storage and other services required to deploy a workload ons we do
620:43 required to deploy a workload ons we do cover this in this course but quick
620:44 cover this in this course but quick starts is basically just Cloud
620:46 starts is basically just Cloud information templates that are authored
620:47 information templates that are authored by the community or um buy um Amazon
620:51 by the community or um buy um Amazon partner Network okay then we have abis
620:53 partner Network okay then we have abis Marketplace this is a digital catalog
620:55 Marketplace this is a digital catalog for thousands of software listings of
620:56 for thousands of software listings of independent software vendors that you
620:57 independent software vendors that you can use toine by in tes and deploy
620:59 can use toine by in tes and deploy software so the idea is that um you know
621:02 software so the idea is that um you know you can go there and provision whatever
621:03 you can go there and provision whatever kind of resource you want we have Abus
621:05 kind of resource you want we have Abus amplify this is a mobile web app
621:07 amplify this is a mobile web app framework that will provision multiple
621:09 framework that will provision multiple Aus Services as your backend it's
621:10 Aus Services as your backend it's specifically for serverless services I
621:13 specifically for serverless services I don't know why I didn't write that in
621:14 don't know why I didn't write that in there um but you know like Dynamo DB um
621:17 there um but you know like Dynamo DB um things like uh whatever the graphql
621:20 things like uh whatever the graphql service is called API Gateway things
621:22 service is called API Gateway things like that uh then we have ads app Runner
621:25 like that uh then we have ads app Runner this is a fully managed service that
621:26 this is a fully managed service that makes it easy for developers to quickly
621:27 makes it easy for developers to quickly deploy containerized web apps and apis
621:30 deploy containerized web apps and apis at scale with no prior information
621:32 at scale with no prior information experience required it's basically a
621:34 experience required it's basically a platform as a service but for containers
621:37 platform as a service but for containers we have AIS co-pilot this is a command
621:38 we have AIS co-pilot this is a command line interface that enables customers to
621:40 line interface that enables customers to quickly launch and manage containerized
621:42 quickly launch and manage containerized applications any bus it basically is a a
621:46 applications any bus it basically is a a CLI tool that sets up a bunch of scripts
621:48 CLI tool that sets up a bunch of scripts to set up pipelines for you makes things
621:50 to set up pipelines for you makes things super easy we have Adis code start this
621:52 super easy we have Adis code start this provides a unified user interface
621:53 provides a unified user interface enabling you to manage your software
621:55 enabling you to manage your software development activities in one place
621:57 development activities in one place usually launch common types of stacks
621:58 usually launch common types of stacks like lamp then we have cdk and so this
622:01 like lamp then we have cdk and so this is infrastructure as a code tool allows
622:03 is infrastructure as a code tool allows you to use your favorite programming
622:04 you to use your favorite programming language generates out Cloud information
622:06 language generates out Cloud information templates as a means of I so there you
622:09 templates as a means of I so there you [Music]
622:12 [Music] go hey this is Andrew Brown from exam
622:15 go hey this is Andrew Brown from exam Pro and we are taking a look at a
622:16 Pro and we are taking a look at a elastic bean stock before we do let's
622:18 elastic bean stock before we do let's just Define what passes so platform as a
622:21 just Define what passes so platform as a service allows customers to develop run
622:23 service allows customers to develop run and manage applications without uh the
622:25 and manage applications without uh the complexity of building and maintaining
622:26 complexity of building and maintaining the infrastructure typically associated
622:28 the infrastructure typically associated with developing and launching an app and
622:30 with developing and launching an app and so elastic beanock is a pass for
622:33 so elastic beanock is a pass for deploying web apps with little to know
622:35 deploying web apps with little to know uh knowledge of the underlying
622:36 uh knowledge of the underlying infrastructure so you can focus on
622:38 infrastructure so you can focus on writing application code instead of
622:40 writing application code instead of setting up an automated deployment
622:41 setting up an automated deployment pipeline or devops tasks the idea here
622:44 pipeline or devops tasks the idea here is you choose a platform upload your
622:46 is you choose a platform upload your code and it runs with little uh
622:48 code and it runs with little uh knowledge of the infrastructure and adab
622:50 knowledge of the infrastructure and adab us will say that it's generally not
622:51 us will say that it's generally not recommended for production apps but just
622:53 recommended for production apps but just understand that they are saying this for
622:54 understand that they are saying this for Enterprises and large companies if
622:56 Enterprises and large companies if you're a small to medium company you can
622:58 you're a small to medium company you can run elastic beanock for quite a long
623:00 run elastic beanock for quite a long time it'll work out great elastic
623:02 time it'll work out great elastic beanock is powered by cloud formation
623:03 beanock is powered by cloud formation templates and it sets up for you elastic
623:06 templates and it sets up for you elastic load balancer asgs RDS ec2 instances
623:10 load balancer asgs RDS ec2 instances preconfigured for particular platforms
623:13 preconfigured for particular platforms uh monitoring integration with
623:14 uh monitoring integration with cloudwatch SNS uh deployment strategies
623:17 cloudwatch SNS uh deployment strategies like in place blue green green uh
623:18 like in place blue green green uh deployment has security built in so it
623:21 deployment has security built in so it could rotate out your passwords for your
623:23 could rotate out your passwords for your databases and it could run dockerized
623:25 databases and it could run dockerized environments and so when we talk about
623:26 environments and so when we talk about platforms you can see we have Docker
623:28 platforms you can see we have Docker multicontainer Docker uh go.net Java
623:32 multicontainer Docker uh go.net Java nodejs Ruby PHP python Tomcat go a bunch
623:35 nodejs Ruby PHP python Tomcat go a bunch of stuff and just to kind of give you
623:37 of stuff and just to kind of give you that architectural diagram to show you
623:39 that architectural diagram to show you that it it can launch of multiple things
623:42 that it it can launch of multiple things [Music]
623:45 [Music] okay hey it's Andrew Brown from exam Pro
623:48 okay hey it's Andrew Brown from exam Pro and this fall along we're going to learn
623:49 and this fall along we're going to learn all about elastic beanock maybe not
623:52 all about elastic beanock maybe not everything but we're going to definitely
623:53 everything but we're going to definitely know how to at least um use the service
623:56 know how to at least um use the service so elastic beanock is a platform as a
623:58 so elastic beanock is a platform as a service and what it does is it allows
624:00 service and what it does is it allows you to uh deploy web applications very
624:03 you to uh deploy web applications very easily so here I've made my way over to
624:05 easily so here I've made my way over to elastic beanock that we an environment
624:07 elastic beanock that we an environment and app and then we set up our
624:09 and app and then we set up our application we have two tiers a web
624:11 application we have two tiers a web server environment a worker environment
624:13 server environment a worker environment worker environment is great for long
624:14 worker environment is great for long running
624:15 running workloads performing uh background jobs
624:17 workloads performing uh background jobs and things like that and then you have
624:19 and things like that and then you have your web server which is your web server
624:21 your web server which is your web server and you can have both and it's generally
624:23 and you can have both and it's generally recommended to do so um but anyway what
624:26 recommended to do so um but anyway what we'll do is create a new application so
624:27 we'll do is create a new application so let's say my app here and uh there's
624:30 let's say my app here and uh there's some tags we can do and then it will
624:32 some tags we can do and then it will name based on the environment then we
624:34 name based on the environment then we need to choose an environment name so
624:36 need to choose an environment name so I'll say my environment and just put a
624:38 I'll say my environment and just put a bunch of numbers in there hit the check
624:39 bunch of numbers in there hit the check availability scroll on down and we have
624:41 availability scroll on down and we have two options manage platform custom
624:43 two options manage platform custom platform and I'm not sure why custom is
624:46 platform and I'm not sure why custom is blanked out but it would allow you to um
624:49 blanked out but it would allow you to um it would allow you to I think use your
624:51 it would allow you to I think use your own containers so I'm a big fan of Ruby
624:53 own containers so I'm a big fan of Ruby so I'm going to drop down to Ruby and
624:56 so I'm going to drop down to Ruby and here we have a bunch of different
624:57 here we have a bunch of different versions and so 2.7 is pretty pretty new
625:00 versions and so 2.7 is pretty pretty new which is pretty good and then there's
625:02 which is pretty good and then there's the platform version which is fine and
625:03 the platform version which is fine and the great thing is it comes with a
625:05 the great thing is it comes with a sample application now you could hit
625:07 sample application now you could hit create environment but you'd be missing
625:08 create environment but you'd be missing on a lot if you don't hit this configure
625:10 on a lot if you don't hit this configure more options I don't know why they put
625:12 more options I don't know why they put it there it's a not a very good UI but
625:15 it there it's a not a very good UI but um if you click here you actually get to
625:16 um if you click here you actually get to see everything possible and so up here
625:19 see everything possible and so up here we can have some presets where we can
625:20 we can have some presets where we can have a single instance so this is where
625:23 have a single instance so this is where it's literally running a single E2
625:24 it's literally running a single E2 instance so it's very cost effective you
625:26 instance so it's very cost effective you can have it with spot uh spot pricing so
625:28 can have it with spot uh spot pricing so you save money um there's High
625:30 you save money um there's High availability so you know if you want it
625:32 availability so you know if you want it set up with a load balcer an auto
625:34 set up with a load balcer an auto scaling group it will scale very well or
625:36 scaling group it will scale very well or you can do custom configuration we
625:38 you can do custom configuration we scroll on down
625:39 scroll on down here you can enable Amazon x-ray you can
625:42 here you can enable Amazon x-ray you can rotate out logs you can do log
625:45 rotate out logs you can do log streaming um there's a lot of stuff here
625:48 streaming um there's a lot of stuff here and basically it's just like it sets up
625:50 and basically it's just like it sets up most for you but you can pretty much
625:52 most for you but you can pretty much configure what you want as well if we
625:54 configure what you want as well if we had the load balcer set if I go here go
625:57 had the load balcer set if I go here go to High availability now we'll be able
625:58 to High availability now we'll be able to change our load balancer options you
626:01 to change our load balancer options you have different ways of deploying so you
626:02 have different ways of deploying so you can go here and then change it from all
626:04 can go here and then change it from all at once rolling immutable traffic
626:06 at once rolling immutable traffic splitting depends on what your use case
626:09 splitting depends on what your use case is um we can set up a key pair to be
626:12 is um we can set up a key pair to be able to log into the
626:14 able to log into the machine there's a whole variety of
626:16 machine there's a whole variety of things you can connect your database as
626:18 things you can connect your database as well so it can create the database
626:20 well so it can create the database alongside with it and then it can
626:22 alongside with it and then it can actually rotate out the key so you don't
626:24 actually rotate out the key so you don't have to worry about it which is really
626:25 have to worry about it which is really nice what I'm going to do is go to the
626:27 nice what I'm going to do is go to the top here and just choose a single
626:28 top here and just choose a single instance because I want this to be very
626:29 instance because I want this to be very cost effective we're going to go ahead
626:31 cost effective we're going to go ahead and hit create
626:33 and hit create environment and so we are just going to
626:35 environment and so we are just going to wait for that to start up and I'll see
626:37 wait for that to start up and I'll see you back when it's done
626:40 you back when it's done okay okay so it's been uh quite a while
626:43 okay okay so it's been uh quite a while here and it says a few minutes so if it
626:45 here and it says a few minutes so if it does do this what you can do is just
626:47 does do this what you can do is just give it a hard refresh I have feeling
626:48 give it a hard refresh I have feeling that it's already done is it done yeah
626:51 that it's already done is it done yeah it's already done so and here it says on
626:53 it's already done so and here it says on September 2020 elastic talku Etc default
626:56 September 2020 elastic talku Etc default default I don't care um but anyway so
626:59 default I don't care um but anyway so this application I guess it's in a
627:00 this application I guess it's in a pending State um I'm not sure why let's
627:03 pending State um I'm not sure why let's go take a look here causes instance has
627:06 go take a look here causes instance has not sent any data since launch uh none
627:09 not sent any data since launch uh none of the instances are sending data so
627:10 of the instances are sending data so that's kind of interesting because um I
627:14 that's kind of interesting because um I shouldn't have any problems you know
627:15 shouldn't have any problems you know what I mean so what I'm going to do is
627:17 what I mean so what I'm going to do is just reboot this Miss machine and see if
627:18 just reboot this Miss machine and see if that fixes the issue there but usually
627:20 that fixes the issue there but usually it's not that difficult cuz it's the
627:22 it's not that difficult cuz it's the sample application it's not up to me um
627:25 sample application it's not up to me um as to how to fix this you know what I
627:28 as to how to fix this you know what I mean
627:28 mean so I'm not sure but um what we'll do is
627:33 so I'm not sure but um what we'll do is we will let the machine reboot and see
627:35 we will let the machine reboot and see if that makes any difference okay all
627:37 if that makes any difference okay all right so after rebooting that machine
627:38 right so after rebooting that machine now it looks like the server is healthy
627:39 now it looks like the server is healthy so it's not all that bad right if you do
627:42 so it's not all that bad right if you do run issues that is something that you
627:43 run issues that is something that you can do and so uh let's go see if there's
627:48 can do and so uh let's go see if there's is actually working so at the top here
627:49 is actually working so at the top here we have a link and so I can just right
627:51 we have a link and so I can just right click here it says congratulations your
627:53 click here it says congratulations your first 8us elastic uh beanock Ruby
627:55 first 8us elastic uh beanock Ruby application is now running so it's all
627:58 application is now running so it's all in good shape um there's a lot of stuff
628:00 in good shape um there's a lot of stuff that's going on here in elastic beanock
628:02 that's going on here in elastic beanock that we can do uh we can go back to our
628:03 that we can do uh we can go back to our configuration and change any of our
628:06 configuration and change any of our options here so there's a lot of stuff
628:08 options here so there's a lot of stuff as you can see uh we get logging uh so
628:11 as you can see uh we get logging uh so click the request log so if we click on
628:13 click the request log so if we click on this and say last 100
628:15 this and say last 100 lines should be able to get uh logging
628:18 lines should be able to get uh logging data we have to download it I wish it
628:20 data we have to download it I wish it was kind of in line but here you can
628:22 was kind of in line but here you can kind of see what's going on so we have
628:23 kind of see what's going on so we have STD access logs error logs Puma logs
628:26 STD access logs error logs Puma logs elastic beam stock engine so you could
628:28 elastic beam stock engine so you could use that to debug very common to take
628:31 use that to debug very common to take that over to uh support if you do have
628:33 that over to uh support if you do have issues uh for Health it monitors the
628:36 issues uh for Health it monitors the health of the instances which is great
628:38 health of the instances which is great then we have some uh monitoring uh data
628:41 then we have some uh monitoring uh data here so gives you uh like a built
628:43 here so gives you uh like a built dashboard so that's kind of nice you can
628:45 dashboard so that's kind of nice you can set up alarms uh you have not defined
628:48 set up alarms uh you have not defined alarms you can add them via the
628:49 alarms you can add them via the monitoring dashboard so I guess you'd
628:51 monitoring dashboard so I guess you'd have
628:52 have to you'd have to somehow add them um I
628:55 to you'd have to somehow add them um I don't think I've ever added alarms for
628:57 don't think I've ever added alarms for um Classic Bean but it's nice to know
628:59 um Classic Bean but it's nice to know that they have them you can set up
629:01 that they have them you can set up schedules for managed events then this
629:04 schedules for managed events then this is event data so it's just kind of
629:06 is event data so it's just kind of telling you it's kind of like logs it
629:07 telling you it's kind of like logs it just tells you of things that have
629:09 just tells you of things that have changed so there's stuff like that what
629:11 changed so there's stuff like that what I'm looking for is to see how I can
629:13 I'm looking for is to see how I can download the existing
629:16 download the existing application because there's a version
629:18 application because there's a version uploaded here oh the source is over here
629:21 uploaded here oh the source is over here okay
629:23 okay so I think it's probably over here the
629:25 so I think it's probably over here the one that's running so that's
629:29 one that's running so that's it if it was easy to find what I
629:31 it if it was easy to find what I probably would do is just modify it and
629:33 probably would do is just modify it and oh yeah it's over here so if we go here
629:35 oh yeah it's over here so if we go here and download the
629:42 zip I wonder if it'd be even worth um playing with this so let's I'm just
629:43 playing with this so let's I'm just going to see if we can go over to
629:45 going to see if we can go over to Cloud9 and give this a go quickly
629:49 Cloud9 and give this a go quickly so if we go over and launch a Cloud9
629:51 so if we go over and launch a Cloud9 environment maybe we can tweak it and
629:53 environment maybe we can tweak it and upload a revised version so we say
629:55 upload a revised version so we say create new we'll say EB
629:59 create new we'll say EB um uh environment for elastic beanock
630:03 um uh environment for elastic beanock we'll set it all the defaults that's all
630:05 we'll set it all the defaults that's all fine it's all within the free tier we'll
630:06 fine it's all within the free tier we'll create that environment what I'm going
630:08 create that environment what I'm going to do is just take this uh Ruby zip file
630:11 to do is just take this uh Ruby zip file and move it to my
630:12 and move it to my desktop and as that is loading we'll
630:14 desktop and as that is loading we'll give it a moment here I'm just going to
630:16 give it a moment here I'm just going to go back and I was just curious ious does
630:18 go back and I was just curious ious does it let you download it directly from
630:19 it let you download it directly from here no so the only thing is that you
630:22 here no so the only thing is that you know if you download that application
630:25 know if you download that application elastic beanock usually has a
630:26 elastic beanock usually has a configuration file with it and so I
630:28 configuration file with it and so I don't know if they would have given that
630:30 don't know if they would have given that to us but if they did that would be
630:32 to us but if they did that would be really great but we just have to wait
630:35 really great but we just have to wait for that to uh launch there as well I
630:38 for that to uh launch there as well I guess you can save configurations and
630:39 guess you can save configurations and roll back on those as
630:47 well um but we will just wait a moment here
630:48 here while it's going I might just peek
630:49 while it's going I might just peek inside of this file to see what it is
630:52 inside of this file to see what it is this ZIP
630:53 this ZIP contains just going to go to my desktop
630:55 contains just going to go to my desktop here open up that
630:57 here open up that zip so it looks pretty simple it doesn't
631:00 zip so it looks pretty simple it doesn't even look like a rails app it looks like
631:01 even look like a rails app it looks like maybe it's a Sinatra app I thought
631:03 maybe it's a Sinatra app I thought before that it would it would have
631:04 before that it would it would have deployed a Ruby on Rails application but
631:06 deployed a Ruby on Rails application but maybe they keep it really
631:08 maybe they keep it really simple
631:10 simple um I don't see usually it's like yamell
631:13 um I don't see usually it's like yamell files they use for configuration I don't
631:16 files they use for configuration I don't see that there
631:18 see that there so it might be that the default settings
631:21 so it might be that the default settings will work fine uh there's a king fig. Ru
631:23 will work fine uh there's a king fig. Ru and stuff like that but once Cloud9 is
631:25 and stuff like that but once Cloud9 is up here we will upload this and see what
631:28 up here we will upload this and see what we can do with it okay so there we go uh
631:30 we can do with it okay so there we go uh Cloud9 is ready to go and so if we right
631:32 Cloud9 is ready to go and so if we right click here whoops right click here we
631:34 click here whoops right click here we should be up be able to upload a file if
631:36 should be up be able to upload a file if not we can go up here to the
631:38 not we can go up here to the top or it's here or
631:41 top or it's here or there where is the upload I've I've
631:44 there where is the upload I've I've uploaded things in here so I absolutely
631:45 uploaded things in here so I absolutely know we can I just got to find it
632:09 Cloud9 oh boy that's not helpful that's not helpful at all so let me just click
632:11 not helpful at all so let me just click around a little bit here I mean worst
632:13 around a little bit here I mean worst case I can always just bring it in Via a
632:15 case I can always just bring it in Via a curl oh upload local files there it is I
632:17 curl oh upload local files there it is I was is just not um being patient okay so
632:20 was is just not um being patient okay so we'll drag that on in there and we
632:23 we'll drag that on in there and we will did it upload yep it's right there
632:26 will did it upload yep it's right there okay great so we need to unzip it so
632:28 okay great so we need to unzip it so what I'll do is just drag this on up
632:30 what I'll do is just drag this on up here I'll do an LS and we'll say
632:32 here I'll do an LS and we'll say unzip
632:34 unzip rubyzip and so that unzipped the
632:36 rubyzip and so that unzipped the contents there I think the readme was
632:39 contents there I think the readme was part of Cloud9 so I'm going to go ahead
632:41 part of Cloud9 so I'm going to go ahead and delete that out not that it's going
632:43 and delete that out not that it's going to hurt anything and so now what we can
632:46 to hurt anything and so now what we can do and we'll delete the original
632:48 do and we'll delete the original the original zip
632:50 the original zip there um and let's see if we can make a
632:53 there um and let's see if we can make a change here so I'm just going to open up
632:55 change here so I'm just going to open up see what it is so it's yeah it's running
632:57 see what it is so it's yeah it's running Sinatra so that's pretty clear there we
632:59 Sinatra so that's pretty clear there we have a proc file to say how it runs we
633:01 have a proc file to say how it runs we have a worker sample so that's just
633:03 have a worker sample so that's just tells how the requests go you don't need
633:06 tells how the requests go you don't need to know any of this I'm just kind of
633:07 to know any of this I'm just kind of clicking through it because I know Ruby
633:08 clicking through it because I know Ruby very well we have a cron yamel file so
633:11 very well we have a cron yamel file so that could be something that gets loaded
633:12 that could be something that gets loaded in here so I think basically a Sinatra
633:15 in here so I think basically a Sinatra app probably just works off the bat here
633:17 app probably just works off the bat here but if we want to make a change we
633:19 but if we want to make a change we probably just make a change over to here
633:21 probably just make a change over to here so I'll go down here and this is
633:24 so I'll go down here and this is your second 8s elastic beanock
633:27 your second 8s elastic beanock application so the next thing we need to
633:29 application so the next thing we need to do is actually zip the contents here I
633:31 do is actually zip the contents here I don't know if it would let us zip it
633:33 don't know if it would let us zip it with in here but I'll have to look like
633:35 with in here but I'll have to look like Zip the contents of a
633:38 Zip the contents of a directory Linux this goes to
633:42 directory Linux this goes to show Google is
633:44 show Google is everything so the easiest way to zip a
633:47 everything so the easiest way to zip a full
633:57 um zip everything in the current
634:01 zip everything in the current directory
634:10 Linux okay that's easy so we'll go back over here and we will type in
634:14 over here and we will type in zip and it wants hyphen R for recursive
634:17 zip and it wants hyphen R for recursive which makes sense and then the name of
634:20 which makes sense and then the name of the zip so
634:23 the zip so um uh Ruby 2.zip and we'll do
634:37 period zip warning found is who is zip
634:39 zip oh uh yum install zip maybe we have to
634:43 oh uh yum install zip maybe we have to install uh ZIP but maybe it's not
634:46 install uh ZIP but maybe it's not installed pseudo yum install
634:49 installed pseudo yum install zip since it's Amazon 2 uses
634:52 zip since it's Amazon 2 uses yum and so package already installed so
634:55 yum and so package already installed so I'm going to type zip again so zip is
634:56 I'm going to type zip again so zip is there now great oops don't need to
634:58 there now great oops don't need to install
635:06 twice zip warning Ruby to zip not found or
635:17 empty okay so install zip and use zip pyph R you can use the flag to best
635:23 pyph R you can use the flag to best compensate so if that's not working what
635:25 compensate so if that's not working what I'm going to do is just go up a
635:34 directory why is it saying not found or empty
635:58 use okay so I think the problem was is I was using the wrong flag so I put F
636:00 was using the wrong flag so I put F instead of R I don't know why I did that
636:03 instead of R I don't know why I did that so I probably should have done this okay
636:05 so I probably should have done this okay and so that should have copied all the
636:06 and so that should have copied all the contents of that file so what I'm going
636:08 contents of that file so what I'm going to do is go ahead whoops make sure I
636:10 to do is go ahead whoops make sure I have that selected and download that
636:12 have that selected and download that file and once I have downloaded that
636:14 file and once I have downloaded that file I'm going to just open the contents
636:16 file I'm going to just open the contents to make sure it is what I expect it to
636:18 to make sure it is what I expect it to be so we're going to open that up and
636:22 be so we're going to open that up and whoops get out of here when and it looks
636:24 whoops get out of here when and it looks like everything I want so what I'm going
636:26 like everything I want so what I'm going to do is go back over to here I'm going
636:29 to do is go back over to here I'm going to make sure I have my Ruby 2 on my
636:32 to make sure I have my Ruby 2 on my desktop we're going to see if we can to
636:33 desktop we're going to see if we can to upload another version here so upload
636:35 upload another version here so upload and deploy choose the file we're going
636:38 and deploy choose the file we're going to go all the way to my desktop here and
636:40 to go all the way to my desktop here and we're going to choose Ruby 2 and um like
636:44 we're going to choose Ruby 2 and um like Ruby 2 will be the version name or we'll
636:46 Ruby 2 will be the version name or we'll just say two and we'll deploy and we'll
636:48 just say two and we'll deploy and we'll see if that works okay but there are
636:51 see if that works okay but there are like uh elastic beanock configuration
636:53 like uh elastic beanock configuration files like yaml files that can sit in
636:55 files like yaml files that can sit in the root directory and so generally
636:56 the root directory and so generally you're used to seeing them there but you
636:58 you're used to seeing them there but you know I imagine that eight of us probably
637:00 know I imagine that eight of us probably engineered these examples so that it
637:01 engineered these examples so that it uses all the default settings but uh
637:04 uses all the default settings but uh once this is deployed I'll see you back
637:05 once this is deployed I'll see you back here in a moment okay after a short
637:07 here in a moment okay after a short little wait it looks like it has
637:09 little wait it looks like it has deployed so what I'm going to do is just
637:10 deployed so what I'm going to do is just close my other tabs here and open this
637:12 close my other tabs here and open this up and see if it's worked it says your
637:15 up and see if it's worked it says your second ad elastic being stck Ruby
637:17 second ad elastic being stck Ruby application so uh we were successful uh
637:20 application so uh we were successful uh deploying that out which is really great
637:22 deploying that out which is really great so what we can do now is just close that
637:24 so what we can do now is just close that tab there and uh since we have that
637:26 tab there and uh since we have that cloud environment it will shut down on
637:28 cloud environment it will shut down on its own but you know just for your
637:30 its own but you know just for your benefit I think that we should shut it
637:32 benefit I think that we should shut it off right now so go ahead and delete
637:34 off right now so go ahead and delete that I'm going to go back over to
637:36 that I'm going to go back over to elastic beanock here and I just want to
637:39 elastic beanock here and I just want to destroy all of it so we'll see if we can
637:41 destroy all of it so we'll see if we can just do that from here terminate the
637:44 just do that from here terminate the application enter the name so I think we
637:47 application enter the name so I think we probably have to enter that in
637:49 probably have to enter that in there and so I think that oh a problem
637:53 there and so I think that oh a problem occurred rate
637:56 occurred rate exceeded what that's AWS for you so it's
638:00 exceeded what that's AWS for you so it's not a big deal I would just go and check
638:02 not a big deal I would just go and check it
638:03 it again and maybe what we'll do is just
638:05 again and maybe what we'll do is just delete the application
638:14 first okay so that one is possibly deleting
638:26 changing can't even tell we'll go ahead oh can't take that one
638:42 out delete application again if it takes you a couple times
638:44 again if it takes you a couple times it's not a big
638:46 it's not a big deal it's AWS 4 yes so there's a lot of
638:50 deal it's AWS 4 yes so there's a lot of moving parts so it looks like it is
638:51 moving parts so it looks like it is terminating the instance and so we just
638:54 terminating the instance and so we just have to wait for that to complete uh
638:56 have to wait for that to complete uh once that is done we might have to just
638:57 once that is done we might have to just tear down the environment so I'll see
638:58 tear down the environment so I'll see you back here when it has finished
639:00 you back here when it has finished tearing this down okay all right and so
639:02 tearing this down okay all right and so after a short little wait here I think
639:03 after a short little wait here I think it's been destroyed we'll just double
639:05 it's been destroyed we'll just double check by going to the applications going
639:06 check by going to the applications going to the environments yeah and it's all
639:08 to the environments yeah and it's all gone probably because I initially
639:10 gone probably because I initially deleted that environment and then took
639:11 deleted that environment and then took the application with it so I probably
639:12 the application with it so I probably didn't have to delete the app separately
639:15 didn't have to delete the app separately um but uh yeah so there you go just make
639:17 um but uh yeah so there you go just make sure your Cloud9 environment is gone and
639:19 sure your Cloud9 environment is gone and you are a okay there'll probably be some
639:21 you are a okay there'll probably be some like lingering S3 buckets so if you do
639:23 like lingering S3 buckets so if you do want to get rid of those you can it's
639:24 want to get rid of those you can it's not going to hurt anything having those
639:26 not going to hurt anything having those around uh but they do tend to stack up
639:29 around uh but they do tend to stack up after a while which is kind of annoying
639:30 after a while which is kind of annoying so if you don't like them you can just
639:32 so if you don't like them you can just empty them
639:33 empty them out as I am doing here whoops oh just
639:37 out as I am doing here whoops oh just permanently
639:42 delete copy that text there we go back
639:50 to here and then just go take out that bucket delete that
639:58 there oh if you get this this is kind of annoying but uh elastic beanock lights
640:00 annoying but uh elastic beanock lights to put in an I am permission or policy
640:03 to put in an I am permission or policy in here so if you go down here there's a
640:04 in here so if you go down here there's a bucket policy you just have to delete it
640:06 bucket policy you just have to delete it out it prevents it from being
640:09 out it prevents it from being deleted and we'll go back over here and
640:12 deleted and we'll go back over here and then we will delete
640:15 then we will delete it okay and yeah there we go that's
640:19 it okay and yeah there we go that's [Music]
640:23 [Music] it so let's take a look at serverless
640:25 it so let's take a look at serverless services on AWS and this is not
640:27 services on AWS and this is not including all of them because we're
640:29 including all of them because we're looking at the most purely serverless
640:31 looking at the most purely serverless Services uh if we try to include all the
640:34 Services uh if we try to include all the serverless services it would just be too
640:36 serverless services it would just be too long of a list uh but let's take a look
640:38 long of a list uh but let's take a look here so um before we do let's just
640:40 here so um before we do let's just redefine what is serverless so when the
640:42 redefine what is serverless so when the underlying servers infrastructure and
640:43 underlying servers infrastructure and operating system is taken care of by the
640:44 operating system is taken care of by the CSP serverless is generally by default
640:47 CSP serverless is generally by default highly available scalable cost effective
640:49 highly available scalable cost effective you pay for what you use the first one
640:51 you pay for what you use the first one is Dynamo DB which is a serverless nosql
640:54 is Dynamo DB which is a serverless nosql key value and document database is
640:56 key value and document database is designed to scale to billions of records
640:58 designed to scale to billions of records with guaranteed consistent data return
641:00 with guaranteed consistent data return in at least a second you do not have to
641:02 in at least a second you do not have to worry about managing chars you have
641:04 worry about managing chars you have simple storage service S3 which is a
641:06 simple storage service S3 which is a serverless object storage service you
641:08 serverless object storage service you can upload very large and unlimited
641:10 can upload very large and unlimited amounts of files you can pay for what
641:12 amounts of files you can pay for what you store you don't worry about the
641:13 you store you don't worry about the underlying file system or upgrading the
641:15 underlying file system or upgrading the dis size we have e CS fargate which is a
641:18 dis size we have e CS fargate which is a seress orchestration container service
641:20 seress orchestration container service is the same as ECS except you pay on
641:23 is the same as ECS except you pay on demand per running container with ECS
641:25 demand per running container with ECS you have to keep a ec2 server running
641:28 you have to keep a ec2 server running even if you have no containers running
641:30 even if you have no containers running where adus manages the underlying server
641:32 where adus manages the underlying server so you don't have to scale or upgrade
641:34 so you don't have to scale or upgrade the ec2 server we have adus Lambda which
641:37 the ec2 server we have adus Lambda which is a serverless function service you can
641:40 is a serverless function service you can run code without provisioning or
641:41 run code without provisioning or managing servers you upload a small
641:43 managing servers you upload a small piece of code choose uh how much memory
641:46 piece of code choose uh how much memory you want how long want the function is
641:47 you want how long want the function is allowed to run before timing out your
641:49 allowed to run before timing out your charge based on the runtime of the
641:51 charge based on the runtime of the service function rounded to the nearest
641:53 service function rounded to the nearest 100 milliseconds we have step functions
641:56 100 milliseconds we have step functions this is the state machine service it
641:58 this is the state machine service it coordinates multiple Services into
642:01 coordinates multiple Services into serverless workflows easily shared data
642:03 serverless workflows easily shared data among lambdas have a group of lambdas
642:06 among lambdas have a group of lambdas wait for each other create logical steps
642:08 wait for each other create logical steps also work with fargate tasks we have
642:10 also work with fargate tasks we have Aurora servus this is a serous on demand
642:13 Aurora servus this is a serous on demand version of Aurora so when you want most
642:15 version of Aurora so when you want most of the benefits of Aurora but uh trade
642:17 of the benefits of Aurora but uh trade you have to trade off those cold starts
642:19 you have to trade off those cold starts or you don't have lots of traffic or
642:21 or you don't have lots of traffic or demand so things Ser the services that
642:23 demand so things Ser the services that we could have put in here as well is
642:24 we could have put in here as well is like API Gateway appsync it amplify um
642:29 like API Gateway appsync it amplify um and those are like the the first two
642:31 and those are like the the first two were application Integrations you could
642:33 were application Integrations you could say sqs SNS those are all serous
642:36 say sqs SNS those are all serous services but you know again we'd be here
642:38 services but you know again we'd be here all day if I I I listed them all
642:40 all day if I I I listed them all [Music]
642:44 [Music] right all right let's take a look at
642:46 right all right let's take a look at what is is serverless and we did look at
642:49 what is is serverless and we did look at it from a server perspective earlier in
642:51 it from a server perspective earlier in the course but let's just try to
642:52 the course but let's just try to abstractly Define it and talk about the
642:54 abstractly Define it and talk about the architecture so serverless architecture
642:56 architecture so serverless architecture generally describes fully managed cloud
642:58 generally describes fully managed cloud services and the classification of a
643:01 services and the classification of a cloud service being serverless is not a
643:03 cloud service being serverless is not a Boolean answer it's it's not a yes or no
643:06 Boolean answer it's it's not a yes or no but an answer on a scale where a cloud
643:08 but an answer on a scale where a cloud service has a degree of serverless and I
643:10 service has a degree of serverless and I do have to point out that this
643:12 do have to point out that this definition might not be accepted by um
643:15 definition might not be accepted by um everybody because calist is one of those
643:18 everybody because calist is one of those uh terms where um we've had a bunch of
643:21 uh terms where um we've had a bunch of different cloud service providers Define
643:23 different cloud service providers Define it differently and then we have thought
643:25 it differently and then we have thought leaders that have a particular concept
643:27 leaders that have a particular concept of what it is so you know I just do my
643:29 of what it is so you know I just do my best to try to make this practical here
643:31 best to try to make this practical here for you but a seress service could have
643:34 for you but a seress service could have all or most of the following
643:36 all or most of the following characteristics and so it could be
643:38 characteristics and so it could be highly elastic and scalable highly
643:40 highly elastic and scalable highly available highly durable secure by
643:42 available highly durable secure by default it abstracts away the underlying
643:44 default it abstracts away the underlying infrastructure and our build based on
643:46 infrastructure and our build based on the execution of your business tasks a
643:49 the execution of your business tasks a lot of times that that cost is not uh is
643:53 lot of times that that cost is not uh is not always represented as something that
643:55 not always represented as something that is like I'm paying X for compute it
643:58 is like I'm paying X for compute it could be abstracted out into some kind
644:00 could be abstracted out into some kind of um credit that uh doesn't necessarily
644:03 of um credit that uh doesn't necessarily maap to something physical then we have
644:05 maap to something physical then we have serverless can scale to zero meaning
644:07 serverless can scale to zero meaning when it's not in use the serverless
644:09 when it's not in use the serverless resources cost nothing uh and these two
644:12 resources cost nothing uh and these two last topics basically pull into pay for
644:15 last topics basically pull into pay for Value so you don't pay for Idol servers
644:17 Value so you don't pay for Idol servers you're paying for the value uh that your
644:20 you're paying for the value uh that your service
644:21 service provides and uh my friend Daniel who
644:24 provides and uh my friend Daniel who runs the servus Toronto group he likes
644:26 runs the servus Toronto group he likes to describe servus as being similar to
644:28 to describe servus as being similar to like energy efficient rating so an
644:31 like energy efficient rating so an analogy of servus could be similar to
644:32 analogy of servus could be similar to energy rating labels which allows
644:34 energy rating labels which allows consumers to compare the Energy
644:35 consumers to compare the Energy Efficiency of a product so some services
644:38 Efficiency of a product so some services are more servoless than others and again
644:41 are more servoless than others and again you know some people might not agree
644:42 you know some people might not agree with that where there's a a definitive
644:44 with that where there's a a definitive yes or no answer but I think that's the
644:46 yes or no answer but I think that's the best way to look at it
644:48 best way to look at it [Music]
644:51 [Music] okay hey it's Andrew Brown from exam Pro
644:54 okay hey it's Andrew Brown from exam Pro and we're taking a look at windows on
644:56 and we're taking a look at windows on ads so ads has multiple cloud services
644:58 ads so ads has multiple cloud services and tools to make it easy for you to run
645:00 and tools to make it easy for you to run window workloads on ads so let's get to
645:02 window workloads on ads so let's get to it so the first is Windows servers on
645:04 it so the first is Windows servers on ec2 so you can select from a number of
645:06 ec2 so you can select from a number of Windows Server versions including the
645:08 Windows Server versions including the latest version uh like Windows Server
645:10 latest version uh like Windows Server 2019 uh for uh databases we have SQL
645:14 2019 uh for uh databases we have SQL server on RDS you can select from a
645:15 server on RDS you can select from a number of SQL database versions then we
645:18 number of SQL database versions then we have adabs directory service which lets
645:20 have adabs directory service which lets you run Microsoft active directory ad as
645:23 you run Microsoft active directory ad as a managed service we have ads license
645:25 a managed service we have ads license manager which makes it easier to manage
645:27 manager which makes it easier to manage your software licenses from software
645:29 your software licenses from software vendors such as Microsoft we have Amazon
645:32 vendors such as Microsoft we have Amazon FSX for Windows file server which is a
645:34 FSX for Windows file server which is a fully managed scalable storage built for
645:37 fully managed scalable storage built for Windows we have the ads SDK which allows
645:40 Windows we have the ads SDK which allows you to write code in your favorite
645:41 you to write code in your favorite language to interact with adus API but
645:43 language to interact with adus API but it specifically has support for net a
645:46 it specifically has support for net a language favorite for Windows developers
645:48 language favorite for Windows developers we have Amazon workspaces so this allows
645:51 we have Amazon workspaces so this allows you to run a virtual desktop you can
645:52 you to run a virtual desktop you can launch a Windows 10 desktop to provide
645:55 launch a Windows 10 desktop to provide secure and durable workstations that is
645:57 secure and durable workstations that is accessible from wherever you have an
645:59 accessible from wherever you have an internet connection AOS Lambda supports
646:01 internet connection AOS Lambda supports poers shells a programming language to
646:03 poers shells a programming language to write your serverless functions and we
646:05 write your serverless functions and we have adus migration acceleration program
646:08 have adus migration acceleration program map for Windows is a migration
646:11 map for Windows is a migration methodology for moving large Enterprises
646:13 methodology for moving large Enterprises it us has Amazon partners that
646:15 it us has Amazon partners that specialize in providing professional
646:17 specialize in providing professional services for map this is not just
646:19 services for map this is not just everything for Windows on AWS like if
646:21 everything for Windows on AWS like if you want to move your SQL Server over to
646:25 you want to move your SQL Server over to RDS postest I believe they've like they
646:28 RDS postest I believe they've like they created an adapter to do that um but
646:31 created an adapter to do that um but yeah hopefully that gives you an idea
646:32 yeah hopefully that gives you an idea what you can do with Windows on AWS
646:34 what you can do with Windows on AWS [Music]
646:38 [Music] okay hey this is Andrew Brown from exam
646:40 okay hey this is Andrew Brown from exam Pro and I want to show you how you can
646:41 Pro and I want to show you how you can launch a Windows uh server on AWS so
646:45 launch a Windows uh server on AWS so what you're going to do is go to the top
646:46 what you're going to do is go to the top here and we are going to type in ec2 and
646:49 here and we are going to type in ec2 and from here uh what we'll do is we'll go
646:52 from here uh what we'll do is we'll go ahead and launch ourselves a new ec2
646:55 ahead and launch ourselves a new ec2 instance and we are going to have um a
646:58 instance and we are going to have um a selection of instances that we can
647:00 selection of instances that we can launch and so we're looking for the
647:02 launch and so we're looking for the Microsoft Windows uh server and this is
647:05 Microsoft Windows uh server and this is interesting there's actually a free tier
647:08 interesting there's actually a free tier uh eligible that is crazy because if you
647:10 uh eligible that is crazy because if you go over to Azure they don't have a free
647:12 go over to Azure they don't have a free tier Windows Server us does so that's
647:16 tier Windows Server us does so that's pretty crazy um and it runs on a T2
647:18 pretty crazy um and it runs on a T2 micro no that can't be right there's no
647:22 micro no that can't be right there's no way it can run a T2 micro that seems
647:24 way it can run a T2 micro that seems like that's too small let's try it okay
647:27 like that's too small let's try it okay I just don't believe it because when you
647:28 I just don't believe it because when you use Azure you have to choose a
647:30 use Azure you have to choose a particular size of instance by default
647:32 particular size of instance by default and it's a lot more expensive and there
647:34 and it's a lot more expensive and there is no free tier so we'll go here there
647:37 is no free tier so we'll go here there are free tiar just not really for
647:38 are free tiar just not really for Windows in particular so we'll go here
647:41 Windows in particular so we'll go here this looks good security groups this
647:43 this looks good security groups this opens up RDP so we can get into that
647:45 opens up RDP so we can get into that machine we're gon to go next here
647:47 machine we're gon to go next here and launch this
647:49 and launch this machine says if you plan to use Ami the
647:52 machine says if you plan to use Ami the benefits the Microsoft license Mobility
647:54 benefits the Microsoft license Mobility check out this form that's not something
647:57 check out this form that's not something we're worried about today and I mean I
648:00 we're worried about today and I mean I guess we can create a key pair I'm not
648:02 guess we can create a key pair I'm not sure what we would use a key pair for
648:05 sure what we would use a key pair for here um for Windows Amis the private key
648:07 here um for Windows Amis the private key file is required to obtain the password
648:09 file is required to obtain the password used to log into the instance okay so I
648:11 used to log into the instance okay so I guess we're going to need it
648:12 guess we're going to need it so Windows key
648:19 great we'll launch that instance and uh I'll see you back here
648:22 instance and uh I'll see you back here when it launches but I just don't
648:23 when it launches but I just don't believe that it would launch that fast
648:25 believe that it would launch that fast you know all right so after a short
648:27 you know all right so after a short little wait here the server is ready and
648:30 little wait here the server is ready and so let's see if we can actually go ahead
648:31 so let's see if we can actually go ahead and connect to this so I'm going to hit
648:33 and connect to this so I'm going to hit connect here and we'll go over to rdb
648:35 connect here and we'll go over to rdb client so you connect to your windows
648:37 client so you connect to your windows instance using a remote desktop client
648:39 instance using a remote desktop client of your choice and downloading and
648:40 of your choice and downloading and running the RDP shortcut below so I'm
648:43 running the RDP shortcut below so I'm gon to go ahead and download this and
648:45 gon to go ahead and download this and you're GNA have to be on a um Windows
648:49 you're GNA have to be on a um Windows machine to be able to do this or have an
648:50 machine to be able to do this or have an rdb client installed I think there's one
648:52 rdb client installed I think there's one for Mac that you can get from the Apple
648:54 for Mac that you can get from the Apple Store um but all I'm going to do is just
648:57 Store um but all I'm going to do is just double click the file
648:59 double click the file so you probably can't see it here I'm
649:01 so you probably can't see it here I'm just going to expand this try to oh my
649:05 just going to expand this try to oh my computer is being silly but anyway there
649:07 computer is being silly but anyway there we go we moved it over there I'm just
649:08 we go we moved it over there I'm just going to drag over here and just double
649:10 going to drag over here and just double click this image so you can see that I'm
649:12 click this image so you can see that I'm doing it I'm saying
649:14 doing it I'm saying connect okay
649:17 connect okay and it's going to ask for a password so
649:19 and it's going to ask for a password so I'm going to hope that I can just click
649:20 I'm going to hope that I can just click that and get the password so to decrypt
649:22 that and get the password so to decrypt the password you will need your key PA
649:25 the password you will need your key PA instance you'll have to upload that and
649:27 instance you'll have to upload that and I don't know if I remember having to do
649:28 I don't know if I remember having to do that before but it's a great security
649:30 that before but it's a great security measure so I'm fine with it I'm going to
649:32 measure so I'm fine with it I'm going to drag my key to my desktop so I can see
649:34 drag my key to my desktop so I can see what's going on there as
649:36 what's going on there as well and we're going to go grab that and
649:39 well and we're going to go grab that and decrypt the password and so
649:43 decrypt the password and so now um where's our password oh it's
649:46 now um where's our password oh it's right here okay so we're going to grab
649:48 right here okay so we're going to grab that password
649:49 that password there we will paste that in said
649:54 there we will paste that in said okay say yes and see if we can connect
649:57 okay say yes and see if we can connect to this instance and if this is running
649:59 to this instance and if this is running on a T2 micro I'm going to lose it
650:01 on a T2 micro I'm going to lose it because that is just
650:10 cheap it just just doesn't seem possible to me because again on Azure you have to
650:12 to me because again on Azure you have to launch an instance with a lot of stuff
650:14 launch an instance with a lot of stuff and it just uh seems uh crazy what's
650:17 and it just uh seems uh crazy what's also interesting is that adabs uh on
650:19 also interesting is that adabs uh on Windows like launches so fast it's
650:21 Windows like launches so fast it's unbelievable how fast these servers spin
650:24 unbelievable how fast these servers spin up and it's just very unusual but yeah
650:26 up and it's just very unusual but yeah so we are in
650:28 so we are in here
650:30 here um it's not asking me to activate or
650:32 um it's not asking me to activate or anything so I guess there's already a
650:34 anything so I guess there's already a Windows license
650:37 Windows license here and um I'm not sure if there's any
650:40 here and um I'm not sure if there's any kind of like games installed like do we
650:42 kind of like games installed like do we have mind sweeper can I play M sweeper
650:44 have mind sweeper can I play M sweeper on here
650:47 on here it's a data center server so I'm
650:49 it's a data center server so I'm assuming not um but yeah so this is a
650:51 assuming not um but yeah so this is a Windows server and it's pretty
650:52 Windows server and it's pretty impressive that this works I'm not sure
650:54 impressive that this works I'm not sure if this is going to have an outbound
650:55 if this is going to have an outbound connection here um just because we
650:57 connection here um just because we probably would have to configure it just
650:59 probably would have to configure it just say okay I just I really don't think
651:01 say okay I just I really don't think it's going to go out to the Internet by
651:10 default yeah so you'd probably have to do some stuff you
651:17 know oh no we go so yeah we got to the Internet so it's totally possible but uh
651:20 Internet so it's totally possible but uh yeah that's about it that's all I really
651:21 yeah that's about it that's all I really wanted to show you so what I'm going to
651:23 wanted to show you so what I'm going to do is just go back to ec2 and we're
651:25 do is just go back to ec2 and we're going to shut down the server here just
651:28 going to shut down the server here just expand that
651:35 there and we will go here and we will terminate that
651:37 terminate that instance good we'll give that a refresh
651:39 instance good we'll give that a refresh that's shutting down and we are
651:42 that's shutting down and we are [Music]
651:45 [Music] done hey this is Andre Brown from exam
651:48 done hey this is Andre Brown from exam Pro and we are taking a look at Abus
651:50 Pro and we are taking a look at Abus license manager and before we do let's
651:52 license manager and before we do let's talk about what b y l or bring your own
651:55 talk about what b y l or bring your own license mean so this is the process of
651:57 license mean so this is the process of reusing an existing software license to
651:59 reusing an existing software license to run vendor software on a cloud vendor
652:01 run vendor software on a cloud vendor Computing service Bol allows companies
652:04 Computing service Bol allows companies to save money since they may have
652:05 to save money since they may have purchased the license in bulk or the
652:07 purchased the license in bulk or the time that provided a greater discount
652:09 time that provided a greater discount than if purchased again and so the
652:11 than if purchased again and so the example of this could be the license
652:13 example of this could be the license Mobility provided by Microsoft volume
652:15 Mobility provided by Microsoft volume licensing to customers with eligible
652:17 licensing to customers with eligible server applications covered by the
652:19 server applications covered by the Microsoft software Assurance program uh
652:21 Microsoft software Assurance program uh and I don't know what I was trying to do
652:22 and I don't know what I was trying to do there I guess maybe it's just essay and
652:23 there I guess maybe it's just essay and I missed the parentheses there on the
652:25 I missed the parentheses there on the end no big big deal um but Aus license
652:28 end no big big deal um but Aus license manager is a service that makes it
652:29 manager is a service that makes it easier for you to manage your software
652:32 easier for you to manage your software licenses from software vendors centrally
652:34 licenses from software vendors centrally across ads in your on premise
652:35 across ads in your on premise environments ads license manager
652:38 environments ads license manager software uh that is licensed based on
652:40 software uh that is licensed based on Virtual cores uh physical cores sockets
652:43 Virtual cores uh physical cores sockets or a number of machines this includes a
652:44 or a number of machines this includes a variety of software products for
652:46 variety of software products for Microsoft IBM sap Oracle and other
652:49 Microsoft IBM sap Oracle and other vendors so that's the idea you say what
652:51 vendors so that's the idea you say what is my license type it's it's bound to
652:53 is my license type it's it's bound to this amount of vcpus aabus license
652:56 this amount of vcpus aabus license manager works with ec2 with dedicated
652:58 manager works with ec2 with dedicated instances dedicated hosts and even spot
653:00 instances dedicated hosts and even spot instances and for RDS there's only for
653:02 instances and for RDS there's only for Oracle databases so you can import that
653:04 Oracle databases so you can import that license for your Oracle server um just
653:08 license for your Oracle server um just understand that um if you're doing
653:10 understand that um if you're doing Microsoft Windows servers or Microsoft
653:12 Microsoft Windows servers or Microsoft SQL Server license you're generally
653:14 SQL Server license you're generally going to need a dedicated host because
653:16 going to need a dedicated host because of the insurance program uh and this can
653:18 of the insurance program uh and this can really show up on your exam so even
653:20 really show up on your exam so even though AIS license manager works on
653:22 though AIS license manager works on dedicated instances and spot instances
653:24 dedicated instances and spot instances just try to gravitate towards dedicated
653:27 just try to gravitate towards dedicated hosts on the server or on the exam
653:30 hosts on the server or on the exam [Music]
653:33 [Music] okay all right let's take a look at the
653:35 okay all right let's take a look at the logging services that we have available
653:37 logging services that we have available in AWS so the first one here is cloud
653:40 in AWS so the first one here is cloud trail and this logs all API calls
653:42 trail and this logs all API calls whether it's SDK or the CLI so if it's
653:45 whether it's SDK or the CLI so if it's making a call to the API it's going to
653:46 making a call to the API it's going to get tracked between AD services and this
653:48 get tracked between AD services and this is really useful to say who can we blame
653:50 is really useful to say who can we blame who was the person that did this so who
653:53 who was the person that did this so who created this bucket who spent up that
653:54 created this bucket who spent up that expensive ec2 instance who launched the
653:56 expensive ec2 instance who launched the stagemaker notebook um and the idea here
653:59 stagemaker notebook um and the idea here is you can detect developer
654:00 is you can detect developer misconfigurations detect malicious
654:02 misconfigurations detect malicious actors or automate responses through the
654:04 actors or automate responses through the system then you have cloudwatch which is
654:06 system then you have cloudwatch which is a collection of multiple Services I
654:08 a collection of multiple Services I commonly say this is like an umbrella
654:10 commonly say this is like an umbrella service because it has so many things
654:11 service because it has so many things underneath it so we have cloudwatch logs
654:13 underneath it so we have cloudwatch logs which is a centralized place to store
654:15 which is a centralized place to store your cloud services log data and
654:16 your cloud services log data and application logs metrics which
654:18 application logs metrics which represents a Time ordered set of data
654:20 represents a Time ordered set of data points a variable uh to monitor uh event
654:23 points a variable uh to monitor uh event Bridge or previously known as cloudwatch
654:25 Bridge or previously known as cloudwatch events triggers an event based on a
654:27 events triggers an event based on a condition so every hour take a snapshot
654:29 condition so every hour take a snapshot of the server alarms triggers
654:31 of the server alarms triggers notifications based on metrics
654:33 notifications based on metrics dashboards creates visualizations based
654:35 dashboards creates visualizations based on metrics and that's not all of the
654:37 on metrics and that's not all of the things that are under cloudwatch but
654:38 things that are under cloudwatch but those are the core five ones you should
654:40 those are the core five ones you should always know um absolutely there then we
654:43 always know um absolutely there then we have adus x-ray this is for distributed
654:45 have adus x-ray this is for distributed tracing system so you can use it to
654:46 tracing system so you can use it to pinpoint issues within your
654:48 pinpoint issues within your microservices so you see how data moves
654:50 microservices so you see how data moves from one app to another how long it took
654:52 from one app to another how long it took to move and if it failed uh to move
654:54 to move and if it failed uh to move forward
654:56 forward [Music]
654:59 [Music] okay let's take a closer look here at
655:01 okay let's take a closer look here at ABA cloud trail because it's a very
655:02 ABA cloud trail because it's a very important service so it's a service that
655:05 important service so it's a service that enables governance compliance
655:06 enables governance compliance operational auditing and risk auditing
655:08 operational auditing and risk auditing of your A's account and the idea is that
655:10 of your A's account and the idea is that every time you make an API call it's
655:12 every time you make an API call it's going to show up as some kind of
655:13 going to show up as some kind of structured data that you can uh interact
655:15 structured data that you can uh interact with or read through so AB cloud trail
655:17 with or read through so AB cloud trail is used to monitor API calls and actions
655:19 is used to monitor API calls and actions made on ads account easily identify
655:22 made on ads account easily identify which users and accounts made the call
655:23 which users and accounts made the call to AWS so you might have the WHERE so
655:25 to AWS so you might have the WHERE so the source IP address the when the event
655:27 the source IP address the when the event time the who the user agent uh and the
655:31 time the who the user agent uh and the what the region resource and action so
655:33 what the region resource and action so I'm just going to get my pen tool out
655:34 I'm just going to get my pen tool out here for a moment and just notice you
655:36 here for a moment and just notice you have the event time so when it happened
655:37 have the event time so when it happened the source the name the region The
655:40 the source the name the region The Source IP address the user agent uh who
655:42 Source IP address the user agent uh who was doing it so here was leforge the
655:45 was doing it so here was leforge the response element so you know it's very
655:46 response element so you know it's very clear what is going on here um and then
655:49 clear what is going on here um and then you know cloud trail is already logging
655:51 you know cloud trail is already logging by default and will collect logs for the
655:53 by default and will collect logs for the uh for the last 90 days via event
655:54 uh for the last 90 days via event history if you need more than 90 days
655:56 history if you need more than 90 days you need to create a trail which is very
655:58 you need to create a trail which is very common you'll go into AWS and make one
656:00 common you'll go into AWS and make one right away trails are outputed to S3 and
656:02 right away trails are outputed to S3 and do not have like event history to
656:05 do not have like event history to analyze a trail you have to use Amazon
656:07 analyze a trail you have to use Amazon Athena and I'm sure there are other ways
656:09 Athena and I'm sure there are other ways to analyze it within AWS but here's just
656:11 to analyze it within AWS but here's just what the event history looks like so
656:13 what the event history looks like so right off the bat you can already see
656:15 right off the bat you can already see that there are information there there
656:16 that there are information there there I'm not sure if they've updated the UI
656:18 I'm not sure if they've updated the UI there they might have uh as even when
656:20 there they might have uh as even when I'm recording this I kind of feel like
656:22 I'm recording this I kind of feel like if we go into the follow along which we
656:23 if we go into the follow along which we will um I bet they might have updated
656:25 will um I bet they might have updated that the idea here is that you know you
656:27 that the idea here is that you know you can browse the last 90 days but anything
656:30 can browse the last 90 days but anything outside of that you're going to have to
656:31 outside of that you're going to have to do a little bit of work yourself
656:32 do a little bit of work yourself [Music]
656:36 [Music] okay so we're not going to cover all the
656:38 okay so we're not going to cover all the cloudwatch services there's just too
656:39 cloudwatch services there's just too many but let's look at the most
656:40 many but let's look at the most important ones and one of that those
656:42 important ones and one of that those important ones is cloudwatch alarms so
656:44 important ones is cloudwatch alarms so cloudwatch alarms monitors a cloud watch
656:46 cloudwatch alarms monitors a cloud watch metric based on a defined threshold uh
656:48 metric based on a defined threshold uh so here you can see there's kind of a
656:50 so here you can see there's kind of a condition being set there so if the
656:51 condition being set there so if the network in is greater than 300 for one
656:53 network in is greater than 300 for one data points within five minutes it's
656:55 data points within five minutes it's going to breach an alarm so uh that's
656:57 going to breach an alarm so uh that's when it goes outside is defined
656:59 when it goes outside is defined threshold and so the state's going to
657:00 threshold and so the state's going to either be something like okay so the
657:02 either be something like okay so the metric or expression is within the
657:03 metric or expression is within the defined threshold so do nothing alarm
657:06 defined threshold so do nothing alarm the metric or expression is outside of
657:07 the metric or expression is outside of the defined threshold so do something or
657:09 the defined threshold so do something or insufficient data the alarm has just
657:11 insufficient data the alarm has just started the metric is not available none
657:14 started the metric is not available none enough data is available and so when the
657:16 enough data is available and so when the state has changed you can Define actions
657:17 state has changed you can Define actions that it should take and so that could be
657:19 that it should take and so that could be doing a notification autoscaling group
657:22 doing a notification autoscaling group or any C2 action um so cloudwatch alarms
657:25 or any C2 action um so cloudwatch alarms are really useful for a variety of
657:26 are really useful for a variety of reasons the one that we will come across
657:28 reasons the one that we will come across right away will be setting up a billing
657:31 right away will be setting up a billing [Music]
657:34 [Music] alarm so let's take a look here at the
657:36 alarm so let's take a look here at the autonomy of an alarm and so I have this
657:38 autonomy of an alarm and so I have this nice graphic here to kind of explain
657:39 nice graphic here to kind of explain that there and so the first thing is we
657:41 that there and so the first thing is we have our threshold condition uh and so
657:43 have our threshold condition uh and so here you can just set a value and say
657:45 here you can just set a value and say okay the value is a th000 or 100
657:48 okay the value is a th000 or 100 whatever you want it to be and this is
657:49 whatever you want it to be and this is going to be for a particular metric the
657:52 going to be for a particular metric the actual data we are measuring so maybe in
657:54 actual data we are measuring so maybe in this case we're measuring Network in so
657:55 this case we're measuring Network in so the volume of incoming Network traffic
657:57 the volume of incoming Network traffic measured in bytes so when using 5 minute
657:59 measured in bytes so when using 5 minute monitoring divide by 300 we get bytes
658:01 monitoring divide by 300 we get bytes per second if you're trying to figure
658:02 per second if you're trying to figure out that calculation there you have data
658:04 out that calculation there you have data points so these represent the metrics
658:06 points so these represent the metrics measurement at a given point then you
658:08 measurement at a given point then you have the period how often it checks to
658:10 have the period how often it checks to evaluate the alarm so we could say every
658:12 evaluate the alarm so we could say every five minutes uh you have the evaluation
658:14 five minutes uh you have the evaluation period so the number of previous periods
658:16 period so the number of previous periods and the data points to alarm so you can
658:18 and the data points to alarm so you can say one data point is breach and
658:20 say one data point is breach and evaluation period going back four
658:22 evaluation period going back four periods so this is what triggers the
658:24 periods so this is what triggers the alarm uh the thing I just want you to
658:26 alarm uh the thing I just want you to know is that you can set a value right
658:28 know is that you can set a value right and that it's based on a particular
658:29 and that it's based on a particular metric and there is a bit of logic here
658:32 metric and there is a bit of logic here in terms of uh the alarm so it's not as
658:34 in terms of uh the alarm so it's not as simple as just it's breached but there's
658:36 simple as just it's breached but there's this period thing happening
658:38 this period thing happening [Music]
658:41 [Music] okay let's take a look at cloudwatch log
658:44 okay let's take a look at cloudwatch log so to understand that we have log
658:46 so to understand that we have log streams and log groups so a log stream
658:48 streams and log groups so a log stream is a stream that represents a sequence
658:51 is a stream that represents a sequence of events from an application or
658:52 of events from an application or instance being monitored so imagine you
658:54 instance being monitored so imagine you have an ec2 instance running a web
658:56 have an ec2 instance running a web application and you want those logs to
658:58 application and you want those logs to be streamed to cloudwatch logs that's
659:00 be streamed to cloudwatch logs that's what we're talking about here so you can
659:01 what we're talking about here so you can create log streams manually uh but
659:03 create log streams manually uh but generally this is automatically done by
659:04 generally this is automatically done by the service you using uh unless you
659:07 the service you using uh unless you collecting application logs on an ec2
659:08 collecting application logs on an ec2 instance as I just described here is a
659:10 instance as I just described here is a log group of a Lambda function you can
659:12 log group of a Lambda function you can see the log streams are named after the
659:14 see the log streams are named after the running instance lambda's fre uh
659:16 running instance lambda's fre uh frequency run on New instances so the
659:18 frequency run on New instances so the stream contains timestamps so what I'm
659:20 stream contains timestamps so what I'm trying to say here is that there's a
659:22 trying to say here is that there's a variety of different Services Lambda RDS
659:25 variety of different Services Lambda RDS what have you and they already send
659:26 what have you and they already send their logs to cloudwatch logs and
659:28 their logs to cloudwatch logs and they're and they're going to vary okay
659:30 they're and they're going to vary okay so here's a log group of an application
659:32 so here's a log group of an application log running on uc2 you can see here the
659:34 log running on uc2 you can see here the log streams are named after the running
659:35 log streams are named after the running instance ID here is the log group for
659:37 instance ID here is the log group for Adis glue you can see that the log
659:39 Adis glue you can see that the log streams are named after the glue jobs um
659:42 streams are named after the glue jobs um and so you know we have the streams but
659:44 and so you know we have the streams but let's talk about the actual data that's
659:45 let's talk about the actual data that's made up of it the log events so this
659:47 made up of it the log events so this represents a single event in a log file
659:49 represents a single event in a log file log events can be seen within the log
659:51 log events can be seen within the log stream and so here's an example of you
659:54 stream and so here's an example of you would open this up in cloudwatch logs
659:56 would open this up in cloudwatch logs and you can actually see what what was
659:58 and you can actually see what what was being reported back by your server you
659:59 being reported back by your server you can filter these events to filter out uh
660:01 can filter these events to filter out uh logs based on simple or pattern matching
660:04 logs based on simple or pattern matching uh syntax so here I'm just typing in
660:05 uh syntax so here I'm just typing in saying give me all those debug stuff and
660:08 saying give me all those debug stuff and you know this isn't very robust but 8 of
660:10 you know this isn't very robust but 8 of us does have a better way of analyzing
660:11 us does have a better way of analyzing your logs which is log insights which
660:13 your logs which is log insights which we'll look at here in a moment
660:20 so we were just looking at uh cloudwatch log events and how those are collected
660:22 log events and how those are collected but there's an easier way to analyze
660:23 but there's an easier way to analyze them and that's with log insights so you
660:26 them and that's with log insights so you can interactively search and analyze
660:27 can interactively search and analyze your cloudwatch log data and it has the
660:29 your cloudwatch log data and it has the following advantages more robust
660:30 following advantages more robust filtering than using the simple filter
660:32 filtering than using the simple filter in the in a log stream less burdensome
660:34 in the in a log stream less burdensome than having to export logs to S3 and
660:36 than having to export logs to S3 and analyze them via Athena cloudwatch log
660:38 analyze them via Athena cloudwatch log Insight supports all types of logs so
660:40 Insight supports all types of logs so cloudwatch log insights is commonly used
660:43 cloudwatch log insights is commonly used via the console to do ad hoc queries
660:44 via the console to do ad hoc queries against log groups
660:46 against log groups so that's just kind of an example of
660:48 so that's just kind of an example of someone writing a query and cloudwatch
660:51 someone writing a query and cloudwatch log insights uses a query syntax so a
660:54 log insights uses a query syntax so a single request can query up to 20 logs
660:56 single request can query up to 20 logs query time out after 50 minutes if not
660:59 query time out after 50 minutes if not completed and queries results are
661:01 completed and queries results are available for seven days so abis provide
661:04 available for seven days so abis provide sample queries that you can get started
661:06 sample queries that you can get started for common tasks and uh and ease the
661:08 for common tasks and uh and ease the learning into the query syntax a good
661:10 learning into the query syntax a good example is filtering VPC flow logs so
661:12 example is filtering VPC flow logs so you go there you click it and you start
661:13 you go there you click it and you start to getting some data you can create and
661:15 to getting some data you can create and save your own queries uh to make future
661:17 save your own queries uh to make future repetitive tasks easier on the certified
661:19 repetitive tasks easier on the certified Cloud prer they're not going to ask you
661:20 Cloud prer they're not going to ask you all these details about this stuff but I
661:22 all these details about this stuff but I just conceptually want you to understand
661:24 just conceptually want you to understand that in login sites you can use it to uh
661:27 that in login sites you can use it to uh robustly filter your logs based on this
661:29 robustly filter your logs based on this query syntax language you get this kind
661:31 query syntax language you get this kind of visual and it's really really
661:38 useful let's take a look here at cloudwatch metric which represents a
661:39 cloudwatch metric which represents a Time ordered set of data points it's a
661:41 Time ordered set of data points it's a variable that is monitored over time so
661:43 variable that is monitored over time so cloudwatch comes with many predefined
661:45 cloudwatch comes with many predefined metrics that are generally names spaced
661:46 metrics that are generally names spaced by Services uh so the idea is that like
661:49 by Services uh so the idea is that like we were to look at the ec2 it has these
661:52 we were to look at the ec2 it has these particular metric so we have CPU
661:54 particular metric so we have CPU utilization discre Ops dis write Ops
661:57 utilization discre Ops dis write Ops disre bytes dis write bytes Network in
662:00 disre bytes dis write bytes Network in network out Network packet in uh Network
662:03 network out Network packet in uh Network packets out and the idea is that you can
662:05 packets out and the idea is that you can just like click there into ec2 and then
662:07 just like click there into ec2 and then kind of get that data there and so Cloud
662:10 kind of get that data there and so Cloud metrics are leveraged by other things
662:11 metrics are leveraged by other things like Cloud watch events Cloud watch
662:13 like Cloud watch events Cloud watch alarms cloudwatch dashboards so just
662:16 alarms cloudwatch dashboards so just understand that
662:17 understand that [Music]
662:20 [Music] okay all right so what I want to do in
662:22 okay all right so what I want to do in this follow along is show you a bit
662:24 this follow along is show you a bit about cloud trail so we're going to go
662:26 about cloud trail so we're going to go to the top here and type in cloud trail
662:28 to the top here and type in cloud trail the great thing about cloud trail is
662:29 the great thing about cloud trail is it's already turned on by default so
662:31 it's already turned on by default so it's already kind of collecting some
662:33 it's already kind of collecting some information so it's here it says now use
662:36 information so it's here it says now use I am access analyzer on cloud trail
662:38 I am access analyzer on cloud trail trails that sounds pretty cool to me but
662:40 trails that sounds pretty cool to me but uh we shouldn't have to create a trail
662:41 uh we shouldn't have to create a trail right off the bat because we'll have
662:43 right off the bat because we'll have some event history and the event history
662:44 some event history and the event history allows us to see
662:46 allows us to see things that are happening within our
662:47 things that are happening within our account in the last 90 days um but the
662:50 account in the last 90 days um but the thing is if you want something Beyond 90
662:51 thing is if you want something Beyond 90 days you're going to have to create a
662:53 days you're going to have to create a trail uh but if we just take a look here
662:55 trail uh but if we just take a look here we can kind of see uh as we've been
662:57 we can kind of see uh as we've been doing a lot of things all the kind of
662:58 doing a lot of things all the kind of actions that's been happening so here we
662:59 actions that's been happening so here we have an instance that I terminated so if
663:01 have an instance that I terminated so if I go in here and and look at it I can
663:04 I go in here and and look at it I can kind of see uh more information about it
663:07 kind of see uh more information about it so we can see when it terminated who had
663:10 so we can see when it terminated who had done that what access key they had used
663:12 done that what access key they had used the Event Source the request
663:14 the Event Source the request ID um the Source IP what whether it was
663:17 ID um the Source IP what whether it was readon what was the event type that was
663:20 readon what was the event type that was called the resource there and this is
663:22 called the resource there and this is the actual raw record so this is
663:24 the actual raw record so this is generally how I would look at it or this
663:25 generally how I would look at it or this is how you had to look at it back in the
663:27 is how you had to look at it back in the day um but the idea is that you'd have
663:29 day um but the idea is that you'd have that user identity described the event
663:31 that user identity described the event time the source the event name the
663:33 time the source the event name the region The Source IP the uh the agent
663:36 region The Source IP the uh the agent all the information there okay and so
663:38 all the information there okay and so this is a great way to kind of find
663:40 this is a great way to kind of find stuff so you can go through here and try
663:42 stuff so you can go through here and try to debug things this way so you can go
663:44 to debug things this way so you can go to the event name and so if you if you
663:47 to the event name and so if you if you go here you can kind of get uh see a bit
663:49 go here you can kind of get uh see a bit of stuff here so if I was just trying to
663:51 of stuff here so if I was just trying to say like maybe create I'm just trying to
663:54 say like maybe create I'm just trying to find something that I know that I've
663:55 find something that I know that I've been doing like create access keys I can
663:57 been doing like create access keys I can see the access keys that going to be
663:58 see the access keys that going to be created within this uh sandbox account
664:01 created within this uh sandbox account here for the user and things like that
664:03 here for the user and things like that so it's a great way to kind of find
664:05 so it's a great way to kind of find things but generally you're going to
664:06 things but generally you're going to always want to turn on uh or create your
664:09 always want to turn on uh or create your own trail so if you go here and hit
664:11 own trail so if you go here and hit create Trail say my new Trail and um
664:15 create Trail say my new Trail and um you're going to need an bucket for that
664:16 you're going to need an bucket for that you'll probably want encryption turned
664:18 you'll probably want encryption turned on which sounds good to me you'll
664:20 on which sounds good to me you'll absolutely want log file validation and
664:23 absolutely want log file validation and generally you don't want to store your
664:24 generally you don't want to store your your Cloud tra logs within the existing
664:27 your Cloud tra logs within the existing account you want to have a isolated
664:29 account you want to have a isolated hardened account that's that is uh
664:32 hardened account that's that is uh infrequently accessed or only by your
664:35 infrequently accessed or only by your your Cloud security Engineers um away
664:37 your Cloud security Engineers um away from here because you don't want people
664:38 from here because you don't want people tampering with it deleting it or
664:39 tampering with it deleting it or changing stuff but um we'll just take an
664:42 changing stuff but um we'll just take an existing one here I don't want a c
664:45 existing one here I don't want a c customer manage don't I have one that is
664:47 customer manage don't I have one that is managed bys here new
664:55 custom um we'll just choose that one I don't know which one that is we'll just
664:56 don't know which one that is we'll just hit next usually adus gives you a manage
664:58 hit next usually adus gives you a manage key there so I was kind of surprised um
665:00 key there so I was kind of surprised um you can also include additional data so
665:02 you can also include additional data so if you do data events this would collect
665:03 if you do data events this would collect information from S3 um but the thing is
665:06 information from S3 um but the thing is you might not want to track everything
665:08 you might not want to track everything because if you track everything it can
665:09 because if you track everything it can get very expensive very quickly uh but
665:12 get very expensive very quickly uh but if you don't you just leave on
665:13 if you don't you just leave on management events it'll save you more
665:14 management events it'll save you more money there's inside events uh this is
665:16 money there's inside events uh this is new I haven't seen this yet so ident I
665:18 new I haven't seen this yet so ident I identify unusual activity errors users
665:20 identify unusual activity errors users behavior that sounds really good but
665:23 behavior that sounds really good but these can come also add additional
665:24 these can come also add additional charges but I'm going to hit next anyway
665:25 charges but I'm going to hit next anyway for fun I'm going to create that
665:28 for fun I'm going to create that trail
665:30 trail okay and uh the key policy does not
665:33 okay and uh the key policy does not Grant sufficient access to etc etc so
665:36 Grant sufficient access to etc etc so I'm going to go turn that off even
665:37 I'm going to go turn that off even though I should really have it turned on
665:38 though I should really have it turned on but I just want to be able to show you
665:41 but I just want to be able to show you this okay so we have this new
665:43 this okay so we have this new Trail and so this Trail is being dumped
665:46 Trail and so this Trail is being dumped to S3 so we might not be able to see
665:49 to S3 so we might not be able to see anything in here as of yet but I'm just
665:51 anything in here as of yet but I'm just going to pop over here and just see
665:54 going to pop over here and just see right I probably have one in my other
665:56 right I probably have one in my other account but it's not um it's not that
665:59 account but it's not um it's not that important we basically saw what the data
666:01 important we basically saw what the data would look like so we go into here
666:03 would look like so we go into here there's a digest I don't remember there
666:04 there's a digest I don't remember there being a digest so that's nice so there's
666:07 being a digest so that's nice so there's no data yet but when there is it will
666:09 no data yet but when there is it will pop into there um I'm not sure if we're
666:12 pop into there um I'm not sure if we're going to be able to do anything with
666:12 going to be able to do anything with insights here at least not in this
666:14 insights here at least not in this account
666:16 account insights are events that are show
666:17 insights are events that are show unusual API activity and things like
666:19 unusual API activity and things like that so that's kind of cool I don't know
666:21 that so that's kind of cool I don't know what cloudwatch insights looks
666:27 like uh inside events are shown in the table for 90 days okay so I'm just
666:30 table for 90 days okay so I'm just curious if we can see kind of a
666:32 curious if we can see kind of a screenshot of what that looks like
666:35 screenshot of what that looks like whoops well we're at least on the
666:37 whoops well we're at least on the article here so I guess you could kind
666:39 article here so I guess you could kind of get like some kind of graphs or
666:40 of get like some kind of graphs or something saying like hey this looks
666:43 something saying like hey this looks unusual and they might select it so not
666:45 unusual and they might select it so not pretty clear in terms of what that looks
666:47 pretty clear in terms of what that looks like but I mean sounds like a cool
666:49 like but I mean sounds like a cool feature and I'm sure when I when working
666:51 feature and I'm sure when I when working on my uh security certification course I
666:53 on my uh security certification course I will definitely include in there but
666:55 will definitely include in there but that's pretty much all there is to it um
666:57 that's pretty much all there is to it um I'm going to go ahead and delete um that
666:59 I'm going to go ahead and delete um that trail because I I just don't really need
667:01 trail because I I just don't really need in this account but uh generally you
667:04 in this account but uh generally you always want to go in and create a trail
667:06 always want to go in and create a trail um and what you can do is if you're in
667:08 um and what you can do is if you're in your root account I'm not this is
667:09 your root account I'm not this is actually a an account that's part of an
667:11 actually a an account that's part of an organization but if you're at that
667:13 organization but if you're at that organization level you can create a
667:14 organization level you can create a trail that that spans all the regions
667:17 trail that that spans all the regions that spans all the ad accounts with an
667:18 that spans all the ad accounts with an organization and that's what you should
667:20 organization and that's what you should be doing okay but uh that's about
667:23 be doing okay but uh that's about [Music]
667:26 [Music] it hey this is Andrew Brown from exam
667:29 it hey this is Andrew Brown from exam Pro we're looking at ML and AI services
667:31 Pro we're looking at ML and AI services on AWS but let's first just Define what
667:33 on AWS but let's first just Define what is AI ML and deep learning so AI also
667:38 is AI ML and deep learning so AI also known as artificial intelligence is when
667:39 known as artificial intelligence is when machines that perform jobs that may make
667:41 machines that perform jobs that may make human behavior ml or machine learning
667:44 human behavior ml or machine learning are machines that get better a task
667:45 are machines that get better a task without explicit programming and deep
667:48 without explicit programming and deep learning or DL are machines that are
667:51 learning or DL are machines that are have an artificial neural network
667:52 have an artificial neural network inspired by the human brain to solve
667:54 inspired by the human brain to solve complex problems and a lot of times
667:56 complex problems and a lot of times you'll see this kind of onion where
667:57 you'll see this kind of onion where they're showing you that um you know AI
668:01 they're showing you that um you know AI uh can be using ml or deep learning and
668:03 uh can be using ml or deep learning and then deep learning is definitely using
668:05 then deep learning is definitely using machine learning but it's using neural
668:06 machine learning but it's using neural networks and so for AWS the flexship
668:09 networks and so for AWS the flexship product here is Amazon sagemaker it is a
668:11 product here is Amazon sagemaker it is a fully managed service to build train
668:13 fully managed service to build train deploy machine learning models at scale
668:16 deploy machine learning models at scale um and there's a bunch of different kind
668:17 um and there's a bunch of different kind of Open Source Frameworks you can use
668:19 of Open Source Frameworks you can use with it like Apachi mxnet on us which is
668:22 with it like Apachi mxnet on us which is an open source deep learning framework
668:23 an open source deep learning framework that is the one that it decided to say
668:25 that is the one that it decided to say hey we are going to back this one and so
668:27 hey we are going to back this one and so you'll see a lot of example code for
668:29 you'll see a lot of example code for that one we have tensorflow that you can
668:31 that one we have tensorflow that you can use pie torch uh hugging face other
668:34 use pie torch uh hugging face other things as well okay um and so there's a
668:38 things as well okay um and so there's a lot of services underneath some that
668:40 lot of services underneath some that might be of interest to mention right
668:42 might be of interest to mention right away is like Amazon sagemaker ground
668:44 away is like Amazon sagemaker ground truth which is a data labeling service
668:46 truth which is a data labeling service where you have humans that label a data
668:48 where you have humans that label a data set that will be used to train machine
668:49 set that will be used to train machine learning models or maybe something like
668:51 learning models or maybe something like Amazon uh augmented AI so human
668:54 Amazon uh augmented AI so human intervention review Services when
668:56 intervention review Services when sagemaker uses machine learning to make
668:58 sagemaker uses machine learning to make a prediction that is not confident uh it
669:00 a prediction that is not confident uh it has the right answer cue up to the
669:02 has the right answer cue up to the predict for a human review and these are
669:04 predict for a human review and these are all about just labeling data um you know
669:07 all about just labeling data um you know when you're using supervised um
669:10 when you're using supervised um supervised learning but there are a lot
669:12 supervised learning but there are a lot of Services Under sagemaker itself and
669:14 of Services Under sagemaker itself and just AI services in general so we'll
669:16 just AI services in general so we'll look at that next
669:17 look at that next [Music]
669:21 [Music] okay all right let's take a look at all
669:23 okay all right let's take a look at all the ML and AI services and there's a lot
669:25 the ML and AI services and there's a lot on AWS so the first is Amazon code Guru
669:28 on AWS so the first is Amazon code Guru this is a machine learning code analysis
669:29 this is a machine learning code analysis service and code Guru performs code
669:31 service and code Guru performs code reviews and will suggest to improve the
669:33 reviews and will suggest to improve the code quality of your code it can show
669:36 code quality of your code it can show visual code profiles so show the
669:37 visual code profiles so show the internals of your code to pinpoint
669:39 internals of your code to pinpoint performance next we have Amazon Lex this
669:41 performance next we have Amazon Lex this is a conversation interface service with
669:44 is a conversation interface service with Lex you can build voice and text chat
669:46 Lex you can build voice and text chat Bots we have Amazon personalized this is
669:48 Bots we have Amazon personalized this is a real-time recommendation service it's
669:51 a real-time recommendation service it's the same technology used to make product
669:52 the same technology used to make product recommendations to customer shopping on
669:54 recommendations to customer shopping on the Amazon platform then we have Amazon
669:57 the Amazon platform then we have Amazon poly this is a text to speech service
669:59 poly this is a text to speech service upload your text and an audio file
670:01 upload your text and an audio file spoken by synthe synthesized voice uh
670:04 spoken by synthe synthesized voice uh and that will be generated you have
670:06 and that will be generated you have Amazon recognition this is an image and
670:09 Amazon recognition this is an image and video recognition Service uh analyze
670:12 video recognition Service uh analyze image and videos to detect and label
670:14 image and videos to detect and label objects peoples and celebrities then we
670:16 objects peoples and celebrities then we have Amazon transcribe this is a speech
670:19 have Amazon transcribe this is a speech to text service so you upload your audio
670:21 to text service so you upload your audio and that'll be converted into text we
670:23 and that'll be converted into text we have Amazon text extract this is an OCR
670:26 have Amazon text extract this is an OCR tool so it extracts text from scan
670:28 tool so it extracts text from scan documents when you have uh paper forms
670:31 documents when you have uh paper forms and you want to digitally extract that
670:33 and you want to digitally extract that data you have Amazon translate this is a
670:36 data you have Amazon translate this is a neural machine learning translation
670:38 neural machine learning translation service so use deep learning mod models
670:41 service so use deep learning mod models to deliver more accurate and natural
670:43 to deliver more accurate and natural sounding translations we have Amazon
670:46 sounding translations we have Amazon comprehend this is an NLP so natural
670:48 comprehend this is an NLP so natural language processing service find
670:51 language processing service find relationships between text to produce
670:52 relationships between text to produce insights looks at data such as customer
670:55 insights looks at data such as customer email support tickets social media and
670:57 email support tickets social media and makes
670:58 makes predictions then we have Amazon forecast
671:01 predictions then we have Amazon forecast this is a Time series forecasting
671:02 this is a Time series forecasting service and it's you know uh I mean
671:05 service and it's you know uh I mean technically I guess it's a bit of a
671:06 technically I guess it's a bit of a database but the idea here is that it
671:08 database but the idea here is that it can forecast business outcome such as
671:10 can forecast business outcome such as product demand resource needs or
671:12 product demand resource needs or financial uh performance and it's
671:14 financial uh performance and it's powered by ml or AI if you want to call
671:16 powered by ml or AI if you want to call it we have ads deep learning Ami so
671:19 it we have ads deep learning Ami so these are Amazon ec2 instances they're
671:20 these are Amazon ec2 instances they're pre-installed with popular deep learning
671:22 pre-installed with popular deep learning Frameworks and interfaces such as
671:24 Frameworks and interfaces such as tensorflow pytorch Apachi mxnet chainer
671:28 tensorflow pytorch Apachi mxnet chainer GL uh gluon uh horovod and
671:32 GL uh gluon uh horovod and kiras we have adus deep learning
671:34 kiras we have adus deep learning containers so Docker images instances
671:36 containers so Docker images instances pre-installed with popular deep learning
671:38 pre-installed with popular deep learning Frameworks interfaces such as tensorflow
671:41 Frameworks interfaces such as tensorflow pytorch apachi mxnet uh we have adsd
671:45 pytorch apachi mxnet uh we have adsd composer this is machine learning
671:46 composer this is machine learning enabled musical keyboard uh I don't know
671:48 enabled musical keyboard uh I don't know many people using this but it sounds
671:50 many people using this but it sounds like fun it was deep lens is a video
671:52 like fun it was deep lens is a video camera that uses deep learning it's more
671:53 camera that uses deep learning it's more of like a learning tool so again we
671:55 of like a learning tool so again we don't see many people using this adus
671:57 don't see many people using this adus deep racer is a toy race card that can
671:59 deep racer is a toy race card that can be powered with machine learning to
672:00 be powered with machine learning to perform autonomous driving again this is
672:02 perform autonomous driving again this is another learning tool for learning ml
672:04 another learning tool for learning ml they like to do these at reinvent to
672:05 they like to do these at reinvent to have like these racing
672:07 have like these racing competitions Amazon elastic interface so
672:09 competitions Amazon elastic interface so this allows you to attach lowcost GPU
672:11 this allows you to attach lowcost GPU perform uh powered acceleration to ec2
672:14 perform uh powered acceleration to ec2 instances to red the cost of running
672:15 instances to red the cost of running deep learning interfaces by
672:17 deep learning interfaces by 75% we have Amazon fraud detector so
672:20 75% we have Amazon fraud detector so this is a fully managed fraud detection
672:22 this is a fully managed fraud detection uh as a service uh it identifies
672:25 uh as a service uh it identifies potentially fraudulent uh online
672:26 potentially fraudulent uh online activities such as online payment fraud
672:28 activities such as online payment fraud and the creation of fake accounts Amazon
672:30 and the creation of fake accounts Amazon Kendra so this is an Enterprise machine
672:32 Kendra so this is an Enterprise machine learning uh search engine service it
672:34 learning uh search engine service it uses natural language to suggest answers
672:36 uses natural language to suggest answers to questions instead of just simple
672:38 to questions instead of just simple keyword matching so there you
672:40 keyword matching so there you [Music]
672:43 [Music] go hey hey it's Andrew Brown from exam
672:46 go hey hey it's Andrew Brown from exam Pro and we're going to do a quick review
672:48 Pro and we're going to do a quick review here of the big data and analytic
672:49 here of the big data and analytic services that are on AWS but before we
672:52 services that are on AWS but before we do let's just to find what big data is
672:54 do let's just to find what big data is so it's a term used to describe massive
672:57 so it's a term used to describe massive volumes of structured or unstructured
672:58 volumes of structured or unstructured data that is so large it is difficult to
673:01 data that is so large it is difficult to move and process using traditional
673:04 move and process using traditional database and software techniques so the
673:06 database and software techniques so the first here we have is Amazon Athena this
673:08 first here we have is Amazon Athena this is a serverless interactive query
673:11 is a serverless interactive query service it can take a bunch of CSV or
673:14 service it can take a bunch of CSV or Json files in an S3 bucket and load them
673:16 Json files in an S3 bucket and load them into a temporary SQL table and so you
673:19 into a temporary SQL table and so you can run SQL queries so it's when you
673:21 can run SQL queries so it's when you want to create CSV or Json files if
673:24 want to create CSV or Json files if you've ever heard of um Apachi Presto
673:27 you've ever heard of um Apachi Presto it's basically that okay then we have
673:29 it's basically that okay then we have Amazon Cloud search so this is a fully
673:31 Amazon Cloud search so this is a fully managed full teex search service so when
673:34 managed full teex search service so when you want to add search to your website
673:36 you want to add search to your website we have Amazon elastic search service um
673:39 we have Amazon elastic search service um commonly abbreviated to es and this is a
673:42 commonly abbreviated to es and this is a manage elastic search cluster and
673:44 manage elastic search cluster and elastic search is an open source full
673:46 elastic search is an open source full Tech search engine it is more robust
673:48 Tech search engine it is more robust than Cloud search but requires more
673:49 than Cloud search but requires more server and operational maintenance then
673:52 server and operational maintenance then we have Amazon elastic map produce
673:54 we have Amazon elastic map produce commonly known as EMR and this is for
673:57 commonly known as EMR and this is for data processing and Analysis it can be
673:59 data processing and Analysis it can be used for creating reports just like red
674:01 used for creating reports just like red shift but is more suited when you need
674:02 shift but is more suited when you need to transform unstructured data into
674:04 to transform unstructured data into structured data on the Fly and it
674:06 structured data on the Fly and it leverages open-source um technology so
674:09 leverages open-source um technology so like spark um Hive Pig things like
674:13 like spark um Hive Pig things like that then we have Kines is data Stream
674:15 that then we have Kines is data Stream So This is a real-time streaming data
674:17 So This is a real-time streaming data service it creates producers uh which
674:19 service it creates producers uh which sends data to a stream it has multiple
674:22 sends data to a stream it has multiple consumers that can consume data within a
674:24 consumers that can consume data within a stream and use uh it for real-time
674:26 stream and use uh it for real-time analytics click streams ingestion data
674:29 analytics click streams ingestion data from a fleet of iot
674:30 from a fleet of iot devices then we have Kinesis fire hose
674:33 devices then we have Kinesis fire hose this is a serverless and a simple
674:35 this is a serverless and a simple version of a data stream and you pay on
674:38 version of a data stream and you pay on demand based on how much data is
674:40 demand based on how much data is consumed through the stream and you
674:41 consumed through the stream and you don't worry about the underlying
674:43 don't worry about the underlying servers then you have Amazon Kinesis
674:45 servers then you have Amazon Kinesis data analytics this allows you to run
674:48 data analytics this allows you to run queries against data that is flowing
674:49 queries against data that is flowing through your real-time stream so you can
674:51 through your real-time stream so you can create reports and Analysis on emerging
674:53 create reports and Analysis on emerging data and last on the Kinesis side here
674:56 data and last on the Kinesis side here we have Amazon Kinesis video streams
674:58 we have Amazon Kinesis video streams this allows you to analyze or apply
675:00 this allows you to analyze or apply processing on real-time streaming videos
675:02 processing on real-time streaming videos onto the second page here we have manage
675:05 onto the second page here we have manage kofka service
675:06 kofka service msk um and it might be MKS um now that
675:10 msk um and it might be MKS um now that I'm looking at it here so just be aware
675:12 I'm looking at it here so just be aware that that might be incorrect but a fully
675:15 that that might be incorrect but a fully manage aachi kofka service kofka is an
675:17 manage aachi kofka service kofka is an open-source platform for building
675:19 open-source platform for building real-time streaming data pipelines and
675:21 real-time streaming data pipelines and applications it is similar to Kinesis
675:23 applications it is similar to Kinesis but with more robust functionality then
675:25 but with more robust functionality then we have red shift which is um a this
675:28 we have red shift which is um a this Flagship uh Big Data tool it's a
675:31 Flagship uh Big Data tool it's a petabyte size data warehouse the data
675:34 petabyte size data warehouse the data warehouses are for online uh online
675:37 warehouses are for online uh online analytical processing olap so data
675:39 analytical processing olap so data warehouses can be expensive because they
675:41 warehouses can be expensive because they are keeping data hot meaning that we can
675:43 are keeping data hot meaning that we can run a very complex query in a large
675:45 run a very complex query in a large amount of data and get that data back
675:46 amount of data and get that data back very fast but this is great when you
675:48 very fast but this is great when you need to quickly generate analytics or
675:49 need to quickly generate analytics or reports from a large amount of data we
675:51 reports from a large amount of data we have Amazon quick site this is a
675:53 have Amazon quick site this is a business intelligence tool or a business
675:55 business intelligence tool or a business intelligence dashboard bi for short you
675:57 intelligence dashboard bi for short you can use it to create business dashboards
675:59 can use it to create business dashboards to power business decisions it requires
676:01 to power business decisions it requires little to know programming and connect
676:03 little to know programming and connect and adjust to many different types of
676:04 and adjust to many different types of databases if you ever heard of Tableau
676:06 databases if you ever heard of Tableau or powerbi this is just the adus
676:09 or powerbi this is just the adus equivalent we have adus data pipelines
676:11 equivalent we have adus data pipelines this automates the movement of data you
676:14 this automates the movement of data you can reliably move data between compute
676:15 can reliably move data between compute storage and services we have Abus glue
676:19 storage and services we have Abus glue this is an ETL service so it allows you
676:21 this is an ETL service so it allows you to move data from one location to
676:22 to move data from one location to another where you need to perform
676:24 another where you need to perform Transformations before the Final
676:25 Transformations before the Final Destination it's simar similar to DMS
676:27 Destination it's simar similar to DMS but it's more robust we have Aus Lake
676:30 but it's more robust we have Aus Lake formation this is a centralized curated
676:33 formation this is a centralized curated and secured repository that stores all
676:35 and secured repository that stores all your data so it's a data Lake it is a
676:37 your data so it's a data Lake it is a storage repository that holds a vast
676:38 storage repository that holds a vast amount of raw data in its native format
676:40 amount of raw data in its native format until it is needed and then last on here
676:43 until it is needed and then last on here we have adab state exchange this is a
676:44 we have adab state exchange this is a catalog of third-party data sets you can
676:46 catalog of third-party data sets you can download for free uh or subscribe or
676:49 download for free uh or subscribe or purchase data sets so they might have
676:51 purchase data sets so they might have like the covid-19 foot traffic data the
676:53 like the covid-19 foot traffic data the IMDb TV movie data historical weather
676:56 IMDb TV movie data historical weather data and sometimes this is really great
676:57 data and sometimes this is really great if you're just trying to learn how to
676:59 if you're just trying to learn how to work with these tools
677:00 work with these tools [Music]
677:04 [Music] okay hey this is Andrew Brown from exam
677:06 okay hey this is Andrew Brown from exam Pro and we are taking a look here at
677:07 Pro and we are taking a look here at Amazon quick site which is a business
677:09 Amazon quick site which is a business intelligence dashboard or bi dashboard
677:11 intelligence dashboard or bi dashboard that allows you to ingest data from
677:13 that allows you to ingest data from various databus storage or database
677:14 various databus storage or database services to quickly visualize business
677:16 services to quickly visualize business data with minimal programming or data
677:18 data with minimal programming or data formula knowledge so here's an example
677:21 formula knowledge so here's an example of a quick site dashboard um and so the
677:25 of a quick site dashboard um and so the way quick site is able to make these
677:27 way quick site is able to make these dashboards super fast is via spice the
677:29 dashboards super fast is via spice the super fast parallel in memory
677:30 super fast parallel in memory calculation engine um and the thing is
677:33 calculation engine um and the thing is you don't have to use spice um but
677:35 you don't have to use spice um but generally it is good to use it uh and
677:37 generally it is good to use it uh and there are some caveats when getting your
677:39 there are some caveats when getting your data into Quick site sometimes it can't
677:41 data into Quick site sometimes it can't ingest data directly from a particular
677:43 ingest data directly from a particular uh data store so you might have to dump
677:45 uh data store so you might have to dump it to S3 first but it's not too bad
677:47 it to S3 first but it's not too bad because you can use Adis glue to
677:48 because you can use Adis glue to transform that data over um there are
677:51 transform that data over um there are additional features sometimes Market as
677:52 additional features sometimes Market as services but we have quick site ml
677:55 services but we have quick site ml insights this detects anomalies perform
677:57 insights this detects anomalies perform accurate uh forecasting it can generate
677:59 accurate uh forecasting it can generate natural language narrative so basically
678:01 natural language narrative so basically like you know describe it as if you're
678:03 like you know describe it as if you're going to read it out as a business
678:04 going to read it out as a business report you know then there's Amazon
678:06 report you know then there's Amazon quick site Q this allows you to ask
678:08 quick site Q this allows you to ask questions using natural language on all
678:10 questions using natural language on all your data and receive answers in seconds
678:12 your data and receive answers in seconds so there you go
678:17 [Music] hey this is Andrew Brown from exam Pro
678:19 hey this is Andrew Brown from exam Pro and let's go take a look at Amazon quick
678:21 and let's go take a look at Amazon quick sites which is a or quick site which is
678:24 sites which is a or quick site which is um a business intelligence tool so when
678:26 um a business intelligence tool so when you go here you have to uh sign up
678:28 you go here you have to uh sign up because it's kind of part of ads but on
678:32 because it's kind of part of ads but on its own separate thing and then you have
678:33 its own separate thing and then you have to choose what you want so we have
678:34 to choose what you want so we have Enterprise and standard um I do not want
678:39 Enterprise and standard um I do not want to pay that much so I'm going to go to
678:40 to pay that much so I'm going to go to standard over here I'm not really sure
678:42 standard over here I'm not really sure what the difference is it's not really
678:43 what the difference is it's not really telling me what
678:45 telling me what um between standard and
678:48 um between standard and Enterprise but I'm going to assume
678:49 Enterprise but I'm going to assume standard is more cost effective but here
678:52 standard is more cost effective but here we it says user use I am Federated
678:55 we it says user use I am Federated identities which is fine use I am
678:58 identities which is fine use I am Federate identities only um we can stick
679:01 Federate identities only um we can stick with the top one there that seems fine
679:03 with the top one there that seems fine to me we need to enter a name so we'll
679:06 to me we need to enter a name so we'll just say my quick site
679:10 just say my quick site account and we probably have to fill
679:13 account and we probably have to fill something in there so let's say Andrew
679:14 something in there so let's say Andrew example . Co and these are the services
679:16 example . Co and these are the services that are going to integrate with it
679:17 that are going to integrate with it Athena S3 RDS things like that I guess
679:20 Athena S3 RDS things like that I guess we could select some of those buckets
679:21 we could select some of those buckets I'm not too worried about doing that
679:22 I'm not too worried about doing that right now the provided account name is
679:24 right now the provided account name is not available that is a terrible UI but
679:27 not available that is a terrible UI but that's AWS for you so I'm just going to
679:29 that's AWS for you so I'm just going to dump some numbers there going put my
679:31 dump some numbers there going put my email in here
679:33 email in here again um we probably want some S3
679:36 again um we probably want some S3 buckets I'm going
679:39 buckets I'm going to make a new
679:41 to make a new bucket because I think that's how we're
679:43 bucket because I think that's how we're going to do this we're gonna have to
679:44 going to do this we're gonna have to make a bucket here and say uh quick
679:47 make a bucket here and say uh quick site
679:50 site data okay and we're going to create
679:52 data okay and we're going to create ourselves a bucket here I'm going to go
679:55 ourselves a bucket here I'm going to go back and hopefully that shows
680:01 up uh it does not so what I'll have to do is just back
680:04 do is just back out and I'm just going to give it a hard
680:06 out and I'm just going to give it a hard refresh here and we're hit quick sign up
680:08 refresh here and we're hit quick sign up for quicksite again and we'll choose
680:11 for quicksite again and we'll choose standard and we'll say my quick site
680:14 standard and we'll say my quick site account account a bunch of numbers there
680:16 account account a bunch of numbers there Andrew exam. I don't really care about
680:19 Andrew exam. I don't really care about adjusting data from everywhere else I
680:20 adjusting data from everywhere else I just want it from
680:22 just want it from S3 there's my
680:24 S3 there's my data uh sure we'll give it right
680:26 data uh sure we'll give it right permissions even though I don't plan to
680:27 permissions even though I don't plan to do anything with Athena here
680:47 so what I'm thinking is just making like an Excel spreadsheet here and just
680:50 an Excel spreadsheet here and just filling in some data so oh it says our
680:52 filling in some data so oh it says our account is set up here so we'll go to
680:54 account is set up here so we'll go to Quick site because I bet it can import
680:56 Quick site because I bet it can import like a CSV or
680:58 like a CSV or something um I'm more of a tableau or
681:01 something um I'm more of a tableau or powerbi kind of person um but uh you
681:03 powerbi kind of person um but uh you know for the purpose of the cloud
681:05 know for the purpose of the cloud practitioner I am going to show you this
681:07 practitioner I am going to show you this Amazon quick set lets you easily
681:08 Amazon quick set lets you easily visualize data and Etc that sounds great
681:10 visualize data and Etc that sounds great next next next I know what I'm doing oh
681:13 next next next I know what I'm doing oh do we have some examp great so I don't
681:15 do we have some examp great so I don't even have to make a spreadsheet okay so
681:17 even have to make a spreadsheet okay so what we'll do is just click on
681:23 that and we have stuff it looks like they've really improved this since the
681:24 they've really improved this since the last time I've seen it which is quite
681:28 last time I've seen it which is quite nice um but I could try and make my
681:33 nice um but I could try and make my own I'm just trying to think how do we
681:36 own I'm just trying to think how do we do this
681:38 do this again yeah we have the spice there so
681:40 again yeah we have the spice there so it's a lot easier from starting from
681:41 it's a lot easier from starting from scratch I'm just going to say
681:42 scratch I'm just going to say close and
681:45 close and user analysis we want data sets in here
681:48 user analysis we want data sets in here oh we already have some data sets these
681:50 oh we already have some data sets these are coming from S3 I think that's the
681:52 are coming from S3 I think that's the old S3 logo I'm not sure why they're
681:54 old S3 logo I'm not sure why they're using that one we can go here and create
681:56 using that one we can go here and create a new data set oh we can upload directly
681:57 a new data set oh we can upload directly so I don't even have to use S3 that's
681:59 so I don't even have to use S3 that's great so what I'm going to do is just
682:01 great so what I'm going to do is just have some values in here so I'm going to
682:02 have some values in here so I'm going to just say
682:05 just say um uh type value so we'll say
682:11 um uh type value so we'll say banana 125 123 we'll say
682:15 banana 125 123 we'll say Apple
682:17 Apple 11
682:19 11 orange nobody likes
682:21 orange nobody likes oranges I shouldn't say I'm sure it's
682:23 oranges I shouldn't say I'm sure it's like lots of people like
682:24 like lots of people like oranges oh we got to put pears on
682:28 oranges oh we got to put pears on there I actually really like pears
682:30 there I actually really like pears people think I like bananas which is not
682:31 people think I like bananas which is not true I actually like pears that's what I
682:34 true I actually like pears that's what I like so I'm going to go ahead and save
682:36 like so I'm going to go ahead and save this save
682:39 this save as and I'm just going to save this to my
682:42 as and I'm just going to save this to my desktop here so just give me a moment
682:43 desktop here so just give me a moment just doing this soft
682:50 screen and I'm just save this uh data set quick
682:52 set quick site CSV it can even take an XLS so I
682:55 site CSV it can even take an XLS so I don't have to save it as a uh I'll just
682:58 don't have to save it as a uh I'll just save it as an
682:59 save it as an XLS okay and so we're going to just
683:01 XLS okay and so we're going to just upload that so there is that data
683:04 upload that so there is that data set it's going to scan that file it's
683:07 set it's going to scan that file it's going to see that sheet you even preview
683:11 going to see that sheet you even preview it there's the information we're going
683:13 it there's the information we're going to add that data
683:16 to add that data uh I get added as a data data
683:24 set well how do I or where do I it's like it says add the data I just want to
683:26 like it says add the data I just want to add it as a data set so data set up here
683:28 add it as a data set so data set up here maybe save and visualize up
683:31 maybe save and visualize up here and is it autographing yet maybe if
683:35 here and is it autographing yet maybe if I drag in is it working is it thinking
683:37 I drag in is it working is it thinking okay it's at 100% so I'm going to just
683:40 okay it's at 100% so I'm going to just drag that onto
683:43 drag that onto there and it says pear orange
683:48 there and it says pear orange banana just kind of trying to make sense
683:50 banana just kind of trying to make sense of this here is it taking in count the
683:52 of this here is it taking in count the value maybe put the value down there wow
683:55 value maybe put the value down there wow that's so much easier I've been used
683:57 that's so much easier I've been used this for like a year and um I'm going to
683:59 this for like a year and um I'm going to tell you this has gotten a lot easier to
684:00 tell you this has gotten a lot easier to use so I'm quite impressed with this but
684:03 use so I'm quite impressed with this but yeah I mean this is pretty much what
684:04 yeah I mean this is pretty much what quick site is if you want to visualize
684:06 quick site is if you want to visualize things in different types you can drag
684:07 things in different types you can drag them out you can probably like click on
684:09 them out you can probably like click on the the wheel here and change
684:11 the the wheel here and change it again I'm not sure
684:14 it again I'm not sure exactly how all the uh the dials and
684:18 exactly how all the uh the dials and knobs work here but I mean another thing
684:20 knobs work here but I mean another thing we could do is just drag out like
684:21 we could do is just drag out like another object and do the same thing so
684:23 another object and do the same thing so maybe I'd want a pie
684:25 maybe I'd want a pie chart um
684:27 chart um so add a
684:30 so add a visual yeah it's not as nice as powerbi
684:33 visual yeah it's not as nice as powerbi but like it's still great that it's here
684:34 but like it's still great that it's here you know type
684:37 you know type value so we got a nice pie chart
684:40 value so we got a nice pie chart there uh let's try something weird let's
684:43 there uh let's try something weird let's give this one a go
684:46 give this one a go doesn't color it which is not very nice
684:48 doesn't color it which is not very nice um there's probably some kind of way to
684:49 um there's probably some kind of way to color it but focus on banana only I
684:53 color it but focus on banana only I don't know I don't know what the point
684:54 don't know I don't know what the point of there but anyway that's quick site so
684:57 of there but anyway that's quick site so um I really don't want to pay for this
684:58 um I really don't want to pay for this so what I'm going to do let's go up
685:01 so what I'm going to do let's go up here um there's you have to deactivate
685:04 here um there's you have to deactivate I'm just trying to remember
685:05 I'm just trying to remember how because they Chang the interface
685:08 how because they Chang the interface again they change everything on
685:10 again they change everything on you so maybe we go I'm on a trial for 4
685:13 you so maybe we go I'm on a trial for 4 days here maybe quantity for just the
685:16 days here maybe quantity for just the four 29 day trial so if I want to get
685:19 four 29 day trial so if I want to get out of this trial what do I do I don't
685:23 out of this trial what do I do I don't want to use it anymore um
685:27 want to use it anymore um so how to delete ads quick
685:32 so how to delete ads quick site canceling your subscription so
685:35 site canceling your subscription so before you can unsubscribe uh you're
685:37 before you can unsubscribe uh you're signed in the IM am account your
685:39 signed in the IM am account your quicksite administrator you're the root
685:41 quicksite administrator you're the root I am administrator sure uh you deleted
685:44 I am administrator sure uh you deleted any secondary name spaces to find the
685:46 any secondary name spaces to find the existing name space Etc so choose your
685:49 existing name space Etc so choose your username in the application bars manage
685:51 username in the application bars manage quick site account settings
685:53 quick site account settings unsubscribe so I was almost there I
685:56 unsubscribe so I was almost there I thought I was in the right
686:02 place uh this one no I was just
686:05 no I was just there manage quick
686:07 there manage quick site your
686:11 site your subscriptions
686:13 subscriptions edit there's no unsubscribe
686:15 edit there's no unsubscribe option so I'm not
686:18 option so I'm not sure can I
686:32 unsubscribe button does not appear in quick site
686:47 and it could just be because we're on trial and so maybe after the end of the
686:48 trial and so maybe after the end of the trial it will uh it will vanish
686:52 trial it will uh it will vanish there they are not making this easy for
686:54 there they are not making this easy for me account settings ah delete account so
686:57 me account settings ah delete account so this is what we probably want to do
686:58 this is what we probably want to do permanently delete the account
687:00 permanently delete the account yes I mean that has to get rid of the
687:02 yes I mean that has to get rid of the subcription because it gets rid of
687:04 subcription because it gets rid of everything there we
687:06 everything there we go we'll say
687:09 go we'll say confirm delete
687:12 confirm delete account unless you're using them in the
687:14 account unless you're using them in the services blah blah blah blah blah um
687:17 services blah blah blah blah blah um successful okay great so now I should go
687:19 successful okay great so now I should go back ads. amazon.com and just to confirm
687:23 back ads. amazon.com and just to confirm that it's gone I'm going
687:25 that it's gone I'm going to go to quicksite again and just see if
687:29 to go to quicksite again and just see if it's trying to ask me to sign again so
687:31 it's trying to ask me to sign again so it is so I've gotten R of my account so
687:33 it is so I've gotten R of my account so we're all in good shape and uh yeah that
687:35 we're all in good shape and uh yeah that is that is quick
687:42 site all right let's take a look at some more machine learning AI services
687:44 more machine learning AI services because adab us won't stop making these
687:45 because adab us won't stop making these things um and basically last time I made
687:49 things um and basically last time I made uh the videos all this generative stuff
687:51 uh the videos all this generative stuff did not exist so we need to cover it the
687:52 did not exist so we need to cover it the first is Amazon Bedrock so the uh this
687:55 first is Amazon Bedrock so the uh this uses large language models and makes it
687:57 uses large language models and makes it a cloud service offering to generate
687:58 a cloud service offering to generate text and images responses if you know
688:01 text and images responses if you know what chat GPT is you know what Bedrock
688:03 what chat GPT is you know what Bedrock is we have Amazon code Whisperer it's an
688:05 is we have Amazon code Whisperer it's an AI code generator that will predict code
688:07 AI code generator that will predict code to meet your use case uh so if you've
688:09 to meet your use case uh so if you've heard ever heard of GitHub co-pilot it's
688:12 heard ever heard of GitHub co-pilot it's the same thing basically it's going to
688:14 the same thing basically it's going to write code for you or along with you I
688:17 write code for you or along with you I should say we have Amazon devops Guru
688:19 should say we have Amazon devops Guru this uses ml or machine learning to
688:21 this uses ml or machine learning to analyze your operational data and
688:23 analyze your operational data and application metrics and the events to
688:25 application metrics and the events to detect operational
688:27 detect operational abnormalities um imagine if you had kind
688:30 abnormalities um imagine if you had kind of like a junior devops person digging
688:33 of like a junior devops person digging into your metrics to figure out if
688:34 into your metrics to figure out if there's something wrong then we have
688:36 there's something wrong then we have Amazon Lookout this is actually three
688:38 Amazon Lookout this is actually three different um offerings we have Amazon
688:39 different um offerings we have Amazon lookout for equipment Amazon uh lookout
688:41 lookout for equipment Amazon uh lookout for metrics and Amazon look out for
688:44 for metrics and Amazon look out for vision they all seem to have to do
688:46 vision they all seem to have to do something with quality control and
688:48 something with quality control and Performing automated inspection so
688:50 Performing automated inspection so vision of course would use Vision to
688:52 vision of course would use Vision to detect anomalies uh one would be for
688:54 detect anomalies uh one would be for equipment to detect if there's anything
688:56 equipment to detect if there's anything wrong with operational equipment uh and
688:58 wrong with operational equipment uh and then metrics would be you know with
689:00 then metrics would be you know with metric data so something probably more
689:03 metric data so something probably more for um the hard Industries uh to utilize
689:06 for um the hard Industries uh to utilize and you have Amazon monotron so this
689:08 and you have Amazon monotron so this uses machine learning models to predict
689:10 uses machine learning models to predict unplanned equipment downtime and so the
689:12 unplanned equipment downtime and so the way they do that is they have these uh
689:14 way they do that is they have these uh iot sensors that's going to capture
689:16 iot sensors that's going to capture vibrations and sensor data from your
689:19 vibrations and sensor data from your Hardware then we also have adus neuron
689:22 Hardware then we also have adus neuron this is an ad SDK used to run deep
689:24 this is an ad SDK used to run deep learning workloads on adus uh infer I
689:28 learning workloads on adus uh infer I can't say that word but I know what it
689:29 can't say that word but I know what it is it's basically um it's a machine
689:33 is it's basically um it's a machine learning acceleration on gpus that you
689:35 learning acceleration on gpus that you can attach and ads train
689:39 can attach and ads train trainum so yeah I wish the words weren't
689:41 trainum so yeah I wish the words weren't so hard there's actually more um stuff
689:44 so hard there's actually more um stuff that Aus has for machine learning I
689:46 that Aus has for machine learning I didn't include them because they were
689:47 didn't include them because they were just too far out there and they're
689:49 just too far out there and they're definitely not going to show up in your
689:50 definitely not going to show up in your exam you'll definitely never see them
689:52 exam you'll definitely never see them but we now have better coverage what I
689:54 but we now have better coverage what I really wanted to show was Bedrock hod
689:56 really wanted to show was Bedrock hod Whisperer because I feel like those two
689:59 Whisperer because I feel like those two uh will show up on future exams I'm just
690:01 uh will show up on future exams I'm just trying to get those in front of you now
690:02 trying to get those in front of you now even if they're not on the exam uh at
690:05 even if they're not on the exam uh at the time of this recording okay
690:08 the time of this recording okay [Music]
690:11 [Music] ciao all right so you probably are
690:14 ciao all right so you probably are already know what generative AI is but
690:16 already know what generative AI is but just in case you don't I want to just
690:18 just in case you don't I want to just quickly cover it and show a very tiny
690:20 quickly cover it and show a very tiny example uh so generative AI which also
690:23 example uh so generative AI which also can be shorten to gen AI though most
690:26 can be shorten to gen AI though most people don't say that uh is a type of
690:28 people don't say that uh is a type of artificial intelligence capable capable
690:30 artificial intelligence capable capable of generating new content such as text
690:32 of generating new content such as text images music or other forms of media so
690:36 images music or other forms of media so an example would be something like a
690:37 an example would be something like a software that I like to use called mid
690:39 software that I like to use called mid Journey uh where you can put in a prompt
690:42 Journey uh where you can put in a prompt and so it will then go ahead and
690:43 and so it will then go ahead and generate out an image um so all the
690:47 generate out an image um so all the cloud service providers have some kind
690:48 cloud service providers have some kind of offering with both image and text um
690:52 of offering with both image and text um but yeah hopefully that makes sense the
690:53 but yeah hopefully that makes sense the idea is that you can plug stuff in you
690:56 idea is that you can plug stuff in you get stuff out
690:58 get stuff out [Music]
691:02 [Music] okay let's us take a look here at
691:04 okay let's us take a look here at machine learning and deep learning
691:05 machine learning and deep learning Frameworks and so these are Frameworks
691:08 Frameworks and so these are Frameworks that uh can be used with sagemaker or
691:10 that uh can be used with sagemaker or have direct support for them I just want
691:12 have direct support for them I just want to get you some uh exposure and to uh
691:15 to get you some uh exposure and to uh get you some context in terms of these
691:17 get you some context in terms of these because machine learning and Ai and all
691:20 because machine learning and Ai and all this stuff is becoming more popular so
691:21 this stuff is becoming more popular so you should at least have heard of these
691:23 you should at least have heard of these things so I have all the logos on the
691:25 things so I have all the logos on the left hand side and we'll go through them
691:27 left hand side and we'll go through them the first is Apachi mxnet so this is a
691:31 the first is Apachi mxnet so this is a machine learning framework adopted by
691:33 machine learning framework adopted by ads basically um every single cloud
691:36 ads basically um every single cloud service provider backs their own kind of
691:38 service provider backs their own kind of open- source framework and they try to
691:41 open- source framework and they try to make that the one that they suggest you
691:43 make that the one that they suggest you to use but in practice uh there's ones
691:45 to use but in practice uh there's ones that are good and there's ones that
691:46 that are good and there's ones that people just don't want to use and Apachi
691:48 people just don't want to use and Apachi mxnet is not fun to use whatsoever um
691:52 mxnet is not fun to use whatsoever um and so you'll see it all over in the
691:53 and so you'll see it all over in the marketing and pushed everywhere but
691:54 marketing and pushed everywhere but really people want to use things like
691:56 really people want to use things like curus tensor flow but anyway I just
691:58 curus tensor flow but anyway I just wanted to point that out that it was has
692:00 wanted to point that out that it was has a bias because they've invested energy
692:02 a bias because they've invested energy into uh their team of machine learning
692:05 into uh their team of machine learning Frameworks you got pytorch optimized for
692:08 Frameworks you got pytorch optimized for tensor Library uh for deep learning
692:10 tensor Library uh for deep learning using GPU and CPU it's created by
692:12 using GPU and CPU it's created by Facebook Facebook does not necessarily
692:15 Facebook Facebook does not necessarily um have its own cloud service provider
692:17 um have its own cloud service provider offering so it's kind of out there and
692:19 offering so it's kind of out there and so you'll see good support for pytorch
692:22 so you'll see good support for pytorch and all the major providers U the next
692:24 and all the major providers U the next is tensorflow this is made by Google
692:27 is tensorflow this is made by Google what's interesting with tensor flow is
692:29 what's interesting with tensor flow is Google made uh their own um GPU or TPU
692:33 Google made uh their own um GPU or TPU they call it a tensor Processing Unit so
692:36 they call it a tensor Processing Unit so tensor is a a unit of thing in
692:38 tensor is a a unit of thing in tensorflow and it they have optimized
692:41 tensorflow and it they have optimized hardware for it I personally find
692:44 hardware for it I personally find tensorflow the easy to use or I should
692:45 tensorflow the easy to use or I should say cires so um CES is a highlevel
692:49 say cires so um CES is a highlevel machine learning framework built on top
692:50 machine learning framework built on top of tensorflow because these lower level
692:52 of tensorflow because these lower level ones were just really hard to use and so
692:54 ones were just really hard to use and so basically pytorch came along and it was
692:56 basically pytorch came along and it was much easier to use and then everyone
692:58 much easier to use and then everyone noticed how easier py torch was and so
693:01 noticed how easier py torch was and so that's where curus came from was to be
693:04 that's where curus came from was to be competitive with pytorch and be easier
693:06 competitive with pytorch and be easier to use then you have a poy spark which
693:08 to use then you have a poy spark which is a unified analytics engine for large
693:10 is a unified analytics engine for large scale data processing but they do have
693:12 scale data processing but they do have ml offerings within it called spark ml
693:15 ml offerings within it called spark ml um so there's definitely things you can
693:16 um so there's definitely things you can do there uh there's a piece of software
693:18 do there uh there's a piece of software called chainer um and it's for it's a
693:21 called chainer um and it's for it's a deep learning framework that supports
693:22 deep learning framework that supports Cuda then there's hugging face which is
693:25 Cuda then there's hugging face which is not exactly a framework or tool it's
693:27 not exactly a framework or tool it's just a way of accessing a lot of models
693:30 just a way of accessing a lot of models online and data sets and quickly
693:32 online and data sets and quickly launching them for whatever reason I uh
693:35 launching them for whatever reason I uh adus has uh strong synergies with
693:37 adus has uh strong synergies with hugging face I've seen like developer
693:39 hugging face I've seen like developer Advocates and other uh folks that worked
693:41 Advocates and other uh folks that worked at AOS go over to hugging face and so
693:43 at AOS go over to hugging face and so there seems to be strong uh
693:45 there seems to be strong uh relationships between hugging face and
693:48 relationships between hugging face and adabs for whatever reason there's a lot
693:50 adabs for whatever reason there's a lot of ml Frameworks out there but because
693:52 of ml Frameworks out there but because uh ml is uh just uh
693:56 uh ml is uh just uh progressively um or rapidly innovating
693:59 progressively um or rapidly innovating you'll see Frameworks come and go and so
694:01 you'll see Frameworks come and go and so I remember when I researched this and I
694:02 I remember when I researched this and I was just trying to understand all the
694:03 was just trying to understand all the Frameworks out there there was just a
694:05 Frameworks out there there was just a lot and I just kept digging into them
694:07 lot and I just kept digging into them finding oh they're not active anymore
694:08 finding oh they're not active anymore they're not active anymore so I just
694:10 they're not active anymore so I just want to point out that we have all these
694:11 want to point out that we have all these ones up on screen if they become active
694:14 ones up on screen if they become active tomorrow I would not be surprised but uh
694:16 tomorrow I would not be surprised but uh for the most part all of these seem to
694:18 for the most part all of these seem to be very popular uh and uh they're being
694:20 be very popular uh and uh they're being well supported uh but yeah hopefully
694:22 well supported uh but yeah hopefully that gives you an idea of these
694:23 that gives you an idea of these Frameworks okay
694:25 Frameworks okay [Music]
694:29 [Music] ciao all right let's take a look here at
694:31 ciao all right let's take a look here at Apachi mxnet a little bit more in detail
694:34 Apachi mxnet a little bit more in detail because this is the framework that aabus
694:36 because this is the framework that aabus wants you to use whether you want to use
694:38 wants you to use whether you want to use it or not is a different story uh but
694:40 it or not is a different story uh but you'll see it all over in their
694:41 you'll see it all over in their marketing pages and things like that so
694:43 marketing pages and things like that so apachi mxnet is a deep learning machine
694:45 apachi mxnet is a deep learning machine learning framework which supports many
694:46 learning framework which supports many many different programming languages so
694:48 many different programming languages so that is one advantage of it uh the key
694:51 that is one advantage of it uh the key features uh is that it's scalable it's
694:53 features uh is that it's scalable it's flexible it's portable it's it supports
694:55 flexible it's portable it's it supports multiple programming language inabus has
694:58 multiple programming language inabus has made Apachi mxet their framework of
695:01 made Apachi mxet their framework of choice so there's lots of support for it
695:03 choice so there's lots of support for it within ad sagemaker and the ad ml
695:05 within ad sagemaker and the ad ml containers but I have noticed that
695:06 containers but I have noticed that they've been increasing support for p
695:08 they've been increasing support for p torch so maybe you know they're just
695:10 torch so maybe you know they're just trying to meet the customer where they
695:12 trying to meet the customer where they are but but anyway um there is a lot of
695:15 are but but anyway um there is a lot of stuff for mxnet mxnet has two highlevel
695:18 stuff for mxnet mxnet has two highlevel interfaces uh one's called glue on and
695:22 interfaces uh one's called glue on and there is module API so uh depending on
695:24 there is module API so uh depending on which one you use one is imperative
695:26 which one you use one is imperative programming one's symbolic programming
695:28 programming one's symbolic programming uh this is more of a deeper concept for
695:30 uh this is more of a deeper concept for machine learning but I'm going to tell
695:31 machine learning but I'm going to tell you one is really easy one is really
695:33 you one is really easy one is really hard um but uh let's look at a very
695:36 hard um but uh let's look at a very simple example of uh some code for using
695:39 simple example of uh some code for using the gluon API so it kind of looks like
695:41 the gluon API so it kind of looks like that you can see that they are using
695:43 that you can see that they are using python so hopefully that gives you an
695:44 python so hopefully that gives you an idea of uh mxnet and its offering the
695:47 idea of uh mxnet and its offering the key thing is that it offers it in a lot
695:49 key thing is that it offers it in a lot of different programming languages will
695:51 of different programming languages will this appear on your exam absolutely not
695:53 this appear on your exam absolutely not but should you know it you absolutely
695:55 but should you know it you absolutely should um just so you have good context
695:57 should um just so you have good context with adus and ml so there you
696:00 with adus and ml so there you [Music]
696:03 [Music] go I want to talk a little bit about
696:05 go I want to talk a little bit about Intel because I think it's very
696:07 Intel because I think it's very important to remember the hardware that
696:08 important to remember the hardware that is running with these um cloud service
696:11 is running with these um cloud service providers because it really does matter
696:14 providers because it really does matter um and there's a couple terms you might
696:16 um and there's a couple terms you might see when using a compute that you're not
696:19 see when using a compute that you're not aware of and I want to make sure you
696:20 aware of and I want to make sure you know what they are so let's talk about
696:21 know what they are so let's talk about what is Intel so Intel is a
696:23 what is Intel so Intel is a multinational corporation is one of the
696:25 multinational corporation is one of the world's largest semiconductor chip
696:27 world's largest semiconductor chip manufacturers Intel is the inventor of
696:29 manufacturers Intel is the inventor of the
696:30 the x86 instruction set so basically uh they
696:34 x86 instruction set so basically uh they released this chip back in 1978 this
696:36 released this chip back in 1978 this one's called the Intel 8086 chip and the
696:39 one's called the Intel 8086 chip and the idea is that um they came up with an
696:41 idea is that um they came up with an instruction set um it's basically a
696:43 instruction set um it's basically a bunch of words that you can use um to
696:46 bunch of words that you can use um to program the chip and it's a lower level
696:48 program the chip and it's a lower level language so um that lower level language
696:50 language so um that lower level language would be in assembly um if if that makes
696:53 would be in assembly um if if that makes any sense so the idea is that you have
696:56 any sense so the idea is that you have this um instruction set and you have to
696:59 this um instruction set and you have to write an assembly and so basically most
697:02 write an assembly and so basically most modern programs like when you use uh
697:03 modern programs like when you use uh programming languages like uh C it will
697:06 programming languages like uh C it will actually compile down to assembly um or
697:09 actually compile down to assembly um or other languages will compile down to
697:11 other languages will compile down to assembly because that is what the chip
697:13 assembly because that is what the chip understands and then assembly is turned
697:14 understands and then assembly is turned into machine code like the zeros and
697:17 into machine code like the zeros and ones and the reason I'm mentioning this
697:19 ones and the reason I'm mentioning this is that when you go and you uh launch uh
697:22 is that when you go and you uh launch uh a compute uh instance let's say on AWS
697:25 a compute uh instance let's say on AWS uh you're launching a ec2 instance you
697:28 uh you're launching a ec2 instance you have to choose uh whether it's x86 or a
697:31 have to choose uh whether it's x86 or a different instruction set or
697:33 different instruction set or architecture and so the other one is arm
697:35 architecture and so the other one is arm and they're both really really good it
697:36 and they're both really really good it just depends on whether uh uh your stuff
697:39 just depends on whether uh uh your stuff can support it but for the most part
697:41 can support it but for the most part Intel has arm chips as well so so um
697:44 Intel has arm chips as well so so um there is no company that produces arm
697:46 there is no company that produces arm chips per se it's just an architecture
697:48 chips per se it's just an architecture and uh the way it works is that it just
697:51 and uh the way it works is that it just has fewer instruction sets so there's
697:53 has fewer instruction sets so there's fewer uh rules that you can write in so
697:55 fewer uh rules that you can write in so it's a more limited writing it in
697:57 it's a more limited writing it in assembly but at the end of the day it
697:58 assembly but at the end of the day it doesn't matter because your programming
698:00 doesn't matter because your programming language is going to compile it down so
698:01 language is going to compile it down so you don't have to worry about those
698:02 you don't have to worry about those fewer instructions but because it has
698:04 fewer instructions but because it has fewer instructions it generally results
698:07 fewer instructions it generally results in a better uh Power efficiency and so
698:09 in a better uh Power efficiency and so it can have better performance or better
698:12 it can have better performance or better or better cost to to you the customer so
698:15 or better cost to to you the customer so when I can I try to run arm and for the
698:17 when I can I try to run arm and for the most part it's always great to run arm
698:19 most part it's always great to run arm but uh it really depends on if your
698:22 but uh it really depends on if your software is going to be able to run on
698:23 software is going to be able to run on arm um and stuff like that so I just
698:25 arm um and stuff like that so I just wanted to point out those two things
698:27 wanted to point out those two things there about uh at least a Intel and then
698:30 there about uh at least a Intel and then instruction sets
698:32 instruction sets [Music]
698:35 [Music] okay all right I want to talk about two
698:37 okay all right I want to talk about two things um that Intel has with ads and
698:40 things um that Intel has with ads and the first is Intel Zeon scalable
698:42 the first is Intel Zeon scalable processor and the second is Intel Gotti
698:44 processor and the second is Intel Gotti um so it us of course does work with or
698:47 um so it us of course does work with or purchases um Hardware from other um uh
698:50 purchases um Hardware from other um uh other companies like they use AMD and
698:52 other companies like they use AMD and Nvidia but I think it's worth mentioning
698:55 Nvidia but I think it's worth mentioning Intel in a little bit more detail here
698:57 Intel in a little bit more detail here because every time I go to reinvent
699:00 because every time I go to reinvent Intel has a big giant booth and you can
699:03 Intel has a big giant booth and you can go scour the ads website and it just
699:06 go scour the ads website and it just looks like ADS works more closely with
699:07 looks like ADS works more closely with Intel as opposed to the other uh
699:10 Intel as opposed to the other uh providers not to say that Intel is not
699:12 providers not to say that Intel is not being utilized on gcp and Azure and
699:15 being utilized on gcp and Azure and others but uh I just noticed something
699:17 others but uh I just noticed something more going on there with AWS but let's
699:19 more going on there with AWS but let's first talk about Intel xon scalable
699:21 first talk about Intel xon scalable processors these are high performance
699:22 processors these are high performance CPUs designed for Enterprise and server
699:24 CPUs designed for Enterprise and server applications commonly used in a
699:26 applications commonly used in a instances um that scalable part makes
699:28 instances um that scalable part makes them very good for machine learning so
699:32 them very good for machine learning so you often are going to be be using Intel
699:34 you often are going to be be using Intel Zeon processors whether you know or not
699:36 Zeon processors whether you know or not on
699:36 on ads the Intel is the Intel uh Habana
699:40 ads the Intel is the Intel uh Habana Gotti processor so this is a a processor
699:44 Gotti processor so this is a a processor specialized for AI training uh you could
699:47 specialized for AI training uh you could say that this is a direct competitor to
699:49 say that this is a direct competitor to Nvidia or a similar competitor because
699:52 Nvidia or a similar competitor because uh they uh they uh do something very
699:55 uh they uh they uh do something very similar um I believe that Intel Gotti
699:58 similar um I believe that Intel Gotti has their own SDK called synapse AI uh
700:01 has their own SDK called synapse AI uh that you can use to interact with it so
700:04 that you can use to interact with it so you launch up Sage maker and then use uh
700:07 you launch up Sage maker and then use uh that uh that API or SDK in order to best
700:10 that uh that API or SDK in order to best utilize uh that Hardware there but both
700:13 utilize uh that Hardware there but both of these um pieces of Hardware are
700:15 of these um pieces of Hardware are offered uh on ads and I think it's just
700:18 offered uh on ads and I think it's just good to know them at least to name uh
700:20 good to know them at least to name uh what they are
700:22 what they are [Music]
700:26 [Music] okay hey this is angrew brown and let's
700:28 okay hey this is angrew brown and let's talk about gpus I'm sure most people
700:30 talk about gpus I'm sure most people know what gpus are here but I'm going to
700:32 know what gpus are here but I'm going to talk about it anyway because I want to
700:33 talk about it anyway because I want to talk about cudas so a GPU stands for
700:36 talk about cudas so a GPU stands for General processing unit and it's a
700:38 General processing unit and it's a processor that is specialized to quickly
700:40 processor that is specialized to quickly render high resolution images and videos
700:42 render high resolution images and videos concurrently if youve ever played video
700:45 concurrently if youve ever played video games you know you need a good GPU
700:47 games you know you need a good GPU because it's all about those images
700:49 because it's all about those images however gpus can perform parallel
700:52 however gpus can perform parallel operations on multiple sets of data so
700:54 operations on multiple sets of data so they can also be used for non-graphical
700:56 they can also be used for non-graphical tasks and this makes it really good for
700:58 tasks and this makes it really good for machine learning and scientific uh
701:00 machine learning and scientific uh computation so if you're trying to uh
701:03 computation so if you're trying to uh convince your significant other that you
701:05 convince your significant other that you need a better graphics card you can just
701:06 need a better graphics card you can just tell them it's for work I need it for
701:07 tell them it's for work I need it for machine learning and scientific comp
701:09 machine learning and scientific comp computation it's not your fault that you
701:12 computation it's not your fault that you can also play video games with it and so
701:14 can also play video games with it and so we have like a graphic there on the
701:15 we have like a graphic there on the right hand side I think I got that from
701:17 right hand side I think I got that from Nvidia and so they're kind of trying to
701:19 Nvidia and so they're kind of trying to demonstrate the difference between uh
701:21 demonstrate the difference between uh the paralyzation with GPU versus serial
701:24 the paralyzation with GPU versus serial tasks with CPU but let's go and just
701:26 tasks with CPU but let's go and just read a little bit more so CPUs can have
701:28 read a little bit more so CPUs can have an average of four to 16 processor cores
701:30 an average of four to 16 processor cores gpus can have thousands of processor
701:33 gpus can have thousands of processor cores how that works I have no idea but
701:36 cores how that works I have no idea but I just know that that's how it works uh
701:39 I just know that that's how it works uh so we have 48 gpus can provide as many
701:41 so we have 48 gpus can provide as many as 40,000 C
701:44 as 40,000 C so that is a lot gpus are best suited
701:46 so that is a lot gpus are best suited for repetitive and highly parallel
701:48 for repetitive and highly parallel Computing tasks such as rendering
701:50 Computing tasks such as rendering Graphics cryptocurrency mining if people
701:52 Graphics cryptocurrency mining if people are even still doing that and deep
701:54 are even still doing that and deep learning and machine learning so you
701:56 learning and machine learning so you know there you go that's
702:00 know there you go that's [Music]
702:03 [Music] gpus all right let's take a look here at
702:05 gpus all right let's take a look here at Cuda but before we do let's talk about
702:07 Cuda but before we do let's talk about Nvidia so Nvidia is a company that
702:10 Nvidia so Nvidia is a company that manufactures graphical processing units
702:12 manufactures graphical processing units for gaming and professional markets if
702:14 for gaming and professional markets if you have ever played video games and you
702:16 you have ever played video games and you build your own rig um a lot of people
702:19 build your own rig um a lot of people like to choose Nvidia but Nvidia can do
702:21 like to choose Nvidia but Nvidia can do things other than video games and this
702:24 things other than video games and this is due to their framework uh called cuda
702:27 is due to their framework uh called cuda which stands for compute unified device
702:29 which stands for compute unified device architecture so it's a parallel
702:31 architecture so it's a parallel Computing platform and API I said
702:33 Computing platform and API I said framework but I guess it's an API bu in
702:35 framework but I guess it's an API bu in video that allows developers to use Cuda
702:37 video that allows developers to use Cuda enable gpus for general purpose
702:39 enable gpus for general purpose Computing gpus and it says GP GPU
702:43 Computing gpus and it says GP GPU because it's saying general purpose gpus
702:45 because it's saying general purpose gpus I know that's a mouthful there um so
702:48 I know that's a mouthful there um so over on AWS they have a bunch of
702:51 over on AWS they have a bunch of instances that um can utilize uh Nvidia
702:55 instances that um can utilize uh Nvidia GPU so I adus is always changing the
702:58 GPU so I adus is always changing the instances so these could be old but you
703:01 instances so these could be old but you can see we have a P3 which has the Tesla
703:04 can see we have a P3 which has the Tesla Tesla V100 you have the G3 with a Tesla
703:07 Tesla V100 you have the G3 with a Tesla M M60 the G4 with a T4 uh the P4 with
703:11 M M60 the G4 with a T4 uh the P4 with the Tesla a 100 so there's probably
703:15 the Tesla a 100 so there's probably these are probably old ones there's new
703:16 these are probably old ones there's new instances with newer Nvidia cards but my
703:19 instances with newer Nvidia cards but my point is is that adus has uh gpus that
703:22 point is is that adus has uh gpus that you can utilize another thing I want to
703:24 you can utilize another thing I want to point out with Cuda is that all major
703:26 point out with Cuda is that all major deep learning Frameworks are integrated
703:28 deep learning Frameworks are integrated with Nvidia deep learning sdks there's a
703:31 with Nvidia deep learning sdks there's a big fight or War over um uh these
703:34 big fight or War over um uh these companies that make uh gpus and CPS
703:37 companies that make uh gpus and CPS because they really want the uh Theirs
703:39 because they really want the uh Theirs to be used for machine learning so you
703:41 to be used for machine learning so you can definitely be sure that AMD probably
703:43 can definitely be sure that AMD probably has some kind of similar offering or
703:45 has some kind of similar offering or something uh and definitely Intel as
703:47 something uh and definitely Intel as well um but Nvidia has done a very good
703:50 well um but Nvidia has done a very good job in uh making sure that theirs is the
703:52 job in uh making sure that theirs is the most popular um so Nvidia deep learning
703:55 most popular um so Nvidia deep learning SDK is a collection of En uh Nvidia
703:58 SDK is a collection of En uh Nvidia libraries for deep learning so this is
703:59 libraries for deep learning so this is something that this is the SDK you can
704:01 something that this is the SDK you can use with Cuda to interact with their API
704:04 use with Cuda to interact with their API uh so one of those libraries are called
704:05 uh so one of those libraries are called cuda deep neural network library so
704:08 cuda deep neural network library so that's something you can use with it and
704:10 that's something you can use with it and it's uh tuned for a bunch of stuff if it
704:13 it's uh tuned for a bunch of stuff if it looks like it's getting a little bit too
704:15 looks like it's getting a little bit too um uh technical it's because this slide
704:18 um uh technical it's because this slide was was for my machine learning uh
704:21 was was for my machine learning uh inabus specialty and I didn't do a whole
704:23 inabus specialty and I didn't do a whole lot to change it and brought it over uh
704:25 lot to change it and brought it over uh so you don't don't really need to know
704:27 so you don't don't really need to know that last part there but just understand
704:28 that last part there but just understand what Cuda is and that it's uh very
704:31 what Cuda is and that it's uh very important uh for working with machine
704:33 important uh for working with machine learning and adus has uh good offerings
704:36 learning and adus has uh good offerings uh for instances with it okay
704:39 uh for instances with it okay [Music]
704:43 [Music] hey this is Andrew Brown from exam Pro
704:45 hey this is Andrew Brown from exam Pro and we are taking a look at the ads well
704:47 and we are taking a look at the ads well architectur framework so this is a white
704:49 architectur framework so this is a white paper created by ads to help customers
704:51 paper created by ads to help customers build using best practices defined by
704:54 build using best practices defined by AWS you can find this at aws.amazon.com
704:57 AWS you can find this at aws.amazon.com architecture forwell architected this
705:00 architecture forwell architected this idea is not unique to AWS the other
705:02 idea is not unique to AWS the other providers have it but I believe AWS was
705:04 providers have it but I believe AWS was the first one to Define this and they
705:06 the first one to Define this and they have a really good uh a good approach to
705:09 have a really good uh a good approach to this and this is pretty much Essential
705:11 this and this is pretty much Essential Knowledge that you have to have uh four
705:14 Knowledge that you have to have uh four certifications when we're looking at the
705:15 certifications when we're looking at the cloud practitioner the soci architect
705:17 cloud practitioner the soci architect associate and professional because um
705:19 associate and professional because um there's a lot of principles here are
705:21 there's a lot of principles here are best practices that adus uses themselves
705:23 best practices that adus uses themselves to architect their infrastructure okay
705:25 to architect their infrastructure okay so the framework is divided into five
705:27 so the framework is divided into five sections called pillars which address
705:29 sections called pillars which address different aspects or lenses that can be
705:31 different aspects or lenses that can be applied to a cloud workload so imagine
705:34 applied to a cloud workload so imagine you have your Cloud workload you're
705:36 you have your Cloud workload you're going to want to adopt an a architect
705:37 going to want to adopt an a architect framework some things that you know
705:39 framework some things that you know people don't consider outside the Five
705:41 people don't consider outside the Five Pillars is that you need to know en
705:43 Pillars is that you need to know en definitions uh General design principles
705:45 definitions uh General design principles and the review process um and then from
705:48 and the review process um and then from there you have your five pillars so you
705:49 there you have your five pillars so you have operational excellence security
705:51 have operational excellence security reliability performance efficiency and
705:54 reliability performance efficiency and cost optimization and all these have
705:55 cost optimization and all these have major sections in this uh white paper
705:58 major sections in this uh white paper but outside of just the main white paper
706:01 but outside of just the main white paper each of these have their own white
706:02 each of these have their own white papers that go even into farther detail
706:05 papers that go even into farther detail so if you really want to uh really focus
706:07 so if you really want to uh really focus on security and get a lot more
706:08 on security and get a lot more information they have that as well okay
706:16 [Music] let's take a look at the general
706:17 let's take a look at the general definitions for the well architecture
706:19 definitions for the well architecture framework starting with the pillars so
706:20 framework starting with the pillars so the operational excellent pillar is
706:22 the operational excellent pillar is there to run and monitor systems the
706:25 there to run and monitor systems the security pillar is to protect data and
706:27 security pillar is to protect data and systems to mitigate risk the reliability
706:29 systems to mitigate risk the reliability pillar is to mitigate and recover from
706:32 pillar is to mitigate and recover from uh disruptions the performance
706:34 uh disruptions the performance efficiency pillar is about using
706:36 efficiency pillar is about using Computing resources efficiently or
706:38 Computing resources efficiently or effectively and the cost optimization
706:40 effectively and the cost optimization pillar is about getting the lowest price
706:42 pillar is about getting the lowest price and this is where you're going to find
706:43 and this is where you're going to find all the business value and I put an
706:45 all the business value and I put an aster there because uh you know you
706:48 aster there because uh you know you might obsess saying we need to meet the
706:50 might obsess saying we need to meet the requirements for all these pillars and
706:51 requirements for all these pillars and that's not the case you can trade off
706:53 that's not the case you can trade off pillars based on the business context so
706:55 pillars based on the business context so you know don't take it as literally
706:58 you know don't take it as literally Implement every single thing but just
707:00 Implement every single thing but just consider that uh you know you might have
707:02 consider that uh you know you might have to adapt it based on your workloads then
707:04 to adapt it based on your workloads then we have some general definitions that we
707:05 we have some general definitions that we will come across so there's components
707:07 will come across so there's components so code configuration itless resources
707:09 so code configuration itless resources against the requirement a workload so a
707:11 against the requirement a workload so a set of components that work together to
707:13 set of components that work together to deliver business value mileston so key
707:16 deliver business value mileston so key changes of your architecture through the
707:18 changes of your architecture through the product life cycle then there's
707:19 product life cycle then there's architecture itself so how components
707:21 architecture itself so how components work together in a workload and then we
707:23 work together in a workload and then we have technology portfolio so a
707:25 have technology portfolio so a collection of workloads required for the
707:28 collection of workloads required for the business to operate
707:30 business to operate [Music]
707:34 [Music] okay so the well architected framework
707:36 okay so the well architected framework is designed around a different kind of
707:38 is designed around a different kind of team structure so when you're looking at
707:40 team structure so when you're looking at Enterprises they generally have a
707:42 Enterprises they generally have a centralized team with specific roles
707:45 centralized team with specific roles where ADS structures their teams as
707:47 where ADS structures their teams as being distributed with flexible roles
707:49 being distributed with flexible roles and so this new kind of methodology of
707:51 and so this new kind of methodology of distributed teams uh has some major
707:54 distributed teams uh has some major advantages but it does come with some
707:55 advantages but it does come with some risks and so it us has baked in some uh
707:58 risks and so it us has baked in some uh practices or uh things that they do to
708:00 practices or uh things that they do to mitigate these issues okay so let's
708:02 mitigate these issues okay so let's compare on premise Enterprise uh to what
708:04 compare on premise Enterprise uh to what itus is proposing for your team
708:06 itus is proposing for your team structure so on premise what we'd see is
708:09 structure so on premise what we'd see is a centralized team consisting of
708:10 a centralized team consisting of technical Architects solution AR
708:12 technical Architects solution AR Architects data Architects Network
708:15 Architects data Architects Network Architects security Architects and you
708:17 Architects security Architects and you kind of see that they all have a
708:18 kind of see that they all have a specialized vertical and they are
708:20 specialized vertical and they are usually managed by either TF or Zack man
708:25 usually managed by either TF or Zack man framework so those are just ways of
708:27 framework so those are just ways of structuring your teams those are very
708:28 structuring your teams those are very popular and so what adus is proposing
708:30 popular and so what adus is proposing here is that you have a distribute team
708:32 here is that you have a distribute team and uh the way you're going to make that
708:34 and uh the way you're going to make that team work because obviously just
708:35 team work because obviously just thinking about distribute team they're
708:37 thinking about distribute team they're going to be a lot more agile but to make
708:38 going to be a lot more agile but to make sure that they effectively work you have
708:41 sure that they effectively work you have practices like team experts who raise
708:42 practices like team experts who raise the the bar uh making sure that you know
708:45 the the bar uh making sure that you know uh in any areas we can always say how
708:46 uh in any areas we can always say how can we do this better uh then there are
708:48 can we do this better uh then there are mechanisms in place for automated checks
708:50 mechanisms in place for automated checks for standards so that's the great thing
708:51 for standards so that's the great thing about Cloud can all be automated to say
708:53 about Cloud can all be automated to say hey does it meet our Regulatory
708:55 hey does it meet our Regulatory Compliance or or what have you and then
708:57 Compliance or or what have you and then there's the concept of the Amazon
708:59 there's the concept of the Amazon leadership principles which we will
709:01 leadership principles which we will cover on in the next slide in detail and
709:03 cover on in the next slide in detail and so um you know iTab us is not obviously
709:05 so um you know iTab us is not obviously using uh these other Frameworks because
709:07 using uh these other Frameworks because it has its own which is this one here
709:09 it has its own which is this one here but the the mechanism to which they stay
709:12 but the the mechanism to which they stay organ oriz and up to date is they are
709:14 organ oriz and up to date is they are supported by a virtual community of
709:16 supported by a virtual community of subject matter experts principal
709:17 subject matter experts principal Engineers so that what they'll do is
709:19 Engineers so that what they'll do is they'll engineer things like lunchtime
709:20 they'll engineer things like lunchtime talks and then recycle that into their
709:22 talks and then recycle that into their onboarding material or into this
709:24 onboarding material or into this framework itself
709:26 framework itself [Music]
709:30 [Music] okay so we're taking a look here at
709:32 okay so we're taking a look here at Amazon's leadership principles and these
709:34 Amazon's leadership principles and these are a set of principles used during the
709:36 are a set of principles used during the company's decision- making problem
709:38 company's decision- making problem solving simple brainstorming and hiring
709:40 solving simple brainstorming and hiring all right um and so I can't say I like
709:43 all right um and so I can't say I like all of these but definitely some of them
709:45 all of these but definitely some of them really stand out as being great
709:46 really stand out as being great especially the first one which is
709:47 especially the first one which is customer Obsession so instead of
709:49 customer Obsession so instead of worrying about what your competitors are
709:50 worrying about what your competitors are doing think about what the customer
709:52 doing think about what the customer wants work your way back and uh you know
709:54 wants work your way back and uh you know really focus on the customer's needs
709:56 really focus on the customer's needs then there's ownership so if you're
709:57 then there's ownership so if you're going to go do something uh you know try
709:59 going to go do something uh you know try to be your own mini boss uh and take
710:02 to be your own mini boss uh and take responsibility for whatever it is you're
710:03 responsibility for whatever it is you're building event and simplify so you know
710:06 building event and simplify so you know always look for the simplest solution
710:07 always look for the simplest solution don't try to engineer something super
710:09 don't try to engineer something super complicated if it's not necessary uh or
710:11 complicated if it's not necessary uh or right a lot so you know try to be right
710:15 right a lot so you know try to be right uh learn and be curious so that's pretty
710:17 uh learn and be curious so that's pretty self-explanatory hire and develop the
710:19 self-explanatory hire and develop the best insist on the high standards adus
710:21 best insist on the high standards adus always refers to this as raising the bar
710:23 always refers to this as raising the bar think big buys for Action frugality and
710:26 think big buys for Action frugality and adus is really Frugal if you didn't know
710:29 adus is really Frugal if you didn't know that but not just for like themselves
710:31 that but not just for like themselves but also for their customers they want
710:32 but also for their customers they want customers to uh spend the least amount
710:34 customers to uh spend the least amount of money possible when using their
710:36 of money possible when using their infrastructure earn trust uh dive deep
710:39 infrastructure earn trust uh dive deep have a backbone disagree and commit
710:41 have a backbone disagree and commit deliver results strive to be the earth's
710:43 deliver results strive to be the earth's best employer success and scale bring
710:45 best employer success and scale bring broad responsibility and if you want to
710:47 broad responsibility and if you want to read these in detail because they have a
710:49 read these in detail because they have a big block of text for each of these uh
710:51 big block of text for each of these uh you can go to amazon. jobs
710:54 you can go to amazon. jobs uhen principles and read all about it
710:57 uhen principles and read all about it [Music]
711:01 [Music] okay all right let's talk about some
711:03 okay all right let's talk about some general design principles uh that you
711:05 general design principles uh that you should be considering when you are
711:06 should be considering when you are designing your infrastructure no matter
711:08 designing your infrastructure no matter what pillar that you are looking to
711:10 what pillar that you are looking to adopt the first is stop guessing your
711:11 adopt the first is stop guessing your capacity need so the great thing with
711:13 capacity need so the great thing with cloud computing is you use as little or
711:15 cloud computing is you use as little or much based on demand whereas on premise
711:18 much based on demand whereas on premise you would have to purchase a machine and
711:19 you would have to purchase a machine and you'd have to make sure you have
711:21 you'd have to make sure you have additional capacity so that you could
711:22 additional capacity so that you could grow into it right and so here with uh
711:25 grow into it right and so here with uh Cloud you do not have to worry about
711:26 Cloud you do not have to worry about that uh test systems at production scale
711:29 that uh test systems at production scale so be able to clone your production
711:30 so be able to clone your production environment to testing tear down testing
711:33 environment to testing tear down testing while not in use to save money so a lot
711:35 while not in use to save money so a lot of people will have a staging server
711:36 of people will have a staging server that they run all the time but the great
711:38 that they run all the time but the great thing here is that with Cloud you know
711:40 thing here is that with Cloud you know it's you can just spin it up and have it
711:42 it's you can just spin it up and have it right away and then tear it down and
711:43 right away and then tear it down and save money um there's automating to make
711:46 save money um there's automating to make architectural experimentation easier
711:48 architectural experimentation easier this is talking about using
711:49 this is talking about using infrastructure as a code so for ad ofs
711:51 infrastructure as a code so for ad ofs this would be using cloud formation
711:52 this would be using cloud formation creating change sets which kind of um uh
711:55 creating change sets which kind of um uh say exactly what is going to change
711:57 say exactly what is going to change stack updates drift detection to see if
711:58 stack updates drift detection to see if your stuff is uh uh being changed over
712:01 your stuff is uh uh being changed over time by developers through manual
712:02 time by developers through manual configuration things like that then we
712:04 configuration things like that then we have allow for evolutionary
712:06 have allow for evolutionary architectures so this is about adapting
712:08 architectures so this is about adapting cicd um doing nightly releases or if
712:11 cicd um doing nightly releases or if you're using serverless if you adopted
712:13 you're using serverless if you adopted lambdas they deprecate over time forcing
712:16 lambdas they deprecate over time forcing you to use the latest version uh and so
712:18 you to use the latest version uh and so that is evolutionary architectures then
712:21 that is evolutionary architectures then we have drive architectures using data
712:23 we have drive architectures using data so um when you're using Cloud there's a
712:25 so um when you're using Cloud there's a lot of Tooling in there to automatically
712:27 lot of Tooling in there to automatically start collecting data so cloudwatch will
712:29 start collecting data so cloudwatch will be collecting some things by default and
712:31 be collecting some things by default and cloud trail will as well so you know
712:34 cloud trail will as well so you know that is another thing and then improving
712:37 that is another thing and then improving things through game days so this is
712:38 things through game days so this is about stimulating traffic on production
712:40 about stimulating traffic on production or purposely killing ec2 instances or or
712:42 or purposely killing ec2 instances or or messing with your services to see how
712:44 messing with your services to see how well they recover all
712:46 well they recover all [Music]
712:50 [Music] right before we jump into each of the
712:53 right before we jump into each of the pillars let's go open them up and take a
712:55 pillars let's go open them up and take a look at what structure we should expect
712:57 look at what structure we should expect to see so we have design principles
712:59 to see so we have design principles definition best practices and resources
713:01 definition best practices and resources all the pillars follow this to a t so
713:04 all the pillars follow this to a t so let's just talk about what these are so
713:05 let's just talk about what these are so the design principles are a list of
713:07 the design principles are a list of design principles that needs to be
713:09 design principles that needs to be considered during implementation and
713:11 considered during implementation and that's where we're going to focus a lot
713:12 that's where we're going to focus a lot of our energy then you have definition
713:15 of our energy then you have definition so this is an overview of the best
713:16 so this is an overview of the best practice categories then you have the
713:18 practice categories then you have the best practices themselves these are
713:20 best practices themselves these are detailed information about each practice
713:22 detailed information about each practice with uh various a services and then you
713:24 with uh various a services and then you have resources these are additional
713:26 have resources these are additional documentation white papers uh and videos
713:28 documentation white papers uh and videos to implement this pillar and I just want
713:31 to implement this pillar and I just want to tell you that if you're doing the
713:32 to tell you that if you're doing the certified Cloud practitioner we're
713:34 certified Cloud practitioner we're really just going to cover the design
713:35 really just going to cover the design principles but for the solutions
713:37 principles but for the solutions architect associate or anything uh
713:39 architect associate or anything uh that's associate or above that's where
713:40 that's associate or above that's where we're going to actually dive deep into
713:42 we're going to actually dive deep into to the implementation of the best
713:44 to the implementation of the best practices because there is a lot of
713:45 practices because there is a lot of stuff there so uh yeah there we
713:48 stuff there so uh yeah there we [Music]
713:52 [Music] go let's take a look here at the design
713:54 go let's take a look here at the design principles for operational excellence so
713:56 principles for operational excellence so the first here is perform operations as
713:58 the first here is perform operations as code so apply the same engineering
714:00 code so apply the same engineering discipline you would to application code
714:02 discipline you would to application code to your infrastructure so by trating
714:04 to your infrastructure so by trating your operations as code you can limit
714:06 your operations as code you can limit human error and enable consistent
714:08 human error and enable consistent responses to events generally we're
714:10 responses to events generally we're talking about infrast infrastructure as
714:12 talking about infrast infrastructure as a code here so this would probably like
714:13 a code here so this would probably like things like cloud formation there's
714:14 things like cloud formation there's other things you could do like policy as
714:16 other things you could do like policy as a code and a bunch of other ones then we
714:18 a code and a bunch of other ones then we have make frequent small reversible
714:19 have make frequent small reversible changes so design your workloads to
714:22 changes so design your workloads to allow components to be updated regularly
714:25 allow components to be updated regularly uh this could be talking about doing
714:26 uh this could be talking about doing rollbacks incremental changes Blu green
714:28 rollbacks incremental changes Blu green deployments having a cicd pipeline
714:30 deployments having a cicd pipeline refine operations procedures frequently
714:33 refine operations procedures frequently so look for continuous opportunities to
714:34 so look for continuous opportunities to improve your operations uh here you use
714:37 improve your operations uh here you use game days to simulate traffic or event
714:39 game days to simulate traffic or event failure on your production workloads
714:41 failure on your production workloads anticipate failure so perform post
714:42 anticipate failure so perform post modems on system failures to better
714:45 modems on system failures to better improve write test code kill production
714:47 improve write test code kill production servers um there's a small spelling
714:49 servers um there's a small spelling mistake it should have an R here so
714:51 mistake it should have an R here so servers to test recovery learn from all
714:54 servers to test recovery learn from all operational failure so share Lessons
714:56 operational failure so share Lessons Learned in a knowledge base for
714:58 Learned in a knowledge base for operational events and failures across
715:00 operational events and failures across your entire organization but you know if
715:01 your entire organization but you know if you can just remember these headings
715:03 you can just remember these headings here uh and be able to categorize what
715:05 here uh and be able to categorize what would be under operational excellence
715:06 would be under operational excellence you'll be okay all right
715:12 [Music] all right let's take a look at the
715:13 all right let's take a look at the design principles for the security
715:15 design principles for the security pillar so the first here is Implement a
715:17 pillar so the first here is Implement a strong identity foundation so implement
715:20 strong identity foundation so implement the principle of lease privilege or PP
715:23 the principle of lease privilege or PP that's a very uh popular concept meaning
715:25 that's a very uh popular concept meaning giving people only the permissions that
715:27 giving people only the permissions that they need use centralized identity so
715:29 they need use centralized identity so that would be using adus am avoid Long
715:32 that would be using adus am avoid Long Live credentials then we have enable
715:34 Live credentials then we have enable traceability so monitor alerts and audit
715:36 traceability so monitor alerts and audit actions and changes to your environment
715:38 actions and changes to your environment in real time integrate log and Metric
715:40 in real time integrate log and Metric collection and automate investigations
715:42 collection and automate investigations and Remediation then we have apply
715:45 and Remediation then we have apply security at all layers so take defense
715:48 security at all layers so take defense in depth approach with multiple security
715:50 in depth approach with multiple security controls for everything from Edge
715:52 controls for everything from Edge networks vbcs load balancing instances
715:54 networks vbcs load balancing instances OS application code uh we might have a
715:57 OS application code uh we might have a slide in this course on defense and uh
715:59 slide in this course on defense and uh depth where basically you see like a
716:01 depth where basically you see like a ring of things and you can kind of see
716:03 ring of things and you can kind of see how like there's layers that go from
716:05 how like there's layers that go from outward to Inward and that's what
716:06 outward to Inward and that's what they're talking about when they're
716:07 they're talking about when they're listing out all these things here
716:09 listing out all these things here automate security best practices uh
716:11 automate security best practices uh protect prot your data in transit at
716:13 protect prot your data in transit at rest uh keep people away from your data
716:17 rest uh keep people away from your data the reason I don't have descriptions
716:18 the reason I don't have descriptions there is because those are pretty
716:18 there is because those are pretty self-evident prepare for security events
716:21 self-evident prepare for security events so Incident Management systems and
716:23 so Incident Management systems and investigation policies and processes
716:24 investigation policies and processes tools to detect investigate and recovery
716:27 tools to detect investigate and recovery from incidences and uh there are a lot
716:29 from incidences and uh there are a lot of security tools out there and they all
716:30 of security tools out there and they all have funny uh initialisms I didn't put
716:32 have funny uh initialisms I didn't put any of them in here but I'm sure there
716:33 any of them in here but I'm sure there are some there um but yeah there you go
716:35 are some there um but yeah there you go for
716:36 for [Music]
716:40 [Music] security all right let's take a look at
716:42 security all right let's take a look at the design principles for reliability
716:44 the design principles for reliability and the first here is automatically
716:45 and the first here is automatically recover from failure so Monitor kpis and
716:48 recover from failure so Monitor kpis and Trigger automations when the threshold
716:50 Trigger automations when the threshold is breach test recovery procedures so
716:52 is breach test recovery procedures so test how your workload fails and you
716:54 test how your workload fails and you validate your recovery procedures you
716:56 validate your recovery procedures you can use automation to simulate different
716:58 can use automation to simulate different failures or to recreate scenarios that
717:00 failures or to recreate scenarios that led to failures before scale
717:01 led to failures before scale horizontally to increase aggregate
717:03 horizontally to increase aggregate system availability so replace one large
717:05 system availability so replace one large resource with multiple small resources
717:07 resource with multiple small resources to reduce the impact of a single failure
717:09 to reduce the impact of a single failure on the over overall workload to
717:12 on the over overall workload to distribute requests across multiple
717:13 distribute requests across multiple smaller resources to ensure that they
717:15 smaller resources to ensure that they don't share a common point of failure so
717:17 don't share a common point of failure so we're talking about multi-az uh High
717:19 we're talking about multi-az uh High availability okay stop guessing capacity
717:21 availability okay stop guessing capacity we've seen this multiple times so in on
717:23 we've seen this multiple times so in on premise it takes a lot of guess work to
717:25 premise it takes a lot of guess work to determine the elasticity of your
717:26 determine the elasticity of your workloads uh workload demands with Cloud
717:28 workloads uh workload demands with Cloud you don't need to guess how much you
717:29 you don't need to guess how much you need because you can request the right
717:31 need because you can request the right size of resources on demand that's going
717:34 size of resources on demand that's going to give you better reliability okay
717:35 to give you better reliability okay manage change in automation so making
717:37 manage change in automation so making changes via infrastructure as a code
717:39 changes via infrastructure as a code will allow for a formal process to track
717:40 will allow for a formal process to track and review infrastructure you're going
717:42 and review infrastructure you're going to see IC show up a lot in this
717:44 to see IC show up a lot in this framework
717:45 framework [Music]
717:48 [Music] okay let's take a look at design
717:50 okay let's take a look at design principles for performance efficiency so
717:52 principles for performance efficiency so the first here is democratize advanced
717:55 the first here is democratize advanced technology so focus on product
717:56 technology so focus on product development rather than procurement
717:58 development rather than procurement provisioning and management of services
718:00 provisioning and management of services because if you're on Prem you'd have to
718:01 because if you're on Prem you'd have to order those machines set them up and so
718:03 order those machines set them up and so take advantage of advanced technology
718:05 take advantage of advanced technology specialize in optimize for your use case
718:07 specialize in optimize for your use case with on demand cloud services because
718:08 with on demand cloud services because again if you're using on Prem uh you you
718:10 again if you're using on Prem uh you you know you might not have the option to
718:12 know you might not have the option to have Sage maker right it's just going to
718:14 have Sage maker right it's just going to be a VM and you're going to have to do
718:16 be a VM and you're going to have to do all the work yourselves whereas ads has
718:18 all the work yourselves whereas ads has all these specialized things so you can
718:19 all these specialized things so you can move quickly uh Go Global in minutes so
718:21 move quickly uh Go Global in minutes so deploying your workload in multiple Abus
718:23 deploying your workload in multiple Abus regions around the world allows you to
718:25 regions around the world allows you to provide lower latency and a better
718:27 provide lower latency and a better experience for your customers at a
718:28 experience for your customers at a minimal cost we have used serverless
718:30 minimal cost we have used serverless architecture so serverless architecture
718:32 architecture so serverless architecture removes the need for you to run and
718:33 removes the need for you to run and maintain physical servers for
718:34 maintain physical servers for traditional Computing activities removes
718:37 traditional Computing activities removes the operational burden of managing
718:38 the operational burden of managing physical servers and can lower
718:39 physical servers and can lower transactional costs because manag
718:40 transactional costs because manag Services operate at Cloud scale and can
718:43 Services operate at Cloud scale and can be a lot better at um running them
718:46 be a lot better at um running them efficiently than you will uh experiment
718:48 efficiently than you will uh experiment more often so with virtual and
718:50 more often so with virtual and automatable uh resources you can quickly
718:52 automatable uh resources you can quickly carry out comparative testing using
718:53 carry out comparative testing using different types of instances storage or
718:55 different types of instances storage or configurations to make the best choice
718:57 configurations to make the best choice we call this right sizing choosing the
718:59 we call this right sizing choosing the right size consider mechanical sympathy
719:02 right size consider mechanical sympathy so understand how cloud services are
719:04 so understand how cloud services are consumed and always use technology
719:06 consumed and always use technology approach that aligns best with your
719:07 approach that aligns best with your workload goals for example consider data
719:10 workload goals for example consider data access patterns when you select database
719:12 access patterns when you select database or storage
719:13 or storage [Music]
719:17 [Music] approaches let's take a look here at
719:19 approaches let's take a look here at design principles for cost optimization
719:21 design principles for cost optimization so the first one here is Implement Cloud
719:23 so the first one here is Implement Cloud financial management so dedicate time
719:25 financial management so dedicate time and resources to build capacity uh via
719:28 and resources to build capacity uh via Cloud financial management and cost
719:29 Cloud financial management and cost optimization tooling soab us is saying
719:31 optimization tooling soab us is saying hey take advantage of all our tooling
719:33 hey take advantage of all our tooling that makes it easy for you to know
719:34 that makes it easy for you to know exactly what you're spending adopt a
719:36 exactly what you're spending adopt a consumption model so pay only for
719:38 consumption model so pay only for computing resources that you require uh
719:40 computing resources that you require uh an increase or decrease using uh
719:42 an increase or decrease using uh depending on the business requirements
719:44 depending on the business requirements we're talking about on demand pricing
719:45 we're talking about on demand pricing measure overall efficiency so measure
719:47 measure overall efficiency so measure the business output of the workload and
719:49 the business output of the workload and the cost associ associated with
719:51 the cost associ associated with delivering use this measure to know the
719:53 delivering use this measure to know the gains you make from increasing output
719:55 gains you make from increasing output and reducing costs so stop spending
719:58 and reducing costs so stop spending money on
719:59 money on undifferentiated that's a hard word to
720:01 undifferentiated that's a hard word to say
720:02 say undifferentiated heavy lifting so adus
720:05 undifferentiated heavy lifting so adus does the heavy lifting of the data
720:06 does the heavy lifting of the data center operations like racking stacking
720:08 center operations like racking stacking and power servers it also removes the
720:10 and power servers it also removes the operational burden of managing op
720:11 operational burden of managing op operating systems and applications with
720:14 operating systems and applications with managed services this allows you to
720:15 managed services this allows you to focus on your customers and business
720:17 focus on your customers and business projects rather than your it
720:19 projects rather than your it infrastructure and the last one here is
720:21 infrastructure and the last one here is analyze and attribute expenditure so the
720:24 analyze and attribute expenditure so the cloud makes it easier to uh accurately
720:26 cloud makes it easier to uh accurately identify the usage and cost of systems
720:28 identify the usage and cost of systems which then allow transparent uh
720:30 which then allow transparent uh attribution of it costs to individualize
720:32 attribution of it costs to individualize workload owners this helps measure
720:35 workload owners this helps measure return on investment and gives workload
720:36 return on investment and gives workload owners an opportunity to optimize their
720:38 owners an opportunity to optimize their resources and reduce costs so there you
720:40 resources and reduce costs so there you go
720:45 [Music] hey this is Andrew Brown from exam Pro
720:47 hey this is Andrew Brown from exam Pro and we are taking a look at the adus
720:48 and we are taking a look at the adus well architected tool so this is an
720:50 well architected tool so this is an auditing tool to be used to assess your
720:52 auditing tool to be used to assess your Cloud workloads for alignment with the
720:54 Cloud workloads for alignment with the AWS well architected framework and so
720:57 AWS well architected framework and so what it is it's essentially a checklist
720:59 what it is it's essentially a checklist uh but it also has nearby references so
721:02 uh but it also has nearby references so you know as you're reading through it it
721:03 you know as you're reading through it it will show you information uh and
721:06 will show you information uh and resources so that it can help you with
721:08 resources so that it can help you with this checklist here and the idea is when
721:10 this checklist here and the idea is when you're done you can generate out report
721:12 you're done you can generate out report and then you can provide that report to
721:14 and then you can provide that report to your Executives and key stakeholders to
721:16 your Executives and key stakeholders to prove uh you know how well architected
721:18 prove uh you know how well architected your workload is on AWS
721:20 your workload is on AWS [Music]
721:24 [Music] okay hey this is Andrew Brown from exam
721:26 okay hey this is Andrew Brown from exam Pro and in this video I want to show you
721:27 Pro and in this video I want to show you two things the well architected
721:29 two things the well architected framework and the well architected tool
721:31 framework and the well architected tool so first let's go look for the well
721:33 so first let's go look for the well architected framework so we're going to
721:35 architected framework so we're going to look up white papers uh AWS and so if we
721:39 look up white papers uh AWS and so if we go here to a amazon.com white papers we
721:42 go here to a amazon.com white papers we have a bunch of pages here and so I'm
721:43 have a bunch of pages here and so I'm going to just checkbox on white papers
721:45 going to just checkbox on white papers so that we can kind of reduce the amount
721:47 so that we can kind of reduce the amount there and then I'm going to checkbox
721:49 there and then I'm going to checkbox well architector framework if we scroll
721:51 well architector framework if we scroll all the way top here one of these you
721:53 all the way top here one of these you think it'd be right at the top but one
721:55 think it'd be right at the top but one of these is the well architected
721:57 of these is the well architected framework and here it is and so if we
721:59 framework and here it is and so if we open it up I used to just directly open
722:01 open it up I used to just directly open up as a PDF I'm sure you can still
722:03 up as a PDF I'm sure you can still download it as is but generally you're
722:05 download it as is but generally you're going to open up as this HTML page and
722:07 going to open up as this HTML page and you can basically read through it see
722:09 you can basically read through it see all the stuff see the multiple pillars
722:12 all the stuff see the multiple pillars we can click into here see the design
722:14 we can click into here see the design principles read the definitions and then
722:17 principles read the definitions and then start reading about uh the best
722:19 start reading about uh the best practices and they have these things at
722:21 practices and they have these things at the bottom of each one uh very boring
722:24 the bottom of each one uh very boring very very boring but um you know when
722:25 very very boring but um you know when you get to the solutions architect and
722:27 you get to the solutions architect and things like that you're going to need to
722:28 things like that you're going to need to know this stuff inside and out it's
722:30 know this stuff inside and out it's going to really help you out at this
722:31 going to really help you out at this Cloud practitioner we only need to know
722:33 Cloud practitioner we only need to know surface level
722:34 surface level information um but that's the architect
722:36 information um but that's the architect framework let's take a look at the well
722:38 framework let's take a look at the well architected tool so we going type in
722:40 architected tool so we going type in well here we'll get the well architected
722:43 well here we'll get the well architected tool and if we go here you can see that
722:45 tool and if we go here you can see that I've created a couple before probably
722:47 I've created a couple before probably demos for um our videos and so I'm going
722:51 demos for um our videos and so I'm going to go Define a new workload I'm going to
722:53 to go Define a new workload I'm going to say my my workload here uh my
723:02 workload whoops my workload it is messing up because I probably have
723:03 messing up because I probably have grammarly installed so it does not like
723:05 grammarly installed so it does not like grammarly so I'm just going to turn it
723:07 grammarly so I'm just going to turn it off for now so my workload
723:13 off for now so my workload and it's still not typing correctly so I
723:15 and it's still not typing correctly so I have to kill out kill out grammarly here
723:17 have to kill out kill out grammarly here which is kind of frustrating so that's a
723:19 which is kind of frustrating so that's a bug that that's not grammarly's fault
723:21 bug that that's not grammarly's fault that's adab Us's fault for not playing
723:22 that's adab Us's fault for not playing well with grammarly and that's something
723:26 well with grammarly and that's something I will definitely report to them because
723:27 I will definitely report to them because it's very annoying so I'm going to go
723:30 it's very annoying so I'm going to go ahead and refresh this
723:33 ahead and refresh this page my workload my
723:37 page my workload my workload um and this is Andrew Brown
723:42 workload um and this is Andrew Brown production or pre-production doesn't
723:43 production or pre-production doesn't matter pick your regions Us East or Us
723:47 matter pick your regions Us East or Us East 2
723:49 East 2 sure I'm selecting
723:52 sure I'm selecting it there we go uh optional optional
723:56 it there we go uh optional optional optional optional you go to next and
723:58 optional optional you go to next and then you can choose your lens servus
723:59 then you can choose your lens servus lens FTR lens so that's the foundational
724:02 lens FTR lens so that's the foundational technical review SAS lens we can go with
724:04 technical review SAS lens we can go with architected framework and then once that
724:07 architected framework and then once that is there we can start
724:10 is there we can start reviewing okay and then we get this big
724:12 reviewing okay and then we get this big checklist and so we can go through this
724:14 checklist and so we can go through this and read each one so we say Ops one how
724:17 and read each one so we say Ops one how do you determine what your priorities
724:18 do you determine what your priorities are and all these things like Ops and
724:20 are and all these things like Ops and stuff like that these are all the
724:21 stuff like that these are all the summaries in each of the well
724:22 summaries in each of the well architected framework sections so you
724:24 architected framework sections so you pretty much don't need to really read
724:26 pretty much don't need to really read the dock you just go through this so
724:27 the dock you just go through this so everyone needs to understand their part
724:29 everyone needs to understand their part in enabling business success have shared
724:32 in enabling business success have shared goals in order to set priorities of
724:33 goals in order to set priorities of resources this will maximize the benefit
724:35 resources this will maximize the benefit of your efforts so select from the
724:37 of your efforts so select from the following evaluate the customer's
724:39 following evaluate the customer's external needs external customer needs
724:42 external needs external customer needs evaluate internal customer needs if you
724:44 evaluate internal customer needs if you click info it's going to highlight each
724:46 click info it's going to highlight each one here so evolve key stakeholders
724:48 one here so evolve key stakeholders including Business Development
724:49 including Business Development operations teams this will ensure Etc
724:52 operations teams this will ensure Etc and so you just go through this and uh
724:54 and so you just go through this and uh you know once you have that and you save
724:56 you know once you have that and you save and
724:58 and exit Okay uh you'll have uh the
725:01 exit Okay uh you'll have uh the questions that are answered it'll say
725:03 questions that are answered it'll say what's high risk what's not things like
725:05 what's high risk what's not things like that very simplistic it's really just a
725:07 that very simplistic it's really just a way of making a very organized report or
725:09 way of making a very organized report or checklist and proving that you went
725:11 checklist and proving that you went through it uh to the executive level or
725:14 through it uh to the executive level or to the management level there so
725:16 to the management level there so hopefully that makes sense to you um
725:17 hopefully that makes sense to you um it's not too complicated but there you
725:19 it's not too complicated but there you [Music]
725:23 [Music] go hey it's Andrew Brown from exam Pro
725:26 go hey it's Andrew Brown from exam Pro and we are looking at the Adas
725:27 and we are looking at the Adas architecture Center so the architecture
725:29 architecture Center so the architecture Center is a web portal that contains
725:31 Center is a web portal that contains best practices and reference
725:33 best practices and reference architectures for a variety of different
725:35 architectures for a variety of different workloads and you can find this at adab.
725:37 workloads and you can find this at adab. amazon.com architecture so if you're
725:40 amazon.com architecture so if you're looking for Best Practices inter terms
725:41 looking for Best Practices inter terms of security they have a huge section on
725:43 of security they have a huge section on that and they have it for pretty much
725:45 that and they have it for pretty much every kind of category on AWS or if
725:47 every kind of category on AWS or if you're looking for practical examples
725:50 you're looking for practical examples you can view the large library of
725:52 you can view the large library of reference architectures so here's one to
725:54 reference architectures so here's one to make an ads Q&A bot and it will have an
725:57 make an ads Q&A bot and it will have an architectural diagram but you can also
726:00 architectural diagram but you can also uh deploy it via cloud formation or
726:02 uh deploy it via cloud formation or possibly cdk um and this way you can get
726:05 possibly cdk um and this way you can get a working example and then tweak it for
726:06 a working example and then tweak it for your use case so this is a really great
726:09 your use case so this is a really great tool um when you are done the it well
726:11 tool um when you are done the it well architect framework and you're saying
726:12 architect framework and you're saying okay how do we apply it can we get more
726:14 okay how do we apply it can we get more concrete examples and I wouldn't be
726:16 concrete examples and I wouldn't be surprised if a lot of the resources
726:18 surprised if a lot of the resources within the well architectured framework
726:19 within the well architectured framework white paper are just pointing to the
726:21 white paper are just pointing to the center
726:22 center [Music]
726:25 [Music] okay hey this is Andrew Brown from exam
726:28 okay hey this is Andrew Brown from exam Pro and we are taking a look at the
726:29 Pro and we are taking a look at the concept of total cost of ownership also
726:31 concept of total cost of ownership also known as TCO so what is TCO well it is a
726:34 known as TCO so what is TCO well it is a financial estimate intended to help
726:36 financial estimate intended to help buyers and owners determine the direct
726:38 buyers and owners determine the direct and indirect cost of a product or
726:40 and indirect cost of a product or service so here is is an example of you
726:42 service so here is is an example of you know TCO for maybe like a data center so
726:45 know TCO for maybe like a data center so we have Hardware monitoring installation
726:47 we have Hardware monitoring installation IT personnel training software uh
726:50 IT personnel training software uh security licensing and taxes but that's
726:53 security licensing and taxes but that's not just the limit of it it's just kind
726:54 not just the limit of it it's just kind of the examples we show here uh the idea
726:56 of the examples we show here uh the idea of creating TCO is useful when your
726:58 of creating TCO is useful when your company's looking to migrate from on
727:00 company's looking to migrate from on Prem to cloud and we will have a better
727:03 Prem to cloud and we will have a better uh kind of visual here to kind of
727:04 uh kind of visual here to kind of understand how you would contrast
727:06 understand how you would contrast against on premise to Cloud but let's
727:07 against on premise to Cloud but let's just talk about how it actually works in
727:09 just talk about how it actually works in practicality which I think gets kind of
727:11 practicality which I think gets kind of of overlooked when cloud service
727:13 of overlooked when cloud service providers are selling you on TCO so the
727:16 providers are selling you on TCO so the idea is that Gardener um you know they
727:19 idea is that Gardener um you know they uh they were they wrote this article
727:21 uh they were they wrote this article based on This research where an
727:22 based on This research where an organization had moved uh 2,500 virtual
727:25 organization had moved uh 2,500 virtual machines over to Amazon dc2 and so what
727:29 machines over to Amazon dc2 and so what you're seeing here is that there is a an
727:32 you're seeing here is that there is a an additional cost that we're not
727:32 additional cost that we're not considering which is the migration cost
727:34 considering which is the migration cost See This Bar up here um so the idea is
727:37 See This Bar up here um so the idea is that the company was paying around
727:39 that the company was paying around 400,000 and so they started to move over
727:42 400,000 and so they started to move over and as you see uh the cost initially
727:44 and as you see uh the cost initially went up for a short period of time here
727:47 went up for a short period of time here uh but then once that migration cost was
727:48 uh but then once that migration cost was over uh you can notice that they had a
727:50 over uh you can notice that they had a 55% reduction so it's uh totally
727:53 55% reduction so it's uh totally possible to save money uh and clearly
727:55 possible to save money uh and clearly there is great savings uh now is it
727:58 there is great savings uh now is it exactly what AWS promises probably not
728:00 exactly what AWS promises probably not and that's that could be the reason why
728:02 and that's that could be the reason why they updated their TCO calculator but
728:04 they updated their TCO calculator but let's now just do that contrast against
728:06 let's now just do that contrast against the two so we have on premise on the
728:08 the two so we have on premise on the left and ads on the right or any cloud
728:10 left and ads on the right or any cloud service provider and what I want to do
728:12 service provider and what I want to do is help you think about what costs do
728:14 is help you think about what costs do people generally think about because if
728:16 people generally think about because if we have like Iceberg the idea here is
728:18 we have like Iceberg the idea here is that these are the costs that we always
728:19 that these are the costs that we always think about above the iceberg and then
728:21 think about above the iceberg and then there's these hidden costs that we just
728:22 there's these hidden costs that we just don't consider when factoring in our
728:24 don't consider when factoring in our move and that's the idea of T TCO is to
728:26 move and that's the idea of T TCO is to consider all the cost not just the
728:28 consider all the cost not just the superficial ones and so people say these
728:30 superficial ones and so people say these look like teeth and that's why I add
728:31 look like teeth and that's why I add penguins and a whale here um and so when
728:35 penguins and a whale here um and so when we're talking about on premise what we
728:36 we're talking about on premise what we generally think are software license
728:37 generally think are software license fees and subscription fees but when you
728:39 fees and subscription fees but when you compare those against each other they
728:41 compare those against each other they might look the same um ad us might just
728:44 might look the same um ad us might just look slightly cheaper or even more and
728:46 look slightly cheaper or even more and so the idea is you need to then factor
728:47 so the idea is you need to then factor in everything so on on premise there's
728:49 in everything so on on premise there's implementation configuration training
728:51 implementation configuration training physical security Hardware IT personnel
728:53 physical security Hardware IT personnel maintenance and on the adab side you
728:55 maintenance and on the adab side you know you are you don't have to do as
728:57 know you are you don't have to do as much of that stuff so you just have
728:59 much of that stuff so you just have implementation configuration and
729:00 implementation configuration and training and so adab us with their TCO
729:03 training and so adab us with their TCO calculator their old one used to make a
729:05 calculator their old one used to make a promise of 75% in savings um again you
729:08 promise of 75% in savings um again you know this is going to really vary based
729:10 know this is going to really vary based on what your migration strategy looks
729:13 on what your migration strategy looks like um but you know it's totally
729:14 like um but you know it's totally possible you could save 75% or you could
729:17 possible you could save 75% or you could save 50% over a third year threeyear
729:20 save 50% over a third year threeyear period And there's a an initial Spike so
729:23 period And there's a an initial Spike so that's just something you have to
729:24 that's just something you have to consider but the nice thing though is
729:25 consider but the nice thing though is that once you've moved over all the
729:27 that once you've moved over all the stuff over here on the left hand side
729:28 stuff over here on the left hand side will be ad Us's responsibility
729:31 will be ad Us's responsibility [Music]
729:34 [Music] okay all right so let's take a look at
729:36 okay all right so let's take a look at Capital versus operational expenditure
729:39 Capital versus operational expenditure so there's capex and Opex so on the
729:41 so there's capex and Opex so on the capex side the idea here is you're
729:43 capex side the idea here is you're spending money upfront on physical
729:45 spending money upfront on physical infrastructure deducting that expenses
729:46 infrastructure deducting that expenses from your tax bill over time uh a lot of
729:49 from your tax bill over time uh a lot of companies that are running their own
729:50 companies that are running their own data centers uh or have a lot of on-
729:53 data centers uh or have a lot of on- premise stuff understand what capex is
729:55 premise stuff understand what capex is because um it's something that a lot of
729:57 because um it's something that a lot of times they get tax breakes on and that's
729:59 times they get tax breakes on and that's why we see a lot of people that have a
730:00 why we see a lot of people that have a hard time moving away from the cloud
730:02 hard time moving away from the cloud because you know they keep on thinking
730:03 because you know they keep on thinking about that money they save from the
730:05 about that money they save from the government but capex costs would be
730:07 government but capex costs would be things like server costs storage Network
730:09 things like server costs storage Network costs backups and archives Disaster
730:12 costs backups and archives Disaster Recovery costs data center costs
730:14 Recovery costs data center costs technical Personnel so the idea is with
730:17 technical Personnel so the idea is with capital exp expenses you have to guess
730:19 capital exp expenses you have to guess up front what you plan to spend okay
730:21 up front what you plan to spend okay with operational expenditure the idea
730:23 with operational expenditure the idea here is the cost associated with an on-
730:25 here is the cost associated with an on- premise data center that has shifted the
730:27 premise data center that has shifted the cost to the service provider the
730:28 cost to the service provider the customer only has to be concerned with
730:30 customer only has to be concerned with non-physical costs so leasing software
730:32 non-physical costs so leasing software and customizing features uh training
730:34 and customizing features uh training employees and cloud services paying for
730:36 employees and cloud services paying for cloud support uh billing based on cloud
730:39 cloud support uh billing based on cloud metrics so compute usage storage usage
730:42 metrics so compute usage storage usage and so the idea here is with operational
730:44 and so the idea here is with operational expenses you can try a product or
730:46 expenses you can try a product or service without investing in equipment
730:49 service without investing in equipment so basically kex is what we think about
730:51 so basically kex is what we think about when we think of on premise and then
730:53 when we think of on premise and then Opex is what we think about um you know
730:55 Opex is what we think about um you know when we're thinking about cloud or AWS
730:58 when we're thinking about cloud or AWS [Music]
731:02 [Music] okay all right let's ask a very
731:04 okay all right let's ask a very important question about Cloud migration
731:06 important question about Cloud migration so does cloud make it Personnel
731:08 so does cloud make it Personnel redundant so a company is considering
731:10 redundant so a company is considering migrating their workloads from on
731:11 migrating their workloads from on premise to the cloud to take advantage
731:12 premise to the cloud to take advantage of the savings there is a concern among
731:15 of the savings there is a concern among the staff that there will be Mass
731:17 the staff that there will be Mass layoffs does cloud make it Personnel
731:20 layoffs does cloud make it Personnel redundant and that's a very important
731:22 redundant and that's a very important question to to have an answer to and
731:24 question to to have an answer to and this all talks about shifting your it
731:26 this all talks about shifting your it team into different responsibilities so
731:29 team into different responsibilities so a company needs it Personnel during the
731:31 a company needs it Personnel during the migration phase as we saw with that
731:32 migration phase as we saw with that Gardener research report that there was
731:34 Gardener research report that there was a period at least like a year where they
731:37 a period at least like a year where they needed that for you know depending on
731:38 needed that for you know depending on the size of your company so you're still
731:40 the size of your company so you're still going to need those people around a
731:42 going to need those people around a company can transition some roles to new
731:43 company can transition some roles to new Cloud roles so a very traditional
731:45 Cloud roles so a very traditional example would be you have your
731:47 example would be you have your traditional networking roles or people
731:48 traditional networking roles or people have like their CCNA and now they're
731:50 have like their CCNA and now they're moving over to Cloud networking uh they
731:53 moving over to Cloud networking uh they have a reduced workload but there's
731:54 have a reduced workload but there's other things uh that they could be doing
731:56 other things uh that they could be doing in the cloud um a company may decide to
731:59 in the cloud um a company may decide to take a hybrid approach so they'll always
732:00 take a hybrid approach so they'll always need to have a traditional it team and a
732:03 need to have a traditional it team and a cloud uh it team um and the last one and
732:07 cloud uh it team um and the last one and this would you'd actually see on the
732:08 this would you'd actually see on the exam which is a company can change
732:10 exam which is a company can change employees AC ities from managing
732:12 employees AC ities from managing infrastructure to re Revenue generating
732:14 infrastructure to re Revenue generating activities okay so the idea is that you
732:16 activities okay so the idea is that you know if you a company why would you get
732:18 know if you a company why would you get rid of all your staff when you can just
732:19 rid of all your staff when you can just put them all into Revenue generation I
732:21 put them all into Revenue generation I suppose you know you could uh you know
732:24 suppose you know you could uh you know uh lay them off and some companies might
732:25 uh lay them off and some companies might do that um or you know you could just
732:27 do that um or you know you could just retrain them because if that IT
732:30 retrain them because if that IT personnel team has uh technical
732:31 personnel team has uh technical expertise I'm sure they can translate
732:33 expertise I'm sure they can translate that to the
732:34 that to the [Music]
732:38 [Music] cloud let's talk about the adus pricing
732:40 cloud let's talk about the adus pricing calculator and this this is a free cost
732:42 calculator and this this is a free cost estimate tool that can be used within
732:43 estimate tool that can be used within your web browser without the need of an
732:45 your web browser without the need of an adus account to estimate the cost of a
732:47 adus account to estimate the cost of a various adus services and this is um
732:50 various adus services and this is um available at calculator. AWS and the
732:53 available at calculator. AWS and the reason we're bringing this up is because
732:54 reason we're bringing this up is because there used to be a TCO calculator but
732:57 there used to be a TCO calculator but now this is the calculator that you use
732:59 now this is the calculator that you use so the adabs pricing calculator contains
733:01 so the adabs pricing calculator contains 100 plus services that you configure for
733:03 100 plus services that you configure for cost estimate and so you can just click
733:05 cost estimate and so you can just click through a bunch of knobs and uh boxes to
733:09 through a bunch of knobs and uh boxes to uh you know uh exactly figure out a very
733:13 uh you know uh exactly figure out a very accurate cost so the idea here is that
733:16 accurate cost so the idea here is that to calculate your TCO an organization
733:18 to calculate your TCO an organization needs to compare that existing costs
733:20 needs to compare that existing costs against their adus costs and so the adus
733:22 against their adus costs and so the adus pricing calculator can be used to
733:23 pricing calculator can be used to determine uh you know the adus costs and
733:26 determine uh you know the adus costs and obviously the organization knows its
733:27 obviously the organization knows its cost so we can compare it against that
733:30 cost so we can compare it against that um and the way you can get data out of
733:32 um and the way you can get data out of this is you can export it as a final
733:34 this is you can export it as a final estimate to a CSV
733:36 estimate to a CSV [Music]
733:39 [Music] okay hey this is this is Andre Brown
733:41 okay hey this is this is Andre Brown from exam Pro and we are taking a look
733:43 from exam Pro and we are taking a look at the AWS pricing calculator so to get
733:45 at the AWS pricing calculator so to get there it's calculator. AWS what you're
733:47 there it's calculator. AWS what you're going to do is hit create estimate and
733:48 going to do is hit create estimate and then here you have a bunch of services
733:50 then here you have a bunch of services so you just choose what you want so you
733:52 so you just choose what you want so you type in ec2 we're going to configure
733:54 type in ec2 we're going to configure that and from there we can do a quick
733:56 that and from there we can do a quick estimate or an advanced estimate so
733:58 estimate or an advanced estimate so choose this option for fast and easy
733:59 choose this option for fast and easy route to Ballpark and estimate choose
734:02 route to Ballpark and estimate choose this option for detailed estimate for
734:03 this option for detailed estimate for accounts workloads and stuff so notice
734:05 accounts workloads and stuff so notice down below very simplistic we hit
734:08 down below very simplistic we hit Advanced and we get all sort sorts of
734:11 Advanced and we get all sort sorts of stuff okay so you know it's really up to
734:13 stuff okay so you know it's really up to you I'm very comfortable with the
734:15 you I'm very comfortable with the advanced options so I might be running a
734:17 advanced options so I might be running a Linux machine what is my usage it's
734:19 Linux machine what is my usage it's going to have uh daily spikes of traffic
734:23 going to have uh daily spikes of traffic because of the use cases you could say
734:25 because of the use cases you could say it's not busy on Saturday and Sunday
734:27 it's not busy on Saturday and Sunday that it has a baseline of one a peak of
734:29 that it has a baseline of one a peak of two eight things like that then you can
734:31 two eight things like that then you can choose what you're using um T4 G I don't
734:35 choose what you're using um T4 G I don't even know what that is uh but we'll just
734:37 even know what that is uh but we'll just say like
734:38 say like t uh T2 micro which is not that big 23
734:43 t uh T2 micro which is not that big 23 micro and you can say we're doing on
734:45 micro and you can say we're doing on demand cuz a lot of people would be
734:47 demand cuz a lot of people would be doing that and you see like $7 a month
734:50 doing that and you see like $7 a month it's not a lot of money then you're
734:52 it's not a lot of money then you're looking at your storage data in data
734:55 looking at your storage data in data out okay so we can add that another
734:58 out okay so we can add that another thing that we might see is something
735:00 thing that we might see is something like
735:02 like RDS so we go to RDS and we add post
735:05 RDS so we go to RDS and we add post Crest and not all of them have the
735:07 Crest and not all of them have the simple and complex sometimes they're
735:08 simple and complex sometimes they're simple so production database
735:12 simple so production database we'll have one here and which're just
735:14 we'll have one here and which're just going to be say a dbt2 micro T T3 micro
735:19 going to be say a dbt2 micro T T3 micro there we go uh 100 that's fine we're not
735:23 there we go uh 100 that's fine we're not going to have multi-az we'll have single
735:24 going to have multi-az we'll have single a on demand show the calculation $13 a
735:28 a on demand show the calculation $13 a month add that to our estimate so you're
735:30 month add that to our estimate so you're kind of getting the idea there
735:32 kind of getting the idea there right um and so you know we have our
735:35 right um and so you know we have our summary that's our monthly
735:38 summary that's our monthly $391 um oh sorry over $12 months our
735:41 $391 um oh sorry over $12 months our monthly cost is
735:42 monthly cost is $32 okay you can go back there clone the
735:45 $32 okay you can go back there clone the service edit it stuff like that you can
735:47 service edit it stuff like that you can export the estimate I think it goes out
735:49 export the estimate I think it goes out as a CSV you can also hit
735:52 as a CSV you can also hit share um and then hit agree and so then
735:55 share um and then hit agree and so then you have a public link and if I have
735:58 you have a public link and if I have that link we can just see what happens
736:00 that link we can just see what happens if I paste it okay and it just brings
736:03 if I paste it okay and it just brings them to the same estimate so there you
736:05 them to the same estimate so there you [Music]
736:09 [Music] go hey this is Brown from exam Pro and
736:12 go hey this is Brown from exam Pro and we are taking a look at migration
736:13 we are taking a look at migration evaluator so it was formerly known as
736:15 evaluator so it was formerly known as TCL logic and then abos acquired the
736:18 TCL logic and then abos acquired the company and it is an estimate tool used
736:20 company and it is an estimate tool used to determine an organization existing on
736:22 to determine an organization existing on premise costs so it can compare it
736:24 premise costs so it can compare it against its aabus cost for Planned Cloud
736:27 against its aabus cost for Planned Cloud migration uh so the idea is that you can
736:29 migration uh so the idea is that you can get uh very very detailed information
736:32 get uh very very detailed information and the way it collects information is
736:34 and the way it collects information is via an agentless collector to collect
736:37 via an agentless collector to collect data from your on- premise
736:38 data from your on- premise infrastructure to extract from your own
736:39 infrastructure to extract from your own on premise costs I don't know if you can
736:41 on premise costs I don't know if you can see there but you can see that it works
736:42 see there but you can see that it works with a lot of different kinds of on-
736:44 with a lot of different kinds of on- premise technology like VMware Microsoft
736:48 premise technology like VMware Microsoft uh tsql all sorts of things
736:52 uh tsql all sorts of things [Music]
736:56 [Music] okay one migration tool that we can use
736:58 okay one migration tool that we can use with AWS is the VM import export and
737:01 with AWS is the VM import export and this allows us to import virtual
737:03 this allows us to import virtual machines into ec2 so inabus has import
737:06 machines into ec2 so inabus has import instructions for VMware Citrix Microsoft
737:09 instructions for VMware Citrix Microsoft hyperv windows vhd from Azure and also
737:13 hyperv windows vhd from Azure and also Linux vhd from Azure and so the way this
737:15 Linux vhd from Azure and so the way this works is that you prepare your virtual
737:17 works is that you prepare your virtual image for upload and adus has a bunch of
737:19 image for upload and adus has a bunch of instructions for that once it is ready
737:21 instructions for that once it is ready you're going to upload that to an S3
737:23 you're going to upload that to an S3 bucket and once it's uploaded to an S3
737:26 bucket and once it's uploaded to an S3 bucket then what you can do is use the
737:28 bucket then what you can do is use the adab CLI to import your image um and so
737:32 adab CLI to import your image um and so that is the CLI command down below and
737:35 that is the CLI command down below and once it is produced it will generate out
737:37 once it is produced it will generate out an Amazon machine image and so from an
737:39 an Amazon machine image and so from an Ami you can then go your ec2
737:42 Ami you can then go your ec2 [Music]
737:46 [Music] okay hey this is Andrew Brown from exam
737:48 okay hey this is Andrew Brown from exam Pro and we are taking a look at the
737:50 Pro and we are taking a look at the database migration service which allows
737:52 database migration service which allows you to quickly and securely migrate one
737:53 you to quickly and securely migrate one database to another DMS can be used to
737:55 database to another DMS can be used to migrate your on premise database to ads
737:57 migrate your on premise database to ads and that's why we're talking about it uh
737:59 and that's why we're talking about it uh and so here's a general diagram where
738:00 and so here's a general diagram where you have your Source database which
738:02 you have your Source database which connects to a source endpoint goes
738:04 connects to a source endpoint goes through a replication instance so that's
738:05 through a replication instance so that's a ec2 instance that's going to replicate
738:08 a ec2 instance that's going to replicate the data to the Target endpoint onto the
738:10 the data to the Target endpoint onto the the target database uh and so we have a
738:13 the target database uh and so we have a bunch of possible sources so we have
738:15 bunch of possible sources so we have Oracle database Microsoft SQL MySQL Mari
738:18 Oracle database Microsoft SQL MySQL Mari DB post SQL mongodb sap
738:23 DB post SQL mongodb sap ASC IMDb db2 AZ your SQL database Amazon
738:28 ASC IMDb db2 AZ your SQL database Amazon RDS Amazon S3 and I'm assuming these are
738:31 RDS Amazon S3 and I'm assuming these are database dumps Amazon Aurora Amazon
738:35 database dumps Amazon Aurora Amazon document DB and so for possible targets
738:37 document DB and so for possible targets it's very similar we got Oracle database
738:39 it's very similar we got Oracle database Microsoft SQL MySQL Mario DB post SQL
738:44 Microsoft SQL MySQL Mario DB post SQL reddis saps SE Amazon red shift Amazon
738:48 reddis saps SE Amazon red shift Amazon RDS Amazon Dynamo DB Amazon S3 Amazon
738:51 RDS Amazon Dynamo DB Amazon S3 Amazon Aurora Amazon open search service Amazon
738:55 Aurora Amazon open search service Amazon elasticache for reddis Amazon document
738:57 elasticache for reddis Amazon document DB Amazon Neptune Apachi Kafka I'm just
739:01 DB Amazon Neptune Apachi Kafka I'm just showing you the list to give you an idea
739:02 showing you the list to give you an idea of how flexible this service is uh but
739:05 of how flexible this service is uh but you can tell that these are very
739:06 you can tell that these are very different databases so how can it uh
739:09 different databases so how can it uh move them over right and so so in not
739:11 move them over right and so so in not all cases can it easily do it like it's
739:13 all cases can it easily do it like it's very easy to go from myql to postest um
739:16 very easy to go from myql to postest um but you know for ones that are like
739:17 but you know for ones that are like relational to uh nosql uh this is where
739:21 relational to uh nosql uh this is where the adaba schema conversion tool comes
739:23 the adaba schema conversion tool comes into play it's used in many cases to
739:24 into play it's used in many cases to automatically convert a source database
739:26 automatically convert a source database schema to a Target database schema or
739:29 schema to a Target database schema or semi-automate it so that you can kind of
739:31 semi-automate it so that you can kind of like uh you know uh figure out how to
739:33 like uh you know uh figure out how to map the new schema uh each migration
739:35 map the new schema uh each migration path requires a bit of research since
739:37 path requires a bit of research since not all combinations of sources and
739:38 not all combinations of sources and targets are possible and it really comes
739:41 targets are possible and it really comes down to even versions of these things so
739:43 down to even versions of these things so but I just want you to know about that
739:44 but I just want you to know about that it's an option as a database migration
739:46 it's an option as a database migration service and I've migrated a very large
739:48 service and I've migrated a very large database before and it's super fast uh
739:51 database before and it's super fast uh so and it's not that hard to use so
739:53 so and it's not that hard to use so something you definitely want to
739:54 something you definitely want to remember when you're
739:56 remember when you're [Music]
739:59 [Music] migrating hey this is Andrew Brown from
740:01 migrating hey this is Andrew Brown from exam Pro and we are taking a look at the
740:03 exam Pro and we are taking a look at the cloud adoption framework so this is a
740:05 cloud adoption framework so this is a white paper to help you plan your
740:06 white paper to help you plan your migration from on premise to AWS at the
740:09 migration from on premise to AWS at the highest level the AWS CAF organizes
740:11 highest level the AWS CAF organizes guidance into six Focus areas we got
740:14 guidance into six Focus areas we got business people governance platform
740:16 business people governance platform security and operations and this white
740:18 security and operations and this white paper is pretty high level uh so you
740:21 paper is pretty high level uh so you know it doesn't get into uh granular
740:23 know it doesn't get into uh granular details on how that migration should
740:24 details on how that migration should work uh but gives you kind of a holistic
740:27 work uh but gives you kind of a holistic approach and I believe that probably
740:29 approach and I believe that probably through the adus uh Amazon partner
740:31 through the adus uh Amazon partner Network there's people that specialize
740:33 Network there's people that specialize in using this particular framework to
740:34 in using this particular framework to help organizations move over and I
740:36 help organizations move over and I believe that Abus has Professional
740:38 believe that Abus has Professional Services through the APN but let's just
740:40 Services through the APN but let's just kind of break down what these six
740:41 kind of break down what these six categories are we're not going to go too
740:43 categories are we're not going to go too deep into this um but let's do it so the
740:45 deep into this um but let's do it so the first is the business perspective so
740:47 first is the business perspective so these are business managers Finance
740:49 these are business managers Finance managers budget owners strategy
740:50 managers budget owners strategy stakeholders so it's how to update the
740:53 stakeholders so it's how to update the staff skills and organizational
740:55 staff skills and organizational processes to optimize business value as
740:57 processes to optimize business value as they move Ops to the cloud you have
740:59 they move Ops to the cloud you have people perspectives so Human Resources
741:00 people perspectives so Human Resources Staffing people managers so how to
741:03 Staffing people managers so how to update the staff skills and
741:04 update the staff skills and organizational processes to optimize and
741:06 organizational processes to optimize and maintain the workforce and ensure
741:08 maintain the workforce and ensure competencies are in place at the
741:09 competencies are in place at the appropriate time you have governance
741:11 appropriate time you have governance perspective so cios program managers
741:14 perspective so cios program managers project managers Enterprise Architects
741:16 project managers Enterprise Architects business analysts so how to update the
741:18 business analysts so how to update the staff skills and organizational
741:20 staff skills and organizational processes that are necessary to ensure
741:22 processes that are necessary to ensure business governance in the cloud and
741:23 business governance in the cloud and manage uh and measure Cloud Investments
741:25 manage uh and measure Cloud Investments to evaluate the business outcomes we
741:27 to evaluate the business outcomes we have platform perspectives so CTO it
741:29 have platform perspectives so CTO it managers solution Architects so how to
741:32 managers solution Architects so how to update the staff skills and
741:33 update the staff skills and organizational processes that are
741:35 organizational processes that are necessary to deliver and optimize Cloud
741:37 necessary to deliver and optimize Cloud Solutions and services security
741:39 Solutions and services security perspectives so ciso it security
741:41 perspectives so ciso it security managers it security analysts so how to
741:43 managers it security analysts so how to update the staff skills and
741:44 update the staff skills and organizational processes that are
741:46 organizational processes that are necessary to ensure that the
741:47 necessary to ensure that the architecture deployed in in the cloud
741:50 architecture deployed in in the cloud aligns to the organization security
741:51 aligns to the organization security control requirements resilience and
741:53 control requirements resilience and compliance requirements we have
741:55 compliance requirements we have operational or operations perspective so
741:57 operational or operations perspective so it operations managers it support
742:00 it operations managers it support managers so how to update the staff
742:02 managers so how to update the staff skills and organizational processes that
742:04 skills and organizational processes that are necessary to ensure system health
742:06 are necessary to ensure system health and reliability during the move of
742:08 and reliability during the move of operations to the cloud and then to
742:10 operations to the cloud and then to operate operate using agile ongoing
742:12 operate operate using agile ongoing cloud computing best practices so this
742:14 cloud computing best practices so this just Taps the surface of what the CAF is
742:18 just Taps the surface of what the CAF is uh and I think for each of these they
742:19 uh and I think for each of these they actually have a more detailed breakdown
742:21 actually have a more detailed breakdown so you know business is going to break
742:22 so you know business is going to break down to even more uh uh finite things
742:25 down to even more uh uh finite things there
742:26 there [Music]
742:30 [Music] okay so itus has free services that are
742:33 okay so itus has free services that are free forever unlike the free tier that
742:35 free forever unlike the free tier that are up to a point of usage or time um
742:38 are up to a point of usage or time um and so there are a lot here this is not
742:40 and so there are a lot here this is not even the full list there's definitely
742:41 even the full list there's definitely more and we have am Amazon VPC Auto
742:44 more and we have am Amazon VPC Auto scaling cloud formation elastic bean
742:46 scaling cloud formation elastic bean stock opsw Works amplify Apps sync code
742:48 stock opsw Works amplify Apps sync code star organizations Consolidated building
742:51 star organizations Consolidated building it with cost Explorer Sage maker systems
742:54 it with cost Explorer Sage maker systems manager there's a lot of them okay um
742:56 manager there's a lot of them okay um but the thing is is that uh these
742:58 but the thing is is that uh these services are free but some of these um
743:01 services are free but some of these um can spin up other resources so the
743:03 can spin up other resources so the services are free themselves however
743:05 services are free themselves however ones that provision Services May cost
743:07 ones that provision Services May cost you money so cloud formation which is an
743:09 you money so cloud formation which is an infrastructure is a code tool could
743:10 infrastructure is a code tool could launch virtual machines those virtual
743:12 launch virtual machines those virtual machines will cost money right opsworks
743:14 machines will cost money right opsworks can launch servers that can cost money
743:16 can launch servers that can cost money amply can launch um lambdas that can
743:19 amply can launch um lambdas that can cost money so that's something you just
743:21 cost money so that's something you just have to consider um but uh yeah there
743:23 have to consider um but uh yeah there you
743:24 you [Music]
743:28 [Music] go hey this is Andrew Brown from exam
743:30 go hey this is Andrew Brown from exam Pro and we are taking a look at the adus
743:32 Pro and we are taking a look at the adus support plans so we got basic developer
743:36 support plans so we got basic developer business and Enterprise and you
743:37 business and Enterprise and you absolutely absolutely need to know this
743:39 absolutely absolutely need to know this stuff inside out for exam they will ask
743:41 stuff inside out for exam they will ask you questions on this okay so basic is
743:44 you questions on this okay so basic is for email support only uh such as
743:47 for email support only uh such as billing and account so if you think it
743:49 billing and account so if you think it got over bu and that's something you
743:50 got over bu and that's something you should do if if you've uh uh
743:53 should do if if you've uh uh misconfigured something and you end up
743:54 misconfigured something and you end up with a big Bill just go Um open up a
743:57 with a big Bill just go Um open up a support uh ticket under basic for
743:59 support uh ticket under basic for billing and they're likely to refund you
744:01 billing and they're likely to refund you but if you do have questions about
744:02 but if you do have questions about billing accounts that's what we're going
744:03 billing accounts that's what we're going to be using for everything else that is
744:04 to be using for everything else that is for tech support um and so for developer
744:07 for tech support um and so for developer business Enterprise you're going to get
744:08 business Enterprise you're going to get email support which they'll uh roughly
744:11 email support which they'll uh roughly reply within 24 hours I believe this is
744:14 reply within 24 hours I believe this is business hours so if you message them on
744:17 business hours so if you message them on Friday um or sorry Saturday you might be
744:20 Friday um or sorry Saturday you might be waiting till Monday for it okay um in
744:23 waiting till Monday for it okay um in terms of thirdparty support uh the only
744:26 terms of thirdparty support uh the only one that doesn't have third party
744:27 one that doesn't have third party support is developer so if you are using
744:30 support is developer so if you are using something like Ruby on Rails or Azure or
744:32 something like Ruby on Rails or Azure or something that has interruptibility
744:34 something that has interruptibility between AWS and something else business
744:36 between AWS and something else business Enterprise will absolutely help you out
744:38 Enterprise will absolutely help you out with it same with Enterprise but the
744:40 with it same with Enterprise but the developer one not so much uh if you like
744:43 developer one not so much uh if you like to use the phone or you like to chat
744:46 to use the phone or you like to chat with people um that's available at the
744:48 with people um that's available at the business Enterprise tier this is the way
744:50 business Enterprise tier this is the way I end up talking to people if you are um
744:53 I end up talking to people if you are um you know like if you're in North America
744:55 you know like if you're in North America and you're calling between 9 to5 and a
744:56 and you're calling between 9 to5 and a Monday and Friday you're likely to get
744:57 Monday and Friday you're likely to get somebody that is within North America if
745:00 somebody that is within North America if not it'll be one of uh one of the
745:03 not it'll be one of uh one of the supports from some other area so just be
745:06 supports from some other area so just be aware of that that can also affect the
745:07 aware of that that can also affect the time they pick up uh sometimes it's 5
745:09 time they pick up uh sometimes it's 5 minutes times it's 30 minutes to to an
745:12 minutes times it's 30 minutes to to an hour uh you know it just depends on what
745:14 hour uh you know it just depends on what service you're asking for and you know
745:17 service you're asking for and you know what time a day okay um in terms of
745:21 what time a day okay um in terms of responsiveness uh for General guidance
745:24 responsiveness uh for General guidance everything is 24 hours or less for
745:26 everything is 24 hours or less for developer business Enterprise if your
745:28 developer business Enterprise if your system is impaired it's within 12 hours
745:30 system is impaired it's within 12 hours or less with production system impaired
745:32 or less with production system impaired it's four hours or less with production
745:34 it's four hours or less with production system down it's 1 hour or less and if
745:36 system down it's 1 hour or less and if you're for Enterprise um it's going to
745:39 you're for Enterprise um it's going to be business critical system
745:40 be business critical system less than 50 minutes so just notice who
745:43 less than 50 minutes so just notice who has what for these things um I've
745:46 has what for these things um I've definitely waited like 3 days on General
745:49 definitely waited like 3 days on General guidance before so just take these with
745:50 guidance before so just take these with a grain of salt that they're not you
745:52 a grain of salt that they're not you know they don't really stick to these
745:54 know they don't really stick to these that or maybe I'm just not paying enough
745:55 that or maybe I'm just not paying enough for them to care okay um in terms of uh
745:58 for them to care okay um in terms of uh getting actual people assigned to you
746:00 getting actual people assigned to you this only happens at the Enterprise
746:01 this only happens at the Enterprise level where they have their coner team
746:04 level where they have their coner team so they uh help your um organization uh
746:07 so they uh help your um organization uh learn how to use ad asking them any
746:09 learn how to use ad asking them any questions personally and then you have a
746:11 questions personally and then you have a tam a technical account manager that is
746:13 tam a technical account manager that is somebody that knows um a side inside and
746:15 somebody that knows um a side inside and out and they'll help you architect
746:17 out and they'll help you architect things and make correct choices or
746:18 things and make correct choices or they'll check your bill and help you try
746:20 they'll check your bill and help you try to reduce that bill things like that
746:22 to reduce that bill things like that okay in terms of trust advisory checks
746:24 okay in terms of trust advisory checks at the basic developer you get seven
746:26 at the basic developer you get seven advisor checks once you're paying for
746:28 advisor checks once you're paying for business you get all the checks the cost
746:30 business you get all the checks the cost here for business is zero um for
746:33 here for business is zero um for developer it's starting at $29 a month
746:35 developer it's starting at $29 a month for businesses starting at $100 a month
746:38 for businesses starting at $100 a month and then for Enterprise it's 15,000 uh a
746:40 and then for Enterprise it's 15,000 uh a month so I said starting at because it's
746:43 month so I said starting at because it's dependent on your usage okay so let's
746:45 dependent on your usage okay so let's just look at developer business
746:47 just look at developer business Enterprise here cuz basic's not going to
746:48 Enterprise here cuz basic's not going to be applicable here so for developers $29
746:52 be applicable here so for developers $29 USD a month or 3% of the monthly adist
746:55 USD a month or 3% of the monthly adist usage which whichever is greater on the
746:57 usage which whichever is greater on the exam they're only going to ask you like
746:59 exam they're only going to ask you like is it $2,900 like generally do you know
747:01 is it $2,900 like generally do you know the tier of expensiveness but they're
747:03 the tier of expensiveness but they're not going to ask you the percentage of
747:05 not going to ask you the percentage of usage okay there's not going to be
747:06 usage okay there's not going to be formulas here um when you get into
747:08 formulas here um when you get into business it's a little bit uh different
747:10 business it's a little bit uh different where they have it in different brackets
747:12 where they have it in different brackets so it's going to be 10% for the first uh
747:14 so it's going to be 10% for the first uh 10,000 and the next is going to be the
747:16 10,000 and the next is going to be the next 7,000 stuff like that similar for
747:19 next 7,000 stuff like that similar for Enterprise as well so let's just do some
747:20 Enterprise as well so let's just do some math so we know that we understand how
747:23 math so we know that we understand how this works so if you if you had a
747:25 this works so if you if you had a monthly spend of $500 at the developer
747:28 monthly spend of $500 at the developer tier that's 3% of $500 is $15 so they go
747:31 tier that's 3% of $500 is $15 so they go okay what is greater $29 or $15 so
747:34 okay what is greater $29 or $15 so you're paying $29 if your spent is
747:36 you're paying $29 if your spent is $1,000 that comes up to $30 uh so you're
747:40 $1,000 that comes up to $30 uh so you're you're going to end up paying $30
747:41 you're going to end up paying $30 because that's greater than 29 okay for
747:44 because that's greater than 29 okay for business uh if your monthly spend is
747:45 business uh if your monthly spend is ,000 that's 10% of ,000 that's $100 if
747:48 ,000 that's 10% of ,000 that's $100 if your spend is $5,000 then you're going
747:50 your spend is $5,000 then you're going to be paying $500 if your monthly spend
747:52 to be paying $500 if your monthly spend is 12,000 then the first 10% of 10,000
747:57 is 12,000 then the first 10% of 10,000 is a th000 and then the next is 7% of
748:00 is a th000 and then the next is 7% of 2,000 so your total bill is 140 USD
748:03 2,000 so your total bill is 140 USD we're not going to do a calculation for
748:04 we're not going to do a calculation for Enterprise because it's the same for
748:06 Enterprise because it's the same for business but hopefully that gives you an
748:07 business but hopefully that gives you an idea there okay
748:13 [Music] hey it's Andrew Brown from exam Pro and
748:15 hey it's Andrew Brown from exam Pro and we are taking a look at a technical
748:16 we are taking a look at a technical account manager also known as a tam and
748:18 account manager also known as a tam and these provide both proactive guidance
748:20 these provide both proactive guidance and reactive support to help you succeed
748:22 and reactive support to help you succeed with your adus journey so what does a
748:26 with your adus journey so what does a tam do and this is straight from an adus
748:28 tam do and this is straight from an adus job
748:29 job posting what they would do is build
748:31 posting what they would do is build Solutions provide technical guidance and
748:33 Solutions provide technical guidance and advocate for the customer ensure Adas
748:35 advocate for the customer ensure Adas environments remain operationally
748:37 environments remain operationally healthy while reducing cost and
748:39 healthy while reducing cost and complexity
748:41 complexity develop trusting relationship with
748:42 develop trusting relationship with customers understanding their business
748:44 customers understanding their business needs and Technical challenges using
748:46 needs and Technical challenges using your technical uh acumin and customer
748:49 your technical uh acumin and customer Obsession you'll drive technical
748:50 Obsession you'll drive technical discussions regarding incidents
748:52 discussions regarding incidents tradeoffs risk management consult with a
748:54 tradeoffs risk management consult with a range of Partners from developers
748:56 range of Partners from developers through the SE Suite Executives
748:58 through the SE Suite Executives collaborat with a Solutions architect
749:00 collaborat with a Solutions architect business developers Professional Service
749:02 business developers Professional Service consultants and sales account managers
749:05 consultants and sales account managers proactively find opportunities for
749:07 proactively find opportunities for customers to gain additional value from
749:09 customers to gain additional value from ads provide detailed reviews of service
749:12 ads provide detailed reviews of service disruptions metrics detailed pre-launch
749:14 disruptions metrics detailed pre-launch planning being uh part of a wider
749:16 planning being uh part of a wider Enterprise support team providing post
749:18 Enterprise support team providing post scale cons uh uh consultative expertise
749:22 scale cons uh uh consultative expertise solve a variety of problems across
749:24 solve a variety of problems across different customers as they migrate
749:26 different customers as they migrate their workloads to the cloud uplift
749:28 their workloads to the cloud uplift customer uh capabilities by running
749:30 customer uh capabilities by running workshops Brown Bag sessions Brown Bag
749:32 workshops Brown Bag sessions Brown Bag sessions being sessions that occur at
749:34 sessions being sessions that occur at lunchtime something you can learn in 30
749:36 lunchtime something you can learn in 30 minutes an hour and so one thing that's
749:38 minutes an hour and so one thing that's really important to understand is that
749:40 really important to understand is that Tams follow the Amazon leadership
749:42 Tams follow the Amazon leadership principles especially about customer uh
749:44 principles especially about customer uh being customer obsessed and we do cover
749:46 being customer obsessed and we do cover the Amazon leadership principle
749:48 the Amazon leadership principle somewhere in this course and Tams are
749:50 somewhere in this course and Tams are only available at the Enterprise support
749:52 only available at the Enterprise support tier so hopefully that gives you an idea
749:53 tier so hopefully that gives you an idea what a tam
749:55 what a tam [Music]
749:58 [Music] does hey this is Andrew Brown from exam
750:00 does hey this is Andrew Brown from exam Pro and this follow along I'm going to
750:02 Pro and this follow along I'm going to show you um a support and in order to
750:05 show you um a support and in order to use ad support or to change your level
750:07 use ad support or to change your level of support you're going to need to be
750:09 of support you're going to need to be logged into the rout account I should
750:10 logged into the rout account I should say you can use support with IM users
750:13 say you can use support with IM users but if you want to change the support
750:15 but if you want to change the support plan you're going to have to be the root
750:16 plan you're going to have to be the root user so in the top right corner I'm
750:17 user so in the top right corner I'm going to support and notice here on left
750:20 going to support and notice here on left hand side right now I have a basic
750:22 hand side right now I have a basic plan and so uh before we look at
750:25 plan and so uh before we look at changing our plan I'm just going to go
750:26 changing our plan I'm just going to go create a case and we're going to uh just
750:29 create a case and we're going to uh just take a look at some of the options that
750:31 take a look at some of the options that are open to us so we have account
750:33 are open to us so we have account billing support service limit increase
750:35 billing support service limit increase technical support notice this is grayed
750:37 technical support notice this is grayed out so we cannot select anything here
750:40 out so we cannot select anything here I can go to here and increase our
750:42 I can go to here and increase our service limit and this is something that
750:44 service limit and this is something that you might have to do uh pretty soon
750:46 you might have to do uh pretty soon early in your account you might say hey
750:48 early in your account you might say hey I need more of something like ec2 or um
750:51 I need more of something like ec2 or um a very common thing is SC so for SCS you
750:54 a very common thing is SC so for SCS you might say hey um I need to have this
750:56 might say hey um I need to have this amount of emails for ETC okay so um if
751:01 amount of emails for ETC okay so um if we go over to count and billing support
751:03 we go over to count and billing support uh we can go here and ask anything we
751:04 uh we can go here and ask anything we want so if it's about the free tier I
751:06 want so if it's about the free tier I could say ask a general question getting
751:09 could say ask a general question getting started and saying uh what is free on
751:14 started and saying uh what is free on AWS um I want to know what is free on
751:20 AWS um I want to know what is free on AWS and you can attach uh three
751:23 AWS and you can attach uh three attachments there you can choose via web
751:25 attachments there you can choose via web and phone which is really nice um but
751:27 and phone which is really nice um but today I'm just going to do web here and
751:29 today I'm just going to do web here and submit that just to kind of show you
751:31 submit that just to kind of show you that as an example and so what that is
751:33 that as an example and so what that is going to do is open a case and then we
751:34 going to do is open a case and then we will see probably respond in 24 hours to
751:38 will see probably respond in 24 hours to 48 hours just depends on on um whether
751:40 48 hours just depends on on um whether it's the weekend or not because it's
751:42 it's the weekend or not because it's based on business hours of course so now
751:45 based on business hours of course so now that we have an understanding of basic
751:47 that we have an understanding of basic let's go take a look at what the other
751:49 let's go take a look at what the other tiers look like so we have basic
751:51 tiers look like so we have basic developer business and enterprise
751:52 developer business and enterprise Enterprise being extremely expensive
751:54 Enterprise being extremely expensive developer being affordable and then
751:56 developer being affordable and then business being um you know affordable
751:58 business being um you know affordable for businesses so I would say developer
752:00 for businesses so I would say developer is okay it gives you um uh it gives you
752:04 is okay it gives you um uh it gives you uh better support but it's all via email
752:07 uh better support but it's all via email and so you know if you really want good
752:09 and so you know if you really want good support you're going to going to have to
752:10 support you're going to going to have to pay the business one and that's the one
752:12 pay the business one and that's the one that I use quite a bit so if I change my
752:14 that I use quite a bit so if I change my plan I'm going to go over to business
752:15 plan I'm going to go over to business and this is going to cost me 93 bucks
752:17 and this is going to cost me 93 bucks just to do to show you here today so I'm
752:20 just to do to show you here today so I'm going to go ahead and click that and so
752:21 going to go ahead and click that and so it's now processing it and so what's
752:24 it's now processing it and so what's going to happen is I'm going to have to
752:26 going to happen is I'm going to have to wait for this basic to switch to
752:28 wait for this basic to switch to business so if I go to the case here it
752:30 business so if I go to the case here it hasn't happened as of yet so no I cannot
752:33 hasn't happened as of yet so no I cannot select this so I'm going to see you back
752:35 select this so I'm going to see you back here in maybe like four five minutes or
752:37 here in maybe like four five minutes or however long it takes and we'll take a
752:39 however long it takes and we'll take a look then okay okay great so after a few
752:41 look then okay okay great so after a few minutes it says my plan is now business
752:43 minutes it says my plan is now business and what I can do is go ahead and create
752:44 and what I can do is go ahead and create a new case and so I can go over to
752:46 a new case and so I can go over to technical support and ask a question so
752:48 technical support and ask a question so if I was having issues with anything it
752:50 if I was having issues with anything it doesn't matter what I could go over to
752:51 doesn't matter what I could go over to ec2 Linux and then I could choose my
752:54 ec2 Linux and then I could choose my category so I could say I'm having an
752:56 category so I could say I'm having an issue with um systems
753:00 issue with um systems manager and a lot of times they like you
753:02 manager and a lot of times they like you to provide the instance ID it's going to
753:04 to provide the instance ID it's going to change based on what service you choose
753:06 change based on what service you choose here um but you'll get different
753:07 here um but you'll get different information I'll just say I need
753:10 information I'll just say I need help with um logging into my ec2
753:16 help with um logging into my ec2 instance managed by SSM so I can say I
753:20 instance managed by SSM so I can say I created an ec2 instance and I am
753:23 created an ec2 instance and I am attempting to access uh the instance
753:28 attempting to access uh the instance via sessions
753:30 via sessions manager but it is not
753:33 manager but it is not working I think I have a ro issue and
753:37 working I think I have a ro issue and then I'm just going to go down here and
753:38 then I'm just going to go down here and say this is not got a real
753:42 say this is not got a real question I am filming a demo video for
753:47 question I am filming a demo video for tutorial
753:54 video on how to use support okay and so once we do that we have the option of
753:56 once we do that we have the option of web chat and phone so if you use phone
753:58 web chat and phone so if you use phone you're going to enter your phone number
754:00 you're going to enter your phone number in and they're going to call you back uh
754:02 in and they're going to call you back uh usually you will be on hold for anywhere
754:05 usually you will be on hold for anywhere for 5 minutes to an hour it just depends
754:08 for 5 minutes to an hour it just depends usually it's within 15 minutes so it's
754:09 usually it's within 15 minutes so it's very very good of course it depends on
754:11 very very good of course it depends on the time of day and your location things
754:12 the time of day and your location things like that and the service because
754:14 like that and the service because there's different support Engineers for
754:16 there's different support Engineers for different types of services and the the
754:18 different types of services and the the balance of those are different but
754:20 balance of those are different but generally chat is pretty good so I can
754:22 generally chat is pretty good so I can go here and I'm just going to hit submit
754:24 go here and I'm just going to hit submit and it's going to open a chat box and so
754:26 and it's going to open a chat box and so you just wait okay and sometimes it's
754:30 you just wait okay and sometimes it's super fast and sometimes it takes uh
754:33 super fast and sometimes it takes uh minutes okay so we are going to just sit
754:36 minutes okay so we are going to just sit here for a bit and um you know I'll just
754:39 here for a bit and um you know I'll just pop back here when there is somebody to
754:41 pop back here when there is somebody to talk to
754:42 talk to okay okay so after waiting a little
754:44 okay okay so after waiting a little while looks like uh we've been connected
754:46 while looks like uh we've been connected here so it took a bit of time so we're
754:49 here so it took a bit of time so we're just going to say hello hi um uh this is
754:52 just going to say hello hi um uh this is Andrew
754:53 Andrew Brown um I am recording a video to teach
754:58 Brown um I am recording a video to teach people how to use
755:00 people how to use AWS and I wanted to show them how it
755:05 AWS and I wanted to show them how it support
755:12 works so I'm just showing them how the chat system
755:15 chat system works say
755:25 hello and hopefully they'll appreciate or they won't it just doesn't really
755:56 go that's it thanks for your
755:59 it thanks for your help okay and so that's pretty much it
756:02 help okay and so that's pretty much it um so you know there's nothing really uh
756:05 um so you know there's nothing really uh uh special about that but the idea is
756:06 uh special about that but the idea is when you are typing with them it will
756:08 when you are typing with them it will appear in the ch respondence there so
756:10 appear in the ch respondence there so I'm just going to end the chat okay uh
756:13 I'm just going to end the chat okay uh and then I'm just going to mark that
756:14 and then I'm just going to mark that case as resolve sometimes they will ask
756:16 case as resolve sometimes they will ask you to resolve it if I go to cases I
756:19 you to resolve it if I go to cases I probably have some previous ones here um
756:21 probably have some previous ones here um and I have a lot but I don't know why
756:23 and I have a lot but I don't know why they don't all show up here so you can
756:25 they don't all show up here so you can see this one is pending this one is
756:26 see this one is pending this one is resolved I go back to this one you can
756:28 resolved I go back to this one you can kind of see that the uh history of a
756:31 kind of see that the uh history of a conversation is kept and you can go back
756:32 conversation is kept and you can go back and forth uh with the people there um
756:36 and forth uh with the people there um yeah that's pretty much it uh you can
756:37 yeah that's pretty much it uh you can also do screen sharing so they might
756:39 also do screen sharing so they might send you request to go on Zoom or
756:42 send you request to go on Zoom or download this piece of software that
756:43 download this piece of software that shares your screen and so that is
756:45 shares your screen and so that is another option as well so they can get
756:47 another option as well so they can get pretty handson to help you uh with your
756:50 pretty handson to help you uh with your problems there but that's pretty much
756:51 problems there but that's pretty much all I wanted to show you with support
756:53 all I wanted to show you with support I'm going to downgrade this and I'm not
756:54 I'm going to downgrade this and I'm not sure if they're going to give you back
756:55 sure if they're going to give you back my money sometimes it'll PR rate it for
756:57 my money sometimes it'll PR rate it for you but I'm go here and go back to basic
757:00 you but I'm go here and go back to basic um so we will also refund your credit
757:02 um so we will also refund your credit card directly in the month's remaining
757:03 card directly in the month's remaining fees on your old plan which you
757:05 fees on your old plan which you previously paid you're obligated to pay
757:07 previously paid you're obligated to pay a minimum of 30 days of support each
757:09 a minimum of 30 days of support each time you register so I'm not going to
757:11 time you register so I'm not going to get any money back which is totally fine
757:13 get any money back which is totally fine because I just wanted to show you how
757:14 because I just wanted to show you how that works but business support is
757:15 that works but business support is definitely worth it and uh you know
757:18 definitely worth it and uh you know that's
757:19 that's [Music]
757:23 [Music] it so the anabis marketpl is a curated
757:26 it so the anabis marketpl is a curated digital catalog with thousands of
757:28 digital catalog with thousands of software listings from independent
757:30 software listings from independent software vendors uh easily find buy test
757:33 software vendors uh easily find buy test and deploy software that already runs an
757:34 and deploy software that already runs an 8s the product can be free to use or can
757:37 8s the product can be free to use or can have an Associated charge the charge
757:39 have an Associated charge the charge becomes part of your adus bill and once
757:41 becomes part of your adus bill and once you pay adus Market pays the provider
757:44 you pay adus Market pays the provider the sales channel for isv and Consulting
757:46 the sales channel for isv and Consulting Partners allow you to sell your
757:47 Partners allow you to sell your solutions to other adus customers
757:49 solutions to other adus customers products can be offered such as Amis Aus
757:52 products can be offered such as Amis Aus CL information templates software of
757:54 CL information templates software of service offerings web acl's it WAFF and
757:57 service offerings web acl's it WAFF and rules so it sounds great um if you want
757:59 rules so it sounds great um if you want to sell here I think you need like a US
758:01 to sell here I think you need like a US bank account to do it um and you know
758:05 bank account to do it um and you know sometimes zus Marketplace is just part
758:06 sometimes zus Marketplace is just part of AWS so like when you're using the ec2
758:09 of AWS so like when you're using the ec2 marketplace you are technically using
758:10 marketplace you are technically using the itus marketplace um but they also
758:12 the itus marketplace um but they also have like a dedicated page for it so
758:14 have like a dedicated page for it so it's integrated with some services and
758:16 it's integrated with some services and it's also stand alone
758:18 it's also stand alone [Music]
758:22 [Music] okay hey this is Andrew Brown from exam
758:24 okay hey this is Andrew Brown from exam Pro and this follow along we're going to
758:25 Pro and this follow along we're going to take a look at the adus marketplace so
758:27 take a look at the adus marketplace so what I want you to do is go on the top
758:29 what I want you to do is go on the top and type in Marketplace and that'll
758:31 and type in Marketplace and that'll bring us over to here the marketplace
758:33 bring us over to here the marketplace can be found in a variety of different
758:34 can be found in a variety of different places on the platform here you can see
758:36 places on the platform here you can see that uh previously I was using something
758:38 that uh previously I was using something called guaca Bastian host to launch a
758:41 called guaca Bastian host to launch a server um but the idea is that um you
758:43 server um but the idea is that um you can discover products and subscriptions
758:45 can discover products and subscriptions that you might want to utilize so if I
758:47 that you might want to utilize so if I go over here there's a variety of
758:50 go over here there's a variety of different
758:51 different things and so it could be like I want to
758:53 things and so it could be like I want to have something like a firewall that
758:57 have something like a firewall that might be something that we might be
758:58 might be something that we might be interested in so we could search there
759:00 interested in so we could search there and there's like bring your own license
759:01 and there's like bring your own license firewall so maybe you have a license
759:03 firewall so maybe you have a license with this and you want to run it on an
759:05 with this and you want to run it on an ec2 instance something like that again
759:08 ec2 instance something like that again it's not like super complicated what's
759:10 it's not like super complicated what's going on here but a lot of times you
759:12 going on here but a lot of times you know when you're using Services you're
759:13 know when you're using Services you're accessing the marketplace anyway so like
759:16 accessing the marketplace anyway so like when I'm launching an ec2
759:18 when I'm launching an ec2 instance notice on the left hand side
759:20 instance notice on the left hand side says ABS Marketplace and so I don't have
759:22 says ABS Marketplace and so I don't have to go to the marketplace there I can
759:23 to go to the marketplace there I can just kind of like check out the thing I
759:25 just kind of like check out the thing I want um and that's pretty much all there
759:27 want um and that's pretty much all there really is to it okay so you know
759:29 really is to it okay so you know hopefully that makes
759:35 sense let's take a look here at Consolidated billing so this is a
759:36 Consolidated billing so this is a feature of Abus organizations that
759:38 feature of Abus organizations that allows you to pay for for multiple
759:39 allows you to pay for for multiple accounts via one bill so the idea here
759:43 accounts via one bill so the idea here is we have a master account and we have
759:44 is we have a master account and we have member accounts and I'm pretty sure that
759:47 member accounts and I'm pretty sure that we probably call this root account now I
759:48 we probably call this root account now I don't think uh master account might be a
759:49 don't think uh master account might be a data term but it's still showing up in
759:51 data term but it's still showing up in the documentation the idea is that if
759:53 the documentation the idea is that if you have member accounts within your
759:54 you have member accounts within your organization they're all going to be
759:56 organization they're all going to be Consolidated under the single account if
759:58 Consolidated under the single account if you have an account outside of your
760:00 you have an account outside of your organization um you know this is not
760:02 organization um you know this is not going to give you uh this is going to be
760:03 going to give you uh this is going to be basically a separate bill um as if it's
760:06 basically a separate bill um as if it's like a standalone organization or what
760:08 like a standalone organization or what have you okay
760:10 have you okay so uh for billing adus treats all
760:12 so uh for billing adus treats all accounts in an organization as if they
760:14 accounts in an organization as if they were one account you can designate one
760:16 were one account you can designate one uh uh master or root account that pays
760:19 uh uh master or root account that pays the charges for all the other member
760:21 the charges for all the other member accounts consolidate billing is offered
760:23 accounts consolidate billing is offered at no additional cost you can use uh
760:25 at no additional cost you can use uh cost Explorer to visualize usage for
760:27 cost Explorer to visualize usage for Consolidated billing which we can see I
760:30 Consolidated billing which we can see I have the icon here uh you can combine
760:32 have the icon here uh you can combine the usage across all accounts in the
760:34 the usage across all accounts in the organization to uh to share the volume
760:36 organization to uh to share the volume pricing discount which we did Cover in
760:38 pricing discount which we did Cover in this course separately if you want an
760:40 this course separately if you want an account to be able to leave the
760:41 account to be able to leave the organization you do have to attach it to
760:44 organization you do have to attach it to a new payment method so if let's say you
760:46 a new payment method so if let's say you had an account and you want to give it
760:48 had an account and you want to give it to your friend or whatever they're have
760:49 to your friend or whatever they're have to hook up their uh their credit card
760:50 to hook up their uh their credit card but you can totally have uh an account
760:53 but you can totally have uh an account leave an organization but you have to
760:54 leave an organization but you have to deal with that billing aspect
760:56 deal with that billing aspect [Music]
761:00 [Music] okay all right so there's a really cool
761:03 okay all right so there's a really cool way to save an ads and that's through
761:04 way to save an ads and that's through volume discounts and it's available for
761:06 volume discounts and it's available for many services the more you use the more
761:08 many services the more you use the more you save is the IDE aide behind it um
761:10 you save is the IDE aide behind it um and so consolidating building lets you
761:12 and so consolidating building lets you take advantage of volume discounts this
761:14 take advantage of volume discounts this is a particular feature of AIS
761:15 is a particular feature of AIS organization so if you do not have the
761:17 organization so if you do not have the or turn on you're not going to be able
761:19 or turn on you're not going to be able to take advantage of that okay so one
761:21 to take advantage of that okay so one example would be something like data
761:22 example would be something like data transfer where it is build uh for the
761:25 transfer where it is build uh for the first 10 terabytes at at 17 cents or
761:28 first 10 terabytes at at 17 cents or sorry 17 cents and then the next 40
761:32 sorry 17 cents and then the next 40 terabytes it will be AT3 cents okay so
761:36 terabytes it will be AT3 cents okay so if we had two accounts um such as Odo
761:38 if we had two accounts um such as Odo and Dax and they're not within an abl
761:40 and Dax and they're not within an abl organization we can calculate those and
761:42 organization we can calculate those and see what they are unconsolidated and
761:44 see what they are unconsolidated and just so you know 1 terab equals 1024
761:47 just so you know 1 terab equals 1024 gigabytes and that's what you're going
761:48 gigabytes and that's what you're going to see in these calculations so for Odo
761:50 to see in these calculations so for Odo uh you know if he has four terabytes and
761:52 uh you know if he has four terabytes and that is uh we calculate the gigabytes
761:55 that is uh we calculate the gigabytes there we times it by uh the um scent
761:58 there we times it by uh the um scent value there we're going to get
762:00 value there we're going to get $696 okay for Dax we're going to end up
762:03 $696 okay for Dax we're going to end up with uh about 1392 there and so if we
762:07 with uh about 1392 there and so if we were to add those up the bill would come
762:09 were to add those up the bill would come out to
762:11 out to $2,088 okay so the idea is that there's
762:14 $2,088 okay so the idea is that there's an organization and they like a your
762:16 an organization and they like a your company and they created two accounts
762:18 company and they created two accounts but they're just not within an
762:19 but they're just not within an organization by having them in the
762:21 organization by having them in the organization you're going to save um
762:23 organization you're going to save um about almost $80 there so um that is a
762:28 about almost $80 there so um that is a reason why you'd want to use volume
762:29 reason why you'd want to use volume discounts
762:30 discounts [Music]
762:33 [Music] okay hey this is Andrew Brown from
762:35 okay hey this is Andrew Brown from exampro and we're taking a look at IIs
762:37 exampro and we're taking a look at IIs trusted advisor so trusted advisor is a
762:39 trusted advisor so trusted advisor is a recommendation tool which automatically
762:41 recommendation tool which automatically and actively monitors your adus accounts
762:43 and actively monitors your adus accounts to provide acual recommendations across
762:46 to provide acual recommendations across a series of categories so this is what
762:49 a series of categories so this is what it looks like I personally prefer the
762:50 it looks like I personally prefer the older dashboard but this is what they
762:52 older dashboard but this is what they have now and you can see along the side
762:54 have now and you can see along the side we have a bunch of categories and then
762:56 we have a bunch of categories and then we have some checks here saying uh you
762:58 we have some checks here saying uh you know what are we meeting what are we not
763:00 know what are we meeting what are we not and you can go in and read each one and
763:02 and you can go in and read each one and they'll tell you so much information
763:04 they'll tell you so much information they'll even show you like what things
763:06 they'll even show you like what things are not meeting that requirements in
763:08 are not meeting that requirements in some case you can easily remediate by
763:10 some case you can easily remediate by pressing a button not in all cases but
763:12 pressing a button not in all cases but the thing with adus trust advisor is
763:13 the thing with adus trust advisor is think of adus trust advisor like an
763:15 think of adus trust advisor like an automated checklist of best practices on
763:18 automated checklist of best practices on AWS and they kind of map to the pillars
763:21 AWS and they kind of map to the pillars of the well architecture framework not
763:23 of the well architecture framework not exactly but pretty close but there are
763:24 exactly but pretty close but there are five categories of adus trusted advisor
763:27 five categories of adus trusted advisor so we have cost optimization how much
763:30 so we have cost optimization how much money can we save performance so how can
763:33 money can we save performance so how can uh we improve performance security how
763:35 uh we improve performance security how can we improve security fall tolerance
763:37 can we improve security fall tolerance how we can we prevent disaster or data
763:40 how we can we prevent disaster or data loss and service limit so are we going
763:43 loss and service limit so are we going to hit the maximum limit for a service
763:46 to hit the maximum limit for a service and so uh the next thing we need to
763:48 and so uh the next thing we need to discuss is um there's a variation of the
763:51 discuss is um there's a variation of the amount of checks that are available to
763:53 amount of checks that are available to you based on your support plan so you
763:55 you based on your support plan so you know if you're using basic or developer
763:56 know if you're using basic or developer you have seven trusted advisor checks
763:59 you have seven trusted advisor checks and if you have business Enterprise you
764:00 and if you have business Enterprise you have all the trusted advisor checks so
764:03 have all the trusted advisor checks so uh if we're talking about just the ones
764:05 uh if we're talking about just the ones that are available to you the ones that
764:06 that are available to you the ones that come for free is MFA on root account
764:08 come for free is MFA on root account security specified ports of unrestricted
764:11 security specified ports of unrestricted Amazon S3 bucket permissions Amazon EBS
764:13 Amazon S3 bucket permissions Amazon EBS public snapshots Amazon RDS public
764:16 public snapshots Amazon RDS public snapshots IMU so this is just about
764:19 snapshots IMU so this is just about alerting you about discouraging the use
764:20 alerting you about discouraging the use of the root account service limits so
764:23 of the root account service limits so all service limit checks are free um
764:25 all service limit checks are free um it's weird because they call it the like
764:27 it's weird because they call it the like seven Security checks but if you counted
764:30 seven Security checks but if you counted all the service limits it obviously be
764:31 all the service limits it obviously be too large of a number but notice that 1
764:33 too large of a number but notice that 1 through six are all Security checks so
764:36 through six are all Security checks so you're not getting anything from the
764:37 you're not getting anything from the other tiers just the security tier and
764:40 other tiers just the security tier and what I want to do is just go over a
764:42 what I want to do is just go over a bunch of available checks out there it's
764:45 bunch of available checks out there it's probably not the full list because I
764:46 probably not the full list because I couldn't even be bothered to update it
764:47 couldn't even be bothered to update it if they've added more but it will give
764:49 if they've added more but it will give you the general idea of what you could
764:50 you the general idea of what you could expect under each category so for cost
764:53 expect under each category so for cost optimization um it could be things like
764:55 optimization um it could be things like looking at idle load bouncers so you
764:58 looking at idle load bouncers so you know if you have load bouncers you're
764:59 know if you have load bouncers you're not using you're paying for them so get
765:01 not using you're paying for them so get rid of them unassociate elastic IP
765:03 rid of them unassociate elastic IP addresses so for every IP that's not
765:05 addresses so for every IP that's not associated you're paying for as well
765:07 associated you're paying for as well maybe under performance you have um High
765:09 maybe under performance you have um High utilization of Amazon ec2 instances so
765:12 utilization of Amazon ec2 instances so maybe you can save money by switching to
765:14 maybe you can save money by switching to smaller instances under security we saw
765:16 smaller instances under security we saw MFA on rout account very popular one
765:19 MFA on rout account very popular one making sure you turn on key rotation
765:21 making sure you turn on key rotation could be something as well there under
765:23 could be something as well there under fault tolerance um it could be making
765:26 fault tolerance um it could be making sure that you're using backups on your
765:27 sure that you're using backups on your Amazon RDS database maybe that's turned
765:29 Amazon RDS database maybe that's turned off uh for service limits there's just a
765:32 off uh for service limits there's just a ton of them and so uh one that that you
765:35 ton of them and so uh one that that you know might be PR to use vpcs or ec2
765:38 know might be PR to use vpcs or ec2 limits so there you go
765:39 limits so there you go [Music]
765:43 [Music] go hey this is Andrew Brown from exam
765:45 go hey this is Andrew Brown from exam Pro and we're going to take a look at
765:46 Pro and we're going to take a look at trusted advisor so what I want you to do
765:48 trusted advisor so what I want you to do is go to the top and type in trusted
765:51 is go to the top and type in trusted advisor and once you're there you're
765:53 advisor and once you're there you're going to notice on the left hand side we
765:54 going to notice on the left hand side we have cost optimization performance
765:56 have cost optimization performance security fault tolerance and service
765:58 security fault tolerance and service limits right now there are no
765:59 limits right now there are no recommended actions because there's not
766:01 recommended actions because there's not much going on this account and when you
766:03 much going on this account and when you uh have the uh Free level of support the
766:05 uh have the uh Free level of support the basic support you're not going to have
766:07 basic support you're not going to have all these checks but if we go in here we
766:09 all these checks but if we go in here we can still see kind of what they do um so
766:12 can still see kind of what they do um so we have like performance security things
766:14 we have like performance security things like that so these are the ones that we
766:16 like that so these are the ones that we actually can see and they generally work
766:18 actually can see and they generally work all the same way if you expand here it's
766:20 all the same way if you expand here it's going to say Amazon EBS public snapshot
766:23 going to say Amazon EBS public snapshot so check the permission settings for the
766:24 so check the permission settings for the EBS volume snapshots and alert you if
766:27 EBS volume snapshots and alert you if the any snapshots are marked as public
766:30 the any snapshots are marked as public and so if you scroll on down if there
766:32 and so if you scroll on down if there were ones that were an issue it would
766:34 were ones that were an issue it would tell you right here okay then down below
766:37 tell you right here okay then down below here we see like check buckets in Amazon
766:40 here we see like check buckets in Amazon S3 that have open access permissions or
766:42 S3 that have open access permissions or allow access to authenticated aabus
766:45 allow access to authenticated aabus users so yellow the ACL allows uh list
766:49 users so yellow the ACL allows uh list access for everyone uh a bucket policy
766:52 access for everyone uh a bucket policy allows for any kind of Open Access
766:53 allows for any kind of Open Access bucket policy statements have public
766:54 bucket policy statements have public Grant access so maybe what we can do is
766:57 Grant access so maybe what we can do is see if we can get this to
766:59 see if we can get this to trigger and so what I'm going to do here
767:01 trigger and so what I'm going to do here is go over to S3 and what we're going to
767:04 is go over to S3 and what we're going to do is make a B bucket that has full
767:07 do is make a B bucket that has full access okay so I'm going to create a new
767:09 access okay so I'm going to create a new bucket and it'll say my exposed
767:12 bucket and it'll say my exposed bucket we'll scroll on down here and
767:15 bucket we'll scroll on down here and we'll just checkbox that off and create
767:16 we'll just checkbox that off and create the bucket I say I acknowledge that is
767:19 the bucket I say I acknowledge that is totally
767:21 totally fine okay so now I have a bucket that is
767:24 fine okay so now I have a bucket that is 100% exposed if we go back to trusted
767:26 100% exposed if we go back to trusted advisor give this a
767:28 advisor give this a refresh I'm not sure how fast it will
767:30 refresh I'm not sure how fast it will show up here but if I
767:32 show up here but if I expand so it says the bucket ACL allows
767:36 expand so it says the bucket ACL allows upload delete for everyone the trusted
767:38 upload delete for everyone the trusted advisor does not have permissions to
767:39 advisor does not have permissions to check the policy uh bucket policy has
767:42 check the policy uh bucket policy has statements that Grant Public
767:44 statements that Grant Public Access so what we could try to do is
767:48 Access so what we could try to do is make a
767:56 policy and try to Grant all access here so I'm not writing these every single
767:58 so I'm not writing these every single day but I'm sure we could try to figure
768:00 day but I'm sure we could try to figure this
768:02 this out
768:10 um we'll say S3 bucket policy Public Access public
768:20 read and so that one might be a good example so I'm going to go ahead and
768:22 example so I'm going to go ahead and copy this one granting read only
768:23 copy this one granting read only permission to anomymous
768:25 permission to anomymous users I don't recommend you doing this
768:27 users I don't recommend you doing this I'm just doing this to show you to see
768:28 I'm just doing this to show you to see if we can get the trusted advisor to
768:30 if we can get the trusted advisor to check because I don't want you to uh do
768:32 check because I don't want you to uh do this and forget about it and then have a
768:34 this and forget about it and then have a serious issue but the principal is set
768:35 serious issue but the principal is set to anybody so anyone can read it and
768:38 to anybody so anyone can read it and here it saying get object Etc then it's
768:40 here it saying get object Etc then it's saying what particular resource so this
768:42 saying what particular resource so this one is going to be for uh the bucket in
768:45 one is going to be for uh the bucket in question here which is my
768:47 question here which is my exposed
768:50 exposed bucket we're going to scroll on down
768:52 bucket we're going to scroll on down save the
768:53 save the changes okay so this bucket is publicly
768:56 changes okay so this bucket is publicly accessible we're going to go back over
768:57 accessible we're going to go back over here refresh and see what we can
769:07 see okay so checks buckets in S3 Etc so it should appear under
769:09 it should appear under here and it could be that it's just
769:11 here and it could be that it's just going to take some time so what I'm
769:13 going to take some time so what I'm going to do is I'm just going to hang
769:14 going to do is I'm just going to hang tight for a little bit oh there we go
769:17 tight for a little bit oh there we go okay so it's showing up and I guess it
769:19 okay so it's showing up and I guess it just took some time to populate and so
769:21 just took some time to populate and so here we can see we have a a yellow
769:23 here we can see we have a a yellow symbol it's a warning saying hey there's
769:25 symbol it's a warning saying hey there's a problem here if we go back to the
769:27 a problem here if we go back to the dashboard I wonder if that shows up so
769:28 dashboard I wonder if that shows up so this one's for investigation and
769:31 this one's for investigation and recommendation so you know hopefully
769:33 recommendation so you know hopefully that kind of makes sense to you I think
769:34 that kind of makes sense to you I think in some cases you can do remediation
769:36 in some cases you can do remediation from from here or at least you can go
769:39 from from here or at least you can go and check box and say okay um
769:43 and check box and say okay um ignore could of swore there's
769:44 ignore could of swore there's remediation for some of
769:47 remediation for some of these but in any case you know that's
769:49 these but in any case you know that's generally what trusted adviser does um I
769:52 generally what trusted adviser does um I think that you probably can have it so
769:54 think that you probably can have it so that gives you alerts so yeah you could
769:56 that gives you alerts so yeah you could set recipients for particular things
769:58 set recipients for particular things like if there's a security issue then I
770:00 like if there's a security issue then I could email a particular person on your
770:02 could email a particular person on your team and they could deal with it but
770:04 team and they could deal with it but that's pretty much it so what I'm going
770:05 that's pretty much it so what I'm going to do is go ahead and delete this bucket
770:06 to do is go ahead and delete this bucket I'm all done with it
770:09 I'm all done with it we'll go
770:11 we'll go delete and say my delete uh my exposed
770:14 delete and say my delete uh my exposed bucket here to delete it and that is it
770:24 [Music] okay let's cover the concepts of service
770:26 okay let's cover the concepts of service level agreements also known as SLA so an
770:29 level agreements also known as SLA so an SLA is a formal commitment about the
770:31 SLA is a formal commitment about the expected level of service between a
770:32 expected level of service between a customer provider when a service level
770:34 customer provider when a service level is not met and if customer meets its
770:36 is not met and if customer meets its obligation under the SLA customer will
770:38 obligation under the SLA customer will be eligible to receive compensation so
770:40 be eligible to receive compensation so Financial or service credits and so when
770:43 Financial or service credits and so when we talk about slas then we talk about
770:44 we talk about slas then we talk about SLI so SLI service level indicator is a
770:48 SLI so SLI service level indicator is a metric or measurement that indicates
770:49 metric or measurement that indicates what measure of performance the customer
770:51 what measure of performance the customer is receiving at a given time a SLI
770:54 is receiving at a given time a SLI metric could be uptime performance
770:55 metric could be uptime performance availability throughput latency error
770:57 availability throughput latency error rate durability correctness and if we're
770:59 rate durability correctness and if we're talking about sis then we're talking
771:01 talking about sis then we're talking about slos service level objectives so
771:03 about slos service level objectives so the objective that that the provider has
771:05 the objective that that the provider has agreed to meet slos are represented as a
771:07 agreed to meet slos are represented as a specific Target percentage over a period
771:09 specific Target percentage over a period of time and so an example of a Target
771:13 of time and so an example of a Target percentage would be something that says
771:15 percentage would be something that says an availability SLA of
771:17 an availability SLA of 99.99% in a period of 3 months all right
771:21 99.99% in a period of 3 months all right and let's just talk about Target
771:22 and let's just talk about Target percentages and the way they can be
771:23 percentages and the way they can be represented very common ones we will see
771:26 represented very common ones we will see is
771:27 is 99.95%
771:30 99.95% 99.99% uh then we have 99 followed by
771:34 99.99% uh then we have 99 followed by 99 and so commonly we just say we call
771:37 99 and so commonly we just say we call this 99 okay and then there's one 911s
771:41 this 99 okay and then there's one 911s so if somebody says we have an SLA
771:42 so if somebody says we have an SLA guarantee of of 911s it's going to be
771:45 guarantee of of 911s it's going to be the 99 followed by 911s all
771:49 the 99 followed by 911s all [Music]
771:52 [Music] right let's take a look at Abus service
771:55 right let's take a look at Abus service level agreements and so there are a lot
771:57 level agreements and so there are a lot of them and I just wanted to show you a
771:59 of them and I just wanted to show you a few services to give you an idea how
772:01 few services to give you an idea how they work uh on the exam they're not
772:03 they work uh on the exam they're not going to ask you like oh what's Dynamo
772:05 going to ask you like oh what's Dynamo DB's SLA for Global tables um but
772:08 DB's SLA for Global tables um but generally we should just go through this
772:09 generally we should just go through this because it's good practice so let's take
772:11 because it's good practice so let's take a look at dynamodb SLA so adus will use
772:14 a look at dynamodb SLA so adus will use commercially reasonable efforts to make
772:15 commercially reasonable efforts to make dynb available with a monthly uptime
772:18 dynb available with a monthly uptime percentage of each adus region during
772:20 percentage of each adus region during any monthly billing cycle uh so for a at
772:23 any monthly billing cycle uh so for a at least
772:24 least 99.999% if Global tables slas applies or
772:29 99.999% if Global tables slas applies or 99.99% if the standard SLA applies in
772:32 99.99% if the standard SLA applies in the event Dynamo DB does not meet the
772:33 the event Dynamo DB does not meet the service commitment you'll be eligible to
772:35 service commitment you'll be eligible to receive service credits described below
772:38 receive service credits described below so we have monthly uptime percentage and
772:40 so we have monthly uptime percentage and the service credit percentage we get
772:41 the service credit percentage we get Global tables standard tables so let's
772:44 Global tables standard tables so let's take a look here so if less than
772:47 take a look here so if less than 99.999% but equal to or greater than
772:50 99.999% but equal to or greater than 99.0% is met so if if the service ends
772:54 99.0% is met so if if the service ends up being this you'll get 10% back of
772:56 up being this you'll get 10% back of what you spent as service credits if it
772:59 what you spent as service credits if it drops between U 99.0 and 95.0 you get
773:03 drops between U 99.0 and 95.0 you get 25% back if it's less than 95
773:07 25% back if it's less than 95 uh% um then it's 100% back okay and you
773:11 uh% um then it's 100% back okay and you get the general idea here SLA is going
773:12 get the general idea here SLA is going to be slightly different with their
773:14 to be slightly different with their drops now let's take a look at um
773:17 drops now let's take a look at um compute and so compute is going to apply
773:18 compute and so compute is going to apply across a bunch of compute
773:20 across a bunch of compute Services probably because they're all
773:22 Services probably because they're all using ec2 underneath so that's probably
773:24 using ec2 underneath so that's probably the reason for it so we have ec2 EBS ECS
773:28 the reason for it so we have ec2 EBS ECS eks and ab uh makes two SLA commitments
773:32 eks and ab uh makes two SLA commitments uh for the included services so we have
773:34 uh for the included services so we have a region level SLA that uh governs
773:36 a region level SLA that uh governs included Services deployed across
773:38 included Services deployed across multiple A's or regions and an instance
773:40 multiple A's or regions and an instance level SLA that governs Amazon ec2
773:42 level SLA that governs Amazon ec2 instances individually and again we have
773:45 instances individually and again we have our monthly up up time percentage our
773:47 our monthly up up time percentage our service CED percentage region and
773:49 service CED percentage region and instance level so you can just see the
773:51 instance level so you can just see the same thing it's like it's going to
773:52 same thing it's like it's going to change based on uh what it can meet then
773:56 change based on uh what it can meet then we'll take a look at one more like RDS
773:58 we'll take a look at one more like RDS so relational database service so it was
774:01 so relational database service so it was we'll use commercially reasonable
774:03 we'll use commercially reasonable efforts to make multi-az instances
774:05 efforts to make multi-az instances available with monthly uptime percentage
774:06 available with monthly uptime percentage of 99.95% during any monthly billing
774:09 of 99.95% during any monthly billing cycle and again you know if if they
774:11 cycle and again you know if if they don't meet those requirements you're
774:12 don't meet those requirements you're going to get service credits back which
774:14 going to get service credits back which basically equal USD dollars on the
774:16 basically equal USD dollars on the platform and so for this it looks like
774:18 platform and so for this it looks like that so just notice that you know with
774:20 that so just notice that you know with like compute it was for a a bunch of
774:22 like compute it was for a a bunch of services for Dynamo DB it was based on
774:25 services for Dynamo DB it was based on uh particular features like global
774:26 uh particular features like global standard tables SLA it's very
774:29 standard tables SLA it's very straightforward uh we didn't do S3
774:31 straightforward uh we didn't do S3 because I just did not want to show you
774:33 because I just did not want to show you that one it's just too complicated but
774:34 that one it's just too complicated but my point is is that it's going to vary
774:36 my point is is that it's going to vary so you have to look up per service okay
774:38 so you have to look up per service okay [Music]
774:43 [Music] hey this is Andrew Brown from exam Pro
774:44 hey this is Andrew Brown from exam Pro and we are taking a look at Amazon's
774:46 and we are taking a look at Amazon's service level agreements and so the way
774:48 service level agreements and so the way you find slas is you pretty much just
774:51 you find slas is you pretty much just type in SLA for whatever it is so if
774:53 type in SLA for whatever it is so if you're looking for compute you type in
774:54 you're looking for compute you type in SLA or you look for a particular service
774:56 SLA or you look for a particular service so maybe you say sage maker SLA AWS I
775:00 so maybe you say sage maker SLA AWS I don't think there's like a generic SLA
775:02 don't think there's like a generic SLA page at least I don't know where it is I
775:04 page at least I don't know where it is I always just type in SLA to find what it
775:06 always just type in SLA to find what it is and through that you can just kind of
775:07 is and through that you can just kind of read through and try to find out uh the
775:10 read through and try to find out uh the things that that matter to you for your
775:12 things that that matter to you for your business
775:13 business [Music]
775:16 [Music] okay let's take a look here at the
775:19 okay let's take a look here at the service Health dashboard and so the
775:21 service Health dashboard and so the service Health dashboard shows General
775:23 service Health dashboard shows General status of agus services and it's really
775:25 status of agus services and it's really simple the idea is that you can uh check
775:28 simple the idea is that you can uh check based on the geographic area so you'd
775:30 based on the geographic area so you'd say North America Europe Etc and what
775:33 say North America Europe Etc and what you'll see is an icon that says whether
775:35 you'll see is an icon that says whether the service is in in good standing and
775:37 the service is in in good standing and the details the service is operating
775:39 the details the service is operating normally Etc notice they also have an
775:41 normally Etc notice they also have an RSS feed the reason I'm talking about
775:43 RSS feed the reason I'm talking about service Health dashboards is because I
775:44 service Health dashboards is because I want to talk about personal health
775:45 want to talk about personal health dashboards and because they're both
775:47 dashboards and because they're both called Health dashboards it's confusing
775:49 called Health dashboards it's confusing so I wanted to tell you about this one
775:51 so I wanted to tell you about this one first so now we'll jump into the adabs
775:53 first so now we'll jump into the adabs personal health
776:00 dashboard so we saw the service Health dashboard now let's take a look at the
776:02 dashboard now let's take a look at the adus personal health dashboard so this
776:04 adus personal health dashboard so this is what it looks like and it provides
776:06 is what it looks like and it provides alerts and guidance for adus events that
776:08 alerts and guidance for adus events that might affect your environment all Abus
776:10 might affect your environment all Abus customers can access the personal health
776:12 customers can access the personal health dashboard the personal health dashboard
776:14 dashboard the personal health dashboard shows recent events to help you manage
776:16 shows recent events to help you manage active events and show proactive
776:18 active events and show proactive notifications so that you can plan for
776:20 notifications so that you can plan for scheduled activities you uh you can use
776:22 scheduled activities you uh you can use these alerts to get notified about
776:24 these alerts to get notified about changes that can affect your aess
776:25 changes that can affect your aess resources and then follow the guidance
776:27 resources and then follow the guidance to diagnose and resolve the issue so
776:30 to diagnose and resolve the issue so this is very similar to the service
776:32 this is very similar to the service Health dashboard but it's personalized
776:34 Health dashboard but it's personalized for you um and it's uh you know I I
776:37 for you um and it's uh you know I I don't see crop up very often but if you
776:39 don't see crop up very often but if you had to create alerts or be reactive to
776:43 had to create alerts or be reactive to uh things that are happening within us
776:44 uh things that are happening within us this is where You' do it
776:46 this is where You' do it [Music]
776:49 [Music] okay so there's a team called adus trust
776:53 okay so there's a team called adus trust and safety that specifically deals with
776:54 and safety that specifically deals with abuses occurring on the adus platform
776:57 abuses occurring on the adus platform and so I'm going to just list of all the
776:58 and so I'm going to just list of all the cases where you'd want to be contacting
777:00 cases where you'd want to be contacting them as opposed to support so the first
777:02 them as opposed to support so the first is Spam so you're receiving unwanted
777:04 is Spam so you're receiving unwanted emails from an adus owned IP address or
777:06 emails from an adus owned IP address or adus resources are used to spam websites
777:08 adus resources are used to spam websites or forms Port scanning your log show
777:11 or forms Port scanning your log show that one or more adus owned IP addresses
777:13 that one or more adus owned IP addresses are sending packets to multiple ports on
777:15 are sending packets to multiple ports on your server uh you also believe uh this
777:17 your server uh you also believe uh this is an attempt to discover unsecured
777:19 is an attempt to discover unsecured ports uh dos attack so your logs show
777:22 ports uh dos attack so your logs show that one or more itus owned IP addresses
777:24 that one or more itus owned IP addresses are used to flood ports on your
777:25 are used to flood ports on your resources with packets you also believe
777:27 resources with packets you also believe this is an attempt to overwhelm or crash
777:29 this is an attempt to overwhelm or crash your server or the software running on
777:30 your server or the software running on your server intrusion attempts so your
777:33 your server intrusion attempts so your logs show that one or more ad of owned
777:34 logs show that one or more ad of owned IP addresses are used to attempt to log
777:36 IP addresses are used to attempt to log into your resources hosting prohibited
777:39 into your resources hosting prohibited content so you have evidence that Abus
777:41 content so you have evidence that Abus resources are used to host distribute
777:42 resources are used to host distribute prohibited content such as illegal
777:44 prohibited content such as illegal content or copyrighted content without
777:46 content or copyrighted content without the consent of the copyright holder
777:48 the consent of the copyright holder Distributing malware so you have
777:50 Distributing malware so you have evidence that abis resources are used to
777:51 evidence that abis resources are used to distribute software that was knowingly
777:53 distribute software that was knowingly created to compromise or cause harm to
777:56 created to compromise or cause harm to computers machines that it's installed
777:58 computers machines that it's installed on and so in any of these cases you're
778:00 on and so in any of these cases you're not going to Ed support you're going to
778:03 not going to Ed support you're going to open up an abuse ticket and so you got
778:04 open up an abuse ticket and so you got to contact abuse at amazon.com
778:08 to contact abuse at amazon.com or fill out the uh Amazon abuse uh form
778:13 or fill out the uh Amazon abuse uh form so and this is whether it's coming from
778:15 so and this is whether it's coming from uh an outside AOS account or even your
778:17 uh an outside AOS account or even your internally if you think that some
778:19 internally if you think that some someone has compromised your account and
778:20 someone has compromised your account and it's being used in any of these ways uh
778:22 it's being used in any of these ways uh this is what you're going to do
778:24 this is what you're going to do [Music]
778:28 [Music] okay hey this is Andrew Brown from exam
778:30 okay hey this is Andrew Brown from exam Pro and we're looking at AWS so uh we're
778:33 Pro and we're looking at AWS so uh we're saying that adus has the adus trust and
778:35 saying that adus has the adus trust and safety team and what you'll want to do
778:38 safety team and what you'll want to do is if you uh find that there's an issue
778:40 is if you uh find that there's an issue you're going to report it to this email
778:41 you're going to report it to this email at abuse Amazon.com or you're going to
778:44 at abuse Amazon.com or you're going to use this form which is the report Amazon
778:46 use this form which is the report Amazon a abuse so you'll go down here you'll
778:48 a abuse so you'll go down here you'll sign in you'll put your email in your
778:50 sign in you'll put your email in your first name last name or phone number um
778:52 first name last name or phone number um Source IP the the details uh uh in uh
778:56 Source IP the the details uh uh in uh here you can even select the type of
778:58 here you can even select the type of abuse so you say if it's this kind or
779:00 abuse so you say if it's this kind or that kind things like that it's very
779:02 that kind things like that it's very straightforward um and that's pretty
779:03 straightforward um and that's pretty much it okay
779:09 [Music] hey this is Andrew Brown from exam Pro
779:10 hey this is Andrew Brown from exam Pro and we are taking a look at the adus
779:12 and we are taking a look at the adus free tier and this allows you to use
779:14 free tier and this allows you to use adus at no cost um and when we say free
779:16 adus at no cost um and when we say free tier there there there's the idea of the
779:19 tier there there there's the idea of the first 12 months of sign up there's going
779:20 first 12 months of sign up there's going to be special offerings or it's free
779:23 to be special offerings or it's free usage up to a certain monthly Limit
779:25 usage up to a certain monthly Limit Forever um and then there's just
779:27 Forever um and then there's just services that are inherently free which
779:29 services that are inherently free which we have a total separate slide on but
779:30 we have a total separate slide on but let's talk about just the free tier
779:32 let's talk about just the free tier stuff and this is absolutely not the
779:34 stuff and this is absolutely not the full list um but uh it's a good idea
779:37 full list um but uh it's a good idea like it gives you a good um overview of
779:39 like it gives you a good um overview of stuff that is free so for ec2 which you
779:42 stuff that is free so for ec2 which you use a web server you get a T2 micro for
779:44 use a web server you get a T2 micro for 750 hours per month for one year and so
779:48 750 hours per month for one year and so there's about 730 hours um in a month
779:51 there's about 730 hours um in a month and so that means you could have a
779:53 and so that means you could have a server
779:54 server running uh the entire month for free uh
779:58 running uh the entire month for free uh and an additional server for a bit as
780:00 and an additional server for a bit as well so for RDS which is a relational
780:03 well so for RDS which is a relational database service for either my schol or
780:05 database service for either my schol or postgress we can do it T2 DB micro for
780:08 postgress we can do it T2 DB micro for 750 hours for free so there we get our
780:11 750 hours for free so there we get our free database and you would be surprised
780:13 free database and you would be surprised how far you can get with a uh a T2 DB
780:16 how far you can get with a uh a T2 DB micro um you know even for a mediumsized
780:19 micro um you know even for a mediumsized startup you can run it on uh a T2 DB
780:21 startup you can run it on uh a T2 DB micro with no problems then you have
780:23 micro with no problems then you have your lassic load balancer you get 750
780:25 your lassic load balancer you get 750 hours per month for one year um so that
780:28 hours per month for one year um so that is a really good thing uh load balancers
780:30 is a really good thing uh load balancers usually cost $150 a month so that's
780:31 usually cost $150 a month so that's great actually all these pretty much
780:33 great actually all these pretty much cost $15 a month so that's about um 1530
780:37 cost $15 a month so that's about um 1530 $45
780:38 $45 month over month for a year that's uh
780:40 month over month for a year that's uh free then you have Amazon cloudfront
780:42 free then you have Amazon cloudfront this is where you'd have your homepage
780:44 this is where you'd have your homepage caching your videos things like that so
780:45 caching your videos things like that so you get 50 gigabyt data transfer out for
780:48 you get 50 gigabyt data transfer out for the total year then there's Amazon
780:49 the total year then there's Amazon connect you get your total free number
780:51 connect you get your total free number there 90 minutes of a call time per
780:52 there 90 minutes of a call time per month for one month or for one year
780:54 month for one month or for one year sorry Amazon elasticache so you could
780:57 sorry Amazon elasticache so you could launch a redis or elasticache server you
781:00 launch a redis or elasticache server you get 70 hours on a Cash3 micro for a year
781:04 get 70 hours on a Cash3 micro for a year um elastic search service so this full
781:06 um elastic search service so this full Tech search so again 7 50 hours per
781:08 Tech search so again 7 50 hours per month for one year pinpoint campaign
781:10 month for one year pinpoint campaign marketing email so you can send out
781:12 marketing email so you can send out 5,000 targeted users per month for one
781:14 5,000 targeted users per month for one year sces so um simple email uh service
781:18 year sces so um simple email uh service so this is for um transactional emails
781:21 so this is for um transactional emails um so that you send up from your web app
781:22 um so that you send up from your web app so 62,000 emails per month forever it
781:25 so 62,000 emails per month forever it code pipeline so one pipeline free it
781:28 code pipeline so one pipeline free it code build so uh this is for building
781:30 code build so uh this is for building out uh projects or things like that so
781:33 out uh projects or things like that so 100 build minutes per month forever it
781:36 100 build minutes per month forever it was Lambda service compute 1 Mill ion
781:38 was Lambda service compute 1 Mill ion free requests per month 3.2 million uh
781:41 free requests per month 3.2 million uh million seconds of compute time per
781:42 million seconds of compute time per month for free uh and you know I like to
781:45 month for free uh and you know I like to highlight these ones because for
781:46 highlight these ones because for traditional architecture you're always
781:48 traditional architecture you're always going to have a web server a database a
781:50 going to have a web server a database a load balancer um and you might even have
781:52 load balancer um and you might even have cloudfront in there as well but uh yeah
781:55 cloudfront in there as well but uh yeah again there's a huge list and this does
781:57 again there's a huge list and this does not even tap the surface of what's free
781:59 not even tap the surface of what's free on
782:00 on [Music]
782:03 [Music] AWS hey this is Andrew Brown from exam
782:05 AWS hey this is Andrew Brown from exam Pro and we are taking a look at a
782:07 Pro and we are taking a look at a promotional credits and these are the
782:09 promotional credits and these are the equivalent to USD dollars on adus
782:11 equivalent to USD dollars on adus platform ad credits can be earned
782:12 platform ad credits can be earned several ways this could be joining adus
782:15 several ways this could be joining adus activate startup program winning a
782:16 activate startup program winning a hackathon participating surveys and any
782:19 hackathon participating surveys and any other reason that Adis wants to give
782:20 other reason that Adis wants to give credits out uh once you uh have um a
782:24 credits out uh once you uh have um a promotional code you click the redeem
782:25 promotional code you click the redeem credit button in the billing console you
782:27 credit button in the billing console you enter it in and then your credits will
782:29 enter it in and then your credits will be shown there you can monitor them via
782:31 be shown there you can monitor them via adus budgets or uh via cost Explorer and
782:34 adus budgets or uh via cost Explorer and probably even building alarms it credits
782:36 probably even building alarms it credits generally have an expired dat tax maum
782:38 generally have an expired dat tax maum could be a few months to a year itus
782:40 could be a few months to a year itus credits can be used for most services
782:42 credits can be used for most services but there are exceptions where itus
782:43 but there are exceptions where itus credits cannot be used like purchasing a
782:45 credits cannot be used like purchasing a domain via row 53 because uh that domain
782:47 domain via row 53 because uh that domain costs money outside of ad's cost like
782:50 costs money outside of ad's cost like for their infrastructure and virtual
782:52 for their infrastructure and virtual stuff and so for things like that uh you
782:54 stuff and so for things like that uh you know they're not going to be you're not
782:56 know they're not going to be you're not going to be able to use credits for that
782:57 going to be able to use credits for that [Music]
783:01 [Music] okay the adabs partner Network also know
783:04 okay the adabs partner Network also know as APN is a global partner program for
783:06 as APN is a global partner program for ads so joining the APN will open your
783:09 ads so joining the APN will open your organization up to business
783:10 organization up to business opportunities and allow exclusive
783:12 opportunities and allow exclusive training and marketing events so when
783:14 training and marketing events so when joining the APN you can either be a
783:16 joining the APN you can either be a Consulting partner so you help companies
783:18 Consulting partner so you help companies utilize adabs or a technology partner
783:21 utilize adabs or a technology partner you build technology on top of adabs as
783:22 you build technology on top of adabs as a service offering and a partner belongs
783:25 a service offering and a partner belongs to a specific tier so it's either going
783:27 to a specific tier so it's either going to be select advance or Premiere when
783:29 to be select advance or Premiere when you sign up it's free to sign up but
783:31 you sign up it's free to sign up but you're not going to be able to do much
783:32 you're not going to be able to do much until you start uh committing to an
783:34 until you start uh committing to an annual fee so that's it's like a certain
783:37 annual fee so that's it's like a certain amount of money to uh be able to be part
783:39 amount of money to uh be able to be part of that tier and it starts in the
783:41 of that tier and it starts in the thousands okay so I think the first tier
783:42 thousands okay so I think the first tier is like something like a, or $2,000 and
783:45 is like something like a, or $2,000 and it gets uh more expensive as you go up
783:47 it gets uh more expensive as you go up as a tier and you also have to have
783:49 as a tier and you also have to have particular knowledge requirements so
783:50 particular knowledge requirements so this could be holding uh particular ad
783:53 this could be holding uh particular ad certifications at the at the
783:55 certifications at the at the foundational level at the associate
783:57 foundational level at the associate level things like that um or it could be
784:00 level things like that um or it could be adus APN exclusive certifications so
784:02 adus APN exclusive certifications so training that um is not a with
784:04 training that um is not a with certifications but there're
784:05 certifications but there're certifications that are only available
784:07 certifications that are only available to Partners saying like how do you it
784:09 to Partners saying like how do you it could be like something like how do you
784:11 could be like something like how do you uh talk to customers or communication
784:13 uh talk to customers or communication things like that you can get back
784:16 things like that you can get back promotional Abus credits so you know if
784:18 promotional Abus credits so you know if you say oh man I spent uh
784:20 you say oh man I spent uh $2,000 on just being able to uh get into
784:24 $2,000 on just being able to uh get into the APN at least the idea is that you
784:26 the APN at least the idea is that you can generally get back that uh that
784:28 can generally get back that uh that spend on AWS so it's like you committing
784:31 spend on AWS so it's like you committing if you give like $2,000 it's like you're
784:33 if you give like $2,000 it's like you're going to commit to keep using ads I'm
784:35 going to commit to keep using ads I'm not showing the annual fee commitment
784:37 not showing the annual fee commitment here and the promotional credits that
784:39 here and the promotional credits that you get back just because they've
784:40 you get back just because they've changed it a couple times on me and I
784:42 changed it a couple times on me and I just don't want this slide to go stale
784:44 just don't want this slide to go stale in case they happen to change it again
784:45 in case they happen to change it again so you'll have to look that up to find
784:47 so you'll have to look that up to find out what they actually are right now uh
784:49 out what they actually are right now uh you can have unique speaking
784:50 you can have unique speaking opportunities in the official adus
784:52 opportunities in the official adus marketing channels like the blogs or
784:54 marketing channels like the blogs or webinars being part of the APN is a
784:56 webinars being part of the APN is a requirement to be a sponsor with a
784:57 requirement to be a sponsor with a vendor booth at adus events so when you
784:59 vendor booth at adus events so when you when you go to reinvent or any ads um
785:02 when you go to reinvent or any ads um event all the vendors are part of the
785:04 event all the vendors are part of the APN all right so they've paid their fee
785:06 APN all right so they've paid their fee and now they paid an additional fee to
785:07 and now they paid an additional fee to get their Booth but um yeah the ab
785:10 get their Booth but um yeah the ab partner network uh is very good for uh
785:13 partner network uh is very good for uh uh helping you find new business and
785:15 uh helping you find new business and connecting with other people that are
785:16 connecting with other people that are building workloads onws but hopefully
785:18 building workloads onws but hopefully that gives you an idea of how that works
785:20 that gives you an idea of how that works [Music]
785:23 [Music] okay hey this is Andrew Brown from exam
785:25 okay hey this is Andrew Brown from exam Pro and we are taking a look at adus
785:27 Pro and we are taking a look at adus budgets so adus budgets gives you the
785:29 budgets so adus budgets gives you the ability to set up alerts if you exceed
785:31 ability to set up alerts if you exceed or approaching your defined budget
785:33 or approaching your defined budget create cost usage or reservation budgets
785:36 create cost usage or reservation budgets it can be tracked at the monthly
785:38 it can be tracked at the monthly quarterly or yearly levels with
785:40 quarterly or yearly levels with customizable start and end dates alert
785:42 customizable start and end dates alert support ec2 RDS red shift elastic cast
785:46 support ec2 RDS red shift elastic cast reservations uh and so the idea here is
785:48 reservations uh and so the idea here is you can choose your budget amount so it
785:50 you can choose your budget amount so it could be like $100 it'll even show you
785:52 could be like $100 it'll even show you what was the last amount if you're uh
785:54 what was the last amount if you're uh resetting the budget is something new
785:57 resetting the budget is something new you can choose based on a different kind
785:59 you can choose based on a different kind of unit so if you wanted to be based on
786:01 of unit so if you wanted to be based on running hours on ec2 you could totally
786:04 running hours on ec2 you could totally do that is budgets can be used to
786:06 do that is budgets can be used to forecast costs but is limited compared
786:07 forecast costs but is limited compared to cost Explorer or doing your own
786:09 to cost Explorer or doing your own analysis related with cost and usage
786:11 analysis related with cost and usage reports along with business intelligence
786:13 reports along with business intelligence tools budgets uh based on a fixed cost
786:16 tools budgets uh based on a fixed cost or or you can plan your cost uh upfront
786:19 or or you can plan your cost uh upfront based on your chosen level can be easily
786:21 based on your chosen level can be easily managed from the adus budgets dashboard
786:23 managed from the adus budgets dashboard via the ad budgets API get notified by
786:26 via the ad budgets API get notified by providing email or chatbot and threshold
786:29 providing email or chatbot and threshold uh how close to the current or
786:30 uh how close to the current or forecasted budget um so you'd see a list
786:33 forecasted budget um so you'd see a list of budgets here uh current versus
786:35 of budgets here uh current versus forecasted the amount used things like
786:37 forecasted the amount used things like that you can see your budget history you
786:39 that you can see your budget history you can download a CSV uh it'll show you the
786:41 can download a CSV uh it'll show you the cost history right in line there which I
786:43 cost history right in line there which I can't show you it it's hard to see there
786:45 can't show you it it's hard to see there you get the first two budgets are free
786:47 you get the first two budgets are free so there's no reason not to set a budget
786:48 so there's no reason not to set a budget when you first get into AWS and each
786:50 when you first get into AWS and each budget costs about uh 002 cents a day so
786:53 budget costs about uh 002 cents a day so it's like 60 cents um uh USD per month
786:56 it's like 60 cents um uh USD per month for a budget so they're very cheap to
786:58 for a budget so they're very cheap to use and you got a limit of 20,000
786:59 use and you got a limit of 20,000 budgets they're going to be in good
787:01 budgets they're going to be in good shape
787:02 shape [Music]
787:05 [Music] okay let's take a look here it was
787:07 okay let's take a look here it was budget reports which is use alongside
787:09 budget reports which is use alongside abos budgets to create and send daily
787:11 abos budgets to create and send daily weekly or monthly reports to monitor the
787:13 weekly or monthly reports to monitor the performance of your abos budgets that
787:15 performance of your abos budgets that will be email to specific emails so it's
787:17 will be email to specific emails so it's not too complicated here you say create
787:18 not too complicated here you say create the report budget choose your frequency
787:21 the report budget choose your frequency uh the emails you want um and ab budget
787:24 uh the emails you want um and ab budget report serves as a more convenient way
787:25 report serves as a more convenient way of staying on top of reports since
787:27 of staying on top of reports since they're delivered to your email instead
787:28 they're delivered to your email instead of logging into the abis Management
787:30 of logging into the abis Management console so it's just for those people
787:31 console so it's just for those people that just can't be bothered to log in
787:33 that just can't be bothered to log in okay
787:39 let's take a look here at adus cost and use as report so generate a detailed
787:41 use as report so generate a detailed spreadsheet enabling you to better
787:43 spreadsheet enabling you to better analyze and understand your adus cost so
787:44 analyze and understand your adus cost so this is kind of what it looks like and
787:46 this is kind of what it looks like and when you turn this feature on it will
787:48 when you turn this feature on it will place it into an S3 bucket you could use
787:50 place it into an S3 bucket you could use something like Athena to turn the report
787:52 something like Athena to turn the report into a queriable database since it's
787:53 into a queriable database since it's very easy to consume S3 csvs into Athena
787:57 very easy to consume S3 csvs into Athena you could use Quick site to visualize
787:58 you could use Quick site to visualize your building data as grass so quick
788:00 your building data as grass so quick site is a business intelligence tool
788:03 site is a business intelligence tool similar to Tableau or powerbi you can
788:06 similar to Tableau or powerbi you can also ingest this into red shift um but
788:10 also ingest this into red shift um but the idea here is when you turn it on you
788:11 the idea here is when you turn it on you can choose how granular you want the
788:13 can choose how granular you want the data to be hourly daily or monthly if
788:15 data to be hourly daily or monthly if you turn on daily you'll be able to even
788:17 you turn on daily you'll be able to even say spikes of uh of of of costs for uc2
788:21 say spikes of uh of of of costs for uc2 instances which is kind of nice the
788:23 instances which is kind of nice the report will contain cost allocation tags
788:26 report will contain cost allocation tags um which I think we have a separate
788:27 um which I think we have a separate slide on that type of tags and the data
788:30 slide on that type of tags and the data is stored in e as either a CSV it'll be
788:33 is stored in e as either a CSV it'll be zipped or it will be a parket format it
788:35 zipped or it will be a parket format it just depends on how you want it um uh
788:38 just depends on how you want it um uh for that
788:39 for that [Music]
788:42 [Music] okay let's talk about cost allocation
788:45 okay let's talk about cost allocation tags so these are optional metadata that
788:47 tags so these are optional metadata that can be attached to adus resources so
788:50 can be attached to adus resources so when you generate a a cost and uses
788:51 when you generate a a cost and uses report you can use that data to better
788:53 report you can use that data to better analyze your data so what you'd have to
788:56 analyze your data so what you'd have to do is make your way over to cost
788:57 do is make your way over to cost allocation tags and need to activate the
789:00 allocation tags and need to activate the tags you want to show up there are two
789:02 tags you want to show up there are two types of tags so we have user defin so
789:04 types of tags so we have user defin so whatever you've previously tagged will
789:06 whatever you've previously tagged will show up probably there
789:08 show up probably there you turn it on so if you made one with
789:09 you turn it on so if you made one with project you turn on project and there's
789:11 project you turn on project and there's a lot of Adis generated ones that you
789:13 a lot of Adis generated ones that you can turn on so there's a huge list there
789:16 can turn on so there's a huge list there but uh yeah that's particular with cost
789:19 but uh yeah that's particular with cost um usage and reports if it says like
789:21 um usage and reports if it says like cost allocation reports it's just that's
789:23 cost allocation reports it's just that's what cost and usage reports used to be
789:25 what cost and usage reports used to be called um and some of the documentation
789:27 called um and some of the documentation is a bit old there but yep there you
789:28 is a bit old there but yep there you [Music]
789:32 [Music] go so you can create your own alarms in
789:35 go so you can create your own alarms in cloudwatch alarms to monitor spend and
789:37 cloudwatch alarms to monitor spend and they are commonly called building alarms
789:39 they are commonly called building alarms uh and so it's just a regular alarm but
789:41 uh and so it's just a regular alarm but it's just focused on spend but in order
789:43 it's just focused on spend but in order to do this you have to turn on building
789:44 to do this you have to turn on building alerts first in order to uh be able to
789:47 alerts first in order to uh be able to use it uh and then you'll go to
789:49 use it uh and then you'll go to cloudwatch alarms and you can choose
789:51 cloudwatch alarms and you can choose billing as your metric and then you just
789:53 billing as your metric and then you just set your alarm however you'd want
789:55 set your alarm however you'd want bilding alarms are much more flexible
789:56 bilding alarms are much more flexible than abess budgets and are ideal for
789:58 than abess budgets and are ideal for more complex use cases for monitoring
790:00 more complex use cases for monitoring spend and usage in terms of alerting so
790:04 spend and usage in terms of alerting so you just have to decide what you want to
790:05 you just have to decide what you want to do uh before this was the only way to do
790:08 do uh before this was the only way to do it and so this is the way I'm used to
790:10 it and so this is the way I'm used to doing it and I still do it this way
790:11 doing it and I still do it this way today but you know both options are
790:13 today but you know both options are valid you just have to decide what is
790:15 valid you just have to decide what is your use case
790:16 your use case [Music]
790:19 [Music] okay let's take a look at abos Cost
790:21 okay let's take a look at abos Cost Explorer which lets you visualize
790:23 Explorer which lets you visualize understand and manage your adus cost and
790:25 understand and manage your adus cost and usage over time so uh here's a big
790:28 usage over time so uh here's a big graphic of Adis cost Explorer and you
790:30 graphic of Adis cost Explorer and you can specify time and range and
790:32 can specify time and range and aggregation and it has a lot of robust
790:34 aggregation and it has a lot of robust filtering um what's really nice is that
790:36 filtering um what's really nice is that they have a bunch of default reports for
790:38 they have a bunch of default reports for you so I'm just going to get my pen tool
790:40 you so I'm just going to get my pen tool just to show you where that button is
790:41 just to show you where that button is it's over uh here uh if you can see my
790:44 it's over uh here uh if you can see my marker there but but you know you can
790:46 marker there but but you know you can look at things like monthly cost by
790:48 look at things like monthly cost by service monthly cost by linked account
790:50 service monthly cost by linked account daily cost a Marketplace R utilization
790:53 daily cost a Marketplace R utilization so there's a bunch there you can also
790:55 so there's a bunch there you can also notice you can create your own report so
790:57 notice you can create your own report so if you do find something that you like
790:59 if you do find something that you like you can save it for later um you can you
791:01 you can save it for later um you can you could have access to forecasting here so
791:03 could have access to forecasting here so you get an idea of the future cost and
791:05 you get an idea of the future cost and whether it's been it's gone up or down
791:07 whether it's been it's gone up or down just to kind of zoom in on some of those
791:08 just to kind of zoom in on some of those filtration options you can choose um
791:11 filtration options you can choose um either monthly or daily level of of how
791:14 either monthly or daily level of of how you want the data to be grouped together
791:17 you want the data to be grouped together and you have a lot of filter control so
791:19 and you have a lot of filter control so if I want to just have ec2 instances for
791:21 if I want to just have ec2 instances for a particular region then I can get that
791:23 a particular region then I can get that filtered information over here and you
791:25 filtered information over here and you can see you have a breakdown of the
791:26 can see you have a breakdown of the different types so it's very detailed
791:29 different types so it's very detailed and class Explorer shows up in Us East
791:31 and class Explorer shows up in Us East one I'm pretty sure if you click on
791:32 one I'm pretty sure if you click on class Explorer it will just switch you
791:33 class Explorer it will just switch you over to that region but just understand
791:35 over to that region but just understand that's where it lives okay
791:41 [Music] hey this is Andrew Brown from exam Pro
791:43 hey this is Andrew Brown from exam Pro and in this video I want to show you ad
791:45 and in this video I want to show you ad cost Explorer so what we'll do is go to
791:47 cost Explorer so what we'll do is go to the top here and actually on the right
791:49 the top here and actually on the right hand side we're going to click on the
791:50 hand side we're going to click on the right and go to my billing dashboard and
791:53 right and go to my billing dashboard and from there on the left hand side we're
791:54 from there on the left hand side we're going to look for cost Explorer and then
791:57 going to look for cost Explorer and then click launch cost Explorer and this is
791:59 click launch cost Explorer and this is where we're going to get to the aist
792:00 where we're going to get to the aist cost management dashboard where this is
792:02 cost management dashboard where this is where we find savings plans reservations
792:04 where we find savings plans reservations things like that on the left hand side
792:05 things like that on the left hand side click on cost Explorer and you can get
792:07 click on cost Explorer and you can get this nice chart and so the idea is you
792:09 this nice chart and so the idea is you can change it from monthly to daily if
792:11 can change it from monthly to daily if you if you uh
792:13 you if you uh prefer okay you can change the scope
792:15 prefer okay you can change the scope here maybe we don't need six months we
792:17 here maybe we don't need six months we can just go
792:18 can just go back
792:20 back um three months here so there's less
792:28 data it is a bit delayed when I'm clicking here so it also could be just
792:30 clicking here so it also could be just because I'm doing the daily instead of
792:31 because I'm doing the daily instead of monthly so you just have to be a little
792:33 monthly so you just have to be a little bit patient when uh using this interface
792:37 bit patient when uh using this interface you can change it to stack line graph
792:39 you can change it to stack line graph you can kind of see the details there
792:40 you can kind of see the details there it's not always clear like what others
792:42 it's not always clear like what others is or things like that and so uh you can
792:45 is or things like that and so uh you can drill down and there's like ways of
792:47 drill down and there's like ways of applying filters and things like
792:50 applying filters and things like that I always forget how to uh do this
792:53 that I always forget how to uh do this it's because it's it's bringing
792:54 it's because it's it's bringing everything in so you have to hit clear
792:55 everything in so you have to hit clear all first I
792:58 all first I think and
793:04 um oh you have to click into it so like if you wanted to click into it and pick
793:05 if you wanted to click into it and pick a particular service we could go here
793:07 a particular service we could go here and type in
793:08 and type in ec2 and say ec2 instances and then apply
793:13 ec2 and say ec2 instances and then apply that filter so now we can just see
793:15 that filter so now we can just see exactly that cost or if we want to
793:18 exactly that cost or if we want to choose like maybe just
793:21 choose like maybe just RDS okay so you know that could be
793:25 RDS okay so you know that could be useful for you to see but yeah sometimes
793:27 useful for you to see but yeah sometimes it's not always clear and so what I
793:29 it's not always clear and so what I recommend is just go back to your
793:31 recommend is just go back to your billing dashboard and from there just go
793:33 billing dashboard and from there just go to bills okay bills is really really
793:36 to bills okay bills is really really useful because here it shows you exactly
793:39 useful because here it shows you exactly every single little service that you're
793:40 every single little service that you're being built for you can expand it and
793:42 being built for you can expand it and see exactly where if you have other
793:44 see exactly where if you have other accounts you can go into this side here
793:46 accounts you can go into this side here as well and find spend that way um but
793:48 as well and find spend that way um but cost Explorer is very useful just it's
793:51 cost Explorer is very useful just it's useful in a different way okay so there
793:53 useful in a different way okay so there you
793:54 you [Music]
793:57 [Music] go hey this is Andrew Brown from exam
793:59 go hey this is Andrew Brown from exam Pro and we are taking a look at the adus
794:01 Pro and we are taking a look at the adus pricing API so with adabs you can
794:03 pricing API so with adabs you can programmatically access pricing
794:05 programmatically access pricing information to get the latest price
794:07 information to get the latest price pricing offerings for services this
794:09 pricing offerings for services this makes sense because abos can change them
794:10 makes sense because abos can change them at any time and so uh you know you might
794:13 at any time and so uh you know you might want to know exactly what the current
794:14 want to know exactly what the current price is uh there are two versions of
794:16 price is uh there are two versions of this API so we have the career API known
794:18 this API so we have the career API known as the pricing service API and you
794:20 as the pricing service API and you access this via Json and then there's
794:23 access this via Json and then there's the batch API also known as the price uh
794:26 the batch API also known as the price uh list API via HTML what's odd is that um
794:29 list API via HTML what's odd is that um the batch API returns Json but you're
794:32 the batch API returns Json but you're accessing it via HTML so you can
794:34 accessing it via HTML so you can literally paste those links in your
794:35 literally paste those links in your browser for the API you're actually
794:37 browser for the API you're actually sending an an application Json request
794:41 sending an an application Json request so you'd have to use something like
794:42 so you'd have to use something like Postman or something uh you can also
794:44 Postman or something uh you can also subscribe to SNS uh notifications to get
794:47 subscribe to SNS uh notifications to get alerts when pricing for the services
794:48 alerts when pricing for the services change ads prices change periodically
794:51 change ads prices change periodically such as when ads Cuts prices when new
794:53 such as when ads Cuts prices when new instance types are launched or when new
794:54 instance types are launched or when new services are introduced so there you
794:57 services are introduced so there you [Music]
795:00 [Music] go hey this is Angie Brown from exam Pro
795:03 go hey this is Angie Brown from exam Pro and what I want to do here is show you
795:05 and what I want to do here is show you savings plans and so savings is going to
795:07 savings plans and so savings is going to be found under the it cost Explorer so
795:09 be found under the it cost Explorer so just type in cost Explorer at the top
795:11 just type in cost Explorer at the top here or if you want you can type in
795:12 here or if you want you can type in savings plan as well and once we are
795:14 savings plan as well and once we are here on the left hand side we are going
795:16 here on the left hand side we are going to have uh savings plans options so
795:18 to have uh savings plans options so we're going to go to the overview and
795:20 we're going to go to the overview and here it just describes um what our
795:22 here it just describes um what our savings plans if you want to read
795:24 savings plans if you want to read through it but down below if you have
795:25 through it but down below if you have already some spend happening it's going
795:27 already some spend happening it's going to make some suggestions and in this
795:29 to make some suggestions and in this particular account it's saying that I
795:30 particular account it's saying that I could save some money on compute before
795:33 could save some money on compute before we take a look here I'm just going to go
795:34 we take a look here I'm just going to go to the form here and see what we can see
795:36 to the form here and see what we can see so up here we can say uh commitment
795:39 so up here we can say uh commitment through 3 years by the way you have
795:40 through 3 years by the way you have compute savings which applies to ec2
795:42 compute savings which applies to ec2 fargate or Lambda then you have the ec2
795:45 fargate or Lambda then you have the ec2 specific one where uh we can select a
795:47 specific one where uh we can select a very particular type of instance family
795:49 very particular type of instance family and then there's the sage maker savings
795:51 and then there's the sage maker savings plans um but if we go here and we just
795:54 plans um but if we go here and we just enter in like
795:56 enter in like $2 all up front uh I don't really
796:00 $2 all up front uh I don't really understand it from here because it
796:01 understand it from here because it doesn't make it clear what the savings
796:02 doesn't make it clear what the savings are um but uh I what it does make it
796:05 are um but uh I what it does make it very easy is probably if we go over here
796:07 very easy is probably if we go over here and then click down on the compute so I
796:10 and then click down on the compute so I kind of feel like here it would autofill
796:11 kind of feel like here it would autofill it in for you and so here I filled it in
796:14 it in for you and so here I filled it in uh or sorry it's filled it in for me and
796:16 uh or sorry it's filled it in for me and so here it's saying with a one-year plan
796:18 so here it's saying with a one-year plan all Upfront for uh based on the past 30
796:21 all Upfront for uh based on the past 30 days that it's going to see that I'm
796:24 days that it's going to see that I'm going to see a monthly savings of
796:26 going to see a monthly savings of $25. 36 and then I can add it to the
796:28 $25. 36 and then I can add it to the cart that way and I kind of feel like
796:30 cart that way and I kind of feel like that is the easiest way to um figure
796:33 that is the easiest way to um figure that out where with um with how it was
796:37 that out where with um with how it was going to that form I just configured out
796:39 going to that form I just configured out myself what the savings were uh there
796:41 myself what the savings were uh there are some utilization reports and
796:43 are some utilization reports and coverage reports honestly I've never
796:45 coverage reports honestly I've never really looked at these before um but uh
796:48 really looked at these before um but uh I'm just curious like what we're looking
796:49 I'm just curious like what we're looking at monthly
796:51 at monthly daily the
796:53 daily the last let's go a few months here I've
796:55 last let's go a few months here I've been running stuff in this account for a
796:56 been running stuff in this account for a while so there should be
796:58 while so there should be something
797:01 something apply so nothing nothing of interest but
797:05 apply so nothing nothing of interest but um I mean I guess you have a lot of use
797:07 um I mean I guess you have a lot of use and coverage report and utilization
797:09 and coverage report and utilization report could be interesting but I
797:11 report could be interesting but I imagine it's maybe you have to be using
797:13 imagine it's maybe you have to be using you have to have a savings plan before
797:14 you have to have a savings plan before you can see this so that's probably the
797:16 you can see this so that's probably the reason why um but yeah hopefully that
797:18 reason why um but yeah hopefully that gives you a clear idea that you know you
797:19 gives you a clear idea that you know you can just go down to those
797:21 can just go down to those recommendations and and see exactly what
797:23 recommendations and and see exactly what you can save and you just add it to your
797:25 you can save and you just add it to your cart and then once you want to pay for
797:27 cart and then once you want to pay for it you just choose to submit that order
797:29 it you just choose to submit that order and you're all good to go all right so
797:31 and you're all good to go all right so that's savings plans
797:33 that's savings plans [Music]
797:38 [Music] let's take a look here at defense in
797:39 let's take a look here at defense in depth to understand the layers of
797:41 depth to understand the layers of security ads has to consider uh for
797:44 security ads has to consider uh for their data centers for their uh virtual
797:46 their data centers for their uh virtual workloads and things that you also have
797:47 workloads and things that you also have to consider when you are uh thinking
797:50 to consider when you are uh thinking about security for your Cloud resources
797:53 about security for your Cloud resources so in the most interior we have data so
797:56 so in the most interior we have data so this is access to business and customer
797:58 this is access to business and customer data and encryption to protect your data
798:00 data and encryption to protect your data then we have applications so
798:02 then we have applications so applications are secure and free of
798:04 applications are secure and free of security vulnerabilities then you have
798:06 security vulnerabilities then you have comput so access to Virtual machines
798:08 comput so access to Virtual machines ports on premise and Cloud you have the
798:10 ports on premise and Cloud you have the network layer so this limits
798:12 network layer so this limits communication between resources using
798:14 communication between resources using segmentation and access controls you
798:16 segmentation and access controls you have the perimeter itself so distributed
798:18 have the perimeter itself so distributed denial of service protection to filter
798:20 denial of service protection to filter large scale attacks before they can
798:22 large scale attacks before they can cause denial of service of users you
798:24 cause denial of service of users you could say that's part of the network
798:25 could say that's part of the network layer and that's when I say there are
798:27 layer and that's when I say there are variants on this but we're just
798:28 variants on this but we're just separating it out uh explicitly there we
798:31 separating it out uh explicitly there we have identity and access so controlling
798:33 have identity and access so controlling access to infrastructure and change
798:35 access to infrastructure and change control and then there's the physical
798:36 control and then there's the physical physical layer so limiting access to
798:39 physical layer so limiting access to data centers to only authorized
798:41 data centers to only authorized Personnel you'll notice I highlighted
798:43 Personnel you'll notice I highlighted identity and access in yellow it's
798:46 identity and access in yellow it's because that is considered the new
798:47 because that is considered the new primary um perimeter from the customer's
798:51 primary um perimeter from the customer's perspective of course adab best has
798:53 perspective of course adab best has concerned about the physical perimeter
798:54 concerned about the physical perimeter and things like that but as a as a
798:57 and things like that but as a as a customer that's what you're going to be
798:58 customer that's what you're going to be thinking about especially with the zero
798:59 thinking about especially with the zero trust model and when you see these
799:02 trust model and when you see these depths the idea is that in order to get
799:04 depths the idea is that in order to get here you have to pass through all this
799:06 here you have to pass through all this stuff so if this um if this outward one
799:09 stuff so if this um if this outward one is protected pretty well then you
799:10 is protected pretty well then you generally don't have to worry about the
799:12 generally don't have to worry about the Interiors but of course you should um
799:14 Interiors but of course you should um but yeah there you
799:15 but yeah there you [Music]
799:18 [Music] go let's take a look here at
799:21 go let's take a look here at confidentiality integrity and
799:23 confidentiality integrity and availability also known as the CIA Triad
799:27 availability also known as the CIA Triad is a model describing the foundation to
799:29 is a model describing the foundation to security principles and their tradeoff
799:31 security principles and their tradeoff relationships so here is our Triad so we
799:34 relationships so here is our Triad so we have confidentiality so confidentiality
799:36 have confidentiality so confidentiality is a component of privacy that
799:38 is a component of privacy that implements to protect our data from
799:39 implements to protect our data from unauthorized viewers in practice this
799:41 unauthorized viewers in practice this can be using cryptographic keys to
799:44 can be using cryptographic keys to encrypt our data and using keys to
799:46 encrypt our data and using keys to encrypt our keys so envelope encryption
799:48 encrypt our keys so envelope encryption then we have integrity so maintaining
799:50 then we have integrity so maintaining and ensuring the accuracy and
799:51 and ensuring the accuracy and completeness of data over its entire
799:53 completeness of data over its entire life cycle in practice utilizing asset
799:55 life cycle in practice utilizing asset compliant databases for valid
799:56 compliant databases for valid transactions utilizing tamper evident or
799:59 transactions utilizing tamper evident or tamper proof Hardware security modules
800:01 tamper proof Hardware security modules hsms availability so information needs
800:04 hsms availability so information needs to be available when needed in practice
800:06 to be available when needed in practice so high availability mitigating dos uh
800:09 so high availability mitigating dos uh decryption access so the CIA Triad was
800:12 decryption access so the CIA Triad was first mentioned in N publication 1977
800:15 first mentioned in N publication 1977 there have been efforts to expand and
800:17 there have been efforts to expand and modernize or suggest alternatives to the
800:18 modernize or suggest alternatives to the CIA triab so one was in 1998 for the six
800:22 CIA triab so one was in 1998 for the six Atomic elements of information uh or in
800:25 Atomic elements of information uh or in 2004 we have the N engineering
800:26 2004 we have the N engineering principles for uh for information
800:28 principles for uh for information technology security so it has 33
800:30 technology security so it has 33 security principles but this is still a
800:32 security principles but this is still a very popular um model for security uh
800:36 very popular um model for security uh and it's just to kind of tell you like
800:38 and it's just to kind of tell you like you know you don't always get everything
800:39 you know you don't always get everything you don't get all three of them
800:41 you don't get all three of them sometimes you have to trade off in your
800:42 sometimes you have to trade off in your scenario um you know and hopefully some
800:44 scenario um you know and hopefully some of the terminology here will uh resonate
800:46 of the terminology here will uh resonate as we go through more security
800:48 as we go through more security [Music]
800:51 [Music] content what I want to do here is just
800:53 content what I want to do here is just Define the term vulnerability so
800:55 Define the term vulnerability so vulnerability is a whole or weakness in
800:57 vulnerability is a whole or weakness in an application which can be designed a
800:59 an application which can be designed a design flaw or implementation bug that
801:01 design flaw or implementation bug that allows an attacker to cause harm to
801:03 allows an attacker to cause harm to stakeholders or applications and uh
801:06 stakeholders or applications and uh there's a lot of great definitions of
801:08 there's a lot of great definitions of vulnerabilities but OAS has a ton of
801:10 vulnerabilities but OAS has a ton of them and we talked about OAS when we
801:12 them and we talked about OAS when we talk about Abus Waf uh but it's an
801:14 talk about Abus Waf uh but it's an organization that creates security
801:16 organization that creates security projects that help you know what you
801:18 projects that help you know what you should protect uh or gives you a working
801:20 should protect uh or gives you a working examples so that you can understand how
801:22 examples so that you can understand how to get better at security and so they
801:24 to get better at security and so they have a lot of ones here but maybe you'll
801:27 have a lot of ones here but maybe you'll might notice some here like using a
801:28 might notice some here like using a broken or risky cryptographic algorithm
801:31 broken or risky cryptographic algorithm maybe there's a memory leak least
801:33 maybe there's a memory leak least privilege violation so that's um uh
801:36 privilege violation so that's um uh lease privilege is something that is a
801:38 lease privilege is something that is a thing that you're always worried about
801:39 thing that you're always worried about insecurity improper data validation
801:41 insecurity improper data validation buffer overflows so you know just to
801:43 buffer overflows so you know just to kind of set the tone of what a
801:45 kind of set the tone of what a vulnerability is and things you should
801:47 vulnerability is and things you should be thinking about
801:48 be thinking about [Music]
801:52 [Music] okay let's understand what encryption is
801:54 okay let's understand what encryption is but before we do we need to understand
801:56 but before we do we need to understand what is cryptography so this is the
801:58 what is cryptography so this is the practice and study of techniques for
801:59 practice and study of techniques for secure communication in the presence of
802:01 secure communication in the presence of third parties called adversaries and
802:03 third parties called adversaries and encryption is the process of encoding or
802:05 encryption is the process of encoding or scrambling information using a key and a
802:08 scrambling information using a key and a cipher to store sensitive data in an
802:10 cipher to store sensitive data in an unintelligible format as a means of
802:12 unintelligible format as a means of protection an encryption takes in plain
802:15 protection an encryption takes in plain text and produces produces a cipher text
802:18 text and produces produces a cipher text so here's an example of a very old um
802:20 so here's an example of a very old um encryption machine this is the Enigma
802:23 encryption machine this is the Enigma machine used during World War II and it
802:25 machine used during World War II and it has a different key for each day that it
802:27 has a different key for each day that it was used to set the position of the
802:28 was used to set the position of the rotors and it relied on simple Cipher
802:32 rotors and it relied on simple Cipher substitution and so you might be asking
802:34 substitution and so you might be asking what is a cipher and that's what we're
802:35 what is a cipher and that's what we're going to look at next
802:36 going to look at next [Music]
802:41 [Music] so what is a cipher it is an algorithm
802:43 so what is a cipher it is an algorithm that performs encryption or decryption
802:45 that performs encryption or decryption so Cipher is synomous with code uh and
802:48 so Cipher is synomous with code uh and the idea is that you use the code to
802:50 the idea is that you use the code to either unlock or or lock up the
802:53 either unlock or or lock up the information that you have so what is a
802:55 information that you have so what is a cipher text a cipher text is the result
802:57 cipher text a cipher text is the result of encryption performed on Plain text
803:00 of encryption performed on Plain text via an algorithm so you lock that up you
803:03 via an algorithm so you lock that up you scramble it it doesn't make sense and
803:04 scramble it it doesn't make sense and you need that code to unlock ET to get
803:07 you need that code to unlock ET to get the information so a good practical
803:09 the information so a good practical example back in the day was a code book
803:11 example back in the day was a code book and this was the type of document used
803:13 and this was the type of document used for Gathering and storing cryptographic
803:15 for Gathering and storing cryptographic codes or ciphers so the idea is if we
803:18 codes or ciphers so the idea is if we zoomed up on here notice where we have
803:20 zoomed up on here notice where we have cannot so uh and it would be0 0 and then
803:25 cannot so uh and it would be0 0 and then there would be give them Authority so
803:26 there would be give them Authority so the idea is 0 0 or if you had the word
803:31 the idea is 0 0 or if you had the word cannot it would translate to 0 and then
803:33 cannot it would translate to 0 and then you use 0 to match that up to say what
803:35 you use 0 to match that up to say what does that mean and so that is kind of a
803:37 does that mean and so that is kind of a very practical example of ciphers in
803:40 very practical example of ciphers in [Music]
803:43 [Music] action so we just took a look at
803:45 action so we just took a look at encryption but what are cryptographic
803:48 encryption but what are cryptographic keys so a c a cryptographic key an easy
803:51 keys so a c a cryptographic key an easy way to think of it is a variable used in
803:54 way to think of it is a variable used in conjunction with an encryption algorithm
803:56 conjunction with an encryption algorithm in order to encrypt or decrypt data and
804:00 in order to encrypt or decrypt data and there are different kinds of um ones we
804:03 there are different kinds of um ones we have so we have symmetric encryption so
804:05 have so we have symmetric encryption so this is where we have the same key that
804:07 this is where we have the same key that is used for encoding and decoding uh and
804:10 is used for encoding and decoding uh and a very popular one and the one you'll
804:12 a very popular one and the one you'll see on AWS is called Advanced encryption
804:14 see on AWS is called Advanced encryption standard AES so just take a look at that
804:17 standard AES so just take a look at that graphic very closely so we have one key
804:20 graphic very closely so we have one key and it is used to encrypt so it produces
804:23 and it is used to encrypt so it produces the cipher and then or Cipher text we
804:26 the cipher and then or Cipher text we should say and then it will uh decrypt
804:29 should say and then it will uh decrypt and we will get our plain text so one
804:30 and we will get our plain text so one single key then we have asymmetric
804:33 single key then we have asymmetric encryption so two keys are used one to
804:36 encryption so two keys are used one to encode and one to decode and a very
804:39 encode and one to decode and a very popular one here is RSA if you're
804:41 popular one here is RSA if you're wondering what those uh those words are
804:43 wondering what those uh those words are it's three people's names put together
804:45 it's three people's names put together who helped uh invent this type of
804:48 who helped uh invent this type of algorithm and so here we have uh one key
804:51 algorithm and so here we have uh one key for ecrypt and one key for decrypt and
804:54 for ecrypt and one key for decrypt and they're two different Keys all
804:56 they're two different Keys all [Music]
805:00 [Music] right all right let's look at the
805:02 right all right let's look at the concept of hashing and salting so for
805:04 concept of hashing and salting so for hashing we have a hashing function and
805:06 hashing we have a hashing function and this accepts arbitrary size values and
805:08 this accepts arbitrary size values and Maps it to a fixed size data structure
805:10 Maps it to a fixed size data structure hashing can reduce the size of a store
805:12 hashing can reduce the size of a store value and hashing is a one-way process
805:14 value and hashing is a one-way process and is deterministic so a deterministic
805:17 and is deterministic so a deterministic function always returns the same output
805:19 function always returns the same output output for the same input so if we have
805:21 output for the same input so if we have something like John Smith and we pass it
805:23 something like John Smith and we pass it to the hash function it's going to
805:25 to the hash function it's going to create something that is not human
805:26 create something that is not human readable but it'll say something like 02
805:28 readable but it'll say something like 02 Fae X XY whatever um and it will always
805:32 Fae X XY whatever um and it will always produce the same thing if the same key
805:34 produce the same thing if the same key or you know value is being input there
805:37 or you know value is being input there so the reason we use hashing functions
805:39 so the reason we use hashing functions or hashing General is to Hash passwords
805:41 or hashing General is to Hash passwords so hash functions are used to store
805:43 so hash functions are used to store passwords in a database so that the
805:44 passwords in a database so that the password does not reside in a plain text
805:46 password does not reside in a plain text format so you've heard about all these
805:48 format so you've heard about all these data reaches where they've stored the
805:50 data reaches where they've stored the password in plain text this is the thing
805:52 password in plain text this is the thing that helps us avoid that issue um and
805:55 that helps us avoid that issue um and the thing again is it because it's one
805:56 the thing again is it because it's one way you can't take that hash and unhash
805:59 way you can't take that hash and unhash it um well there are some conditions to
806:01 it um well there are some conditions to it but so to authenticate a user when a
806:03 it but so to authenticate a user when a user inputs their password it is then
806:05 user inputs their password it is then hashed so the one that was inputed at
806:07 hashed so the one that was inputed at the time of you know login and then that
806:09 the time of you know login and then that hash is compared to the stored hash in
806:11 hash is compared to the stored hash in the database and if they match the user
806:14 the database and if they match the user is successfully logged in so in that
806:16 is successfully logged in so in that case we never ever had to know what the
806:18 case we never ever had to know what the original password looked like uh popular
806:20 original password looked like uh popular hashing functions are md5 Shaw 256 or
806:23 hashing functions are md5 Shaw 256 or bcrypt uh if an attacker knows the
806:26 bcrypt uh if an attacker knows the function you are using uh and uh and
806:29 function you are using uh and uh and stole your database they could enumerate
806:30 stole your database they could enumerate a dictionary of passwords to determine
806:32 a dictionary of passwords to determine the password so they'll never see it but
806:34 the password so they'll never see it but they could just keep on going through
806:35 they could just keep on going through that so that's why we salt our passwords
806:38 that so that's why we salt our passwords so a salt is a random string not known
806:40 so a salt is a random string not known to the attacker that the hash function
806:42 to the attacker that the hash function accepts to mitigate the deterministic
806:44 accepts to mitigate the deterministic nature of a hashing function so there
806:46 nature of a hashing function so there you
806:47 you [Music]
806:51 [Music] go let's take a look here at digital
806:53 go let's take a look here at digital signatures and signing so what is a
806:55 signatures and signing so what is a digital signature it is a mathematical
806:57 digital signature it is a mathematical scheme for verifying the authenticity of
806:59 scheme for verifying the authenticity of digital messages or documents and a
807:01 digital messages or documents and a digital signature gives us tamper
807:02 digital signature gives us tamper evidence so did someone mess or modify
807:04 evidence so did someone mess or modify the data is this data from uh someone we
807:07 the data is this data from uh someone we did not expect it to be is it from the
807:09 did not expect it to be is it from the actual sender and so we kind of have
807:11 actual sender and so we kind of have this diagram where we have a person who
807:12 this diagram where we have a person who sends or is going to send a message so
807:14 sends or is going to send a message so they sign it and then uh Bob verifies
807:18 they sign it and then uh Bob verifies that it was for the person who it's from
807:20 that it was for the person who it's from so there are three algorithms to a
807:21 so there are three algorithms to a digital signature the key generation so
807:24 digital signature the key generation so generates a public and private key um
807:27 generates a public and private key um then there is signing the process of
807:29 then there is signing the process of generating a digital signature with a
807:31 generating a digital signature with a private key and the inputed value so
807:33 private key and the inputed value so signing which is what is happening up
807:35 signing which is what is happening up here signing verification verifies the
807:37 here signing verification verifies the authenticity of the message with a
807:39 authenticity of the message with a public key so remember the private key
807:41 public key so remember the private key is used for signing and the public key
807:42 is used for signing and the public key is used for verifying SSH uses a public
807:46 is used for verifying SSH uses a public and private key to authorize remote
807:48 and private key to authorize remote access into a remote machine such as a
807:51 access into a remote machine such as a virtual machine it is common to use RSA
807:54 virtual machine it is common to use RSA and we saw that RSA is a type of
807:56 and we saw that RSA is a type of algorithm earlier and so SSH hyen keyen
807:59 algorithm earlier and so SSH hyen keyen is a well-known command to generate a
808:02 is a well-known command to generate a public and private key on Linux I know
808:04 public and private key on Linux I know this one off the top of my head I always
808:06 this one off the top of my head I always know to do this um and so what is code
808:08 know to do this um and so what is code signing so when you use a digital
808:10 signing so when you use a digital signature to ensure computer code has
808:12 signature to ensure computer code has not been tampered and so that's just a
808:15 not been tampered and so that's just a like subset of digital signatur so you
808:17 like subset of digital signatur so you can use this as a means to get into a
808:19 can use this as a means to get into a virtual machine or you can use signing
808:21 virtual machine or you can use signing as a means to make sure that the code
808:23 as a means to make sure that the code being committed to your repository is
808:25 being committed to your repository is who you expect it to be from so there
808:27 who you expect it to be from so there you
808:27 you [Music]
808:31 [Music] go let's talk about in transit versus at
808:34 go let's talk about in transit versus at rest encryption so encryption and
808:36 rest encryption so encryption and Transit this is data that is secure when
808:38 Transit this is data that is secure when moving between locations and the
808:40 moving between locations and the algorithms here are TLS and SSL then you
808:43 algorithms here are TLS and SSL then you have encryption at rest so this is data
808:45 have encryption at rest so this is data that is secure when residing on storage
808:47 that is secure when residing on storage or within a database so we're looking at
808:49 or within a database so we're looking at AES or RSA which we both covered
808:52 AES or RSA which we both covered previously uh these algorithms so ones
808:55 previously uh these algorithms so ones that we did not cover was TLS and SSL so
808:58 that we did not cover was TLS and SSL so we'll cover them now so TLS transport
809:00 we'll cover them now so TLS transport layer security is an encryption protocol
809:02 layer security is an encryption protocol for data Integrity between two or more
809:04 for data Integrity between two or more commun communicating computer
809:06 commun communicating computer application so 1.0 and 1.1 are no longer
809:10 application so 1.0 and 1.1 are no longer used but TLS 1.2 and 1.3 is the current
809:15 used but TLS 1.2 and 1.3 is the current best practice then we have SSL secure
809:17 best practice then we have SSL secure socket layers so an encrypted protocol
809:19 socket layers so an encrypted protocol for data Integrity between two or more
809:21 for data Integrity between two or more communicating uh computer application so
809:24 communicating uh computer application so 1.0 2.0 and 3.0 are deprecated um and
809:29 1.0 2.0 and 3.0 are deprecated um and honestly I always get these two mixed up
809:30 honestly I always get these two mixed up and I always fig fig uh uh get confused
809:34 and I always fig fig uh uh get confused which is being used but um you know
809:36 which is being used but um you know they're always changing on us but just
809:38 they're always changing on us but just understand generally what these concepts
809:39 understand generally what these concepts are and that you're familiar with the
809:40 are and that you're familiar with the terms
809:41 terms [Music]
809:45 [Music] okay hey this is Andrew Brown from exam
809:47 okay hey this is Andrew Brown from exam Pro and we are taking a look at common
809:49 Pro and we are taking a look at common compliance programs so these are a set
809:50 compliance programs so these are a set of internal policies and procedures for
809:52 of internal policies and procedures for a company to comply with laws rules and
809:55 a company to comply with laws rules and regulations or to uphold business
809:57 regulations or to uphold business reputation so here we have a bunch of
809:59 reputation so here we have a bunch of different compliance programs and so
810:01 different compliance programs and so some popular ones are like Hippa or um
810:05 some popular ones are like Hippa or um PCI CSS the question is should you know
810:07 PCI CSS the question is should you know these yes you should generally know the
810:09 these yes you should generally know the most popular ones because you're going
810:11 most popular ones because you're going to see them throughout your Cloud career
810:13 to see them throughout your Cloud career um and so just getting familiar now is a
810:15 um and so just getting familiar now is a good time uh so let's jump into it okay
810:18 good time uh so let's jump into it okay so the first one I want to introduce you
810:19 so the first one I want to introduce you to is for I ISO and they have a bunch of
810:22 to is for I ISO and they have a bunch of different ones so ISO is the
810:24 different ones so ISO is the international organization of
810:25 international organization of standardization and there other one
810:27 standardization and there other one called IEC which is the international
810:30 called IEC which is the international electr technical commission One deals
810:32 electr technical commission One deals with uh you know like uh virtual things
810:34 with uh you know like uh virtual things the other one deals with Hardware things
810:36 the other one deals with Hardware things but they have a lot of overlapping um
810:38 but they have a lot of overlapping um compliance programs okay and so the most
810:41 compliance programs okay and so the most popular absolutely most popular one that
810:43 popular absolutely most popular one that I know of is the 27100 I know a lot of
810:46 I know of is the 27100 I know a lot of organizations that are going for their
810:48 organizations that are going for their 271 this is for control implementation
810:51 271 this is for control implementation guidance you have the
810:53 guidance you have the 2707 this is enhanced focus on cloud
810:55 2707 this is enhanced focus on cloud security the 27018 this is protection of
810:58 security the 27018 this is protection of personal data in the cloud then you have
811:01 personal data in the cloud then you have the 2771 this is Privacy Information
811:04 the 2771 this is Privacy Information Management System so framework this
811:06 Management System so framework this outlines controls and processes to
811:08 outlines controls and processes to manage data privacy and protect piis so
811:11 manage data privacy and protect piis so that's personally identifi information
811:13 that's personally identifi information then you have system and organization
811:15 then you have system and organization control sock and this is a very popular
811:17 control sock and this is a very popular thing that organizations go for
811:19 thing that organizations go for especially the sock two so sock one is
811:21 especially the sock two so sock one is 18 standards and report on the
811:23 18 standards and report on the effectiveness of internal controls at
811:24 effectiveness of internal controls at the service organization relevant to the
811:27 the service organization relevant to the client's internal control over financial
811:28 client's internal control over financial reporting we have sock 2 evaluates
811:31 reporting we have sock 2 evaluates internal controls policies and
811:32 internal controls policies and procedures that directly relate to the
811:34 procedures that directly relate to the security of the system at a organization
811:37 security of the system at a organization and sock three a report based on the
811:39 and sock three a report based on the trust uh service Services criteria that
811:41 trust uh service Services criteria that can be freely
811:42 can be freely distributed then we have PCI DSS a set
811:46 distributed then we have PCI DSS a set of security standards designed to ensure
811:48 of security standards designed to ensure that all companies that accept process
811:50 that all companies that accept process store and transmit credit card
811:52 store and transmit credit card information maintains in a secure
811:55 information maintains in a secure environment we have a federal
811:57 environment we have a federal information procedure standards or fips
811:59 information procedure standards or fips so 140 hyphen 2 This Is Us and Canadian
812:02 so 140 hyphen 2 This Is Us and Canadian government standard that specifies the
812:04 government standard that specifies the security requirements for cryptographic
812:06 security requirements for cryptographic modules that protect sensitive
812:08 modules that protect sensitive information then we have uh phipa this
812:11 information then we have uh phipa this is more relevant to me because I'm
812:13 is more relevant to me because I'm actually in onario in Canada but it's
812:15 actually in onario in Canada but it's also very uh wellknown um uh one out
812:18 also very uh wellknown um uh one out there outside of HIPPA so this regulates
812:20 there outside of HIPPA so this regulates patient protected health information
812:22 patient protected health information then you actually have Hippa this is the
812:24 then you actually have Hippa this is the US federal law that regulates patient
812:27 US federal law that regulates patient procedure health information then we
812:29 procedure health information then we have uh Cloud security Alliance so CSA
812:32 have uh Cloud security Alliance so CSA star certification independent
812:34 star certification independent third-party assessment
812:36 third-party assessment of a cloud provider security posture if
812:38 of a cloud provider security posture if you've never heard of CSA they have a
812:40 you've never heard of CSA they have a very well-known fundamental uh security
812:43 very well-known fundamental uh security certification called the cssk or ccsk I
812:46 certification called the cssk or ccsk I always get that mixed up then we have uh
812:48 always get that mixed up then we have uh fed ramp which we covered earlier in
812:50 fed ramp which we covered earlier in this course or in the future depending
812:51 this course or in the future depending on where we put it but um fed ramp
812:53 on where we put it but um fed ramp stands for federal risk and
812:55 stands for federal risk and authorization Management program it's a
812:56 authorization Management program it's a US Government standardization approach
812:58 US Government standardization approach to security authorizations for cloud
813:00 to security authorizations for cloud service offerings if you want to work
813:02 service offerings if you want to work with the US government or places that
813:04 with the US government or places that sell the US government need fed ramp
813:07 sell the US government need fed ramp that similar to criminal justice
813:08 that similar to criminal justice Information Services any US state or
813:11 Information Services any US state or local agency that wants to access the
813:12 local agency that wants to access the FBI's cgis database is required to
813:15 FBI's cgis database is required to adhere to the cgis security policy then
813:19 adhere to the cgis security policy then we have gdpr uh the general data
813:22 we have gdpr uh the general data protection regulation everyone knows
813:23 protection regulation everyone knows what this is in Europe maybe not so much
813:25 what this is in Europe maybe not so much in North America or other places a
813:28 in North America or other places a European Privacy Law imposes new rules
813:30 European Privacy Law imposes new rules on companies governments agencies
813:31 on companies governments agencies nonprofits and other organizations that
813:33 nonprofits and other organizations that offer goods and services to people
813:35 offer goods and services to people people in the European Union or that
813:38 people in the European Union or that collect analyze data try tied to eu's
813:41 collect analyze data try tied to eu's Residents there's a lot of compliance
813:42 Residents there's a lot of compliance programs out there one that's also very
813:44 programs out there one that's also very popular is fips but we'll get to that
813:45 popular is fips but we'll get to that when we talk about KMS um but yeah uh
813:48 when we talk about KMS um but yeah uh there you
813:49 there you [Music]
813:53 [Music] go so I just wanted to quickly show you
813:55 go so I just wanted to quickly show you here the Adis compliance programs page
813:58 here the Adis compliance programs page where they list out all the types of
813:59 where they list out all the types of compliance programs that ad us is uh
814:01 compliance programs that ad us is uh working with and that it has different
814:03 working with and that it has different types of certification and attestment
814:05 types of certification and attestment which we can use itus artifact or Amazon
814:08 which we can use itus artifact or Amazon artifact whichever prefix they decide to
814:10 artifact whichever prefix they decide to use for the name there um to uh ensure
814:13 use for the name there um to uh ensure that itus has in order to meet those
814:16 that itus has in order to meet those Regulatory Compliance you can see them
814:17 Regulatory Compliance you can see them all there and if you want to know a
814:20 all there and if you want to know a little bit more about any of these you
814:21 little bit more about any of these you just go ahead and click them and you can
814:23 just go ahead and click them and you can read and they have additional
814:24 read and they have additional information so you have a better idea
814:32 [Music] okay let's talk about pen testing so pen
814:35 okay let's talk about pen testing so pen testing is an authorized simulated Cyber
814:37 testing is an authorized simulated Cyber attack on a computer system performed to
814:39 attack on a computer system performed to evaluate the security of the system and
814:41 evaluate the security of the system and on AWS you are allowed to perform uh pen
814:44 on AWS you are allowed to perform uh pen testing but um there are some
814:46 testing but um there are some restrictions so permitted services or
814:48 restrictions so permitted services or ec2 instances Knack gateways elbs RDS so
814:52 ec2 instances Knack gateways elbs RDS so that's um relational database service
814:54 that's um relational database service cloudfront Aurora API gateways Lambda
814:57 cloudfront Aurora API gateways Lambda Lambda Edge functions light cell
814:59 Lambda Edge functions light cell resources elastic beanock environments
815:01 resources elastic beanock environments things you cannot do or you should not
815:03 things you cannot do or you should not be doing is DNS Zone walking via row 53
815:06 be doing is DNS Zone walking via row 53 hosted zones then there's dos simulation
815:09 hosted zones then there's dos simulation testing so you should not be doing do or
815:11 testing so you should not be doing do or Doss do doses or simulated Doss or
815:15 Doss do doses or simulated Doss or simulated dos is okay and that doesn't
815:18 simulated dos is okay and that doesn't mean that you can't necessarily do them
815:20 mean that you can't necessarily do them uh again there's a lot of exceptions to
815:21 uh again there's a lot of exceptions to the pen testing they have a whole page
815:23 the pen testing they have a whole page on this but generally you're not allowed
815:24 on this but generally you're not allowed to do dsing uh Port flooding protocol
815:28 to do dsing uh Port flooding protocol flooding request flooding can't do any
815:30 flooding request flooding can't do any of those things for other simulated
815:31 of those things for other simulated events you need to submit a request to
815:33 events you need to submit a request to ads a reply could take up to 7 days uh
815:36 ads a reply could take up to 7 days uh you know again there's a lot of uh
815:38 you know again there's a lot of uh little intricacies here so you'd have to
815:40 little intricacies here so you'd have to really read up on it if you're
815:41 really read up on it if you're interested in doing this
815:43 interested in doing this [Music]
815:46 [Music] okay hey this is Andrew Brown from exam
815:49 okay hey this is Andrew Brown from exam Pro and we are taking a look at pen
815:50 Pro and we are taking a look at pen testing on the adus platform so they
815:52 testing on the adus platform so they have this page here that tells you what
815:54 have this page here that tells you what you're allowed to do what you're not
815:55 you're allowed to do what you're not allowed to do um and there's some
815:57 allowed to do um and there's some additional things you can read into like
815:59 additional things you can read into like the stress test policy the Dos simulate
816:01 the stress test policy the Dos simulate simulation testing policy which I didn't
816:03 simulation testing policy which I didn't cover in detail uh in the course content
816:06 cover in detail uh in the course content but for whatever reason you're
816:07 but for whatever reason you're interested in it I just want you to be
816:09 interested in it I just want you to be aware of that kind of stuff if you want
816:11 aware of that kind of stuff if you want to simulate events there is a simulate
816:13 to simulate events there is a simulate event form that you have to fill out so
816:15 event form that you have to fill out so you open it up and you can kind of read
816:17 you open it up and you can kind of read about it and it gives it us a heads up
816:19 about it and it gives it us a heads up of what you're going to be doing stress
816:21 of what you're going to be doing stress test fishing malware analysis other so
816:24 test fishing malware analysis other so that way that if you are doing it you're
816:25 that way that if you are doing it you're not going to get in trouble they're
816:27 not going to get in trouble they're aware of what you are doing okay so
816:29 aware of what you are doing okay so that's pretty much
816:30 that's pretty much [Music]
816:33 [Music] it hey this is Brown from exam Pro and
816:36 it hey this is Brown from exam Pro and we are taking a look at itus artifact
816:38 we are taking a look at itus artifact which is a selfs serve portal for on
816:40 which is a selfs serve portal for on demand access to ibus compliance reports
816:42 demand access to ibus compliance reports so here's an example of a a bunch of
816:45 so here's an example of a a bunch of different compliance reports that adus
816:46 different compliance reports that adus could be meeting and the idea is that
816:48 could be meeting and the idea is that when you go to this portal within the
816:50 when you go to this portal within the adus management conso you'll have a huge
816:52 adus management conso you'll have a huge list of reports that you can go and
816:54 list of reports that you can go and access so here I'm searching for Canada
816:57 access so here I'm searching for Canada to get the government of Canada partner
816:59 to get the government of Canada partner package and then I go ahead and I
817:01 package and then I go ahead and I download that report as a PDF and then
817:03 download that report as a PDF and then within the PDF we can click a link to
817:05 within the PDF we can click a link to get the downloadable Excel and that's
817:07 get the downloadable Excel and that's pretty much what it is it's just if you
817:09 pretty much what it is it's just if you want to see that adus is being compliant
817:11 want to see that adus is being compliant for different
817:12 for different [Music]
817:15 [Music] programs hey this is Andrew Brown from
817:17 programs hey this is Andrew Brown from exam Pro and we're going to take a look
817:19 exam Pro and we're going to take a look at adus artifact so in the top here
817:21 at adus artifact so in the top here we're going to type in
817:23 we're going to type in artifact and not be confused with code
817:25 artifact and not be confused with code artifact which I guess is a new service
817:27 artifact which I guess is a new service there's just always releasing new
817:28 there's just always releasing new Services a and so here we have a video
817:32 Services a and so here we have a video and some things but uh it's not too hard
817:34 and some things but uh it's not too hard all we got to do is go to view reports
817:38 all we got to do is go to view reports and from here we have all the types of
817:40 and from here we have all the types of compliance programs or Regulatory
817:42 compliance programs or Regulatory Compliance programs that ad is uh
817:45 Compliance programs that ad is uh meeting and we can do is search for
817:47 meeting and we can do is search for something so we type in Canada and
817:49 something so we type in Canada and that's the government of Canada partner
817:51 that's the government of Canada partner package and I can go ahead and download
817:53 package and I can go ahead and download that report so when you download it you
817:55 that report so when you download it you really want to open this up
817:57 really want to open this up in um you're going to really want to
818:00 in um you're going to really want to open this up in um Adobe Acrobat because
818:04 open this up in um Adobe Acrobat because if you don't open it up in Adobe acrobat
818:05 if you don't open it up in Adobe acrobat you're not going to be able to access
818:07 you're not going to be able to access the
818:16 downloadblack reader and once you have it open and I'm just moving it over here
818:20 it open and I'm just moving it over here this is what you're going to see and um
818:22 this is what you're going to see and um it's going to say like hey um oops no I
818:25 it's going to say like hey um oops no I don't want to do that so please scroll
818:27 don't want to do that so please scroll to the next page to view the artifact
818:29 to the next page to view the artifact download and so I think that if we go
818:33 download and so I think that if we go here you know they say scroll to the
818:35 here you know they say scroll to the next page page but I'm pretty sure we
818:36 next page page but I'm pretty sure we can just go here on the left hand side
818:38 can just go here on the left hand side and this is what we're looking for that
818:39 and this is what we're looking for that Excel spreadsheet so we're going to save
818:42 Excel spreadsheet so we're going to save that
818:43 that attachment or actually we just going to
818:45 attachment or actually we just going to open it
818:46 open it up open this
818:48 up open this file okay and we'll give it a moment I
818:50 file okay and we'll give it a moment I have Excel
818:52 have Excel installed and there we
818:54 installed and there we go there it is okay so I know it's a
818:58 go there it is okay so I know it's a little bit odd way to get to those um uh
819:01 little bit odd way to get to those um uh certificates or reports but that's just
819:03 certificates or reports but that's just how it works um but yeah I mean that's
819:06 how it works um but yeah I mean that's the idea is like if you need to prove
819:07 the idea is like if you need to prove that ads is meeting whatever those
819:09 that ads is meeting whatever those standards are you can just type them in
819:11 standards are you can just type them in whatever it is I like maybe there like
819:12 whatever it is I like maybe there like fed ramp right whatever it is and
819:14 fed ramp right whatever it is and download those certificate attestment
819:16 download those certificate attestment whatever um and just double check that
819:19 whatever um and just double check that ads is Meeting those standards
819:21 ads is Meeting those standards [Music]
819:24 [Music] okay hey this is Andrew Brown from exam
819:27 okay hey this is Andrew Brown from exam Pro and we are taking a look at AIS
819:29 Pro and we are taking a look at AIS inspector but before we can answer what
819:31 inspector but before we can answer what it does let's talk about hardening so
819:32 it does let's talk about hardening so hardening is the act of eliminating as
819:34 hardening is the act of eliminating as many security risk risks as possible
819:36 many security risk risks as possible hardening is common for virtual machines
819:38 hardening is common for virtual machines where you run a collection of C Security
819:40 where you run a collection of C Security checks known as a security Benchmark so
819:43 checks known as a security Benchmark so adus inspector runs a security Benchmark
819:45 adus inspector runs a security Benchmark against specific ec2 instances and you
819:47 against specific ec2 instances and you can run a variety of security benchmarks
819:50 can run a variety of security benchmarks and you can perform Network and host
819:51 and you can perform Network and host assessments and so here's an example of
819:54 assessments and so here's an example of those two check boxes there which you'd
819:56 those two check boxes there which you'd say which assessments you want to do so
819:58 say which assessments you want to do so the idea is you have to install the edus
819:59 the idea is you have to install the edus agent on your ec2 instance you run an
820:01 agent on your ec2 instance you run an assessment for your assessment Target
820:03 assessment for your assessment Target you review your findings and remediate
820:05 you review your findings and remediate secur issues and one very popular
820:07 secur issues and one very popular Benchmark you can run is the CIS which
820:09 Benchmark you can run is the CIS which has 699 checks so if you don't know what
820:13 has 699 checks so if you don't know what CIS it stands for the center of Internet
820:15 CIS it stands for the center of Internet Security uh and so they are this
820:16 Security uh and so they are this organization that has a bunch of um uh
820:20 organization that has a bunch of um uh security controls or check marks uh that
820:22 security controls or check marks uh that are published that they suggest that you
820:24 are published that they suggest that you should check on your
820:25 should check on your [Music]
820:28 [Music] machine hey this is Andrew Brown from
820:30 machine hey this is Andrew Brown from exam Pro and we're looking at dos so
820:32 exam Pro and we're looking at dos so dods is a type of ious attack to disrupt
820:36 dods is a type of ious attack to disrupt normal traffic by flooding a website
820:38 normal traffic by flooding a website with a large amount of fake traffic so
820:40 with a large amount of fake traffic so the idea is we have an attacker and the
820:42 the idea is we have an attacker and the victim the victim is us and it could be
820:44 victim the victim is us and it could be our virtual machines our cloud services
820:47 our virtual machines our cloud services the idea is that it's some kind of uh
820:49 the idea is that it's some kind of uh resource which um can take in uh
820:52 resource which um can take in uh incoming requests over the Internet so
820:54 incoming requests over the Internet so the idea is the attacker is utilizing
820:56 the idea is the attacker is utilizing the internet and so they may control a
820:58 the internet and so they may control a bunch of uh virtual machines or servers
821:00 bunch of uh virtual machines or servers that're loaded up with malicious
821:02 that're loaded up with malicious software and the idea is that the
821:04 software and the idea is that the attacker is going to tell them all to
821:06 attacker is going to tell them all to send a flood of traffic over the
821:09 send a flood of traffic over the Internet uh at your uh Computing
821:11 Internet uh at your uh Computing resource and uh this is where your
821:14 resource and uh this is where your website is going to either start to
821:16 website is going to either start to stall or it's going to become
821:17 stall or it's going to become unavailable for your users and so the
821:20 unavailable for your users and so the idea here is that you know if you want
821:22 idea here is that you know if you want to protect against dos you need some
821:23 to protect against dos you need some kind of Dos protection traditionally
821:26 kind of Dos protection traditionally those used to be like third party
821:27 those used to be like third party services that you uh would have to pay
821:29 services that you uh would have to pay for and and it would sit in front of uh
821:32 for and and it would sit in front of uh your load balcer or your uh n server but
821:35 your load balcer or your uh n server but now the great thing with cloud service
821:37 now the great thing with cloud service providers is that generally their
821:38 providers is that generally their networks have built in DOS protection so
821:41 networks have built in DOS protection so the idea is just by having your compute
821:43 the idea is just by having your compute or your resources on AWS you're going to
821:45 or your resources on AWS you're going to get uh built-in protection for free via
821:48 get uh built-in protection for free via aw shield and we'll talk about that
821:51 aw shield and we'll talk about that [Music]
821:54 [Music] next hey this is Andrew Brown from exam
821:57 next hey this is Andrew Brown from exam Pro and we are taking a look at it
821:58 Pro and we are taking a look at it Shield which is a managed dos Protection
822:01 Shield which is a managed dos Protection Service that safeguards applications
822:04 Service that safeguards applications running on ad
822:05 running on ad so when you route your traffic through
822:07 so when you route your traffic through R3 or cloudfront you are using a shield
822:10 R3 or cloudfront you are using a shield standard so here's a diagram to kind of
822:12 standard so here's a diagram to kind of show you that it's not just those
822:14 show you that it's not just those services but these are the most common
822:16 services but these are the most common ones where you'll have a point of entry
822:17 ones where you'll have a point of entry into AWS so here we could also be
822:20 into AWS so here we could also be including elastic IP Aus Global
822:22 including elastic IP Aus Global accelerator but the idea is that when
822:24 accelerator but the idea is that when you uh go through these Services into
822:26 you uh go through these Services into the Aus Network it has Shield built in
822:29 the Aus Network it has Shield built in and so you're going to get that
822:30 and so you're going to get that protection before those uh before that
822:32 protection before those uh before that traffic reaches your uh cloud service
822:35 traffic reaches your uh cloud service and in this case we're showing ec2
822:37 and in this case we're showing ec2 instances so Shield protects against
822:39 instances so Shield protects against layers three four and seven attacks uh
822:42 layers three four and seven attacks uh layer 3 four and 7even is based off the
822:45 layer 3 four and 7even is based off the OSI model which is a um a fundamental
822:48 OSI model which is a um a fundamental networking concept so seven is for the
822:52 networking concept so seven is for the application layer four is the transport
822:55 application layer four is the transport Layer Three is the network layer um
822:58 Layer Three is the network layer um there are two different types of plans
823:00 there are two different types of plans for a shield we have Shield standard
823:02 for a shield we have Shield standard which is free and then Shield Advance
823:04 which is free and then Shield Advance which starts at 3,000 USD per year plus
823:07 which starts at 3,000 USD per year plus some additional uh costs based on usage
823:10 some additional uh costs based on usage of the size of the tack or what services
823:12 of the size of the tack or what services you're using how much traffic is moving
823:14 you're using how much traffic is moving in and out so protection against the
823:16 in and out so protection against the most common dos attacks is what Shield
823:18 most common dos attacks is what Shield standard does uh you have access to
823:21 standard does uh you have access to tools and best practices to build dos
823:23 tools and best practices to build dos Brazilian architecture it's
823:25 Brazilian architecture it's automatically available on all aable
823:27 automatically available on all aable services for additional protection
823:29 services for additional protection against larger and more sophisticated
823:30 against larger and more sophisticated attacks that's where Shield Advance
823:31 attacks that's where Shield Advance comes into play it's available for
823:34 comes into play it's available for specific a
823:35 specific a services so R 53 cloudfront elb Aus
823:40 services so R 53 cloudfront elb Aus Global accelerator elastic IP uh and
823:43 Global accelerator elastic IP uh and some notable features here is visibility
823:45 some notable features here is visibility reporting on layer 3 4 and 7even you're
823:48 reporting on layer 3 4 and 7even you're only going to get seven if you are using
823:50 only going to get seven if you are using awaf with it uh you have access to team
823:52 awaf with it uh you have access to team and support so these are DOs experts but
823:54 and support so these are DOs experts but you're only going to get it if you're
823:56 you're only going to get it if you're paying for business or Enterprise
823:57 paying for business or Enterprise support as you're paying for this as
823:59 support as you're paying for this as well uh you also get dos cost protection
824:02 well uh you also get dos cost protection just ensure that you know your bills
824:04 just ensure that you know your bills don't go crazy
824:05 don't go crazy uh and it comes with an SLA so you have
824:07 uh and it comes with an SLA so you have a guarantee that it's going to work both
824:09 a guarantee that it's going to work both plants integrate with itless web
824:11 plants integrate with itless web application uh firewall so Waf to give
824:14 application uh firewall so Waf to give you that layer 7even application
824:16 you that layer 7even application protection so understand that if you're
824:17 protection so understand that if you're not using Waf you're not going to be
824:19 not using Waf you're not going to be having that layer 7even production
824:21 having that layer 7even production [Music]
824:25 [Music] okay hey this is Andre Brown from exam
824:27 okay hey this is Andre Brown from exam Pro and we are looking at Amazon guard
824:29 Pro and we are looking at Amazon guard Duty so before we look at that we need
824:31 Duty so before we look at that we need to understand what is an IDs IPS so an
824:35 to understand what is an IDs IPS so an intrusion detection system and intrusion
824:37 intrusion detection system and intrusion protection system is used as a device or
824:41 protection system is used as a device or software application that monitors and
824:42 software application that monitors and network or systems for malicious
824:45 network or systems for malicious activity or policy violations so guard
824:48 activity or policy violations so guard duty is a threat detection service which
824:50 duty is a threat detection service which is IDs IPS that continuously monitors
824:53 is IDs IPS that continuously monitors for malicious and suspicious activity
824:56 for malicious and suspicious activity and unauthorized Behavior it uses
824:58 and unauthorized Behavior it uses machine learning to analyze the
824:59 machine learning to analyze the following itus logs your cloud trail
825:02 following itus logs your cloud trail logs your VPC flow logs your DN logs and
825:05 logs your VPC flow logs your DN logs and what it will do is report back to you
825:08 what it will do is report back to you and say hey um there's this issue here
825:11 and say hey um there's this issue here and this is actually one that's very
825:12 and this is actually one that's very easy to replicate it's just saying
825:14 easy to replicate it's just saying somebody is using the root credentials
825:17 somebody is using the root credentials and it's suggesting that you should not
825:18 and it's suggesting that you should not be doing that right because you're never
825:20 be doing that right because you're never supposed to be uh invoking API calls
825:22 supposed to be uh invoking API calls with the root credentials or you should
825:24 with the root credentials or you should be limiting that you'll might also
825:26 be limiting that you'll might also notice that if you want to investigate
825:27 notice that if you want to investigate you can kind of follow up that with uh
825:30 you can kind of follow up that with uh Amazon detective or adus detective
825:32 Amazon detective or adus detective whichever uh prefix they decided to put
825:35 whichever uh prefix they decided to put on that service it will alert you of
825:37 on that service it will alert you of findings which you can automate an
825:38 findings which you can automate an incident uh response via cloudwatch
825:40 incident uh response via cloudwatch events which this uh it's been renamed
825:43 events which this uh it's been renamed to event Bridge so you know or third
825:45 to event Bridge so you know or third party services so you can follow up a
825:47 party services so you can follow up a remediation action um and here is a
825:50 remediation action um and here is a graphic of Amazon guard Duty just a bit
825:53 graphic of Amazon guard Duty just a bit up closer so you can see all the
825:55 up closer so you can see all the findings and you can just see you have a
825:57 findings and you can just see you have a lot of detailed information there
825:59 lot of detailed information there [Music]
826:03 [Music] okay hey this is Brown from exam Pro and
826:06 okay hey this is Brown from exam Pro and we're going to take a look at guard Duty
826:07 we're going to take a look at guard Duty so guard duty is um an intrusion
826:09 so guard duty is um an intrusion protection and detection uh service and
826:12 protection and detection uh service and so what I've done is I've um I've done
826:14 so what I've done is I've um I've done some bad practices purposely so that I
826:16 some bad practices purposely so that I can show you um some information in
826:18 can show you um some information in there so I'm going to go over to guard
826:20 there so I'm going to go over to guard Duty okay and you do have to turn guard
826:22 Duty okay and you do have to turn guard Duty on and so once guard duty is on
826:24 Duty on and so once guard duty is on you're going to start getting reports
826:26 you're going to start getting reports coming in so notice here that we have
826:28 coming in so notice here that we have some anomalous Behavior 8 days ago and
826:31 some anomalous Behavior 8 days ago and so uh that's B he's uh my co-founder
826:34 so uh that's B he's uh my co-founder he's also named as well and so we can
826:36 he's also named as well and so we can kind of see some details here about
826:37 kind of see some details here about who's accessing what and what they were
826:39 who's accessing what and what they were doing he's not doing anything malicious
826:41 doing he's not doing anything malicious but we can have an idea where they're
826:43 but we can have an idea where they're from even shows generally where he is
826:45 from even shows generally where he is which he is near Thunder Bay and his his
826:47 which he is near Thunder Bay and his his provider would be
826:48 provider would be TB um and you can see that he is making
826:52 TB um and you can see that he is making uh API calls to describe account
826:54 uh API calls to describe account attributes and things like that then the
826:56 attributes and things like that then the other issue is the root account so
826:58 other issue is the root account so there's MFA I turned it off so that we
827:00 there's MFA I turned it off so that we can or maybe this just usage here I
827:01 can or maybe this just usage here I actually do have it turned on I suppose
827:03 actually do have it turned on I suppose here we see root credential usage and so
827:05 here we see root credential usage and so it's saying hey you used it 77 times
827:08 it's saying hey you used it 77 times because sometimes I go in and and use uh
827:11 because sometimes I go in and and use uh the Roo account for tutorials but saying
827:13 the Roo account for tutorials but saying you're using this way too much you got
827:15 you're using this way too much you got to stop doing that okay so that's
827:17 to stop doing that okay so that's something that is uh pretty interesting
827:19 something that is uh pretty interesting with guard Duty um and it's really cost
827:21 with guard Duty um and it's really cost effective and easy to turn on so you can
827:23 effective and easy to turn on so you can turn it on looks like they have a new
827:25 turn it on looks like they have a new thing for S3 um have not looked at that
827:27 thing for S3 um have not looked at that as of yet but that's kind of cool kind
827:29 as of yet but that's kind of cool kind of feels like that would overlap with uh
827:31 of feels like that would overlap with uh Amazon Macy but whatever and here we get
827:34 Amazon Macy but whatever and here we get a breakdown of cost so we see cloud
827:35 a breakdown of cost so we see cloud trail VPC FL logs DS logs and this is
827:38 trail VPC FL logs DS logs and this is where it would be ingesting data if you
827:40 where it would be ingesting data if you want to use that S3 protection you'd
827:42 want to use that S3 protection you'd have to probably be turning or creating
827:43 have to probably be turning or creating a custom Cloud watch trail that has data
827:46 a custom Cloud watch trail that has data events to consume that information um
827:49 events to consume that information um you know so you know hopefully that
827:51 you know so you know hopefully that gives you kind of an idea of things you
827:52 gives you kind of an idea of things you can do and you can also centralize guard
827:54 can do and you can also centralize guard Duty uh into one account so you can have
827:56 Duty uh into one account so you can have one thing that takes care of everything
827:58 one thing that takes care of everything and and move all the data across all
827:59 and and move all the data across all your accounts into a single place so
828:02 your accounts into a single place so that's kind of interesting and you can
828:03 that's kind of interesting and you can set up follow followups um and it's
828:06 set up follow followups um and it's possible that uh I not seeing this this
828:10 possible that uh I not seeing this this here but generally it would show
828:13 here but generally it would show you uh it would show you a way of like
828:16 you uh it would show you a way of like triggering into Cloud watch probably you
828:17 triggering into Cloud watch probably you could do it pragmatically this is
828:19 could do it pragmatically this is something interesting like the list
828:20 something interesting like the list management you can add trusted IPS or
828:22 management you can add trusted IPS or threat list so if there's people that
828:24 threat list so if there's people that you know are fine you can just Whit list
828:25 you know are fine you can just Whit list them or if there's people that you know
828:27 them or if there's people that you know that are bad make sure that they are
828:29 that are bad make sure that they are never allowed to get through so that's
828:30 never allowed to get through so that's pretty much it with guard Duty okay
828:38 let's take a look here at Amazon Macy so Macy is a fully managed service that
828:40 Macy is a fully managed service that continuously monitors S3 data access
828:43 continuously monitors S3 data access activity for anomalies and generates
828:44 activity for anomalies and generates detailed alerts when it detects risks of
828:47 detailed alerts when it detects risks of unauthorized access or inav virgent data
828:49 unauthorized access or inav virgent data leaks so Macy works by using machine
828:52 leaks so Macy works by using machine learning to analyze your cloud trail
828:53 learning to analyze your cloud trail logs and Macy has a variety of alerts so
828:56 logs and Macy has a variety of alerts so we have anomaly access config compliance
829:00 we have anomaly access config compliance credential loss data compliance file
829:02 credential loss data compliance file hosting identity numeration information
829:05 hosting identity numeration information loss um location anomaly open
829:07 loss um location anomaly open permissions privilege escalation
829:10 permissions privilege escalation ransomware service disruption suspicious
829:13 ransomware service disruption suspicious access and mayy will identify your most
829:16 access and mayy will identify your most at risk users which could lead to
829:18 at risk users which could lead to compromise so here's just one little
829:20 compromise so here's just one little kind of uh tidbit from the um app itself
829:24 kind of uh tidbit from the um app itself where you have the total users and they
829:26 where you have the total users and they categorize them into different uh risks
829:28 categorize them into different uh risks I can't remember which flag means what
829:30 I can't remember which flag means what in here uh Amazon Macy is an okay
829:32 in here uh Amazon Macy is an okay Service uh it's it's very important if
829:34 Service uh it's it's very important if you're storing things in
829:36 you're storing things in S3 but uh I don't I don't use it very
829:38 S3 but uh I don't I don't use it very often to be
829:40 often to be [Music]
829:43 [Music] honest hey this is Andie Brown from exam
829:46 honest hey this is Andie Brown from exam Pro and we are taking a look at adus
829:48 Pro and we are taking a look at adus virtual private Network also known as
829:50 virtual private Network also known as VPN so itus VPN lets you establish a
829:53 VPN so itus VPN lets you establish a secure and private tunnel from your
829:56 secure and private tunnel from your network or device to the idus global
829:58 network or device to the idus global Network it's very important to emphasize
830:00 Network it's very important to emphasize the word secure here uh because when
830:02 the word secure here uh because when you're using Direct Connect that will
830:04 you're using Direct Connect that will will establish a private connection but
830:06 will establish a private connection but it's not using any kind of protocol to
830:08 it's not using any kind of protocol to secure that data in transit whereas a
830:11 secure that data in transit whereas a VPN will be using a secure protocol
830:15 VPN will be using a secure protocol there are two options here we have adus
830:17 there are two options here we have adus site tosite VPN so securely connect on
830:19 site tosite VPN so securely connect on premise Network or branch office site to
830:21 premise Network or branch office site to VPC and adabs client VPN that securely
830:24 VPC and adabs client VPN that securely connect users to adabs or on premises
830:27 connect users to adabs or on premises networks one thing that we need to
830:29 networks one thing that we need to understand alongside VPN is IPC this
830:34 understand alongside VPN is IPC this stands for Internet Protocol security
830:36 stands for Internet Protocol security and is a secure network protocol Suite
830:38 and is a secure network protocol Suite that authenticates and encrypts the
830:39 that authenticates and encrypts the packets of data to provide secure
830:41 packets of data to provide secure encrypted communication between two
830:44 encrypted communication between two computers over an Internet Protocol
830:46 computers over an Internet Protocol Network and it is used in vpns and Abus
830:49 Network and it is used in vpns and Abus definitely uses it
830:51 definitely uses it [Music]
830:54 [Music] okay hey this is Andrew Brown from exam
830:57 okay hey this is Andrew Brown from exam Pro and we are taking a look at Abus web
830:59 Pro and we are taking a look at Abus web application firewall also known as WF
831:02 application firewall also known as WF which protects you uh protects your web
831:04 which protects you uh protects your web application from common web exploits so
831:07 application from common web exploits so the idea here is you write your own
831:09 the idea here is you write your own rules to allow or deny traffic based on
831:11 rules to allow or deny traffic based on the contents of an HTP requests you use
831:14 the contents of an HTP requests you use a rule set from a trusted adus security
831:17 a rule set from a trusted adus security partner in the adus Waf rule Marketplace
831:20 partner in the adus Waf rule Marketplace Waf can be attached to either cloudfront
831:22 Waf can be attached to either cloudfront or an application load balancer so here
831:25 or an application load balancer so here is that diagram the idea is you see
831:27 is that diagram the idea is you see cloudfront with the WAFF or ALB with the
831:30 cloudfront with the WAFF or ALB with the w and what it does is it can protect uh
831:33 w and what it does is it can protect uh web applications from attacks covered
831:35 web applications from attacks covered and the OAS 10 uh top 10 most dangerous
831:39 and the OAS 10 uh top 10 most dangerous attacks if you don't know OAS they're
831:41 attacks if you don't know OAS they're the open web application security
831:43 the open web application security project and they basically have all
831:45 project and they basically have all these uh security projects which are
831:48 these uh security projects which are things to say hey these are things that
831:50 things to say hey these are things that you should commonly protect against or
831:52 you should commonly protect against or they might have like example
831:53 they might have like example applications that uh serve as a means to
831:56 applications that uh serve as a means to learn security so when we look at the
831:58 learn security so when we look at the top 10 it's injection broken
832:00 top 10 it's injection broken authentication sensitive data exposure
832:03 authentication sensitive data exposure XML external entities so xxe broken
832:07 XML external entities so xxe broken Access Control security
832:09 Access Control security misconfigurations cross-site scripting
832:11 misconfigurations cross-site scripting so xss uh insecure deserialization using
832:15 so xss uh insecure deserialization using components with known vulnerabilities
832:17 components with known vulnerabilities and insufficient logging and monitoring
832:19 and insufficient logging and monitoring so there you
832:21 so there you [Music]
832:24 [Music] go hey this is Andrew Brown from exam
832:27 go hey this is Andrew Brown from exam Pro and we are going to take a quick
832:28 Pro and we are going to take a quick look at adus web application firewall
832:31 look at adus web application firewall also known as Waf and so um in this
832:33 also known as Waf and so um in this account I have to have a Waf running uh
832:36 account I have to have a Waf running uh so we don't have to create one uh we
832:37 so we don't have to create one uh we already have something we can take a
832:39 already have something we can take a look here so I'm going to go to Waf and
832:40 look here so I'm going to go to Waf and shield and then on the left hand side
832:43 shield and then on the left hand side you'll Noti this is a global Service but
832:44 you'll Noti this is a global Service but on the leand side we're going to be
832:46 on the leand side we're going to be looking for our web acl's and so the
832:49 looking for our web acl's and so the idea is that when you want a w you
832:50 idea is that when you want a w you create a web ACL and then within within
832:53 create a web ACL and then within within that web ACL you have uh the overview
832:57 that web ACL you have uh the overview and then you have you can kind of show
832:58 and then you have you can kind of show you kind of the traffic that's going on
833:00 you kind of the traffic that's going on here we can have our rules and so um
833:03 here we can have our rules and so um there's a lot of different kind of
833:04 there's a lot of different kind of manage rule groups that you can use so
833:06 manage rule groups that you can use so these are ones that are provided by AWS
833:09 these are ones that are provided by AWS so and a lot of these some of these can
833:11 so and a lot of these some of these can be paid some of these are free so you
833:12 be paid some of these are free so you see there's these free rule groups where
833:14 see there's these free rule groups where you're like hey I don't want any
833:17 you're like hey I don't want any anomymous IPS you checkbox that on you
833:19 anomymous IPS you checkbox that on you know or I want to protect against SQL
833:22 know or I want to protect against SQL injection now the interesting thing is
833:23 injection now the interesting thing is that abis has this capacity in it so um
833:26 that abis has this capacity in it so um you can't add all of these you can add a
833:29 you can't add all of these you can add a certain amount of capacity before you
833:31 certain amount of capacity before you have to um um uh pay for more or
833:34 have to um um uh pay for more or something like that it's just kind of a
833:35 something like that it's just kind of a way to um uh kind of cap the amount of
833:39 way to um uh kind of cap the amount of stuff that you can put in in terms of
833:41 stuff that you can put in in terms of rules um but there's a lot of other um
833:44 rules um but there's a lot of other um rule groups from third party services
833:46 rule groups from third party services like security companies that know what
833:48 like security companies that know what they're doing so if you like Fort Net's
833:51 they're doing so if you like Fort Net's OS top 10 you can uh subscribe to that
833:53 OS top 10 you can uh subscribe to that in the marketplace and be able to use it
833:56 in the marketplace and be able to use it but uh yeah so that's how you apply
833:59 but uh yeah so that's how you apply rules there's something called bot
834:01 rules there's something called bot control I've never used this before get
834:02 control I've never used this before get real-time visibility into bot AC on your
834:04 real-time visibility into bot AC on your resource and controllers what Bots allow
834:07 resource and controllers what Bots allow and block from your resources that
834:09 and block from your resources that sounds really cool I cannot stand bots
834:12 sounds really cool I cannot stand bots so I might turn that on myself or take a
834:14 so I might turn that on myself or take a look at the cost there and see what we
834:15 look at the cost there and see what we can find out but that's pretty much it
834:17 can find out but that's pretty much it with Waf um one thing I would say is
834:20 with Waf um one thing I would say is that you can block out specific IP
834:22 that you can block out specific IP addresses or whitel list specific IP
834:25 addresses or whitel list specific IP addresses and you might do that through
834:27 addresses and you might do that through rules I'm just going to see yeah like
834:29 rules I'm just going to see yeah like maybe the bypass here and so these IP
834:32 maybe the bypass here and so these IP addresses are some of our um uh Cloud
834:35 addresses are some of our um uh Cloud support Engineers where they're using
834:37 support Engineers where they're using our admid panel and um uh WF is being
834:40 our admid panel and um uh WF is being too aggressive in terms of protection
834:43 too aggressive in terms of protection and so sometimes you have to uh say hey
834:45 and so sometimes you have to uh say hey allow this IP address and let my um you
834:48 allow this IP address and let my um you know let my cloud support engineer be
834:51 know let my cloud support engineer be able to use the mid panel because
834:52 able to use the mid panel because they're not malicious okay so that's one
834:54 they're not malicious okay so that's one little exception there but that's pretty
834:55 little exception there but that's pretty much it okay
835:14 [Music] hey this is Andrew Brown from exam Pro
835:16 hey this is Andrew Brown from exam Pro and we are taking a look at Hardware
835:17 and we are taking a look at Hardware security modules also known as HSM and
835:20 security modules also known as HSM and it's a piece of Hardware designed to
835:21 it's a piece of Hardware designed to store encryption keys and it holds keys
835:24 store encryption keys and it holds keys in memory and never writes on the disk
835:26 in memory and never writes on the disk so the idea is that if the HSM was shut
835:28 so the idea is that if the HSM was shut down uh that key would be gone and that
835:30 down uh that key would be gone and that would be a guarantee of protection
835:32 would be a guarantee of protection because nobody could you know take the
835:34 because nobody could you know take the drive and steal it so here is an example
835:37 drive and steal it so here is an example of an HSM uh these are extremely
835:39 of an HSM uh these are extremely expensive so you definitely don't want
835:41 expensive so you definitely don't want to have to buy them yourselves uh they
835:43 to have to buy them yourselves uh they generally follow fips so fips is the
835:45 generally follow fips so fips is the federal information processing standard
835:48 federal information processing standard so it's a us and Canadian government
835:50 so it's a us and Canadian government standard that specifies the security
835:51 standard that specifies the security requirements for cryptographic modules
835:53 requirements for cryptographic modules that protect sensitive information fips
835:55 that protect sensitive information fips is something you want to definitely
835:57 is something you want to definitely remember um and there are two different
836:01 remember um and there are two different um uh protocols here there's actually a
836:03 um uh protocols here there's actually a bunch of different uh fips versions but
836:05 bunch of different uh fips versions but we have fips 142 level two and then fips
836:09 we have fips 142 level two and then fips 143 level 3 so let's talk about the
836:12 143 level 3 so let's talk about the difference here so hsms that are
836:14 difference here so hsms that are multi-tenant are going to be using fips
836:17 multi-tenant are going to be using fips 142 hyphen 2 level two compliant where
836:21 142 hyphen 2 level two compliant where you have multiple customers virtually
836:22 you have multiple customers virtually isolated on the
836:24 isolated on the HSM and then there are hsms that are
836:26 HSM and then there are hsms that are single tenant and so they're going to be
836:28 single tenant and so they're going to be utilizing fips 140 hyphen 2 level three
836:31 utilizing fips 140 hyphen 2 level three compliant so a single customer on a
836:33 compliant so a single customer on a dedicated
836:34 dedicated HSM and so the reason why we have these
836:37 HSM and so the reason why we have these two levels is that when you have
836:39 two levels is that when you have multiple tenants you can say oh right
836:42 multiple tenants you can say oh right this thing is uh has temper evidence so
836:44 this thing is uh has temper evidence so we can see that somebody was trying to
836:46 we can see that somebody was trying to break into it but there's no guarantee
836:48 break into it but there's no guarantee of uh T it being tamper proof where
836:52 of uh T it being tamper proof where level three is tamper proof there's also
836:55 level three is tamper proof there's also uh fips 140 hyphen 3 which is the new uh
836:58 uh fips 140 hyphen 3 which is the new uh the newer um standard but not all uh
837:02 the newer um standard but not all uh Cloud resources uh can meet that
837:03 Cloud resources uh can meet that standard just because of how they offer
837:05 standard just because of how they offer the service uh so again fips 142 is
837:09 the service uh so again fips 142 is really good but just understand that
837:10 really good but just understand that there are other ones out there and it's
837:12 there are other ones out there and it's very easy to get fips 1402 level three
837:15 very easy to get fips 1402 level three mixed up with fips 140 hyphen 3
837:18 mixed up with fips 140 hyphen 3 something that I always had um a hard
837:20 something that I always had um a hard time uh remembering the distinguishing
837:21 time uh remembering the distinguishing between those two so for multi-tenant
837:24 between those two so for multi-tenant this is where we're using ads Key
837:26 this is where we're using ads Key Management Service and for single tenant
837:28 Management Service and for single tenant we're using adus Cloud HSM and the only
837:31 we're using adus Cloud HSM and the only time you're really using Cloud HSM is if
837:32 time you're really using Cloud HSM is if you're a large Enterprise and you need
837:34 you're a large Enterprise and you need that Regulatory Compliance of getting
837:36 that Regulatory Compliance of getting fips 140 hi 2 level three
837:39 fips 140 hi 2 level three [Music]
837:43 [Music] okay hey this is Andrew Brown from exam
837:45 okay hey this is Andrew Brown from exam Pro and we are taking a look at Key
837:47 Pro and we are taking a look at Key Management Service also known as KMS and
837:49 Management Service also known as KMS and it is a manage service that makes it
837:51 it is a manage service that makes it easy for you to create and control the
837:53 easy for you to create and control the encryption Keys you use to encrypt your
837:55 encryption Keys you use to encrypt your data so KMS is a multi-tenant HSM so
837:58 data so KMS is a multi-tenant HSM so it's a Hardware security module and many
838:01 it's a Hardware security module and many adaa services are integrated to use KMS
838:03 adaa services are integrated to use KMS Toc your data with a simple checkbox and
838:06 Toc your data with a simple checkbox and K KMS uses envelope encryption so here's
838:09 K KMS uses envelope encryption so here's that example of a simple checkbox in
838:11 that example of a simple checkbox in this case it's for RDS and what you'll
838:14 this case it's for RDS and what you'll do is choose a master key A lot of times
838:16 do is choose a master key A lot of times ads will have a default for uh key for
838:18 ads will have a default for uh key for you that's managed by them that is free
838:20 you that's managed by them that is free to use which is really great uh so for
838:22 to use which is really great uh so for KMS it's using envelope encryption so
838:25 KMS it's using envelope encryption so when you encrypt your data your data is
838:27 when you encrypt your data your data is protected but you have to protect your
838:28 protected but you have to protect your encryption key when you encrypt your
838:30 encryption key when you encrypt your data key with a master key as an
838:32 data key with a master key as an additional layer of security so that's
838:34 additional layer of security so that's it works so just to make this really
838:36 it works so just to make this really clear I have my data I use this key to
838:39 clear I have my data I use this key to encrypt this data and I need to protect
838:41 encrypt this data and I need to protect this key so I use another key to encrypt
838:45 this key so I use another key to encrypt uh this key which forms an envelope and
838:48 uh this key which forms an envelope and then I store this uh master key in KMS
838:52 then I store this uh master key in KMS and this one's considered the data key
838:54 and this one's considered the data key all
838:55 all [Music]
838:59 [Music] right hey this is Andrew Brown from exam
839:01 right hey this is Andrew Brown from exam Pro and we're going to take a look at
839:03 Pro and we're going to take a look at Key Management service also known as KMS
839:05 Key Management service also known as KMS so type in KMS on the top here and we'll
839:08 so type in KMS on the top here and we'll pop over here and KMS is a way for you
839:10 pop over here and KMS is a way for you to create your own keys or you can use
839:13 to create your own keys or you can use adus manage keys so up here and not all
839:16 adus manage keys so up here and not all these appear right away but as you use
839:17 these appear right away but as you use Services um you will adus will generate
839:19 Services um you will adus will generate out manage keys for you and these are
839:22 out manage keys for you and these are free you can uh create your own Keys um
839:25 free you can uh create your own Keys um and these cost a dollar each so if I go
839:27 and these cost a dollar each so if I go ahead here and create a key I can choose
839:28 ahead here and create a key I can choose whether it's symmetric or asymmetric
839:29 whether it's symmetric or asymmetric which we definitely learned in the
839:31 which we definitely learned in the course which is nice for asymmetric you
839:32 course which is nice for asymmetric you can make it encrypt and decrypt
839:34 can make it encrypt and decrypt sign and verify and they're just kind of
839:36 sign and verify and they're just kind of narrowing down the type of key you would
839:38 narrowing down the type of key you would use um for this you know if I went to
839:40 use um for this you know if I went to symmetric I go here I'm just kind of
839:43 symmetric I go here I'm just kind of seeing if I can enter the uh actual
839:46 seeing if I can enter the uh actual material into the key here um so I'm
839:49 material into the key here um so I'm just going to keep clicking through here
839:50 just going to keep clicking through here U my custom key generally you don't
839:53 U my custom key generally you don't really need to do this but um you know
839:55 really need to do this but um you know if it's interesting you can set up
839:56 if it's interesting you can set up administrators to say who's allowed to
839:58 administrators to say who's allowed to administer the key and then you have
840:00 administer the key and then you have someone that um is allowed to use the
840:03 someone that um is allowed to use the key you usually want to keep those two
840:05 key you usually want to keep those two accounts separate you don't want to have
840:06 accounts separate you don't want to have the same person administrating and using
840:07 the same person administrating and using the key okay keep those two separate and
840:10 the key okay keep those two separate and so we would have a key policy so you can
840:12 so we would have a key policy so you can change this to say the rules that is
840:14 change this to say the rules that is allowed to use um and then we can go
840:17 allowed to use um and then we can go here and hit finish and so there we now
840:20 here and hit finish and so there we now have our own custom key and one thing we
840:25 have our own custom key and one thing we can
840:26 can do is it's possible to rotate out these
840:28 do is it's possible to rotate out these Keys when you need to be um but anyway
840:32 Keys when you need to be um but anyway when we want to use canas it's built to
840:34 when we want to use canas it's built to basically everything and we've seen it
840:36 basically everything and we've seen it multiple times throughout this course
840:37 multiple times throughout this course when we've gone over to ec2 we'll just
840:40 when we've gone over to ec2 we'll just go take a peek at a few different places
840:42 go take a peek at a few different places here so when we've gone to go launch an
840:44 here so when we've gone to go launch an ec2 instance and we go over to uh
840:47 ec2 instance and we go over to uh storage we say
840:49 storage we say select and review or next and we go over
840:53 select and review or next and we go over to storage notice that here this is
840:56 to storage notice that here this is using encryption right so I can choose
840:58 using encryption right so I can choose that or even my custom key if you're in
841:00 that or even my custom key if you're in Dynamo DB or anywhere else it's always
841:02 Dynamo DB or anywhere else it's always something like a checkbox and you choose
841:04 something like a checkbox and you choose your key so that's pretty much all there
841:05 your key so that's pretty much all there really is to KMS it's very easy to use
841:07 really is to KMS it's very easy to use and there you
841:08 and there you [Music]
841:11 [Music] go hey this is Andrew Brown from exam
841:14 go hey this is Andrew Brown from exam Pro and we are going to take a look here
841:15 Pro and we are going to take a look here at Cloud HSM it is a single tenant uh
841:19 at Cloud HSM it is a single tenant uh HSM as a service that automates Hardware
841:22 HSM as a service that automates Hardware provisioning software patching High
841:24 provisioning software patching High availability and backups so here's the
841:26 availability and backups so here's the idea is that you have your adus Cloud
841:28 idea is that you have your adus Cloud HSM you have your developers interacting
841:30 HSM you have your developers interacting with it your application interacting
841:32 with it your application interacting with it you have HSM client installed in
841:35 with it you have HSM client installed in your uh ec2 instance so that it can
841:37 your uh ec2 instance so that it can access uh the cloud HSM keys so adus
841:41 access uh the cloud HSM keys so adus Cloud HSM enables you to generate and
841:43 Cloud HSM enables you to generate and use your encryption keys on fips 140
841:45 use your encryption keys on fips 140 hyphen 2 level 3 validated Hardware it's
841:48 hyphen 2 level 3 validated Hardware it's built on open HSM industry standards to
841:50 built on open HSM industry standards to integrate with things like PK uh
841:54 integrate with things like PK uh cs1 Java cryptography uh extension so
841:58 cs1 Java cryptography uh extension so jce Microsoft crypto and G libraries you
842:02 jce Microsoft crypto and G libraries you can transfer your keys to other
842:04 can transfer your keys to other commercial commercial HSM Solutions to
842:06 commercial commercial HSM Solutions to make it easy for you to migrate keys on
842:08 make it easy for you to migrate keys on or off ads configure ads KMS to use adus
842:12 or off ads configure ads KMS to use adus cloud HSM uh cluster as a custom uh key
842:16 cloud HSM uh cluster as a custom uh key store rather than the default KMS key
842:18 store rather than the default KMS key store uh so Cloud HSM is way more
842:22 store uh so Cloud HSM is way more expensive than KMS KMS is like free or a
842:25 expensive than KMS KMS is like free or a dollar per key where Cloud HSM is a
842:27 dollar per key where Cloud HSM is a fixed cost per month because you are
842:30 fixed cost per month because you are getting a dedicated piece of Hardware um
842:33 getting a dedicated piece of Hardware um and there's not a lot of stuff around it
842:35 and there's not a lot of stuff around it so other than the ad KMS integration a
842:38 so other than the ad KMS integration a lot of times it can be really hard to
842:39 lot of times it can be really hard to use this as well so the only time you're
842:41 use this as well so the only time you're really going to be using Cloud HSM is if
842:43 really going to be using Cloud HSM is if you're an Enterprise and you need to
842:45 you're an Enterprise and you need to meet fips 140 hyphen 2 level three
842:48 meet fips 140 hyphen 2 level three compliancy
842:49 compliancy [Music]
842:52 [Music] okay hey this is Andrew Brown from exam
842:55 okay hey this is Andrew Brown from exam Pro and we are taking a look at know
842:57 Pro and we are taking a look at know your initialism so a lot of adus
843:00 your initialism so a lot of adus services and Concepts and Cloud
843:02 services and Concepts and Cloud Technologies use initial isms to just
843:04 Technologies use initial isms to just kind of shorten uh common things that we
843:07 kind of shorten uh common things that we need to use on a frequent basis and it's
843:09 need to use on a frequent basis and it's going to really help if you learn these
843:11 going to really help if you learn these because then what you can do is
843:13 because then what you can do is substitute them when you are uh seeing a
843:15 substitute them when you are uh seeing a service name or something particular and
843:18 service name or something particular and that's going to get you through content
843:20 that's going to get you through content a lot faster um and in the wild you're
843:23 a lot faster um and in the wild you're going to see these all over the place
843:24 going to see these all over the place because people aren't going to say the
843:25 because people aren't going to say the full name they're going to say the
843:27 full name they're going to say the initialism so let's go through them so
843:29 initialism so let's go through them so for IM it's identity and access
843:32 for IM it's identity and access management for S3 that's simp Le storage
843:34 management for S3 that's simp Le storage for S SWS it's uh swf that's simple
843:38 for S SWS it's uh swf that's simple workflow service SNS is simple
843:40 workflow service SNS is simple notification service sqs is simple Q
843:43 notification service sqs is simple Q service SCS is simple email service SSM
843:47 service SCS is simple email service SSM is simple systems manager but uh you
843:50 is simple systems manager but uh you know when we see the name it's usually
843:51 know when we see the name it's usually just systems manager but we still use
843:53 just systems manager but we still use the uh initialism SSM then there's RDS
843:57 the uh initialism SSM then there's RDS relational database service VPC virtual
843:59 relational database service VPC virtual private Cloud VPN virtual private
844:01 private Cloud VPN virtual private Network CFN cloud formation
844:04 Network CFN cloud formation WF web application firewall and that is
844:07 WF web application firewall and that is a very common initialism not just adus
844:10 a very common initialism not just adus but outside of it as well mq for Amazon
844:13 but outside of it as well mq for Amazon active mq ASG for auto scaling groups
844:16 active mq ASG for auto scaling groups Tam for technical account manager elb
844:19 Tam for technical account manager elb for elastic load bouncer ALB for the
844:22 for elastic load bouncer ALB for the application load bouncer NLB for the
844:24 application load bouncer NLB for the network load bouncer G wlb for the
844:27 network load bouncer G wlb for the Gateway load balancer clb for the
844:29 Gateway load balancer clb for the classic load balancer ec2 for elastic
844:31 classic load balancer ec2 for elastic cloud or Cloud compute e CS for elastic
844:34 cloud or Cloud compute e CS for elastic container service ECR for elastic
844:36 container service ECR for elastic container repository EBS for elastic
844:39 container repository EBS for elastic block storage EMR for elastic map
844:42 block storage EMR for elastic map produce EFS for elastic fall store EB or
844:45 produce EFS for elastic fall store EB or EB for elastic beant stock es for
844:48 EB for elastic beant stock es for elastic search eeks for elastic kuber
844:51 elastic search eeks for elastic kuber netti service msk for managed kofka
844:55 netti service msk for managed kofka service and if you think I got the S and
844:56 service and if you think I got the S and K backwards I did not for whatever
844:59 K backwards I did not for whatever reason it's msk uh then uh there's AIS
845:02 reason it's msk uh then uh there's AIS resource manager which is known as Ram
845:04 resource manager which is known as Ram ACM for Amazon certificate manager Pol
845:07 ACM for Amazon certificate manager Pol for principal of lease privilege which
845:08 for principal of lease privilege which is a concept not a service iot internet
845:11 is a concept not a service iot internet things this is not a service but is a
845:14 things this is not a service but is a tech concept or Cloud concept RI for
845:16 tech concept or Cloud concept RI for reserved instances and I'm sure there
845:18 reserved instances and I'm sure there are more but these are the ones that I
845:20 are more but these are the ones that I know off the top of my head uh and
845:22 know off the top of my head uh and they're in my uh usual use case uh for
845:25 they're in my uh usual use case uh for what I'm doing day to-day but a lot of
845:27 what I'm doing day to-day but a lot of times you'll probably just end up need
845:28 times you'll probably just end up need to remember ASG
845:30 to remember ASG elb um ec2 S3 things like that
845:34 elb um ec2 S3 things like that [Music]
845:38 [Music] okay all right let's compare adus config
845:41 okay all right let's compare adus config and app config which both have config in
845:43 and app config which both have config in the name but there are two completely
845:45 the name but there are two completely different services so adus config and
845:48 different services so adus config and app config so adus config is a
845:49 app config so adus config is a governance tool for compliance as code
845:52 governance tool for compliance as code you can create rules that will check to
845:53 you can create rules that will check to see if resources are configured the way
845:55 see if resources are configured the way you expect them to be if a resource
845:57 you expect them to be if a resource drifts from the expected configuration
845:59 drifts from the expected configuration you are notified or adus config can auto
846:01 you are notified or adus config can auto remediate correct the configuration back
846:03 remediate correct the configuration back to the expected state for app config it
846:06 to the expected state for app config it is used to automate the process of
846:08 is used to automate the process of deploying application configuration
846:09 deploying application configuration variable changes to your web application
846:12 variable changes to your web application you can write a validator to ensure uh
846:15 you can write a validator to ensure uh the changed variable will not break your
846:16 the changed variable will not break your web app uh you can monitor deployments
846:18 web app uh you can monitor deployments and automate Integrations to catch
846:20 and automate Integrations to catch errors or roll backs so config is for
846:22 errors or roll backs so config is for compliance governance app config is for
846:25 compliance governance app config is for conf application configur configuration
846:27 conf application configur configuration varibles so there you
846:29 varibles so there you [Music]
846:32 [Music] go well let us take a look at SNS versus
846:35 go well let us take a look at SNS versus sqs and uh these things have something
846:38 sqs and uh these things have something in common and it's they both connect
846:40 in common and it's they both connect apps via messages uh so they're for
846:43 apps via messages uh so they're for application integration so let's take a
846:45 application integration so let's take a look at SNS so simple notification
846:48 look at SNS so simple notification service and then simple Q service okay
846:50 service and then simple Q service okay so SNS is intended to pass along
846:53 so SNS is intended to pass along messages via a pub sub model whereas sqs
846:56 messages via a pub sub model whereas sqs cues up messages and has a guaranteed
846:58 cues up messages and has a guaranteed delivery so the idea with SNS you send
847:01 delivery so the idea with SNS you send notifications to subscribers of topics
847:03 notifications to subscribers of topics via multiple protocols so it can be H
847:06 via multiple protocols so it can be H HTTP email sqs SMS and SNS is generally
847:10 HTTP email sqs SMS and SNS is generally used for sending plane text emails which
847:12 used for sending plane text emails which is triggered via other aab services the
847:15 is triggered via other aab services the best example here is billing alarms I
847:16 best example here is billing alarms I know we mentioned this but I like to
847:18 know we mentioned this but I like to repeat it so that you absolutely know uh
847:20 repeat it so that you absolutely know uh it can retry sending in the case of
847:22 it can retry sending in the case of failures of https so it does have a
847:25 failures of https so it does have a retry attempt but that doesn't mean
847:26 retry attempt but that doesn't mean there's a guarantee of delivery it's
847:28 there's a guarantee of delivery it's really good for web hooks simple
847:30 really good for web hooks simple internal emails triggering Lambda
847:31 internal emails triggering Lambda functions if you had to compare the to
847:33 functions if you had to compare the to third party Services it's similar to
847:35 third party Services it's similar to Pusher or uh pubnub so sqs is uh the
847:39 Pusher or uh pubnub so sqs is uh the idea here is that messages are placed
847:40 idea here is that messages are placed into a queue applications pull the queue
847:42 into a queue applications pull the queue using the itus SDK you can uh uh retain
847:46 using the itus SDK you can uh uh retain a message for up to 14 days you can send
847:48 a message for up to 14 days you can send them in sequential order a sequential
847:51 them in sequential order a sequential order or in parallel you can ensure only
847:54 order or in parallel you can ensure only one message is sent you can ensure
847:55 one message is sent you can ensure messages are delivered at least once
847:57 messages are delivered at least once it's really good for delayed tasks
847:59 it's really good for delayed tasks queuing up emails um comparable uh stuff
848:02 queuing up emails um comparable uh stuff would be something like rabbit mq or uh
848:05 would be something like rabbit mq or uh Ruby on Rails sidekick
848:07 Ruby on Rails sidekick [Music]
848:10 [Music] okay hey this is Andy Brown from exam
848:12 okay hey this is Andy Brown from exam Pro and we're doing variation study with
848:14 Pro and we're doing variation study with SNS versus SCS versus pinpoint versus
848:17 SNS versus SCS versus pinpoint versus workmail and so SNS and SCS get confused
848:20 workmail and so SNS and SCS get confused uh quite often but all of these Services
848:23 uh quite often but all of these Services uh have something in common they all
848:25 uh have something in common they all send emails but uh the utility of email
848:28 send emails but uh the utility of email is completely different for each one so
848:30 is completely different for each one so the first one is simple notification
848:32 the first one is simple notification service is for practical and internal
848:35 service is for practical and internal emails so you send notifications to
848:37 emails so you send notifications to subscribers of topics via multiple
848:39 subscribers of topics via multiple protocols so it's not just for email it
848:41 protocols so it's not just for email it can handle HTTP it can send sqs it can
848:44 can handle HTTP it can send sqs it can send SNS me or SMS messages so um
848:48 send SNS me or SMS messages so um messages to your phone um but uh it does
848:51 messages to your phone um but uh it does send emails and so SNS is generally used
848:53 send emails and so SNS is generally used for sending plain text emails which is
848:55 for sending plain text emails which is triggered via other IT services the best
848:58 triggered via other IT services the best example of this is a building alarm so
849:01 example of this is a building alarm so most exam questions are going to be
849:03 most exam questions are going to be talking about SNS because lots of
849:05 talking about SNS because lots of services can trigger um SNS for
849:08 services can trigger um SNS for notifications and so that's the idea
849:10 notifications and so that's the idea it's like oh um you know did somebody
849:13 it's like oh um you know did somebody spend up a server send off an email
849:15 spend up a server send off an email through via SNS uh did we spend too much
849:18 through via SNS uh did we spend too much money here you know all sorts of things
849:20 money here you know all sorts of things can go through SNS to send out emails
849:22 can go through SNS to send out emails and you need to know what are topics and
849:24 and you need to know what are topics and subscriptions regarding SNS then you
849:27 subscriptions regarding SNS then you have sces so simple email service and
849:30 have sces so simple email service and this is for transactional emails and
849:34 this is for transactional emails and when I say transaction emails I'm
849:35 when I say transaction emails I'm talking about emails that should be
849:36 talking about emails that should be triggered based on inapp action so sign
849:39 triggered based on inapp action so sign up reset password invoices um so a
849:42 up reset password invoices um so a cloud-based email service that is
849:44 cloud-based email service that is similar to this would be like send grid
849:46 similar to this would be like send grid SCS sends HTML emails uh SNS cannot so
849:50 SCS sends HTML emails uh SNS cannot so that is the distinction is that SCS can
849:52 that is the distinction is that SCS can do HTML and plain text but SNS just do
849:55 do HTML and plain text but SNS just do does plain text and you would not use
849:57 does plain text and you would not use SNS for transactional emails SCS can
850:00 SNS for transactional emails SCS can receive inbound emails SCS can create
850:03 receive inbound emails SCS can create email templates custom domain name
850:07 email templates custom domain name emails so when you use SNS it's whatever
850:10 emails so when you use SNS it's whatever Amazon gives you it's going to be some
850:11 Amazon gives you it's going to be some weird address but SCS is whatever custom
850:14 weird address but SCS is whatever custom domain you want you can also monitor
850:16 domain you want you can also monitor email reputation for SCS then you have
850:19 email reputation for SCS then you have Amazon pinpoint and so this is for
850:21 Amazon pinpoint and so this is for promotional emails so these when we say
850:24 promotional emails so these when we say promotional we're talking about emails
850:25 promotional we're talking about emails for marketing so you can create email
850:27 for marketing so you can create email campaigns you can segment your contacts
850:29 campaigns you can segment your contacts you can create customer Journeys via
850:31 you can create customer Journeys via emails um it can do a be email testing
850:35 emails um it can do a be email testing and so sces and pinpoint get mixed up
850:37 and so sces and pinpoint get mixed up because a lot of people think well can I
850:39 because a lot of people think well can I just use my transaction emails for
850:41 just use my transaction emails for promotion emails absolutely you can it's
850:43 promotion emails absolutely you can it's not recommended because um you know
850:46 not recommended because um you know pinpoint has a lot more functionality
850:48 pinpoint has a lot more functionality around promotional emails they're built
850:50 around promotional emails they're built differently uh and so you know just
850:52 differently uh and so you know just understand that those two have
850:54 understand that those two have overlapping responsibilities but
850:56 overlapping responsibilities but generally should use them for what
850:57 generally should use them for what they're for then you have Amazon
850:59 they're for then you have Amazon workmail and this is just an email web
851:00 workmail and this is just an email web client so it's similar to Gmail or
851:02 client so it's similar to Gmail or Outlook you can create company emails
851:04 Outlook you can create company emails read write and send emails from a web
851:06 read write and send emails from a web client within the adus Management
851:07 client within the adus Management console so there you
851:09 console so there you [Music]
851:12 [Music] go let us compare Amazon inspector
851:15 go let us compare Amazon inspector versus adus trusted advisor so both of
851:17 versus adus trusted advisor so both of these are security tools and they both
851:20 these are security tools and they both perform audits but what they do is
851:22 perform audits but what they do is slightly different so Amazon inspector
851:24 slightly different so Amazon inspector audits a single ec2 instance that you've
851:27 audits a single ec2 instance that you've selected or I suppose you could select
851:29 selected or I suppose you could select multiple e2s it generates a report from
851:31 multiple e2s it generates a report from a long list of Security checks um and so
851:34 a long list of Security checks um and so trusted advisor has checks but uh the
851:37 trusted advisor has checks but uh the the key difference here is that it
851:38 the key difference here is that it doesn't generate out a PDF report though
851:40 doesn't generate out a PDF report though I'm sure you could export CSV data if
851:42 I'm sure you could export CSV data if you wanted to and then turn that into a
851:43 you wanted to and then turn that into a report uh it it gives you a holistic
851:46 report uh it it gives you a holistic view of recommendations across multiple
851:47 view of recommendations across multiple services and best practices so for
851:49 services and best practices so for example if you have an open port on
851:51 example if you have an open port on these security groups that can tell you
851:53 these security groups that can tell you about about that you should enable MFA
851:55 about about that you should enable MFA on your root account when using trusted
851:57 on your root account when using trusted advisor things like that um one thing
852:00 advisor things like that um one thing though is that trust advisor isn't just
852:01 though is that trust advisor isn't just for security it does checks across um uh
852:04 for security it does checks across um uh five different things um but they both
852:06 five different things um but they both do security and they both technically do
852:08 do security and they both technically do checks
852:09 checks [Music]
852:13 [Music] okay so there are a few services that
852:16 okay so there are a few services that have connected the name you'd think
852:18 have connected the name you'd think they' be related in some way but they
852:20 they' be related in some way but they absolutely are not and they don't even
852:21 absolutely are not and they don't even have similar functionality but let's
852:23 have similar functionality but let's take a look here so we know the
852:24 take a look here so we know the difference the first is direct connect
852:26 difference the first is direct connect it is a dedicated fiber optics
852:28 it is a dedicated fiber optics connection from your data center tows
852:30 connection from your data center tows it's intended for large Enterprises with
852:32 it's intended for large Enterprises with their own Data Center and they need an
852:34 their own Data Center and they need an insanely fast and private connection
852:36 insanely fast and private connection directly uh to AWS and you'll notice
852:38 directly uh to AWS and you'll notice they give private empasis because if you
852:40 they give private empasis because if you need a secure connection you need to
852:42 need a secure connection you need to apply uh an adus virtual private network
852:45 apply uh an adus virtual private network connection on top of direct connect then
852:47 connection on top of direct connect then you have Amazon connect this is a call
852:49 you have Amazon connect this is a call center as a service get a toll-free
852:51 center as a service get a toll-free number accept inbound and outbound calls
852:53 number accept inbound and outbound calls set up automated phone systems uh so if
852:56 set up automated phone systems uh so if you ever heard of an interactive voice
852:57 you ever heard of an interactive voice system and IVs this is basically what
852:59 system and IVs this is basically what Amazon connect is you have media connect
853:02 Amazon connect is you have media connect this is the new version of elastic
853:03 this is the new version of elastic transcoder it it converts videos to
853:05 transcoder it it converts videos to different video types so if you have
853:07 different video types so if you have let's say a th videos and you need to
853:09 let's say a th videos and you need to transcode them into different video
853:10 transcode them into different video formats maybe you need to apply
853:12 formats maybe you need to apply watermarks insert introduction videos in
853:14 watermarks insert introduction videos in in front of each one uh this is what you
853:16 in front of each one uh this is what you use media connect for
853:17 use media connect for [Music]
853:21 [Music] okay just in case you see elastic
853:23 okay just in case you see elastic transcoder as an option I just want you
853:26 transcoder as an option I just want you to know what it is compared to Media
853:27 to know what it is compared to Media connect so both these services are used
853:30 connect so both these services are used for transcoding and technically elastic
853:32 for transcoding and technically elastic transcoder is old way and iTab this
853:34 transcoder is old way and iTab this Elemental media convert or just media
853:37 Elemental media convert or just media convert is the new way so elastic
853:39 convert is the new way so elastic transcoder was the original transcoding
853:41 transcoder was the original transcoding service it may still have promatic apis
853:43 service it may still have promatic apis or workflows not available in media
853:45 or workflows not available in media convert so this could be reasons why we
853:47 convert so this could be reasons why we see Legacy customers still using it or
853:49 see Legacy customers still using it or you know it's just too much effort for
853:50 you know it's just too much effort for them to upgrade to the new one it
853:53 them to upgrade to the new one it transcodes videos to streaming formats
853:55 transcodes videos to streaming formats uh media convert is more robust
853:57 uh media convert is more robust transcoding service that can perform
853:59 transcoding service that can perform various operations during transcoding so
854:01 various operations during transcoding so it also transcodes videos to streaming
854:03 it also transcodes videos to streaming different streaming formats but it
854:04 different streaming formats but it overlays images it inserts uh video
854:07 overlays images it inserts uh video clips extracts captions data it has a
854:09 clips extracts captions data it has a robust UI so generally it's recommended
854:12 robust UI so generally it's recommended to use the uh media convert in terms of
854:14 to use the uh media convert in terms of costs are basically the same so there's
854:15 costs are basically the same so there's no reason not to use media convert
854:18 no reason not to use media convert [Music]
854:21 [Music] okay so it artifact versus Amazon
854:24 okay so it artifact versus Amazon inspector get commonly mixed up all the
854:26 inspector get commonly mixed up all the time but both artifact and inspector
854:29 time but both artifact and inspector compal out PDF reports so that's where
854:31 compal out PDF reports so that's where the confusion comes from but let's talk
854:33 the confusion comes from but let's talk about what is different about the
854:34 about what is different about the reports so Abus artifact and Abus
854:36 reports so Abus artifact and Abus inspector so for artifact you're
854:38 inspector so for artifact you're answering why should an Enterprise trust
854:40 answering why should an Enterprise trust AWS it generates a security report
854:42 AWS it generates a security report that's based on global compliance
854:44 that's based on global compliance framework such as sock or PCI or a
854:47 framework such as sock or PCI or a variety of others where Amazon inspector
854:49 variety of others where Amazon inspector is all about how do we know this ec2
854:51 is all about how do we know this ec2 instance is secure can you prove it so
854:53 instance is secure can you prove it so it runs a script that analyzes your ec2
854:56 it runs a script that analyzes your ec2 instance then generates a PDF report
854:58 instance then generates a PDF report telling you which Security checks had
854:59 telling you which Security checks had passed um so the idea here is it's an
855:01 passed um so the idea here is it's an audit tool for security of P2 instances
855:04 audit tool for security of P2 instances so there you
855:05 so there you [Music]
855:08 [Music] go so let us compare elb versus ALB
855:12 go so let us compare elb versus ALB versus NLB versus J wlb versus clb uh
855:16 versus NLB versus J wlb versus clb uh because you know when I was first
855:17 because you know when I was first learning AWS I was getting confused
855:19 learning AWS I was getting confused because there was elastic load balancer
855:21 because there was elastic load balancer but there was these other ones so what
855:23 but there was these other ones so what gives right so what's happening here is
855:25 gives right so what's happening here is that there is a main service called
855:27 that there is a main service called elastic load balancer elb and it has
855:29 elastic load balancer elb and it has four different types of possible load
855:32 four different types of possible load Bal bouncers so we'll go through all the
855:34 Bal bouncers so we'll go through all the types so the first is application load
855:36 types so the first is application load bouncer commonly uh initialized as ALB
855:40 bouncer commonly uh initialized as ALB and so this operates on layer 7 for
855:42 and so this operates on layer 7 for https this makes sense because that is
855:44 https this makes sense because that is the application layer and it has some
855:47 the application layer and it has some special powers in terms of routing rules
855:49 special powers in terms of routing rules so the idea here is you can create rules
855:51 so the idea here is you can create rules to change routing based on information
855:53 to change routing based on information found within the htps request so let's
855:56 found within the htps request so let's say you wanted some uh routes to go that
855:59 say you wanted some uh routes to go that have a particular subdomain to this
856:01 have a particular subdomain to this server and a different sub domain to
856:03 server and a different sub domain to another one you could do that and
856:05 another one you could do that and because it is an application load
856:07 because it is an application load balancer uh you can attach a web
856:10 balancer uh you can attach a web application firewall for protection you
856:12 application firewall for protection you can't attach this on the NLB or other
856:14 can't attach this on the NLB or other ones because they're not application
856:15 ones because they're not application based so that is just a little caveat
856:17 based so that is just a little caveat there then you have Network load bouncer
856:20 there then you have Network load bouncer uh commonly abbreviated to NLB this
856:23 uh commonly abbreviated to NLB this operates on layer three and four so
856:24 operates on layer three and four so we're talking TCP UDP this is great for
856:27 we're talking TCP UDP this is great for when you have Extreme Performance that
856:29 when you have Extreme Performance that that requires T TCP and TLS traffic it's
856:32 that requires T TCP and TLS traffic it's capable of handling millions of requests
856:34 capable of handling millions of requests per seconds uh while maintaining ultra
856:37 per seconds uh while maintaining ultra low latency it's optimized for sudden
856:39 low latency it's optimized for sudden and volatile traffic patterns while
856:41 and volatile traffic patterns while using a single static IP address per
856:44 using a single static IP address per availability Zone uh if you're making
856:46 availability Zone uh if you're making video games this is what they like to
856:47 video games this is what they like to use is the network load balcer but it
856:50 use is the network load balcer but it has other utilities outside of that then
856:52 has other utilities outside of that then you have Gateway load bouncer G wlb this
856:55 you have Gateway load bouncer G wlb this is when you need to deploy a fleet of
856:57 is when you need to deploy a fleet of third-party virtual appliances that
856:58 third-party virtual appliances that support uh I don't know how to say that
857:00 support uh I don't know how to say that in abbreviation but I'll just uh say
857:02 in abbreviation but I'll just uh say it's G NE v um and there's not much we
857:06 it's G NE v um and there's not much we need to know outside of that okay then
857:08 need to know outside of that okay then there is the classic load balancer uh
857:11 there is the classic load balancer uh commonly initializes clb this operates
857:13 commonly initializes clb this operates on layer 3 four and 7 it's intended for
857:16 on layer 3 four and 7 it's intended for applications that were built within the
857:17 applications that were built within the ec2 classic Network it doesn't support
857:20 ec2 classic Network it doesn't support Target groups so albs nlbs uh use Target
857:24 Target groups so albs nlbs uh use Target groups which is just an easier way of
857:25 groups which is just an easier way of grouping together um a bunch of uh
857:28 grouping together um a bunch of uh Target resources like compute uh that
857:30 Target resources like compute uh that we're going to load balance to and with
857:32 we're going to load balance to and with classic load balance you just directly
857:33 classic load balance you just directly assign ec2 instances uh and it's going
857:35 assign ec2 instances uh and it's going to be retired on August 15th of 2022 so
857:39 to be retired on August 15th of 2022 so yeah it looks like it can do a lot of
857:40 yeah it looks like it can do a lot of stuff but um it also doesn't have any of
857:42 stuff but um it also doesn't have any of the superpowers of these specialized
857:44 the superpowers of these specialized ones and so uh there's no reason to keep
857:46 ones and so uh there's no reason to keep it around and generally you should not
857:48 it around and generally you should not be using it um and so yeah that's about
857:51 be using it um and so yeah that's about it
