Training Course

Amazon Web Service

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 1

Course Schedule

Day Presentations Lab

Day 1 System Operations on AWS
Day 2 Computing on AWS X
Day 3 Networking on AWS X
Day 4 Storage and Archiving in the Cloud X
Day 5 Monitoring in the Cloud X
Day 6 Managing Resource Consumption in the Cloud X

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 2

 Module 2:

Computing in AWS

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 3

Module 2: Computing in AWS

 Goal: Understand how to deploy instances and maintain

instance health
 Creating instances
 Type of instance
 Instance security
 Pricing
 Troubleshooting

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 4

Module 2: Computing in AWS

 Architecture of Cloud Computing

 Amazon EC2 instances run as virtual machines on host computers located
in each Availability Zone
 Each Amazone EC2 instance receives a particular number of virtual CPUs
and an amount of RAM
 Instance Store is physically attached to the host computer and provides
temporary block-level storage for use with an instance, data in the instance
store does not persist

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 5

Module 2: Computing in AWS

 Architecture of Cloud Computing

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 6

Module 2: Computing in AWS

 Instance Types

 Instance types differ in CPU, memory, storage, and network capacity

 Instances are described by family (T2, M3, etc,..) and size (small,
medium, large, xlarge, 2xlarge, etc,…)
 Eeach instance type family is optimized for a specific type of workload
 Monitor CPU usage of instances to determine whether you are using the
right instance type

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 7

Module 2: Computing in AWS

 Instance Types

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 8

Module 2: Computing in AWS

Creating Instances in AWS

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 9

Module 2: Computing in AWS

Create An Instance

• Instance
• AMI
• Storage
• Network placement
and addressing

• User data
• Key pairs
• Security groups

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 10

Module 2: Computing in AWS

Create An Instance
 Internet Protocol

• Private IPs
• Public IPs
• Elastic IPs

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 11

Module 2: Computing in AWS

Create An Instance
 Amazon Elastic Block Store (EBS)

• Network-attached disk storage

• Types of EBS volumes
 General Purpose (SSD)
 Provisioned IOPS (SSD)
 Magnetic options
• Data persist when instance is stopped
• Data persist when instance is terminated, provided the DeleteOnTermination
attribute is false

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 12

Module 2: Computing in AWS

Create An Instance
 Instance Store (Ephemeral)

• Instance store volumes are directly attached to a host computer

• Instance Store SSD volumes have fast disk access suitable for swap files, caches,
buffers, and highly replicated data
• Instance store volume contents are lost when an instance is stopped or
terminated
• Instance store volumes can offer up to 100,000 IOPS for some instance types

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 13

Module 2: Computing in AWS

Create An Instance
 User Data
• User data scripts supplied to initialize instances automatically
 Linux script
 Window batch or PowerShell scripts
• User data scripts can install any software package
 Web server
 Database server
 Configuration management tools
• User data scripts are executed by
 Cloud-init on Linux
 EC2 config service on Window
• User data scripts run once per instance-id default

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 14

Module 2: Computing in AWS

Create An Instance
 User Data

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 15

Module 2: Computing in AWS

Create An Instance
 User Data

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 16

Module 2: Computing in AWS

Create An Instance
 Meta Data

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 17

Module 2: Computing in AWS

Create An Instance
 Security Groups

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 18

Module 2: Computing in AWS

Create An Instance
 Security Groups

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 19

Module 2: Computing in AWS

Create An Instance
 Key Pairs

Remote Access
 Linux – Use SSH to log into an instance since password-only authentication is
disabled on Linux by default
 Windows – Use RDP to log in to instances using an encrypted random password
that can only be decrypted using a private secret access key
Public key cryptographic keys
 Only the Public Access key ID needs to be uploaded to server (in
~/.ssh/authorized_keys on Linux)
 Private secret access keys can be generated locally and must be saved when
created

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 20

Module 2: Computing in AWS

Create An Instance
 IAM Roles

Use IAM Roles on EC2 instance

 Automatic propagation of access keys to instances
 Auto-rotation of access keys multiple times daily
 Use across multiple instances (e.g., Auto Scaling group)

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 21

Module 2: Computing in AWS

Create An Instance
 IAM Roles

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 22

Module 2: Computing in AWS

Create An Instance
 Access Keys

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 23

Module 2: Computing in AWS

Managing Instances in AWS

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 24

Module 2: Computing in AWS

An instance enters the Pending state when it is first started. As soon as it is started,
we will be charged for that instance’s first hour

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 25

 Module 2: Computing in AWS

Scale: Vertical or Horizontal

• Vertical scaling:
• Scaling up/down
• Increase/decrease size of
the instance
• Horizontal scaling:
• Scaling out/in
• Increase/decrease
number of instances

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 26

Module 2: Computing in AWS

Securing Your AWS Instances

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 27

Module 2: Computing in AWS

EC2 Instance Security Summary

Should:
 Use IAM roles when launching instances
 Use least privilege access policies
 Guard and manage access/secret keys
 Keep security patches up to date
 Use a NAT and Bastion host or similar solutions

Shoud Not:
 Use root level access/secret keys
 Embed access/secret keys in code or commit to Git

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 28

Module 2: Computing in AWS

Troubleshooting AWS Instance Issues

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 29

Module 2: Computing in AWS

Troubleshooting Common EC2 Issues

 Can’t connect to the instance

 Check security groups
 Automated Windows Updates sometimes a culprit
 Instance is marked “Impaired” (fail status check)
 Reboot
 Get System Log command in console for additional troubleshooting
 (Windows) attaching a second Elastic Network Interface (ENI) may enable
connecting to the instance
 Log issue with AWS support

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 30

Module 2: Computing in AWS

Understanding EC2 Instance Pricing

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 31

Module 2: Computing in AWS

Mix of Pricing Type

On-Demand Instances Reserved Instances Spot Instances
Pay as you go for compute 1- or 3- year terms Bid on unused EC2 capacity
power Spot Price based on
Benefit: Choose zero/partial/full up- supply/demand, determined
On-demand availability front payment automatically, up to 90% off
on-demand price
Pay only for what you use, no Receive significant hourly Benefit: Cost/Large Scale,
up-front commitments or discount dynamic workload handling
long-term contracts Benetfit: Cost/Predictability
Helps ensure that compute Spot price below bid,
capacity is available when instances start
needed Spot price above bid,
instances terminate after a 2-
minute warning

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 32

Module 2: Computing in AWS

Knowledge Check 1

What disk device would be best for storing virtual memory paging/swap files?

 Boot volume
 Additional EBS data drive
 Instance store
 Amazon S3

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 33

Module 2: Computing in AWS

Knowledge Check 1

What disk device would be best for storing virtual memory paging/swap files?
 Boot volume
 Additional EBS data drive
 Instance store
 Amazon S3

Answer: Instance store. Instance storage is fast, temporary storage perfect for
storing temporary data such as memory paging and swap file data.

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 34

Module 2: Computing in AWS

Knowledge Check 2
You want to deploy a new version of your web application. How do you trigger the
user data to run again and update your app?

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 35

Module 2: Computing in AWS

Knowledge Check 2
You want to deploy a new version of your web application. How do you trigger the
user data to run again and update your app?

Answer: You don’t. Be default, user data is run once, when the instance first
boots.

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 36

Module 2: Computing in AWS

Lab1 / Some practice with an AWS Instance in this module:

 Create a new an Instance

 View status change
 Change instance type
 Creat an AMI from an instance
 Re-launch an new instance from AMI
 SSH to EC2 instance
 Set security group for instance

8/9/2023 09e-BM/DT/FSOFT - ©FPT SOFTWARE – Fresher Academy - Internal Use 37