UNIT -3

Networking & Content Delivery –Route 53, Amazon API Gateway, Amazon VPC, VPC
Subnets, Route Tables, Security Groups, NAT Gateway.
Security Identification and Compline – AWS Identity and Access Management (IAM), AWS
Certificate Manager (ACM) and AWS Key Management Service (KMS).

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 1

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 2
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 3
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 4
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 5
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 6
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 7
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 8
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 9
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 10
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 11
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 12
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 13
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 14
AWS API
• What is an API?
• APIs are mechanisms that enable two software components to
communicate with each other using a set of definitions and protocols.
• What does API stand for?
• API stands for Application Programming Interface. In the context of APIs,
the word Application refers to any software with a distinct function.
Interface can be thought of as a contract of service between two
applications. This contract defines how the two communicate with each
other using requests and responses. Their API documentation contains
information on how developers are to structure those requests and
responses.

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 15

• How do APIs work?
• API architecture is usually explained in terms of client and server. The
application sending the request is called the client, and the
application sending the response is called the server. (So in the
weather example, the bureau’s weather database is the server, and
the mobile app is the client).
• There are four different ways that APIs can work depending on when
and why they were created.

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 16

• SOAP APIs
• These APIs use Simple Object Access Protocol. Client and server exchange
messages using XML. This is a less flexible API that was more popular in the
past.
• RPC APIs
• These APIs are called Remote Procedure Calls. The client completes a
function (or procedure) on the server, and the server sends the output back to
the client.
• Websocket APIs
• Websocket API is another modern web API development that uses JSON
objects to pass data. A WebSocket API supports two-way communication
between client apps and the server. The server can send callback messages
to connected clients, making it more efficient than REST API.
• REST APIs
• These are the most popular and flexible APIs found on the web today. The
client sends requests to the server as data. The server uses this client input
to start internal functions and returns output data back to the client. Let’s
look at REST APIs in more detail below.

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 17

What are REST APIs?
• REST stands for Representational State Transfer. REST defines a
set of functions like GET, PUT, DELETE, etc. that clients can use to
access server data. Clients and servers exchange data using HTTP.
• The main feature of REST API is statelessness. Statelessness
means that servers do not save client data between requests.
Client requests to the server are similar to URLs you type in your
browser to visit a website. The response from the server is plain
data, without the typical graphical rendering of a web page.

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 18

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 19
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 20
• API Gateway
• Purpose: AWS API Gateway is used to create, publish, maintain, monitor, and
secure REST, HTTP, and WebSocket APIs at any scale.
• Key Features:
• Integration with various AWS services (e.g., Lambda, DynamoDB, S3)
• Custom domain names and SSL/TLS encryption
• Throttling, request/response transformation, and monitoring
• Versioning and staging of APIs
• API keys and usage plans to manage access
• Integration with AWS WAF (Web Application Firewall) for enhanced security
• Use Cases:
• Backend for mobile and web applications
• Serverless applications using AWS Lambda
• Microservices architecture

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 21

• EC2 (Elastic Compute Cloud) API
• Purpose: EC2 provides scalable computing capacity in the cloud. The EC2
API allows you to control and configure instances, storage, networking, and
security.
• Key Features:
• Launch, describe, terminate, and manage EC2 instances
• Create and manage Amazon Machine Images (AMIs)
• Configure security groups, key pairs, and Elastic IPs
• Manage instance states (start, stop, reboot)
• Auto-scaling and load balancing
• Use Cases:
• Automating infrastructure setup
• Managing virtual machine instances programmatically
• Creating scalable web applications

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 22

• S3 (Simple Storage Service) API
• Purpose: S3 API is used to manage data storage, retrieve data from
anywhere, and manage buckets.
• Key Features:
• Object storage for any amount of data
• Highly durable, with automatic replication across availability zones
• APIs for uploading, downloading, and managing objects (files)
• Support for lifecycle policies, versioning, and data encryption
• Signed URLs for secure, temporary access to objects
• Use Cases:
• Backup and recovery of files
• Data lake for analytics
• Content distribution for websites

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 23

• Lambda API
• Purpose: AWS Lambda enables you to run code in response to events
without managing servers.
• Key Features:
• Automatically scales your application by running code in response to triggers
• Integrated with other AWS services like S3, DynamoDB, API Gateway, and
Kinesis
• Custom event sources for external events (HTTP, API calls, etc.)
• Supports various programming languages (Node.js, Python, Java, Go, Ruby, etc.)
• Use Cases:
• Real-time file processing (e.g., image resizing, data validation)
• Event-driven applications (e.g., notifications, workflow automation)
• Backend for IoT applications

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 24

• IAM (Identity and Access Management) API
• Purpose: IAM API manages access to AWS services and resources
securely.
• Key Features:
• Control who can use AWS resources (users, groups, and roles)
• Manage policies and permissions
• Support for Multi-Factor Authentication (MFA)
• Temporary security credentials with AWS Security Token Service (STS)
• Auditing and compliance tracking through CloudTrail integration
• Use Cases:
• Role-based access control for teams and applications
• Securing AWS resources by least privilege access
• Federating user access with other identity providers

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 25

• Service APIs
• These are the most common types of AWS APIs, allowing users to interact
directly with specific AWS services like EC2, S3, Lambda, and RDS.
• Characteristics:
• Allow users to programmatically manage resources (e.g., launching EC2 instances,
storing data in S3, creating RDS databases).
• Provide RESTful interfaces, usually following HTTP methods (GET, POST, PUT, DELETE).
• Can be accessed via the AWS SDK, AWS CLI, or HTTP requests.
• Examples:
• EC2 API: Control virtual machine instances, manage security groups, key pairs, and
Elastic IPs.
• S3 API: Store, retrieve, and manage data in object storage using PUT, GET, and DELETE
operations.
• DynamoDB API: Query and manage data in a NoSQL database, supporting high
scalability and performance.

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 26

Management APIs
•These APIs are designed for management and automation of AWS
infrastructure and services. They are used to provision, manage, and monitor AWS
resources.
•Characteristics:
•Focus on resource management (e.g., creating stacks, managing infrastructure).
•Used for automating tasks like deployment, configuration, monitoring, and security.
•Provide mechanisms for automating DevOps practices, continuous integration, and delivery
(CI/CD).
•Examples:
•CloudFormation API: Automate the provisioning of AWS infrastructure using templates. It
supports actions like CreateStack, UpdateStack, and DeleteStack.
•CloudWatch API: Monitor resources and set alarms for cloud applications. Common operations
include PutMetricData, GetMetricStatistics, and DescribeAlarms.

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 27

Authentication and Security APIs
•These APIs handle security-related tasks like access control, identity
management, and encryption.
•Characteristics:
•Used to authenticate and authorize users or services.
•Support Multi-Factor Authentication (MFA), encryption key management, and secure data
handling.
•Often work with AWS Identity and Access Management (IAM) and Key Management Service
(KMS).
•Examples:
•IAM API: Manage users, groups, roles, and policies for controlling access to AWS resources.
Common operations include CreateUser, AttachUserPolicy, and AssumeRole.
•AWS KMS API: Create and manage encryption keys for data encryption and digital signatures.
Example operations include Encrypt, Decrypt, and GenerateDataKey.

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 28

 Amazon VPC

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 29

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 30
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 31
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 32
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 33
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 34
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 35
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 36
 VPC Networking

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 37

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 38
Internet gateway

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 39

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 40
NAT Gateway

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 41

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 42
VPC Sharing

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 43

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 44
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 45
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 46
AWS Direct Connect

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 47

24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 48
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 49
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 50
24-10-2024 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 51