One key element between serverless components is messaging. Amazon SNS is a fully managed pub/sub messaging for distributed or serverless applications. There is the option from one to many messages to push out. E.g. a publisher places a message in a topic and all subscribers get a copy of the message. You can use the […]
CloudFront & ElastiCache for Redis The example shows the whole environment perhaps build by CloudFormation. Video data comes in by CloudFront from Video encoders and maybe the requested input is in CloudFront, it’s send back directly. If not it’s stored in S3, a Lambda function updates some metadata and it’s stored in Dynamo DB. The […]
Security is also a management of access and identities. IAM: User, Group, Role AWS IAM is a core tool of the customer for managing authentication and authorization the cloud environment. Authentication tells, who is entering the account. We can authenticate, if the actor is, who he says he is by using credentials, like passwords, one […]
AMAZON Inspector, to identify security findings. Amazon Inspector assesses applications for vulnerabilities and creates a detailed list of security findings. Using the AWS Management Console is an easy way to activate and schedule the inspection review interval for each component like the 3 Lamda applications above via AWS Inspector. [Left architecture] The example on the […]
Security, a shared responsibility between Public Service Provider and the Business Customer. Shared responsibilities Security responsibility of the cloud infrastructure include: o Design for security (physical structure and the software layer regulatory compliance & security)o Constantly monitored (monitoring of security incident or compromise)o Highly automated (responses are highly automated)o Highly availableo Highly accredited (consequences: physical […]
Well-Architected Framework, based on 5 areas. Well-Architected Framework The Well-Architected Framework methodology should support to build an effective cloud infrastructure. It’s a guide for designing infrastructure: Secure, High-performing, Resilient and Efficient. The systematic approach focuses to evaluating and implementing architectures, that are established best practices developed through lessons learned by working with customers. For building […]
Protect from Distributed Denial of Services (DDoS) AWS Shield, AWS Shield Advanced AWS Shield ensures to protect from Distributed Denial of Services (DDoS). DDoS mitigation challenges typically are: Deal with complexity, limited bandwidth, involves re-architecting (often on premises), manual, degraded performance, time-consuming, expensive. AWS Shield is a managed DDoS protection service. It’s always-on detection and […]
Cloud infrastructure in a compressive online conference. Thanks to Scott.Jones@amazon.com from Boston for presenting AWSOMEDAY2019!