Archives for AWS - Page 5
Peered VPCs in Google Cloud versus AWS
The VPC Boundary VPCs are a logical boundary within a public cloud. The actual contents of this logical boundary are physical networking constructs, including subnets, IP addresses, routes and such. In…
AWS KMS basics, Encryption of EBS volumes, Attaching EC2 instances
What is Envelope Encryption? If you had a huge chunk of data to be encrypted and did not want to use your cloud encryption service (KMS) to encrypt the entire…
AWS Networking Basics and Recap
How do you logically create ‘private’ partitions of the public cloud? How do you break up a VPC into Tiers designed for specific workloads? (Answer – Subnets) Inside each AZ,…
AWS SSO from an On-Premises Active Directory
Users on your on-premises Active Directory need SSO access to a) AWS accounts and b) cloud applications in the AWS SSO user portal AWS Directory Service has the following two options…
Launch EC2 Instance only if it is Tagged
This can apply to EC2 instances, EBS volumes or both. You can tweak it to work for only key present, key-value present and key value exact match. STEP 1 –…
NAT Instances and Multiple Availability Zone Deployments – AWS
SIMPLE ROUTES FOR A SINGLE NAT INSTANCE Configuration – ELB in front of NAT instance. NAT instance in it’s own security group (NAT_SG); ELB in it’s own Security Group (ELB_SG)…
Failover Patterns in the Public Cloud
Let us define some terms before we get started. STANDBY environment – means an active, functioning environment, ready to take over instantly and automatically BACKUP environment – means a passive,…
Governance in AWS, Azure, GCP
What does governance mean in the context of a public cloud? Governance , while often used in the context of 'cost governance' , can actually apply to either of the…
Public IP Address vs Elastic IP ( EIP ) on AWS
Why not just attach a Public IP to your ELBs and your NAT instances? Public IP addresses are not persistent - if you stop/start your instance, the instance will get…
Roles and Policies in Google Cloud, and comparisons to AWS Roles and Policies
2 main differences beetween aws and gcp role / policy A GCP role gives a SINGLE permission to an IAM user. The permission is on a GCP resource. A GCP…