DevSecOps Notes

 1) Resource Groups - Resource Groups are collection of resources that share one or more tags - Resource Groups appears in the Global Console Header and Under Systems Manager - Helps you organize and consolidate information based on your project and the resources that you use. Resource Groups details about a group of resources based on     * Metrics     * Alarms     * Configuration Settings 2) Tags - Tags are words or phrases that act as metadata for organizing your AWS resources 3) 4) 5) 6) 7) 8)

1) Elastic Compute Cloud (EC2) - Cloud Computing Service. Choose your OS, Storage , Memory, Network Throughput . Launch and SSH into your server within minutes .  - Elastic compute Cloud (EC2) is a highly configurable server . - EC2 is resizable compute capacity . It takes minutes to launch new instances. - Anything and everything on AWS uses EC2 Instance underneath. - Choose your OS via Amazon Machine Image (AMI)     * RedHat     * Ubuntu     * Windows     * Amazon Linux     * Suse - Choose you Instance Type      * t2.nano - $0.0065/hour ($4.75/month), 1vCPU 0.5GB Mem     * c4.8xlarge - $1.591/hour ($1161.43/month), 36vCPU, 60GB Mem , 10 Gigabit performance - Add Storage (EBS, EFS) - SSD, HDD, Virtual Magnetic Tape, Multiple Volumes - Configure your Instance - Security Groups, Key Pairs, UserData, IAM Roles, Placement Group - a) EC2 - Instance Types and Usage - General Purpose      * ...

 1. AWS OpsWorks - configuration management service that provides fully-managed instances for Chef and Puppet - What is Configuration Management? The act of maintaining a specific software configuration and the ability to remotely make configuration changes to servers in way that they can be monitored , audited and automated. - What is Software Provisioning ? The act of configuration software packages on servers. Setting up all the software and configuration requirements to run a web-application. - What is Application Deployment ?  The act of deploying new versions of web-application or rollback to a previous web-application version. -What software does Configuration Managment, Software Provisioning, Application Deployment     *  Chef     *  Puppet     *  Ansible      *  Saltstack - AWS OpsWorks provides managed instances for the automation platforms Chef and Puppet -OpsWorks lets you use Chef and Puppet to aut...

1) Service Catalog - AWS Service Catalog enables organization to create and manage catalogs of products that are approved for use on AWS to achieve consistent governance and meet compliance requierments. - The AWS Service Catalog is an alternative to granting direct access to AWS resources via the AWS Console     * Standarization     * Self-service discovery and launch     * Fine-grain access control     * Extensibility and version control Anatomy of Service Control a)  Service Catalog - Users -  Administrative User  (Manages the catalog)     * Manage a catalog of products , organizing them into portfolios and granting access to the end users.      *An administrator technical responsibilities include:         ** Preparing CloudFormation templates         ** Configuring constraints         ** Managing IAM roles assigned to...