Disclaimer: These slides are copyrighted and
strictly for personal use only
• This document is reserved for people enrolled into the
AWS Certified Cloud Practitioner Course
• Please do not share this document, it is intended for personal use and exam
preparation only, thank you.
• If you’ve obtained these slides for free on a website that is not the course’s
website, please reach out to [email protected]. Thanks!
• Best of luck for the exam and happy learning!
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
AWS Certified Cloud
Practitioner Course
CLF-C01
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Welcome! We’re starting in 5 minutes
• We’re going to prepare for the Cloud Practitioner exam – CLF-C01
• It’s a challenging certification, so this course will be long and interesting
• Basic IT knowledge is helpful, but I will explain everything
• We will cover over 40 AWS services (out of the 200+ in AWS)
• AWS / IT Beginners welcome! (but take your time, it’s not a race)
• Learn by doing – key learning technique!
This course mixes both theory & hands on
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Sample question: Certified Cloud Practitioner
Which AWS service would simplify the migration of a database to AWS?
• A) AWS Storage Gateway
• B) AWS Database Migration Service
• C) Amazon EC2
• D) Amazon AppStream 2.0
<= we will learn
<= correct answer
<= we will learn
<= distractor (over 200 services in AWS)
• https://d1.awsstatic.com/training-and-certification/docs-cloud-
practitioner/AWS-Certified-Cloud-Practitioner_Sample-Questions.pdf
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
About me
• I’m Stephane!
• 9x AWS Certified (so far!)
• Worked with AWS many years: built websites, apps, streaming platforms
• Veteran Instructor on AWS (Certifications, CloudFormation, Lambda, EC2…)
• You can find me on
• LinkedIn: https://www.linkedin.com/in/stephanemaarek
• Medium: https://medium.com/@stephane.maarek
• Twitter: https://twitter.com/stephanemaarek
• GitHub: https://github.com/simplesteph
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Your AWS Certification journey
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Estimated Cost for this Course
• Most of the services we’ll use will be
within the AWS Free Tier = $0
• If I use a service which will cost you
money, I will mention it
• You can read more about the
AWS Free Tier at:
https://aws.amazon.com/free/
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Udemy Tips
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
What is Cloud Computing
Section
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
How websites work
network
Client
Server
Clients have IP addresses
© Stephane Maarek
Servers have IP addresses
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
Publicité
u
u
s
.
c
o
m
.
l
Just like when you’re sending post mail!
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
What is a server composed of?
• Compute: CPU
• Memory: RAM
• Storage: Data
+
=
• Database: Store data in a structured way
• Network: Routers, switch, DNS server
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
IT Terminology
• Network: cables, routers and servers connected with each other
• Router: A networking device that forwards data packets between computer
networks. They know where to send your packets on the internet!
• Switch: Takes a packet and send it to the correct server / client on your network
Router
Switch
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Traditionally, how to build infrastructure
Home or Garage
Office
Data center
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Problems with traditional IT approach
• Pay for the rent for the data center
• Pay for power supply, cooling, maintenance
• Adding and replacing hardware takes time
• Scaling is limited
• Hire 24/7 team to monitor the infrastructure
• How to deal with disasters? (earthquake, power shutdown, fire…)
• Can we externalize all this?
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
What is Cloud Computing?
• Cloud computing is the on-demand delivery of compute power, database storage,
applications, and other IT resources
• Through a cloud services platform with pay-as-you-go pricing
• You can provision exactly the right type and size of computing resources you need
• You can access as many resources as you need, almost instantly
• Simple way to access servers, storage, databases and a set of application services
• Amazon Web Services owns and maintains the network-connected hardware
required for these application services, while you provision and use what you need
via a web application.
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Office
The Cloud
© Stephane Maarek
You’ve been using some Cloud services
Gmail
• E-mail cloud service
• Pay for ONLY your emails
stored (no infrastructure, etc.)
Dropbox
• Cloud Storage Service
• Originally built on AWS
Netflix
• Built on AWS
• Video on Demand
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
The Deployment Models of the Cloud
Private Cloud:
• Cloud services used by a
single organization, not
exposed to the public.
• Complete control
• Security for sensitive
applications
• Meet specific business
needs
Public Cloud:
• Cloud resources owned
and operated by a third-
party cloud service
provider delivered over
the Internet.
• Six Advantages of Cloud
Computing
Hybrid Cloud:
• Keep some servers on
premises and extend
some capabilities to the
Cloud
• Control over sensitive
assets in your private
infrastructure
• Flexibility and cost-
effectiveness of the
public cloud
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
The Five Characteristics of Cloud Computing
• On-demand self service:
• Users can provision resources and use them without human interaction from the service
provider
• Broad network access:
• Resources available over the network, and can be accessed by diverse client platforms
• Multi-tenancy and resource pooling:
• Multiple customers can share the same infrastructure and applications with security and privacy
• Multiple customers are serviced from the same physical resources
• Rapid elasticity and scalability:
• Automatically and quickly acquire and dispose resources when needed
• Quickly and easily scale based on demand
• Measured service:
• Usage is measured, users pay correctly for what they have used
© Stephane Maarek
Publicité
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Six Advantages of Cloud Computing
• Trade capital expense (CAPEX) for operational expense (OPEX)
• Pay On-Demand: don’t own hardware
• Reduced Total Cost of Ownership (TCO) & Operational Expense (OPEX)
• Benefit from massive economies of scale
• Prices are reduced as AWS is more efficient due to large scale
• Stop guessing capacity
• Scale based on actual measured usage
• Increase speed and agility
• Stop spending money running and maintaining data centers
• Go global in minutes: leverage the AWS global infrastructure
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Problems solved by the Cloud
• Flexibility: change resource types when needed
• Cost-Effectiveness: pay as you go, for what you use
• Scalability: accommodate larger loads by making hardware stronger or
adding additional nodes
• Elasticity: ability to scale out and scale-in when needed
• High-availability and fault-tolerance: build across data centers
• Agility: rapidly develop, test and launch software applications
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Types of Cloud Computing
• Infrastructure as a Service (IaaS)
• Provide building blocks for cloud IT
• Provides networking, computers, data storage space
• Highest level of flexibility
• Easy parallel with traditional on-premises IT
• Platform as a Service (PaaS)
• Removes the need for your organization to manage the underlying infrastructure
• Focus on the deployment and management of your applications
• Software as a Service (SaaS)
• Completed product that is run and managed by the service provider
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
On-premises
Infrastructure
as a Service
(IaaS)
Platform as a
Service
(PaaS)
Software as a
Service
(SaaS)
Applications
Applications
Applications
Applications
Data
Runtime
Data
Runtime
Data
Runtime
Data
Runtime
Middleware
Middleware
Middleware
Middleware
O/S
O/S
O/S
O/S
Virtualization
Virtualization
Virtualization
Virtualization
Servers
Storage
Servers
Storage
Servers
Storage
Servers
Storage
Networking
Networking
Networking
Networking
© Stephane Maarek
Managed by you
Managed by others
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Example of Cloud Computing Types
• Infrastructure as a Service:
• Amazon EC2 (on AWS)
• GCP, Azure, Rackspace, Digital Ocean, Linode
• Platform as a Service:
• Elastic Beanstalk (on AWS)
• Heroku, Google App Engine (GCP), Windows Azure (Microsoft)
• Software as a Service:
• Many AWS services (ex: Rekognition for Machine Learning)
• Google Apps (Gmail), Dropbox, Zoom
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Pricing of the Cloud – Quick Overview
• AWS has 3 pricing fundamentals, following the pay-as-you-go pricing
model
• Compute:
• Pay for compute time
• Storage:
• Pay for data stored in the Cloud
• Data transfer OUT of the Cloud:
• Data transfer IN is free
• Solves the expensive issue of traditional IT
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
AWS Cloud History
2002:
Internally
launched
2004:
Launched publicly
with SQS
2007:
Launched in
Europe
2003:
Amazon infrastructure is
one of their core strength.
Idea to market
2006:
Re-launched
publicly with
SQS, S3 & EC2
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
AWS Cloud Number Facts
• In 2019, AWS had $35.02
billion in annual revenue
• AWS accounts for 47% of the
market in 2019 (Microsoft is
2nd with 22%)
• Pioneer and Leader of the
AWS Cloud Market for the
9th consecutive year
• Over 1,000,000 active users
© Stephane Maarek
Gartner Magic Quadrant
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
Publicité
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
AWS Cloud Use Cases
• AWS enables you to build sophisticated, scalable applications
• Applicable to a diverse set of industries
• Use cases include
• Enterprise IT, Backup & Storage, Big Data analytics
• Website hosting, Mobile & Social Apps
• Gaming
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
AWS Global Infrastructure
• AWS Regions
• AWS Availability Zones
• AWS Data Centers
• AWS Edge Locations /
Points of Presence
• https://infrastructure.aws/
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
AWS Regions
• AWS has Regions all around the world
• Names can be us-east-1, eu-west-3…
• A region is a cluster of data centers
• Most AWS services are region-scoped
© Stephane Maarek
https://aws.amazon.com/about-aws/global-infrastructure/
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
AWS Availability Zones
• Each region has many availability zones
(usually 3, min is 2, max is 6). Example:
• ap-southeast-2a
• ap-southeast-2b
• ap-southeast-2c
• Each availability zone (AZ) is one or more
discrete data centers with redundant power,
networking, and connectivity
• They’re separate from each other, so that
they’re isolated from disasters
• They’re connected with high bandwidth,
ultra-low latency networking
© Stephane Maarek
AWS Region
Sydney: ap-southeast-2
ap-southeast-2a
ap-southeast-2b
ap-southeast-2c
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
AWS Points of Presence (Edge Locations)
• Amazon has 216 Points of Presence (205 Edge Locations & 11 Regional
Caches) in 84 cities across 42 countries
• Content is delivered to end users with lower latency
© Stephane Maarek
https://aws.amazon.com/cloudfront/features/
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Tour of the AWS Console
• AWS has Global Services:
• Identity and Access Management (IAM)
• Route 53 (DNS service)
• CloudFront (Content Delivery Network)
• WAF (Web Application Firewall)
• Most AWS services are Region-scoped:
• Amazon EC2 (Infrastructure as a Service)
• Elastic Beanstalk (Platform as a Service)
• Lambda (Function as a Service)
• Rekognition (Software as a Service)
• Region Table: https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Shared Responsibility Model diagram
CUSTOMER = RESPONSIBILITY FOR
THE SECURITY IN THE CLOUD
AWS = RESPONSIBILITY FOR
THE SECURITY OF THE CLOUD
© Stephane Maarek
https://aws.amazon.com/compliance/shared-responsibility-model/
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
AWS Acceptable Use Policy
• https://aws.amazon.com/aup/
• No Illegal, Harmful, or Offensive Use or Content
• No Security Violations
• No Network Abuse
• No E-Mail or Other Message Abuse
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
IAM Section
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
IAM: Users & Groups
• IAM = Identity and Access Management, Global service
• Root account created by default, shouldn’t be used or shared
• Users are people within your organization, and can be grouped
• Groups only contain users, not other groups
• Users don’t have to belong to a group, and user can belong to multiple groups
Group: Developers
Group
Audit Team
Group: Operations
Alice
Bob
Charles
David
Publicité
Edward
Fred
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
IAM: Permissions
• Users or Groups can be
assigned JSON documents
called policies
• These policies define the
permissions of the users
• In AWS you apply the least
privilege principle: don’t give
more permissions than a user
needs
{
"Version": "2012-10-17",
"Statement": [
{
},
{
},
{
}
"Effect": "Allow",
"Action": "ec2:Describe*",
"Resource": "*"
"Effect": "Allow",
"Action": "elasticloadbalancing:Describe*",
"Resource": "*"
"Effect": "Allow",
"Action": [
"cloudwatch:ListMetrics",
"cloudwatch:GetMetricStatistics",
"cloudwatch:Describe*"
],
"Resource": "*"
]
}
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
IAM Policies
Audit Team
Developers
Operations
Alice
Bob
Charles
David
Edward
Fred
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
IAM – Password Policy
• Strong passwords = higher security for your account
• In AWS, you can setup a password policy:
• Set a minimum password length
• Require specific character types:
• including uppercase letters
• lowercase letters
• numbers
• non-alphanumeric characters
• Allow all IAM users to change their own passwords
• Require users to change their password after some time (password expiration)
• Prevent password re-use
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Multi Factor Authentication - MFA
• Users have access to your account and can possibly change
configurations or delete resources in your AWS account
• You want to protect your Root Accounts and IAM users
• MFA = password you know + security device you own
Password
+
=>
Successful login
Alice
• Main benefit of MFA:
if a password is stolen or hacked, the account is not compromised
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
MFA devices options in AWS
Virtual MFA device
Universal 2nd Factor (U2F) Security Key
Google Authenticator
(phone only)
Authy
(multi-device)
YubiKey by Yubico (3rd party)
Support for multiple tokens on a single device.
Support for multiple root and IAM users
using a single security key
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
MFA devices options in AWS
Hardware Key Fob MFA Device
Hardware Key Fob MFA Device for
AWS GovCloud (US)
Provided by Gemalto (3rd party)
Provided by SurePassID (3rd party)
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
How can users access AWS ?
• To access AWS, you have three options:
• AWS Management Console (protected by password + MFA)
• AWS Command Line Interface (CLI): protected by access keys
• AWS Software Developer Kit (SDK) - for code: protected by access keys
• Access Keys are generated through the AWS Console
• Users manage their own access keys
• Access Keys are secret, just like a password. Don’t share them
• Access Key ID ~= username
• Secret Access Key ~= password
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
Example (Fake) Access Keys
• Access key ID: AKIASK4E37PV4983d6C
• Secret Access Key: AZPN3zojWozWCndIjhB0Unh8239a1bzbzO5fqqkZq
• Remember: don’t share your access keys
© Stephane Maarek
I
N
O
T
F
O
R
D
I
S
T
R
B
U
T
I
O
N
©
S
t
e
p
h
a
n
e
M
a
a
r
e
k
w
w
w
d
a
t
a
c
u
m
u
u
s
.
c
o
m
.
l
IAM Roles for Services
• Some AWS service will need to
perform actions on your behalf
Publicité
• To do so, we w...