Amazon Elastic Compute Cloud (Part 1)

By Ashwin Venugopal -

 








What is Amazon EC2? 

Amazon Elastic Compute Cloud (Amazon EC2) offers scalable computing power on demand within the Amazon Web Services (AWS) Cloud. Utilizing Amazon EC2 helps lower hardware expenses, enabling quicker development and deployment of applications. You can launch any number of virtual servers based on your needs, set up security and networking, and oversee storage. It's possible to increase capacity (scale up) to manage computationally intensive tasks, such as monthly or annual operations, or during traffic surges on your website. When demand decreases, you can also decrease capacity (scale down) as needed. 

An EC2 instance functions as a virtual server within the AWS Cloud. When you initiate an EC2 instance, the instance type you choose dictates the hardware configuration available for your instance. Each instance type provides a distinct combination of computing power, memory, networking, and storage capabilities.

Features of Amazon EC2

Amazon EC2 provides the following high-level features:

Instances

Virtual servers.

Amazon Machine Images (AMIs)

Preconfigured templates for your instances that package the components you need for your server (including the operating system and additional software).

Instance Types

Various configurations CPU, memory, storage, networking capacity, and graphics hardware for your instances. 

Amazon EBS Volumes

Persistent storage volumes for your data using Amazon Elastic Block Store (EBS).

Instance Store Volumes

Storage volumes for temporary data that is deleted when you stop, hibernate, or terminate your instance.

Key Pairs

Secure login information for your instances. AWS stores the public key and you store the private key in a secure place. 

Security Groups

A virtual firewall that allows you to specify the protocols, ports, and source IP ranges that can reach your instances, and the destination IP ranges to which your instances can connect.

Amazon EC2 facilitates the handling, storages, and transfer of credit card information for merchants or service providers and has been certified as compliant with the Payment Card Industry (PCI) Data Security Standard (DSS).

Related Services

Services to use with Amazon EC2

You can use other AWS services with the instances that you deploy using Amazon EC2.
  • Amazon EC2 Auto Scaling- Helps ensure you have the correct number of Amazon EC2 instances available to handle the load for your application. 

  • AWS Backup- Automate backing up your Amazon EC2 instances and the Amazon EBS volumes attached to them.

  • Amazon CloudWatch- Monitor your instances and Amazon EBS volumes. 

  • Elastic Load Balancing- Automatically distribute incoming application traffic across multiple instances. 

  • Amazon GuardDuty- Detect potentially unauthorized or malicious use of your EC2 instances. 

  • EC2 Image Builder- Automate the creation, management, and deployment of customized, secure, and up-to-date server images. 

  • AWS Launch Wizard- Size, configure, and deploy AWS resources for third-party applications without having to manually identify and provision individual AWS resources. 

  • AWS Systems Manager- Perform operations at scale on EC2 instances with this secure end-to-end management solution. 

Additional Compute Services

You can launch instances using another AWS compute service instead of using Amazon EC2.

  • Amazon Lightsail- Create websites or web applications with Amazon Lightsail, a cloud platform that offers the necessary resources to swiftly launch your project at an affordable, predictable monthly cost. 

  • Amazon Elastic Container Service (ECS)- Deploy, manage, and scale containerized applications on a cluster of EC2 instances. 

  • Amazon Elastic Kubernetes Service (EKS)- Run your Kubernetes applications on AWS.  

Conclusion

Features of Amazon Elastic Compute Cloud are discussed. 






































Comments

Post a Comment

Popular posts from this blog

Deployment (Part 3)

By Ashwin Venugopal -
Image
  To read part 1, please click  here To read part 2, please click  here Microsoft Monitoring Agent (MMA) MMA is used across multiple Microsoft solutions and has undergone a few name changes as its features and functionality have evolved. If it is being considered to be used, then following areas should be covered during a Microsoft Sentinel deployment project: Consider the timelines and the strategy for a migration to AMA (Azure Monitor Agent) before the MMA end-of-life.  Consider the central deployment and management methodology for MMA. Determine which endpoints are in scope for deployment as these affect the log ingestion volume significantly.  Azure Monitor Agent (AMA) Organizations with MMA as the main Microsoft Sentinel agent should start planning the migration to AMA as soon as possible to avoid a rushed migration. One of the main advantages of AMA is the ability to control the log collection policy centrally and apply different policies against different...
Read more

Deployment (Part 1)

By Ashwin Venugopal -
Image
  To read part 2, please click  here To read part 3, please click  here Azure Resources Microsoft Sentinel needs following resources to be created: Subscription (if a dedicated subscription(s) will be used) Resource group(s) Log Analytics workspace(s) Automation rules/playbook Alert rules Workbooks Microsoft Sentinel offers hundreds of alert rules, workbooks, and automation playbook templates along with hunting scripts. The templates can be used to activate/deploy schedule alerts, create customized dashboards, create automation playbooks and perform threat-hunting activities. Generally, once deployed, the resources created have to be adjusted to match the existing environment, configure local credentials, etc. Methods of deployment: Manual- Administrator can manually configures the Microsoft Sentinel resources with the help of Azure portal. Any manual process has the inherent risks of human operator error, lack of compliance with potential change control procedures, and u...
Read more

Deployment (Part 2)

By Ashwin Venugopal -
Image
  To read part 1, please click  here To read part 3, please click  here Microsoft Sentinel Content Hub Content in Microsoft Sentinel includes any of the following types: Data connectors offer log ingestion from different sources into Microsoft Sentinel. Parsers give log formatting/transformation into ASIM formats, supporting usage across various Microsoft Sentinel content types and scenarios. Workbooks provide monitoring, visualization, and interactively with data in Microsoft Sentinel, highlighting meaningful insights for users.  Analytics rules give alerts that point to relevant SOC actions via incidents.  Hunting Queries are used by SOC teams to proactively hunt for threats in Microsoft Sentinel. Notebooks help SOC teams in using advanced hunting features in Jupyter and Azure Notebooks. Watchlists support the ingestion of specific data for enhanced threat detection and reduced alert fatigue.  Playbooks and Azure Logic Apps Custom Connectors provide featu...
Read more