REPO
REPO
04 AWS SERVICES
4.1. IAM (Identity Access Management) 5-10
4.2 Features of IAM
4.3 S3 storage - (simple storage service)
4.4 Cloud watch
4.5 EC2 compute - (Elastic cloud computing)
4.6 Security group
4.7 EBS - (elastic block storage)
Cloud Computing is a recently emerged model which is becoming popular lar among
almost all enterprises. It involves the concept of on demand services which means using the
cloud resources on demand and we can scale the resources as per demand. Cloud computing
undoubtedly provides unending benefits and is a cost e ective model. The major concern in this
model is Security in cloud. This is the reason of many enterprises of not preferring the cloud
computing. This paper provides the review of security research in the field of cloud se curity .
After security research we have presented the working of AWS (Amazon Web Service) cloud
computing. AWS is the most trusted provider of cloud com- putting which not only provides the
excellent cloud security but also provides excellent cloud services. The main aim of this paper is
to make cloud computing security as a core operation and not an add-on operation.
Introduction to AWS Cloud Services
1. INTRODUCTION
Amazon has a long history of using a decentralized IT infrastructure. This
arrangement enabled our development teams to access compute and storage resources on
demand, and it has increased overall productivity and agility. By 2005, Amazon had spent
over a decade and millions of dollars building and managing the large-scale, reliable, and
efficient IT infrastructure that powered one of the world’s largest online retail platforms.
Amazon launched Amazon Web Services (AWS) so that other organizations could benefit
from Amazon’s experience and investment in running a large-scale distributed,
transactional IT infrastructure. AWS has been operating since 2006, and today serves
hundreds of thousands of customers worldwide. Today Amazon.com runs a global web
platform serving millions of customers and managing billions of dollars’ worth of
commerce every year. Using AWS, you can requisition compute power, storage, and other
services in minutes and have the flexibility to choose the development platform or
programming model that makes the most sense for the problems they’re trying to solve.
You pay only for what you use, with no up-front expenses or long-term
commitments, making AWS a cost-effective way to deliver applications. Here are some of
examples of how organizations, from research firms to large enterprises, use AWS today:
A large enterprise quickly and economically deploys new internal applications, such as
HR solutions, payroll applications, inventory management solutions, and online training
to its distributed workforce. An e-commerce website accommodates sudden demand for a
“hot” product caused by viral buzz from Facebook and Twitter without having to upgrade
its infrastructure. A pharmaceutical research firm executes large-scale simulations using
computing power provided by AWS. Media companies serve unlimited video, music, and
other media to their worldwide customer base
Users can access these services available on the "Internet cloud" without having
any previous know-how on managing the resources involved. Thus, users can concentrate
more on their core business processes rather than spending time and gaining knowledge
on resources needed to manage their business processes.
Cloud computing customers do not own the physical infrastructure; rather they
rent the usage from a third-party provider. This helps them to avoid huge. They consume
resources as a service and pay only for resources that they use. Most cloud computing
infrastructures consist of services delivered through common centers and built on servers.
Sharing resources amongst can improve, as servers are not unnecessarily left idle,
which can reduce costs significantly while increasing the speed of application
development.
Used by millions, amazon web services (or simply aws) is a secure cloud services
platform offering nearly everything businesses need to build sophisticated
applications with flexibility, scalability, and reliability. It is a “pay-as-you-go” billing
model with no upfront or capital costs. Amazon offers nearly 100 on-demand services
and that list is growing daily. Implementation is nearly instantaneous, available with
minimal setup.
Mastering aws isn ’ t just about building sites online. The service gives developers
access to an interconnected suite of features offering compute power, database
storage, content delivery, and a growing portfolio of related functionality. Businesses
around the world are using aws to grow and to scale. Cloud computing is here to stay
and the solutions available from amazon web services are accelerating its growth.
Amazon web services (aws) is a secure cloud services platform, offering compute
power, database storage, content delivery and other functionality to help businesses
scale and grow. In simple words aws allows you to do the following amazon web
services (aws) is a secure cloud services platform, offering compute power, database
storage, content delivery and other functionality to help businesses scale and grow. In
simple words aws allows you to do the following things-
Running web and application servers in the cloud to host dynamic websites.
Securely store all our files on the cloud so you can access them from anywhere.
Using managed databases like mysql, postgresql, oracle or sql server to store
information.
Deliver static and dynamic files quickly around the world using a content delivery
network (cdn).
Send bulk email to our customers
Adobe uses AWS to provide multi-terabyte operating environments for its customers
by integrating its system with AWS Cloud. Adobe can focus on deploying and
operating its own software instead of trying to deploy and manage the infrastructure.
Airbnb, the online vacation rental marketplace for property owners and travelers to
connect, maintains a huge infrastructure in AWS, using nearly all the available
services.
Autodesk develops software for the engineering, design, and entertainment industries.
Using services like Amazon RDS and Amazon S3, Autodesk can focus on developing
its machine learning tools instead of spending that time on managing the
infrastructure
America Online (AOL) has used AWS to economize, closing data centers, and
decommissioning about 14,000 in-house and co-located servers. They’ve moved
mission-critical workloads to the cloud, extended its global reach, and saved millions
of dollars on energy resources.
BitDefender is an internet security software firm and its portfolio of software includes
antivirus and anti-spyware products. Using Amazon EC2, they’re running several
hundred instances that handle about five terabytes of data. BitDefender also uses the
Elastic Load Balancer feature to load balance the connection coming in to those
instances across availability zones, providing seamless global delivery of service.
BMW uses AWS for its new connected-car application, collecting sensor data from
BMW 7-series cars to give drivers dynamically updated map information.
Canon's imaging products division benefits from faster deployment times, lower cost,
and global reach by using AWS to deliver cloud-based services such as mobile print
and office imaging products.
The world's largest cable company and the United States’ leading provider of internet
service, Comcast, uses AWS in a hybrid environment. Out of all the other cloud
providers, Comcast chose AWS for its flexibility and scalable hybrid infrastructure.
Docker is a company helping to redefine the way developers build, ship, and run
applications making use of containers. The Amazon EC2 container service helps them
do it.
Although much of the European Space Agency’s work is done by satellites, some of
the program's data storage and computing infrastructure is built on Amazon Web
Services.
The Guardian newspaper uses a wide range of AWS services to power an analytic
dashboard used by editors to see how stories are trending in real time.
The Financial Times is one of the world's leading business news organizations and
they use Amazon Redshift to perform their analyses. In fact, Redshift performed their
analyses so quickly, some thought it was malfunctioning. They were used to running
queries overnight. The Times found that the results were correct, just much faster.
General Electric (GE) is, at this moment, migrating more than 9,000 workloads -
including 300 disparate ERP systems - to AWS while reducing its data center footprint
from 34 to four by 2021.
Companies report a key set of reasons for not only selecting Amazon Web Services but
relying on it for crucial parts of their IT infrastructure:
Security and durability - AWS encrypt the data, offering end-to-end privacy and
storage.
4. AWS SERVICES
Management)Storage Service)
EC2 Compute -
(Elastic Cloud Security Group
Computing)
Cloud Watch
Storage)
It is used to set users, permissions and roles. It allows you to grant access to the
different parts of the aws platform.
AWS Identity and Access Management is a web service that enables Amazon Web
Services (AWS) customers to manage users and user permissions in AWS.
With IAM, Organizations can centrally manage users, security credentials such as
access keys, and permissions that control which AWS resources users can access.
Without IAM, Organizations with multiple users must either create multiple user
accounts, each with its own billing and subscriptions to AWS products or share an
account with a single security credential. Without IAM, you also don't have control
about the tasks that the users can do.
IAM enables the organization to create multiple users, each with its own security
credentials, controlled and billed to a single aws account. IAM allows the user to do
only what they need to do as a part of the user's job.
S3 basics:
It is object-based storage, i.e., you can store the images, word files, pdf files, etc.
It has unlimited storage means that you can store the data as much you want.
Files are stored in bucket. A bucket is like a folder available in s3 that stores the
files.
S3 is a universal namespace, i.e., the names must be unique globally. Bucket
contains a DNS address. Therefore, the bucket must contain a unique name to
generate a unique DNS address.
It displays the metrics automatically about every aws service that you choose.
You can create the dashboard to display the metrics about our custom application
and also display the metrics of custom collections that you choose.
You can also create an alarm to watch metrics. For example, you can monitor cpu
usage, disk read and disk writes of amazon ec2 instance to determine whether the
additional ec2 instances are required to handle the load or not. It can also be used to stop
the instance to save money.
Alarms: it allows you to set alarms to notify you whenever a particular threshold is
hit.
Logs: cloudwatch logs help you to aggregate, monitor, and store logs.
Events: cloudwatch help you to respond to state changes to our aws resources.
Amazon EC2 changes the economics of computing by allowing you to pay only
for the resources that you actually use. Rather than you previously buy physical
servers, you would look for a server that has more CPU capacity, RAM capacity
and you buy a server over 5 year term, so you have to plan for 5 years in advance.
People spend a lot of capital in such investments. EC2 allows you to pay for the
capacity that you actually use.
On demand
Reserved
Spot
Dedicated hosts
ON DEMAND
It allows you to pay a fixed rate by the hour or even by the second with no
commitment.
Linux instance is by the second and windows instance is by the hour.
RESERVED
It allows you to bid for a price whatever price that you want for instance capacity,
and providing better savings if our applications have flexible start and end times.
Spot Instances are useful for those applications that have flexible start and end
times.
DEDICATED HOSTS
A dedicated host is a physical server with EC2 instance capacity which is fully
dedicated to our use.
The physical EC2 server is the dedicated host that can help you to reduce costs by
allowing you to use our existing server-bound software licenses. For example,
Vmware, Oracle, SQL Server depending on the licenses that you can bring over to
AWS and then they can use the Dedicated host.
A security group acts as a virtual firewall for our instance to control inbound and
outbound traffic. For each security group, you add rules that control the inbound traffic to
instances, and a separate set of rules that control the outbound traffic.
Amazon Elastic Block Storage (EBS) provides persistent block storage volumes
for use with Amazon EC2 instances in the AWS Cloud. Each Amazon EBS volume is
automatically replicated within its Availability Zone to protect you from component
failure, offering high availability and durability.
Once the storage volume is created, you can create a file system on the top of these volumes, and
then you can run a database, store the files, applications or you can even use them as a block
device in some other way.
Magnetic
5. AWS APPLICATIONS
Storage and backup are important for any Cloud Computing service. AWS
provides you with reliable storage services like Amazon Simple Storage Service to store
large-scale data and backup services like AWS Backup to take backups of this data, which
is stored in other AWS services. AWS stores the data in three different availability zones
so that if one fails, you can still access our data. This makes AWS storage reliable and
easily accessible. Therefore, companies with huge application data to store and backup
securely can use AWS.
One of the biggest challenges faced by companies these days is Big Data. The
companies are struggling to store their large amounts of data using traditional methods.
With AWS Big Data storage services, they can manage to store their data even if the data
limit increases unexpectedly as AWS provides virtually unlimited data storage with
scalein and scale-out options. AWS offers easy access and faster data retrieval as well. For
data processing, it offers services like EMR, with which the companies can easily set up,
operate, and scale their big data. Therefore, efficiently storing and managing Big Data is
among the top AWS applications.
5.3 ENTERPRISE IT
AWS is a one-stop solution for any IT business. Many features of it such as secure
storage, scalability, flexibility, and elasticity support companies to innovate faster than
ever before. Using AWS for IT enterprises makes them profitable in terms of both money
and time. As AWS maintains its cloud architecture, it need not waste time and money on
professionals to do the same.
5.5 WEBSITES
AWS offers a wide range of website hosting options to create the best website for
customers. Its services like Amazon Lightsail have everything, such as a virtual machine,
SSD-based storage, data transfer, DNS management, and a static IP, to launch a website in
such a way that the user can manage the website easily. Amazon EC2, AWS Lambda,
Elastic Load Balancing, AWS Amplify, Amazon S3, etc. also help users build reliable and
scalable websites.
5.6 GAMING
AWS has been serving many gaming studios. Combining Amazon EC2 and S3
services with CloudFront enables gaming websites to deliver high-quality gaming
experiences to their customers regardless of location.
6.1 USER-FRIENDLY
This tops the list of the Amazon Web Services benefits. AWS is easy to use as the
platform is specially designed for quick and secure access. Users can modify their data
whenever they want, wherever they want. Most companies find starting with AWS as their
cloud provider much easier than using other providers, namely, Azure or Google Cloud
Platform. AWS provides you with all the information, documentation, and video
instructions to help you learn how to use all of its services.
6.2 FLEXIBLE
Flexibility is also the reason why many companies prefer AWS. It always lets you
use those operating systems, programming languages, and web application platforms that
you are comfortable with. With a service like AWS EC2, you can build our virtual
computing environment by setting up our preferable operating systems and applications.
AWS benefits provide all the best services that our application requires to function
seamlessly. It can also ease the migration process, and you can work on new solutions
simultaneously.
6.3 SECURE
Security is one of the best benefits of AWS cloud computing. As we know, security is
the uppermost priority for any company that is data-driven. AWS provides a highly secure
infrastructure to ensure the privacy of our data. Security professionals at AWS follow
different layers of data surveillance such as:
Data protection
Infrastructure protection
It is an end-to-end approach so that companies need not worry about their confidentiality,
and instead, they can focus on business development.
6.4 COST-EFFECTIVE
If you follow traditional methods, then you should build our own servers for
storing our data and applications, which consumes a good amount of both our time and
money. So instead of building our own expensive servers, you can use AWS where you
need to pay only for the tools and services that you use. AWS offers a pay-as-you-go
pricing method, which means that a company will only pay for the services that it needs
and has used for a period of time. It is the same as paying our electricity bill; you only pay
for the units you have consumed. These AWS services are unique and cheaper than the
traditional computing method.
Moreover, AWS is a no-commitment service. It does not ask for any time
commitment before you start using AWS benefits, so you can start or stop using it at any
time without hassles.
6.5 RELIABLE
Amazon offers the highest reliability for its customers. AWS serves over a million
active clients in more than 200 nations all over the world. An ultimate team of tech
professionals is working on data security. AWS performs its tasks accurately when it is
required and offers many services that make it more reliable like the capability to
automatically recover from failure. Also, services such as Amazon DynamoDB and
Amazon S3 store the data in three different availability zones so that even if two of them
fail to work, the users will still have their data intact. Therefore, AWS benefits are
trustworthy in terms of the services and security it provides.
AWS is scalable because the AWS Auto Scaling service automatically increases
the capacity of constrained resources as per requirements so that the application is always
available. Spinning up new servers is easy in AWS. If you want to add more servers, AWS
enables you to use them within minutes.
Elasticity is one of the AWS advantages. If you use fewer resources and you don’t
need the rest of them, then AWS itself shrinks the resources to fit our requirement. That is,
upsizing and downsizing of resources are easy here. Also, AWS always lets you know
how many resources you are using at the moment.
7. DISADVANTAGES OF AWS
This comes first in the list of a few disadvantages of AWS Cloud Computing. In
AWS, there are some limitations regarding EC2 and security. Companies that are using
AWS will have default resources to use, but the problem comes when default resource
limits vary from region to region. Although they can submit a request for more resources,
companies find it a disadvantage of AWS.
AWS is the latest invention with a complex infrastructure. Companies using AWS
as their Cloud Computing platform are looking to hire professionals to work on the cloud
infrastructure. However, only a few professionals are skilled in AWS or any cloud
provider. Companies are ready to invest in them but are facing difficulty in finding the
right professionals to work on AWS who can lead these organizations to better
performance. This can be a disadvantage of AWS in terms of time and money.
The price of AWS services varies based on factors such as the cost of land, fiber,
electricity, and taxes from region to region. Variations also occur when you need
additional tech support. Developer, Business, and Enterprise are the three available
packages you can choose from, and the price varies accordingly. This will impact our
monthly bill. But with services like Amazon CloudWatch, you can monitor our service
consumption, and Serverless Data Lake helps you calculate the cost of the services in our
region.
because of the power loss or network connectivity with the cloud provider. Anyway, it can
be rectified eventually.
8. CONCLUSION
“Amazon Web Services (AWS)” being the most famous and effective cloud
services platform can be trusted blindly. AWS is utilized by many large and small
companies and individuals all over the world. AWS supports a highly safe, scalable,
inexpensive infrastructure platform in the cloud. AWS has a diverse big data analytics and
application services. AWS has already became the age defining a cloud service provider.
Furthermore, it brings attention and expectation of the cloud consumers/service providers.
9. REFERENCES
1) https://docs.aws.amazon.com/ec2/index.html?nc2=h_ql_doc_ec2
2) https://data-flair.training/blogs/aws-application/
3) https://www.simplilearn.com/tutorials/aws-tutorial/what-is-aws
4) https://www.aboutamazon.com/what-we-do/amazon-web-services