Group items tagged

We always feel a shortage of our storage system, whether our wives have to give something special in our lunch box or whether we have to upload our application's files on a server. Well, file system problem is solved by AWS Elastic File System (EFS). AWS EFS provides a simple, scalable, elastic file system for Linux based workloads for use with AWS cloud services and on other propositions resources. Amazon Elastic File System (AWS EFS) is built to scale itself on demand to petabytes without disturbing our running application, it automatically growing and shrinking as you add or remove the files, so our application has the storage when they need it. That is something similar to our wives has a separate lunch box for our lunch instead of searching for wasting an hour in the kitchen. AWS EFS is meant to provide massively parallel access to thousands of Amazon EC2 (Elastic Compute Cloud) enabling our applications to achieve high levels of aggregate throughput and IOPS (Input/Output Operation Per Second) with consistently low latencies. It is distributed design avoids the bottlenecks and constraints inherent to traditional file servers. Amazon EFS is a regional service storing data within and across multiple Availability Zones (AZs) for high availability and durability. You can access the file systems across Availability Zone (AZs), regions, and Virtual Private Cloud (VPCs) and share files between thousands of Amazon EC2 instances and on-premises servers via AWS Direct Connect or AWS VPN (Virtual Private Network How to keep my loved one safe and secure? I mean data. Now, on the similar hand, we always wonder the lunch box tightly has given or not. Similarly, our application files are safe or not whether they can be attacked or not. Well, AWS EFS gives you the flexibility that who can access our file system and their content. Amazon VPC and network access control list give you the benefit in which you can provide, share or block the access to our EFS file system.

AWS Control Tower: AWS Control Tower is a service that enables you to enforce and manage governance rules for security, operations, and compliance at scale across all your organisations and accounts in the AWS Cloud. How it works: Setup: Setup the automated AWS control tower to monitor and governance rules of cloud premises. Apply guardrails: The second step is to apply the security promises to your cloud account. Like single-sign in and many more through IAM policies. Get Visibility: Monitor compliances and resources, have a look in every movement of resources and compliances. Why should we use Control tower? Setup basic practices of AWS environments in a few clicks. Standardise account provisions. Centralised policy management. Enforce governance and compliance proactively. Enable end user self services. Get continuous visibility of your AWS environment. Setup an AWS landing zone: Landing zone: a pre-configured, secure, scalable, multi-account AWS environment based on the best practice blue-prints. Multi-account management using AWS organisation. Identity and federated access management using AWS SSO. Centralised log archive using AWS cloudtrail and AWS config. Cross account audit using AWS IAM and AWS SSO. End user account provision using service catalog. Centralised monitoring and notifications using AWS cloudwatch and AWS SNS. Steps Involved: 1. Centralised identity and access: AWS SSO provides a default directory for identity. AWS SSO enables federated access management across all accounts in your organisation. Preconfigured groups (eg. AWS control tower administrator. Auditors. AWS service catalog end users). Preconfigured permission sets (e.g admin, read-only, write). Option to integrate with your managed or on-premises Active directory (AD). 2. Establish guardrails Guardrails are preconfigured governance rules for security, compliance and operations. Expressed in simple english to provide abstraction over granular AWS policies.