![IAAS Academy](/img/default-banner.jpg)
- Видео 31
- Просмотров 67 070
IAAS Academy
Великобритания
Добавлен 15 сен 2021
Develop Real-World AWS Skills With Our AWS Tutorials and Projects
IaaS Academy offers On-Demand training on AWS Certifications and Microsoft 365 Certification courses. As well as certification training programs, we offer how-to guides and tutorials and practice exam questions to help ace the official AWS and Microsoft exams.
Some of our more popular training programs include the AWS Certified Cloud Practitioner and the AWS Certified Solutions Architect Associate training services.
Our AWS and Microsoft courses come with tons of labs and hands-on exercises as well as assignments to help you gain real-world experience in cloud technologies. We also design content for other training partners and publish study guides and revision material.
Visit us at iaasacademy.com and fast-track your cloud computing career today.
IaaS Academy offers On-Demand training on AWS Certifications and Microsoft 365 Certification courses. As well as certification training programs, we offer how-to guides and tutorials and practice exam questions to help ace the official AWS and Microsoft exams.
Some of our more popular training programs include the AWS Certified Cloud Practitioner and the AWS Certified Solutions Architect Associate training services.
Our AWS and Microsoft courses come with tons of labs and hands-on exercises as well as assignments to help you gain real-world experience in cloud technologies. We also design content for other training partners and publish study guides and revision material.
Visit us at iaasacademy.com and fast-track your cloud computing career today.
Introduction to AWS Elastic Load Balancers (with hands-on demo)
📚 Master AWS Elastic Load Balancers | Classic, Application, Network & Gateway Explained!
In this comprehensive video, we dive deep into AWS Elastic Load Balancers, covering the four key types: Classic Load Balancer, Application Load Balancer, Network Load Balancer, and Gateway Load Balancer. Discover their unique features and understand how each type can optimize your cloud architecture.
🔧 Hands-On Demo: Learn how to deploy an Application Load Balancer step-by-step with our practical demonstration. This video is designed to give you real-world skills that are essential for managing traffic and ensuring high availability in your AWS environment.
🎓 Certification Prep: This video is a must-watc...
In this comprehensive video, we dive deep into AWS Elastic Load Balancers, covering the four key types: Classic Load Balancer, Application Load Balancer, Network Load Balancer, and Gateway Load Balancer. Discover their unique features and understand how each type can optimize your cloud architecture.
🔧 Hands-On Demo: Learn how to deploy an Application Load Balancer step-by-step with our practical demonstration. This video is designed to give you real-world skills that are essential for managing traffic and ensuring high availability in your AWS environment.
🎓 Certification Prep: This video is a must-watc...
Просмотров: 148
Видео
Enforcing AWS IAM Password Policies - IAM Password Complexity Rules
Просмотров 1533 месяца назад
Using AWS IAM (Identity and Access Management) Password Policies offers several benefits: 1. Enhanced Security: Password policies enable you to enforce strong password requirements such as minimum length, complexity, and expiration. This helps reduce the risk of unauthorized access due to weak or compromised passwords. 2. Compliance: Many industries have specific compliance requirements regardi...
Which AWS Identity Service Should You Use?
Просмотров 2793 месяца назад
AWS offers multiple services to help you manage authentication and authorization for your end users, applications and even resources that you create in your AWS account. You can use AWS Identity and Access Management to create IAM users, groups and IAM roles. IAM roles are designed to create identities that are independent of any user and can be assumed that either human users or resources runn...
AWS Fargate Tutorial - AWS Container Tutorial
Просмотров 7 тыс.5 месяцев назад
This comprehensive tutorial teaches how to deploy applications using Amazon Elastic Container Service (ECS) and Fargate. Amazon ECS is a fully managed container orchestration service that allows you to quickly run, scale, and manage containerized applications. Fargate is a serverless compute engine that enables you to run containers without managing the underlying infrastructure. In this video,...
AWS Serverless Tutorial - Mini Project
Просмотров 1,4 тыс.7 месяцев назад
Welcome to AWS Projects, your gateway to gaining practical experience and honing your technical skills with AWS technologies! In this video, you will learn how to deploy a fully functioning web application using serverless technologies - AWS Lambda, API Gateway, Amazon S3, Amazon DynamoDB, Amazon Simple Email Service (SES) and IAM Roles. That means no patching, maintenance, or upgrades and no n...
AWS Well Architected Framework CLF C02 Exam Topic
Просмотров 1,6 тыс.7 месяцев назад
The AWS Well Architect Framework enables you to design and build secure, dependable, efficient, economical, and sustainable solutions on the AWS Cloud. It offers a means for consistently evaluating your architectures based on best practices and pinpointing opportunities for enhancement. The AWS Well-Architected assessment involves answering multiple questions on the design and build of your sol...
AWS Cloud Adoption Framework (CAF) - An AWS Cloud Practitioner (CFL-C02) Exam Topic
Просмотров 5 тыс.8 месяцев назад
Preparing for the AWS Certified Cloud Practitioner Exam requires a thorough understanding of cloud computing and the AWS ecosystem. The exam will test your knowledge across several domains. These are: Domain 1: Cloud Concepts (24% of scored content) Domain 2: Security and Compliance (30% of scored content) Domain 3: Cloud Technology and Services (34% of scored content) Domain 4: Billing, Pricin...
AWS Elastic Beanstalk Tutorial - Mini Project
Просмотров 13 тыс.Год назад
Welcome to AWS Projects, your gateway to gaining practical experience and honing your technical skills with AWS technologies! This informative video delves into the power of AWS Elastic Beanstalk, an exceptional Platform as a Service (PaaS) solution that eliminates manual infrastructure configuration when deploying your applications on the AWS cloud. By the end of this tutorial, you'll have han...
AWS VPC Fundamentals - Introduction to IP Addresses and Port Numbers - Part 1
Просмотров 483Год назад
Welcome to IaaS Academy (iaasacademy.com) In this video, we discuss basic networking concepts and examine IP Addresses and Port numbers as a prerequisite to architecting and configuring your AWS Virtual Private Cloud (VPC). We compare IPv4 with IPv6 and look at how the IANA proposed conserving IPv4 addresses by allocating specific ranges for private use only). We also look at how you can use DH...
Introduction to AWS IAM - Understand the basics of IAM and how it works.
Просмотров 440Год назад
Introduction to AWS IAM - Understand the basics of IAM and how it works.
Improve Application Security with AWS Secrets Manager
Просмотров 499Год назад
Improve Application Security with AWS Secrets Manager
Manage EC2 Instances with AWS Systems Manager (Session Manager)
Просмотров 1,2 тыс.Год назад
Manage EC2 Instances with AWS Systems Manager (Session Manager)
AWS Systems Manager Run Command - Managing Servers Securely
Просмотров 927Год назад
AWS Systems Manager Run Command - Managing Servers Securely
Enable Elective Guardrails in AWS Control Tower
Просмотров 1,9 тыс.Год назад
Enable Elective Guardrails in AWS Control Tower
Enable AWS Control Tower For Existing Organizations - AWS How To Guide
Просмотров 3,5 тыс.Год назад
Enable AWS Control Tower For Existing Organizations - AWS How To Guide
Configure Cross-Account Access with AWS Organizations
Просмотров 8 тыс.Год назад
Configure Cross-Account Access with AWS Organizations
Create an AWS Organization OUs and SCPs - AWS How-To-Guide
Просмотров 3,1 тыс.Год назад
Create an AWS Organization OUs and SCPs - AWS How-To-Guide
AWS IAM permission boundaries - Hands-on Tutorial
Просмотров 1,9 тыс.2 года назад
AWS IAM permission boundaries - Hands-on Tutorial
Introduction to AWS Service Control Policies SCPs
Просмотров 1,1 тыс.2 года назад
Introduction to AWS Service Control Policies SCPs
Automatically Start Stop EC2 Instances with AWS Lambda and Amazon EventBridge
Просмотров 7 тыс.2 года назад
Automatically Start Stop EC2 Instances with AWS Lambda and Amazon EventBridge
Section 2 2 Introduction to AWS Organizations
Просмотров 6832 года назад
Section 2 2 Introduction to AWS Organizations
AWS Multi Account Strategy - An Architectural Reference
Просмотров 9482 года назад
AWS Multi Account Strategy - An Architectural Reference
Enable IAM Users to manage their own MFA settings - AWS How-To-Guide
Просмотров 2,7 тыс.2 года назад
Enable IAM Users to manage their own MFA settings - AWS How-To-Guide
IAM Cross Account Access - AWS How-To-Guide
Просмотров 1,7 тыс.2 года назад
IAM Cross Account Access - AWS How-To-Guide
Delete Amazon Glacier Vault - AWS How-To-Guide
Просмотров 2,4 тыс.2 года назад
Delete Amazon Glacier Vault - AWS How-To-Guide
At 32:07, you say that "Each tasks are isolated (Okay) and does not share the underlying kernel, CPU or memory with another task.". But later you say that the tasks access a shared pool of resources. I'm confused here, I think the first statement is completely right.
Hi Jay, Sorry for the confusion, but yes, each task is deployed in an isolated environment. When I said a shared pool of resources, what you must remember is that Fargate ECS tasks are likely to run on physical hardware that are shared by other customers or your other applications. However, when you deployed two tasks that belong to a specific application and cluster, those tasks will be isolated on different resources. but ultimately, you are still sharing a pool of backend resources other application stacks or customers. Hope this clarifies the statement.
Why did you need to specify the ecr repository url in the docker build command? the image is stored locally until you push it to the repo anyway right? thanks!
Hi Harry You are right, you do not need to specify the ECR repository URL during the build command. Howerver, you would then need to at least tag your image so you can push the image to repository. The step shown in the video basically bypasses that step. So if you look at the ECR push commands you will note that you would need to tag it before you push it. So this step in the video just avoids that step. But both options are correct. Hope this helps
Didn't finish it yet but seems to be good, thanks anyway for sharing this.
you nailed it!🙌
@@DummyAccount-io9xl thank you
Thank you for the great content! So much well structured and explained useful info! I'm trying now to write my own backend in node.js, and I have a question: How does the DB credentials rotation is done on the backend side? Is the retrieving the secret from SecretsManager and reestablishing connection to the DB is done for every request?
Also, NAT gateway costs some 0.062 USD per hour, which means that per month that would cost around $44 (not "a couple of dollars"). Just to have the ability to do some apt updates... is there cheaper solutions?
There is a file in the repository called db.php. This file retrieves the secret name from the #Amazon ECS Environmental Variable and then proceeds to dynamically retrieve the credentials from #AWS Secrets Manager. This means that whenever the script is executed, it will query AWS Secrets Manager for the current credentials. This is advantageous because: - It ensures that the script always has access to the latest credentials. - It reduces the risk of hardcoding sensitive information like database credentials directly in the code. Have a look at the db.php file which is included in the zipped file. Hope this helps Thanks
Depending on which updates you need, you could store them in an S3 bucket and retrieve them via a VPC endpoint. This article provides more details - repost.aws/questions/QUmfyiKedjTd225PQS7MlHQQ/vpc-nat-gateway-vs-vpc-endpoint-pricing
how much is that expected cost for this entire setup? for every month.
I really feel like I should be paying to watch this video, it feels wrong not to pay... AMAZING CONTENT!...
@@sean_reyes Haha… thank you for you kind feedback. All you need to do is like, subscribe and please share! Best wishes
Do you have a Linux script to that matches the Windows script you shared in the tutorial?
Hi For the run.txt file can you try the following: Step 1: Initiate Inventory Retrieval Job aws glacier initiate-job --account-id [ACCOUNT_ID] --vault-name [VAULT_NAME] --job-parameters '{"Type": "inventory-retrieval"}' Replace [ACCOUNT_ID] and [VAULT_NAME] with the appropriate values. Step 2: Describe the Job aws glacier describe-job --vault-name [VAULT_NAME] --account-id [ACCOUNT_ID] --job-id [JOB_ID] Replace [VAULT_NAME], [ACCOUNT_ID], and [JOB_ID] with the appropriate values. Step 3: Retrieve Job Output aws glacier get-job-output --vault-name [VAULT_NAME] --account-id [ACCOUNT_ID] --job-id [JOB_ID] output.json Replace [VAULT_NAME], [ACCOUNT_ID], and [JOB_ID] with the appropriate values. The job output will be saved in output.json. Step 4: Extract Archive IDs from the Output jq '.ArchiveList[] | .ArchiveId' output.json > archiveIds.txt This command extracts Archive IDs from output.json and saves them to archiveIds.txt. Step 5: Delete Archives aws glacier delete-archive --vault-name [VAULT_NAME] --account-id [ACCOUNT_ID] --archive-id [ARCHIVE_ID] Replace [ARCHIVE_ID] with the specific Archive ID from archiveIds.txt. Note: In Linux, single quotes (') are typically used around JSON parameters, and you should ensure that you’re using straight quotes rather than curly quotes. The rest of the commands remain largely the same as they are on Windows. Then for the script: #!/bin/bash # Set the vault name and file vault="panamericaglacier" file="archiveIds.txt" count=1 echo "$vault $file $count" # Check if the file exists if [ -f "$file" ]; then # Read each line from the file while IFS= read -r line; do echo "Deleting Archive $line" echo "Count: $count" aws glacier delete-archive --account-id [ACCOUNT_ID] --vault-name "$vault" --archive-id="$line" --profile [PROFILE_NAME_IF_REQUIRED] count=$((count + 1)) echo "$line" done < "$file" else echo "File does not exist" fi exit 0 Ensure you have the AWS CLI installed to the latest version
Thanks for the video realy helpful man please remove ur account id from the github's vault.bat file
Hi Raju Thank you so much for your valuable feedback and suggestion. I have removed the account-ID and replaced with a placeholder. Awesome... :) Have a great day ahead!
Loose coupling dependencies is part of AWS Well Architected Framework topic?
Great video and very nice explanation. Pity not so many views...this is great stuff! Thank you!
Please make videos on sqs
Great commentary ! Excellent!
Glad you liked it!
What an explanation..!! It's very clear and simple to understand. Thank you.
Hello! This video has been great for helping me create elastic beanstalk, but i am facing server error "100.0 % of the requests are failing with HTTP 5xx. Process default has been unhealthy for 1 hour 17 minutes (Target.ResponseCodeMismatch).1 hour" every thing is properly setup please help me out. Thank you so much.
Thank you for the wonderful video. I followed the same steps however I am getting a 5XX error. I used the same file you provided. could you please let me know how to debug and fix PHP errors?
Hi Bharat I think there was some issue with the code. I have re-uploaded the correct code zip file which you saw in the video. The file name eb-rds-todo-app-code-v2 (1).zip Also uploaded a sample JSON file for the IAM policy that needs the Secret ARN. I have retested today using this code and its works well. Please note that the code is designed to run in us-east-1. It has been tested in this region and works there. The code would need a change if you run in other regions in the server.php file. Try the updated code... hope this helps Best wishes Rajesh
@@awstraining Thank you for sharing the updated application code. I selected PHP 8.3, which was not compatible and gave a 5XX error, so I created another application using PHP 8.1, and it worked fine.
Perfect!! Thanks 🙌
Thank you. Appreciate the feedback and support
Thank you for such a descriptive tutorial on the subject. All the required concepts were covered in just one video that is so easy to understand!
Thank you for your feedback. Yes, I wanted to ensure that anyone viewing this tutorial can easily learn how to deploy a multi-tier application stack using AWS Elastic Beanstalk. Best wishes
Excellent .
Many thanks!
good job.. keep it up
Great explanation of concept AWS ebs , vpc subnets public ,app and db, rotation of db secrets and lambda functions , Load balancer and security group, instances profile and inline policy....🔥🔥🔥🔥🔥🔥🔥🔥
Thank you for your valuable feedback. Glad the AWS Elastic Beanstalk Stalk Tutorial was helpful. Best wishes
Thank you for comprehensive tutorial
Glad it was helpful!
Great thorough explanation of AWS ElastcBeanstalk
Glad you liked it!
Nice explanation bro
Thank you 🙂
having a simple website example gave me the courage to dive in
Awesome video to learn elastic bean stalk implementation, than you!
Thank you for your valuable feedback - Please do like and share the videos and channel with your colleagues. Best wishes.
Could you please clarify when is the next video on Beanstalk?
We will be producing some additional Beanstalk Advance topics soon. I will keep you updated
Hello! This video has been great for helping me set up a new VPC for my Elastic Beanstalk Java application. We were using the default VPC which I quickly found out to be insecure. I have a question about the NAT Gateways which you mentioned at 51:36 in the video. If I make 2 NAT Gateways for my 2 public subnets which are in different availability zones, how do I go about creating a route to the internet (0.0.0.0/0) for both NAT gateways on the main route table? It will only allow me to create one route to the internet for one of the NAT gateways (like you do in the video), which makes sense. Do I need to create another route table for my second NAT gateway? My confusion here is the route you created for the NAT gateway is on the Main Route table, and there can only be one Main Route Table.
Hi Thank you for your message. Yes, in the video tutorial, I only use 1 NAT Gateway because since it was a LAB, I did not want to create additional NAT Gateways as they are a chargeable service and do not fall within Free Tier, If you need to deploy two NAT Gateways, one in each public subnet, then you will need to also create an additional route table. Normally your private subnet attach themselves to the Main Route Table as a default behavior. If you plan to use two NAT Gateways, then it also means you should create at least two Route tables - one for each Private Subnet hosting your EC2 instances which Elastic Beanstalk will deploy. Then you can configure each route table to point to the NAT Gateway target for Internet Access (0.0.0.0/0). You would then need to disassociate those pirvate app subnets from the main route table and attach them to the two new route tables you created. This means that only the database subnets will be attached to the main route table. This way the instances in each private app subnet will now access the Internet via their relevant NAT Gateways in their availability zones. Adding two NAT gateways offers redundancy and is good practices for production environments, Hope this helps... Rajesh
Such great detailing and a clear explanation! I would recommend this to my friends. Thank You!
Thank you for your feedback. We are bring more mini project tutorials for AWS soon
Thank you for such a great and easy to follow tutorial. I loved the hands on that I can do also.
Thank you for your valuable feedback. Really appreciate it. We will be bring more videos and how-to-guides for AWS
Great stuff, just a suggestion, if there can be follow up videos on troubleshooting if things are not working as expected because of some mistake while setting up..
This looks familiar. It's similar to azure run command under operation under vm. Thanks. I assume it is using ssm-user as sudoer to implement elevated actions. I can even deploy or run aws s3 ls command without ssh into the vm.
good work in explaining that 🙂
Thanks! 🙂
Thank you! Great tutorial
Thank you for your feedback. Please do share
really very helpful
Thank you for your valuable feedback
Thank you so much for this. This is exactly the type of project/tutorial I've been searching for. I'm 49 YO and in the process of a career change and moving into the cloud space following the Solutions Architect route. This is brilliant!
Thank you for your valuable feedback. Yes, learning the principles of AWS serverless architectures is critical for any one on an Solutions Architect role. It not only enables you to build with agility but can also be far more cost effective if done correctly. Best wishes on the career change!
Great tutorial. Very organized and detailed.
Glad it was helpful!
I am facing this error Failed to load resource: the server responded with a status of 403 (Forbidden)
Hi Divya, as discussed, this is likely to be an issue with a misconfiguration of the Environmental variables where a misspelled variable prevented the code from running. When we checked the health check file itself, that seems to be in the right location anyway. Hope this helps.
i ahve one question, that can we only invite or add root accounts to AWS organization or we can IAM accounts too ?
Yes, you can configure IAM accounts which need to be able to assume the Cross Account Access Role (OrganizationAccountAccessRole) and then they can perform the cross account access.
Thanks a lot.. I enjoy your videos. The theory you do before the hands-on is what I enjoy best. Plus, the scenario of a virtual organization is just wonderful. It really helps me understand what I'm about to do and why I do it.. Thanks again
Thank you for your feedback. I'm glad to hear you found the tutorial useful on Amazon ECS Fargate.
Awesome.!
Thanks ✌️
Awesome thank you!
You're welcome!
Wonderful tutorial. Thank you 🙏. I have a little question. Who is responsible for writing the code for lambda function? Like isn't it a problem to just copy the code and not know programing to be able to write one? Please enlighten me on this
This is a good question, and it depends on your role within the organization. As a Solutions Architect, you may have developers building application code for you - you may just be responsible for the overall architecture design and incorporating additional infrastructure builds, standards, security and design for cost optimization. Your team could comprise front-end and back-end developers, separate individuals you work with to build end-to-end solutions. Obviously, if you have a developer role in the organization, you and your colleagues would also be building the code. Nevertheless, the demarcation between architects and developers is much less clear today than it was years ago. Even Solutions Architects are expected to work with code (at least Infrastructure as Code) to build solutions more reliably and consistently. And post this, having some knowledge of Python is always good. Hope this helps...
@@awstraining ok so if i get you well, in the scenario in this video, the lambda code is written by the developers who equally wrote the code for the app?.
Yes, but it doesn't always have to be like that - front end developers for the S3 Website Code may be different from the ones who write backend operations.
@@awstraining okkk great thank you very much. I am working on projects that can help me acquire more skills in aws. Your Chanel is definitely going to be very help. Thanks again
That was quick and informative😃
Thank you for your valuable feedback on our AWS How-To-Guides. Best wishes
Thank you for this tutorial, very clear. I tried to replicate in my zone (eu-south-1) following all steps: at the end it seems the app is not working resulting into HTTP 500 error. The only change I did is in server.php file, where I changed the region of secret manager, setting it to 'region' => 'eu-south-1'. May be I should do this change somewhere else? Thanks
Thank you for your valuable feedback. I presume that the region is enabled for your account. The change to the server.php file for the region for secret manager should not give such an error. The secret simply enables the application to authenticate against the database and perform CRUD operations. You should still be able to access the front website. It is more likely to be an issue with the network configuration such as security groups, IGW or NAT or the route tables not been properly configured. It could also be that the server did not install the application as it did not have the right IAM role attached to it. Could I request you to check these parameters and let me know if that helps... let me know how you get on. Best wishes Rajesh
@@awstraining , thanks for your response. I tried to segment the code to isolate the error and I cam to the conclusion that the problem id db connect (server.php line 38 - $db = mysqli_connect(DB_SERVER, DB_USERNAME ...). Commenting it (and doing small modifications to avoid php error on missing $db variable) the application works (of course user can't do any action, the db is missing !). "devdb" is not accessible using usual tools, so I can't check if it exists, the same for "devdb" schema; again, error_log messages are not included int EBS logs, so I can just guess ... I also re-create the db following the tutorial, but nothing change. Any suggestion ?
Just to confirm are you using the same server.php file provided in the GitHub repo -I only ask because my line 38 is different. $result = $client->getSecretValue([ 'SecretId' => $_ENV["SECRET_NAME"], ]); // result contains a few key-value about that secret. // The key named SecretString has the username and password encoded as a plain json string // Decode the json using json_decode function to get username and password $myJSON = json_decode($result['SecretString']); define('DB_SERVER', $_ENV["DB_ENDPOINT"]); define('DB_USERNAME', $myJSON->username); define('DB_PASSWORD', $myJSON->password); define('DB_DATABASE', $_ENV["DB_NAME"]); $db = mysqli_connect(DB_SERVER, DB_USERNAME, DB_PASSWORD, DB_DATABASE); $table = "user"; Also did you create the secret in Secret Manager..? Would you be able to share any screenshots?
Also this might be a silly question so I apologize in advance, but are all your resources in eu-south-1 (rds, secret manager, etc)
@@awstraining I just dropped some empty line, so the connect has changed position. Sorry. I also confirm that all resources are in eu-south-1 zone. Please, Here blow two links to secret and db screenshot drive.google.com/file/d/17ZgmWSXLYIt3kdU4YrQFIV4MwNtYERI1/view?usp=sharing, drive.google.com/file/d/1B4iTMACOIk-RKVejhZRzM1NOkKmesjPD/view?usp=sharing
Good one
Thank you! Cheers!
thanks a lot..Very well explained step by step...can i use this as my capstone project
Thank you for your valuable feedback. Yes, ofcourse, feel free to us it for your capstone project. The link to the application code is provided in our GitHub repo. Best of luck
Thank you for such a descriptive tutorial on the subject. All the required concepts were covered in just one video that is so easy to understand!
Thank you for your valuable feedback. We hope to bring more AWS training videos like this in the near future. Please do like and share...
39:28 Risk Management is actually from the Governance perspective, it's probably referring to the risk of certain decisions made by the Business perspective, in reality half of the content of the AWS CAF is BS in real life IT business, I'm talking form the experience.
Wonderful ! .............. Amazing ! Thank so much
Thank you too!