You're reading from AWS Certified Solutions Architect ??? Associate Guide

Product typeBook

Published inOct 2018

PublisherPackt

ISBN-139781789130669

Edition1st Edition

Tools

AWS

Concepts

IT Certification

Authors (2):

Gabriel Ramirez

Stuart Scott

View More author details

Hybrid Cloud Architectures

In this chapter, you will learn about networking on AWS with the Virtual Private Cloud (VPC), and how every object interacts to design a network architecture for every use case. The VPC service is flexible enough to let network administrators and developers create the underlying infrastructure to support all kinds of applications and workloads. The networking infrastructure has to be secure, scalable, and highly flexible, to provide the foundation structure for any use case.

We will cover the following topics in this chapter:

Effective migration to the cloud
Extending your data center
Storage gateway use cases
The Database Migration Service

Effective migration to the cloud

Several factors can be taken into account when creating a migration strategy. If you have multiple applications with different levels of complexity, start with the easiest ones (the applications that have portable architectures, with a smaller business impact) and move forward to more complex scenarios (for example, proprietary, licensed, or highly coupled monolithic applications).

AWS provides a reference to effectively migrate to the cloud via the following steps (ordered from simple to complex):

Rehost: This can be done with portable software stacks, like Java virtual machines, Docker containers or VMware, Microsoft Hyper-V, and Citrix Xen virtualization technologies, that go back and forth to EC2, with the VM Import/Export service.
Replatform: The amount of effort to configure and tune applications is higher than rehosting, but only takes...

Extending your data center

Many users and companies, across industries, see AWS as a cloud strategy that's used to gain strong competencies, data center expansion, or disaster recovery options. It gives companies the best of both IT worlds, and will improve performance. You should be prepared for traffic spikes, and should increase your company agility by extending or moving workloads to AWS.

There are two common models for deployment: all in the cloud, or hybrid deployment. AWS provides all of the necessary components to enable customers to improve the efficiency of their operations, while keeping local infrastructure and internal systems that can burst to the cloud.

All in the cloud

Efforts are put in place so that...

Storage gateway use cases

When a migration or disaster recovery project must be used, hybrid storage solutions must be evaluated, and that is where the storage gateways come to the rescue. With virtualization methods, you can drop in a storage solution that is compatible with your existing products. It is imperative that the cloud solution can be integrated with on-premises drivers and standard storage protocols, like NFS v3, v4.1, and iSCSI. You can use local caching capabilities and security with SSL and AES 256.

You can use a storage gateway as a disaster recovery strategy for continuous incremental backups failing over to the cloud.

Network filesystems with file gateways

The NFS protocol is widely supported by many operating...

The Database Migration Service

Database migration is always a complex task, and it must be evaluated, validated, and executed carefully. The AWS Database Migration Service deals with all of the complexity of executing a replication, multi-engine job via a migration instance, and keeps the origin and destination databases in sync. DMS can be used to migrate existing OLTP and OLAP workloads into the AWS cloud.

DMS can be used for one-time and ongoing live migrations with zero downtime. Multiple databases (shards) can be consolidated into a single, master database. This results in a lot of flexibility for service-oriented architectures, like microservices and database federation patterns.

If your migration can be done with downtime, the simplest strategy is to use vendor tooling to perform the activity, like .bak files, pg_dump, or textual logic dump files (.sql). You can select...

Summary

In this chapter, you learned about one of the most important factors of operating services in the cloud: network design. We covered the various integration options available to us. We also discussed hybrid architectures, including the most popular deployment modes in the cloud or hybrid. In the hybrid deployment mode, multiple connectivity options were discussed, like VPNs and Direct Connect. The AWS Storage Gateway was also discussed, along with the use cases for each type of gateway. Finally, the Database Migration Service came into play, with several use cases for one-time and continuous database migrations.

Hybrid Cloud Architectures with AWS: https://aws.amazon.com/enterprise/hybrid/
AWS Migration Whitepaper: https://d1.awsstatic.com/whitepapers/Migration/aws-migration-whitepaper.pdf
Amazon VPC Limits: https://docs.aws.amazon.com/vpc/latest/userguide/amazon-vpc-limits.html
Frequently asked questions about Amazon VPC: https://aws.amazon.com/es/vpc/faqs/
AWS Direct Connect FAQs: https://aws.amazon.com/directconnect/faqs
AWS Storage Gateway FAQs: https://aws.amazon.com/storagegateway/faqs/

The rest of the chapter is locked

You have been reading a chapter from

AWS Certified Solutions Architect ??? Associate Guide

Published in: Oct 2018Publisher: PacktISBN-13: 9781789130669

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

undefined

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $15.99/month. Cancel anytime

Authors (2)

Gabriel Ramirez

Gabriel Ramirez is a passionate technologist with a broad experience in the Software Industry, he currently works as an Authorized Trainer for Amazon Web Services and Google Cloud. He is holder of 9/9 AWS Certifications and does community work by organizing the AWS User Groups in Mexico.
Read more about Gabriel Ramirez

Stuart Scott

Stuart Scott is the AWS content lead at Cloud Academy where he has created over 40 courses reaching tens of thousands of students. His content focuses heavily on cloud security and compliance, specifically on how to implement and configure AWS services to protect, monitor and secure customer data in an AWS environment. He has written numerous cloud security blogs Cloud Academy and other AWS advanced technology partners. He has taken part in a series of cloud security webinars to share his knowledge and experience within the industry to help those looking to implement a secure and trusted environment. In January 2016 Stuart was awarded 'Expert of the Year' from Experts Exchange for his knowledge share within cloud services to the community.
Read more about Stuart Scott

Other recommended products

Related to this chapter

AWS Certified Security – Specialty Exam Guide

Amazon has come up with Specialty certifications which validates a particular user's expertise that he/she would want to build a career in. This Guide will be a companion to getting skilled with complex and creative security solutions.

BookSep 2020558 pages

AWS Security Cookbook

AWS Security Cookbook lists all the practical solutions to the common problems faced by individuals or organizations in securing their instances. Here readers will learn to troubleshoot security concerns and understand additional patterns and services for securing AWS infrastructure.

BookFeb 2020440 pages

Practical AWS Networking

Amazon Web Services has dominated the public cloud market by a huge margin and continues to be the first choice for many organizations. Networking has been an area of focus for all the leading cloud service providers. AWS has a suite of network-related products which help in performing network related task on AWS.

BookJan 2018258 pages

AWS: Security Best Practices on AWS

With organizations moving their workloads, applications, and infrastructure to the cloud at an unprecedented pace, security of all these resources has been a paradigm shift for all those who are responsible for security; experts, novices, and apprentices alike.

BookMar 2018118 pages

Designing AWS Environments

AWS is one of the most popular public clouds available in the market today. Small to medium-sized businesses, as well as large business organizations, utilize AWS to set up highly scalable and agile infrastructure to meet faster time to market. This book provides hands-on details with respect to the fundamentals of designing an AWS environment with security and governance.

BookSep 2018174 pages

Mastering AWS Security

Security is a key ingredient when it comes to workloads deployed in cloud. Security is highest priority for any organization and it is considered job zero at AWS. Our book will dig deep into the achieving end to end automated security for all workloads deployed, running and stored in AWS cloud.

BookOct 2017252 pages

AWS Networking Cookbook

With a lot of enterprises moving towards cloud, the need for advanced cloud networking has significantly increased. This book follows a recipe-based approach starting with basic topics to covering the pain points of cloud networking, and will teach you to perform complex networking tasks.

BookAug 2017366 pages

Amazon Web Services Bootcamp

AWS Bootcamp is designed to teach you how to build and manage AWS resources using different ways. This highly practical guide leverages the reliability, versatility, and flexible design of the AWS Cloud. It enables you to perform tasks such as hosting multi-tier websites, running large-scale applications, data storage and archival, and a lot more with ease.

BookMar 2018338 pages

AWS for System Administrators

AWS for System Administrators covers a variety of tools, techniques, tips, and tricks for building highly available and fault-tolerant infrastructure. You’ll get to grips with AWS fundamentals and concepts with the help of step-by-step explanations and practical code examples.

BookFeb 2021388 pages

AWS Administration - The Definitive Guide

AWS is at the forefront of Cloud Computing today, providing a plethora of ready to use services that help organizations quickly build, scale and deploy massive workloads on the Cloud. This book is specially designed for users who wish to explore and get started with some of the most commonly used AWS services in a quick and efficient way.

BookMar 2018358 pages

AWS Certified Developer - Associate Guide

With rapid adaptation of the cloud platform, the need for cloud certification has also increased. This is your one stop solution and will help you transform yourself from zero to certified. This guide will help you gain technical expertise in the AWS platform and help you start working with various AWS Services.

BookJun 2019812 pages5

AWS Tools for PowerShell 6

Amazon Web Services is the leading cloud platform today. Using Windows PowerShell, this book shows you exactly how to automate all aspects of AWS. You can take advantage of the amazing power of the cloud, yet add powerful scripts and mechanisms to perform common tasks faster than ever before. In this book, you will learn to use Amazon Web Services to automate and manage Windows servers. You will also gain a good understanding of automating the AWS infrastructure using simple coding.

BookAug 2017372 pages

Personalised recommendations for you

Based on your interests and search pattern

Designing and Implementing Microsoft Azure Networking Solutions

Designing and Implementing Microsoft Azure Networking Solutions Exam Ref AZ-700 is an all-encompassing guide to the AZ-700 exam and contains all the information you need to succeed in the world of virtual networking with Azure. With this book, you will be fully prepared for the exam and the world of cloud networking.

BookAug 2023524 pages

Microsoft 365 Security, Compliance, and Identity Administration

The Microsoft 365 Security, Compliance, and Identity Administration is a comprehensive guide that helps you employ Microsoft 365's robust suite of features and empowers you to optimize your administrative tasks.

BookAug 2023630 pages

Zero Trust Overview and Playbook Introduction

Get started on Zero Trust with this step-by-step playbook and learn everything you need to know for a successful Zero Trust journey with tailored guidance for every role, covering strategy, operations, architecture, implementation, and measuring success. This book will become an indispensable reference for everyone in your organization.

BookOct 2023240 pages

The Self-Taught Cloud Computing Engineer

This self-study book helps you master multiple clouds, including AWS, Azure, and GCP, and serves as a roadmap to becoming a certified cloud computing expert. The book will guide you to develop a professional cloud career by helping you build a broad cloud knowledge base, developing hands-on cloud computing skills, and getting cloud certified.

BookSep 2023472 pages

Technology Operating Models for Cloud and Edge

This book will help you build and create ownership of a technology operating model, as well as connect your leadership with engineering and operations, keeping your internal and external customers in mind. It provides practical tips on why, where, and how to make the cloud and edge platform paradigm sing for you, your team, and your organization.

BookAug 2023228 pages

Azure Architecture Explained

Azure is the preferred platform to build mission-critical and secure apps. This book provides comprehensive coverage of essential Azure products, services, and solutions vital for every solution architect's success. Elevate your knowledge and master the critical components of Azure to excel in your role with Azure Architecture Explained.

BookSep 2023446 pages

Pentesting Active Directory and Windows-based Infrastructure

This practical guide helps you explore the pentesting of Microsoft infrastructure in detail, and enhances your offensive skillset by showing you the different ways to perform security assessment. This book will help blue teamers and IT engineers get up to speed with possible security issues they may encounter in their Windows environments.

BookNov 2023360 pages

Practical Ansible

In Practical Ansible, you'll work with the latest release of Ansible and learn to solve complex issues quickly with the help of task-oriented scenarios. You'll start by installing and configuring Ansible to automate monotonous and repetitive IT tasks and get to grips with concepts such as playbooks, inventories, plugins, collections, and network modules.

BookSep 2023420 pages

Windows 11 for Enterprise Administrators

Microsoft’s launch of Windows 11 is a step toward satisfying the enterprise administrator’s needs for better management and enhanced user experience customization. This book provides the enterprise administrator with the knowledge needed to fully utilize the advanced feature set of Windows 11 Enterprise.

BookOct 2023286 pages

The Linux DevOps Handbook

This book is for software and IT professionals seeking knowledge on Linux systems and DevOps practices. This book will provide you with guidance and tools to learn and gain proficiency in managing Linux-based infrastructures and knowledge of DevOps.

BookNov 2023428 pages2