Cloud Architecture
Design
Course Outcomes
1. Demonstrate an in-depth understanding of AWS Cloud architecture,
services,and design patterns.
2. Apply security and compliance measures effectively in AWS
architectures using encryption, access controls, and monitoring.
3. Optimize cost and performance by selecting appropriate AWS
services and utilizing cost-effective resource management strategies.
4. Configure and manage advanced AWS networking features, storage
solutions, database technologies, and compute resources.
Syllabus
• Module:1 AWS Cloud Foundations & IAM 3 hours
Introduction to Cloud Computing, Overview of AWS Global Infrastructure, AWS Shared
Responsibility Model, AWS Identity and Access Management (IAM), IAM Users, Groups, and
Policies, IAM Roles, IAM Best Practices
• Module:2 AWS Compute & Storage Services 6 hours
• AWS Compute Services, Amazon EC2 (Elastic Compute Cloud), EC2 Instance Types, EC2 Pricing
Models, EC2 Instance Lifecycle, Auto Scaling, Elastic Load Balancing, AWS Storage Services,
Amazon S3 (Simple Storage Service), S3 Storage Classes, S3 Lifecycle Policies, Amazon EBS
(Elastic Block Store), Amazon Glacier, Amazon EFS (Elastic File System)
• Module:3 AWS Networking and Content Delivery 6 hours
• AWS Networking and Content Delivery, Amazon VPC (Virtual Private Cloud), VPC Subnets, Route
Tables, Security Groups, VPC Peering, AWS Direct Connect, Amazon CloudFront
• Module:4 AWS Database Services 6 hours
• AWS Database ServiceS, Amazon RDS (Relational Database Service), RDS Multi-AZ
Deployments, RDS Read Replicas, Amazon Aurora, Amazon DynamoDB, DynamoDB Streams
• Module:5 AWS Management Tools & Cost Management 4 hours AWS Management
Tools, AWS CloudWatch, AWS CloudTrail, AWS Config, AWS Systems Manager, AWS
Cost Management, AWS Free Tier, AWS Billing and Account Management, AWS
Budgets, AWS Trusted Advisor
• Module:6 AWS Security and Compliance 4 hours AWS Security and Compliance,
AWS Shared Responsibility Model, AWS Key Management Service (KMS), AWS WAF
(Web Application Firewall), AWS Shield, AWS Security Best Practices
• Module:7 AWS Application Integration & Architectural Best Practices 8 hours AWS
Application Integration, Amazon SQS (Simple Queue Service), Amazon SNS (Simple
Notification Service), Amazon SWF (Simple Workflow Service), AWS Step
Functions, AWS Well-Architected Framework, Design Principles for AWS Cloud
Architectures, Scalability and Elasticity, High Availability and Fault Tolerance,
Security, Cost Optimization.
• Module:8 AWS Migration and Hybrid Architecture 8 hours AWS Migration and
Hybrid Architecture, AWS Database Migration Service (DMS), AWS Server
Migration Service (SMS), AWS Snowball, AWS Snowball Edge, AWS Snowmobile
Introduction
Traditional Model Cloud
• Infrastructure as hardware • Infrastructure as software
• Lengthy procurement cycle • Flexible
• Provision capacity by guessing • Resources could be utilized on-
theoretical maximum peaks demand for peak loads
Service Models of Cloud
• The highly scalable, flexible, and dynamic cloud resources are available
and accessible to users as service models
• Numerous customized service models are open to the user/developer
community in addition to 3 standard ones.
SaaS
Higher Lower
PaaS Control Control
over IT over IT
IaaS
IaaS Working
• Organizations no longer need to procure, set up, operate, and manage
their own data centers
• A service can be scaled up (or down) automatically, depending on
client requirements
• Most leading IaaS vendors provide a robust service level agreement
(SLA) for uptime and performance
• IaaS gives client companies access to servers closer to their end
customers, thus addressing both technical and regulatory
requirements with ease
Cloud Deployment Models
• The cloud deployment model identifies the specific type of cloud
environment based on ownership, scale, and access, as well as the
cloud’s nature and purpose.
• The location of the servers you’re utilizing and who controls them are
defined by a cloud deployment model.
• It specifies how your cloud infrastructure will look, what you can
change, and whether you will be given services or will have to create
everything yourself
Public cloud
Public cloud
• Minimal investment • Less secure
• No setup cost • Low customization
• Infrastructure management is
not required
• No maintenance
• Dynamic scalability
Private cloud
Private cloud
• Better control • Less scalable
• Data security and privacy • costly
• Supports legacy systems
• customization
Hybrid cloud
Hybrid cloud
• Flexibility and control • Difficult to manage
• Extra payment Cost • Slow data transmission
• security
Community
Community cloud
• Cost-effective • Rigid in customization
• Security • Limited scalability
• Shared resources
• Collaboration and data sharing
AWS Basics
AWS-EC2 Instances
High Cost
On-
NURI demand
PURI
AURI
Low Cost
EC2 Instances
AWS Global Infrastructure
Components
Region
• The region is a geographical area (us-east-1a)
• Each Region has multiple, isolated locations known as Availability
Zones
• Availability zone is a data center
• Select region and VPC during the instance launch
• AZ ensures a high availability of instances to overcome failures
Points of Presence
• AWS provides a global network of Points of Presence locations
• Points of Presence includes edge locations and regional edge caches
• Amazon CloudFront
• Regional edge caches used for content with infrequent access
• Amazon CloudFront>Amazon Route 53->edge location