Amazon Web Services

Cloud computing
Definition:
• Cloud computing is the on-demand availability of computer system
resources, especially data storage and computing power, without
direct active management by the user.

• The term is generally used to describe data centers available to many

users over the Internet.
 Advantages of Cloud Computing
• Cost-Efficient − Building our own servers and tools is time-consuming as well as
expensive as we need to order, pay for, install, and configure expensive hardware,
long before we need it. However, using cloud computing, we only pay for the
amount we use and when we use the computing resources. In this manner, cloud
computing is cost efficient.

• Reliability − A cloud computing platform provides much more managed, reliable

and consistent service than an in-house IT infrastructure. It guarantees 24x7 and
365 days of service. If any of the server fails, then hosted applications and services
can easily be transited to any of the available servers.
 Advantages of Cloud Computing
• Unlimited Storage − Cloud computing provides almost unlimited storage capacity,
i.e., we need not worry about running out of storage space or increasing our
current storage space availability. We can access as much or as little as we need.
• Backup & Recovery − Storing data in the cloud, backing it up and restoring the
same is relatively easier than storing it on a physical device. The cloud service
providers also have enough technology to recover our data, so there is the
convenience of recovering our data anytime.
• Easy Access to Information − Once you register yourself in cloud, you can access
your account from anywhere in the world provided there is internet connection
at that point. There are various storage and security facilities that vary with the
account type chosen.
 Disadvantages of Cloud Computing
• Security issues - the cloud service providers implement the best
security standards and industry certifications, however, storing data
and important files on external service providers always bears a risk.
• Technical issues - as cloud service providers offer services to number
of clients each day, sometimes the system can have some serious
issues leading to business processes temporarily being suspended.
Additionally, if the internet connection is offline then we will not be
able to access any of the applications, server, or data from the cloud.
• Not easy to switch service providers
 AWS Command Line Interface(CLI)
• is a unified tool to manage your AWS services.

• offer the possibility to control multiple AWS services from the

command line and automate them through scripts.
 AWS Command Line Interface(CLI)
• Amazon CLI can be configured so that:
1. click on https://aws.amazon.com/cli/
2. download AWS CLI according with your operating system:

Windows
MacOS
Linux
 AWS Command Line Interface(CLI)
3. click on the arrow, then click on open

4. click on next button

 AWS Command Line Interface(CLI)
5. check “I accept the items in the License Agreement” then press Next button

6. press Next button

 AWS Command Line Interface(CLI)
7. press Install button

8. press Finish button

 AWS Command Line Interface(CLI)
Now AWS CLI is installed. This can be tested by typing “aws help”
command in Command Prompt. More commands will be run in next
chapters.
 AWS Identity and Access Management
AWS IAM is a web service that helps you securely control access to AWS
resources. You use IAM to control who is authenticated (signed in) and
authorized (has permissions) to use resources.
 AWS Identity and Access Management
Terms:
• Resources: The user, group, role, policy, and identity provider objects
that are stored in IAM. As with other AWS services, you can add, edit,
and remove resources from IAM.
• Identities: The IAM resource objects that are used to identify and
group. You can attach a policy to an IAM identity. These include users,
groups, and roles.
 AWS Identity and Access Management
Terms:
• Entities: The IAM resource objects that AWS uses for authentication.
These include users and roles. Roles can be assumed by IAM users
and roles in your or another account. They can also be assumed by
users federated through a web identity or SAML.
• Principals: A person or application that uses the AWS account root
user(that you received via email), an IAM user, or an IAM role to sign
in and make requests to AWS.
AWS Identity and Access Management
 AWS Identity and Access Management
Users
For greater security and organization, you can give access to your AWS
account to specific users—identities that you create with custom
permissions. You can further simplify access for those users by
federating existing identities into AWS.
 AWS Identity and Access Management
Users
First-Time Access Only: Your Root User Credentials – the email and the
password that you received on email represents your “root user
credentials” and gives you unrestricted access to all resources in your
AWS account.

Recommendation: don't use root user credentials for everyday access

 AWS Identity and Access Management
Users
Instead of sharing your root user credentials with others, you can
create individual IAM users within your account that correspond to
users in your organization. IAM users are not separate accounts; they
are users within your account.
AWS Identity and Access Management
AWS Identity and Access Management
 AWS Identity and Access Management
How to create an IAM User from your root user?
1. go to https://www.awseducate.com/signin/SiteLogin and enter your email
and password from the amazon’s email.
2. Click on AWS Account and then on AWS Educate Starter Account
 AWS Identity and Access Management
3. click on AWS Console

4. chose IAM from Find Services

 AWS Identity and Access Management
5. click on Manage User

6. click on add user

 AWS Identity and Access Management
7. set an username and a custom password then click on Next Permissions
 AWS Identity and Access Management
8. create a new group or add the user to an exiting one
 AWS Identity and Access Management
9. add a group name then add an existing policy or create new one(new policy
will be created in next chapters)
 AWS Identity and Access Management
10. check the new group name in order to add the new user in this group and
then click on Next Tags
 AWS Identity and Access Management
11. add the tags for user (e.g. key = email, value = popescu@gmail.com) then
click on Next Review
 AWS Identity and Access Management
12. click on Create User
 AWS Identity and Access Management
13. Download the .csv file that contains the password for the new user and
then login with the new user credentials(for AWS Educate accounts is not
possible)
 Amazon S3
• is an object storage service that offers industry-leading scalability,
data availability, security, and performance.

• customers of all sizes and industries can use it to store and protect
any amount of data for a range of use cases, such as websites, mobile
applications, etc.
 Amazon S3
• is an object storage service that offers industry-leading scalability,
data availability, security, and performance.

• customers of all sizes and industries can use it to store and protect
any amount of data for a range of use cases, such as websites, mobile
applications, etc.

• for more details can be found here

 Amazon S3
An S3 bucket can be created so that:
1. go to https://www.awseducate.com/signin/SiteLogin and enter your email
and password from the amazon’s email.
2. Click on AWS Account and then on AWS Educate Starter Account
 Amazon S3
3. click on AWS Console

4. chose S3 from Find Services

 Amazon S3
5. click on Create bucket
 Amazon S3
6. add a Bucket name(names must be unique across all existing bucket names
in Amazon S3), don’t chose any region and then click on Next
 Amazon S3
7. check “Keep all versions of an object in the same bucket” and then click on
Next
 Amazon S3
8. uncheck “Block all public access, accept the terms and then click on Next
 Amazon S3
9. click on Create Bucket
 Amazon S3
9. Now your bucket is created and you can upload any file
 Amazon S3
10. In order to upload a file click on the bucket
 Amazon S3
11. click on Upload
 Amazon S3
12. To select a file to upload, either click Add files and select a sample file that
you would like to store OR Drag and Drop a file on the upload box.
Select Next after you have selected a file to upload.
 Amazon S3
13. You have the ability to set permission settings on your object. For this
tutorial, leave the default values and select Next.
 Amazon S3
14. You have the ability to set property settings like storage class, encryption,
and metadata with your object. Leave the default values and select Next.
 Amazon S3
15. click on Upload
 Amazon S3
16. If you want to download the file select the checkbox next to the file you
would like to download, then select Download.
 Tasks
1. install Amazon CLI
2. login into your AWS account and create a new user and a new
group, both of them with admin rights.
3. create a bucket then upload a file, then download that file.