Seguimos con los posts dedicados a la certificación de AWS SAA.
Links of interest
- Edge Location: this is the location where content is cached and can be used to write too. Separate to an AWS Region/Az. Actually, there are more Edge Locations than AWS regions. EdgeLocation cached files from the origin speeds up delivery to videos, images, etc. Used for S3 Transfer Acceleration.
- Origin can be S3 Bucket, EC2 Instance, ELB or Route53
- Distribution: the name was given to our CDN
- Web distribution: typically used for websites
- RTMP: Used for media streaming
URLS vs Cookies
- A signed url is for individual files
- 1 url = 1 file
- A signed cookie is for multiple files
- 1 cookie = multiple files
We will need a policy that can contain
- URL expiration
- IP ranges
- Trusted signers
CloufFront Signed URL features
- Can have different origins.
- Can utilize caching features.
- Can have filters: IP, path, address, etc
- Key-pair created is managed by the root user
S3 Signed URL features
- Issues a request as the IAM user who created the presigned URL
- Limited lifetime
- Supports Microsft HyperV or VMWARE ESXI
- All data transferred between any type of gateway appliance and AWS storage is encrypted using SSL.
- By default, all data stored by AWS Storage Gateway in S3 is encrypted server-side with Amazon S3-Managed Encryption Keys (SSE-S3).
- Also when using the file gateway, you can optionally configure each file share to have your objects encrypted with AWS KMS-Managed Keys using SSE-KMS.
File Gateway (NFS): Flat files in S3, pdfs, pictures, videos,(stored in S3)
Volume Gateway (iSCSI): virtual hard disk
Stored Volumes: an entire copy of the dataset is stored on-site and is backup async to S3.
Cached Volumes: the entire dataset is stored on S3 and the most frequently accessed data is cached on site.
Gateway-Virtual Tape Library (VTL): backup, create virtual tapes, and send to S3.
File Gateway (NFS)
Volume Gateway (iSCSI)
Virtual Hard Disks presented at on-premises via iSCSI and you backup them to S3. Data written to these volumes can be asynchronously backed up as point-in-time snapshots of your volumes and stored as EBS snapshots. Snapshots are incremental.
Volume Gateway – Stored Volumes
Let you store your primary data locally while asynchronously backing up that data to AWS.
Low latency access to their entire datasets, with durable backups. Data written to your stored volumes are stored on your on-premises storage hardware.
This data is backed up to AWS S3 in the form of EBS Snapshots.
Entire dataset is stored on site (on-premises) an is asynchronusly backed up to S3 in the form of EBS snapshots
Volume Gateway – Cached Volumes
Entire dataset is stored on S3 and the most frequently accessed data is cached on site
- You can now create Tape Gateway and Volume Gateway local storage caches as large as 64 terabytes, four times as large as before, for gateways that are running on a virtual machine.
- You can now create a schedule to control the maximum network bandwidth consumed by your Tape and Volume Gateways.
Host level metrics
- 5 minute is the standard interval
- defaults metrics are
- status check
- RAM is a custom metric, no default metric
- For custom metrics default granularity is 1 minute
- CloudWatch can be used also in on-premise. You only need to install the agent.
How long data is stored?
- You can retrieve data calling GetMetricStatistics API.
- By default logs are stored indefinitely.
- You can retrieve data from terminated EC2 or ELB