The document summarizes an AWS Meetup event where two presenters, Yeung Siu and Michael Baker, discussed various AWS topics including access and security using IAM roles, autoscaling, cloud computing benefits, and demos. They covered best practices for AWS access control using roles instead of access keys, using autoscaling to scale applications, and how immutable infrastructure improves reliability. The event included demonstrations of IAM roles, load testing with autoscaling, and building stateless applications on AWS.

1. AWS Meetup
February 09, 2017
Michael Baker
Yeung Siu

2. Introduction
●AWS access and security
●Autoscaling
●Why cloud computing!
●Demos
●Slides to be posted

3. Introduction
●Yeung Siu
○DevOps engineers
○AWS Associate Solution Architect certified
●Michael Baker
○Lead Software Engineer

4. AWS Credentials

5. Identity & Access Management
IAM

6. Access Keys demo

7. IAM User Issue
●No Active Directory domain association.
●No Web Federation
○Google, Facebook, Amazon retail
●Quarterly credential rotation
○Application down time
●Hardcode in source control

8. Open Source AWS

9. Open Source AWS

10. Open Source AWS

11. AWS knows

12. Rise of the Bots
1. If AWS can find your keys then guess who
else can?
2. AWS keys mining
3. Use your AWS account to do other mining

13. IAM Role

14. IAM Role
Trust Relationships

15. EC2 IAM Role

16. Cloudberry

17. IAM Role demo

18. IAM Role
●No keys embedded into code.
●No need for credential rotation.
●Access to other AWS services.
●Allow secure external 3rd party access.
●Active Directory Federation.
●Web Identity Federation.
○Facebook, Google, Amazon retail
●Cross AWS account accesses
○Control multiple AWS accounts from one central AWS account with AD.
●Can only be associated at EC2 after creation.
○As of Feb. 09 AWS update its service to allow attaching role existing machine. 
○Doesn’t work outside of the AWS.
●Application Architecture implementation
Important factors

19. AWS Access Control Recommendations
●Use AWS Role as much as you can.
●If not AWS Role then use AWS KMS.
●Recommendation to use HashiCorp Vault.

20. Questions?

21. AutoScaling
●AWS
●Azure

22. Motivation
What do you get with one DevOps Engineer in a room?

23. Motivation
What do you get with one DevOps Engineer in a room?
Alone with a 2:00am pager saying a site is down.

24. Why Cloud Computing
●No hardware to purchase and refresh
●On demand model
●Easy to scale

25. Legacy Cloud
“The first rule of any technology used in a business is that automation applied to
an efficient operation will magnify the efficiency. The second is that automation
applied to an inefficient operation will magnify the inefficiency. ”
Bill Gates
●Do the same thing on a different platform
●Do you use your smartphone to just make phone calls?

26. AWS Principal
“Build for failure”

27. AWS Vocabulary
●EC2 (Elastic Computing Instances) = Virtual Machines
●ELB (Elastic Load Balancer) = Load Balancer
●Lambda = Serverless compute
●RDS (Relational Database Service) = MySQL, Microsoft SQL server, Oracle,
Aurora, Postgresql
●Route53 = DNS
●S3 (Simple Storage Service) = object storage
●SNS (Simple Notification Service) = Messaging
●More at https://www.expeditedssl.com/aws-in-plain-english

28. Traditional Application

29. Traditional Application

30. Traditional Application

31. Traditional Application

32. Traditional Application

33. Traditional Application

34. Traditional Application

35. Immutable, Stateless app

36. Immutable, Stateless app

37. Immutable, Stateless app

38. Immutable, Stateless app

39. Immutable, Stateless app
AWS Terms

40. Immutable, Stateless app
AWS Terms

41. Immutable, Stateless app
AWS Terms

42. Immutable, Stateless app
AWS Terms

43. AWS Regions

44. AWS Region vs Availability Zones (AZs)

45. AWS Region vs Availability Zones (AZs)

71. Autoscaling
Details

72. Autoscale
Scale Policies

73. Autoscale
Notification

74. Autoscale
Instances

75. Autoscaling
Activity History

76. Autoscaling Load Testing
●Bee with Machine
○https://github.com/newsapps/beeswithmachineguns
●Siege
○https://github.com/JoeDog/siege
●GOAD
○https://goad.io/

77. Bee With Machine Guns

78. Bee With Machine Guns

79. Bee With Machine Guns

80. Bee With Machine Guns

81. Bee With Machine Guns

82. Bee With Machine Guns

83. Bee With Machine Guns

84. Bee With Machine Guns

85. Bee Hive

86. Bee With Machine Guns
●Lambda Demo
Serveless style

87. Demo

88. What happened?
CloudWatch Metrics

89. Autoscaling
●Take an instance out of the autoscaling group
●Works with Microsoft Windows Servers
○Even Windows 2008 R2 with IIS
●Bootstrap script
●Event driven
○Network
○Disk I/O
●Schedule driven
Things you can do

90. Autoscaling
●Treat servers as lives stocks and not pets.
○Servers are commodity and should be short lived.
●High Availability.
○Outage vs lower performance.
●Handle peak traffic.
●Cost
○One big server cost vs little servers.
●AWS Reserved instances and Spot instances cost savings.
Benefits

91. Autoscaling
●On Demand instance
○$0.12 per hour
●Reserved instances
○One year = $0.008 per hour ~ 33% savings
○Three year = $0.005 per hour ~ %58 savings
●Spot instances
○User puts a price and wait for market to match it
○Good message queue or worker nodes
○Can be $0.0031 per Hour
Cost Saving T2.micro

92. Autoscaling
●Autoscale configuration
○2 minimum
○6 maximum
●Purchase 2 reserved instances for the 2 minimum.
●Place bids for 2 spot instances.
●Use on demand instances for the last 2.
Cost Saving scenario

93. Autoscaling
●Websites
○REST APIs
●RabbitMQ (AMQP) message queue
●MySQL cluster
○Master/slave
●Autoscale of One
Use Cases

94. Autoscaling
●Application Performance Monitoring
○DataDog
○NewRelic
○SolarWind
○splunk
●Monitoring
○AlertLogic
●Logging
○ElasticSearch
○AWS X-ray
○CloudWatch
Automation Requirements

95. Autoscaling
●AWS Cloudformation
○JSON
○YAML
●HashiCorp Terraform
Deployment

96. Autoscaling
1.Create a new base Amazon Machine Image
(AMI)
○Use HashiCorp Packer.io
2.Update Autoscaling configuration to the new
AMI
3.Turn off existing EC2 instances one by one
OS Patch

97. Autoscaling
Evolution

98. Autoscaling
●Elastic Beanstalk
Evolution

102. How To Start With AWS
●CloudGuru
○Udemy $10 course
●Monthly AWS webinars
○https://aws.amazon.com/about-aws/events/monthlywebinarseries/
●AWS Associate Solution Architect Certification study guide
○Get AWS certification
●AWS Professional Partner Service
●Daily AWS updates/releases https://aws.amazon.com/new/
●Go to AWS re:invent
●Drawing done at https://cloudcraft.co/

103. Related Materials
●Life without SSH
○YouTube
○Slides
●Coding Apps In Cloud to Reduce Costs up to 90%
○YouTube
○Slides

104. Links
●Getting Started: https://aws.amazon.com/getting-started
●General Reference: http://docs.aws.amazon.com/general/latest/gr
●Global Infrastructure: https://aws.amazon.com/about-aws/global-infrastructure/
●FAQs: https://aws.amazon.com/faqs
●Documentation: https://aws.amazon.com/documentation/
●Architecture: https://aws.amazon.com/architecture
●Whitepapers: https://aws.amazon.com/whitepapers
●Security: https://aws.amazon.com/security
●Blog: https://aws.amazon.com/blogs
●SlideShare: http://www.slideshare.net/AmazonWebServices
●Github: https://github.com/aws and https://github.com/awslabs

105. Happy Ever “Appter”