Služba Amazon Web Services poskytuje vysoce spolehlivou, škálovatelnou a nízkorozpočtovou cloudovou platformu, kterou používají stovky tisíc firem v 190 zemích po celém světě. Startupy, malé a střední podniky, velké enterprise firmy a zákazníci ve veřejném sektoru mají přístup ke stavebním kamenům, které slouží na rychlý vývoj aplikací jako reakce na měnící se obchodní požadavky. Bez ohledu na to, zda chcete vytvářet webové nebo mobilní aplikace, prípadně postavené na klasických serverech či kontejnerech, AWS davá vývojářům do rukou mnoho nástrojů, které jim pomáhají vytvářet a nasazovat aplikace jednoduše, rychle a při nízkých nákladech.

1. Intro: Developing on AWS
Zdeněk Bulan
IT Support Team Leader @ Amazon
AWS Instructor @ DataScript
26-Sep-2018

2. DataScript
• http://www.datascript.cz/
• Authorized training center
• Amazon Web Services, RedHat, Veritas, Symantec, Microsoft, …
• Open source courses
• Docker, Kubernetes, Ansible, ElasticSearch, Zabbix, …
• Conferences
• Microservices, ElasticSearch, Kubernetes, API
• Morning talks
• for 3 years, 3500 attendees, 98 topics

3. Housekeeping
• Target audience
• Presentation < 60 minutes
• Slides in English – talk in Czech
• Post questions online – response via chat window and email
• Nazar Špak, Territory Manager, AWS
• Vladimír Šimek, Senior Solution Architect, AWS

4. Agenda
• AWS API & SDK
• Managed services for developers
• S3, DynamoDB, Kinesis, SQS, SNS, Lambda, Cognito, …
• Serverless: S3 hosted websites
• Demos: SDK initial setup
• Deploying applications with Elastic Beanstalk and CloudFormation
• Creating lambda functions in Cloud9

5. AWS Global Infrastructure
Availability
Zone - A
Availability
Zone - B
Availability
Zone - C
Region

6. AWS API & CloudTrail
• Regional API endpoints
• AWS console – Web UI
• CLI – Linux/UNIX, Windows, Mac; PowerShell
• SDK
• Android, iOS, Java, JavaScript for browser, .NET/C#, Node.js, PHP, Python, Ruby
• Client Service API vs. Resource API
• Direct API invocation
• IDE toolkit – Eclipse, Visual Studio, Cloud9
• CloudTrail
• Enabled by default – 90 days
• Storing to S3: per-region vs. all-into-1-region

7. S3
• Object-level storage (bucket, object key)
• availability 99.99%, durability 99.999999999%
• Lifecycle policies: standard -> infrequent access -> glacier -> delete
• 3500/5500 add/get requests per second
• Encryption – server-side, client-side
• Static website hosting, CORS (Cross Origin Resource Sharing)
• Versioning, Cross-Region Replication, Signed URLs
• No limit for number of objects, max 5 TB per object

8. DynamoDB
• NoSQL - no schema, no ACID
• Table -> Table
• Row -> Item
• Column -> Attribute
• Indexes: LSI/GSI
• Throughput Provisioning: RCU & WCU
• Per-item/per-attribute permissions
• DynamoDB Streams
• No limit on table size

9. DynamoDB
• DynamoDB features
• Autoscaling
• Global Tables
• SLA: 99.999% for Global Tables vs. 99.99% SLA for Region Tables
• Server-side encryption
• TTL
• Backups – on-demand vs. point-in-time-recovery (cont.-backup)
• DynamoDB Accelator (DAX) – incl. encryption

10. Kinesis Data Streams

11. SQS
• Managed Queueing Service
• Standard – no order, msg may duplicate, unlimited throughput
• FIFO – ordered, msg received once, limited 300 transactions/s
• Loose Coupling – asynchronous
• Queuing chain pattern
• Short Polling vs. Long Polling, Visibility timeout
• Dead Letter Queue
• Server side encryption

12. SNS
• Publishers
• Subscribers
• Lambda, SQS, HTTP/HTTPS, Email, SMS, Mobile Push
• message filtering operators

13. Lambda
• Serverless
• Node.js, Java, Python, .NET/C# (2.0/2.1)
• Resources allocation: RAM ~ CPU
• Invocation: Push Model, Pull Model, Direct Invocation
• Scheduled events
• Permissions: Execution permissions & Invocation permissions
• SQS as event source for Lambda
• API Gateway: URL -> EC2, Lambda, public IP service

14. Cognito
• Mobile identity management & Data synchronization
• Identities
• External identity providers: Amazon, Facebook, Twitter, Google, …
• Custom identity system
• Unauthorized guest access
• Fine-Grained Access Control: DynamoDB, S3, …
• JavaScript for browser SDK

15. CloudFormation
• Infrastructure as Code – declarative JSON/YAML format
• CloudFormation: template -> stack(s)
• Create/update/delete
• Parameters, conditions, mappings, pseudo-parameters
• Multiple templates – Identity, Network, Back-end, Front-end
• Nested stacks
• Cross-stack references – Outputs -> Import value

16. Elastic Beanstalk
• Deploy application
• Java, PHP, .NET/C#, Node.js, Python, Ruby, …, Docker
• Environment
• Tiers: web-server vs. worker
• Type: single-instance vs. auto-scaling
• Swap URL – blue-green deployment
• Applications Versions
• Stored in S3, version <-> environment, rollback
• Configuration – services, resources, …

17. RDS, Elastic Cache
• RDS
• Managed SQL DB
• MySQL, PostgreSQL, MariaDB, Oracle, MS SQL
• Aurora (up to 64 TB; MySQL and PostgreSQL compatible)
• Multi-AZ vs. Single-AZ deployment
• Automatic Backups vs. Manual Snapshots
• MySQL/Aurora: IAM DB Authentication
• Migration
• Database Migration Service & Schema Conversion tool
• ElastiCache
• Managed in-memory cache cluster
• Memcached vs. Redis

18. Serverless: S3 Hosted Websites

19. DEMO
• SDK initial setup
• Deploying applications with Elastic Beanstalk and
CloudFormation
• Creating lambda functions in Cloud9

20. Thank you!
zdenek@bulan.cz
www.linkedin.com/in/zdenekbulan