Archives for Cloud Computing - Page 8
Peered VPCs in Google Cloud versus AWS
The VPC Boundary VPCs are a logical boundary within a public cloud. The actual contents of this logical boundary are physical networking constructs, including subnets, IP addresses, routes and such. In…
AWS KMS basics, Encryption of EBS volumes, Attaching EC2 instances
What is Envelope Encryption? If you had a huge chunk of data to be encrypted and did not want to use your cloud encryption service (KMS) to encrypt the entire…
AWS Networking Basics and Recap
How do you logically create ‘private’ partitions of the public cloud? How do you break up a VPC into Tiers designed for specific workloads? (Answer – Subnets) Inside each AZ,…
AWS SSO from an On-Premises Active Directory
Users on your on-premises Active Directory need SSO access to a) AWS accounts and b) cloud applications in the AWS SSO user portal AWS Directory Service has the following two options…
Azure VPN Setup and Troubleshooting
There are three constructs that are needed to setup an Azure VPN Tunnel. These are VPN Gateway (a type of a VNG), a Local Gateway and a Connection. Virtual network…
NGS in Azure
Network Security Groups can be applied to a VM or subnet, and in some cases to both. In certain cases ( turning a VM into a DMZ), it may be…
Launch EC2 Instance only if it is Tagged
This can apply to EC2 instances, EBS volumes or both. You can tweak it to work for only key present, key-value present and key value exact match. STEP 1 –…
NAT Instances and Multiple Availability Zone Deployments – AWS
SIMPLE ROUTES FOR A SINGLE NAT INSTANCE Configuration – ELB in front of NAT instance. NAT instance in it’s own security group (NAT_SG); ELB in it’s own Security Group (ELB_SG)…
Azure High Availability Architecture (IaaS based)
Azure high availability VMs architecture – including Taffic Manager, AD instances (on VMs). Self Explanatory – except possibly for the VPN Gateways in each region. Azure High Availability Architecture…