Archives for Cloud Computing - Page 9
Launch EC2 Instance only if it is Tagged
This can apply to EC2 instances, EBS volumes or both. You can tweak it to work for only key present, key-value present and key value exact match. STEP 1 –…
NAT Instances and Multiple Availability Zone Deployments – AWS
SIMPLE ROUTES FOR A SINGLE NAT INSTANCE Configuration – ELB in front of NAT instance. NAT instance in it’s own security group (NAT_SG); ELB in it’s own Security Group (ELB_SG)…
Azure High Availability Architecture (IaaS based)
Azure high availability VMs architecture – including Taffic Manager, AD instances (on VMs). Self Explanatory – except possibly for the VPN Gateways in each region. Azure High Availability Architecture…
Failover Patterns in the Public Cloud
Let us define some terms before we get started. STANDBY environment – means an active, functioning environment, ready to take over instantly and automatically BACKUP environment – means a passive,…
Governance in AWS, Azure, GCP
What does governance mean in the context of a public cloud? Governance , while often used in the context of 'cost governance' , can actually apply to either of the…
Public IP Address vs Elastic IP ( EIP ) on AWS
Why not just attach a Public IP to your ELBs and your NAT instances? Public IP addresses are not persistent - if you stop/start your instance, the instance will get…
Roles and Policies in Google Cloud, and comparisons to AWS Roles and Policies
2 main differences beetween aws and gcp role / policy A GCP role gives a SINGLE permission to an IAM user. The permission is on a GCP resource. A GCP…
Google Cloud IAM and Identity
In GCP, the IAM menu is not the same as the Identity menu (Identity and Org menu item). IAM is around who accesses what. Roles are a key part of…
Service Accounts in GCP – Kinda like an AWS Role, but still different
For advanced technology seminars on AWS and other technologies, please visit Also see Roles and Policies in GCP IAM identities can be divided into two broad categories - user identities…
Security Audits of AWS Accounts – Roles, Policies and equivalents on GCP and Azure
What should be audited? And why FullAdmin is a terrible idea. (Also read, KMS based data encryption on AWS and Google Cloud) CloudTrail logs, CloudWatch log groups, GuardDuty logs, Inspector logs,…