Archives for AWS - Page 7
Azure Landing Zone Equivalent
Landing Zone like Blueprint in Azure Is there such a thing as an multi account structure landing zone in Azure? Something like this AWS landing zone (Control Tower)? azure landing…
aws vpc and subnet cidr blocks–ip address blocks
Right now, there are 3 subnets . I propose 5 subnets in all - Public (Palo Alto), Web, App, Data and an AD subnet. This is a sample breakup of…
AWS Keys–of all kinds
AWS Access Keys – APIs (Programmatic User) and Root Users AWS KMS Encryption – Cloud Trail logs encrypted, app secrets encrypted AWS EC2 Key Pairs - Best Practices for accessing…
Migration VMs versus Replication of VMs on AWS
Migration Only For just migration capabilities, we can use vCenter plugin for vCenter (the on premises piece). This will not do ongoing replication. Ongoing Replication For ongoing replication, we use…
Three ways to migrate SQL Server to AWS
There are many ways to get your SQL server database onto AWS. Backup and Restore Disadvantages - Manual Process, The databases don’t sync up automatically, and you have to manually…
Shared VPN Tunnel and Shared AD in AWS
Shared VPN Tunnel Use Cases This approach eliminates the need to create VPN connections for additional VPCs because all required on-premises resources will be accessed either directly or indirectly through…
2 way trust – Extend Your On-Premises AD to the AWS Cloud
Extend Your On-Premises AD to the AWS Cloud If you already have an AD infrastructure and want to use it when migrating AD-aware workloads to the AWS Cloud, AWS Managed…
App Load Balancing vs. Network Load Balancing–either AWS or Azure
Too much work to have SSL on layer 7 The application load balancer is operating at level 7 it has to decrypt the HTTP request to inspect its headers, and…
Lambda Scenarios, IAM and Limits
Lambda Scenarios Proxy to other backend services Lambda serves as the ACTUAL backend service (http calls – a new function is launched for each call) API Gateway is part of…
AWS Governance
Governance Users and IAM Governance No Root user creds (lock away creds). Create IAM users and assign specific roles. Create roles with granular access Cross account access roles Accounts Governance…