DEV Community: Anuvindh

AWS - Red Hat OpenShift for Everyone series ( I - Intro)

Anuvindh — Mon, 25 Sep 2023 10:06:29 +0000

DAY 39 - AWS - Red Hat OpenShift for Everyone series ( I - Intro) - Day Thirty-eight

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

Red Hat OpenShift Service on AWS - ROSA

Introduction

What is ROSA?

Red Hat OpenShift Service on AWS

ROSA is a fully managed implementation of OpenShift Container Platform deployed and operated on AWS, jointly managed and supported by both Red Hat and AWS.
ROSA integrates seamlessly with a variety of AWS cloud services to help you get started quickly and easily.
ROSA supports the same versions of OpenShift as Red Hat OpenShift Dedicated and OpenShift Container Platform, so you receive updates with each new release.
ROSA is a good choice for organizations that want a fully managed OpenShift experience on AWS, with joint support from Red Hat and AWS

Here is an Over view of ROSA on AWS

Rosa Supported by SRE and cloud engineers

Internet facing Red Hat OpenShift Service on AWS

API ELB - Used for API , both internal and external access.
App/console ELB - for Application console usage

Good news is the Redhat SRE Team also monitors these ELBs.

Lets talk a bit about what are Infra nodes, Compute nodes, Control Plane nodes.

Infra nodes- Managed by SRE from Redhat (registry, Router, Monitoring)
Control Plane Node - Managed by SRE from Redhat (api-server, etcd, controller)
Compute nodes or worker nodes - where our applications run.

Understand that two ELB are public facing

Below diagrams Shows ROSA Architecture Models

AWS VPC Public Network Red Hat Open Shift Service on AWS

AWS VPC private Network Red Hat Open Shift Service on AWS

Only difference here you need to give permissions to SREs to have access to these nodes via a private link.
No data will be going through public internet all will be routed privately.

Must read Documentations

Info	Links	Description
Red Hat OpenShift on AWS	open link	Solution highlights, Key features
Red Hat OpenShift Service on AWS	open link	Product details, Benefits, ROSA learning hub
AWS Docs	open link	ROSA cluster deployment models, Accessing ROSA,How to get started with ROSA, Pricing
ROSA Workshop	open link	Deploy a ROSA cluster, Perform common tasks, Deploy a node.js based app, etc ..
Responsibility assignment matrix for ROSA	open link	Shared responsibilities, Incident and operations management, Platform monitoring, Incident management, Release management, Security

Now Lets get our Hands Dirty

Prerequisite For Rosa

Install AWS CLI - How to Link
Install ROSA CLI- To install Goto https://console.redhat.com/openshift/downloads, download and install.
IAM Account which have right privileges or use STS.

Enable ROSA

Go TO AWS console and search for Red Hat Openshift Service on AWS
Clink on to
Goto https://console.redhat.com/openshift/token/rosa , click on to Load Token

Copy this token
Now on you desktop terminal after configuring your AWS CLI and Rosa CLI, then

rosa login

Paste the token here , then enter

Validating IAM role for the ELB service exists in your AWS account

 aws iam get-role --role-name "AWSServiceRoleForElasticLoadBalancing"

Validating AWS account quotas for ROSA

 rosa verify quota

Continued on Part Two...........

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry

Everything you should know as a Cloud Guru for Storage

Anuvindh — Sun, 18 Dec 2022 09:41:01 +0000

DAY 37 - Everything you should know as a Cloud Guru for AWS Storage - Day Thirty-Seven

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

For who?

Data engineers , security engineers, AWS certification preparation, cloud engineers, devops engineers, Solutions Architects

Why shloud you learn

Demand for AWS skills: AWS is one of the most popular cloud computing platforms, and there is high demand for professionals with AWS skills. Learning about AWS storage services can help you to become proficient in using AWS, which can improve your job prospects and earning potential.
Variety of storage options: AWS offers a range of storage options to suit different needs and use cases. By learning about these options, you can better understand which storage solution is the best fit for your needs.
Cost savings: AWS storage services are designed to be scalable and cost-effective. By learning how to use these services, you can potentially save money on storage costs while still getting the performance and reliability you need.
Improved data management: AWS storage services can help you to better manage your data and ensure it is secure, available, and easy to access. This can be especially important for organizations that generate and handle large amounts of data.

In summary, learning about AWS storage services can help you to become more proficient in using AWS, understand the various storage options available, potentially save on storage costs, and improve your data management.

Types of Storage Services

Amazon S3
Amazon Glacier
Amazon EBS
Amazon Instance Storage
Amazon EFS
Amazon CloudFront
AWS Storage Gateway
AWS Snowball

Free HandsOn AWS Storage Lab - Link

Amazon S3 (Simple Storage Service

A block storage which offer high scalability, data availability, security, and performance. Can use for data lakes, cloud-native applications, and mobile apps.

info	Links
Introduction to Amazon S3	Video Link
Storage classes	Link, Link 2

Object based storage
Unlimited Storage
99.999999999% durability
Max file size for one file is 5 Terrabyte
Flat file structure
Regional Based Service
Data replicated for availability
You can encrypt the objects
Restrict bucket to just your VPC
Storage classes - S3 Standard, S3 Intelligent-Tiering, S3 Standard-IA, S3 One Zone-IA, S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, S3 Glacier Deep Archive, S3 Outposts

Instance store Volumes

info	Links
Amazon EC2 instance store	Link

Ephemeral storage
Donot store critical data
if instance is start or stop you will loose data
if rebooted the data will remain intact
If EC2 failed the data will be lost. (Start/Stop, Terminate)
No additional fees
IOPS are blazing fast
mainly used as cache or buffer
Not all Ec2 Support Instance store volume

Amazon EBS Volumes

info	Links
How to Encrypt an EBS Volume	Link

Persistence and block level storage.
Can be attached to Ec2 instance & in some regions we can multi attach the EBS Volume. More info on multi attach
Independent of EC2 instance
Logically attached to EC2 instance
Supports Snapshotting
can copy EBS snapshot from one region to other regions
EBS data is replicated to same AZ for Availability.
Types of EBS are SSD And HDD.
Ability to encrypt during rest and transit (AES256). Here is an awesome blog about this by STUART SCOTT from Cloud Academy

Amazon Elastic File System (EFS)

info	Links
Overview EFS	VideoLink
How to create EFS	Link

EFS , a file storage services
Can attach to multiple EC2 using mount point
Uses Hierarchy system.
Build under Gluster filesystem
Fully managed shared file system with low latency access
PB of Storage available
Uses NFS 4.1 and 4.0
replicated across multiple AZ for high availability
Highly scalable, regional services, available on most of the regions For more info

Amazon Cloud front (CDN)

info	Links
Intro	VideoLink
Workshop	Link

Content Delivery Network
Delivered as cache data from edge locations

Use Distributions to deliver content

Via Web distribution

Dynamic and Static
HTTP and HTTPS
Allow add, remove, update object
Live stream functionality support
Origins can be Ec2 or S3

Via RTMP Distribution

Distribute streaming media using RMTP protocol(Adobe flash media)
Origins can only from S3

Amazon CloudFront is a content delivery network (CDN) provided by Amazon Web Services (AWS). It is designed to deliver content, such as websites and applications, quickly and securely to users around the world. CloudFront uses a network of edge locations located in various parts of the world to deliver content to users with low latency. This means that users can access the content they need faster and with fewer interruptions. CloudFront also integrates with other AWS services, such as Amazon S3 and Amazon EC2, to provide a complete solution for delivering content over the internet.

Storage Gateway

info	Links
Features	link
Pricing	Link

Best way to transfer data from NAS, SAN & DAS to AWS
Secure and cost efficient
File ,Volume and Tape Configurations available
Consider Egress traffic charges while architecting
File gateways used to access files stored as objects from s3 . can be mounted as NFS to Corporate Environment. Using casing will reduce further latency and the Egress traffic charges.
Storage Volume gateway used for low latency access data from S3. Synchronously copied to S3.
Volume can be 1GB to 16 TB and MAX 512 TB.
Snapshots are stored inclemently in S3.
Cached Volume gateways, data provided by s3. local volume used for buffering and local cache for recently access data.
Volume can be 32TB, and storage capacity of 1024 TB
Tape gateway , back to s3 from on-prem ,take advantage of AWS glacier

AWS Snowball

info	Links
Specifications	Link
Shipping an AWS Snowball device	link

Securely transfer PB of data in and out of AWS
On perm to S3 or S3 to On perm
High speed data transfer
Data to Snowball is encrypted automatically
can be tracked also use SNS for tracking
HIPAA Compliant
Data removed with NIST standard after the transfer

AWS Snowball process
Import

Export

AWS Snow FAMILY

info	Links
Intro	Link

AWS Snowcone is a small, rugged, and secure device offering edge computing, data storage, and data transfer on-the-go, in austere environment with little or no connectivity.

These devices are designed for offline data processing and storage, and are particularly useful for transferring large amounts of data to or from AWS when dealing with data that is too large or too costly to transfer over the Internet.

AWS Snowball is a physical device that can hold up to 50 TB of data, while AWS Snowball Edge is a device that combines the capabilities of AWS Snowball with additional compute and storage capabilities. AWS Snowmobile is a shipping container that can hold up to 100 PB of data, and is designed for transferring extremely large amounts of data to AWS.

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry

Let's Nuke - AWS Account

Anuvindh — Sun, 31 Jul 2022 07:46:00 +0000

DAY 36 - Let’s Nuke AWS - Day Thirty-Six

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

A step-by-step tutorial to Delete Everything from an AWS Account

Prerequisites

Make sure you remove the account from the organisations.
Get your access keys for CLI , check out this link to see How to
Now Goto repository, clink on releases, select your appropriate file, and right-click copy.

Topic	Link
Clone repo	Link
Releases	Link

I am using Linux so selecting cloud-nuke_linux_amd64,

Setup the nuke plant

Now on your system create a folder called nuke, then cd into it

wget https://github.com/gruntwork-io/cloud-nuke/releases/download/v0.16.2/cloud-nuke_linux_amd64

Check the folder once copied the file us ls
lets rename the folder to aws-nuke mv cloud-nuke_linux_amd64 aws-nuke

Change folder permissions

sudo chmod 777 aws-nuke

lets copy this to /usr/bin

sudo cp aws-nuke /usr/bin

verify the package

aws-nuke

You will be able to similar result as shown in the screenshot

Now lets enter the magic command

aws-nuke aws

We are not done yet,

let's nuke kaboooooom...

It will preview all the services gonna be destroyed

you will be prompted to confirm....

nuke

confirm by typing nuke

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry

DevOps on Amazon Web Services (AWS)

Anuvindh — Mon, 27 Jun 2022 03:34:08 +0000

DAY 35- DevOps on Amazon Web Services (AWS) - Day Thirty five

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

List of AWS services available to implement a successful DevOps methodology.

☁️ Cloud 9

Amazon's cloud-based IDE, which you can use to write, run, and debug your code with just a browser.

Info	Links
AWS Cloud9	Link
Introducing AWS Cloud9	YouTube Link
Tutorial AWS Cloud9	YouTube Link

🌈 AWS SDKs

Software development kits used to intract with AWS, a common way to intract with AWS api's.

Info	Links
SDKs and tools	Link
Getting Started with SDKs	YouTube Link

🚰 AWS CodePieline

It can visualize your pipeline with real time status and retry failed actions. Also helps to consolidate source, build, and deploy tooling.

AWS CodePipeline is a fully managed continuous delivery service that helps you automate your release pipelines for fast and reliable application and infrastructure updates.

You can monitor using AWS CLI , Amazon EventBridge AWS code pipeline console, AWS CloudTrial

⛓️ AWS Codecommit

CodeCommit is your Code repo, a Git based source control service solution. In Simple your version control for your project files and source code.
You can also use Amazon ECR, Amazon S3, Github as your source to pipeline.

Info	Links
Introduction to AWS CodeCommit	YouTube Link
Continuous Integration Best Practices	YouTube Link

📟 AWS CodeBuild

Automates the code compile , run tests, build artifacts. You can specify commands to run each phase of build.
Leverage out of the box preconfigured build environments (such as .NET Core, Java, Ruby, Python, Go, NodeJS, Android and Docker).You can monitor build through cloud watch or other services. integrating SNS is also possible to get notification.

Info	Links
AWS CodeBuild features	Link
AWS CodeBuild Tutorial	YouTube Link

🚀 AWS CodeDeploy

You deploy code to server, serverless or container services. Code deploy can deploy your code to AWS Lambda, Amazon ECS, Amazon EC2, Fargate, AWS Elastic Beanstalk or on-premises.
You can also deploy servers concurently.
You can also control traffic from your old deployments to new deployments.
Automatic rollback for unsuccessful deployment.

🔭 AWS X-Ray

A Distributed request tracing service from AWS to understand errors , poor perfomance and pin point it.

Why use AWS x-ray?

AWS X-ray allows you to analyze and debug applications using distributed tracing.
Trace the exact root cause of issue , errors, and bottlenecks.

AWS X-Ray does application monitoring/perfomance similar to services from DATADOG NewRelic SignalFX Lumigo

Info	Links
AWS X-Ray pricing	Link
Use AWS X-Ray Insights	YouTube Link
Optimize Application Performance with AWS X-Ray	YouTube Link

👀 Amazon Cloud Watch

Identify the AWS services used to automate the continuous integration and continuous
delivery process.

Info	Links
DevOps and AWS	Link

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry

Ansible For Everyone (Ansible Playbooks) - Part 3

Anuvindh — Thu, 16 Jun 2022 04:49:46 +0000

DAY 34- Ansible For Everyone (Ansible Playbooks) - Part 3 - Day Thirty four

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

🧮 Prerequisite

Please refer to Ansible Part 1 and Part 2 for a detailed understanding.

Ansible For Everyone - Part 1

Anuvindh for AWS Community Builders ・ May 21 '22

#devops #webdev #productivity #opensource

Ansible For Everyone(Practical) - Part 2

Anuvindh for AWS Community Builders ・ Jun 10 '22

#devops #webdev #productivity #opensource

🛠️ Adding Ansible inventory

Lets add our cluster of servers to Ansible infrastucture
In this demo i will be only using AnsibleSlaves-YourProdServer as my prod server.

Goto your Ansible-Control-Center and update ansible hosts file

sudo nano /etc/ansible/hosts

In this file you will find templetes to add hosts
lets add our production group of servers
- Add [YourgGroupName]
- next line , give a name to server which you are going to add. Lets name app1 then ansible_ssh_host= your ip address of your slave.

[production]
app1 ansible_ssh_host= ipaddress of your slave

Let's test the connections

To test all connections

ansible -m ping all

To test all connections in a group

ansible -m ping production

To test connection of a server named app1 in a group

ansible -m ping app1

Below image shows the result of the ping

✨ Modules

Modules are the commands which help to perform task,in other words modules are kind of library that help to perform tasks.
List of all modules - link

What are Tasks?
A set of instructions performed with modules.

▶️ Ansible Playbooks

Playbooks are written in YAML also Playbooks are lists of tasks that automatically execute against hosts.

Lets create an nginx playbook
ansible modules - https://docs.ansible.com/ansible/2.9/modules/list_of_all_modules.html

lets create a YAML file

sudo nano nginxplaybook.yaml

yaml scriping start with three dashes ---
then you can give a name with start a single dash -
now we will update the next parameter which is our hosts, in this case it will be production if you wanna do for all servers use all
so if we need to run as root on targets, we will be setting become parameter to true.
define task now under task
- we will be using a apt module to install nginx. Refernce link
- We have given aname to the task as install nginx.Then will be using apt module as we are using ubuntu.
- name of the module and state, refer the link for detailed understanding.

---
- name: install nginx server
  hosts: production
  become: yes
  tasks:
  - name: install nginx
    apt:
      name: nginx
      state: latest

Now lets run the playbook

Before running the playbook lets check it. ansible-playbook nginxplaybook.yaml --check
Now lets run the play book

ansible-playbook nginxplaybook.yaml

Deploy code from git

Here we will deploy a website to the target server using Ansible.

---
- name: install nginx server
  hosts: production
  become: yes
  tasks:
  - name: install nginx
    apt:
      name: nginx
      state: latest
  - name: Clone a repo with separate git directory
    ansible.builtin.git:
      repo: https://github.com/anuvindhs/CLOUD-is-AWSome.git
      dest: /var/www/html/app1

Lets run the play book

ansible-playbook nginxplaybook.yaml

Now go to your http://yourslaveip/app1 to see the magic

🎉🎉🎉🎉Congratulations on you first ansible infrastucture deployment with aws using playbook🎉🎉🎉🎉.

I highly recommend this Tips & Tricks with Examples from spacelift
, this is def comes handy when you are writing complex ansible scripts.

Ansible Playbooks: Complete Guide with Examples

What are Ansible playbooks? Learn how to structure, write, and run a playbook. See the practical examples.

spacelift.io

Ansible documentation links
Ansible Modules link

Ansible For Everyone - Part 1

Anuvindh for AWS Community Builders ・ May 21 '22

#devops #webdev #productivity #opensource

Ansible For Everyone(Practical) - Part 2

Anuvindh for AWS Community Builders ・ Jun 10 '22

#devops #webdev #productivity #opensource

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry

Ansible For Everyone(Practical) - Part 2

Anuvindh — Fri, 10 Jun 2022 02:10:56 +0000

DAY 33- Ansible For Everyone(Practical) - Part 2 - Day Thirty Three

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

📘 Please read Part one to understand bits and basics of ANSIBLE.

Ansible For Everyone - Part 1

Anuvindh for AWS Community Builders ・ May 21 '22

#devops #webdev #productivity #opensource

☁️ Lets setup the environment in AWS

We will spin up one EC2 as slave and one EC2 as the Master Node or the control center for ansible.
Then we use this Master node to connect the other EC2 instance (Slave).

🪛 Prerequsite

Access and privilages to launch EC2 with Ubuntu
Putty or any other SSH tools
Security group with ports ssh open (Port 22)

Setup environment

Lets launch 2 EC2 instances

Use AWS EC2 console or CLI. i am using two ubuntu instances here for this lab.

aws ec2 run-instances \
--image-id <ami-id> \
--instance-type <instance-type> \
--subnet-id <subnet-id> \
--security-group-ids <security-group-id>\
--key-name <ec2-key-pair-name> \
--count 2

Set up Ansible Control Center

Rename one EC2 to Ansible Control Center on console
Now lets SSH into Ansible Control Center EC2
- Rename the server

   sudo hostnamectl set-hostname Ansible-Control-Center

Now lets update and install ANSIBLE

Run these commands

sudo apt-get update
sudo apt install software-properties-common -y
sudo apt-add-repository ppa:ansible/ansible
sudo apt update
sudo apt install ansible -y

Set up Ansible Slaves - Your ProdServer

Rename one EC2 to Ansible Slaves - Your ProdServer on console
Rename the server

   sudo hostnamectl set-hostname AnsibleSlaves-YourProdServer

Install Python

  sudo apt-get update
  sudo apt-get install python3 -y

Configure SSH access

On Ansible Control Center

Genarate a rsa key.

cd .ssh
ssh-keygen

Press enter ,we donot require any changes.
Now if we ls we will be able to see id_rsa & id_rsa.pub, lets cat id_rsa.pub.

cat id_rsa.pub

Note down this key

On Ansible Slaves

ssh into your slave server then,

cd .ssh
sudo nano authorized_keys

Now on next line paste the key we previously noted & save it.

Now its play time.

Goto your Ansible Control Center EC2.

lets ssh into ansible slave,

Ansible For Everyone (Ansible Playbooks) - Part 3

Anuvindh for AWS Community Builders ・ Jun 16 '22

#webdev #tutorial #devops #productivity

Ansible For Everyone - Part 1

Anuvindh for AWS Community Builders ・ May 21 '22

#devops #webdev #productivity #opensource

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry

Ansible For Everyone - Part 1

Anuvindh — Sat, 21 May 2022 09:56:33 +0000

DAY 32- Ansible For Everyone - Part 1 - Day Thirty Two

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

Why you should read this blog Series?

If you are working on NetworkOps, SecOps, DevOps, ITOps & anyone who wants to automate their infrastructure.

Why Ansible?

Automation Automation Automation

Orchestrate complex processes on an enterprise scale.
Simple Automation and Management.
No Agent - Agentless.
Ansible executes locally
Open Source solution for automation.
Works on both Windows and Linux.
Can be used on Public cloud and On-Prem.
Cloud, Network & security automation.

Ansible-core

In simple it's the CLI of ansible.

Playbook

YAML templates are used to deploy the required infrastructure.
Components of Playbook are Plays, Modules, Plugins, Inventory

Plays

Top-level specifications for a group of tasks

Modules

Most of the Modules are written in python and in windows it uses Powershell. These are the components with internal logic.

Plugins

It enables the expansion of Ansible features.

Inventory

Multiple playbooks

Roles

Reusable Playbooks

Collections

Collections can have Modules, playbooks, Roles, Plugins Docs, and Tests.

Ansible For Everyone(Practical) - Part 2

Anuvindh for AWS Community Builders ・ Jun 10 '22

#devops #webdev #productivity #opensource

Ansible For Everyone (Ansible Playbooks) - Part 3

Anuvindh for AWS Community Builders ・ Jun 16 '22

#webdev #tutorial #devops #productivity

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry

Deploy Containerized Applications with ECS

Anuvindh — Thu, 12 May 2022 09:26:53 +0000

DAY 31- Deploy Containerized Applications with ECS - Day Thirty One

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

Get the app

Here Iam using a website with nginx server to deploy on a container with the help of ECR.
Let’s get the data

git clone https://github.com/anuvindhs/CLOUD-is-AWSome.git

Docker

Building a docker file

Lets build our NGINX docker file for our website.
once you have created the docker file inside the folder, copy-paste the below commands

FROM nginx:latest
COPY ./ /usr/share/nginx/html/

I am using VScode, check below to understand the folder structure

AWS Permissions
Make sure you have programmatic access via AWS CLI
Full permissions to ECS & AmazonEC2ContainerRegistryFullAccess

ECR

Create a repository

Goto ECR from AWS console and create a repository
Create a ECR repo ,i have named mine webapp-ecr-repo

Login to ECR

if you open the repo, on the right-hand side you can see an option for view push commands.

Now using AWS CLI login to ECR

aws ecr get-login-password --region xx-xxxxxx-xx| docker login --username AWS --password-stdin xxxxxxxxxx.dkr.ecr.xx-xxxxxx-xx.amazonaws.com

Build the docker image

docker build -t webapp-ecr-repo .

Lets tag our image with repo name

docker tag webapp-ecr-repo:latest xxxxxxxxx.dkr.ecr.xx-xxxxxx-xx.amazonaws.com/webapp-ecr-repo:latest

Lets push the image to the repository

docker push xxxxxxxxxx.dkr.ecr.xx-xxxxxxx-xx.amazonaws.com/webapp-ecr-repo:latest

if you are using PowerShell on windows please use windows commands to push the image to the repo.

ECS

Create a cluster

Goto ECS dashboard and click Create Cluster.
select EC2 Linux + Networking
Enter Cluster name & EC2 instance type , am keeping it to t2.micro.
Select the default VPC and Subnets available.
Also enable Auto assign public IP

you can use default Security group or create a new one or can attach a Security group which is already created.
Now click Create

Creating Task Definition

Click on create Task Definition & then select EC2

I am naming mine as Taskdef-webapp-ecr
Update Task memory to 128 and Task CPU to 1 vCPU, then click Add Container
Add a name, mine is container-webapp-ecr
Copy your ECR repo URI from the repository and update that on the image coloumn
Map your ports, here its 80:80 ,
Now add, and create the Task definition.

Run the Task

goto Clusters, select Task then click Run New task
Select EC2
Select out Task Definition we created.
Select our Cluster
leave everything default and click Run Task

Once the Task is created you will be able to see a Running Status
if you navigate to external Link you will be able to see the live website.

Congratulations, now you have successfully configured a docker image which you have pushed to ECR and Deployed on a container with ECS.

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry

Lets talk a bit about ISO/IEC 27001

Anuvindh — Thu, 05 May 2022 23:38:07 +0000

DAY 30- ISO/IEC 27001 - Day Thirty

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

What is ISO/IEC 27000 Series?

A Popular Information Security Management Standard is used to keep your information technology assets secure.

Enabling such standards to help the organization to keep their assets safe such as financial information, intellectual property, employee details, or information entrusted by third parties.

This consists of policies, procedures, guidelines, and resources associated with the organization; which is managed by the organization to protect information assets.

ISO/IEC 27001 is the only standard from ISO27000 families standard that can be audited.

when you define your Risk Assignment and your organization’s risk acceptance will effectively help in treating and managing risks.

ISO/IEC 27001, Information security management systems

Its important employees commit to ISMS for each company. That will help the employees to understand the obligations and responsibilities that they need to follow, this can achieve by continuous training & reviewing.
Implement encryptions for your data. Make sure you document everything, log implementation, alarms, etc..
All third party services should be competent about security.
Need to consider any law that can affect your process, this could be like intellectual property laws, this will be different to each country.
Again, Document everything processes, plans, incident responses, vendors, expected risks etc...

Confidentiality-Integrity-Availability is the core of information security.

A small challenge for you

What does the below equation proves ?

Comment the answer __________________________

What are the factors that influence your Organisation on implementing ISO 27001?

a) Internal
Employees, Owners

b) External
Suppliers, Govt, Regulators, Shareholders etc..

c) Leadership Team
This team Helps in creating an information security Plan. Allocate roles and responsibilities to people who are capable of making decisions that can help to change and improve the process.

d) Planning
This is one of the important roles, planning help to understand the risks and act on time when a risk becomes reality. In simple terms, how to act when an incident occurs. (Document everything).

e) Support

Provide resources, such as budgets and time for the people, organization & team.
- Competence, making sure your team and organization have the ability to do things successfully or efficiently.
- Awareness
- Document, Document, Document everything

f) Operation

Keep documentation to demonstrate the planned process for your organization, and justify if changes are made. This includes third parties as well.
Documents should mention calculated risk level and also should define the risk acceptance rate.
Risk treatment - Implement ISO 27002, Code of good practice for information security controls.

g) Performance evaluation

Monitor, Measure, Analyse and Evaluate everything in your infrastructure. The document should contain what, how, when, and who. This means what all are monitoring, how we are monitoring when we are analyzing, and who is responsible.
Conduct an Internal audit, it helps to understand the performance and effectiveness of your system.
Make sure Management is aware of your audit data.

f) Improvement
Do the continuous improvement, When you find your company is non-compliant with standards, rules, or laws you must take action to improve the system and technologies. Make sure you document these as well.

The Domains Of ISO 27001

There are 18 domains in total but only 14 are audited.

Annex A.5:Information security policies
Annex A.5.11: Policies for Information Security
Annex A.5.1.2: Review the Policies for Information Security
Annex A.6:Organisation of information security
Annex A.6.1 is responsible for the assignment of information security roles and responsibilities within the organization.
Annex A.6.2 addresses security practices for mobile gadgets and remote working.
Annex A.7:Human resource security
Annex A.8: Asset Management
Annex A.8.1: identification of information assets according to ISMS
Annex A.8.2: information asset classification
Annex A.8.3: protection of sensitive data from unauthorized access, modification, or destruction
Annex A.9: Access Control
Annex A.10: Cryptography
Annex A.11: Physical and Environmental Security
Annex.A.11.1: Prevents unpermitted physical access, interference, trespass, or damage to the organization’s facility.
Annex A11.2: Protects company equipment from damage, theft, or loss.
Annex A.12: Operations Security
Annex A.13: Communications Security
Annex A.14: System Acquisition, Development, and Maintenance
Annex A.15: Supplier Relations
Annex A.16: Information Security Incident Management
Annex A.17: Information Security Aspects of Business Continuity
Annex A.18: Compliance

Some Additional information

Vocabulary standard:

ISO/IEC 27000, Information security management systems — Overview and vocabulary

Requirement standards:

ISO/IEC 27001, Information security management systems — Requirements
ISO/IEC 27006, Requirements for bodies providing audit and certification of information security management systems
ISO/IEC 27009, Sector-specific application of ISO/IEC 27001 — Requirements

Guideline standards:

ISO/IEC 27002, Code of practice for information security controls
ISO/IEC 27003, Information security management system implementation guidance
ISO/IEC 27004, Information security management — Measurement

ISO/IEC 27005, Information security risk management

ISO/IEC 27007, Guidelines for information security management systems auditing
ISO/IEC TR 27008, Guidelines for auditors on information security controls

ISO/IEC 27013, Guidance on the integrated implementation of ISO/IEC 27001 and ISO/IEC 20000‑1

ISO/IEC 27014, Governance of information security
ISO/IEC TR 27016, Information security management — Organizational economics

Sector-specific guideline standards:

ISO/IEC 27010, Information security management for inter-sector and inter-organizational communications
ISO/IEC 27011, Information security management guidelines for telecommunications organizations based on ISO/IEC 27002
ISO/IEC TR 27015, Information security management guidelines for financial services

ISO/IEC 27017, Code of practice for information security controls based on ISO/IEC 27002 for cloud services

ISO/IEC 27018, Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors
ISO/IEC 27019, Information security management guidelines based on ISO/IEC 27002 for process control systems specific to the energy utility industry

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry

A Git cheat sheet – $get git

Anuvindh — Fri, 29 Apr 2022 04:09:11 +0000

DAY 29 - A Git cheat sheet – $get git - Day Twenty Nine

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

Git Commands Comes handy

Git is a highly matured open-source software that is famous for tracking changes and collaboration among programmers. Git plays a major role in DevOPS for source code management.

The git is very efficient in speed, data integrity, and support for distributed, non-linear workflows

Basic Git commands

Clone a repository

git clone [url]

Start a new repository

git init [repository]

Add file to the staging area

git add [filename]

Save changes to repository & commit

git add .
git commit -m " my first commit"

Status of repository

git status

Show difference which you are not staged

git log

Differences between the two branches – branch_1 and branch_2

git diff branch_1 branch_2

Get the entire commit history

git diff branch_1 branch_2

Git Undo

Undo the previous commit

git revert HEAD^

Revoke from the staging area but leave the working directory unchanged

git reset [file]

Shows which files be removed from the working directory

git clean -n

Git Branches

List all branchs

git branch

Create new branch

git branch [NameOfBranch]

List all branches

git branch -a

Deleting a branch

git branch -d [NameOfBranch]

Merging all changes to current branch

git merge [NameOfBranch]

Checking an existing branch

git checkout [NameOfBranch]

Git Tag

Creating a tag

git tag [TagName]

Deleting a tag

git tag -d [TagName]

Push tags

git push --tags

Git Remote repositories

Getting latest version of the repository

git pull[NameOfBranch] [url]

Gets a specific [branch] from the repo

git fetch [remote_url] [branch]

Get speficif remote copy of branch

git pull [remote_url]

Push branch to remote

git push [remote_url] [BrnaceName]

Git Delete

Deleting file – Force

git rm -f [NameOfFile]

Remove the entire Directory from the working index

git rem -r --cached [NameofDirecotry]

Deleting an entire directory

git rm -r -f [NameofFile]

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry

Auto-scaling : Setup one for your app in five mins

Anuvindh — Tue, 19 Apr 2022 23:54:30 +0000

DAY 28 -Auto-scaling : Setup one for your app in 5 mins - Day Twenty Eight

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

Setup your Load Balancer

Check out this blog to see how to setup loadbalancer in 2 mins.

Load Balancer - Setup One in two Minutes

Anuvindh for AWS Community Builders ・ Apr 8 '22

Auto Scaling

Creating Amazon machine image (AMI)

Go to EC2 console
Select your EC2 , Actions, Image and Templetes , Then click Create Image.
Wait till AMi created you can check this on Images area on EC2 Console

Creating Launch Template

On Ec2 Dashboard Select Launch Template and click Create Launch Template.
Name it LaunchTemplate-AWS-EC2
Name the Launch Template
Selected EC2 AMI we have created earlier
kept t2.micro as Instance type
Selected Key pair
Selected your security group.

Creating Auto Scaling Groups

On EC2 Dash Board Select Auto Scaling Groups
Click on to Create Auto Scaling Groups
Name it as Autoscaling-AWS-LAB
Select all available Subnets
Attach to an existing load balancer
Select Choose from your load balancer target groups
- Select Previously created Target Group
Health check grace period - 300
Enable Monitoring (optional)
Desired capacity 1 ,Minimum capacity 1, Maximum capacity 4.
Target tracking scaling policy , Average CPU Utilization - TargetValue 85%
Add Notifications - you can add SNS Notifications when ever auto scaling triggers
- Create new SNS Topic , Add a Name and Email address Click Next
Click create auto scaling

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry

10 Minutes revision note to Pass Terraform Exam

Anuvindh — Tue, 12 Apr 2022 09:34:34 +0000

DAY 27 - 10 Minutes revision note to Pass Terraform Exam - Day Twenty Seven

100 days of Cloud on GitHub - Read On iCTPro.co.nz - Read on Dev.to

A Github Repo - Link

This repository might help you to do a revision to pass the Terraform Associate Exam.
Links to resources to study for Terraform Associate Exam.
Links to Learning platforms for terraform.
A brief explanation about all terraform exam related topics.
Some useful links.

✅Connect with me on Twitter
🤝🏽Connect with me on Linkedin
🧑🏼‍🤝‍🧑🏻 Read more post on dev.to or iCTPro.co.nz
💻 Connect with me on GitHub

AnuvindhFollow

Experienced Cloud Technology Specialist with a demonstrated skillset of working with Banking , Medical Service , NZ Police & Education industry