DEV Community: jpauline

This blog is such a great read! It breaks down machine learning in a simple and relatable way, making it easy to understand even if you're new to the topic.

jpauline — Thu, 16 Jan 2025 07:20:41 +0000

Educating Machines.

William-Muko ・ Jan 16

Securing Your Network: Understanding the Differences between Security Groups and Network Access Control Lists

jpauline — Fri, 20 Jan 2023 12:01:25 +0000

Security groups and network access control lists (ACLs) are both important tools for securing your network on the AWS cloud, but they serve different purposes and have different use cases.

Security groups are like a bouncer at a club. They control inbound and outbound traffic to and from your resources, like a bouncer controls who can enter and exit a club. Just like a bouncer checks IDs and only allows certain people to enter the club, security groups check the IP addresses and ports of incoming and outgoing traffic, and only allow traffic that meets certain rules. This way, security groups can help protect your resources from unauthorized access and malicious attacks.

Network ACLs, on the other hand, are like a security guard for a building. They control inbound and outbound traffic at the subnet level, like a security guard controls who can enter and exit a building. Just like a security guard checks IDs and only allows certain people to enter the building, network ACLs check the IP addresses and ports of incoming and outgoing traffic, and only allow traffic that meets certain rules. This way, network ACLs can help protect your entire subnet from unauthorized access and malicious attacks.

One key difference between security groups and network ACLs is that security groups are associated with individual resources (such as an EC2 instance), while network ACLs are associated with subnets. This means that security groups provide a more granular level of control over traffic, while network ACLs provide a more broad level of control. Additionally, security groups only allow or deny traffic, while network ACLs allow or deny traffic and also prioritize traffic with a number range from 100-32766.

In short, security groups and network ACLs are both important tools for securing your network on the AWS cloud, but they serve different purposes and have different use cases. Security groups are like a bouncer at a club, controlling inbound and outbound traffic to and from your resources at the individual resource level. Network ACLs, on the other hand, are like a security guard for a building, controlling inbound and outbound traffic at the subnet level.

By Namwakira Pauline

AWS OpenSearch: The Ultimate Data Discovery Tool

jpauline — Fri, 20 Jan 2023 11:52:39 +0000

By Namwakira Pauline

AWS OpenSearch is a service that allows you to easily add search capabilities to your applications and websites. It is built on top of Elasticsearch, a powerful and popular open-source search engine.

An analogy for AWS OpenSearch would be a search engine like Google. Just like Google allows you to search for information on the internet, AWS OpenSearch allows you to search for information within your own applications and websites. It allows you to index your data, create search domains, and define search fields, so that users can easily search for the information they need.

The working of AWS OpenSearch is based on three main components:

Indexing: This is the process of adding your data to the search engine, so it can be searched later. This is similar to indexing a book, where you create an index of terms and their page numbers, so you can quickly find the information you need.
Search domains: A search domain is a collection of search fields that are used to search a specific set of data. It is like creating different sections in a library, where each section has books on a specific topic.
Search fields: Search fields are the specific data fields that you want to search, like the title, author, and ISBN number of a book.

AWS OpenSearch offers several solutions such as:

Cost optimization: You can use reserved instances and spot instances to lower the cost of running the service.
Monitoring and troubleshooting: You can use CloudWatch and Elasticsearch service domains to monitor and troubleshoot the service.
Customization: You can use Elasticsearch plugins and custom scripts to customize the search engine to suit your needs.

AWS OpenSearch offers several advantages such as:

Easy to use: The service is easy to set up and use, and it allows you to add search capabilities to your application with minimal coding.
Scalable: It can handle large amounts of data and traffic, so it can grow with your business.
Customizable: You can customize the search engine to suit your needs, including defining search fields and search domains.

However, it also has some disadvantages such as:

Cost: The service can be expensive, especially if you have a large amount of data or a high volume of traffic.
Maintenance: The service requires regular maintenance and monitoring to ensure that it is running smoothly.
Limited control: As it is a managed service, you have limited control over the underlying infrastructure.

In summary, AWS OpenSearch is a service that allows you to easily add search capabilities to your applications and websites, it is based on Elasticsearch, it's similar to Google, it uses indexing, search domains, and search fields. It offers advantages like easy to use, scalable, and customizable, but also has some disadvantages like cost, maintenance, and limited control. AWS OpenSearch also offers solutions to optimize cost, monitor and troubleshoot, and customize the search engine.

NETWORKING AND CONTENT DELIVERY ON AWS CLOUD

jpauline — Fri, 20 Jan 2023 11:33:49 +0000

By Namwakira Pauline

Networking on AWS cloud can be compared to building a house. Just like building a house requires a foundation, plumbing, and electrical wiring, setting up a network on the AWS cloud requires a Virtual Private Cloud (VPC), routing, and security.

A VPC is like the foundation of the house. It's the virtual space where all of your resources are located, and it's where you can control the IP address range, subnets, and network gateways. Just like a foundation is the base of a house and holds everything together, a VPC is the base of your network infrastructure and connects all of your resources.

Routing is like the plumbing of the house. It's responsible for directing the flow of data between different parts of the network, just like plumbing directs the flow of water in a house. Without proper routing, your network would be like a house with no plumbing, and data would not be able to flow smoothly between resources.

Security is like the electrical wiring of the house. It's responsible for making sure that only authorized users and resources can access the network, just like electrical wiring ensures that only authorized people can access a house's power supply. Without proper security, your network would be like a house with no electrical wiring, and anyone could access it.

NETWORKING SERVICES IN AWS CLOUD

AWS offers a variety of services in the Networking category to help you build and manage your network infrastructure on the cloud. Here are a few examples of these services, along with analogies to help explain them:

Amazon VPC

Amazon VPC allows you to create your own virtual network in the AWS cloud, just like having a private garden in your backyard where you can control who can access it and what plants you can grow. With Amazon VPC, you have full control over your virtual networking environment, including IP ranges, subnets, and network gateways.

Amazon CloudFront

This is a content delivery service provided by AWS. It allows you to distribute your content, such as videos, images, and files, to users around the world in a fast and efficient way.
Think of CloudFront as a fleet of delivery trucks that are strategically placed in different locations around the world, so when a customer requests a package, the truck that is closest to the customer will deliver it. This way, the package will arrive faster, and the cost of delivery will be lower.

Additionally, CloudFront allows you to use features such as caching, which is like having a warehouse where you can store your packages, so that if a customer requests a package that's already in the warehouse, the delivery truck can pick it up from there instead of driving back to the original location to get it. This speeds up the delivery process even more and reduces the load on your servers.

Amazon Route 53

Amazon Route 53 is a scalable and reliable Domain Name System (DNS) service, it is like a phonebook for the internet, it helps you to map a domain name to an IP address, it directs users to the right website or service when they type your domain name in their browser.

AWS Direct Connect

AWS Direct Connect allows you to establish a dedicated network connection from your on-premises data center to the AWS cloud, it is like having a dedicated pipeline for transporting your data between your on-premises data center and the AWS cloud, it provides a more stable and secure connection than using the public internet.

Elastic Load Balancing

Elastic Load Balancing automatically distributes incoming traffic across multiple Amazon Elastic Compute Cloud (EC2) instances, it is like having a traffic cop directing cars to different lanes to avoid traffic congestion, it ensures that your applications can handle the incoming traffic even if there is a spike in traffic.

AWS PrivateLink

AWS PrivateLink enables you to access services over an Amazon VPC endpoint, rather than over the Internet, it is like having a private tunnel to access a specific service, it eliminates exposure to the public internet and improves security.

Amazon API Gateway

This is a fully managed service that makes it easy for developers to create, publish, and maintain APIs (Application Programming Interfaces) at any scale. It allows you to create RESTful and WebSocket APIs that enable applications to interact with your back-end services, such as databases or other web services.
Think of Amazon API Gateway as a gatekeeper to your back-end services. Just like a gatekeeper at a castle controls who can enter and exit, Amazon API Gateway controls who can access your back-end services and how they can access them. You can use Amazon API Gateway to create custom authentication and authorization mechanisms to ensure that only authorized users can access your services.

In summary, AWS offers a variety of services in the Networking category that help you build and manage your network infrastructure on the cloud, such as Amazon VPC, Amazon Route 53, AWS Direct Connect, Elastic Load Balancing and AWS PrivateLink. Each service serves a specific purpose and helps you to create a stable, secure and scalable network infrastructure that supports your business needs.

BABY STEPS INTO THE AWS CLOUD

jpauline — Thu, 08 Sep 2022 17:17:59 +0000

This is gonna be my first post. To say I'm excited would be an overstatement. This is probably coz I have no idea what to write about but baby steps we say, so let's do this.

I am Pauline, a tech enthusiast and I am very passionate about cloud computing, especially AWS cloud. Not because I have tasted all the options available and settled with AWS as my favorite. It's coz this was my first cloud and oops! someone just fell in love.

My cloud journey has been amazing, started with Azubi Africa where I got introduced to the cloud journey. I was enrolled to the AWS re-start program for the first Kenyan cohort. Being a newbie in IT at the time, trust me the journey wasn't that easy. The best part about The restart program is diversity. You not only focus on the AWS Cloud fundamentals but also get introduced to Linux, Python, Networking, Security and Databases. This laid a great foundation for me to later on understand the stuff cooking behind the kitchen doors of the AWS cloud. I definitely recommend the program for anyone who would like to launch a cloud career but doesn't know how to get started. Visit Azubi Africa for more information about the program.

After 3 intense months in the program I finally certified as a cloud practitioner and I was hungry for more. I had a clear view of where I wanted to be career-wise at the moment. So I decided to do the Solution's Architect course still under Azubi Africa. At the same time I landed a contract as a Junior Trainer to train my successors in the program. Training comes with lots of learning and while doing my CSA I got a deep dive on the Well architected framework and learn a lot. Still working as a trainer and parsing knowledge has this fulfilment that comes with it. Feels great to witness students pass their certification exams and launch better cloud careers.

Focused on training for a while and decided why not try the Developer associate certification. This is where my love for server-less technology grew. Plus since I wanna be a Dev-ops engineer, definitely that is the path I had to take. The Developer Associate certification was an eye opener to me on how to actually build applications on AWS but most importantly focus on Server-less. Aced the certification like A week ago and I'm now putting in work to work on some open source projects, do lot's of hand's on labs in order to improve my technical skills.

It's been an Year now, working and learning on AWS but still there is a lot of work to be done...... There are my baby steps into the cloud and cheers to growing wiser and advancing our knowledge and skills.

End of story...... till next time