DEV Community: Lara Wehbe

EC2, Lambda, or Elastic Beanstalk?

Lara Wehbe — Tue, 07 Mar 2023 10:07:11 +0000

So, you have a simple node.js applicaiton that takes input an image from S3, applies some operations on it, and then saves it in another S3.

Here are the options that you might need to consider:

EC2: You can launch an instance with Linux AMI, download dependencies on the instance and launch it to communicate from and to the S3 buckets.
However, you need to handle:
- Scaling
- High Availability
- OS Patching
If you want to let AWS manage all this for you , Check the
second option!
Lambda function: Using Lambda function, you can put the code and add the triggers. In this way, it is fully SERVERLESS approach, you only care about the triggers logic and the code you upload.

But, you need more control over the underlying resources? use the third option.
Elastic Beanstalk: Deploy your code without worrying about the underlying infrastructure, using more traditional application model.

Now that you can distinguish between each of the solutions, you will choose the one that mostly fits your situation!
If you want to build a IaaS, go with EC2.
If you want to build a FaaS ( Function as a Service!), go with Lambda!
And, you guessed it. If you want to build a PaaS, go with Beanstalk!

Let me know what do you think in the comments!:)

Thanks for reading! I hope you found this post helpful in your journey of AWS!

Feel free to reach me out on the following:
LinkedIn: https://www.linkedin.com/in/lara-wehbe/
Email: larawehbee@outlook.com

AWS CCP - Breaking Down Complex Concepts - (2)

Lara Wehbe — Sat, 17 Dec 2022 11:05:05 +0000

Hey!
This is Part 2 of digesting complex concepts for sake of reviewing AWS CCP exam. So let's get going.

In the last article, we talked about the difference between:

CAPEX vs OPEX
CloudWatch vs CloudTrial
CloudFront vs Global Accelerator

In this article, we will proceed with the following concepts:

SSO ( Single Sign On ) vs Cognito
Config vs System Manager
GaurdDuty vs Macie

1. SSO ( Single Sign On ) vs Cognito

Simply put, Cognito is for authenticating users while AWS SSO is for authenticating employees. Both services are used to allow/deny access for users in general to the AWS Resources. However, the main difference is the type of users; that is what decides here which one to use.
As an example, if you want to give some users of other departments temporarily access on only specific resources to use without the need to create user accounts for them, go with SSO, Single Sign On. Whereas, if you want to give access for users, that are out of your organization and are considered end users in general, to some web applications hosted on AWS, but you don't want them to access the resources or become part of the user account, go with Cognito.

Does it sound better now?

2. Config vs Systems Manager

The AWS Config Management Tool is a powerful tool that allows you to manage and automate the configuration of your Amazon Web Services (AWS) resources. It can be considered as the hub of config and configuration history over all resources used. All configurations can be saved in one place. In this case, you can track the config changes along the way and maybe it can be helpful in defining some failure issues as well.

But, Can it be used to automate some processes based on given configuration? The answer is No, but AWS Systems Manager (SSM) can.
AWS Systems Manager is a management tools that provides a unified interface which you can view operational resources and monitor the ongoing changes. Its super power is that you can automate many tasks and make sure it meets the security and compliance needed.

The point here, don't confuse between config that aids as a store for almost all configuration used in resources, and between the systems manager that can be used to automate the infrastructure of many resources ( such as EC2, S3, etc .. ) and still keep record of the ongoing tasks.

Enough of that, now let's discover one of the most interesting security tools in AWS!

3. GaurdDuty vs Macie

Gaurd duty is an effective threat detection service that is continuously looking for malicious attacks and delivering detailed findings to keep the remediation and security compliance always monitored.

Macie, on the other hand, is also an effective threat detection services but it's specialized in sensitive data threat detection and not generalized for all malicious attacks.

So, whenever you see in the exam sensitive data threat detection, consider Macie!

Let me know what do you think in the comments!

Thanks for reading! I hope you found this post helpful in your journey to becoming an Amazon Web Services Cloud Practitioner.

Feel free to reach me out on the following:
LinkedIn: https://www.linkedin.com/in/lara-wehbe/
Email: larawehbee@outlook.com

AWS CCP - Breaking Down Complex Concepts - (1)

Lara Wehbe — Tue, 06 Dec 2022 09:09:52 +0000

As an Amazon Web Services (AWS) Cloud Practitioner, you need to understand the basics of the cloud and how it works. This blog post will help you break down some of the most complex concepts associated with the cloud.

In this article, We'll talk about:

What is the cloud and how it works.
Breaking down complex concepts such as:
1. CAPEX vs OPEX
2. CloudWatch vs CloudTrial
3. CloudFront vs Global Accelerator
4. SSO vs Cognito
5. TCO Calculator
6. Config vs System Manager
7. GaurdDuty vs Macie

What is the Cloud and How it works

The cloud is a network of computers that work together to provide services to people and businesses. These services can include anything from storing files to providing web hosting. The cloud can be used by anyone, anywhere in the world.

So, what does that mean for you as a Cloud Practitioner? Well, it means that you need to understand how the cloud works in order to provide the best possible services to your customers. It's also important to understand the different types of cloud services and how they work together.

Breaking down Complex Concepts

1. CAPEX vs OPEX

Whenever I saw these two terms at any practice exam, I start to panic. Then, I decided to stop the practice exams and go in depth with these two. It turned out that they are really simple!
Capex, or capital expenditure, is the up-front cost of acquiring hardware and software.
Opex, or operational expenditure, is the ongoing cost of running the cloud environment.

If you were asked about the cloud computing advantages over the on premises systems, you will often find the option Opex over Capex, or Capex or Opex.
Which one is the correct?
Of course, Opex over Capex. In cloud, you save the cost of all hardware expenses and will have the payments adapt the pay-as-you-go model, which is, in practical, operational expenses.
Sounds good no?
Let's move forward!

2. CloudWatch vs CloudTrial

If you're looking for a way to keep an eye on your Amazon Web Services (AWS) resources, CloudWatch is a great option.

You can use CloudWatch to monitor your Amazon Elastic Compute Cloud (Amazon EC2) instances, for example. With CloudWatch, you can set up alarms to alert you when your Amazon EC2 instances are nearing their capacity limits. This can help you avoid costly outages.

CloudTrial, on the other hand, tells you Who did What, and When?
Unlike CloudWatch, CloudTrial can show you which API was called at What time and by Who.
So, whenever you see in the exam a question about which services can show you who used the delete API for example, choose CloudTrial.

3. CloudFront vs Global Accelerator

If you're looking to improve the performance of your website, there are a few different options available to you. One option is to use a content delivery network (CDN), such as Amazon CloudFront. Another option is to use a global accelerator, such as the Amazon Global Accelerator. Both of these options can help to improve the performance of your website, but there are some key differences between them.

Amazon CloudFront is a CDN that allows you to cache and deliver your website content to users more quickly and efficiently. It can also help to reduce the load on your origin server. Amazon Global Accelerator is a bit different. It's a network of proxy servers that caches and delivers your website content to users more quickly and efficiently. It can also help to reduce the load on your origin server.

If you're looking to improve the speed and performance of your website, both Amazon CloudFront and Amazon Global Accelerator can be a great option. However, if you're looking for a more cost-effective option, Amazon Global Accelerator may be the way to go.

That's it for now. We'll stop at the latter concepts to make sure you are able now to grasp the knowledge base of each one of them.

The remaining concepts will be explained in details as well in Part 2.

Let me know what do you think in the comments!

Thanks for reading! I hope you found this post helpful in your journey to becoming an Amazon Web Services Cloud Practitioner.

Feel free to reach me out on the following:
LinkedIn: https://www.linkedin.com/in/lara-wehbe/
Email: larawehbee@outlook.com

Python Lambda:Filter Functions

Lara Wehbe — Fri, 02 Dec 2022 15:14:44 +0000

If you’re looking for a way to simplify your code, then lambda filter might be the answer.

Lambda filter is a powerful tool in Python that allows you to filter out elements from an iterable object, such as a list or a dictionary, without having to write out a for loop. It’s a great way to quickly reduce complexity and make your code more readable. Let’s look at an example to see how lambda filter works.

Say we have a list of numbers and we want to filter out all the even numbers. Here’s how we would do it with a for loop:

Now, let’s see how we would do this with a lambda filter:

As you can see, we’ve reduced the amount of code needed to achieve the same result. With lambda filter, we can pass a function as an argument to filter out elements from an iterable. The function will be applied to each element in the iterable, and if the function returns True for that element, it will be included in the result.

In this example, we used a lambda function to check if each element in the list was even. If it was, the element would be included in the result. If it wasn’t, it would be filtered out.

Lambda filter can be a great way to simplify your code and make it more readable. With just a few lines of code, you can reduce complexity and make your code more efficient. Give it a try and see how it works for you!

AWS Budget Best Practice!

Lara Wehbe — Wed, 30 Nov 2022 08:38:43 +0000

When I passed the AWS CCP exam, I was more than excited to start getting my hands dirty and experiment some of the AWS free tier resources.

Then, a friend of mine passed by me and said: "You know, the first time I tried to experiment on AWS, I received a bill of 4K$!, so pay attention when you want to launch any new service and make sure it is still in the free tier!"

To be honest, this frightened me. Yes, due to my novice experience in AWS, I might launch some resources without prior knowledge of the cost severity.

Here comes the AWS Budget Best Practice!

If you're an AWS customer, you know that it's critical to keep an eye on your costs. The AWS Cost and Billing page is your go-to resource for tracking your spending, but did you know that you can also set up an activation budget alarm? This alarm can help you stay within your budget by notifying you when you're getting close to your set limit.

Why set up an activation budget alarm?

There are a few reasons why you might want to set up an activation budget alarm. First, it can help you avoid overspending. Second, it can help you plan for future expenses. Third, it can help you identify areas where you can reduce your spending.

How does the activation budget alarm work?

The alarm is designed to alert you when your spending reaches a certain limit. You can set the limit to whatever amount you want. Once the limit is reached, the alarm will send you a notification. You can then decide whether to increase the limit or reduce your spending.

Is there anything else I can do to track my costs?

In addition to the Cost and Billing page, there are a few other resources you can use to keep an eye on your costs.

AWS Billing and Cost Management console, which provides a comprehensive view of your costs.
AWS Budgets page, which allows you to set up and track your monthly budget.
AWS Cost and Billing report, which provides a detailed breakdown of your spending.

Let me know what do you think in the comments!

Thanks for reading! I hope you found this post helpful in your journey to becoming an Amazon Web Services Cloud Practitioner.

Feel free to reach me out on the following:
LinkedIn: https://www.linkedin.com/in/lara-wehbe/
Email: larawehbee@outlook.com

AWS Cloud Computing - Beginners Essentials

Lara Wehbe — Tue, 29 Nov 2022 12:04:07 +0000

Hey there!

If you're new to the world of cloud computing, then you might be feeling a little bit overwhelmed by all the new concepts and terminology. Don't worry, we're here to help! In this article, we're going to break down some of the most important concepts in the AWS Cloud Practitioner curriculum. We'll start with a brief overview of each concept, and then we'll provide a few examples to help clarify the concepts.

So, without further ado, let's get started!

The first concept we'll cover is the AWS shared responsibility model. This model outlines the division of responsibility between Amazon and you, the customer, when it comes to security and compliance in the cloud. Amazon is responsible for the security of the cloud infrastructure, while you are responsible for the security of your data and applications.

Next, we'll discuss the concept of least privilege. This principle states that you should only grant users the minimum level of access they need to perform their job. For example, if you have a marketing team that needs to access your customer database, you would grant them access to the database, but you wouldn't let them have access to the rest of your system.

After that, we'll talk about the three key services that make up the foundation of the AWS Cloud Practitioner curriculum: Amazon S3, Amazon EC2, and Amazon RDS. We'll provide a brief overview of each service and then we'll show you a few simple examples of how they can be used.

Finally, we'll wrap up the post with a reminder that the AWS Cloud Practitioner curriculum is constantly evolving. Be sure to check back often for new content and updates!

AWS Shared Responsibility Model

The shared responsibility model in Amazon Web Services (AWS) is a way of dividing up the tasks associated with managing a cloud computing environment.
Under the shared responsibility model, the cloud provider is responsible for managing the infrastructure that provides the customer with access to their resources. This includes tasks such as ensuring that the physical hardware is up and running, that the networking is working as intended, and that the storage is available.
The customer is responsible for managing the applications and data that they have access to. This includes tasks such as ensuring that the applications are up and running, that they are able to communicate with each other as intended, and that the data is available.

Least Privilege in AWS

Source
In short, it's a security best practice that limits an account's access to only the resources it needs. This can help reduce the potential impact of a data breach or other security incident.
So, how does it work? Let's say you have an account with full access to all resources in your AWS environment. If you want to limit that account's access to just a few specific resources, you can do so by applying a least privilege policy. This policy would allow the account to access only the resources it needs, while blocking access to any other resources.

Three Key Services: EC2, S3 and RDS

Amazon EC2, Amazon S3, and Amazon RDS are the three key services that make up the foundation of the AWS Cloud Practitioner curriculum. These services are essential for anyone who wants to learn how to build and manage applications on the AWS Cloud. Amazon S3 is a cloud storage service that provides scalable, reliable, and affordable storage for your data. Amazon EC2 is a web service that provides secure, resizable, and reliable compute resources for your applications. Amazon RDS is a database service that provides reliable and scalable database resources for your applications. These three services work together to provide a powerful and flexible set of cloud resources for your applications.

Let me know what do you think in the comments!

Thanks for reading! I hope you found this post helpful in your journey to becoming an Amazon Web Services Cloud Practitioner.

Feel free to reach me out on the following:
LinkedIn: https://www.linkedin.com/in/lara-wehbe/
Email: larawehbee@outlook.com

AWS Cloud Practitioner - Insights Mind Map

Lara Wehbe — Tue, 29 Nov 2022 07:07:40 +0000

The Amazon Web Services (AWS) Cloud Practitioner exam is a basic exam that covers the core concepts of the Amazon Web Services (AWS) cloud platform. The exam is designed for individuals who are new to the Amazon Web Services (AWS) cloud platform and want to gain a basic understanding of its concepts and features. The exam is also designed for individuals who are already familiar with the Amazon Web Services (AWS) cloud platform and want to refresh their knowledge of its concepts and features.
It is not limited to technicians only, as it doesn't involve a lot of coding skills. Anyone can apply to this exam including-but not limited to- marketing expertise and accountants as an example.

After completing the course of AWS Cloud Practitioner exam, the candidate might feel overwhelmed due to the large amount of services and their definitions.
Here is a brief of the most important:

Understanding the basics of cloud computing.
Understanding how to best utilize the Amazon Web Services (AWS) platform.
Learning how to design and implement a cloud-based solution.
Leveraging Amazon Web Services (AWS) best practices.

You might feel overwhelmed at the first look of the course titles. They are up to 19 titles, and if you are new to cloud computing, big titles can be scary such as 'Managing Infrastructure at a scale', or 'AWS Global Infrastructure'.
The most important thing is to grasp the baseline knowledge of each section and to make sure you know the following:

Definition of the service
When, Why, and how to use it
The services similar to it or the tools that can be helpful
Check the Shared Responsibility model.

Pay Attention for the Shared Responsibility Model as this is a major part of the exam, and as a Cloud Practitioner it is crucial to know what your responsibility is and what the AWS cloud provider responsibility is.

In the following link, you will find a Mind Map that will guide you through the titles that are most important to cover and make sure you know them before you apply the exam.
Please note that these are the most important, but not limited to, all the needed titles in the exam.

When I finished the course studying, I created this mind map and made sure that I am familiar with each title of it.
Hope it helps!
A sneak peak on the mind map:

Thanks for reading! I hope you found this post helpful in your journey to becoming an Amazon Web Services Cloud Practitioner.

And Feel free to reach me out on:
LinkedIn: https://www.linkedin.com/in/lara-wehbe/
Email: Larawehbee@outlook.com