DEV Community

SAMYUKTHA G
SAMYUKTHA G

Posted on

Cloud hands- on workshop

#aws #cloud #infrastructure #security

Cloud Computing Hands-on Workshop Documentation

  1. Identity & Access Management (IAM) CLI Identity Verification: Authenticated using the AWS Command Line Interface (CLI) and confirmed credentials with the aws sts get-caller-identity command. IAM Role Creation: Configured a dedicated IAM service role named EC2-s3-Access-role for EC2 instances to enable secure, credential-less access to AWS resources. Policy Attachment: Attached managed policies (including Amazon S3 access permissions) to the role to grant authorized permissions following the principle of least privilege.
  2. Compute Provisioning & Remote Access (Amazon EC2) Instance Management: Launched and monitored an Ubuntu virtual machine (my-web-server, t3.micro) in the eu-north-1 region. Key Pair Security: Set proper file permissions on the private key using chmod 400 "cit-demo-key-pair.pem" to satisfy SSH security requirements. Remote Shell Access: Established a secure connection to the instance using SSH over its public DNS. Command-Line Data Ingestion: Downloaded remote datasets directly to the server environment using curl -L and verified file integrity with ls -l.
  3. Object Storage & Global Delivery (Amazon S3 & CloudFront) Bucket Configuration: Utilized the Amazon S3 bucket samyuktha-45-15092026 for object storage and asset hosting. Asset Staging: Uploaded multiple static website assets, including portfolio markup (portfolio.html), resume documents (sam_portfolio.pdf), and project images. CDN Acceleration: Integrated Amazon CloudFront to serve hosted static assets globally with caching and low latency. Object Lifecycle Management: Tested object removal operations by permanently deleting temporary files (such as dataset CSVs) directly from the bucket interface.
  4. Serverless Event Handling & Monitoring (Lambda & CloudWatch) Event-Driven Workflows: Integrated S3 bucket events with an AWS Lambda function (dataset-upload-handler) to trigger backend actions based on storage events. Log Inspection: Monitored execution logs inside Amazon CloudWatch Logs to review detailed event payloads. Trigger Verification: Confirmed that S3 deletion actions generated an ObjectRemoved:Delete event record, verifying proper communication across storage and compute services.
  5. Additional Setup ORCID Registration: Registered and verified a unique profile on ORCID for digital researcher onboarding.

Top comments (0)