AJ Final Internship Report
AJ Final Internship Report
An Internship Report on
“CLOUD COMPUTING WITH AWS”
Submitted in the partial fulfillment of the requirements for the Award of
Degree of
BACHELOR OF ENGINEERING
In
ELECTRONICS & COMMUNICATION ENGINEERING
Submitted by
ANJUM KM
3VC17EC004
Internship carried out at
INTERNSHALA
Internal Guide External Guide
Mrs. Rakhee Patil Mr. Shashank
Assistant Professor Trainer
RYMEC, Ballari Internshala
An Internship Report
on
“CLOUD COMPUTING WITH AWS”
Submitted in the partial fulfillment of the requirements for the Award of Degree
of
BACHELOR OF ENGINEERING
In
ELECTRONICS & COMMUNICATION ENGINEERING
Submitted by
ANJUM KM
3VC17EC004
CERTIFICATE
Certified that the internship report entitled “Cloud computing with AWS ” is carried out
by Ms. ANJUM KM bearing USN: 3VC17EC004, a bonafide student of Rao Bahadur Y
Mahabaleswarappa Engineering College, Ballari in partial fulfillment for the Award of
Bachelor of Engineering in Electronics & Communication Engineering of Visvesvaraya
Technological University, Belagavi during the year 2020-2021. It is certified that all
corrections/suggestions indicated for Internal Assessment have been incorporated in the report
deposited in the departmental library. The internship report has been approved as it satisfies
the academic requirements in respect of internship work prescribed for the said Degree.
ACKNOWLEDGEMENT
It is my privilege and primary duty to express my gratitude and respect to all those who
guided and inspired me in successful completion of this internship.
Lastly, I would like to express my gratitude to all those who have directly or indirectly
contributed their efforts in making internship a success.
ANJUM KM
3VC17EC004
II
DECLARATION
I, ANJUM KM, student of eight semester BE, in the Department of Electronics and
Communication Engineering, RYMEC, Ballari declare that the internship entitled “CLOUD
and submitted in partial fulfillment of the course requirements for the award of degree in
ANJUM KM
3VC17EC004
III
EXECUTIVE SUMMARY
This internship has been a rewarding experience. I have been able to meet and
network with so many people which will help me with many opportunities in life.
I learnt verbal communication, non-verbal communication, problem solving, time
management skills, observations, self-motivation.
This internship report stresses on the work experience I have gathered as an intern
in the cloud computing with AWS at INTERNSHALA. I mainly have
incorporated my experience at how to access the cloud, what all services the cloud
provides especially its service models such as Infrastructure as a service, Platform
as a service & Software as a service.
As being completely new at the cloud computing environment, every hour spent
at internshala trainings gave me some amount of experience all the time all of
which cannot be explained in words. But nevertheless, they were all useful for
my career. In six weeks of my internship I have gained knowledge on aws
compute services, aws network services and aws storage services. As well as it
offer’s services which are cost effective , reliable, and easy to use. On a whole
cloud computing is here to stay this technology is both powerful and inspiring.
This internship helped me to extend my knowledge on AWS cloud platform and
its contrast with other cloud platform.
IV
TABLE OF CONTENTS
Page No.
ACKNOWLEDGEMENT I
DECLARATION II
TABLE OF CONTENTS IV
2.1 History 2
3.2 Architecture 5
6.1 Amazon S3 38
7.1 Advantages 48
7.2 Disadvantages 49
7.3 Applications 50
8.1 Conclusion 52
8.2 References 53
Cloud computing with AWS
CHAPTER 1
ORGANIZATION PROFILE
They are a technology company on a mission to equip students with relevant skills & practical
exposure through internships and online trainings. Imagine a world full of freedom and
possibilities. A world where you can discover your passion and turn it into your career. A
world where your practical skills matter more than your university degree. A world where you
do not have to wait till 21 to taste your first work experience (and get a rude shock that it is
nothing like you had imagine it to be). A world where you graduate fully assured, fully
confident, and fully prepared to stake claim on your place in the world. Internshala is offering
cloud computing with Amazon platform called Amazon web services. In 2006, Amazon Web
Services (AWS) started to offer IT services to the market in the form of web services, which
is nowadays known as cloud computing. With this cloud, we need not plan for servers and
other IT infrastructure which takes up much of time in advance. Instead, these services can
instantly spin up hundreds or thousands of servers in minutes and deliver results faster. We
pay only for what we use with no up-front expenses and no long-term commitments, which
makes AWS cost efficient.
Today, AWS provides a highly reliable, scalable, low-cost infrastructure platform in the cloud
that powers multitude of businesses in 190 countries around the world. Amazon Web Services
(AWS) is Amazon’s cloud web hosting platform that offers flexible, reliable, scalable, easy-
to-use, and cost-effective solutions. This tutorial covers various important topics illustrating
how AWS works and how it is beneficial to run your website on Amazon Web Services.
CHAPTER 2
ABOUT COPMPANY
2.1 History
The platform, which was founded in 2010, started out as a WordPress blog that aggregated
internships across India and articles on education, technology and skill gap. Internshala
launched its online trainings in 2014. As of 2018, the platform had 3.5 million students and
80,000 companies.
1. Internship and job posting: Organization & individuals looking to hire interns and/or
full-time employees can post their internship and/or job requirement on Internshala.
Currently, internships are posted for free and a fee of INR 4999 is charged from the
employers for posting a full-time job. Visit Internshala Employer Section to know
more.
2. Internship and job search: Internship and job seekers from all over India can search
and apply for internships and jobs relevant to their coursework and interest free of cost.
Visit Internshala Student Section to know more.
3. Internshala Trainings: Internshala offers a variety of online training programs across
multiple disciplines (Machine Learning, Web Development, Digital Marketing, Java,
French and several others) which students can do from the comfort of their homes and
learn the skills needed in today’s industry. Visit Internshala Trainings to know more.
Internshala reserves the right to add/remove any product and service at its sole discretion or
change the price charged for such offerings.
CHAPTER 3
Types of Clouds
There are three types of clouds − Public, Private, and Hybrid cloud.
Public Cloud
In public cloud, the third-party service providers make resources and services available to
their customers via Internet. Customer’s data and related security is with the service providers’
owned infrastructure.
Private Cloud
A private cloud also provides almost similar features as public cloud, but the data and services
are managed by the organization or by the third party only for the customer’s organization. In
this type of cloud, major control is over the infrastructure so security related issues are
minimized.
Hybrid Cloud
A hybrid cloud is the combination of both private and public cloud. The decision to run on
private or public cloud usually depends on various parameters like sensitivity of data and
applications, industry certifications and required standards, regulations, etc.
There are three types of service models in cloud − IaaS, PaaS, and SaaS.
IaaS
IaaS stands for Infrastructure as a Service. It provides users with the capability to provision
processing, storage, and network connectivity on demand. Using this service model, the
customers can develop their own applications on these resources.
PaaS
PaaS stands for Platform as a Service. Here, the service provider provides various services
like databases, queues, workflow engines, e-mails, etc. to their customers. The customer can
then use these components for building their own applications. The services, availability of
resources and data backup are handled by the service provider that helps the customers to
focus more on their application's functionality.
SaaS
SaaS stands for Software as a Service. As the name suggests, here the third-party providers
provide end-user applications to their customers with some administrative capability at the
application level, such as the ability to create and manage their users. Also some level of
customizability is possible such as the customers can use their own corporate logos, colors,
etc.
3.2 Architecture
This is the basic structure of AWS EC2, where EC2 stands for Elastic Compute Cloud. EC2
allow users to use virtual machines of different configurations as per their requirement. It
allows various configuration options, mapping of individual server, various pricing options,
etc. We will discuss these in detail in AWS Products section. Following is the diagrammatic
representation of the architecture.
Note − In the above diagram S3 stands for Simple Storage Service. It allows the users to store
and retrieve various types of data using API calls. It doesn’t contain any computing element.
We will discuss this topic in detail in AWS products section.
Load balancing simply means to hardware or software load over web servers, that improver's
the efficiency of the server as well as the application. Following is the diagrammatic
representation of AWS architecture with load balancing.
Hardware load balancer is a very common network appliance used in traditional web
application architectures.
AWS provides the Elastic Load Balancing service, it distributes the traffic to EC2 instances
across multiple available sources, and dynamic addition and removal of Amazon EC2 hosts
from the load-balancing rotation.
Elastic Load Balancing can dynamically grow and shrink the load-balancing capacity to
adjust to traffic demands and also support sticky sessions to address more advanced routing
needs.
Amazon Cloud-front
It is responsible for content delivery, i.e. used to deliver website. It may contain dynamic,
static, and streaming content using a global network of edge locations. Requests for content
at the user's end are automatically routed to the nearest edge location, which improves the
performance.
Amazon Cloud-front is optimized to work with other Amazon Web Services, like Amazon S3
and Amazon EC2. It also works fine with any non-AWS origin server and stores the original
files in a similar manner.
In Amazon Web Services, there are no contracts or monthly commitments. We pay only for
as much or as little content as we deliver through the service.
It is used to spread the traffic to web servers, which improves performance. AWS provides
the Elastic Load Balancing service, in which traffic is distributed to EC2 instances over
multiple available zones, and dynamic addition and removal of Amazon EC2 hosts from the
load-balancing rotation.
Elastic Load Balancing can dynamically grow and shrink the load-balancing capacity as per
the traffic conditions.
Security Management
Amazon’s Elastic Compute Cloud (EC2) provides a feature called security groups, which is
similar to an inbound network firewall, in which we have to specify the protocols, ports, and
source IP ranges that are allowed to reach your EC2 instances.
Each EC2 instance can be assigned one or more security groups, each of which routes the
appropriate traffic to each instance. Security groups can be configured using specific subnets
or IP addresses which limits access to EC2 instances.
Elastic Caches
Amazon Elastic Cache is a web service that manages the memory cache in the cloud. In
memory management, cache has a very important role and helps to reduce the load on the
services, improves the performance and scalability on the database tier by caching frequently
used information.
Amazon RDS
Amazon RDS (Relational Database Service) provides a similar access as that of MySQL,
Oracle, or Microsoft SQL Server database engine. The same queries, applications, and tools
can be used with Amazon RDS.
It automatically patches the database software and manages backups as per the user’s
instruction. It also supports point-in-time recovery. There are no up-front investments
required, and we pay only for the resources we use.
Amazon RDS allows users to install RDBMS (Relational Database Management System) of
your choice like MySQL, Oracle, SQL Server, DB2, etc. on an EC2 instance and can manage
as required.
Amazon EC2 uses Amazon EBS (Elastic Block Storage) similar to network-attached storage.
All data and logs running on EC2 instances should be placed on Amazon EBS volumes, which
will be available even if the database host fails.
Amazon EBS volumes automatically provide redundancy within the availability zone, which
increases the availability of simple disks. Further if the volume is not sufficient for our
databases needs, volume can be added to increase the performance for our database.
Using Amazon RDS, the service provider manages the storage and we only focus on managing
the data.
AWS cloud provides various options for storing, accessing, and backing up web application
data and assets. The Amazon S3 (Simple Storage Service) provides a simple web-services
interface that can be used to store and retrieve any amount of data, at any time, from anywhere
on the web.
Amazon S3 stores data as objects within resources called buckets. The user can store as many
objects as per requirement within the bucket, and can read, write and delete objects from the
bucket.
Amazon EBS is effective for data that needs to be accessed as block storage and requires
persistence beyond the life of the running instance, such as database partitions and application
logs.
Amazon EBS volumes can be maximized up to 1 TB, and these volumes can be striped for
larger volumes and increased performance. Provisioned IOPS volumes are designed to meet
the needs of database workloads that are sensitive to storage performance and consistency.
Amazon EBS currently supports up to 1,000 IOPS per volume. We can stripe multiple
volumes together to deliver thousands of IOPS per instance to an application.
Auto Scaling
The difference between AWS cloud architecture and the traditional hosting model is that AWS
can dynamically scale the web application fleet on demand to handle changes in traffic.
In the traditional hosting model, traffic forecasting models are generally used to provision
hosts ahead of projected traffic. In AWS, instances can be provisioned on the fly according to
a set of triggers for scaling the fleet out and back in. Amazon Auto Scaling can create capacity
groups of servers that can grow or shrink on demand.
In AWS, network devices like firewalls, routers, and load-balancers for AWS applications no
longer reside on physical devices and are replaced with software solutions.
Multiple options are available to ensure quality software solutions. For load balancing choose
Zeus, HAProxy, Nginx, Pound, etc. For establishing a VPN connection choose OpenVPN,
OpenSwan, Vyatta, etc.
No security concerns
AWS provides a more secured model, in which every host is locked down. In Amazon EC2,
security groups are designed for each type of host in the architecture, and a large variety of
simple and tiered security models can be created to enable minimum access among hosts
within your architecture as per requirement.
EC2 instances are easily available at most of the availability zones in AWS region and
provides model for deploying your application across data centers for both high availability
and reliable.
AWS Management Console is a web application for managing Amazon Web Services. AWS
Management Console consists of list of various services to choose from. It also provides all
information related to our account like billing.
This console provides an inbuilt user interface to perform AWS tasks like working with
Amazon S3 buckets, launching and connecting to Amazon EC2 instances, setting Amazon
CloudWatch alarms, etc.
Step 2 − Select the choice from the list of categories and we get their sub-categories such as
Computer and Database category is selected in the following screenshots.
Step 3 − Select the service of your choice and the console of that service will open.
Click the Edit menu on the navigation bar and a list of services appears. We can create their
shortcuts by simply dragging them from the menu bar to the navigation bar.
When we drag the service from the menu bar to the navigation bar, the shortcut will be created
and added. We can also arrange them in any order. In the following screenshot we have created
shortcut for S3, EMR and DynamoDB services.
To delete the shortcut, click the edit menu and drag the shortcut from the navigation bar to the
service menu. The shortcut will be removed. In the following screenshot, we have removed
the shortcut for EMR services.
Selecting a Region
Many of the services are region specific and we need to select a region so that resources can
be managed. Some of the services do not require a region to be selected like AWS Identity
and Access Management (IAM).
To select a region, first we need to select a service. Click the Oregon menu (on the left side of
the console) and then select a region
We can change password of our AWS account. To change the password, following are the
steps.
Step 1 − Click the account name on the left side of the navigation bar.
Step 2 − Choose Security Credentials and a new page will open having various options. Select
the password option to change the password and follow the instructions.
Step 3 − After signing-in, a page opens again having certain options to change the password
and follow the instructions.
Click the account name in the navigation bar and select the 'Billing & Cost Management'
option.
Now a new page will open having all the information related to money section. Using this
service, we can pay AWS bills, monitor our usage and budget estimation.
The AWS Console mobile app, provided by Amazon Web Services, allows its users to view
resources for select services and also supports a limited set of management functions for select
resource types.
Following are the various services and supported functions that can be accessed using the
mobile app.
S3
Route 53
Auto Scaling
Elastic Beanstalk
DynamoDB
• View tables and their details like metrics, index, alarms, etc.
CloudFormation
OpsWorks
CloudWatch
Services Dashboard
To have access to the AWS Mobile App, we must have an existing AWS account. Simply
create an identity using the account credentials and select the region in the menu. This app
allows us to stay signed in to multiple identities at the same time.
For security reasons, it is recommended to secure the device with a passcode and to use an
IAM user's credentials to log in to the app. In case the device is lost, then the IAM user can
be deactivated to prevent unauthorized access.
Amazon provides a fully functional free account for one year for users to use and learn the
different components of AWS. You get access to AWS services like EC2, S3, DynamoDB,
etc. for free. However, there are certain limitations based on the resources consumed.
Step 1 − To create an AWS account, open this link https://aws.amazon.com and sign-up for
new account and enter the required details.
If we already have an account, then we can sign-in using the existing AWS password.
Step 2 − After providing an email-address, complete this form. Amazon uses this information
for billing, invoicing and identifying the account. After creating the account, sign-up for the
services needed.
Step 3 − To sign-up for the services, enter the payment information. Amazon executes a
minimal amount transaction against the card on the file to check that it is valid. This charge
varies with the region.
Step 4 − Next, is the identity verification. Amazon does a call back to verify the provided
contact number.
Step 5 − Choose a support plan. Subscribe to one of the plans like Basic, Developer, Business,
or Enterprise. The basic plan costs nothing and has limited resources, which is good to get
familiar with AWS.
Step 6 − The final step is confirmation. Click the link to login again and it redirects to AWS
management console.
Now the account is created and can be used to avail AWS services.
• An AWS account ID
• A conical user ID
AWS Account ID
It is a 12-digit number like 123456789000 and is used to construct Amazon Resource Names
(ARN). This ID helps to distinguish our resources from resources in other AWS accounts.
To know the AWS account number, click Support on the upper right side of the navigation
bar in AWS management console as shown in the following screenshot.
IAM is a user entity which we create in AWS to represent a person that uses it with limited
access to resources. Hence, we do not have to use the root account in our day-to-day activities
as the root account has unrestricted access to our AWS resources.
Step 4 − We can also see Access Key IDs and secret keys by selecting Show Users Security
Credentials link. We can also save these details on the computer using the Download
Credentials option.
Step 5 − We can manage the user’s own security credentials like creating password, managing
MFA devices, managing security certificates, creating/deleting access keys, adding user to
groups, etc.
CHAPTER 4
Amazon EC2 (Elastic Compute Cloud) is a web service interface that provides resizable
compute capacity in the AWS cloud. It is designed for developers to have complete control
over web-scaling and computing resources.
EC2 instances can be resized and the number of instances scaled up or down as per our
requirement. These instances can be launched in one or more geographical locations or
regions, and Availability Zones (AZs). Each region comprises of several AZs at distinct
locations, connected by low latency networks in the same region.
EC2 Components
In AWS EC2, the users must be aware about the EC2 components, their operating systems
support, security measures, pricing structures, etc.
Amazon EC2 supports multiple OS in which we need to pay additional licensing fees like:
Red Hat Enterprise, SUSE Enterprise and Oracle Enterprise Linux, UNIX, Windows Server,
etc. These OS needs to be implemented in conjunction with Amazon Virtual Private Cloud
(VPC).
Security
Users have complete control over the visibility of their AWS account. In AWS EC2, the
security systems allow create groups and place running instances into it as per the requirement.
You can specify the groups with which other groups may communicate, as well as the groups
with which IP subnets on the Internet may talk.
Pricing
AWS offers a variety of pricing options, depending on the type of resources, types of
applications and database. It allows the users to configure their resources and compute the
charges accordingly.
Fault tolerance
Amazon EC2 allows the users to access its resources to design fault-tolerant applications. EC2
also comprises geographic regions and isolated locations known as availability zones for fault
tolerance and stability. It doesn’t share the exact locations of regional data centers for security
reasons.
When the users launch an instance, they must select an AMI that's in the same region where
the instance will run. Instances are distributed across multiple availability zones to provide
continuous services in failures, and Elastic IP (EIPs) addresses are used to quickly map failed
instance addresses to concurrent running instances in other zones to avoid delay in services.
Migration
This service allows the users to move existing applications into EC2. It costs $80.00 per
storage device and $2.49 per hour for data loading. This service suits those users having large
amount of data to move.
Features of EC2
• Flexible Tools − Amazon EC2 provides the tools for developers and system
administrators to build failure applications and isolate themselves from common
failure situations.
• Inexpensive − Amazon EC2 wants us to pay only for the resources that we use. It
includes multiple purchase plans such as On-Demand Instances, Reserved Instances,
Spot Instances, etc. which we can choose as per our requirement.
Step 1 − Sign-in to AWS account and open IAM console by using the following
link https://console.aws.amazon.com/iam/.
Step 2 − In the navigation Panel, create/view groups and follow the instructions.
Step 3 − Create IAM user. Choose users in the navigation pane. Then create new users and
add users to the groups.
Step 4 − Create a Virtual Private Cloud using the following instructions.
• Open the Amazon VPC console by using the following link
− https://console.aws.amazon.com/vpc/
• Select VPC from the navigation panel. Then select the same region in which we have
created key-pair.
• Select start VPC wizard on VPC dashboard.
• Select VPC configuration page and make sure that VPC with single subnet is selected.
The choose Select.
• VPC with a single public subnet page will open. Enter the VPC name in the name field
and leave other configurations as default.
• Select create VPC, then select Ok.
Step 5 − Create WebServerSG security groups and add rules using the following instructions.
• On the VPC console, select Security groups in the navigation panel.
• Select create security group and fill the required details like group name, name tag, etc.
• Select your VPC ID from the menu. Then select yes, create button.
• Now a group is created. Select the edit option in the inbound rules tab to create rules.
Step 6 − Launch EC2 instance into VPC using the following instructions.
• Open EC2 console by using the following link − https://console.aws.amazon.com/ec2/
• Select launch instance option in the dashboard.
• A new page will open. Choose Instance Type and provide the configuration. Then
select Next: Configure Instance Details.
• A new page will open. Select VPC from the network list. Select subnet from the subnet
list and leave the other settings as default.
• Click Next until the Tag Instances page appears.
Step 7 − On the Tag Instances page, provide a tag with a name to the instances. Select Next:
Configure Security Group.
Step 8 − On the Configure Security Group page, choose the Select an existing security group
option. Select the WebServerSG group that we created previously, and then choose Review
and Launch.
Step 9 − Check Instance details on Review Instance Launch page then click the Launch
button.
Step 10 − A pop up dialog box will open. Select an existing key pair or create a new key pair.
Then select the acknowledgement check box and click the Launch Instances button.
As the name suggests, auto scaling allows you to scale your Amazon EC2 instances up or
down automatically as per the instructions set by the user. Parameters like minimum and
maximum number of instances are set by the user. Using this, the number of Amazon EC2
instances you’re using increases automatically as the demand rises to maintain the
performance, and decreases automatically as the demand decreases to minimize the cost.
Auto Scaling is particularly effective for those applications that fluctuate on hourly, daily, or
weekly usage. Auto Scaling is enabled by Amazon CloudWatch and is available at no extra
cost. AWS CloudWatch can be used to measure CPU utilization, network traffic, etc.
Elastic Load Balancing (ELB) automatically distributes incoming request traffic across
multiple Amazon EC2 instances and results in achieving higher fault tolerance. It detects unfit
instances and automatically reroutes traffic to fit instances until the unfit instances have been
restored in a round-robin manner. However, if we need more complex routing algorithms,
then choose other services like Amazon Route53.
ELB consists of the following three components.
Load Balancer
This includes monitoring and handling the requests incoming through the Internet/intranet and
distributes them to EC2 instances registered with it.
Control Service
SSL Termination
ELB provides SSL termination that saves precious CPU cycles, encoding and decoding SSL
within your EC2 instances attached to the ELB. An X.509 certificate is required to be
configured within the ELB. This SSL connection in the EC2 instance is optional, we can also
terminate it.
Features of ELB
• It is not designed to handle sudden increase in requests like online exams, online
trading, etc.
• Customers can enable Elastic Load Balancing within a single Availability Zone or
across multiple zones for even more consistent application performance.
Step 7 − Click the Add button and a new pop-up will appear to select subnets from the list of
available subnets as shown in the following screenshot. Select only one subnet per availability
zone. This window will not appear if we do not select Enable advanced VPC configuration.
Step 8 − Choose Next; a pop-up window will open. After selecting a VPC as your network,
assign security groups to Load Balancers.
Step 9 − Follow the instructions to assign security groups to load balancers and click Next.
Step 10 − A new pop-up will open having health checkup configuration details with default
values. Values can be set on our own, however these are optional. Click on Next: Add EC2
Instances.
Step 11 − A pop-up window will open having information about instances like registered
instances, add instances to load balancers by selecting ADD EC2 Instance option and fill the
information required. Click Add Tags.
Step 12 − Adding tags to your load balancer is optional. To add tags click the Add Tags Page
and fill the details such as key, value to the tag. Then choose Create Tag option. Click Review
and Create button.
A review page opens on which we can verify the setting. We can even change the settings by
choosing the edit link.
Step 13 − Click Create to create your load balancer and then click the Close button.
CHAPTER 5
Amazon Virtual Private Cloud (VPC) allows the users to use AWS resources in a virtual
network. The users can customize their virtual networking environment as they like, such as
selecting own IP address range, creating subnets, and configuring route tables and network
gateways.
The list of AWS services that can be used with Amazon VPC are −
• Amazon EC2
• Amazon Route 53
• Amazon WorkSpaces
• Auto Scaling
• Elastic Load Balancing
• AWS Data Pipeline
• Elastic Beanstalk
• Amazon Elastic Cache
• Amazon EMR
• Amazon OpsWorks
• Amazon RDS
• Amazon Redshift
Create VPC
Step 1 − Open the Amazon VPC console by using the following link
− https://console.aws.amazon.com/vpc/
Step 2 − Select creating the VPC option on the right side of the navigation bar. Make sure that
the same region is selected as for other services.
Step 3 − Click the start VPC wizard option, then click VPC with single public subnet option
on the left side.
Step 4 − A configuration page will open. Fill in the details like VPC name, subnet name and
leave the other fields as default. Click the Create VPC button.
Step 5 − A dialog box will open, showing the work in progress. When it is completed, select
the OK button.
The Your VPCs page opens which shows a list of available VPCs. The setting of VPC can be
changed here.
Step 1 − Open the Amazon VPC console by using the following link
− https://console.aws.amazon.com/vpc/
Step 2 − Select the security groups option in the navigation bar, then choose create security
group option.
Step 3 − A form will open, enter the details like group name, name tag, etc. Select ID of your
VPC from VPC menu, then select the Yes, create button.
Step 4 − The list of groups opens. Select the group name from the list and set rules. Then click
the Save button.
Step 1 − Open the Amazon VPC console using the following link
− https://console.aws.amazon.com/vpc/
Step 2 − Select the same region as while creating VPC and security group.
Step 3 − Now select the Launch Instance option in the navigation bar.
Step 4 − A page opens. Choose the AMI which is to be used.
Step 5 − A new page opens. Choose an Instance Type and select the hardware configuration.
Then select Next: Configure Instance Details.
Step 6 − Select the recently created VPC from the Network list, and the subnet from the
Subnet list. Leave the other settings as default and click Next till the Tag Instance page.
Step 7 − On the Tag Instance page, tag the instance with the Name tag. This helps to identify
your instance from the list of multiple instances. Click Next: Configure Security Group.
Step 8 − On the Configure Security Group page, select the recently created group from the
list. Then, select Review and Launch button.
Step 9 − On the Review Instance Launch page, check your instance details, then select
Launch.
Step 10 − A dialog box appears. Choose the option Select an existing key pair or create a new
key pair, then click the Launch Instances button.
Step 11 − The confirmation page open which shows all the details related to instances.
Step 1 − Open the Amazon VPC console using the following link
− https://console.aws.amazon.com/vpc/
Step 2 − Select Elastic IP’s option in the navigation bar.
Step 3 − Select Allocate New Address. Then select Yes, Allocate button.
Step 4 − Select your Elastic IP address from the list, then select Actions, and then click the
Associate Address button.
Step 5 − A dialog box will open. First select the Instance from the Associate with list. Then
select your instance from the Instance list. Finally click the Yes, Associate button.
Delete a VPC
There are several steps to delete VPC without losing any resources associated with it.
Following are the steps to delete a VPC.
Step 1 − Open the Amazon VPC console using the following link
− https://console.aws.amazon.com/vpc/
Step 2 − Select Instances option in the navigation bar.
Step 3 − Select the Instance from the list, then select the Actions → Instance State →
Terminate button.
Step 4 − A new dialog box opens. Expand the Release attached Elastic IPs section, and select
the checkbox next to the Elastic IP address. Click the Yes, Terminate button.
Step 5 − Again open the Amazon VPC console using the following link
− https://console.aws.amazon.com/vpc/
Step 6 − Select the VPC from the navigation bar. Then select Actions & finally click the
Delete VPC button.
Step 7 − A confirmation message appears. Click the Yes, Delete button.
Features of VPC
• Many connectivity options − There are various connectivity options that exist in
Amazon VPC.
o Connect VPC directly to the Internet via public subnets.
o Connect to the Internet using Network Address Translation via private subnets.
o Connect securely to your corporate datacenter via encrypted IPsec hardware
VPN connection.
o Connect privately to other VPCs in which we can share resources across
multiple virtual networks through AWS account.
o Connect to Amazon S3 without using an internet gateway and have good
control over S3 buckets, its user requests, groups, etc.
o Combine connection of VPC and datacenter is possible by configuring Amazon
VPC route tables to direct all traffic to its destination.
• Easy to use − Ease of creating a VPC in very simple steps by selecting network set-
ups as per requirement. Click "Start VPC Wizard", then Subnets, IP ranges, route
tables, and security groups will be automatically created.
• Easy to backup data − Periodically backup data from the datacenter into Amazon
EC2 instances by using Amazon EBS volumes.
• Easy to extend network using Cloud − Move applications, launch additional web
servers and increase storage capacity by connecting it to a VPC
Amazon Route 53 is a highly available and scalable Domain Name System (DNS) web
service. It is designed for developers and corporates to route the end users to Internet
applications by translating human readable names like www.mydomain.com, into the numeric
IP addresses like 192.0.2.1 that computers use to connect to each other.
Step 3 − A form page opens. Provide the required details such as domain name and comments,
then click the Create button.
Step 4 − Hosted zone for the domain will be created. There will be four DNS endpoints called
delegation set and these endpoints must be updated in the domain names Nameserver settings.
Step 5 − If it is godaddy.com then select domain’s control panel and update the Route 53 DNS
endpoints. Delete the rest default values. It will take 2-3 minutes to update.
Step 6 − Go back to Route 53 console and select the go to record sets option. This will show
you the list of record sets. By default, there are two record sets of type NS & SOA.
Step 7 − To create your record set, select the create record set option. Fill the required details
such as: Name, Type, Alias, TTL seconds, Value, Routing policy, etc. Click the Save record
set button.
Step 8 − Create one more record set for some other region so that there are two record sets
with the same domain name pointing to different IP addresses with your selected routing
policy.
Once completed, the user requests will be routed based on the network policy.
Features of Route 53
• Easy to register your domain − We can purchase all level of domains like .com, .net,
.org, etc. directly from Route 53.
• Highly reliable − Route 53 is built using AWS infrastructure. Its distributed nature
towards DNS servers help to ensure a consistent ability to route applications of end
users.
• Scalable − Route 53 is designed in such a way that it automatically handles large
volume queries without the user’s interaction.
• Can be used with other AWS Services − Route 53 also works with other AWS
services. It can be used to map domain names to our Amazon EC2 instances, Amazon
S3 buckets, Amazon and other AWS resources.
• Easy to use − It is easy to sign-up, easy to configure DNS settings, and provides quick
response to DNS queries.
• Health Check: Route 53 monitors the health of the application. If an outage is detected,
then it automatically redirects the users to a healthy resource.
• Cost-Effective − Pay only for the domain service and the number of queries that the
service answers for each domain.
• Secure − By integrating Route 53 with AWS (IAM), there is complete control over
every user within the AWS account, such as deciding which user can access which
part of Route 53.
CHAPTER 6
6.1 Amazon S3
• Create a Bucket dialog box will open. Fill the required details and click the Create
button.
• The bucket is created successfully in Amazon S3. The console displays the list of
buckets and its properties.
• Select the Static Website Hosting option. Click the radio button Enable website hosting
and fill the required details.
• Click the Add files option. Select those files which are to be uploaded from the system
and then click the Open button.
• Click the start upload button. The files will get uploaded into the bucket.
To open/download an object − In the Amazon S3 console, in the Objects & Folders list,
right-click on the object to be opened/downloaded. Then, select the required object.
step 3 − Open the location where we want this object. Right-click on the folder/bucket where
the object is to be moved and click the Paste into option.
Step 3 − A confirmation message will appear on the pop-up window. Read it carefully and
click the Empty bucket button to confirm.
Amazon S3 Features
• Low cost and Easy to Use − Using Amazon S3, the user can store a large amount of
data at very low charges.
• Secure − Amazon S3 supports data transfer over SSL and the data gets encrypted
automatically once it is uploaded. The user has complete control over their data by
configuring bucket policies using AWS IAM.
• Scalable − Using Amazon S3, there need not be any worry about storage concerns. We
can store as much data as we have and access it anytime.
• Higher performance − Amazon S3 is integrated with Amazon CloudFront, that
distributes content to the end users with low latency and provides high data transfer
speeds without any minimum usage commitments.
• Integrated with AWS services − Amazon S3 integrated with AWS services include
Amazon CloudFront, Amazon CLoudWatch, Amazon Kinesis, Amazon RDS,
Amazon Route 53, Amazon VPC, AWS Lambda, Amazon EBS, Amazon Dynamo
DB, etc.
Amazon Elastic Block Store (EBS) is a block storage system used to store persistent data.
Amazon EBS is suitable for EC2 instances by providing highly available block level storage
volumes. It has three types of volume, i.e. General Purpose (SSD), Provisioned IOPS (SSD),
and Magnetic. These three volume types differ in performance, characteristics, and cost.
This volume type is suitable for small and medium workloads like Root disk EC2 volumes,
small and medium database workloads, frequently logs accessing workloads, etc. By default,
SSD supports 3 IOPS (Input Output Operations per Second)/GB means 1 GB volume will
give 3 IOPS, and 10 GB volume will give 30 IOPS. Its storage capacity of one volume ranges
from 1 GB to 1 TB. The cost of one volume is $0.10 per GB for one month.
This volume type is suitable for the most demanding I/O intensive, transactional workloads
and large relational, EMR and Hadoop workloads, etc. By default, IOPS SSD supports 30
IOPS/GB means 10GB volume will give 300 IOPS. Its storage capacity of one volume ranges
from 10GB to 1TB. The cost of one volume is $0.125 per GB for one month for provisioned
storage and $0.10 per provisioned IOPS for one month.
It was formerly known as standard volumes. This volume type is suitable for ideal workloads
like infrequently accessing data, i.e. data backups for recovery, logs storage, etc. Its storage
capacity of one volume ranges from 10GB to 1TB. The cost of one volume is $0.05 per GB
for one month for provisioned storage and $0. 05 per million I/O requests.
Each account will be limited to 20 EBS volumes. For a requirement of more than 20 EBS
volumes, contact Amazon’s Support team. We can attach up to 20 volumes on a single
instance and each volume ranges from 1GB to 1TB in size.
In EC2 instances, we store data in local storage which is available till the instance is running.
However, when we shut down the instance, the data gets lost. Thus, when we need to save
anything, it is advised to save it on Amazon EBS, as we can access and read the EBS volumes
anytime, once we attach the file to an EC2 instance.
• Reliable and secure storage − Each of the EBS volume will automatically respond to
its Availability Zone to protect from component failure.
• Secure − Amazon’s flexible access control policies allows to specify who can access
which EBS volumes. Access control plus encryption offers a strong defense-in-depth
security strategy for data.
• Higher performance − Amazon EBS uses SSD technology to deliver data results with
consistent I/O performance of application.
• Easy data backup − Data backup can be saved by taking point-in-time snapshots of
Amazon EBS volumes.
Step 2 − Store EBS Volume from a snapshot using the following steps.
• Repeat the above 1 to 4 steps to create volume.
• Type snapshot ID in the Snapshot ID field from which the volume is to be restored and
select it from the list of suggested options.
• If there is requirement for more storage, change the storage size in the Size field.
• Select the Yes Create button.
Step 3 − Attach EBS Volume to an Instance using the following steps.
• Open the Amazon EC2 console.
• Select Volumes in the navigation pane. Choose a volume and click the Attach Volume
option.
• An Attach Volume dialog box will open. Enter the name/ID of instance to attach the
volume in the Instance field or select it from the list of suggestion options.
• Click the Attach button.
• A confirmation dialog box opens. Click the Yes, Detach button to confirm.
CHAPTER 7
Here is a list of some of the most important advantages that Cloud Computing has to offer −
• Cost-Efficient − Building our own servers and tools is time-consuming as well as
expensive as we need to order, pay for, install, and configure expensive hardware, long
before we need it. However, using cloud computing, we only pay for the amount we
use and when we use the computing resources. In this manner, cloud computing is cost
efficient.
• Reliability − A cloud computing platform provides much more managed, reliable and
consistent service than an in-house IT infrastructure. It guarantees 24x7 and 365 days
of service. If any of the server fails, then hosted applications and services can easily
be transited to any of the available servers.
• Unlimited Storage − Cloud computing provides almost unlimited storage capacity,
i.e., we need not worry about running out of storage space or increasing our current
storage space availability. We can access as much or as little as we need.
• Backup & Recovery − Storing data in the cloud, backing it up and restoring the same
is relatively easier than storing it on a physical device. The cloud service providers
also have enough technology to recover our data, so there is the convenience of
recovering our data anytime.
• Easy Access to Information − Once you register yourself in cloud, you can access
your account from anywhere in the world provided there is internet connection at that
point. There are various storage and security facilities that vary with the account type
chosen.
Although Cloud Computing provides a wonderful set of advantages, it has some drawbacks
as well that often raise questions about its efficiency.
Security issues
Security is the major issue in cloud computing. The cloud service providers implement the
best security standards and industry certifications, however, storing data and important files
on external service providers always bears a risk.
AWS cloud infrastructure is designed to be the most flexible and secured cloud network. It
provides scalable and highly reliable platform that enables customers to deploy applications
and data quickly and securely.
Technical issues
As cloud service providers offer services to number of clients each day, sometimes the system
can have some serious issues leading to business processes temporarily being suspended.
Additionally, if the internet connection is offline then we will not be able to access any of the
applications, server, or data from the cloud.
Cloud service providers promises vendors that the cloud will be flexible to use and integrate,
however switching cloud services is not easy. Most organizations may find it difficult to host
and integrate current cloud applications on another platform. Interoperability and support
issues may arise such as applications developed on Linux platform may not work properly on
Microsoft Development Framework (.Net)
AWS helps the business to build the app and generate new revenue streams quickly. Through
this, you can easily develop applications for your business purpose. Amazon EC2 has a number
of different performance levels to support your application’s requirement.
AWS Identity and access management allow you to monitor your web application.
Moreover, it helps you to monitor unauthorized access.
With the help of AWS management kit, you can easily deploy and manage your applications
so that you can focus on other aspects of your application. AWS brings together the service
needed to build and run your application seamlessly. This provides you with more time for
creating value for your business
Enterprises require their software to run 24×7. They are building business applications in the
cloud to increase their revenue. Small as well as large scale industries are running their business
applications in the cloud for a better growth, to increase their revenue and to maximize profit.
New business should generate a good outcome and it can be reached by providing a better
service in the field of competition. There are many benefits while using AWS in business such
as-
• Pay as you go
• Easy and Scalable
• Accessible and fast
AWS provides quality work which makes their customers a permanent one. The content
provided by the user is confidential and secure. AWS uses high-speed servers which helps the
user to easily complete their task
The fast processing databases which are fully managed and known for its scalability and low
latencies are there for help. It is a durable and secure technology platform. To ensure the safety
and integrity of your data, Amazon’s data centres and services have several levels of security.
CHAPTER 8
INTERNSHIP OUTCOMES
8.1 Conclusion
Cloud storage is typically more reliable, scalable, and secure than traditional on-premises
storage systems. AWS offers a complete range of cloud storage services to support both
application and archival compliance requirements. This whitepaper provides guidance for
understanding the different storage services and features available in the AWS Cloud. Usage
patterns, performance, durability and availability, scalability and elasticity, security, interface,
and cost models are outlined and described for these cloud storage services. While this gives
you a better understanding of the features and characteristics of these cloud services, it is crucial
for you to understand your workloads and requirements then decide which storage service is
best suited for your needs.
8.2 References