AWS Global Infrastructures and Core Services.

I recently completed Module 3: AWS Global Infrastructure Overview, and it has been a fascinating journey into the backbone of cloud computing. Understanding where and how AWS operates is crucial before diving into individual services.

 

Here is a breakdown of the key concepts I’ve learned regarding the AWS Global Infrastructure and the vast array of service categories that power the cloud.

 

Section 1: The Foundation: AWS Global Infrastructure

The AWS Global Infrastructure is designed to deliver a flexible, reliable, scalable, and secure cloud computing environment. At its core, it is built on three main components:

AWS Regions: A physical geographical location where AWS clusters data centers. To achieve fault tolerance and stability, regions are isolated from one another. Data is not automatically replicated across regions. It is the customer's responsibility to replicate data if their business or compliance needs require it.

Note: Regions launched before March 20, 2019, are enabled by default. Newer regions (like Asia Pacific Hong Kong or Middle East Bahrain) must be manually enabled. Some regions, like the AWS China Regions (Beijing and Ningxia), have restricted access and require specific accounts.

Availability Zones (AZs): Each Region consists of multiple isolated locations known as AZs. An AZ consists of one or more discrete data centers, each with redundant power, networking, and connectivity. They are physically separated by kilometers but connected via low-latency, high-throughput fiber optics. This allows for synchronous replication and high availability.

AWS Data Centers: A data center is the location where the actual data resides and data processing occurs. Data centers designed with failure in mind. Data center locations are not disclosed and all access to them is restricted.

Points of Presence (PoP): These are located in major cities across 30+ countries. They are used by services like Amazon CloudFront (Content Delivery Network) and Amazon Route 53 (DNS) to deliver content to end-users with the lowest possible latency by caching data at the edge. 

Benefits provided by the infrastructure;

a.       Elasticity and Scalability

b.       Fault- tolerance

c.       High availability

 

Section 2: AWS Service and Service Category Overview

 

AWS offers a broad set of global cloud-based products. These are delivered as an on-demand utility with a pay-as-you-go pricing model. The services are organized into 23 different product categories.

The most widely used are;

1.       Compute Services

a.       Amazon EC2: Resizable compute capacity in the cloud (virtual machines).

b.       AWS Lambda: Serverless compute run code without provisioning or managing servers. You only pay for the compute time you consume.

c.       Amazon ECS & EKS: Container orchestration services for Docker and Kubernetes.

d.       AWS Elastic Beanstalk: For deploying and scaling web applications.

e.       AWS Fargate: A compute engine for ECS that allows you to run containers without managing servers or clusters. 

2.       Storage Services

a.       Amazon S3: Object storage offering scalability, data availability, and security.

b.       Amazon EBS: High-performance block storage designed for use with EC2.

c.       Amazon EFS: Scalable, fully managed elastic network file system (NFS).

d.       Amazon S3 Glacier: Low-cost storage for data archiving and long-term backup. 

3.       Database Services

a.       Amazon RDS: Relational Database Service (automates setup, patching, and backups).

b.       Amazon Aurora: A MySQL and PostgreSQL-compatible relational database built for the cloud.

c.       Amazon Redshift: For running analytic queries against petabytes of data.

d.       Amazon DynamoDB: A fully managed NoSQL key-value and document database with single-digit millisecond performance. 

4.       Networking & Content Delivery

a.       Amazon VPC (Virtual Private Cloud): Lets you provision a logically isolated section of the AWS cloud.

b.       Elastic Load Balancing: Automatically distributes incoming traffic.

c.       Amazon CloudFront: Fast content delivery network (CDN).

d.       AWS Direct Connect: Establishes a dedicated private network connection from your data center to AWS.

e.       AWS VPN: Secure private tunnel for your network. 

5.       Security, Identity, & Compliance

a.       AWS IAM: Identity and Access Management to securely manage access to AWS services.

b.       AWS Organizations: Restrict what services and actions are allowed in your accounts.

c.       AWS KMS: Key Management Service to create and manage encryption keys.

d.       AWS Shield: Managed Distributed Denial of Service (DDoS) protection. 

6.       Cost Management

a.       AWS Cost & Usage Report: The most comprehensive set of cost and usage data.

b.       AWS Budgets: Set custom budgets that alert you when costs exceed your forecasted amount.

c.       AWS Cost Explorer: An easy-to-use interface to visualize and manage costs over time. 

 

7.       Management & Governance

a.       AWS Management Console: Web-based user interface.

b.       AWS Config: Tracks resource inventory and changes.

c.       Amazon CloudWatch: Monitors resources and applications.

d.       AWS Trusted Advisor: An online tool that inspects your environment and provides recommendations to optimize performance, security, and cost.

e.       AWS CloudTrail: Tracks user activity and API usage across your account. 

 

Key Takeaways from Module 3

The AWS Global Infrastructure is the platform that allows us to build highly available, fault-tolerant applications. The key benefits provided by this infrastructure are Elasticity and Scalability (dynamically adjusting capacity), Fault Tolerance (built-in component redundancy), and High Availability (minimal downtime with no human intervention).

Understanding the difference between Regions, AZs, and Edge Locations and knowing which service category fits which architectural need is the first major step in becoming a proficient cloud practitioner.