AWS: architecture patterns
Dmitriy Beseda
Binary Studio
2016
There are lots of metrics to build architecture
● Hardware
● Availability
● Performance
● Data transferring
● Database interaction
● Consistency
● Partitioning
● Security
Amazon Web Services lection 6
Amazon Web Services
1. There are ~63 services
2. According to selected region pricing and available services can different
Amazon Web Services lection 6
Patterns
48+ patterns to
implement apps
Snapshot
Snapshot
Benefits:
● Limitless cloud storage
● Automating process via API
● S3 as a storage
● Not only data but also OS with settings can be backed up
Cautions:
● You must maintain data consistency when taking snapshots
Stamp Pattern
Stamp Pattern
Benefits:
● You can easily create as many EC2 instances with equal characteristics as you
want.
● You can share AMI to give ability other users to launch such servers
Cautions:
● Hard to upgrade hardware characteristics.
● If you need to launch path - you should do this to all AMIs
Scale up (vertical)
Scale up (vertical)
Benefits:
● It is easier to predict necessary resources, because you can upgrade them in
few clicks.
● You pay only what you use
Cautions:
● 30 seconds to few minutes latency during restarting new instance
Scale out
Scale out
Benefits:
● Easy to increase performance automatically and manually
● Pay only for what you use
Cautions
● Scale group is equal by characteristics
● In case when lots of instances are required - not all can be launched
immediately
● Scale out is pretty difficult
On-demand disk size
On demand disk size
Benefits:
● You can easily increase/decrease your disk size
● Striping can improve I/O performance
● Secure disk space
Cautions:
● Securing costs for large amount of space (100Gb)
● Max single disk limit - 1Tb
Multi-Server Pattern
Multi-Server Pattern
Benefits:
● Redundancy provides durability
● Multi region running
● Automation of running new and turning of unnecessary instances
● Ability to spare internet gateways
Cautions:
● Cost (lots of instances can cost more than powerful one)
● Sharing data and synchronization are difficult (db, files, patches, upgrades)
Multi-Datacenter
Multi-Datacenter
Benefits:
● You can structure a system that will continue to provide service even when
there is a major failure on the data center level (earthquake and other natural
disaster)
● High speed communication line between neighbors data-centers
● In AWS there are neither initial setup fees nor monthly use fees for each
individual AZ, there is no difference in your cost regardless of whether you use
a single AZ or multiple AZs
Multi-Datacenter
Cautions:
● For Dbs master can be only in one AZ
● During massive data transferring bottleneck problem is possible
● Elastic Load Balancing (ELB) does not support redundant structures that span
regions
● To make maximum fault tolerance it is necessary to launch instances in all AZs,
which is expensive
Floating IP Pattern
Floating IP Pattern
Benefits:
● You can swap servers by merely reassigning the EIP, unaffected by the TTL of
the DNS
● Because you can apply EIPs across different Availability Zones (AZs), even if
there were a failure on an AZ level, you can reassign the EIP to a server in a
different AZ
Cautions:
● Switching an EIP normally takes several seconds
● When you make a Secure Shell (SSH) connection to a new instance behind an
Deep Health Check
Deep Health Check
Benefits:
● This makes it possible for you to check all of the servers required for system
operation (even with details)
Cautions:
● If there is a large number of servers, then the health checks themselves will
contribute to the traffic, so you must carefully consider the timing for the health
checks
● In case with DBs health check will only show a problem which can already set
all service down
Web Storage (Static)
Web Storage (Static)
Benefits:
● The use of S3 eliminates the need to worry about network loads and data
capacity
● S3 performs backups in at least three different datacenters, and thus has
extremely high durability
● Because a URL is issued for each content object, the files can be used for a
broad range of purposes, such as file sharing, merely through placement on S3
Cautions:
● Set up correct paths
Private Distribution Pattern
Private Distribution Pattern
Benefits:
● This enables delivery of private content through time-limited use by specified
users only
● Because the actual content download is performed directly from S3 (rather
than passing through an EC2 instance), the properties of S3 of being robust to
load and to failures are directly applicable
Cautions:
● You must provide a validation system and a server for issuing time-limited
URLs
Cache Distribution
Cache Distribution
Benefits:
● This makes it possible for you to provide a better user experience to users in
geographically distant places
● This lets you distribute the file download processes, which is useful in load
distribution as well
● You can also use S3 directly as the origin, using it as an origin server
Cautions:
● Data can be old for some period time because of cache
Clone Server
Clone Server
Benefits:
● This lets you perform load distribution through Scale Out easily, without
modifying the existing system
Cautions:
● The master EC2 instance becomes a single point of failure
● If DB runs on master - don’t run it on cloned volumes
● File uploading should be performed only by master instance
Other solutions for Dynamic content
● NFS Share or replicating
● State sharing (locally stateless)
● Proxy patterns
Relational DB Replication patterns
Relational DB Replication patterns
Benefits:
● This makes it possible to continue the operations without loss of data, even in
the case of a disaster or failure
● Switching the access destination to the replicated database lets you apply a
patch to a database without shutting down the system
● If the load in reading from a database is high, you can use this to distribute that
load
Cautions:
● While this makes fail-over to the slave possible when a failure has occurred in
In-memory DB
In-memory DB
Benefits:
● You can use high-speed memory for the cache to reduce the load of reading
from the database, improving overall system performance
● You can use ElastiCache to streamline the operation, and ElastiCache is robust
to failures
Cautions:
● Using the cache may require you to modify the program that accesses the
database
● You should consider the trade-offs when caching query results
RDS Sharding
Benefits:
● You can achieve higher availability through using RDSs as backend databases
for sharding (in Multi-AZ)
● You can distribute the backend databases to multiple regions to provide
improved performance in various regions of a worldwide system
Cautions:
● When the backend databases are distributed to multiple regions, encryption
may be required when communicating with the sharding software
OnDemand NAT Pattern
OnDemand NAT Pattern
Benefits:
● This lets you maintain system security because there is no routing of access
from within to the Internet except for during maintenance
● The NAT instance operates only during use, reducing costs
Cautions:
● Because, at the time of maintenance, operations are performed ranging from
starting up the NAT instance through adjusting the routing of the subnets, it is
safest if you automate these operations through a script, so that there will be
no operator errors
Functional Firewall
Functional Firewall
Benefits:
● Multi-tier access control improves security. The EC2 virtual servers are
grouped by individual functions, eliminating the need to change the virtual
firewall settings even when using the scale-out pattern
Cautions:
● While several different definitions are possible because virtual firewalls are
logical entities, creating too many makes them difficult to understand, so you
need to think about the granularity of the groups
Multi Load Balancer
Multi Load Balancer
Benefits:
● The behavior (on the load balancer level) for mobile sites and PC sites can be
different, even when using the same EC2 instance
● Even when multiple SSLs (HTTPS) are used by the same EC2 instance, you can
prepare ELBs for each SSL (HTTP)
Cautions:
● When you use the SSL Termination function of an ELB, the EC2 instance side
will be able to receive requests via HTTP, making it difficult to evaluate the
HTTPS connection by the applications

More Related Content

PPTX
Amazon Web Services lection 5
PPTX
Amazon Web Services lection 2
PDF
Long running aws lambda - Joel Schuweiler, Minneapolis
PDF
Server-less solution for moving Millions of Images in Cloud - Brett Sutter, ...
PDF
AWS Brown Bag
PDF
SoCal NodeJS Meetup 20170215_aws_lambda
PDF
Serverless Computing with AWS
PDF
Deep Dive on EC2 and S3
Amazon Web Services lection 5
Amazon Web Services lection 2
Long running aws lambda - Joel Schuweiler, Minneapolis
Server-less solution for moving Millions of Images in Cloud - Brett Sutter, ...
AWS Brown Bag
SoCal NodeJS Meetup 20170215_aws_lambda
Serverless Computing with AWS
Deep Dive on EC2 and S3

What's hot (19)

PDF
Hands-On With Amazon Web Services (AWS) - part 3
PPTX
Almacenamiento en la nube con AWS
PPTX
Aws platform overview
PPTX
AWS Introduction
PPTX
Data Scotland 2019: You can run SQL Server on AWS
PDF
Getting Started with EC2, S3 and EMR
PDF
Benefícios e melhores práticas no uso do Amazon Redshift
PDF
Cost Optimization with Spot Instances
PPTX
Amazon WebServices lection 1
PDF
Snowball 180625113523
PDF
AWS KSS
PPT
Amazon Webservice & Cloud Computing
PDF
Serverless Framework Workshop - Tyler Hendrickson, Chicago/burbs
PDF
Aurora Serverless, 서버리스 RDB의 서막 - 트랙2, Community Day 2018 re:Invent 특집
PDF
Scaling drupal on amazon web services dr
PPT
Escalabilidade com Lambda e Elastic Beanstalk – Parte I
PDF
Apache Cassandra in the Cloud
PPTX
Cloud Storage in Azure, AWS and Google Cloud
PDF
Universal Serverless with AWS Fargate
Hands-On With Amazon Web Services (AWS) - part 3
Almacenamiento en la nube con AWS
Aws platform overview
AWS Introduction
Data Scotland 2019: You can run SQL Server on AWS
Getting Started with EC2, S3 and EMR
Benefícios e melhores práticas no uso do Amazon Redshift
Cost Optimization with Spot Instances
Amazon WebServices lection 1
Snowball 180625113523
AWS KSS
Amazon Webservice & Cloud Computing
Serverless Framework Workshop - Tyler Hendrickson, Chicago/burbs
Aurora Serverless, 서버리스 RDB의 서막 - 트랙2, Community Day 2018 re:Invent 특집
Scaling drupal on amazon web services dr
Escalabilidade com Lambda e Elastic Beanstalk – Parte I
Apache Cassandra in the Cloud
Cloud Storage in Azure, AWS and Google Cloud
Universal Serverless with AWS Fargate
Ad

Viewers also liked (18)

PPTX
Academy PRO: React JS. Redux & Tooling
PPTX
Олександр Холодов: “Продажі та маркетинг в агентстві по розробці додатків”
PDF
AWS Summit Seoul 2015 - EBS 성능 향상 및 EC2 비용 최적화 기법
PDF
[Gaming on AWS] 아마존웹서비스 소개
PPTX
Introduction to amazon web service (clean)
PDF
Aws startup-tech-summer2015
PDF
[ASomeCloud] AWS 서비스소개
PDF
AWS Enterprise Summit - AWS로 IT 운영 및 관리 재편하기 - 양승도
PDF
BrainSINS and AWS meetup Keynote
PDF
AWS에 대해 가장 궁금했던 열가지 - 정우근 매니저:: AWS Cloud Track 1 Intro
PDF
Amazon EC2 서비스 살펴보기 (박철수) - AWS 웨비나 시리즈
PPTX
아마존웹서비스 소개
PDF
AWS에 대해 가장 궁금했던 열 가지 (정우근) - AWS 웨비나 시리즈
PDF
AWS 시작하기 및 Amazon S3 살펴보기 (윤석찬) - AWS 웨비나 시리즈
PDF
AWS 클라우드 이해하기-사례 중심 (정민정) - AWS 웨비나 시리즈
PDF
T아카데미 aws 수강 리뷰
PDF
AWS 클라우드 서비스 소개 및 사례 (방희란) - AWS 101 세미나
PDF
Cross-regional Application Deplolyment on AWS - Channy Yun (JAWS Days 2017)
Academy PRO: React JS. Redux & Tooling
Олександр Холодов: “Продажі та маркетинг в агентстві по розробці додатків”
AWS Summit Seoul 2015 - EBS 성능 향상 및 EC2 비용 최적화 기법
[Gaming on AWS] 아마존웹서비스 소개
Introduction to amazon web service (clean)
Aws startup-tech-summer2015
[ASomeCloud] AWS 서비스소개
AWS Enterprise Summit - AWS로 IT 운영 및 관리 재편하기 - 양승도
BrainSINS and AWS meetup Keynote
AWS에 대해 가장 궁금했던 열가지 - 정우근 매니저:: AWS Cloud Track 1 Intro
Amazon EC2 서비스 살펴보기 (박철수) - AWS 웨비나 시리즈
아마존웹서비스 소개
AWS에 대해 가장 궁금했던 열 가지 (정우근) - AWS 웨비나 시리즈
AWS 시작하기 및 Amazon S3 살펴보기 (윤석찬) - AWS 웨비나 시리즈
AWS 클라우드 이해하기-사례 중심 (정민정) - AWS 웨비나 시리즈
T아카데미 aws 수강 리뷰
AWS 클라우드 서비스 소개 및 사례 (방희란) - AWS 101 세미나
Cross-regional Application Deplolyment on AWS - Channy Yun (JAWS Days 2017)
Ad

Similar to Amazon Web Services lection 6 (20)

PDF
An intro to Amazon Web Services (AWS)
PPTX
Migrating enterprise workloads to AWS
PDF
AMAZON CLOUD Course Content
PPTX
Aws best practices
PPTX
NWCloud Cloud Track - Best Practices for Architecting in the Cloud
PPTX
AWS Distilled
PPTX
Architecting Cloud Apps
PDF
CloudCamp Athens presentation: Introduction to cloud computing
PPTX
Migrating enterprise workloads to AWS
PDF
Scalable Architecture on Amazon AWS Cloud - Indicthreads cloud computing conf...
PPT
Cloud Computing - Challenges & Opportunities
PPTX
Cloud Service.pptx
DOC
PDF
Building a Bigdata Architecture on AWS
PDF
The Netflix Open Source Platform
PDF
SV Forum Platform Architecture SIG - Netflix Open Source Platform
PDF
Scaling web application in the Cloud
PDF
AWS 101 December 2014
PPTX
Running High Availability Websites with Acquia and AWS
PPTX
Scalable Application Development on AWS
An intro to Amazon Web Services (AWS)
Migrating enterprise workloads to AWS
AMAZON CLOUD Course Content
Aws best practices
NWCloud Cloud Track - Best Practices for Architecting in the Cloud
AWS Distilled
Architecting Cloud Apps
CloudCamp Athens presentation: Introduction to cloud computing
Migrating enterprise workloads to AWS
Scalable Architecture on Amazon AWS Cloud - Indicthreads cloud computing conf...
Cloud Computing - Challenges & Opportunities
Cloud Service.pptx
Building a Bigdata Architecture on AWS
The Netflix Open Source Platform
SV Forum Platform Architecture SIG - Netflix Open Source Platform
Scaling web application in the Cloud
AWS 101 December 2014
Running High Availability Websites with Acquia and AWS
Scalable Application Development on AWS

More from Binary Studio (20)

PPTX
Academy PRO: D3, part 3
PPTX
Academy PRO: D3, part 1
PPTX
Academy PRO: Cryptography 3
PPTX
Academy PRO: Cryptography 1
PPTX
Academy PRO: Advanced React Ecosystem. MobX
PPTX
Academy PRO: Docker. Part 4
PPTX
Academy PRO: Docker. Part 2
PPTX
Academy PRO: Docker. Part 1
PPTX
Binary Studio Academy 2017: JS team project - Orderly
PPTX
Binary Studio Academy 2017: .NET team project - Unicorn
PPTX
Academy PRO: React native - miscellaneous
PPTX
Academy PRO: React native - publish
PPTX
Academy PRO: React native - navigation
PPTX
Academy PRO: React native - building first scenes
PPTX
Academy PRO: React Native - introduction
PPTX
Academy PRO: Push notifications. Denis Beketsky
PPTX
Academy PRO: Docker. Lecture 4
PPTX
Academy PRO: Docker. Lecture 3
PPTX
Academy PRO: Docker. Lecture 2
PPTX
Academy PRO: Docker. Lecture 1
Academy PRO: D3, part 3
Academy PRO: D3, part 1
Academy PRO: Cryptography 3
Academy PRO: Cryptography 1
Academy PRO: Advanced React Ecosystem. MobX
Academy PRO: Docker. Part 4
Academy PRO: Docker. Part 2
Academy PRO: Docker. Part 1
Binary Studio Academy 2017: JS team project - Orderly
Binary Studio Academy 2017: .NET team project - Unicorn
Academy PRO: React native - miscellaneous
Academy PRO: React native - publish
Academy PRO: React native - navigation
Academy PRO: React native - building first scenes
Academy PRO: React Native - introduction
Academy PRO: Push notifications. Denis Beketsky
Academy PRO: Docker. Lecture 4
Academy PRO: Docker. Lecture 3
Academy PRO: Docker. Lecture 2
Academy PRO: Docker. Lecture 1

Recently uploaded (20)

PPT
UNIT-I Machine Learning Essentials for 2nd years
PDF
Module 1 part 1.pdf engineering notes s7
PDF
Introduction to Machine Learning -Basic concepts,Models and Description
PPTX
Soft Skills Unit 2 Listening Speaking Reading Writing.pptx
PDF
THE PEDAGOGICAL NEXUS IN TEACHING ELECTRICITY CONCEPTS IN THE GRADE 9 NATURAL...
PPTX
chapter 1.pptx dotnet technology introduction
PPTX
Module1.pptxrjkeieuekwkwoowkemehehehrjrjrj
PDF
Performance, energy consumption and costs: a comparative analysis of automati...
PDF
ASPEN PLUS USER GUIDE - PROCESS SIMULATIONS
PPTX
Research Writing, Mechanical Engineering
PDF
LS-6-Digital-Literacy (1) K12 CURRICULUM .pdf
PPTX
Real Estate Management PART 1.pptxFFFFFFFFFFFFF
PDF
Mechanics of materials week 2 rajeshwari
PPTX
22ME926Introduction to Business Intelligence and Analytics, Advanced Integrat...
PPTX
quantum theory on the next future in.pptx
PDF
MACCAFERRY GUIA GAVIONES TERRAPLENES EN ESPAÑOL
PPTX
SE unit 1.pptx aaahshdhajdviwhsiehebeiwheiebeiev
PDF
Using Technology to Foster Innovative Teaching Practices (www.kiu.ac.ug)
PDF
electrical machines course file-anna university
PPTX
Unit IImachinemachinetoolopeartions.pptx
UNIT-I Machine Learning Essentials for 2nd years
Module 1 part 1.pdf engineering notes s7
Introduction to Machine Learning -Basic concepts,Models and Description
Soft Skills Unit 2 Listening Speaking Reading Writing.pptx
THE PEDAGOGICAL NEXUS IN TEACHING ELECTRICITY CONCEPTS IN THE GRADE 9 NATURAL...
chapter 1.pptx dotnet technology introduction
Module1.pptxrjkeieuekwkwoowkemehehehrjrjrj
Performance, energy consumption and costs: a comparative analysis of automati...
ASPEN PLUS USER GUIDE - PROCESS SIMULATIONS
Research Writing, Mechanical Engineering
LS-6-Digital-Literacy (1) K12 CURRICULUM .pdf
Real Estate Management PART 1.pptxFFFFFFFFFFFFF
Mechanics of materials week 2 rajeshwari
22ME926Introduction to Business Intelligence and Analytics, Advanced Integrat...
quantum theory on the next future in.pptx
MACCAFERRY GUIA GAVIONES TERRAPLENES EN ESPAÑOL
SE unit 1.pptx aaahshdhajdviwhsiehebeiwheiebeiev
Using Technology to Foster Innovative Teaching Practices (www.kiu.ac.ug)
electrical machines course file-anna university
Unit IImachinemachinetoolopeartions.pptx

Amazon Web Services lection 6

  • 1. AWS: architecture patterns Dmitriy Beseda Binary Studio 2016
  • 2. There are lots of metrics to build architecture ● Hardware ● Availability ● Performance ● Data transferring ● Database interaction ● Consistency ● Partitioning ● Security
  • 4. Amazon Web Services 1. There are ~63 services 2. According to selected region pricing and available services can different
  • 8. Snapshot Benefits: ● Limitless cloud storage ● Automating process via API ● S3 as a storage ● Not only data but also OS with settings can be backed up Cautions: ● You must maintain data consistency when taking snapshots
  • 10. Stamp Pattern Benefits: ● You can easily create as many EC2 instances with equal characteristics as you want. ● You can share AMI to give ability other users to launch such servers Cautions: ● Hard to upgrade hardware characteristics. ● If you need to launch path - you should do this to all AMIs
  • 12. Scale up (vertical) Benefits: ● It is easier to predict necessary resources, because you can upgrade them in few clicks. ● You pay only what you use Cautions: ● 30 seconds to few minutes latency during restarting new instance
  • 14. Scale out Benefits: ● Easy to increase performance automatically and manually ● Pay only for what you use Cautions ● Scale group is equal by characteristics ● In case when lots of instances are required - not all can be launched immediately ● Scale out is pretty difficult
  • 16. On demand disk size Benefits: ● You can easily increase/decrease your disk size ● Striping can improve I/O performance ● Secure disk space Cautions: ● Securing costs for large amount of space (100Gb) ● Max single disk limit - 1Tb
  • 18. Multi-Server Pattern Benefits: ● Redundancy provides durability ● Multi region running ● Automation of running new and turning of unnecessary instances ● Ability to spare internet gateways Cautions: ● Cost (lots of instances can cost more than powerful one) ● Sharing data and synchronization are difficult (db, files, patches, upgrades)
  • 20. Multi-Datacenter Benefits: ● You can structure a system that will continue to provide service even when there is a major failure on the data center level (earthquake and other natural disaster) ● High speed communication line between neighbors data-centers ● In AWS there are neither initial setup fees nor monthly use fees for each individual AZ, there is no difference in your cost regardless of whether you use a single AZ or multiple AZs
  • 21. Multi-Datacenter Cautions: ● For Dbs master can be only in one AZ ● During massive data transferring bottleneck problem is possible ● Elastic Load Balancing (ELB) does not support redundant structures that span regions ● To make maximum fault tolerance it is necessary to launch instances in all AZs, which is expensive
  • 23. Floating IP Pattern Benefits: ● You can swap servers by merely reassigning the EIP, unaffected by the TTL of the DNS ● Because you can apply EIPs across different Availability Zones (AZs), even if there were a failure on an AZ level, you can reassign the EIP to a server in a different AZ Cautions: ● Switching an EIP normally takes several seconds ● When you make a Secure Shell (SSH) connection to a new instance behind an
  • 25. Deep Health Check Benefits: ● This makes it possible for you to check all of the servers required for system operation (even with details) Cautions: ● If there is a large number of servers, then the health checks themselves will contribute to the traffic, so you must carefully consider the timing for the health checks ● In case with DBs health check will only show a problem which can already set all service down
  • 27. Web Storage (Static) Benefits: ● The use of S3 eliminates the need to worry about network loads and data capacity ● S3 performs backups in at least three different datacenters, and thus has extremely high durability ● Because a URL is issued for each content object, the files can be used for a broad range of purposes, such as file sharing, merely through placement on S3 Cautions: ● Set up correct paths
  • 29. Private Distribution Pattern Benefits: ● This enables delivery of private content through time-limited use by specified users only ● Because the actual content download is performed directly from S3 (rather than passing through an EC2 instance), the properties of S3 of being robust to load and to failures are directly applicable Cautions: ● You must provide a validation system and a server for issuing time-limited URLs
  • 31. Cache Distribution Benefits: ● This makes it possible for you to provide a better user experience to users in geographically distant places ● This lets you distribute the file download processes, which is useful in load distribution as well ● You can also use S3 directly as the origin, using it as an origin server Cautions: ● Data can be old for some period time because of cache
  • 33. Clone Server Benefits: ● This lets you perform load distribution through Scale Out easily, without modifying the existing system Cautions: ● The master EC2 instance becomes a single point of failure ● If DB runs on master - don’t run it on cloned volumes ● File uploading should be performed only by master instance
  • 34. Other solutions for Dynamic content ● NFS Share or replicating ● State sharing (locally stateless) ● Proxy patterns
  • 36. Relational DB Replication patterns Benefits: ● This makes it possible to continue the operations without loss of data, even in the case of a disaster or failure ● Switching the access destination to the replicated database lets you apply a patch to a database without shutting down the system ● If the load in reading from a database is high, you can use this to distribute that load Cautions: ● While this makes fail-over to the slave possible when a failure has occurred in
  • 38. In-memory DB Benefits: ● You can use high-speed memory for the cache to reduce the load of reading from the database, improving overall system performance ● You can use ElastiCache to streamline the operation, and ElastiCache is robust to failures Cautions: ● Using the cache may require you to modify the program that accesses the database ● You should consider the trade-offs when caching query results
  • 40. Benefits: ● You can achieve higher availability through using RDSs as backend databases for sharding (in Multi-AZ) ● You can distribute the backend databases to multiple regions to provide improved performance in various regions of a worldwide system Cautions: ● When the backend databases are distributed to multiple regions, encryption may be required when communicating with the sharding software
  • 42. OnDemand NAT Pattern Benefits: ● This lets you maintain system security because there is no routing of access from within to the Internet except for during maintenance ● The NAT instance operates only during use, reducing costs Cautions: ● Because, at the time of maintenance, operations are performed ranging from starting up the NAT instance through adjusting the routing of the subnets, it is safest if you automate these operations through a script, so that there will be no operator errors
  • 44. Functional Firewall Benefits: ● Multi-tier access control improves security. The EC2 virtual servers are grouped by individual functions, eliminating the need to change the virtual firewall settings even when using the scale-out pattern Cautions: ● While several different definitions are possible because virtual firewalls are logical entities, creating too many makes them difficult to understand, so you need to think about the granularity of the groups
  • 46. Multi Load Balancer Benefits: ● The behavior (on the load balancer level) for mobile sites and PC sites can be different, even when using the same EC2 instance ● Even when multiple SSLs (HTTPS) are used by the same EC2 instance, you can prepare ELBs for each SSL (HTTP) Cautions: ● When you use the SSL Termination function of an ELB, the EC2 instance side will be able to receive requests via HTTP, making it difficult to evaluate the HTTPS connection by the applications