AWS/ by Nima Shokouhfar

1. others

1.1. styles

1.1.1. bad

1.1.1.1. Very bad

1.1.2. good

1.1.2.1. very good

1.1.3. not as good

1.1.4. not as bad

1.1.5. important

1.1.5.1. Very important

1.1.6. semi important

1.1.7. warning

1.1.8. link

1.2. AUTHOR

1.2.1. Nima Shokouhfar

1.2.1.1. Linkedin

1.2.1.1.1. Follow me on LinkedIn to stay updated on my latest professional insights and tech projects!

1.2.1.2. Youtube

1.2.1.2.1. code with nima

1.2.1.2.2. ideariver

1.2.1.3. Medium

1.2.1.3.1. ✍️ Follow me on Medium to read my latest articles on tech, coding, and innovation!

1.2.1.4. Github

1.2.1.4.1. ⭐️ Give my projects a star on GitHub and explore my repositories to discover new tools and innovations!

1.2.1.4.2. 💖 Sponsor me on GitHub to support my open-source contributions and help me create even more useful projects!

1.2.1.5. upwork

1.2.1.5.1. 💼 Hire me on Upwork for freelance projects. Let’s work together to bring your tech ideas to life!

1.2.1.6. Patreon

1.2.1.6.1. https://www.patreon.com/c/CodewithNima

1.2.1.7. main website: ideariver.ca

1.2.1.7.1. 🚀 Visit IdeaRiver.ca for all my latest projects, blogs, and ways to connect!

1.2.1.8. mindmeister

1.2.1.8.1. https://www.mindmeister.com/users/channel/12952106

1.2.1.9. Udemy

1.2.1.9.1. https://www.udemy.com/user/nima-shokouhfar/?srsltid=AfmBOopfkLQBVtdYIA44yOk8xw9jscZUmQL44HLmtCDD_2ZWGxAMQ4wL

1.3. Styling Version

1.3.1. 3.0.4

2. main

2.1. CDS Cloud Development Kit

2.1.1. supported languages

2.1.1.1. Typescript

2.1.1.2. javascript

2.1.1.3. go

2.1.1.4. java

2.1.1.5. C#

2.1.1.6. Python

2.1.2. pro/cons

2.1.2.1. advantages

2.1.2.1.1. type completion and compiler correction

2.1.2.1.2. access to the entire Terraform ecosystem without learning HashiCorp Configuration Language (HCL)

2.2. services

2.2.1. IAM

2.2.1.1. users

2.2.1.2. roles

2.2.1.2.1. it can be assigned to multiple users

2.2.1.3. policies

2.2.1.3.1. custom policy

2.2.1.4. IAM boundary

2.2.1.4.1. deny certain thing. so if a policy denied the entire group can not access that specefic policy due to inheritance

2.2.1.5. root user

2.2.1.5.1. never use root user ever

2.2.2. codeartifact

2.2.2.1. 2

2.2.2.1.1. used manual mode

2.2.2.1.2. it used the

2.2.2.2. 3

2.2.2.3. Use aws codeartifact login for seamless npm, pip, or Maven usage.

2.2.2.4. Tokens expire after 12 hours by default; automate renewal in CI.

2.2.2.5. upstream source

2.2.2.5.1. issue

2.2.2.5.2. Using terrafrom

2.2.3. elastic IP

2.2.3.1. An Elastic IP (EIP) address is a static, public IPv4 address provided by cloud providers like AWS, designed for dynamic cloud computing environments. It allows you to associate a constant public IP address with an instance or network interface, even if the instance is stopped, terminated, or moved to a different availability zone.

2.2.4. storage

2.2.4.1. ecr vs s3

2.2.4.2. Elastic Container Registry "ECR"

2.2.4.2.1. great

2.2.4.2.2. services

2.2.4.2.3. Amazon Elastic Container Registry (ECR) is a fully managed container registry service from AWS. It allows you to store, manage, and deploy container images securely, simplifying the process of using containerized applications within the AWS ecosystem.

2.2.4.3. Amazon S3

2.2.4.3.1. good video express s3, upload image

2.2.4.3.2. never make it public ever

2.2.4.3.3. encrypt it

2.2.4.3.4. has versioning

2.2.4.3.5. has logging

2.2.5. Elastic block store EBS

2.2.5.1. code

2.2.5.2. Amazon EBS (Elastic Block Store) is a block-level storage service for use with Amazon EC2 instances, providing persistent data storage. It allows you to create and attach storage volumes to EC2 instances, which can then be used like local hard drives. EBS also offers snapshotting capabilities, allowing you to create point-in-time backups of your data.

2.2.5.3. always encrypt ebs volumes

2.2.5.3.1. encrypt in the first place

2.2.6. lambda

2.2.6.1. video

2.2.6.2. video

2.2.6.3. package.json

2.2.6.3.1. How I set up docker

2.2.6.4. Triggers

2.2.6.4.1. S3, DynamoDB Streams, API Gateway, EventBridge, etc.

2.2.6.5. Layers

2.2.6.6. Environment variables

2.2.6.6.1. Can inject secrets or config without hardcoding.

2.2.7. route 53

2.2.7.1. dashboard

2.2.7.2. make sure the route is properly mounted

2.2.7.3. code

2.2.8. debugging

2.2.8.1. cloud watch

2.2.9. amazon ses

2.2.9.1. comparisonn

2.2.9.2. SMTP email server

2.2.9.3. allocate a dedicated IP

2.2.9.3.1. Others may abuse the other IPs.

2.2.10. SNS

2.2.11. instance profile

2.2.11.1. IAM role attached to EC2

2.2.11.2. vid

2.2.11.2.1. for this to work IMDS should be optional

2.2.11.2.2. terraform solution

2.2.11.2.3. set the IAM role

2.2.11.2.4. aws configure issue

2.2.12. KMS Key management service

2.2.12.1. key has policies

2.2.12.2. example

2.2.12.2.1. encrypt and decrypt S3 bucket

2.2.12.2.2. ec2 encryption

2.2.12.3. they rotate

2.2.12.4. it takes 7 days to delete a key

2.2.12.5. secret pair creation option

2.2.12.5.1. use it in your code

2.2.13. Secret manager

2.2.13.1. you can handle secrets rotation

2.2.13.1.1. pricing is crazy