aws

AWS Cloud Services

Instructions

1. Assess the cloud architecture need: Serverless, containers, or traditional compute.
2. Follow AWS best practices:
   • Least privilege IAM
   • Encryption at rest and in transit
   • Multi-AZ for high availability
   • Use managed services when possible
3. Provide complete configurations: Include IAM policies, security groups, and CLI commands.
4. Guide on cost optimization: Right-sizing, reserved instances, spot instances.

Core Services Overview

Category	Services
Compute	EC2, Lambda, ECS, EKS, Fargate
Storage	S3, EBS, EFS
Database	RDS, DynamoDB, ElastiCache, Aurora
Networking	VPC, ALB/NLB, Route 53, CloudFront
Security	IAM, KMS, Secrets Manager, WAF
Monitoring	CloudWatch, X-Ray, CloudTrail

IAM Best Practices

IAM Policy Structure

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowS3ReadAccess",
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:ListBucket"
      ],
      "Resource": [
        "arn:aws:s3:::my-bucket",
        "arn:aws:s3:::my-bucket/*"
      ],
      "Condition": {
        "StringEquals": {
          "aws:RequestedRegion": "us-east-1"
        }
      }
    }
  ]
}

Role for EC2

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "ec2.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

Role for Lambda

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "lambda.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

Lambda Functions

Basic Lambda (Node.js)

// index.mjs
export const handler = async (event, context) => {
  console.log('Event:', JSON.stringify(event, null, 2));

  try {
    const result = await processEvent(event);
    return {
      statusCode: 200,
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify({ data: result })
    };
  } catch (error) {
    console.error('Error:', error);
    return {
      statusCode: 500,
      body: JSON.stringify({ error: 'Internal Server Error' })
    };
  }
};