SUMMARY

You can import a SSL or TLS certificate using AWS Certificate Manager (ACM) and if that isn't available in your region, you can use IAM certificate store.
To reduce data transfer costs, have the S3 Bucket and the EC2 Instance in the same region so there is no cross-region data transfer.
Step Functions is for serverless orchestration, whereas SWF is for organising and arranging tasks in AWS and SWF can ensure one task is never completed twice.
EBS has better performance than S3 and EFS.
Global Accelerator optimize the data path for your AWS resources, optimizing TCP and UDP traffic. It also provides you with a static anycast IP address which enables you to use the same IP address for a lot of different things.
To get best IOPS results, use the 1:50 (volume size: provisioned IOPS) ratio which means you get the max IOPS possible for your capacity disk.
RAID 0 provides striping (performance). RAID 1 provides mirroring (redundancy).
RDS Enhanced Monitoring provides a lot of additional metrics, such as RDS child processes, OS processes and RDS processes.
AWS X-Ray is helpful for debugging and analysing request as they travel through your application.
In a Security Group (SG), you can have security groups as the inbound rules and outbound rules and this allows only the instances which have the specified security group to access the instances.
You can use a custom identity broker where the broker can communicate with STS to provide temporary credentials and this is used when you don't have support for SAML 2.0.

PreviousFederating users by creating a custom identity broker application NextAWS Storage Gateway Hardware Appliance

Last updated 4 years ago

Was this helpful?

SUMMARY

You can import a SSL or TLS certificate using AWS Certificate Manager (ACM) and if that isn't available in your region, you can use IAM certificate store.
To reduce data transfer costs, have the S3 Bucket and the EC2 Instance in the same region so there is no cross-region data transfer.
Step Functions is for serverless orchestration, whereas SWF is for organising and arranging tasks in AWS and SWF can ensure one task is never completed twice.
EBS has better performance than S3 and EFS.
Global Accelerator optimize the data path for your AWS resources, optimizing TCP and UDP traffic. It also provides you with a static anycast IP address which enables you to use the same IP address for a lot of different things.
To get best IOPS results, use the 1:50 (volume size: provisioned IOPS) ratio which means you get the max IOPS possible for your capacity disk.
RAID 0 provides striping (performance). RAID 1 provides mirroring (redundancy).
RDS Enhanced Monitoring provides a lot of additional metrics, such as RDS child processes, OS processes and RDS processes.
AWS X-Ray is helpful for debugging and analysing request as they travel through your application.
In a Security Group (SG), you can have security groups as the inbound rules and outbound rules and this allows only the instances which have the specified security group to access the instances.
You can use a custom identity broker where the broker can communicate with STS to provide temporary credentials and this is used when you don't have support for SAML 2.0.

PreviousFederating users by creating a custom identity broker application NextAWS Storage Gateway Hardware Appliance

Last updated 4 years ago

Was this helpful?