AWS Solution Architecture
- jimm1
Key Points
References
Key Concepts
AWS Services Overview
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/introduction.html?achp_expl3
The AWS Well-Architected Framework helps you understand the pros and cons of the decisions you make when building systems in the cloud. The six pillars of the Framework allow you to learn architectural best practices for designing and operating reliable, secure, efficient, cost-effective, and sustainable systems. Using the AWS Well-Architected Tool, available at no charge in the AWS Management Console, you can review your workloads against these best practices by answering a set of questions for each pillar.
In the Serverless Application Lens, we focus on best practices for architecting your serverless applications on AWS.
In the Container Build Lens, we provide cloud-agnostic best practices for building and managing containers and container images. In addition, implementation guidance and examples are provided specific to the AWS Cloud.
In the Machine Learning Lens, we focus on how to design, deploy, and architect your machine learning workloads in the AWS Cloud.
In the Data Analytics Lens, we describe a collection of customer-proven best practices for designing well-architected analytics workloads.
In the Hybrid Networking Lens, we focus on how to design, deploy, and architect hybrid networking for workloads in the AWS Cloud.
In the IoT Lens and IoT Lens Checklist, we focus on best practices for architecting your IoT applications on AWS.
In the SAP Lens, we describe a collection of customer-proven design principles and best practices for ensuring SAP workloads on AWS are well-architected.
In the Games Industry Lens, we focus on designing, architecting, and deploying your games workloads on AWS.
In the Streaming Media Lens, we focus on the best practices for architecting and improving your streaming media workloads on AWS.
In the Healthcare Industry Lens, we focus on how to design, deploy, and manage your healthcare workloads.
In the Financial Services Industry Lens, we focus on best practices for architecting your Financial Services Industry workloads on AWS.
In the HPC Lens, we focus on best practices for architecting your High Performance Computing (HPC) workloads on AWS.
In the SaaS Lens, we focus on best practices for architecting your software as a service (SaaS) workloads on AWS.
For more expert guidance and best practices for your cloud architecture—reference architecture deployments, diagrams, and whitepapers—refer to the AWS Architecture Center
AWS Cloud Themes
Key strategies—the journey to modernization
1. Build and Architect
2. Everything as Code
3. Continuous Delivery
4. Observability
5. Modern Data Management
6. DevSecOps
7. Continuous Deployment
8. Everything as a Service
9. Cloud Operations
compare to the more expansive SWT engineering themes list
m Design Engineering Themes#KeyConcepts
AWS Architecture Resources
https://aws.amazon.com/architecture/
Built around six pillars—operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability—AWS Well-Architected provides a consistent approach for customers and partners to evaluate architectures and implement scalable designs.
The AWS Well-Architected Framework includes domain-specific lenses, hands-on labs, and the AWS Well-Architected Tool. The AWS Well-Architected Tool, available at no cost in the AWS Management Console, provides a mechanism for regularly evaluating workloads, identifying high-risk issues, and recording improvements.
AWS DR architecture - BCP, RTO, RPO, MBTF, MTTR
Management & Governance Concepts in AWS
The M&G Guide includes the following:
Description of each of the management and governance functions.
Information on how the functions interact and interoperate with each other to provide efficient management and governance.
Detailed implementation priorities helping you to know what steps to take, and in what order.
Recommended AWS services for each function.
AWS Partner solutions available in AWS Marketplace that support multi-account environments and work with AWS Control Tower.
Implementation guidance as architectural diagrams, guides, and product videos.
Aligned offerings and delivery kits from AWS Professional Services.
Turnkey complementary solutions and consulting services from Built on Control Tower - AWS Partners.
Security Concepts
Prevent > Detect > Respond > Remediate
STEAR - Setup > Track > Escalate > Audit > Remediate
Lens - Hybrid Networking
https://docs.aws.amazon.com/wellarchitected/latest/hybrid-networking-lens/site-to-site-vpn.html
The easiest way to get started with hybrid connectivity is to establish site-to-site VPN over the internet. AWS Site-to-Site VPN extends your data center or branch office to the cloud using IP Security (IPsec) tunnels. You can configure routing using Border Gateway Protocol (BGP) over the IPsec tunnel or configure static routes. Traffic in the tunnel is encrypted with AES128 or AES256 and uses Diffie-Hellman groups for key exchange, providing Perfect Forward Secrecy.
Each AWS Site-to-Site VPN connection consists of two VPN tunnel endpoints for redundancy. For high-availability, it’s important to terminate a VPN tunnel to both of the endpoints. Each tunnel terminates in a different Availability zone within the AWS global network, but must also terminate on the same equipment on-premises. It’s also important that you have a similar highly-available configuration set up at the on-premises equipment and terminate the VPN on two different physical devices in your data center.
AWS Site-to-Site VPN supports terminating IPSEC tunnels to both virtual private gateway and AWS Transit Gateway at the AWS end. When terminating a VPN on a virtual private gateway, you can access the VPC that the gateway is attached to. For every other VPC that you want to connect to, you must create a separate VPN tunnel to a separate virtual private gateway attached to that VPC. With AWS Transit Gateway you get connectivity to thousands of VPCs over a pair of VPN tunnels. Additionally, Transit Gateway supports Equal Cost Multipath (ECMP routing strategy, allowing you to load balance traffic across multiple VPN tunnels for high-availability and bandwidth aggregation.
Lens - Container Build
The Container Build Lens will focus specifically on the container design and build process.
Figure 4. Improving the build pipeline performance of containerized applications
Lens - Serverless Apps
Serverless Design Principles
The Well-Architected Framework identifies a set of general design principles to facilitate good design in the cloud for serverless applications:
Speedy, simple, singular: Functions are concise, short, single-purpose, and their environment may live up to their request lifecycle. Transactions are efficiently cost-aware, and thus faster initiations are preferred.
Think concurrent requests, not total requests: Serverless applications take advantage of the concurrency model, and tradeoffs at the design level are evaluated based on concurrency.
Share nothing: Function runtime environment and underlying infrastructure are short-lived, therefore local resources such as temporary storage is not guaranteed. State can be manipulated within a state machine execution lifecycle, and persistent storage is preferred for highly durable requirements.
Assume no hardware affinity: Underlying infrastructure may change. Use code or dependencies that are hardware-agnostic. CPU flags, for example, may not be available consistently.
Orchestrate your application with state machines, not functions: Chaining Lambda executions within the code to orchestrate the workflow of your application results in a monolithic and tightly coupled application. Instead, use a state machine to orchestrate transactions and communication flows.
Use events to trigger transactions: Events such as writing a new Amazon S3 object or an update to a database allow for transaction execution in response to business functionalities. This asynchronous event behavior is often consumer agnostic and drives just-in-time processing to achieve lean service design.
Design for failures and duplicates: Operations triggered from requests or events must be idempotent, as failures can occur and a given request or event can be delivered more than once. Include appropriate retries for downstream calls.
Restful Microservices
Figure 1: Reference architecture for RESTful microservices
Customers leverage your microservices by making HTTP API calls. Ideally, your consumers should have a tightly bound service contract to your API to achieve consistent expectations of service levels and change control.
Amazon API Gateway hosts RESTful HTTP requests and responses to customers. In this scenario, API Gateway provides built-in authorization, throttling, security, fault tolerance, request and response mapping, and performance optimizations.
AWS Lambda contains the business logic to process incoming API calls and use DynamoDB as a persistent storage.
Amazon DynamoDB persistently stores microservices data and scales based on demand. Since microservices are often designed to do one thing well, a schemaless NoSQL data store is regularly incorporated.
Understanding common customer locations, which may change geographically based on the proximity of your backend.
Understanding how customer input requests may have an impact on how you partition your database.
Understanding the semantics of abnormal behavior, which can be a security flag.
Understanding errors, latency, and cache hits or misses to optimize configuration.
Use API Gateway logging to understand visibility of microservices consumer access behaviors. This information is visible in Amazon CloudWatch Logs and can be quickly viewed through Log Pivots, analyzed in CloudWatch Logs Insights or fed into other searchable engines such as OpenSearch Service or Amazon S3 (with Amazon Athena). The information delivered gives key visibility, such as:
Event Driven Architectures
implement event-driven approach will allow you to build scalable, fault tolerant applications.
use messaging services like ActiveMQ, Kafka, Amazon SQS for reliable and durable communication between microservices.
For fan out of the events you can use Amazon SNS topics.
For event filtering and routing you can utilize Amazon EventBridge.
Every event-driven architecture consists of three main parts:
Event sources
Event routers
Event destinations
Web Applications
https://docs.aws.amazon.com/wellarchitected/latest/serverless-applications-lens/web-application.html
Workloads which need to scale to thousands or millions of users require provisioning infrastructure for peak loads or sophisticated auto-scaling mechanisms, when available. On-premises workloads require significant capital expenditures and long lead times for capacity provisioning.
Figure 6: Reference architecture for a web application
Amazon Cognito user pools provides user management and identity provider features for your web application. Tokens issued by Amazon Cognito are used to authenticate users when making request to Amazon API Gateway.
Amazon CloudFront provides a better user experience by accelerating content delivery of static assets and calls to your backend compute layer. CloudFront brings content closer to clients using AWS’s global Points of Presence (PoPs). CloudFront can also cache API calls to reduce calls to compute backends while also providing optimal network routing for non-cacheable API calls.
Amazon S3 hosts web application static assets such as HTML, CSS, JavaScript and images. Content is securely served through CloudFront.
Amazon API Gateway serves as the secure HTTPS endpoint. Web applications make REST API calls to a public HTTPS endpoint using either a custom domain name or a unique API Gateway-provided domain.
An AWS Lambda function provides create, read, update, and delete (CRUD) operations on top of DynamoDB for your web application.
Amazon DynamoDB can provide a NoSQL data store which elastically scales with your web application.
Streaming Apps
Figure 5: Reference architecture for stream processing
Data producers use the Amazon Kinesis Producer Library (KPL) to send social media streaming data to a Kinesis stream. Amazon Kinesis Agent and custom data producers that leverage the Kinesis API can also be used.
An Amazon Kinesis stream collects, processes, and analyzes real-time streaming data produced by data producers. Data ingested into the stream can be processed by a consumer, which, in this case, is Lambda.
AWS Lambda acts as a consumer of the stream that receives an array of the ingested data as a single event or invocation. Further processing is carried out by the Lambda function. The transformed data is then stored in a persistent storage, which, in this case, is DynamoDB.
Amazon DynamoDB provides a fast and flexible NoSQL database service including triggers that can integrate with AWS Lambda to make such data available elsewhere.
Business users can use a reporting interface on top of DynamoDB to gather insights out of social media trend data.
Mobile Backends
https://docs.aws.amazon.com/wellarchitected/latest/serverless-applications-lens/mobile-backend.html
Certain capabilities across mobile applications, are expected by default:
Ability to query, mutate, and subscribe to database changes.
Offline persistence of data and bandwidth optimizations when connected.
Search, filtering, and discovery of data in applications.
Analytics of user behavior.
Targeted messaging through multiple channels (Push Notifications, SMS, Email).
Rich content such as images and videos.
Data synchronization across multiple devices and multiple users.
Fine-grained authorization controls for viewing and manipulating data.
Lens - Financial Services
Open Banking APIs
https://d1.awsstatic.com/architecture-diagrams/ArchitectureDiagrams/open-banking-on-aws.pdf
Figure 5: Reference architecture for Open Banking
A consumer accesses the licensed or accredited third-party application — and provides consent to the third party to access consumer data or make a payment submission request.
Third parties in Open Banking can be defined as authorized institutions that provide value-added services in addition to the consumer’s regular banking needs, such as accounts information (balance check, recent transactions, statements) and payments (payment to merchants, people, and registered payees). This approach enables use cases such as spend analysis, credit decisioning, and payments for ecommerce transactions.
A Trust Service Provider (TSP) is a trusted entity authorized by a supervisory government body to verify the authenticity of banks and third parties, and issue digital certificates to third parties.
A bank's IT environment, comprised of its AWS environment and data centers.
Lens - Machine Learning
https://docs.aws.amazon.com/wellarchitected/latest/machine-learning-lens/machine-learning-lens.html
Your ML models depend on the quality of input data to generate accurate results. As data changes with time, monitoring is required to continuously detect, correct, and mitigate issues with accuracy and performance. This may even require you to retrain your model with the latest refined data.
Application workloads rely on step-by-step instructions to solve a problem. ML workloads enable algorithms to learn from data through an iterative and continuous cycle. The ML lens complements and builds upon the Well-Architected Framework to address this difference between these two types of workloads.
ML Lifecycle diagram
following assumptions:
All presented concepts are cloud and technology agnostic.
Solid black lines are indicative of process flow.
Dashed color lines are indicative of input and output flow.
Architecture diagram components are color coded for ease of communication across this document.
Figure 5: ML lifecycle with detailed phases and expanded components
Planning AWS Cloud Migration Best Practices
Application portfolio assessment guide for AWS Cloud migration
AWS Architecture Concepts Overview article - mindmajix
https://mindmajix.com/aws-architecture
The Structure of AWS EC2 mainly delivers the users in the usage of various virtual machines with different configurations as per the requirements. Normally, EC2 stands for Elastic Compute cloud that allows different pricing options, various configuration options, and mapping of individual servers, etc.
| AWS Architecture - Table Of Content |
What is AWS Architecture Diagram?
The below diagram is the basic structure of AWS Architecture where it provides cloud computing services accordingly.
It is considered as the basic structure of AWS architecture or AWS EC2. Simply, EC2 is also called Elastic Compute cloud which will allow the clients or else the users of using various configurations in their own project or method as per their requirement. There are also different amazing options such as pricing options, individual server mapping, configuration server, etc. S3 which is present in the AWS architecture is called Simple Storage Services. By using this S3, users can easily retrieve or else store data through various data types using Application Programming Interface calls. There will be no computing element for the services as well.
| If you would like to become an AWS Certified professional, then visit Mindmajix - A Global online training platform: "AWS Online Training Course".This course will help you to achieve excellence in this domain. |
What are the Key Components of AWS Architecture?
Every single key component of AWS architecture is explained below:
Load Balancing:
The load balancing component in the AWS architecture helps to enhance the application and the server’s efficiency in the right way. According to the diagrammatic representation of AWS architecture, this Hardware load balancer is mostly used as the common network appliance and helps to perform skills in the architectures of the traditional web applications. It also makes sure to deliver the Elastic Load Balancing Service, AWS takes the traffic gets distributed to EC2 instances across the various available sources. Along with this, it also distributes the traffic to dynamic addition and the Amazon EC2 hosts removals from the load-balancing rotation.
Elastic Load Balancing:
This load balancing can easily shrink and increase the capacity of load balancing by tuning some of the traffic demands and supporting sticky sessions to have advanced routing services.
Amazon Cloud Front:
Amazon Cloud Front is mostly used for the delivery of content that is directly used for website delivery. The content in the Amazon Cloud Front can also be the type of content such as static, dynamic as well as streaming content that can also take the usage of global network locations as well. From the user end, the content can be requested in an automatic way based on the nearest location that also shows the diverse effect on the performance which will be enhanced in the right way. There will be no commitments in the monthly wise and the contracts.
Elastic Load Balancer:
Elastic Load Balancer is mainly used to deliver the required traffic to the web servers and it also helps to improve the performance in a large manner. This Elastic Load Balancing can easily have growth in a dynamic way and also the load-balancing capacity can be shrunk based on certain traffic conditions.
Security Management:
It also makes sure to provide a security feature namely known as security groups. It will also work the same as the inbound network firewall and will also have to specify the ports, protocols, and also source IP ranges where all these can be reached to the EC2 instances. With the help of specific subnets or else IP addresses, the security groups can be configured that can also limit the access to EC2 instances effectively.
[ Related Article:- Learn About SQL Server ]
Elastic Cache:
Amazon Elastic Cache is an efficient web service where the memory cache can be managed in the cloud with ease. This cache plays a vital role in terms of memory management and will also help to reduce the service's load in a reliable manner. It also makes sure to enhance the performance along with the scalability on the tier of the database by caching the information which is used in a frequent manner.
Amazon RDS:
Amazon Relational Database Service helps to deliver the same access that is similar to the MySql, Microsoft SQL Server database engine or else Microsoft SQL. These applications, queries, and tools will be useful in the Amazon RDS as well.
AWS Well-Architected Framework
The AWS Cloud computing is increasing in a rapid manner over the past few years and its high demand delivers disruptive opportunities. It has come up with high-performance scalability, reliability, agility, and responsibilities with certain design principles to run AWS on system efficiency.
[ Related Article:- Cloud Computing Technology ]
What is the Importance of AWS Architecture?
AWS architecture diagrams are mostly used to enhance the solution with the help of powerful drawing tools, plenty of pre-designed icons of Amazon, and the various simple icons that are used for the creation of the AWS diagrams of the Architecture.
AWS Architecture also makes sure to provide incredible services based on the web technologies, uploading and unloading of virtual servers, the selection service and the service of transferring messages, etc. Moreover, the resources of AWS can be available worldwide and can also be able to deploy solutions exactly where the customers are required of them.
Here are the main benefits of AWS Architecture and its uses:
- It has a wide range of benefits from the massive economies of the scale
- It also helps to stop guessing capacity and can easily achieve higher economic rates which can easily translate from the lower prices to the upper prices.
- It can easily enhance the agility and the speed that can reduce the time to complete a task.
[ Related Blog:- AWS vs Azure Comparision ]
Top 5 Pillars of AWS Well-Architected Framework
Here is the quick way to know 5 Pillars of AWS Well-Architected Framework to complete the given project with ease.
1. Security
Security is the basic thing that matters a lot in AWS Technology. It is entirely an infra design that can easily serve complete data protection, infrastructure protection, privilege Management of all AWS accounts and identifying the security breach with certain detective controls reliably. Basically, it follows certain design principles that are:
- One can apply security at every level
- Implementation of Principle of Least Privilege
- Enable Traceability
- Secured System Applications, data, and OS Level
- Automate Security Best practices
| Related Article: AWS Projects |
2. Reliability
AWS is a good architecture that has come up with well-planned foundations and monitoring in place with various mechanism rates to handle demand rates as per requirements. The system can easily detect the failure and must come out with an optimized solution. The design principles are in the given way like
- Test Recovery Procedures
- Usage of Horizontal Scalability in an increment of system availability
- Recovery from failure in an automatic way
- Add or else Removing resources
- Manage Changes in the automation
3. Performance Efficiency
Performance Efficiency is kept the focus on the efficient use of computing resources to meet the given requirements in a reliable manner. It is also to maintain efficiency as demand changes and technology evolves. The design principles go in the given way.
- Democratize advanced Technologies
- Globally Deploying of the given system at a minimal cost of lower latency
- To keep aside of operational burden, use a serverless architecture
- Various comparative testing and configurations for better performance
[ Related Article:- 75+ AWS Interview Questions and Answers ]
4. Cost Optimization
It is one of the main pillars of AWS Architecture that is completely optimizing costs, unused, elimination or else sub-optimal resources. It is most probably considered with the matching supply with demand and being aware of expenditure and optimizes over costs. The following design principles are delivered in the cost optimization are
- Adopting of consumption model
- High benefits values from economies of scale
- Stop investing in Data Center Operations
- Analyzing and Attribute Expenditure
- Usage of Well Managed services for reducing some cost of ownership
5. Operational Excellence
Generally, this Operational Excellence of the product is checked for reliability, agility, and performance. The most optimized way is to standardize and manage workflows in an efficient manner. It mostly suggests various principles like
- Performing Operations with code
- Making of some regular incremental changes
- Test for certain responses to unexpected events
- Learning new from the events and failures of certain operations
- Operations Procedures are always kept current
AWS Serverless Architecture
AWS Serverless architecture helps to build and run applications without a second thought of servers. These Serverless applications do not require any of the provision, managing and scaling of servers in a reliable manner. The applications can easily be built to the backend service and everything is required to run the applications and scale up it.
How to get AWS Architecture Certification?
There is a great demand for AWS Certified Solutions Architect Associate, AWS Certified Developer Associate, AWS Certified SysOps Administrator Associate, AWS Certified Advanced Networking Specialty, AWS Certified Cloud Practitioner, etc in the current IT world. Simply advance your career graph by Joining Best AWS Training Institute to get access to special events, accomplishments, and other networking opportunities. Simply get validate the technical knowledge with an Industry Recognized credentials to have great career advancement.
Are you interested to learn AWS and build a career in Cloud Computing? Then check out our AWS Certification Training Course at your near Cities
AWS Training in Ahmedabad, AWS Training in Bangalore, AWS Training in Chennai, AWS Training in Delhi, AWS Training in Dallas, AWS Training in Hyderabad, AWS Training in Kolkata, AWS Training in London, AWS Training in Mumbai, AWS Training in NewYork, AWS Training in Noida, AWS Training in Pune, AWS Training in Toronto
These courses are incorporated with Live instructor-led training, Industry Use cases, and hands-on live projects. This training program will make you an expert in AWS and help you to achieve your dream job.
| Explore AWS Sample Resumes! Download & Edit, Get Noticed by Top Employers! Download Now! |
List of AWS Courses Offered By Mindmajix:
Potential Value Opportunities
Potential Challenges
Candidate Solutions
Step-by-step guide for Example
sample code block