AWS In Practice
Courses
  • Welcome to AWS In Practice by IT Assist Labs!
  • Courses
    • AWS Powered E-commerce Application: A Guided Tour
      • Lesson Learning Paths
        • Lesson Learning Paths - Certification Prep
        • Lesson Learning Paths - Interview Prep
      • Lesson Summaries
        • Introduction
          • E-commerce Application Architecture
        • Multi-Account Strategy
          • Multi-Account Strategy Overview
          • Organization Units
          • Core Accounts
        • Core Microservices
          • Services Overview
          • AWS Well-Architected design framework application
          • Site Reliability Engineering Application
          • DevOps Application
          • Monitoring, Logging and Observability Application
        • AWS Service By Layer
          • AWS Service By Layer Overview
          • Presentation Layer
          • Business Logic Layer
          • Data Layer
        • E-commerce Application Use Cases
          • E-commerce Application Use Cases
          • Roles
      • Lesson Content Navigation Demonstration
    • Explore a Live AWS Environment Powering an E-commerce Application
  • Resources
    • AWS Certification Guide
      • Concepts
        • Security, Identity & Compliance
          • AWS IAM-Related Concepts in Certification Exams
        • Design High-Performing Architectures
          • Designing a high-performing architecture with EC2 and Auto Scaling Groups (ASGs)
    • Insights
      • Zero Trust Architecture (ZTA)
      • Implementing a Zero Trust Architecture(ZTA) with AWS
      • The Modern Application Development Lifecycle - Blue/Green Deployments
      • Microservices Communication Patterns
    • Interview Preparation
      • AWS Solutions Archictect
  • AWS Exploration
    • Use Cases
      • Multi-Region Resiliency with Active-Active Setup
        • Exploration Summary
    • Foundational Solutions Architect Use Cases
    • Security Engineer / Cloud Security Architect Use Cases
    • DevOps / Site Reliability Engineer (SRE) Use Cases
    • Cloud Engineer / Cloud Developer
    • Data Engineer Use Cases
    • Machine Learning Engineer / AI Practitioner Use Cases
    • Network Engineer (Cloud) Use Cases
    • Cost Optimization / FinOps Practitioner Use Cases
    • IT Operations / Systems Administrator Use Cases
  • Study Group
    • AWS Certified Solutions Architect - Associate
      • Study Guide Introduction
      • Domain 1: Design Secure Architectures
        • Task Statement 1.1: Design secure access to AWS resources
          • SecureCart's Journey
          • AWS Identity & Access Management (IAM) Fundamentals
          • AWS Security Token Service (STS)
          • AWS Organization
          • IAM Identity Center
          • AWS Policies
          • Federated Access
          • Directory Service
          • Managing Access Across Multiple Accounts
          • Authorization Models in IAM
          • AWS Control Tower
          • AWS Service Control Policies (SCPs)
          • Use Cases
            • Using IAM Policies and Tags for Access Control in AWS
        • Task Statement 1.2: Design Secure Workloads and Applications
          • SecureCart Journey
          • Application Configuration & Credential Security
          • Copy of Application Configuration & Credential Security
          • Network Segmentation Strategies & Traffic Control
          • Securing Network Traffic & AWS Service Endpoints
          • Protecting Applications from External Threats
          • Securing External Network Connections
          • AWS Network Firewall
          • AWS Firewall Manager
          • IAM Authentication Works with Databases
          • AWS WAF (Web Application Firewall)
          • Use Cases
            • AWS Endpoint Policy for Trusted S3 Buckets
            • Increasing Fault Tolerance for AWS Direct Connect in SecureCart’s Multi-VPC Network
            • Securing Multi-Domain SSL with ALB in SecureCart Using SNI-Based SSL
            • Configuring a Custom Domain Name for API Gateway with AWS Certificate Manager and Route 53
            • Application Load Balancer (ALB) – Redirecting HTTP to HTTPS
            • Security Considerations in ALB Logging & Monitoring
          • Amazon CloudFront and Different Origin Use Cases
          • Security Group
          • CloudFront
          • NACL
          • Amazon Cognito
          • VPC Endpoint
        • Task Statement 1.3: Determine appropriate data security controls
          • SecureCart Journey
          • Data Access & Governance
          • Data Encryption & Key Management
          • Data Retention, Classification & Compliance
          • Data Backup, Replication & Recovery
          • Managing Data Lifecycle & Protection Policies
          • KMS
          • S3 Security Measures
          • KMS Use Cases
          • Use Cases
            • Safely Storing Sensitive Data on EBS and S3
            • Managing Compliance & Security with AWS Config
            • Preventing Sensitive Data Exposure in Amazon S3
            • Encrypting EBS Volumes for HIPAA Compliance
            • EBS Encryption Behavior
            • Using EBS Volume While Snapshot is in Progress
          • Compliance
          • Implementing Access Policies for Encryption Keys
          • Rotating Encryption Keys and Renewing Certificates
          • Implementing Policies for Data Access, Lifecycle, and Protection
          • Rotating encryption keys and renewing certificates
          • Instance Store
          • AWS License Manager
          • Glacier
          • AWS CloudHSM Key Management & Zeroization Protection
          • EBS
        • AWS Security Services
        • Use Cases
          • IAM Policy & Directory Setup for S3 Access via Single Sign-On (SSO)
          • Federating AWS Access with Active Directory (AD FS) for Hybrid Cloud Access
      • Domain 2
        • Task Statement 2.1: Design Scalable and Loosely Coupled Architectures
          • SecureCart Journey
          • API Creation & Management
          • Microservices & Event-Driven Architectures
          • Load Balancing & Scaling Strategies
          • Caching Strategies & Edge Acceleration
          • Serverless & Containerization
          • Workflow Orchestration & Multi-Tier Architectures
        • Task Statement 2.2: Design highly available and/or fault-tolerant architectures
          • SecureCart Journey
          • AWS Global Infrastructure & Distributed Design
          • Load Balancing & Failover Strategies
          • Disaster Recovery (DR) Strategies & Business Continuity
          • Automation & Immutable Infrastructure
          • Monitoring & Workload Visibility
          • Use Cases
            • Amazon RDS Failover Events & Automatic Failover Mechanism
      • Domain 3
        • Task Statement 3.1: Determine high-performing and/or scalable storage solutions
          • SecureCart Journey
          • Understanding AWS Storage Types & Use Cases
          • Storage Performance & Configuration Best Practices
          • Scalable & High-Performance Storage Architectures
          • Hybrid & Multi-Cloud Storage Solutions
          • Storage Optimization & Cost Efficiency
          • Hands-on Labs & Final Challenge
        • Task Statement 3.2: Design High-Performing and Elastic Compute Solutions
          • SecureCart
          • AWS Compute Services & Use Cases
          • Elastic & Auto-Scaling Compute Architectures
          • Decoupling Workloads for Performance
          • Serverless & Containerized Compute Solutions
          • Compute Optimization & Cost Efficiency
        • Task Statement 3.3: Determine High-Performing Database Solutions
          • SecureCart Journey
          • AWS Database Types & Use Cases
          • Database Performance Optimization
          • Caching Strategies for High-Performance Applications
          • Database Scaling & Replication
          • High Availability & Disaster Recovery for Databases
        • Task Statement 3.4: Determine High-Performing and/or Scalable Network Architectures
          • SecureCart Journey
          • AWS Networking Fundamentals & Edge Services
          • Network Architecture & Routing Strategies
          • Load Balancing for Scalability & High Availability
          • Hybrid & Private Network Connectivity
          • Optimizing Network Performance
          • Site-to-Site VPN Integration for SAP HANA in AWS
        • Task Statement 3.5: Determine High-Performing Data Ingestion and Transformation Solutions
          • SecureCart Journey
          • Data Ingestion Strategies & Patterns
          • Data Transformation & ETL Pipelines
          • Secure & Scalable Data Transfer
          • Building & Managing Data Lakes
          • Data Visualization & Analytics
      • Domain 4
        • Task Statement 4.1: Design Cost-Optimized Storage Solutions
          • SecureCart Journey
          • AWS Storage Services & Cost Optimization
          • Storage Tiering & Auto Scaling
          • Data Lifecycle Management & Archival Strategies
          • Hybrid Storage & Data Migration Cost Optimization
          • Cost-Optimized Backup & Disaster Recovery
        • Task Statement 4.2: Design Cost-Optimized Compute Solutions
          • SecureCart Journey
          • AWS Compute Options & Cost Management Tools
          • Compute Purchasing Models & Optimization
          • Scaling Strategies for Cost Efficiency
          • Serverless & Container-Based Cost Optimization
          • Hybrid & Edge Compute Cost Strategies
          • AWS License Manager
        • Task Statement 4.3: Design cost-optimized database solutions
          • SecureCart Journey
          • AWS Database Services & Cost Optimization Tools
          • Database Sizing, Scaling & Capacity Planning
          • Caching Strategies for Cost Efficiency
          • Backup, Retention & Disaster Recovery
          • Cost-Optimized Database Migration Strategies
        • Task Statement 4.4: Design Cost-Optimized Network Architectures
          • SecureCart Journey
          • AWS Network Cost Management & Monitoring
          • Load Balancing & NAT Gateway Cost Optimization
          • Network Connectivity & Peering Strategies
          • Optimizing Data Transfer & Network Routing Costs
          • Content Delivery Network & Edge Caching
      • Week Nine
        • Final Review Session
        • Final Practice Test
Powered by GitBook

@ 2024 IT Assist LLC

On this page
  • 🔹 Step 1: Overview of AWS Compute Services
  • 🔹 Step 2: Choosing Between EC2, Containers, and Serverless Compute
  • 🔹 Step 3: Scaling Compute with Auto Scaling & Load Balancing
  • 🔹 Step 4: Cost-Optimization Strategies for Compute
  • 🔹 Step 5: Monitoring & Performance Tuning
  • 🚀 Summary
  1. Study Group
  2. AWS Certified Solutions Architect - Associate
  3. Domain 3
  4. Task Statement 3.2: Design High-Performing and Elastic Compute Solutions

AWS Compute Services & Use Cases

AWS offers a variety of compute services to meet different workload requirements, providing scalability, flexibility, and cost optimization. SecureCart’s e-commerce platform requires a combination of EC2 instances, containerized workloads, and serverless computing to optimize performance, reduce costs, and scale effectively.

✔ Why does SecureCart need AWS compute services?

  • Supports dynamic workloads, including traffic spikes and seasonal demand.

  • Enables cost-efficient, on-demand, and auto-scaling infrastructure.

  • Facilitates containerized workloads and event-driven applications.

  • Ensures high availability and performance with auto-scaling and load balancing.


🔹 Step 1: Overview of AWS Compute Services

✔ AWS provides multiple compute services optimized for different workloads:

AWS Compute Service

Best For

Key Features

SecureCart Use Case

Amazon EC2

General-purpose workloads with full OS control.

Choose from various instance types, auto-scale, optimize CPU/memory.

Hosts SecureCart’s web application backend.

Amazon EC2 Auto Scaling

Dynamically adjusts instance count.

Scale based on CPU, memory, or network traffic.

Automatically scales checkout services during flash sales.

AWS Lambda

Serverless compute for event-driven workloads.

Runs code without managing infrastructure, scales automatically.

Processes order confirmations and sends transactional emails.

AWS Fargate

Serverless compute for containerized workloads.

Runs containers without managing underlying servers.

Manages SecureCart’s search and cart microservices.

Amazon ECS (Elastic Container Service)

Orchestrates Docker containers.

Managed container service, integrates with EC2 and Fargate.

Deploys SecureCart’s microservices with high availability.

Amazon EKS (Elastic Kubernetes Service)

Runs Kubernetes workloads.

Fully managed Kubernetes clusters for large-scale apps.

Hosts SecureCart’s AI-driven recommendation engine.

AWS Batch

Runs batch processing jobs efficiently.

Dynamically provisions compute resources.

Processes nightly analytics on customer purchasing trends.

AWS Elastic Beanstalk

Simplified application deployment.

Automates provisioning, scaling, and monitoring.

Deploys SecureCart’s internal tools with minimal overhead.

AWS Outposts

Runs AWS infrastructure on-premises.

Hybrid cloud with AWS-managed hardware.

Extends SecureCart’s compute power to data centers for compliance.

✅ Best Practices: ✔ Use EC2 for traditional workloads requiring full OS control. ✔ Leverage Lambda for event-driven applications with minimal overhead. ✔ Use Fargate for managing containers without provisioning EC2 instances. ✔ Implement Auto Scaling to dynamically adjust compute capacity.


🔹 Step 2: Choosing Between EC2, Containers, and Serverless Compute

✔ SecureCart must select the right compute model based on performance, scalability, and cost.

Compute Model

Best For

Advantages

SecureCart Use Case

EC2 Instances

Long-running workloads requiring full OS control.

Fine-tuned performance, full control over instances.

Hosts SecureCart’s order processing and database servers.

Containers (ECS/EKS/Fargate)

Microservices and highly scalable workloads.

Optimized resource utilization, auto-scaling.

Deploys SecureCart’s product search and recommendation engine.

Serverless (Lambda)

Event-driven and short-lived tasks.

Fully managed, cost-efficient, automatic scaling.

Processes order confirmations and payment notifications.

✅ Best Practices: ✔ Use EC2 for persistent workloads that require deep customization. ✔ Run microservices in containers for efficient resource utilization. ✔ Use Lambda for lightweight, asynchronous workloads.


🔹 Step 3: Scaling Compute with Auto Scaling & Load Balancing

✔ Why? – SecureCart must ensure high availability and responsiveness during peak traffic loads.

✔ AWS Scaling Strategies:

Scaling Approach

Purpose

SecureCart Implementation

Amazon EC2 Auto Scaling

Automatically scales instances based on demand.

Expands checkout servers during flash sales.

AWS Lambda Auto Scaling

Adjusts execution environment dynamically.

Handles sudden spikes in order processing.

ECS & EKS Auto Scaling

Adjusts container workloads dynamically.

Scales SecureCart’s product search services.

✔ AWS Load Balancing Strategies:

Load Balancer Type

Purpose

SecureCart Implementation

Application Load Balancer (ALB)

Routes HTTP/S traffic to microservices.

Balances traffic between checkout and catalog services.

Network Load Balancer (NLB)

Handles TCP/UDP traffic with low latency.

Optimizes SecureCart’s real-time inventory updates.

✅ Best Practices: ✔ Use ALB for web applications and microservices. ✔ Enable Auto Scaling to dynamically add/remove instances based on demand. ✔ Leverage NLB for high-throughput, latency-sensitive applications.


🔹 Step 4: Cost-Optimization Strategies for Compute

✔ Why? – SecureCart optimizes compute costs by choosing the right pricing model and instance types.

✔ AWS Compute Cost-Optimization Strategies:

Optimization Method

Purpose

SecureCart Implementation

Spot Instances

Low-cost compute for non-critical workloads.

Processes customer behavior analytics.

Savings Plans

Commit to usage for cost savings.

Optimizes SecureCart’s persistent EC2 workloads.

AWS Graviton-based Instances

ARM-based instances with better performance per dollar.

Runs SecureCart’s web application backend.

✅ Best Practices: ✔ Use Spot Instances for batch processing and fault-tolerant applications. ✔ Leverage Savings Plans for predictable compute workloads. ✔ Deploy Graviton-based instances (M7g, C7g) for better price-performance ratio.


🔹 Step 5: Monitoring & Performance Tuning

✔ Why? – SecureCart tracks compute performance to ensure high availability and efficiency.

✔ AWS Monitoring Tools for Compute Optimization:

Monitoring Tool

Purpose

SecureCart Use Case

Amazon CloudWatch

Tracks CPU, memory, and network usage.

Monitors EC2 and container performance.

AWS Compute Optimizer

Recommends right-sized instance types.

Suggests switching from M5 to M6g for better performance.

AWS X-Ray

Traces request latency across microservices.

Analyzes slow API responses in SecureCart’s checkout system.

✅ Best Practices: ✔ Enable CloudWatch Alarms for high CPU/memory usage. ✔ Use Compute Optimizer to right-size instances for cost efficiency. ✔ Monitor Lambda execution times to optimize performance.


🚀 Summary

✔ Use EC2 for full OS control, containers for scalable microservices, and Lambda for event-driven workloads. ✔ Implement Auto Scaling to dynamically adjust compute resources. ✔ Optimize costs using Spot Instances, Savings Plans, and Graviton-based instances. ✔ Leverage AWS monitoring tools (CloudWatch, X-Ray, Compute Optimizer) for performance tuning.

Scenario:

SecureCart must choose the best AWS compute service for different workloads, ensuring performance, scalability, and cost-efficiency.

Key Learning Objectives:

✅ Understand EC2, AWS Fargate, Lambda, and AWS Batch ✅ Learn when to use on-demand vs. reserved vs. spot instances ✅ Explore compute-intensive workloads with Amazon EMR & AWS Batch

Hands-on Labs:

1️⃣ Deploy an EC2 Instance & Benchmark Performance 2️⃣ Run a Batch Processing Job Using AWS Batch 3️⃣ Compare AWS Lambda & AWS Fargate for Event-Driven Workloads

🔹 Outcome: SecureCart selects the best AWS compute options for each business requirement.

PreviousSecureCartNextElastic & Auto-Scaling Compute Architectures

Last updated 2 months ago