General AWS

 Ec2 reserved instances 

Billed regardless of usage. Standard and convertible (can change instance family, OS etc). Sell in market place 

Provisoned iops

Provisioned IOPS volumes, backed by solid-state drives (SSDs), are the highest performance Elastic Block Store (EBS) storage volumes designed for your critical, IOPS-intensive and throughput-intensive workloads that require low latency.

DR strategy
1. Backup/restore RTO - hours 
2. Pilot light - RTO 10s of mins - some resources provisioned like ALB but no ec2, data is live
3. Warm standby - RTO mins - scaled down resources running for testing
4. Multi site active active 

Comments

Post a Comment

Popular posts from this blog

OCI Network Security Groups and Security Rules

Image
NSG allows access control to a group of resources that have the same security posture. NSG consists of two items a security list and VNIC. Stateful Vs Stateless security rules: For high volume traffic it is recommended to you stateless security rules. This is because stateful security list tracks connection information to allow by directional traffic (response traffic to be sent). This state is stored in the compute instance and the network table might get full for high volume traffic.
Read more

Well Architected Framework

  Operational Excellence Security Reliability Performance Efficiency Cost Optimization Sustainability Operation   Perform operations as code:   Make frequent, small, reversible changes Refine operations procedures frequently: Anticipate failure: Learn from failure Security  Implement a strong identity foundation:  Implement the principle of least privilege and enforce separation of duties with appropriate authorization for each interaction with your AWS resources. Centralize identity management, and aim to eliminate reliance on long-term static credentials. Enable traceability:  Monitor, alert, and audit actions and changes to your environment in real time. Integrate log and metric collection with systems to automatically investigate and take action. Apply security at all layers:  Apply a defense in depth approach with multiple security controls. Apply to all layers (for example, edge of network, VPC, load balancing, every instance and compute service,...
Read more

DKIM and OCI Email

DKIM stands for Domain Key Identified Mail. It allows an organization to take responsbility to sign emails sent from its domains. It uses pub/private key to sign and allow receiver to verify the authenticity of the email. It prevent mail spoofing and proliferation attacks. OCI email delivery allows to configure DKIMs for email domains.When DKIM is created, it generates a CNAME record to be used in email domain configuraiton. Email Configuration Create a User and generate SMTP Credentials for that user. This user/credentials is used to login to the SMTP server. Create an approved sender in the Email Domain. This will be the from address. Attach a DKIM to the sender/domain.
Read more