Random Notes

    ECS Cluster Auto Scaling  (CAS) is a new capability for ECS to manage the scaling of  EC2 Auto Scaling Groups  (ASG).  CAS relies on  ECS capacity providers , which provide the link between your ECS cluster and the ASGs Each ASG is associated with a capacity provider, and each such capacity provider has only one ASG, but many capacity providers can be associated with one ECS cluster. In order to scale the entire cluster automatically, each capacity provider manages the scaling of its associated ASG. Design goal #1 : CAS should scale the ASG out (adding more instances) whenever there is not enough capacity to run tasks the customers is trying to run. Design goal #2 : CAS should scale in (removing instances) only if it can be done without disrupting any tasks (other than daemon tasks). Design goal #3 : customers should maintain full control of their ASGs, including the ability to set the minimum and maximum size, use other scaling policies, configure i...

 Ec2 reserved instances   Billed regardless of usage. Standard and convertible (can change instance family, OS etc). Sell in market place  Provisoned iops Provisioned IOPS volumes, backed by solid-state drives (SSDs), are the highest performance  Elastic Block Store  (EBS) storage volumes designed for your critical, IOPS-intensive and throughput-intensive workloads that require low latency. DR strategy 1. Backup/restore RTO - hours  2. Pilot light - RTO 10s of mins - some resources provisioned like ALB but no ec2, data is live 3. Warm standby - RTO mins - scaled down resources running for testing 4. Multi site active active 

  Design Keep related data together Use few tables Use sort order  Related items can be grouped together and queried efficiently if their key design causes them to sort together. The primary key that uniquely identifies each item in an Amazon DynamoDB table can be simple (a partition key only) or composite (a partition key combined with a sort key). The primary key that uniquely identifies each item in an Amazon DynamoDB table can be simple (a partition key only) or composite (a partition key combined with a sort key). You can determine the access patterns that your application requires, and read and write units that each table and secondary index requires. By default, every partition in the table will strive to deliver the full capacity of 3,000 RCU and 1,000 WCU. The total throughput across all partitions in the table may be constrained by the provisioned throughput in provisioned mode, or by the table level throughput limit in on-demand mode. DynamoDB provides some flexibi...

  Operational Excellence Security Reliability Performance Efficiency Cost Optimization Sustainability Operation   Perform operations as code:   Make frequent, small, reversible changes Refine operations procedures frequently: Anticipate failure: Learn from failure Security  Implement a strong identity foundation:  Implement the principle of least privilege and enforce separation of duties with appropriate authorization for each interaction with your AWS resources. Centralize identity management, and aim to eliminate reliance on long-term static credentials. Enable traceability:  Monitor, alert, and audit actions and changes to your environment in real time. Integrate log and metric collection with systems to automatically investigate and take action. Apply security at all layers:  Apply a defense in depth approach with multiple security controls. Apply to all layers (for example, edge of network, VPC, load balancing, every instance and compute service,...

 https://harness.io/blog/blue-green-canary-deployment-strategies https://deployplace.com/blog/canary-deployment/

 Target Tracking Policy for Scaling: https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-scaling-target-tracking.html