Understanding Terminology and Scope of Deployment
Explore essential terminology and scope of deployment in AWS, focusing on key concepts such as IAM, S3, EC2, and HashiCorp Vault. Learn about infrastructure deployment, costs, and setting up environments in AWS for deploying Vault effectively.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
Terminology & Scope of Deployment LECTURE 2
Terminology used throughout the course AWS specific service terms IAM = Identity & Access Management S3 = Simple Storage Service EC2 = Elastic Compute Cloud IAM Policies = A definition of permissions for AWS services for a principal. Written & stored in JSON (JavaScript Object Notation) PKI = Public Key Infrastructure (Roles, Policies, Hardware to create and maintain digital certificates to match identity) Troy Dieter | Deploying HashiCorp Vault with AWS Secrets Engine
Terminology used throughout the course HashiCorp Vault specific terms Secrets Engine = Uses IAM policies to dynamically perform IAM AWS API calls to add access keys & secret access keys for users Secret = Term used by Vault for confidential data Lease = The duration that a token is granted Token = A dynamic mapping to information View the Vault Concepts and further training in the additional curriculum section of the lecture for more information Troy Dieter | Deploying HashiCorp Vault with AWS Secrets Engine
Scope of Deployment (Infrastructure) 1 VPC 2 Subnets (Public, Private) 2 Availability Zones 1-2 T3.Micro EC2 Vault Servers Launch Configuration & Auto Scaling Group based on CPU usage S3 Bucket for encrypted configuration & unseal key storage DynamoDB + Global Table (if desired) for database backend Application Load Balancer to distribute traffic Route53 to handle public DNS forward hosted zone and record set Troy Dieter | Deploying HashiCorp Vault with AWS Secrets Engine
Scope of Deployment (Costs) Based on on-demand EC2 pricing for T3.Micro Cost savings with EC2 spot instances when set in the launch configuration DynamoDB using on demand resources Troy Dieter | Deploying HashiCorp Vault with AWS Secrets Engine
Next Lecture Set up the environment in AWS Deploy Troy Dieter | Deploying HashiCorp Vault with AWS Secrets Engine
