AWS Notes

Manage AWS with:

AWS Terms and Services:

Haven’t touched:

Regions:

AZ:

EC2

On Demand Instances - normal instance, start/stop/destroy when needed
EC2 Savings Plan - save money by committing for a period of time
Reserved Instances - reserved ( may cost less )
Spot Instances - uses free capacity when available, much cheaper, can be interrupted
Dedicated Hosts - actual metal host that is reserved and not shared

EC2 Types ( intel/AMD/Arm Gravitron )

Scaling - haven’t touched this

AMI

…

Components

VPC
Subnet ( public and private )
Network Interface
ACL - subnet level, stateless ( need inbound and outbound ), allow/deny rules, eval in order and stop at match,
SG - Security Group - assigned at instance level, statefull ( allowing inbound can allow outbound, deny by default, can create rules to allow, all rules evaluated
Private IP # Internal communication within VPC, automatically assigned to each instance
Public IP # Connects to the internet, can change when instance is stopped or started
EIP # static, public IP, connects to internet, doesn’t change, bound to instance or NIC, can move to other instance, can keep reserved

Feature	Security Group (SG)	Network ACL (NACL)
Level	Instance Level	Subnet Level
Stateful/Stateless	Stateful	Stateless
Allow/Deny Rules	Only Allow	Allow & Deny
Rule Evaluation	Evaluates all rules	Rules evaluated in order
Default Behavior	Deny inbound, allow outbound	Default allows all (custom NACL denies all)

S3 Storage Classes