AWS Cookbook

Spis treści ebooka

• Foreword
• Preface
  • Who This Book Is For
  • What You Will Learn
  • The Recipes
  • What You Will Need
  • Getting Started
  • Conventions Used in This Book
  • Using Code Examples
  • OReilly Online Learning
  • How to Contact Us
  • Acknowledgments
• 1. Security
  • 1.0. Introduction
  • 1.1. Creating and Assuming an IAM Role for Developer Access
  • 1.2. Generating a Least Privilege IAM Policy Based on Access Patterns
  • 1.3. Enforcing IAM User Password Policies in Your AWS Account
  • 1.4. Testing IAM Policies with the IAM Policy Simulator
  • 1.5. Delegating IAM Administrative Capabilities Using Permissions Boundaries
  • 1.6. Connecting to EC2 Instances Using AWS SSM Session Manager
  • 1.7. Encrypting EBS Volumes Using KMS Keys
  • 1.8. Storing, Encrypting, and Accessing Passwords Using Secrets Manager
  • 1.9. Blocking Public Access for an S3 Bucket
  • 1.10. Serving Web Content Securely from S3 with CloudFront
• 2. Networking
  • 2.0. Introduction
  • 2.1. Defining Your Private Virtual Network in the Cloud by Creating an Amazon VPC
  • 2.2. Creating a Network Tier with Subnets and a Route Table in a VPC
  • 2.3. Connecting Your VPC to the Internet Using an Internet Gateway
  • 2.4. Using a NAT Gateway for Outbound Internet Access from Private Subnets
  • 2.5. Granting Dynamic Access by Referencing Security Groups
  • 2.6. Using VPC Reachability Analyzer to Verify and Troubleshoot Network Paths
  • 2.7. Redirecting HTTP Traffic to HTTPS with an Application Load Balancer
  • 2.8. Simplifying Management of CIDRs in Security Groups with Prefix Lists
  • 2.9. Controlling Network Access to S3 from Your VPC Using VPC Endpoints
  • 2.10. Enabling Transitive Cross-VPC Connections Using Transit Gateway
  • 2.11. Peering Two VPCs Together for Inter-VPC Network Communication
• 3. Storage
  • 3.0. Introduction
  • 3.1. Using S3 Lifecycle Policies to Reduce Storage Costs
  • 3.2. Using S3 Intelligent-Tiering Archive Policies to Automatically Archive S3 Objects
  • 3.3. Replicating S3 Buckets to Meet Recovery Point Objectives
  • 3.4. Observing S3 Storage and Access Metrics Using Storage Lens
  • 3.5. Configuring Application-Specific Access to S3 Buckets with S3 Access Points
  • 3.6. Using Amazon S3 Bucket Keys with KMS to Encrypt Objects
  • 3.7. Creating and Restoring EC2 Backups to Another Region Using AWS Backup
  • 3.8. Restoring a File from an EBS Snapshot
  • 3.9. Replicating Data Between EFS and S3 with DataSync
• 4. Databases
  • 4.0. Introduction
  • 4.1. Creating an Amazon Aurora Serverless PostgreSQL Database
  • 4.2. Using IAM Authentication with an RDS Database
  • 4.3. Leveraging RDS Proxy for Database Connections from Lambda
  • 4.4. Encrypting the Storage of an Existing Amazon RDS for MySQL Database
  • 4.5. Automating Password Rotation for RDS Databases
  • 4.6. Autoscaling DynamoDB Table Provisioned Capacity
  • 4.7. Migrating Databases to Amazon RDS Using AWS DMS
  • 4.8. Enabling REST Access to Aurora Serverless Using RDS Data API
• 5. Serverless
  • 5.0. Introduction
  • 5.1. Configuring an ALB to Invoke a Lambda Function
  • 5.2. Packaging Libraries with Lambda Layers
  • 5.3. Invoking Lambda Functions on a Schedule
  • 5.4. Configuring a Lambda Function to Access an EFS File System
  • 5.5. Running Trusted Code in Lambda Using AWS Signer
  • 5.6. Packaging Lambda Code in a Container Image
  • 5.7. Automating CSV Import into DynamoDB from S3 with Lambda
  • 5.8. Reducing Lambda Startup Times with Provisioned Concurrency
  • 5.9. Accessing VPC Resources with Lambda
• 6. Containers
  • 6.0. Introduction
  • 6.1. Building, Tagging, and Pushing a Container Image to Amazon ECR
  • 6.2. Scanning Images for Security Vulnerabilities on Push to Amazon ECR
  • 6.3. Deploying a Container Using Amazon Lightsail
  • 6.4. Deploying Containers Using AWS Copilot
  • 6.5. Updating Containers with Blue/Green Deployments
  • 6.6. Autoscaling Container Workloads on Amazon ECS
  • 6.7. Launching a Fargate Container Task in Response to an Event
  • 6.8. Capturing Logs from Containers Running on Amazon ECS
• 7. Big Data
  • 7.0. Introduction
  • 7.1. Using a Kinesis Stream for Ingestion of Streaming Data
  • 7.2. Streaming Data to Amazon S3 Using Amazon Kinesis Data Firehose
  • 7.3. Automatically Discovering Metadata with AWS Glue Crawlers
  • 7.4. Querying Files on S3 Using Amazon Athena
  • 7.5. Transforming Data with AWS Glue DataBrew
• 8. AI/ML
  • 8.0. Introduction
  • 8.1. Transcribing a Podcast
  • 8.2. Converting Text to Speech
  • 8.3. Computer Vision Analysis of Form Data
  • 8.4. Redacting PII from Text Using Comprehend
  • 8.5. Detecting Text in a Video
  • 8.6. Physician Dictation Analysis Using Amazon Transcribe Medical and Comprehend Medical
  • 8.7. Determining Location of Text in an Image
• 9. Account Management
  • 9.0. Introduction
  • 9.1. Using EC2 Global View for Account Resource Analysis
  • 9.2. Modifying Tags for Many Resources at One Time with Tag Editor
  • 9.3. Enabling CloudTrail Logging for Your AWS Account
  • 9.4. Setting Up Email Alerts for Root Login
  • 9.5. Setting Up Multi-Factor Authentication for a Root User
  • 9.6. Setting Up AWS Organizations and AWS Single Sign-On
• A. Fast Fixes
• Index

pokaż cały spis treści

ukryj recenzje