You’ll like it here in the cloud
This tutorial focuses on getting you setup to access the AWS cloud as a System Administrator.
Tutorials in Amazon’s Qwiklabs use the manual approach, so it’s presented here to provide notes.
## AWS Management Console
Use an internet browser to get on the AWS Console at http://aws.amazon.com/ on web browsers. There are apps for mobile devices:
Sign-up for an AWS account using the email address of the billing administrator, providing your credit card.
Open AWS Management Console and login as the billing administrator root account.
PROTIP: Create a sub-account to do work rather than using the account created for billing.
Create a sub-account.
TODO: Add steps.
Define group roles to permissions.
Grant permissions to each group.
Assign sub-account users to group roles.
This sub-account will be used in the remainder of this tutorial.
NOTE: Groups cannot be nested.
Create a sign-in link, such as:
Delete root access.
Sign-in using a sub-account.
Notice your AWS Console is tied to a particular Availability Zone, such as “us-west-2”:
NOTE: Baking different zones into Console URLs makes for more direct connections and removes issues from using a single URL/DNS.
The AWS Management Console is now used for manual review of one Availability Zone at a time.
Set icon bar with your favorite services
There are several ways to select a service. One is clicking the icon in the gallery.
Copy the public DNS to clipboard, for example:
Download the PEM/PPK.
AWS Identity and Access Management (IAM) controls access to users, groups, roles, and policies.
Assign permissions to make
aws iam list-users --query Users[*].UserName
List groups which the user belongs to :
aws iam list-groups-for-user --username ???
Services and Categories
In enterprises today, servers are built by scripts and configuration files generated from templates. This is so the build process can be debugged and changed slightly through the lifecycle from test to prod.
Instead of clicking and typing, server administrators work with template files in JSON format for Cloud Formation to process.
The next step up is to use Atlas
JSON files based on information typed into their web Consoles.
The command line interface is used by programs rather than the manual Console.
These inputs to generators (and the generator code) are saved in version control systems like Git.
Install AWS CLI:
brew install awscli
the response I got on 20 Jun 2016:
==> Downloading https://homebrew.bintray.com/bottles/awscli-1.10.39.el_capitan.b ######################################################################## 100.0% ==> Pouring awscli-1.10.39.el_capitan.bottle.tar.gz ==> Caveats The "examples" directory has been installed to: /usr/local/share/awscli/examples Add the following to ~/.bashrc to enable bash completion: complete -C aws_completer aws Add the following to ~/.zshrc to enable zsh completion: source /usr/local/share/zsh/site-functions/_aws Before using awscli, you need to tell it about your AWS credentials. The easiest way to do this is to run: aws configure More information: https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-getting-started.html zsh completion has been installed to: /usr/local/share/zsh/site-functions ==> Summary 🍺 /usr/local/Cellar/awscli/1.10.39: 2,778 files, 19.8M
Verify what version you have installed:
Sample response (June 4, 2016):
aws-cli/1.10.38 Python/2.7.11 Darwin/15.5.0 botocore/1.4.28
NOTE: Python 2.7 is being used, not Python 3. The Python package botocore on GitHub provides a low-level foundation for AWS CLI software.
To enable bash completion for aws commands:
echo ‘complete -C aws_completer aws’ » ~/.bashrc
To configure IAM:
The default region name is
The default output format is
For a list of commands:
aws command help
Types of operating system AMI:
- Amazon Linux 2014.09.2 (CentOS)
- Red Hat Enterprise Linux 6.6 (RHEL)
- SUSE Linux Enterprise Server 12
- Ubuntu Server 14.04
Advanced User Data
AWS Powershell for Windows</a>
aws Get-AWSCredentials -ListProfiles
At architecture/icons Amazon provides a sample .PPTX (PowerPoint 2010+) file (AWS_Simple_Icons_PPT_v16.2.22.zip). Lines used to illustrate the hierarchy:
PROTIP: Use different colors for lines and text to reduce visual confusion.
You can also download a zip containing .png and .svg files of icons (AWS_Simple_Icons_EPS-SVG_v16.2.22.zip).
- Matt Wood, @mza, Product Strategy @ Amazon Web Services
Tutorial Rock Stars and their presentations
Ansible for AWS book 280 pages for minimum $30 published on 2016-01-15 by Yan Kurniawan living in Sydney, Australia #ansible4aws.
Ryan Scott Brown @ryan_sb
AWS Training Resources
CloudAcademy.com provides hands-on lab instances with their tutorials.
More on Amazon
This is one of a series on Amazon:
- AWS On-boarding
- AWS DevOps (CodeCommit, CodePipeline, CodeDeploy)
- AWS Lambda
- API Management by Amazon
- AWS server deployment options
- Build load-balanced servers in AWS EC2