AnyCompany Donuts is an established donut franchise that has recently started their journey of migrating servers to the cloud. They have chosen to use AWS as their cloud provider. They are challenged with incorporating AWS best practices while attempting to be frugal with their AWS footprint. Servers are backed up with initial AMIs and then daily snapshots in the event of a failure. They are not using load balancers or autoscaling groups with their initial configuration. To help keep costs down, the System Administration (SA) team has been instructed to stop any Amazon Elastic Compute Cloud (Amazon EC2) instance they are using for development purposes any time they are going to step out of the office or if they are leaving for the day. They use a bash script for this process that is populated with the EC2 instance IDs to simplify the steps.
Level
Intermediate
Duration
1 Hour 30 Minutes
Course objectives
In this course, you will learn how to:
   •   Use AWS CloudTrail logs to troubleshoot actions made to AWS resources.
   •   Use the new Amazon EC2 Stop Protection feature as well as the Amazon EC2 Change Termination Protection feature.
   •   Use AWS EventBridge coupled with Amazon Simple Notification Service (SNS) to receive notifications when desired instance states are no longer met.
   •   Configure Instance Scheduler on AWS to start and stop development instances on a schedule using the scheduler-cli
Intended audience
This course is intended for:
   •   Security Engineers responsible for the operations of secure cloud infrastructure, platforms, and software.
Prerequisites
We recommend that attendees of this course have the following prerequisites:
   •   You should be familiar with basic navigation of the AWS Management Console.
   •   You should be comfortable editing and running scripts using an AWS Cloud9 code editor.
   •   You should have a basic understanding and familiarity with the following services.
      •   Amazon Elastic Compute Cloud (Amazon EC2)
      •   Amazon DynamoDB
      •   AWS CloudTrail
      •   Amazon Simple Notification Service (Amazon SNS)
      •   Amazon EventBridge
Course outline
Task 1: Stop development servers before leaving for lunch
Task 2: The website is down!
Task 3: Implement guardrails for production instances
Task 4: Configure the Instance Scheduler for development instances
