AWS Cookbook: Recipes for Success on AWS

Foreword
Preface
	Who This Book Is For
	What You Will Learn
	The Recipes
	What You Will Need
	Getting Started
	Conventions Used in This Book
	Using Code Examples
	O’Reilly Online Learning
	How to Contact Us
	Acknowledgments
1. Security
	1.0. Introduction
	1.1. Creating and Assuming an IAM Role for Developer Access
	1.2. Generating a Least Privilege IAM Policy Based on Access Patterns
	1.3. Enforcing IAM User Password Policies in Your AWS Account
	1.4. Testing IAM Policies with the IAM Policy Simulator
	1.5. Delegating IAM Administrative Capabilities Using Permissions Boundaries
	1.6. Connecting to EC2 Instances Using AWS SSM Session Manager
	1.7. Encrypting EBS Volumes Using KMS Keys
	1.8. Storing, Encrypting, and Accessing Passwords Using Secrets Manager
	1.9. Blocking Public Access for an S3 Bucket
	1.10. Serving Web Content Securely from S3 with CloudFront
2. Networking
	2.0. Introduction
	2.1. Defining Your Private Virtual Network in the Cloud by Creating an Amazon VPC
	2.2. Creating a Network Tier with Subnets and a Route Table in a VPC
	2.3. Connecting Your VPC to the Internet Using an Internet Gateway
	2.4. Using a NAT Gateway for Outbound Internet Access from Private Subnets
	2.5. Granting Dynamic Access by Referencing Security Groups
	2.6. Using VPC Reachability Analyzer to Verify and Troubleshoot Network Paths
	2.7. Redirecting HTTP Traffic to HTTPS with an Application Load Balancer
	2.8. Simplifying Management of CIDRs in Security Groups with Prefix Lists
	2.9. Controlling Network Access to S3 from Your VPC Using VPC Endpoints
	2.10. Enabling Transitive Cross-VPC Connections Using Transit Gateway
	2.11. Peering Two VPCs Together for Inter-VPC Network Communication
3. Storage
	3.0. Introduction
	3.1. Using S3 Lifecycle Policies to Reduce Storage Costs
	3.2. Using S3 Intelligent-Tiering Archive Policies to Automatically Archive S3 Objects
	3.3. Replicating S3 Buckets to Meet Recovery Point Objectives
	3.4. Observing S3 Storage and Access Metrics Using Storage Lens
	3.5. Configuring Application-Specific Access to S3 Buckets with S3 Access Points
	3.6. Using Amazon S3 Bucket Keys with KMS to Encrypt Objects
	3.7. Creating and Restoring EC2 Backups to Another Region Using AWS Backup
	3.8. Restoring a File from an EBS Snapshot
	3.9. Replicating Data Between EFS and S3 with DataSync
4. Databases
	4.0. Introduction
	4.1. Creating an Amazon Aurora Serverless PostgreSQL Database
	4.2. Using IAM Authentication with an RDS Database
	4.3. Leveraging RDS Proxy for Database Connections from Lambda
	4.4. Encrypting the Storage of an Existing Amazon RDS for MySQL Database
	4.5. Automating Password Rotation for RDS Databases
	4.6. Autoscaling DynamoDB Table Provisioned Capacity
	4.7. Migrating Databases to Amazon RDS Using AWS DMS
	4.8. Enabling REST Access to Aurora Serverless Using RDS Data API
5. Serverless
	5.0. Introduction
	5.1. Configuring an ALB to Invoke a Lambda Function
	5.2. Packaging Libraries with Lambda Layers
	5.3. Invoking Lambda Functions on a Schedule
	5.4. Configuring a Lambda Function to Access an EFS File System
	5.5. Running Trusted Code in Lambda Using AWS Signer
	5.6. Packaging Lambda Code in a Container Image
	5.7. Automating CSV Import into DynamoDB from S3 with Lambda
	5.8. Reducing Lambda Startup Times with Provisioned Concurrency
	5.9. Accessing VPC Resources with Lambda
6. Containers
	6.0. Introduction
	6.1. Building, Tagging, and Pushing a Container Image to Amazon ECR
	6.2. Scanning Images for Security Vulnerabilities on Push to Amazon ECR
	6.3. Deploying a Container Using Amazon Lightsail
	6.4. Deploying Containers Using AWS Copilot
	6.5. Updating Containers with Blue/Green Deployments
	6.6. Autoscaling Container Workloads on Amazon ECS
	6.7. Launching a Fargate Container Task in Response to an Event
	6.8. Capturing Logs from Containers Running on Amazon ECS
7. Big Data
	7.0. Introduction
	7.1. Using a Kinesis Stream for Ingestion of Streaming Data
	7.2. Streaming Data to Amazon S3 Using Amazon Kinesis Data Firehose
	7.3. Automatically Discovering Metadata with AWS Glue Crawlers
	7.4. Querying Files on S3 Using Amazon Athena
	7.5. Transforming Data with AWS Glue DataBrew
8. AI/ML
	8.0. Introduction
	8.1. Transcribing a Podcast
	8.2. Converting Text to Speech
	8.3. Computer Vision Analysis of Form Data
	8.4. Redacting PII from Text Using Comprehend
	8.5. Detecting Text in a Video
	8.6. Physician Dictation Analysis Using Amazon Transcribe Medical and Comprehend Medical
	8.7. Determining Location of Text in an Image
9. Account Management
	9.0. Introduction
	9.1. Using EC2 Global View for Account Resource Analysis
	9.2. Modifying Tags for Many Resources at One Time with Tag Editor
	9.3. Enabling CloudTrail Logging for Your AWS Account
	9.4. Setting Up Email Alerts for Root Login
	9.5. Setting Up Multi-Factor Authentication for a Root User
	9.6. Setting Up AWS Organizations and AWS Single Sign-On
Fast Fixes
Index
About the Authors