INTRODUCTION TO

Cloud Computing
Cloud computing originates from the idea of letting businesses use your
resources and infrastructure for which you paid the whole price for, but you
eventually profit by renting it out to them for a fraction of the price using Now if you are able to connect
the internet. your datacentre to the internet
This model allows businesses to adopt a pay as you use model without so that you can let others use
having to invest in any resources or having to manage them. these servers
remotely/virtually via an IP
address then you have
succeeded in building a cloud
Imagine owing a Mac Book Pro infrastructure.
that costs around 2499$.

If we were to strip the display,

speakers, mousepad, keyboard
, all the unwanted programs
and software from within it and Now lets say:
finally its brand value, then we BUISNESS A wants to use a
are left with what is called a cluster of these servers just to
commodity hardware or in store some data like how you
simpler terms a single plain would use your laptop to store
server or CPU would cost just your personal pictures, videos
about a fraction. or files.
BUISNESS B wants to use a Now try to make this infrastructure more intelligent and smart by
group of these servers to writing some code behind the scenes which based on the
perform data analytics similar requirements/inputs of the Businesses will provision your servers to
Accumulate a bunch of these to how you would use your fulfil that task. This is the basic principle of cloud computing.
servers and interconnect them laptop to make a spreadsheet
so that they can communicate to analyse your monthly Extrapolate the complexities involved in developing a similar
with each other and with an expenditure. infrastructure by a 1000 times and you will have AWS aka Amazon
external peripheral device you Web Services which is a Cloud Solution used by thousands of
have got yourself a datacentre. companies.
 AWS Datacentres

➢ 36 Regions
➢ 114 Availability Zones
➢ 700+ Edge Locations Regions
Upcoming Regions
 AWS Data distribution
AVAILABILITY ZONE EDGE LOCATION

An Availability Zone (AZ) is a

group of AWS datacentres.

An AWS Region consists of a group of

Availability Zones in which the AZs are
separated by at least 10 – 20 miles.
This is done with the intention that when we Consider you are a business user who stays at the red dot marked area on the
use certain AWS services we want to replicate map of US as shown above and that you have chosen to avail certain AWS
and store the data in multiple AZs within a services offered by the Ohio Region and its AZs. Now as you can infer from the
region so that in case a natural calamity or map, the Ohio region is considerably far away from the red dot and it could
some unforeseen incidents happen because of cause some latency in content being delivered from the region. Hence we
which a particular AZ goes down then we would have Edge locations spread across all the major cities around the world that
still have a backup of the data that we can later bridges this gap in order to reduce the delay. For example if the business user
restore. These AZs are connect to each other requested for a picture from the AWS storage service in Ohio then it would be
via high speed low latency fibres in order to placed in the Edge location and then be sent to the end user and the next
increase replication speed. time he makes the same request instead of having to fetch it again from the
Its just like have an external hard disk backup Ohio data centre it would rather be fetched more quickly from the edge
all your data in case your laptop gets corrupted. location.
 AWS Account
Just like how you would need to create a Facebook account to use the services that Facebook provides, every businesses should create an AWS account in order to use the AWS services.
You do this by first creating a Root user that has all privileges to do anything and everything on AWS. And then post that using the root user you create other user accounts containing users or
groups that have supervised access to only the services they need.
For example if you were the Technical Head of your company and the owner of the AWS root user account and you had 3 teams, namely the Developer team, the Data analytics team and the
Cyber security team, then you would go ahead and create a user account [because in general you must not use the root account as it has all the privileges which could be misused] with 3 User
Groups and give access to individual users to access certain services based on whether they are into development, analytics or security.
This way the users who belong to the development user group will have access to use the AWS services that are only related to developmental activities and wont be given access to the AWS
security services which would rather be managed by the team that has access to the Security user group. This way things are more organised and under control at an organisation level.
Its very similar to you buying a laptop for yourself and then when someone else wants to use it, rather than giving them access to your account which is the root user, you create a guest profile
that has limited functionality and when they use it, they wont be able to see your files nor can they delete them by accident. You can also choose to share certain folders or files from the root
account to the guest account profile.

Developer analytics group

Also note that a

user can be part
Developer user group of multiple user
IAM groups, therefore
if a developer
Creates needs to access
certain AWS
services exclusive
Analytics user group to the Analytics
Root account User account
team, He/she can
be added to both
user groups.

Security user group

 IAM Policy Sample

{
ROLE "Version": "2012-10-17",
"Statement": [

GROUPS
{

USERS
"Sid": "ReadOnlyAccessToS3",
"Effect": "Allow", Allow
"Principal": {
POLICY "AWS": "arn:aws:iam::123456789012:user/ExampleUser" ExampleUser
},
"Action": [ to
"s3:GetObject",
"s3:ListBucket" Get and List Objects
],
"Resource": [ from
"arn:aws:s3:::example-bucket",
"arn:aws:s3:::example-bucket/*" this s3 bucket
],
"Condition": { under
"StringEquals": {
"s3:prefix": "logs/" this s3 bucket subpath
}
}
}
]
}
 Top AWS Cloud Products

• Amazon Cognito
• Amazon Augmented • Amazon Detective
• Amazon Athena
AI • Amazon GuardDuty
• Amazon Aurora • Amazon CloudSearch
• Amazon CodeGuru • Amazon Inspector
• Amazon DynamoDB • Amazon EMR
• Amazon • Amazon Macie
• Amazon EC2 • Amazon ElastiCache • Amazon FinSpace
Comprehend • AWS Artifact
• Amazon EC2 Auto • Amazon Elastic Block • Amazon Keyspaces • Amazon Kinesis
• Amazon API Gateway • Amazon DevOps • AWS Audit Manager
Scaling Store (for Apache • Amazon Kinesis Data
• Amazon CloudFront Guru • AWS Certificate
• Amazon EC2 Image • Amazon Elastic File Cassandra) Firehose
• Amazon Route 53 • Amazon Forecast Manager
Builder System • Amazon MemoryDB • Amazon Kinesis Data
• Amazon VPC • Amazon Fraud • AWS CloudHSM
• Amazon Lightsail • Amazon FSx for for Redis Analytics
• AWS App Mesh Detector • AWS Directory
• AWS App Runner Lustre • Amazon Neptune • Amazon Kinesis Data
• AWS Cloud Map • Amazon HealthLake Service
• AWS Batch • Amazon FSx for • Amazon Relational Streams
• AWS Direct Connect • Amazon • AWS Firewall
• AWS Elastic OpenZFS Database Service • Amazon Kinesis
• AWS Global Comprehend Manager
Beanstalk • Amazon FSx for • Amazon RDS on Video Streams
Accelerator Medical • AWS Identity and
• AWS Fargate NetApp ONTAP VMware • Amazon OpenSearch
• AWS PrivateLink • Amazon Kendra Access Management
• AWS Lambda • Amazon FSx for • Amazon Quantum Service
• AWS Private 5G • Amazon Lex • AWS Key
• AWS Serverless Windows File Server Ledger Database • Amazon Redshift
• AWS Transit • Amazon Personalize Management Service
Application • Amazon Simple (Amazon QLDB) • Amazon QuickSight
Gateway • Amazon Polly • AWS Network
Repository Storage Service • Amazon Timestream • AWS Data Exchange
• AWS VPN • Amazon Rekognition Firewall
• AWS Outposts • AWS Backup • Amazon • AWS Data Pipeline
• Elastic Load • Amazon SageMaker • AWS Resource
• AWS Wavelength • AWS Storage DocumentDB (with • AWS Glue
Balancing • Amazon Textract Access Manager
• VMware Cloud on Gateway MongoDB • AWS Lake Formation
• Amazon Transcribe • AWS Secrets
AWS compatibility) • Amazon Managed
• Amazon Translate Manager
• Amazon Lightsail Streaming for
• AWS DeepComposer • AWS Shield
managed databases Apache Kafka
• AWS DeepLens • AWS IAM Identity
(Amazon MSK)
• AWS DeepRacer Center
• AWS WAF
 AWS Hierarchy

Certain AWS services run at an account level such as

AWS Billing, IAM etc. because AWS bills you at an
AWS Account account level and you create users, permissions and
roles using IAM from an account level.

Some AWS services run at a Region level such as S3,

Region 1 Region 2 Region 3 Dynamo DB etc.

AZ AZ AZ AZ AZ AZ And last but not the least we also have certain services
that needs to be configured within a particular AZ such
1 2 3 1 1 2 as AWS EC2, EBS etc.
LETS BUILD A SOCIAL MEDIA APPLICATION
facegram Users

Lets start by assuming a few users are interested

to start using our Social media platform called
Facegram
facegram Private Network

In a social media application, a private network is

essential to ensure secure communication
between your application’s backend components,
Private such as databases, servers, and internal services.
By isolating these resources from the public
network
internet, you reduce the risk of unauthorized
access, data breaches, and malicious attacks. A
private network acts as a secure "highway" where
sensitive data, like user information and posts,
can travel safely between services without
exposure to external threats.

Non-AWS Alternatives:
Examples include Google Private Cloud and Azure
Virtual Network.
facegram Web Server

IP In a traditional social media application, a virtual

machine (VM) web server is used to host the
application’s frontend and backend logic. It
Private handles user requests, serves web pages, and
processes interactions like posting content, liking,
network
or commenting. A VM provides a flexible and
isolated environment to run your application, but
it requires manual management of resources,
scaling, and maintenance, which can become
Web Server complex as your user base grows.

Non-AWS Alternatives:
VM Examples include Google Compute Engine and
disk Microsoft Azure Virtual Machines.
facegram Application server

IP In a traditional social media application, a virtual

machine (VM) app server is responsible for
running the application’s business logic, such as
Private handling user authentication, processing posts,
managing notifications, and interacting with the
network
database. It acts as the backbone of your
application, ensuring that all user interactions are
processed efficiently. However, managing VMs
can be time-consuming, as it involves patching,
Web Server scaling, and maintaining the underlying
infrastructure.

VM Non-AWS Alternatives:
disk Examples include Google Compute Engine and
Microsoft Azure Virtual Machines.
App Server

VM
disk
facegram Relational Database

IP In a social media application, a relational

database is used to store structured data such as
user profiles, posts, comments, and relationships
Private (e.g., friends or followers). Relational databases
are ideal for handling complex queries and
network
maintaining data integrity through features like
ACID (Atomicity, Consistency, Isolation,
Durability) compliance. However, managing a
relational database requires expertise in scaling,
Web Server backups, and performance optimization,
especially as the application grows.

VM Non-AWS Alternatives:
disk Examples include MySQL, PostgreSQL, and
Microsoft SQL Server.
App Server

VM
disk

Relational DB

DB
facegram Scaling

IP In a social media application, horizontal scaling is

the process of adding more virtual machines
(VMs) to your infrastructure to handle increased
Private traffic or workload. This approach ensures that
your application remains responsive and
network
available, even during peak usage times like viral
posts or events. Horizontal scaling distributes the
load across multiple servers, improving
performance and fault tolerance. However, it
Web Server requires careful management of load balancing,
session management, and synchronization
between instances.
VM VM
disk disk Non-AWS Alternatives:
Examples include Google Compute Engine with
App Server Managed Instance Groups and Microsoft Azure
Virtual Machine Scale Sets.
VM VM
disk disk

Relational DB

DB
facegram Load Balancer

IP In a social media application, a load balancer is a

critical component that distributes incoming user
traffic across multiple servers or virtual machines.
Private This ensures that no single server becomes
overwhelmed, improving the application’s
network
responsiveness, availability, and fault tolerance.
Load balancers also help handle traffic spikes,
Load balancer such as when a post goes viral, by evenly
distributing the load and providing seamless
Web Server failover in case of server failures.

Non-AWS Alternatives:
VM VM Examples include NGINX, HAProxy, and Google
disk disk Cloud Load Balancing.
App Server

VM VM
disk disk

Relational DB

DB
facegram Domain Naming System

Facegram.com
In a social media application, DNS is the system
DNS that translates human-readable domain names
(like www.example.com) into IP addresses,
Private allowing users to access your application over the
internet. DNS acts as the "phonebook" of the
network
internet, directing users to the correct servers
where your application is hosted. A reliable DNS
Load balancer service ensures low latency, high availability, and
seamless failover, which are critical for delivering
Web Server a smooth user experience.

Non-AWS Alternatives:
VM VM Examples include Google Cloud DNS, Cloudflare
disk disk DNS, and Microsoft Azure DNS.
App Server

VM VM
disk disk

Relational DB

DB
facegram NoSQL Database

Facegram.com
In a social media application, a NoSQL database is
DNS used to store and manage unstructured or semi-
structured data, such as user-generated content,
Private comments, activity logs, and real-time
notifications. NoSQL databases are highly scalable
network
and flexible, making them ideal for handling large
volumes of rapidly changing data. They also
Load balancer provide low-latency access, which is crucial for
delivering a fast and responsive user experience.
Web Server
Non-AWS Alternatives:
Examples include MongoDB, Cassandra, and
VM VM Google Cloud Firestore.
disk disk
App Server

VM VM
disk disk

Relational DB
NoSQL
DB DB
facegram Database Cache

Facegram.com
In a social media application, a database cache is
DNS used to temporarily store frequently accessed
data, such as user profiles, posts, or comments, in
Private memory. This reduces the load on the primary
network database and speeds up response times for read-
heavy operations. By serving data directly from
the cache, your application can handle more
Load balancer users and deliver a faster, smoother experience,
especially during high-traffic events.
Web Server
Non-AWS Alternatives:
Examples include Redis and Memcached.
VM VM
disk disk
App Server

VM VM
disk disk

DB Cache

Relational DB
NoSQL
DB DB
facegram File Storage

Facegram.com
In a social media application, a file storage service
DNS is used to store and manage user-generated
content such as images, videos, and documents.
Private This service ensures that files are securely stored,
network easily accessible, and scalable to handle growing
amounts of data. A robust file storage solution is
essential for delivering media-rich experiences,
Load balancer like photo sharing or video streaming, to your
users.
Web Server
Non-AWS Alternatives:
Media External Examples include Google Cloud Storage,
VM VM Files Storage
Microsoft Azure Blob Storage, and Dropbox.
disk disk
App Server

VM VM
disk disk

DB Cache

Relational DB
NoSQL
DB DB
facegram Content Filter

Facegram.com
In a social media application, a content filter is
DNS used to automatically detect and moderate
inappropriate or harmful content, such as explicit
Private images, videos, or text. This ensures a safe and
positive user experience by preventing the spread
network
of offensive or illegal material. Content filtering is
especially critical for platforms with user-
Load balancer generated content, as manual moderation alone
cannot scale to handle the volume of uploads.
Web Server
Non-AWS Alternatives:
Media External Examples include Google Cloud Vision API,
VM VM Files Storage Microsoft Azure Content Moderator, and OpenAI
disk disk Moderation API.
App Server

Content filter
VM VM
disk disk

DB Cache

Relational DB
NoSQL
DB DB
facegram Click Stream Analysis

Facegram.com
In a social media application, clickstream analysis
DNS involves tracking and analyzing user interactions,
such as clicks, page views, and navigation paths,
Private to gain insights into user behavior. This data helps
network improve the user experience, optimize content
placement, and drive engagement by
understanding how users interact with the
Load balancer platform. Clickstream analysis is essential for
making data-driven decisions, such as refining the
Web Server user interface or personalizing content
recommendations.
Media External
VM VM Files Storage Non-AWS Alternatives:
disk disk Examples include Google Analytics, Adobe
Analytics, and Mixpanel.
App Server

Content filter
VM VM
disk disk

Click Stream
Analysis

DB Cache

Relational DB
NoSQL
DB DB
facegram
Facegram.com
DNS
Private
network

Load balancer
Web Server

Media External
VM VM Files Storage
disk disk
App Server

Content filter
VM VM
disk disk

Click Stream External

Storage
Analysis

DB Cache

Relational DB
NoSQL
DB DB
facegram Large data processing

Facegram.com
In a social media application, Apache Spark and
DNS Apache Hadoop are used for large-scale data
processing and analytics. Hadoop provides a
Private distributed file system (HDFS) and a framework
for processing large datasets across clusters, while
network
Spark offers fast, in-memory data processing for
tasks like real-time analytics, machine learning,
Load balancer and ETL (Extract, Transform, Load). Together, they
enable you to analyze massive amounts of user
Web Server data, such as engagement metrics, clickstream
data, and content trends, to improve decision-
Media External making and personalize user experiences.
VM VM Files Storage
disk disk Non-AWS Alternatives:
Examples include Google Dataproc (managed
App Server Spark and Hadoop), Cloudera, and Microsoft
Azure HDInsight.
Content filter
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache

Relational DB
NoSQL
DB DB
facegram Data Warehouse

Facegram.com
In a social media application, a data warehouse is
DNS used to store and analyze large volumes of
structured data from various sources, such as
Private user interactions, clickstream data, and
network transactional records. It enables complex queries
and analytics, helping you uncover insights like
user engagement trends, content performance,
Load balancer and ad campaign effectiveness. A data warehouse
is essential for consolidating data from multiple
Web Server systems and providing a unified view for reporting
and decision-making.
Media External
VM VM Files Storage Non-AWS Alternatives:
disk disk Examples include Google BigQuery, Snowflake,
App Server and Microsoft Azure Synapse Analytics.

Content filter
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse

Relational DB
NoSQL
DB DB
facegram Business Intelligence

Facegram.com
In a social media application, BI tools are used to
DNS visualize and analyze data, transforming raw
metrics into actionable insights. These tools help
Private you create dashboards, reports, and
network visualizations that track key performance
indicators (KPIs) like user engagement, content
reach, and ad revenue. By providing a clear
Load balancer understanding of your application’s
performance, BI tools empower stakeholders to
Web Server
make data-driven decisions and optimize the
platform for growth.
Media External
VM VM Files Storage
Non-AWS Alternatives:
disk disk Examples include Tableau, Microsoft Power BI,
App Server Business and Google Looker.

Content filter Intelligence

VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse

Relational DB
NoSQL
DB DB
facegram Web browser Web Browser

Facegram.com
In a social media application, the web browser is
DNS the primary interface through which users access
and interact with the platform. It renders the
Private application’s frontend, including the user
network interface (UI), images, videos, and interactive
elements like buttons and forms. Modern web
browsers support advanced features like real-
Load balancer time updates, push notifications, and offline
capabilities, enabling a seamless and engaging
Web Server user experience.

Media External Examples include Google Chrome, Mozilla

VM VM Files Storage
Firefox, Microsoft Edge, and Safari.
disk disk
App Server Business
Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse

Relational DB
NoSQL
DB DB
facegram Web browser Mobile Application
Function – Video Conversion

Facegram.com
In a social media application, functions are used
DNS to perform tasks like video format conversion,
resizing, or compression to ensure that media
Private files are optimized for different devices and
network network conditions. These functions run in the
background, automatically processing user-
uploaded videos without impacting the user
Load balancer experience. This is crucial for delivering high-
External
quality media while minimizing storage and
Web Server bandwidth costs.
Storage

Media External Non-AWS Alternatives:

VM VM Files Storage Video Examples include Google Cloud Functions,
disk disk Convert
Microsoft Azure Functions, and OpenFaaS (open-
source serverless functions).
App Server Business
Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse

Relational DB
NoSQL
DB DB
facegram Web browser Mobile Application
Content Delivery Network

Facegram.com
In a social media application, a Content Delivery
DNS Content Delivery Network (Cache) Network (CDN) is used to distribute static and
dynamic content, such as images, videos, and
Private web pages, to users from servers located closer
network to their geographic location. This reduces
latency, improves load times, and ensures a
smooth user experience, especially for media-
Load balancer rich platforms. CDNs also help handle traffic
External spikes and reduce the load on your origin
Web Server servers.
Storage

Media External
VM VM Files Storage Video
Non-AWS Alternatives:
Examples include Cloudflare, Google Cloud CDN,
disk disk Convert
and Akamai.
App Server Business
Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse

Relational DB
NoSQL
DB DB
facegram Web browser Mobile Application
ETL

Facegram.com
In a social media application, ETL processes are
DNS Content Delivery Network (Cache) used to extract data from various sources (e.g.,
user interactions, clickstreams, databases),
Private transform it into a consistent format, and load it
network into a data warehouse or analytics system. ETL is
essential for consolidating data, enabling
advanced analytics, and generating insights into
Load balancer user behavior, content performance, and platform
External
trends.
Web Server
Storage
Non-AWS Alternatives:
Media External Examples include Talend, Informatica, and
VM VM Files Storage Video Microsoft SQL Server Integration Services (SSIS).
disk disk Convert

App Server Business

Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse

Relational DB
NoSQL ETL
DB DB
 facegram Web browser Mobile Application
SMS / Push Notifications

Facegram.com
In a social media application, SMS and mobile
DNS Content Delivery Network (Cache) push notifications are used to engage users by
delivering real-time updates, such as new
Private messages, likes, comments, or friend requests.
network These notifications help keep users informed and
active on the platform, driving engagement and
SMS retention. SMS is typically used for critical alerts,
Mobile push Load balancer while push notifications are ideal for in-app
Notification updates and personalized content.
Web Server External
Storage
Non-AWS Alternatives:
Media External Examples include Twilio (for SMS and push
VM VM Files Storage Video notifications), Firebase Cloud Messaging (FCM)
disk disk Convert (for push notifications), and OneSignal (for push
notifications).
App Server Business
Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse

Relational DB
NoSQL ETL
DB DB
 facegram Web browser Mobile Application
Email

Facegram.com
In a social media application, emails are used
DNS Content Delivery Network (Cache) to communicate with users for purposes like
account verification, password resets,
Private newsletters, and engagement updates (e.g.,
network "You have a new follower"). Emails help
maintain user engagement, provide important
SMS information, and drive traffic back to the
Mobile push Load balancer platform. A reliable email delivery system
Notification ensures that messages reach users’ inboxes
Web Server External
Storage without being marked as spam.

Media External
Email VM VM Files Storage Video
Non-AWS Alternatives:
Examples include SendGrid, Mailchimp, and
disk disk Convert
Postmark.
App Server Business
Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse

Relational DB
NoSQL ETL
DB DB
 facegram Web browser Mobile Application
Message

Facegram.com
In a social media application, messages and
DNS Content Delivery Network (Cache) queues are used to decouple and manage
communication between different
Private components of the system. For example,
network when a user posts content, the request can be
placed in a queue for asynchronous
SMS
Mobile push Load balancer processing, ensuring that the application
remains responsive even during high traffic.
Notification
Web Server External Queues also help handle tasks like
Storage notifications, data processing, and
background jobs efficiently.
Media External
Email VM VM Files Storage Video
Convert Non-AWS Alternatives:
disk disk
Examples include RabbitMQ, Apache Kafka,
App Server Business and Google Cloud Pub/Sub.
Message
Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse

Relational DB
NoSQL ETL
DB DB
 facegram Web browser Mobile Application
Monitoring Dashboard

Facegram.com
In a social media application, a monitoring
DNS Content Delivery Network (Cache) dashboard is used to track the health,
performance, and usage of the platform in
Private real time. It provides visibility into key metrics
network like server uptime, response times, error
rates, and user activity, enabling teams to
SMS
Mobile push Load balancer quickly identify and resolve issues. A well-
Notification
designed dashboard is essential for
Web Server External maintaining system reliability, optimizing
Storage performance, and ensuring a positive user
External
experience.
Media
Email VM VM Files Storage Video
Convert Non-AWS Alternatives:
disk disk
Examples include Grafana, Datadog, and New
App Server Business Relic.
Message
Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse
Monitoring
Dashboard
Relational DB
NoSQL ETL
DB DB
 facegram Web browser Mobile Application
Facegram.com
DNS Content Delivery Network (Cache)

Private
network
SMS
Mobile push Load balancer
Notification
Web Server External
Storage

Media External
Email VM VM Files Storage Video
disk disk Convert
App Server Business
Message
Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse
Monitoring
Dashboard
Relational DB
NoSQL ETL
DB DB
LETS NOW BUILD A SOCIAL MEDIA APPLICATION ON AWS
 facegram Web browser Mobile Application
- Virtual Private Cloud
DNS Content Delivery Network (Cache) Amazon VPC is used to create a secure,
isolated virtual network within the AWS
Cloud. It allows you to define your own IP
address range, subnets, and routing tables,
giving you complete control over your
SMS network environment. With VPC, you can
Mobile push Load balancer securely connect your social media
Notification application’s resources, such as EC2 instances,
External databases, and load balancers, while keeping
Storage
them isolated from the public internet. It also
Media External supports features like VPN connections and
Email VM VM Files Storage Video Direct Link for hybrid cloud setups, ensuring
disk disk Convert your application is both secure and scalable.

Business
Message
Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse
Monitoring
Dashboard

NoSQL ETL
DB DB
 facegram Web browser Mobile Application - Route 53

Route 53 Content Delivery Network (Cache) Amazon Route 53 is a scalable and highly
available Domain Name System (DNS) service.
It translates human-readable domain names
(like www.example.com) into IP addresses,
allowing users to access your social media
SMS application. Route 53 also provides advanced
Mobile push Load balancer routing policies, such as latency-based
Notification routing, geolocation routing, and weighted
External
Storage round-robin, to optimize traffic flow and
improve user experience. Additionally, it
Media External
Email VM VM Files Storage Video
integrates with health checks to automatically
route traffic away from unhealthy endpoints,
disk disk Convert
ensuring high availability and reliability for
Business your application.
Message
Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse
Monitoring
Dashboard

NoSQL ETL
DB DB
 facegram Web browser Mobile Application - Elastic load balancer

Route 53 Content Delivery Network (Cache) Elastic Load Balancer (ELB) is used to
distribute incoming traffic across multiple
targets, such as EC2 instances, containers, or
IP addresses, ensuring your social media
application remains scalable and highly
SMS available. ELB automatically scales to handle
Mobile push Load balancer traffic spikes and provides features like
Notification SSL/TLS termination, health checks, and cross-
External
Storage zone load balancing. It comes in three types:
Application Load Balancer (ALB) for
Media External
Email VM VM Files Storage Video
HTTP/HTTPS traffic, Network Load Balancer
(NLB) for ultra-high performance, and Classic
disk disk Convert
Load Balancer (CLB) for legacy applications.
Business ELB ensures your application can handle
millions of users seamlessly.
Message
Content filter Intelligence
VM VM
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse
Monitoring
Dashboard

NoSQL ETL
DB DB
 facegram Web browser Mobile Application
- Elastic Compute Cloud
Route 53 Content Delivery Network (Cache) Amazon EC2 provides scalable virtual servers
(instances) in the cloud, allowing you to run
applications like your social media platform.
With EC2, you can choose from a wide range
of instance types optimized for compute,
SMS memory, storage, or GPU workloads. It offers
Mobile push Load balancer
flexible pricing models, including On-Demand,
Notification
External Reserved, and Spot Instances, to suit your
EC2 EC2 Storage budget and usage needs. EC2 instances can be
easily scaled up or down to handle traffic
Media External
Email fluctuations, and they integrate with other
Files Storage Video
Convert AWS services like Elastic Load Balancer and
disk disk Auto Scaling for high availability and

EC2 EC2
Business performance.
Message
Content filter Intelligence
disk disk

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse
Monitoring
Dashboard

NoSQL ETL
DB DB
 facegram Web browser Mobile Application
- Elastic Block Storage
Route 53 Content Delivery Network (Cache)
Amazon EBS provides persistent block storage
volumes for use with EC2 instances. These
volumes act like virtual hard drives, allowing
you to store data such as application files,
SMS databases, and operating systems. EBS
Mobile push Load balancer volumes are highly available and
Notification automatically replicated within their
External Availability Zone, ensuring data durability.
EC2 Storage
EC2 They can be easily attached, detached, and
Email Media External resized, making them ideal for scaling storage
Files Storage Video as your social media application grows. EBS
EBS EBS
Convert also supports features like snapshots for
backups and encryption for enhanced
EC2 EC2
Business security.
Message
Content filter Intelligence
EBS EBS

Click Stream External Spark/

Storage
Analysis Hadoop
DB Cache Data warehouse
Monitoring
Dashboard

NoSQL ETL
DB DB
 facegram Web browser Mobile Application
- Elastic cache
Route 53 Content Delivery Network (Cache)
Amazon ElastiCache is a fully managed in-
memory caching service that improves the
performance of your social media application
by storing frequently accessed data, such as
user sessions, posts, or comments, in
SMS
Mobile push Load balancer memory. It supports two popular caching
Notification engines: Redis and Memcached. ElastiCache
External reduces the load on your primary database,
EC2 Storage enabling faster response times for read-heavy
EC2
Media External workloads. It automatically scales to handle
Email
Files Storage Video traffic spikes and integrates seamlessly with
Convert other AWS services, making it an essential
EBS EBS
tool for enhancing application speed and
EC2 EC2
Business scalability.
Message
Content filter Intelligence
EBS EBS

Click Stream External Spark/

Storage
Analysis Hadoop
Elastic cache
Data warehouse
Monitoring
Dashboard

NoSQL ETL
DB DB
 facegram Web browser Mobile Application
- Relational Database Service
Route 53 Content Delivery Network (Cache)
Amazon RDS is a fully managed relational
database service that makes it easy to set up,
operate, and scale databases for your social
media application. It supports popular
SMS database engines like MySQL, PostgreSQL,
Mobile push Load balancer
MariaDB, Oracle, and SQL Server. RDS
Notification automates time-consuming tasks such as
External
EC2 Storage backups, patching, and scaling, allowing you
EC2
to focus on building your application. With
Media External
Email features like Multi-AZ deployments for high
Files Storage Video
availability and read replicas for improved
Convert
EBS EBS read performance, RDS ensures your

EC2 EC2
Business database is reliable, scalable, and secure.
Message
Content filter Intelligence
EBS EBS

Click Stream External Spark/

Storage
Analysis Hadoop
Elastic cache
Data warehouse
Monitoring
Dashboard
RDS
NoSQL ETL
DB
 facegram Web browser Mobile Application
- Dynamo DB
Route 53 Content Delivery Network (Cache)
Amazon DynamoDB is a fully managed NoSQL
database service designed for high
performance and scalability. It’s ideal for
storing and retrieving structured data like
SMS user profiles, posts, and activity logs in your
Mobile push Load balancer social media application. DynamoDB offers
Notification single-digit millisecond latency, automatic
External
Storage scaling, and built-in high availability, making it
EC2 EC2
perfect for handling large volumes of read
Media External and write requests. It also supports features
Email
Files Storage Video like global tables for multi-region replication
EBS EBS
Convert and on-demand backups, ensuring your data
is always accessible and secure.
EC2 EC2
Business
Message
Content filter Intelligence
EBS EBS

Click Stream External Spark/

Storage
Analysis Hadoop
Elastic cache
Data warehouse
Monitoring
Dynamo DB
Dashboard
RDS
ETL
 facegram Web browser Mobile Application
- Rekognition
Route 53 Content Delivery Network (Cache)
Amazon Rekognition is a machine learning-
powered image and video analysis service. In
your social media application, it can
automatically detect and moderate
SMS inappropriate content, such as explicit images
Mobile push Load balancer or videos, ensuring a safe user experience.
Notification Rekognition also supports features like facial
External
recognition, object detection, and sentiment
EC2 Storage
EC2 analysis, enabling advanced functionalities
Email Media External like tagging friends in photos or analyzing
Files Storage Video user-generated content. It integrates
EBS EBS
Convert seamlessly with other AWS services, making it
Rekognition easy to add AI-driven insights to your
EC2 EC2
Business platform.
Message
Intelligence
EBS EBS

Click Stream External Spark/

Storage
Analysis Hadoop
Elastic cache
Data warehouse
Monitoring
Dynamo DB
Dashboard
RDS
ETL
 facegram Web browser Mobile Application
- Simple Storage Service
Route 53 Content Delivery Network (Cache)
Amazon S3 is a highly scalable object storage
service designed to store and retrieve any
amount of data, such as images, videos, and
SMS
documents, for your social media application.
S3 It offers industry-leading durability,
Mobile push Load balancer
Notification availability, and performance, making it ideal
S3 for hosting user-generated content. S3
EC2 EC2 supports features like versioning, lifecycle
Media policies, and access control, ensuring your
Email data is secure and cost-effectively managed.
Files Video
Convert With integrations like Amazon CloudFront, S3
EBS EBS
Rekognition
can also deliver content globally with low
EC2 EC2
Business latency, enhancing the user experience.
Message
Intelligence
EBS EBS S3

Click Stream Spark/

Analysis Hadoop
Elastic cache
Data warehouse
Monitoring
Dynamo DB
Dashboard
RDS
ETL
 facegram Web browser Mobile Application
- Kinesis
Route 53 Content Delivery Network (Cache)
Amazon Kinesis is a platform for real-time
data streaming and analytics. In your social
media application, it can collect and process
large volumes of data, such as clickstreams,
SMS S3
Load balancer user interactions, or logs, in real time. Kinesis
Mobile push
Notification enables you to build applications that analyze
S3 data on the fly, providing insights into user
EC2 EC2 behavior or system performance. It integrates
Media
with services like AWS Lambda, Amazon
Email Redshift, and Amazon S3, making it a
Files Video
Convert powerful tool for real-time analytics and data-
EBS EBS
driven decision-making.
Rekognition
EC2 EC2
Business
Message
Intelligence
Kinesis
EBS EBS S3

Spark/
Hadoop
Elastic cache
Data warehouse
Monitoring
Dynamo DB
Dashboard
RDS
ETL
 facegram Web browser Mobile Application
- Elastic MapReduce
Route 53 Content Delivery Network (Cache)

Amazon EMR is a managed big data platform

that simplifies running distributed data
processing frameworks like Apache Spark,
SMS S3
Load balancer Hadoop, and Hive. In your social media
Mobile push
Notification
application, EMR can be used to analyze large
S3 datasets, such as user engagement metrics or
EC2 EC2 content trends, to uncover actionable
insights. It automatically scales to handle
Email Media
Video massive workloads and integrates with other
Files
Convert AWS services like Amazon S3 and Amazon
EBS EBS
Redshift, making it a powerful tool for
Rekognition
EC2 EC2
Business building data pipelines and performing
Message advanced analytics.
Intelligence
Kinesis
EBS EBS S3

EMR

Elastic cache
Data warehouse
Monitoring
Dynamo DB
Dashboard
RDS
ETL
 facegram Web browser Mobile Application
- Redshift
Route 53 Content Delivery Network (Cache)
Amazon Redshift is a fully managed data
warehouse service designed for high-
performance analytics. It allows you to store
and analyze large volumes of structured data
SMS S3 from your social media application, such as
Mobile push Load balancer
user interactions, clickstreams, and
Notification
S3 transactional records. Redshift uses columnar
EC2 EC2 storage and massively parallel processing
(MPP) to deliver fast query results, even for
Email Media
Video complex analytics. It integrates seamlessly
Files
Convert with tools like AWS Glue for ETL and Amazon
EBS EBS QuickSight for visualization, making it a
Rekognition
EC2 EC2
Business central component of your data analytics
Message pipeline.
Intelligence
Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Monitoring
Dynamo DB
Dashboard
RDS
ETL
 facegram Web browser Mobile Application
- Glue

Route 53 Content Delivery Network (Cache)

AWS Glue is a fully managed ETL (Extract,

Transform, Load) service that prepares and
transforms data for analytics. In your social
SMS S3 media application, Glue can automatically
Mobile push Load balancer
discover, catalog, and clean data from various
Notification
S3
sources, such as databases, logs, or S3
EC2 buckets, making it ready for analysis in
EC2
services like Amazon Redshift or Amazon
Email Media Athena. It supports serverless execution, so
Files Video
Convert you only pay for the resources used during
EBS EBS ETL jobs, and it integrates with other AWS
Rekognition
EC2 EC2
Business services to build seamless data pipelines.
Message
Intelligence
Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Monitoring
Dynamo DB
Dashboard
RDS

Glue
 facegram Web browser Mobile Application
- Quicksight

Route 53 Content Delivery Network (Cache)

Amazon QuickSight is a fully managed
business intelligence (BI) service that enables
you to create interactive dashboards and
visualizations for your social media
SMS application. It connects to various data
S3
Mobile push Load balancer sources, such as Amazon Redshift, RDS, and
Notification S3, allowing you to analyze metrics like user
S3 engagement, content performance, and ad
EC2 EC2 revenue. QuickSight supports machine
Email Media learning-powered insights, enabling you to
Files Video uncover trends and anomalies in your data. Its
EBS EBS
Convert pay-per-session pricing model makes it cost-
Quicksight
Rekognition effective for teams of all sizes.
EC2 EC2
Message

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Monitoring
Dynamo DB
Dashboard
RDS

Glue
 facegram Web browser Mobile Application
- Athena

Route 53 Content Delivery Network (Cache)

Amazon Athena is an interactive query service
that allows you to analyze data directly from
Amazon S3 using standard SQL. In your social
media application, Athena can be used to
SMS query logs, clickstream data, or user-
S3
Mobile push Load balancer generated content without the need to set up
Notification or manage infrastructure. It’s serverless, so
S3 Athena
you only pay for the queries you run, and it
EC2 EC2 integrates seamlessly with tools like AWS Glue
Email Media for data cataloging and Amazon QuickSight for
Files Video visualization, making it a powerful tool for ad-
EBS EBS
Convert hoc analytics.
Quicksight
Rekognition
EC2 EC2
Message

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Monitoring
Dynamo DB
Dashboard
RDS

Glue
 facegram Web browser Mobile Application
- Lambda

Route 53 Content Delivery Network (Cache)

AWS Lambda is a serverless compute service
that lets you run code without provisioning or
managing servers. In your social media
application, Lambda can be used for tasks like
SMS
processing user uploads, sending
S3 notifications, or running backend logic. It
Mobile push Load balancer Lambda
Notification automatically scales to handle thousands of
S3 Athena requests simultaneously and integrates with
EC2 EC2 other AWS services like API Gateway, S3, and
Media DynamoDB. With Lambda, you only pay for
Email
Files the compute time used, making it a cost-
effective solution for event-driven and real-
EBS EBS Quicksight
Rekognition time workloads.
EC2 EC2
Message

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Monitoring
Dynamo DB
Dashboard
RDS

Glue
 facegram Web browser Mobile Application
- CloudFront
Cloud front

Route 53 Edge location Edge location

Amazon CloudFront is a global Content
Delivery Network (CDN) that securely delivers
content, such as images, videos, and web
pages, to users with low latency. In your social
media application, CloudFront caches content
SMS S3
Load balancer at edge locations closer to your users,
Mobile push Lambda
Notification
ensuring fast load times and a smooth
S3 Athena experience. It integrates with Amazon S3 for
EC2 EC2 storage, AWS Lambda@Edge for customizing
content at the edge, and AWS Shield for DDoS
Email Media
protection, making it a reliable and scalable
Files
solution for content delivery.
EBS EBS Quicksight
Rekognition
EC2 EC2
Message

Kinesis
- Edge location
EBS EBS S3
Edge Locations are data centers distributed
globally as part of Amazon CloudFront. They
cache and deliver content, such as images,
EMR videos, and web pages, to users from
Redshift locations closer to them, reducing latency and
Elastic cache improving load times. In your social media
application, edge locations ensure that users
Monitoring
Dynamo DB around the world experience fast and
Dashboard
consistent performance, even during traffic
RDS spikes. They also support features like
Lambda@Edge, which allows you to run
custom code at the edge for personalized
Glue content delivery.
 facegram Web browser Mobile Application
- Simple Notification Service
Cloud front

Route 53 Edge location Edge location

Amazon SNS is a fully managed messaging
service that enables you to send notifications
to users via SMS, email, or mobile push
SNS notifications. In your social media application,
SNS can be used to notify users about new
S3
Load balancer Lambda messages, likes, comments, or friend
requests. It supports high-throughput, low-
Athena
S3 latency message delivery and integrates with
EC2 EC2 services like AWS Lambda and Amazon SQS
Media for automated workflows. SNS ensures that
Email
Files your notifications are delivered reliably and at
EBS EBS
scale, keeping users engaged and informed.
Quicksight
Rekognition
EC2 EC2
Message

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Monitoring
Dynamo DB
Dashboard
RDS

Glue
 facegram Web browser Mobile Application
- Simple Email Service
Cloud front

Route 53 Edge location Edge location

Amazon SES is a cost-effective, scalable email
service for sending transactional and
SNS
marketing emails. In your social media
application, SES can be used for account
S3 verification, password resets, newsletters,
Load balancer Lambda and engagement updates. It ensures high
Athena deliverability by automatically managing email
S3
SES reputation and providing features like bounce
EC2 EC2
tracking and complaint handling. SES
Media integrates with AWS Lambda for automated
Files email workflows and supports email
EBS EBS Quicksight templates, making it easy to send
Rekognition personalized and timely communications to
EC2 EC2 your users.
Message

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Monitoring
Dynamo DB
Dashboard
RDS

Glue
 facegram Web browser Mobile Application
- Simple Queuing Service
Cloud front

Route 53 Edge location Edge location

Amazon SQS is a fully managed message
queuing service that decouples and scales the
components of your social media application.
SNS
It allows you to send, store, and receive
S3 messages between services, ensuring reliable
Load balancer Lambda and asynchronous communication. For
Athena
example, when a user posts content, the
S3
SES request can be placed in an SQS queue for
EC2 EC2
background processing, improving application
Media responsiveness. SQS supports standard
Files queues for high throughput and FIFO queues
EBS EBS Quicksight for ordered, exactly-once processing, making
SQS Rekognition it a versatile tool for building scalable and
EC2 EC2 resilient systems.

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Monitoring
Dynamo DB
Dashboard
RDS

Glue
 facegram Web browser Mobile Application
- Cloud Watch
Cloud front

Route 53 Edge location Edge location

Amazon CloudWatch is a monitoring and

SNS observability service that provides real-time
insights into your social media application’s
S3 performance and health. It collects and tracks
Load balancer Lambda metrics, logs, and events from AWS resources
S3 Athena like EC2, Lambda, and RDS, enabling you to
SES EC2 set alarms and automate responses to issues.
EC2
CloudWatch also offers dashboards for
Media visualizing key metrics, such as response
Files times, error rates, and user activity, helping
EBS EBS Quicksight you optimize performance and ensure a
SQS Rekognition seamless user experience.
EC2 EC2

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Cloud watch Dynamo DB

RDS

Glue
 facegram Web browser Mobile Application
- API Gateway
Cloud front

Route 53 Edge location Edge location

Amazon API Gateway is a fully managed

service that makes it easy to create, publish,
SNS Rest API and secure APIs for your social media
application. It acts as a front door for your
Load balancer
S3 backend services, allowing you to handle tasks
Lambda
like user authentication, data retrieval, and
S3 Athena content posting. API Gateway supports
SES
EC2 EC2 RESTful and WebSocket APIs, scales
automatically to handle millions of requests,
Media
and integrates with AWS Lambda for
Files
serverless backend logic.
EBS EBS Quicksight
SQS Rekognition
EC2 EC2

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Cloud watch Dynamo DB

RDS

Glue
 facegram Web browser Mobile Application
- Cognito
Web and Mobile User Management
Cloud front

Route 53 Edge location Edge location

Amazon Cognito is a user identity and access

management service that simplifies adding
SNS authentication, authorization, and user
management to your social media application.
Load balancer
S3 It supports features like user sign-up, sign-in,
Lambda
and multi-factor authentication (MFA), as well
S3 Athena as integration with social identity providers
SES
EC2 EC2 like Google and Facebook. Cognito also
provides user pools for managing user profiles
Media
and identity pools for granting temporary
Files
AWS credentials, ensuring secure and
EBS EBS Quicksight seamless access to your application’s
SQS Rekognition
resources.
EC2 EC2

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Cloud watch Dynamo DB

RDS

Glue
 facegram Web browser Mobile Application AWS SECURITY SERVICES
Cloud front

Route 53 Edge location Edge location

- IAM
SNS

S3 AWS IAM is a service that helps you securely

Load balancer Lambda
control access to AWS resources in your social
S3 Athena media application. It allows you to create and
SES EC2 manage users, groups, and roles, and assign
EC2
Media fine-grained permissions to ensure that only
Files authorized individuals or services can access
specific resources. IAM is essential for
EBS EBS Quicksight
Rekognition
maintaining security and compliance, enabling
SQS
EC2
you to enforce least-privilege access and audit
EC2
actions across your AWS environment.

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Cloud watch Dynamo DB

RDS

Glue
 facegram Web browser Mobile Application AWS SECURITY SERVICES
Cloud front

Route 53 Edge location Edge location - KMS

SNS
AWS KMS is a managed service that makes it
S3
Load balancer Lambda easy to create and control encryption keys
used to protect your social media
Athena
S3 application’s data. It integrates with other
SES
EC2 EC2 AWS services like S3, RDS, and DynamoDB to
Media encrypt data at rest and in transit. KMS also
Files provides audit trails for key usage, ensuring
EBS EBS
compliance with security standards and giving
Quicksight
Rekognition you full control over your encryption strategy.
SQS
EC2 EC2

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Cloud watch Dynamo DB

RDS

Glue
 facegram Web browser Mobile Application AWS SECURITY SERVICES
Cloud front

Route 53 Edge location Edge location

- ACM

SNS
AWS ACM simplifies the process of
S3
Load balancer Lambda provisioning, managing, and deploying
SSL/TLS certificates for your social media
Athena
S3 application. These certificates are used to
SES
EC2 EC2 secure data in transit by enabling HTTPS for
Media your websites and APIs. ACM integrates
Files seamlessly with services like CloudFront, ELB,
EBS EBS
and API Gateway, automatically renewing
Quicksight
Rekognition certificates and ensuring your application
SQS
EC2 EC2
remains secure and compliant with industry
standards.

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Cloud watch Dynamo DB

RDS

Glue
 facegram Web browser Mobile Application AWS SECURITY SERVICES
Cloud front

Route 53 Edge location Edge location

- WAF

SNS
AWS WAF is a web application firewall that
S3
Load balancer Lambda helps protect your social media application
from common web exploits like SQL injection
Athena
S3 and cross-site scripting (XSS). It allows you to
SES
EC2 EC2 create custom rules to filter and monitor
Media HTTP/HTTPS traffic, ensuring that only
Files legitimate requests reach your application.
EBS EBS
WAF integrates with CloudFront and
Quicksight
Rekognition Application Load Balancer (ALB), providing an
SQS
EC2 EC2
additional layer of security to safeguard your
platform.

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Cloud watch Dynamo DB

RDS

Glue
 facegram Web browser Mobile Application AWS SECURITY SERVICES
Cloud front

Route 53 Edge location Edge location

- Inspector
SNS
AWS Inspector is an automated security
S3
Load balancer Lambda assessment service that helps improve the
security and compliance of your social media
Athena
S3 application. It analyzes the behavior of your
SES
EC2 EC2 EC2 instances and applications, identifying
Media vulnerabilities, deviations from best practices,
Files and potential security risks. Inspector
EBS EBS
provides detailed findings and remediation
Quicksight
Rekognition steps, helping you proactively address issues
SQS
EC2 EC2
before they can be exploited.

Kinesis
EBS EBS S3

EMR
Redshift
Elastic cache

Cloud watch Dynamo DB

RDS

Glue
 AWS CLI

$ aws configure
AWS Access Key ID:
AWS Secret Access Key:
Default region name:
Default output format: The AWS Command Line Interface (CLI) is a powerful tool for deploying and managing
AWS services directly from your terminal or command prompt. It allows you to automate
tasks, script deployments, and interact with AWS services using simple commands. For
example, you can create an S3 bucket, launch an EC2 instance, or update a Lambda
function with just a few commands. The CLI is ideal for developers and administrators
who prefer command-line tools and want to integrate AWS deployments into their
workflows.

$ aws ec2 run-instances –image-id <ami> --count 1

–instance-type t2.micro –key-name <Key pair> --
security-group-ids <sg ids> --subnet-id <subnetid>
 AWS API

POST

{
resourceProperty1: value1,
resourceProperty2: value2,
resourceProperty3: value3,
resourceProperty4: value4
The AWS API provides programmatic access to AWS services, enabling you to deploy and
} PAYLOAD manage resources using HTTP/HTTPS requests. This method is ideal for building custom
applications or tools that interact with AWS. For example, you can use the API to create a
DynamoDB table, trigger a CloudFormation stack, or send notifications via SNS. The AWS API is
highly flexible and integrates with SDKs for various programming languages, making it a great
choice for developers building automated or custom deployment pipelines.

URL - xxx:yyy/ec2
AWS Cloud formation

AWS CloudFormation is an infrastructure-as-code (IaC) service that allows you to define and
deploy AWS resources using templates written in JSON or YAML. With CloudFormation, you
can create, update, and delete entire stacks of resources in a repeatable and automated
manner. This method ensures consistency across environments, simplifies version control, and
reduces the risk of manual errors. CloudFormation is ideal for teams managing complex
architectures or requiring reproducible deployments.
 AWS SDK

Boto3 is the AWS SDK for Python, providing a programmatic way to interact with AWS
Direct Function services. It allows you to write Python scripts to deploy and manage resources, such as
creating an S3 bucket, launching an EC2 instance, or updating a Lambda function. Boto3 is
ideal for developers who prefer Python and want to automate AWS deployments or integrate
them into their applications. It offers a high level of flexibility and control, making it a popular
choice for scripting and automation tasks.
 AWS CDK

AWS CDK Deploy Stack

AWS Cloud Development Kit (CDK) is an infrastructure-as-code (IaC) framework that

Application allows developers to define cloud resources using familiar programming languages
like Python, TypeScript, and Java. Unlike traditional methods such as AWS
CDK Lib CloudFormation or Terraform, CDK provides a higher level of abstraction, making it
easier to manage and scale infrastructure with reusable components. It
automatically synthesizes code into CloudFormation templates, reducing manual
effort and minimizing errors. CDK also supports seamless integration with AWS
services and enables developers to leverage version control and CI/CD pipelines
efficiently. Its flexibility, maintainability, and developer-friendly approach make it a
preferred choice for modern cloud deployments.

Lambda SNS
 AWS infrastructure deployment

AWS CodeCommit is a fully managed source control service that securely hosts Git repositories.
It allows development teams to collaborate, track changes, and integrate code into a centralized
repository. Unlike traditional Git repositories, CodeCommit offers high availability, encryption,
and integration with other AWS services, making it a secure and scalable choice.

Once the code is committed to CodeCommit, AWS CodeBuild takes over to compile, test, and
package the application. It eliminates the need for dedicated build servers by providing a fully
managed build service that scales automatically. CodeBuild supports multiple programming
languages and build environments, ensuring flexibility for diverse projects.

AWS CodeDeploy automates the deployment of applications to Amazon EC2 instances, AWS
Fargate, Lambda, and on-premises servers. It minimizes downtime and reduces deployment
errors by enabling strategies like rolling updates and blue-green deployments. CodeDeploy
BUILD ensures seamless application updates without disrupting end users.

AWS CodePipeline acts as the backbone of the CI/CD process, automating the entire workflow
from source to deployment. It integrates with CodeCommit, CodeBuild, and CodeDeploy to
create an efficient pipeline that continuously delivers new features and bug fixes. CodePipeline
also supports third-party tools, enabling greater customization and extensibility.

AWS CodeStar provides a unified interface for managing CI/CD projects, offering built-in
templates and integration with AWS development tools. It accelerates project setup by
TEST streamlining access control, repository creation, and pipeline configuration. CodeStar is
particularly useful for teams looking for an all-in-one CI/CD management solution.
Congratulations you are now aware of
40+ AWS services.