This "how-to" session will cover the basics to get started with AWS. After a brief overview, this session will dive into discussions of core AWS services and provide demonstrations of how to set up and utilize those services. Demonstrations and discussions will include: - Setting up and connecting to your first Elastic Compute Cloud (EC2) virtual machine - How to backup and restore your virtual machine instance - How to set an email alert for changes in your virtual machine instance - How to upload files to Amazon's Simple Storage Service (S3) and make them publicly available on the Internet

1. ©2015, Amazon Web Services, Inc. or its affiliates. All rights reserved
Your First Week on AWS
Kyle Lichtenberg, Manager of Solutions Architecture

3. AWS sounds great! Let’s do this!
1. Create an account and configure basic security
2. Set up and connect to your first Elastic Compute
Cloud (EC2) instance
3. Backup and restore your virtual machine instance
4. Set an alert for changes in your EC2 instance
5. Upload files to Amazon Simple Storage Service
(S3) and make them publicly available on the
Internet

4. Free Tier
• Includes most of the AWS services
• Available for all new accounts
• Good for one year from the day the account is
created
• Everything we show today can be done
within the Free Tier!
• More details at http://aws.amazon.com/free

5. Step 1: Sign up and configure basic security
• Sign up though https://aws.amazon.com
• You need a credit card
• There will be a phone verification

6. Basic security: Creating IAM users
Using AWS Identity and Access
Management (IAM), you can
create and manage AWS users
and groups.
You can control what resources
each user has access to so you
can avoid overly permissive
accounts.

7. Enabling MFA
AWS allows you to require
Multi-Factor Authentication
(MFA) for your users through
physical-based or software-
based single use login tokens
to thwart stolen passwords and
key loggers as an attack
vector.

8. Demo:
Creating an IAM user
and enabling MFA

9. Step 2: Start and connect to an EC2 instance
• Create a key pair
• Create a security group
• Start an instance
• Connect!

10. Creating your key pair
• You might hear them called SSH
keys, RSA keys, or private/public
keys
• Used for SSH (Linux)
– Secure connection to instances
– Helps avoid weak passwords
• Used for decrypting the initial
windows administrator password
• Import your own or use AWS
generated keys
-----BEGIN RSA PRIVATE KEY-----
MxIEpAIBAAKCAQEAvfmzB8SwLEPMRCQsuz1m9d+1r/m+Q/EM+Z3n2Rg
6irY9cFHK0VDpoDo4iHLot1/yrLKboLHv2fP40z05YuRzlOFLNmVlpF
dTcG8f5Mf6FKRMQIlspDy3gH20hmNRXdcMrOqSoM50+w+I3BExtCHlG
oOIyHybb3UnR9NELr1GnIvcjUjFqHnts7TMMTFfCAI1Rl+4H/Uutd78
5qRDNZgUnQJLzTSuzlHkWNHf3acXOT4RVsvAX1API65BDmyC3iyqaB4
3ZDCOhgsSFrdEoi9nbt/z+O9/dUSe8y4dQV9v/HoHnWVXzt2sIdf7/A
AlAuPrtz+Xa0yw74qGFe3Zr2ex+QIDAQABAoIBAQC9h2tEWcdFMhKM/
OYfm1+n9xsFSIy4rbk7I31WCiUFlFDxSLimYSnjb5JNFw7zO2cZQkuf
Y0YeVJeu70rcTXy+UJI/36Mq9P+KoKLaFWR6yXtFe5UGuYh9SWwcEuP
vUgfUT2YfwbyF6PaqTwEebB5seEOzeRV9egzJTI2eb7kNnYS1wp0pFg
yGwUZLyNPxpvSe/wU29XIeULLzv1K/vJaHzH31gXKTspJocMkRB77mH
qS+LmWMVLXMbzoeMfqNKK61eMj6B1CzMQk5bjEhhzXGni0iVeGa3Nyq
F81AzON/DUgjWexq9tbcOxhoa/U4plZnb84+fC9XTuV5g55qz1DxAoG
BAPXfui3cJrq1VFSUri47v51l8l+wpzzh7zxQt3pLHxY7dZo8Z+Dt+4
WhnfO5PUceW/Y8BeKWgZQ+mMSaVFteHwtL2lAa1dxs0hfK32hk3ay8M
ftfRtAuNve1y264V9VYk3GBQLbusIbK5kEx4OorIHO4eI8Fl3yNqL0v
DeSe3NgFAoGBAMXMoNbIRJCiicdADM5Q6/rWntfOcyX8WRZFsI5sdFd
VU12Llkg1TgCb8nB/s49AQeZ+gVUYYshmQqnm1aH/IFVtErRvJf3fAH
IX+XG/9HanLyYNT8o1Z6N+MPJ3BrPN//gXEYix1jGMK5W6dIAplc+nZ
JjixYVOwR2YFMWyzhhlAoGBAMLW/hSlZtOCKke0Yqskkd3LEdyegoiO
iiSD2kHBEetuRu1ofPET5cOppR+kZVjcSAfC3O8IUbsGN81kdwDIf1V
WULQ1789zNLHCBHQXqkrd/8WxZM5IMSrvFzywPHpGbOD/iibs01qdow
V63z7x2g+Z2X+M8NS09Uil5x6KfXt5AoGAFllprvsP7DvBT5coG0O/d
ic76Wx1TEx4EHEtYtpURu3oLoCwKVaEisMUIKv9MOl0yMNwf5nyx2vu
il3/s38tOxnI7ERGyamh1kJpN/YVfDaluCn24wUnwaxngW37fuN+0Zx
hqc1WQ2DwJ8nakgSg3cavMislYEumvF5Lso7ihJUCgYAE1RU2+zDfQd
YGb4nuZZ21yI/IDNDSA8h1Ey6CXy7MhY7xIpHtySKgKfOaDqG6znOWZ
1hm5wJW0B+IUZhJxIaQj4ragn54rpWM+M16/CeQTsHRqf7q8r9PpzPB
BqVVZIRBcLKLuRNEMuCiioddy/GTPl0TNYG+bomWSRUBbVfV2g==
-----END RSA PRIVATE KEY-----

11. Demo:
Creating key pairs

12. Creating a security group
• Security groups are firewalls for your instances
• By default, the security group blocks everything
• Choose which protocols & ports are open
– Can use port ranges (e.g., 22-24)
• Choose which addresses the ports
are open to
– Uses CIDR rules for IP address access
– (use /32 for allowing a single address)

13. Demo:
Creating a security group

14. Start a new instance
• Instances are virtual machines running in the cloud
• You have full control of the instance and can install
any software that you choose
• In this process, you define what kind of machine you
want (processing power, HD space, etc.)
• You will need:
– A key pair to connect to your instance via SSH
– A security group to put your instance in

15. Demo:
Starting an EC2 instance

16. Connecting to a Linux instance
• OS X
– Open a terminal window
– ssh -i {ssh private key location} ec2-user@{public DNS
name}
• Windows
– Download/Install PuTTY
– Convert .pem file to .ppk with PuTTYgen
– Create a connection in PuTTY

17. Connecting to a Windows instance
• From OS X
– Download Microsoft Remote Desktop Client (app store)
– Connect to {EC2 instance public DNS Name}
• From Windows
– Windows + r or start and then the “run” option
– mstsc /v:{EC2 instance public DNS Name}

18. Demo:
Connecting to an EC2 instance

19. Step 3: Backing up and restoring an EC2 instance
• Elastic Block Store (EBS) is block-level storage
for EC2 instances (think HDD)
• EBS volumes can be removed and re-attached
• Custom volume sizes from 16 TB – 1 GB (RAID
for larger)
• Use Provisioned IOPS for predictable I/O
• General Purpose (SSD) volumes

20. Demo:
Backing up an EBS volume

21. Restoring a snapshot / creating an AMI
• AMIs are Amazon Machine Images
• AMIs are bootable versions of a snapshot
(backup)
• AMIs are private, but you can choose to share
them with others

22. Demo:
Creating an AMI
and restoring a snapshot

23. Step 4: Set up alerts in CloudWatch
• CloudWatch provides monitoring information for your
EC2 instances
• CloudWatch allows you to specify actions to take when a
condition is met
– Example 1: Send an email when CPU utilization >80% for 5 minutes
– Example 2: Add another machine to an Auto Scaling group if average disk
read IOPS across an Auto Scaling group exceeds 500
– Example 3: Remove a machine from an Auto Scaling group if network input
drops below 2,000 bytes

24. Demo:
Creating a CloudWatch alarm

25. Step 5: Try out S3!
• S3 is Amazon Simple Storage Service
• Store and retrieve any amount of data from anywhere in
the world
• Highly scalable and durable
• Encryption available
• Storage is isolated by AWS region
• Object-level permissions
• Easily accessible

26. Demo:
Using S3

27. What we covered:
1. Creating an account and configuring basic security
2. Setting up and connecting to your first Elastic
Compute Cloud (EC2) virtual machine
3. Backing up and restoring your virtual machine
instance
4. Setting an alert for changes in your EC2 instance
5. Uploading files to S3 and making them publicly
available on the Internet

28. Your feedback is important to AWS
Please complete the session evaluation. Tell us what you think!

29. CHICAGO