博客來買書 1 本 : AI + ESP32-CAM + AWS

最近在博客來找到一本 ESP32-CAM 的書 : 

# AI + ESP32-CAM + AWS：物聯網與雲端運算的專題實作應用 $487 (75 折)

此書使用 MicroPython 操作 ESP32-CAM, 並以 AWS 做為雲端儲存. 

7-11 取貨付款滿 350 元免運. 

好站 : Jayendra's Cloud Certification Blog

今天在整理辦公室電腦的瀏覽器頁籤找到下面這個 AWS 認證相關部落格, 可能是上回參加線上課程時老師介紹的, 裡面有準備 AWS SAA-C02 系統架構師認證的心得與注意事項, 非常值得參考 :

# Jayendra's Cloud Certification Blog 

SAA-C02 正是我在 AWS 認證上的下一步, 但我正在與 Python Tkinter, NLP, ,TensorFlow 等搏鬥, 實在無暇分心投入認證, 所以先記下來以備來日參考. 我想最遲明年中之前就要開始進行. 

關於 AWS Solutions Architect Associate (SAA) 認證

今天被指派參加今年的訓練課程 AWS architect associate 認證, 本來還有點猶豫, 但考慮到我這人一定要有壓力才會動起來 (從圖書館借的書被預約就會開始讀這一點可證), 就答應了. 其實去年的 basic 讀完後也一直沒時間玩 AWS, 到現在帳號也都還沒啟動, 希望透過這個課程能強迫我去接受挑戰, 繼續向前推進. 

我在網路上找到一篇過來人的貼文, 他的經驗可資借鏡 :

# AWS Solutions Architect Associate (SAA) - [PASSED] 心得以及攻略

等這一季我把 Python 機器學習初步搞定就來玩玩唄. 

AWSome day 2020 上課

下午 1300 參加 AWS 線上課程, 大部分上回上認證課程已學過, 當作是複習, 不過機器學習部分則未曾上過, 所以就特別認真聽, 例如 Poly 就讓我印象深刻. 與認證課程不同的是, 今天講師有帶實作, 雖然時間太短只做簡單示範, 但教學效果不錯, 我都給五顆星非常滿意.

AWS 有 Line 群組, 在手機點下列網址加入即可 :

https://lin.ee/35x9NaR

或者掃 QR 碼 :

報名 AWSome Day Online Conference 2020 (AWS 雲端培訓課程)

今天收到 AWS 寄來的免費線上培訓課程通知信, 已完成報名 :

時間是 4/29 13:00~15:10, 上完課程將獲得 AWS 寄發之出席證書.

報名網址如下 :

AWSome Day Online Conference 2020

# 上課登入網址

最近在學 Matplotlib 用法, 月底前應該可以忙完, 屆時就可以繼續 AWS 的學習了, 下半年打算實際在 AWS 上架站, 明年應該會再繼續被指派考 CCP.

AWS 學習筆記索引

最近都在忙 AWS 認證, 我將學習過程都記錄起來, 筆記索引如下 :

# AWS 學習筆記 (一)

# 關於 AWS 認證

# AWS 學習筆記 (二) : 註冊 Fundation 培訓與認證帳號

# AWS 學習筆記 (三) : AWS Business Professional 課程筆記

# AWS 學習筆記 (四) : AWS Technical Professional 課程筆記

# AWS 學習筆記 (五) : AWS Cloud Economics 課程筆記
# AWS 學習筆記 (六) : AWS Certified Cloud Practitioner Exam 準備

其中 (三) (四) (五) 是參加基礎級 Certified Cloud Practitioner 認證前必須先上的三堂線上學習課程, 每門課結束時都有選擇題測驗, 以 80% 為通過標準.

~~進行中~~

參考 :

# AWS Global vs Regional vs AZ resources

AWS 學習筆記 (六) : AWS Certified Cloud Practitioner Exam 準備

上完必修的三堂線上課程 (Business Professional, Technical Professional, and Cloud Economics) 後就可以開始準備 AWS 基礎級的 Cloud Practitioner Exam 認證了.

此認證考試包含四個領域 (domain) :

1. Cloud Concepts : 佔 28%
2. Security and Compliance : 佔 24%
3. Technology (core concepts) : 佔 36%
4. Billing and Pricing : 佔 12% (問題較刁鑽)

參加認證者應有 6 個月以上 AWS 使用經驗 (非強制, 只要 AWS 知識夠充分與熟悉即可報考). 其中 Billing and Pricing 考題較細微 (detail-oriented), 需記憶支援計畫 (support plan) 與使用服務時之不同計費方式及其優缺點.

AWS 認證有 9 個, 網址 : http://aws.amazom.com/certification

AWS Certified Cloud Practitioner Exam : AWS 基礎認證 (CCP) :

• 認證費 100 美元 (每次)
• 全部是選擇題 (單複選) (有英日韓簡體中文可選, 建議用英文)
• 題數 65 題, 時間 90 分鐘 
• 可線上或到測試中心考試
• 以 70% 為及格標準 (只能錯 19 題)

一. 雲端概念 : 

上雲的好處 :

• 毋須實體的伺服器與接線 (cabling)
• 毋須建置伺服機房 (server room) 與維護
• 毋須硬體更換與採購 

何謂雲端計算 :

雲端計算提供客戶可線上選用的計算, 儲存, 資料庫, 應用程式, 以及其他的 IT 資源 (On-demand delivery of compute, database storage, application, and other IT resources).

雲端收費採 Pay-as-you-go 模式, 即用多少付多少 (Pay what you use and when you use it), 較有彈性 (pay when and what you consume).

虛擬機器監視器 Hypervisor : 用來建立與執行虛擬機器的軟硬體與韌體.

雲端的優點 (advantages) :

• trade capital expenses with various expense (資本費用轉為變動費用)
• benefits from massive economies of scale (從經濟規模獲益)
• stop guessing capacity (不須猜測備載容量)
• increase speed and agility (提升速度與靈活性)
• go global in minutes (快速進入全球市場)

雲端的特點 : flexibility, scalability, and affordability (good fit)

雲端計算的三種模型 (必考) :

• IaaS : Infrastructure as a Service (彈性最大擁有最多控制權)
• PaaS : Platform as a Service (彈性次大)
• SaaS : Software as a Service (彈性最小, 用戶可直接使用應用服務)

與地端 (on-premises) 營運管理經驗最類似的是 IaaS. Google Drive (SaaS) 免費使用者 (Free tier) 可享有 15GB 使用容量.

Well-architected frmework : build the most secure, durable, and high-performing IT infrastructure. 其五個支柱 (pillars, 必考) 如下 :

• avoids unnecessary cost (granular cost)
• reliability
• efficiency
• security
• operational excellence

AWS 是甚麼 :

• 2002 : Amazon Web Services 發布
• 目前擁有超過 100 萬活躍用戶
• 亞馬遜有超過 10% 營收來自 AWS

AWS 為企業與機構透過 Internet 以 pay-as-you-go 計價模式提供 IT 基礎設施服務, 可為其節省時間, 金錢, 以及人力.

AWS 服務分為 23 個 Service Groups, 其中最常用也幾乎必用的是 Compute, Storage, 與 Database 這三個服務 :

• Compute: provide virtual server hosting, container management, and serverless computing (例如 EC2, 此為 AWS 骨幹服務).
• Storage: provide storage for both in-use (例如 EFS 或 S3) and archival files (例如 Glacier)
• Database: provide relational, NoSQL database, and petabyte-scale data warehouse service (例如 AWS RedShift)

AWS 免費帳戶 : http://aws.amazom.com/free. 主要有三種免費類型 :

• Always free : 免費期間到期後繼續有效, 所有客戶均適用
• 12-month free : 每一種服務均有其額度 (容量或時間等), 超過時會計費
• Trial : 某些服務提供免費試用

注意, 免費帳戶並非可以無限制使用所有 AWS 資源, 須注意它們有不同程度之限制.

使用免費帳戶在 AWS 上架設 WordPress 部落格 : 架構為 EC2+Route 53, 並從 AWS 市集下載 WordPress AMI (WordPress Certified by Bitnami, 這是一個包含 WordPress 的伺服器模板 template).

AMI (Amazon Machine Image) : pre-configured servers in AWS Marketplace

Route 53 : domain name registrar (用來將 AWS 內部網址對映到 internet 的邏輯網址, 此網址可在 Route 53 購買, 一年約 12 美元)


二. 雲端安全 : 

Security 是 AWS 最重視的一個部分 (vital part of AWS), 此領域佔 CCP 認證題目的 24%, 重點是 AWS shared responsibility model (資安責任區分模型), 其中 Patching 是客戶與 AWS 共同分擔的資安責任, AWS 負責設備本身 (OF), 客戶負責 EC2 裡面的 OS 更新 (IN).

Shared responsibility model : the security of cloud computing infrastructures and data is a shared responsibility between the customer and AWS.

AWS is responsible for the security OF the cloud (the protection of the physical component of the infrastructure, including hardware, software, networking, etc.); while the customer is responsible for the security IN the cloud (the protection of varying levels of security functions, such as customer data, data encryption, IAM, firewall configuration, OS patching of VM, etc.).

AWS 的安全服務 (security service) 包含下列項目 :

• Identity and Access Management (IAM)
• Web Application Firewall (WAF)
• AWS Shield
• Amazon Inspector
• AWS Trusted Advisor
• Amazon GuardDuty

Well-architechted framework : 協助客戶免於來自雲端內外之安全威脅 (help secure from external and internal threat). 此安全框架有五個支柱 (pillars) :

• operational excellence
• security
• reliability
• performance efficiency
• cost optimization

此五個支柱在 AWS 中實現如下具體資安保護 :

• IAM (Identity and Access Management) 
• Detective control : 可追蹤 traceability (Who did what, when?)
• Infrastructure protection
• Incident response : 
• Data protection : 避免人接觸資料

關於 IAM :

• 免費服務
• 管理 AWS 的存取許可 (manage access permissions to resources & services)
• 適用全部用戶 (apply to all-user access : globally across all regions)
• 遵循最低權限原則 (principle of least privilege)
• 可用來管理 Users, Federated Users, and IAM Roles
• 可為特定允入許可建立一個 IAM role

Principle of least privilege : Who can access what? Every role has a set of access permission (no more or less than) necessary to complete its job, starting with minimal set of permissions.

Recommended Security Practice :

• Shared Responsibility Model
• 5 security pillars of the Well-Architected Framework
• Principle of least Privilege

AWS 法遵守則 : https://aws.amazon.com/compliance
AWS 法遵計畫 : https://aws.amazon.com/compliance/programs

WAF (Web Application Firewall) :

• 保護 App 的安全與可用性 (security and availability) : 避免網路攻擊
• 保護 App 避免過度使用資源 (consume excessive resources) : 省錢 (cost efficiency)
• 使 App 容易佈署與維護
• 提升流量可見度 (traffic visibility)

AWS Shield : 可偵測 DDoS 攻擊並自動減輕 (automatic mitigation) 對 App 的影響, 減少 App 的 downtime 與 latency. AWS 提供兩種層次的 AWS shield :

• Standard (標準版) : 自動啟用且免費, 可抵擋大部分的一般 DDoS 攻擊
• advanced (進階版) : 提供與 AWS DDoS 處理團隊 24/7 聯繫, 並與 WAF 整合, 提供較高層級保護 (網路與傳輸層) 與自動流量監控, 因 DDoS 攻擊產生的可能費用飆升具有財務保護作用.

DDoS  (Distributed Denial of Service) : 利用大量重複的請求占用 IP 位址來使網站癱瘓的攻擊手法.

Amazon Inspector : 自動評估 App 所暴露之安全弱點 (vulnerability) 並產生資安評估報告, 可降低 App 在開發與佈署過程中所面臨之風險, 提升安全性與法遵程度 (improve security and compliance).

AWS Trusted Adviser : 引導客戶遵循 AWS 最佳方案 (follow AWS best practices) 來配置 AWS 資源, 依據五種類別掃描客戶之 AWS 基礎設施 (proactive minitoring), 並可配合 CloudWatch 依據告警自動採取行動 :

• Cost optimization
• security
• performance
• fault tolerance
• service limits

Trusted Adviser 有七個核心檢查項目 :

• S3 bucket 允入權限
• Security group 是否有不受限的 IP 埠
• IAM 使用情形
• MFA 的根帳號
• EBS 公開快照
• RDS 公開快照
• Service limits

Amazon GuardDuty : 利用人工智慧全天候偵測潛在的安全威脅, 監控所有惡意與未授權行為, 並透過 CloudWatch 分析事件與發送告警.

Security 考試重點 :

• Shared responsibility model :
  Customer : responsible for the security in the cloud.
  AWS : responsible for the security of the cloud.
• The 5 pillars of well-architected framework :
  IAM, Detective Controls, Infrastructure Protection, Data Protection, Incident Response.
• Principle of least privilege :
  Provide the least amount of access necessary to any entity; no more and no less.
• security services :
  IAM, WAF, AWS Shield, Amazon Inspector, AWS Trusted Advisor, Amazon GuardDuty

三. 計費與帳務 : 

在 AWS Billing and Cost Management Dashboard (計費帳單儀錶板) 上可管理所使用之 AWS 費用 (pay for what you use) :

• 估計與規劃 AWS 費用
• 多重帳號可合併帳單 (consolidated billing)
• 當費用接近臨界值時發出告警
• 可用 Cost Explorer 將費用圖形化
• 可根據標籤 (tag) 搜尋帳單

AWS 主要的帳單費用來源 :

• Compute (EC2 啟用開始每小時計費)
• Storage (S3 以所使用空間每 GB 為單位計費)
• Outbound Data Transfer (上傳不用錢下載要錢, 同區域內服務之間進來的流量不計費)

儲存空間收費 S3 : $0.023/GB, Glacier : $0.004/GB, Glacier Archive $0.00099/GB. AWS 資料庫 Aurora 則是進出都收費 : 每百萬請求 $0.2 元.

管理費用的兩個計算器 :

• TCO Calculator : 由於上雲不需要購置 upfront infrastructure, 且 AWS 採取 Pay-as-you-go 模式計費, 故 TCO 會降低. 
• Pricing Calculator : 用來估算雲端架構解決方案之費用. 

AWS Free Tier (AWS 免費方案) : 依據時間, 空間, 以及請求次數等

• always free (永久免費) : 例如 Lambda (100 萬請求/月)
• 12-month free (一年免費) : 例如 EC2 (750小時/月)
• Trials (試用) : 例如 SageMaker (250 小時/月)

AWS 支援計畫 :

• Basic support plan (免費) : 只限帳戶與計費問題, 不受理技術問題
• Developer support plan : 可提出無限次技術問題, US$29/月, 單人支援
• Business support plan : $100/月或帳單的 3~10%, 無限次與多人支援
• Enterprise support plan : 24/7 全天候無限次與多人支援 (15分鐘回應)

Basic 計畫是免費客戶使用的, Developer 計畫適合正在測試新功能或原型 (prototype) 者, Business 計畫適合上線的產品, 提供全套 AWS Trusted Adviser checks.

參考 :

# Top 5 Amazon Web Services or AWS Courses to Learn Online — FREE and Best of Lot

2020-03-26 補充 :

練習題 PART 1 :

1.A company is migrating an application that is running non-interruptible workloads for a three-year time frame.
Which pricing construct would provide the MOST cost-effective solution?
A.Amazon EC2 Spot Instances
B.Amazon EC2 Dedicated Instances
C.Amazon EC2 On-Demand Instances
D.Amazon EC2 Reserved Instances
ANS : D

2.What can AWS edge locations be used for? (Select TWO.)
A.Hosting applications
B.Delivering content closer to users
C.Running NoSQL database caching services
D.Reducing traffic on the server by caching responses
E.Sending notification messages to end users
ANS : B, D

3.Which is the MINIMUM AWS Support plan that provides technical support through phone calls?
A.Enterprise
B.Business
C.Developer
D.Basic
ANS : B

4.Under the AWS shared responsibility model, which of the following activities are the customer's responsibility? (Select TWO.)
A.Patching operating system components for Amazon Relational Database Server (Amazon RDS)
B.Encrypting data on the client-side
C.Training the data center staff
D.Configuring Network Access Control Lists (ACL)
E.Maintaining environmental controls within a data center
ANS : B, D

5.A customer would like to design and build a new workload on AWS Cloud but does not have the AWS related software technical expertise in-house.
Which of the following AWS programs can a customer take advantage of to achieve that outcome?
A.AWS Partner Network Technology Partners
B.AWS Marketplace
C.AWS Partner Network Consulting Partners
D.AWS Service Catalog
ANS : C

6.Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking?
A.Amazon RDS
B.Amazon EC2
C.Amazon ElastiCache
D.AWS Fargate
ANS : B

7.Under the shared responsibility model, which of the following is the customer responsible for?
A.Ensuring that disk drives are wiped after use.
B.Ensuring that firmware is updated on hardware devices.
C.Ensuring that data is encrypted at rest.
D.Ensuring that network cables are category six or higher.
ANS : C

8.Which AWS service can be used to manually launch instances based on resource requirements?
A.Amazon EBS
B.Amazon S3
C.Amazon EC2
D.Amazon ECS
ANS : C

9.Which of the following is a correct relationship between regions, Availability Zones, and edge locations?
A.Data centers contain regions.
B.Regions contain Availability Zones.
C.Availability Zones contain edge locations.
D.Edge locations contain regions.
ANS : B

10.Which AWS services are defined as global instead of regional? (Select TWO.)
A.Amazon Route 53
B.Amazon EC2
C.Amazon S3
D.Amazon CloudFront
E.Amazon DynamoDB
ANS : A, D

11.The use of what AWS feature or service allows companies to track and categorize spending on a detailed level?
A.Cost allocation tags
B.Consolidated billing
C.AWS Budgets
D.AWS Marketplace
ANS : A

12. How should a customer forecast the future costs for running a new web application?
A.Amazon Aurora Backtrack
B.Amazon CloudWatch Billing Alarms
C.AWS Simple Monthly Calculator
D.AWS Cost and Usage report
ANS : D

13. Which AWS tools assist with estimating costs? (Select three.)
A.Detailed billing report
B.Cost allocation tags
C.AWS Simple Monthly Calculator
D.AWS Total Cost of Ownership (TCO) Calculator
E.Cost Eliminator
ANS : B, C, D

14.Which of the following is an advantage of consolidated billing on AWS?
A.Volume pricing qualification
B.Shared access permissions
C.Multiple bills per account
D.Eliminates the need for tagging
ANS : A

15.How should a customer forecast the future costs for running a new web application?
A.Amazon Aurora Backtrack
B.Amazon CloudWatch Billing Alarms
C.AWS Simple Monthly Calculator
D.AWS Cost and Usage report
ANS : D

16.Web servers running on Amazon EC2 access a legacy application running in a corporate data center.
What term would describe this model?
A.Cloud-native
B.Partner network
C.Hybrid architecture
D.Infrastructure as a service
ANS : C

2020-03-27 補充 :

今天找到下面這個論壇, 可找到 AWS 考題的題解與討論 :

# https://www.examtopics.com/discussions/amazon/
# Exam4traning

AWS 學習筆記 (五) : AWS Cloud Economics 課程筆記

搞定 Business 與 Technical Professional 課程後, 繼續向 Cloud Economics 進軍, 網址如下 (需登入 APN 帳號) :

# AWS Cloud Economics (Digital : 編號 35616)

這個對我而言是很陌生的課題, 但卻是客戶最關心的議題. 為何要談經濟學問題呢? 這是因為要讓客戶充分了解遷移到 AWS 會帶來多少商業價值而產生信心, 透過可預期之成本節降效果來贏得客戶信任, 原文如下 :

"Giving customers confidence that migrating to AWS brings known and defined business value. Earn customer trust through proactive cost redunction and optimized strategies."

除了成本節降外, 最重要的是要讓客戶了解 AWS 可以帶來企業效能 (business performance) 與客戶體驗 (customer experience) 方面的提升.


module 1 : introduction to business value

雲端經濟學的兩個主要領域 :

• business value (商業價值) : TCO 
• cloud financial management (雲端金融管理)

雲端價值框架 (Cloud Value Framework) 的四個支柱 (pillars) :

• Cost savings (TCO) (成本節降) : 約 51% 節降效果
• Staff productivity (員工生產力) : 約增加 62% 
• Operational resilience (營運彈性) : 降低 downtime 約 32%
• Business agility (商業反應) : 迅速建立新市場帶進新營收

客戶一般只關心到成本節降 (因為它顯而易見), 而沒有注意到後面三項較不具體的效益, 但這三項卻是上雲所帶來的真正潛在利益, 也是上雲最具說服力之優點 (most compelling cloud benefits).


Module 2: Cost Savings

主要是比較地端 (on-premises) 與 AWS 雲端的成本差異. 最大的挑戰是如何估算傳統地端配置 (on-premises) 所需的成本. 一般而言在 AWS 上配置之計算核心至少比地端少 20~40%, 而且因為 AWS 已達成經濟規模而形成正循環, 所以上雲的成本還會不斷下降.

AWS 用來節降成本的三種模型 :

• consumption-based model
• AWS pricing model
• frequent price reduction (自動的且一體適用)

傳統地端配置的缺點 :

• over-provision : 配置過度 (閒置與浪費)
• under-provision : 配置不足 (阻礙業務擴張)

AWS 讓客戶在需要擴充時迅速配置所需要的設施. 基本的 AWS 配置如下 :

AWS 的四個 pricing model :

• on-demand
• reserved
• spot
• dedicated 

遷移到 AWS 的成本 (加起來等於 ROI=Return Of Investment) :

• sunk cost=depreciation + recovery value
• migration cost 

遷移到 AWS 可能面對來自 IT 部門的抵制 : 擔心失去工作與專業性.

與客戶討論成本節降時的不要只談價格與折扣, 卻不談成本分析 (cost analysis), 只有透過成本分析才能讓客戶了解地端配置所占的隱形成本有多大.


module 3 : staff productivity

六種主要的 IT 工作項目 :

• Server
• Network
• Storage
• Applications
• Facilities
• Securities

遷移到 AWS 後, 有些工作的子項目整個交給 AWS 而完全消失, 有的則減低了工作量.


module 4 : operational resilience (營運彈性)

營運彈性是指 more uptime 與 security 所帶來的高度可用性 (availability).

operational resilience 的四個基石 :

• operations
• security
• software
• infrastructure

每一個 AWS 計算實體 (instance) 都有兩個獨立的電源供電.


module 5 : Business Agility

此模組介紹 AWS 所帶來的業務敏捷 (business agility) 效益, 以及要用那些 KPI (Key Performance Indicator) 指標來衡量. Business agility 可激發創新 (innovation), 並降低企業運營成本與風險 (decrease the cost and risk).

Business agility means : responding faster, experimenting more, and delivering results in the same or less amount of time. Business agility allows customers to innovate by increasing "fail fast" while reducing risks and costs.

Fail fast : being easily to shut down failed initiatives without the pain and wasted resources associated with an inflexible on-premises environment.

衡量業務敏捷的主要 KPI :

• Time to market for new applications (單位: 月)
• Features per release (單位 : 件數)
• Value per release (application revenue per release)

MTTR (Mean Time To Recover) : 平均恢復時間


module 6 : cloud financial management 

AWS 用戶只支付他們所使用的資源 (pay what they use).

AWS 雲端財務管理的四個領域 :

• measurement and accountability (成本結構透明可稽核)
• cost optimization (根據使用需求動態調整架構)
• planning and forecasting (根據目前與未來 IT 需求)
• cloud financial operations (可自動化)

AWS 讓成本透明化的方法 : 使用 cost allocation tag

成本優化的最佳作法 :

• right-sizing instances (選擇符合效能需求之最便宜 instance)
• increasing elasticity (關閉沒有生產力的 instance, 例如測試或開發用的)
• choosing the right pricing model (使用 reserved instances)
• optimizing storage

Automated Scheduling=Lambda + CloudWatch

監管成本的三種作法 :

• DIY 一個客製化的儀錶板 dashboard
• 使用 APN
• 使用 AWS Cost Explorer (免費的)

可用 CloudWatch 來檢視 instance 的 CPU, menory 的使用情形, 也可以用 Cost Explorer 來尋找可節降成本之機會.

Capacity reservation 的限制 :

• zonal RI 帳單折扣不適用於 capacity reservation
• 不可在 placement group 中建立 capacity reservation
• capacity reservation 不能用在 dedicated host

AWS EC2 的購買選項 :

• on-demand instances (無需長期契約, 用於不可預期負載)
• reserved instances (需 1~3 年契約, 用於可預期負載)
• spot instances (無狀態的閒置容量, 用於不可預期負載, 可達 90% 折扣)

AWS 上的服務中斷 (interruption) : 過去三個月 95% 的 instances 不曾發生中斷.

spot instances 適合用在 (最好放在 container 中) :

• Fault tolerant
• Flexible
• Loosely coupled
• Sateless workload

自動化在 AWS 是很重要的一個功能, 特別是用在成本節降上, 例如 :

• 區別 always-on instances 與建議購買 reserved instances
• 找出應該要瘦身 (downsize) 的 instances
• 自動關閉閒置的 instances 與 EBS 空間
• 自動將資料送到養老院 (aging), 從較貴的 S3 搬到 S3-IA 與 Glacier
• 自動將狀態更新到儀表板上
• 自動產生成本節降報告

module 7 : Introduction to Migration Portfolio Assessment (MPA)

此模組介紹 MPA 工具及其功能. MPA 是一個網頁應用程式, 用來使遷移到 AWS 的進程自動化, 協助客戶驗證 AWS 遷移案以及建立遷移計畫.

誰可以用 MPA 工具?

• Sales team
• Consultants (僅限 Advanced 與 Premier APN 顧問夥伴可用)

MPA 用來進行 Migration 準備, 評估 Cloud business value, 以及做 Cost analysis.


module 8 : Cost savings with MPA

此模組介紹如何在 MPA 工具網站建立一個 portfolio, 匯入, 更新, 刪除, 以及新增資料, 以及執行成本節降分析.


2020-03-21 補充 :

今天是周六, 花了一個早上看完 module 6~8, 吃過午飯後考試, 共 21 題, 一樣是 80% 及格, 我一次 90% 過關 :

AWS 雲端經濟學的考試又跟第一堂的 Business Professional 一樣了, 就是要考完才知道成績, 而且不會告訴你答案與錯在哪裡. 我這次抽到的題目與答題如下 (90% 應該是錯兩題, 還沒檢查是哪兩題) :


1. All of the following are pillars of the Cloud Value Framework except which ones? Select all that apply.

ANS: (1) Security
      (2)

2. Match each pillar of the Cloud Value Framework with its description

ANS: (1) Cost savings - the financial benefits of moving to the cloud
     (2) Staff productivity - the efficiency gained from reducing or eliminating tasks no longer needed with the cloud
     (3) Opertional resilience - the benefit from improved availability and security
     (4) Business Agility - being able to respond faster an experiment more

3. Cloud Economics = ________ + ________.

ANS: Business value + Cloud Financial Management

4. Which kind of analysis calculates the total cost of ownership for running and end-to-end traditional IT environment versus deploying to AWS?

ANS: Cost savings

5. True or False:

A cost savings analysis provides a complete view of costs to deliver equal or improved performance with AWS when compared to an on-premises or co-location infrastructure.

ANS: True

6. AWS helps customers lower costs with (select all that apply):

ANS: (1) consumption-based model
     (2) AWS pricing model
     (3) frequent price reduction

7. Which of the following are common migration challenges for customers discussed in this course? Select all that apply.

ANS: (1) migration-related cost
     (2) shifting to an operational expenditure(OPEX) model
     (3) lack of cloud readiness
     (4) entrenched IT organization

8. _________ refers to the efficiency gained from reducing or eliminating tasks no longer needed with cloud services

ANS: Staff productivity

9. Match the IT staff category with the typical IT-related functions.

ANS: (1) Server, network, and storage - involves managing hardware infrastructure
     (2) Application - roles such as database administrators, ppDev, QA, and support functions
     (3) Facilities - facilities management for customers who have an on-premises data center
     (4) Security - ensures infrastructure meets compliance, regulatory, and corporate standards

10. _______ is the benefit from gained and improved availability and security.

ANS: Operational resilience

11. Identify the four cornerstones of operational resilience discussed in this course. Select all that apply.

ANS: (1) Operations
     (2) Security
     (3) Software
     (4) Infrastructure

12. You learned about the common causes for failure for each pillar of operational resilience. Match each pillar to its common causes for failure.

ANS: (1) Operations - Human errors, configuration errors, procedure errors, and common place accidents
     (2) Security - Malware, network attacks, unpatched applications, poor or limited authentification
     (3) Software - Resoure exhaustion, computational errors, inadequate monitoring, or failed upgrades
     (4) Infrastructure - Hardware failure, natural disasters, power outages, volumetric attacks

13. How does AWS help to mitigate each failures in each of the following areas? Match the correct answers.

ANS: (1) Operations - Automates continuous integration and delivery workflow, runs smaller code deployments
     (2) Security - Use AWS automation and tools, and provides AWS Identity and Access Management (IAM)
     (3) Software - Leverages automation, manages services end to end, monitors API access
     (4) Infrastructure - Enables customers to run applications and failovers across multiple AZs and Regions

14. Business agility means ________.

ANS: responding faster, experimenting more, and delivering results in the same or less amount of time.

15. Which of the following are Key Performance Indicators (KPIs) for measuring business agility?

ANS: All of the above

16. Being able to easily shut down failed initiatives without the pain and wasted resources associated with an inflexible on-premises environment describes which concept?

ANS: Fail fast

17. Identify the four key areas of cloud financial management discussed in this course. Select all that apply.

ANS: (1) establish cost transparency, to ensure visibility into and accountability for spend
     (2) cost optimization
     (3) planning and forecasting
     (4) cloud financial operations

18. Which of the following is not one of the four best practices of cost optimization discussed in this course?

ANS: Increasing security standards

19. Enabling cost transparency and leveraging tools for measuring and monitoring costs and usage data are examples of which key area of cloud financial management?

ANS: Measurement and accountability

20. Match each of the key areas of cloud financial management with its correct description.

ANS: (1) measurement and accountability - Establish cost transparency, to ensure visibility into and accountability for spend
     (2) cost optimization - Identifying waste, building cloud-friendly architectures, improve cost efficiency
     (3) planning and forecasting - Understanding current and future costs and IT needs, driving accurate planning
     (4) cloud financial operations -Identifying and investigating in people, processes, tools, and automation

21. Match each Amazon EC2 purchase options with its description.

ANS: (1) on-demand instances - Pay for compute capacity by the second with no long-term commitments
     (2) reserved instances - Make a 1 or 3-year commitment for a significant discount. Best for steady-state workloads
     (3) spot instances - Spare EC2 capacity; best for fault-tolerant, flexible, and stateless workloads

AWS 學習筆記 (四) : AWS Technical Professional 課程筆記

繼續進行第二階段 AWS 線上學習課程, 這是 AWS 核心技術 (Core technology) 部分 (需先註冊 APN partner 帳號) :

# AWS Technical Professional (Digital : 編號 45423)

以下為邊上課邊紀錄的摘要筆記 :


module 1:

此模組為簡介, 主要是介紹整個課程的學習目標, 例如 AWS 核心技術 (服務與特性), 如何將 AWS 服務應用在客戶解決方案 (customer solutions), 以及如何採用 AWS 架構與成本優化措施來達成最佳實作等等.

POCs (proof of cencepts) :


module 2:

此模組介紹 AWS 核心技術 (core technology).

On-Premises IT :
指軟硬體 (包含伺服器, 資料儲存, 以及應用程式) 放在本地機房內執行的 IT 運作模式, 這是相對於雲端的 Off-Premises IT 而言, 故意可稱為 "地端" IT.

Cloud computing :
on-demand delivery of compute power, database, storage, applications, and other IT resources via the Internet with pay-as-you-go pricing.

雲端的好處 :

• 可將資本支出轉為其他用途
• 經濟規模 (economies of scale) 可支持 pay-as-you-go 收費方式 
• 不需再猜測需求容量 (stop guessing capacity)
• 提升速度與敏捷性 (increase speed and agility)
• 不需再花錢營運資料中心
• 須臾之間即可全球化

AWS 全球基礎設施 :

• AWS 目前的 22 個 Regions 是彼此完全獨立的 (isolated).
• 每個 Region 中的每個 AZ 也是獨立的, 彼此之間以高速低延遲光纖互聯, AWS 目前有 69 個 AZ.
• AWS 目前有 199 個 Edge locations. 

AWS 的核心技術 (coretechnologies) :

• Compute
• Storage
• Database
• Security
• Management
• Networking

AWS Compute service :

• EC2 : resizable compute instance
• EC2 auto-scaling : increase/decrease running instances
• ELB : distribute incoming traffic
• Lambda : run code in response to events
• Elastic container : run applications in a managed cluster (Docker)

AWS 的 auto-scaling 可按照設定條件自動新增或縮減執行實體 instance 的數量, 也可以根據預測 (predictive) 動態調整, 它會隨時監視每個實體的健康狀態並自動替換損壞的實體, 且會跨 AZ 來平衡 instances 的容量.

AWS EC2 的計算實體 (instance) 類型有三類 : A, T, M 開頭

AWS ELB 有三種類型 :

• Application load balancer (在 app 層分流, 例如 http)
• Network load balancer (network 層)
• Classic load balancer (classic instances)

AWS WBS :

• 與 AWS EC2 instance 互為獨立的大容量網路磁碟 (network-attached)
• 建立後會在該 AZ 內自動備份 (automatically replicate)
• EBS 可與 AZ 內的任何 instance 相連且只能連一個 instance
• 但一個 instance 卻可連接多個 EBS 容量
• 即使 instance 結束 EBS 裡的資料仍然存在
• 可將 EBS 的快照 (snapshot) 儲存至 S3 作為救援或跨 AZ 遷移之用

AWS S3 (Simple Storage Service) :

• 可無限擴充的物件儲存 (object storage)
• 物件大小最高可允許 5TB
• 99.999999999% durability 與 99.99% availability
• 可用作儲存與備份, 也可做應用程式與媒體主機, 或軟體遞送
• S3 既可用來儲存 active data, 也可以用來存 infrequent accessed data, 低成本之 S3 Glacier 通常用來儲存不常用之資料 (archive)

AWS Database :

• RDS 提供六種常用的關聯式資料庫服務 MariaDB, SQL Server, MySQL, Aurora 等 
• DynamoDB 為 NoSQL 資料庫
• ElastiCache 資料快取 (記憶體儲存)
• 自動備份與復原功能

AWS Networking :

• VPC 用來建立雲端虛擬網路, 具備 Security Group 與 NACL 安全控制
• Security Group 用來控制對 instance 的存取 (instance level 的訊務控制), 相當於 instance 的防火牆, 一個 instance 可以指定最多 5 個 Security Group
• NACL (Network Access Control List) 用來控制對 Subnet 的存取 (subnet level 的訊務控制)
• Route 53 是高效能的 DNS 伺服器, 可將終端使用者接續到互聯網應用
• VPC 是 EC2 的網路層, 專屬於 AWS 帳戶, 而 Subnet 則是 VPC 內一組 IP 位址範圍
• Host-based firewall 是 instance 內作業系統的防火牆
• 首先建立一個 VPC, 然後指定一個範圍的 IP 位址來設定 public 與 private subnet, 利用 NACL 來保護 Subnet. 
• IAM 用來管理存取 AWS 服務與資源時之安全性問題
• Cloud security 是 AWS 最重視的問題
• 在 AWS 資安責任分擔模型 (share resposibility model), AWS 負責雲端本身的資安 (of the cloud), 主要是雲端基礎設施, 包含 Region, AZ, 與 Edge location, 以及核心設施如 Compute, storage, database, network 等; 而客戶與其 APN 夥伴則負責雲端內的資安 (in the cloud), 例如作業系統, 網路, 防火牆設定, 平台, 應用程式, IAM, 以及客戶資料等等. 

AWS Management Interfaces : AWS 提供三種管理介面 :

• AWS Management console
• AWS command line (AWS CLI)
• SDKs

module 3 : from services to solutions 

Migration 的六個 R :

• Rehost (servers -> instances)
• Replatform (database -> RDS, applications -> Beanstalk)
• Refactor (using cloud-native features)
• Retire (關閉不用的應用程式)
• Retain (保留部分本地應用)
• Repurchase (改用 SaaS 工作流程軟體)

Cloud architecture best practices :

• 靜態網頁應該放在 AWS S3
• 使用 AWS CloudFront 做全球服務
• Session state 應該放在 DynamoDB
• 使用 ElastiCache 儲存 hosts 與 databases
• 為應用添加更多計算資源, 而非添加計算能力

Well-architected framework :

Five pillars :

• Operation excellence
• Security
• Reliability
• Performance efficiency
• Cost optimization

Cost Optimization :

• Right-sizing instances
• Increasing elasticity
• Choosing the right pricing model
• Optimizing storage 

AWS 案例 : http://aws.amazon.com/solutions/case-studies
AWS 解決方案 : http://aws.amazon.com/solutions
尋找 AWS 解決方案 : http://aws.amazon.com/solutionspace
AWS 快速入手指引 : http://aws.amazon.com/quickstart

AWS Solution 的四個準則 :

• Secure (安全)
• Cost efficient (省錢)
• Scalable (可調整)
• Compliant (合乎規定)

module 4 : presenting solutions to customers

提出 AWS 解決方案的三個步驟 (phases) :

• Discovery (研究客戶的背景, 例如產業地位, 競爭對手等等)
• Presenting the solution (challenges and goals)
• Delivering a POC

與客戶會談技巧 :

• 問 targeted questions : 腦力激盪
• 問 open-ended questions : 避免 yes-no 問題
• 問五個 why
• 利用白板紀錄討論重點, 使工作流程圖像化
• 要提出 POC (Proof Of Concepts)

向客戶提案的撇步 (best practices) :

• 自備白板筆與板擦
• 保持客戶視線通暢, 勿擋住白板
• 與客戶保持眼神接觸 (maintain eye contacts)
• 保持白板上的繪圖簡潔清楚

處理客戶異議 (objections) 原則 :

• 在前進到下一步前要先處理 (address) 異議
• 雖不同意但要表示理解 (acknowledge) 客戶之異議 (I understand ...)
• 挑出問題核心 (isolate the problems and make them concise) 

處理客戶異議撇步 (best practice) :

• data-driven approach (秀出堅實的數據證據來支持你的論點)
• use case studies (以類似客戶的實例來加強說服力)
• dive deep (發掘客戶之 root concerns 並使其放心)
• have backbone (以證據展現對提案的信心)
• keep the momentum going 

關於節省成本方面的異議處理 :

• 可使 TOC (Total Ownership of Cost, 總擁有成本) 降低
• 可使支出不斷優化 (optimized) 且可預測 (predictable)
• 不再需要為了預備高峰需求而過度擴充 (over-provision) IT 設施
• 範例 : GE 油氣公司改用 AWS 後 TCO 減少了 52%

向客戶提案時的 Not to do :

• 不要用 definitely, never, 與 guaranteed (輕諾必寡信, no over-promise)
• 不要用縮略字 (acronyms) 或技術用語 (technical jargon)
• 不要聚焦在技術上, 應以客戶為中心, 了解其企業目標 
• 不要著眼於短中期目標, 應提出長期可持續之目標
• 不要讀螢幕簡報, 應與客戶保持眼神接觸 

POC (Proof Of Concept) : 實際在 AWS 上跑客戶的應用給他們看

• a small scale, practical example of proposed solution (pilot run)
• evaluation mechanism (看哪裡需要調整)
• educational tool (重點是要符合客戶的商業需求)

建構 POC 前須收集的資料 :

• networking and security
• application code
• databases
• data

POA (Partner Opportunity of Acceleration)  Program : 加速銷售週期


module 5 : looking ahead

遷移到 AWS 的過程 (migration process) :

• Assessment 
• Readiness and planning
• Migration
• Optimizations and Operations

MVP (Minimum Viable Product, 最小可行產品) : 先建立一個最基本可運作的系統, 讓客戶一開始就能看到進展與效果, 再根據回饋調整或加入新功能, 而不是要等到很長一段時間後才能確定方案是否有效 (不要這種 big bang 解決方案). MVP 與 POC 的差別是, POC 是給客戶的快速展示 (quick demo); 而 MVP 則屬於產品階段 (production level).

Migration 類型 :

• rehost (更換主機)
• replatform (切換平台)
• refactor (重新新設計, 要花比較多時間)

評估架構是否完善 (well-architected) 的五個面向 (5 pillars) :

• operational excellence
• security
• reliability
• performance efficiency
• cost optimization

架構現代化 (modernization of architecture) 的方法 :

• serverless
• containers
• data lakes and analytics

AWS 資料分析方案 :

• Interactive analytics : Amazon Athena
• Big data processing : Amazon EMR
• Data warehousing : Amazon Redshift
• Real-time analysis : Amazon Kinesis
• Operational analytics : Amazon Elasticsearch service
• Dashboards and visualization : Amazon QuickSight 

module 6 : APN resources

APN partner 的角色 :

為 AWS 用戶建構解決方案與服務 (build solutions and services for customers), 提供商務 (business), 技術 (technical), 與行銷 (marketing) 協助.

APN Partner 有兩種 :

• APN technology partner (技術夥伴) : 提供硬體 (hardware), 接續 (connectivity), 以及軟體 (software) 服務.
• APN consulting partner (顧問夥伴) : 協助客戶設計 (design), 架構 (architech), 建立 (build), 遷移 (migrate), 管理負荷 (work load) 與應用 (application). 

2020-03-20 補充 :

昨天看完此課程後時間不夠, 所以今天早上才做測驗. 與上次課程一樣是 30 題, 不同的是此篇測驗無題號, 每答一題就告訴你答對或答錯, 做完後也可以回顧答題結果, 知道錯在哪裡. 我這是抽到有兩題一樣的, 所以實際答題 29 題, 因為 technical 部分我有認真聽, 所以只答錯一題. 及格標準一樣是 80% :

此次題目參考如下 (每個人抽到的可能不一樣) :

1. Which definition best describes AWS edge location?
ANS: Locations designed to deliver content to end users

2. Which statements actually reflect the principles of the Shared Responsibility Model? (Choose two)
ANS: (1) AWS is responsible for securing the physical network infrastructure
     (2) Customers are responsible for securing their applications and data

3. Whic of the following best describes the functionality of Containers?
ANS: Containers package application's code, configurations, and dependencies into a single object.

4. Which of the following statements are true regarding a well-architected review(choose two)? (此題我答錯)
ANS: (1)
     (2)

5. Which statement best describes Amazon Simple Storage Service Glacier?
ANS: Amazon S3 Glacier is a low-cost object storage service designed for data archiving

6. Which statements are true regarding AWS Partner Network Technology Partner (choose two)?
ANS: (1) APN Technology Partner provide hardware, connectivity services, ans software solutions that are hosted on or integrated with the AWS cloud.
     (2) APN Technology Partners may include independent software vendors (ISVs)

7. Which statement best describes Amazon Virtual Private Cloud (Amazon VPC)?
ANS: Amazon VPC acts as a virtual network within which customers can launch AWS resources.

8. Which of the following are advantages of cloud computing (choose two)?
ANS: (1) benefit from massive economies of scale
     (2) increase speed and agility

9. Which statement best describes the AWS Customer Success site?
ANS: It is a resource for finding use cases to help inspire solution design and build confidence with customers.

10. At what level do Security Group provide protection?
ANS: Instance

11. Which definition best describes AWS Availability Zones?
ANS: Isolated locations within a geographical region, containing one or more data centers

12. Which best describes Amazon EC2 "Memory Optimized" instances type?
ANS: Designed to deliver fast performance for workloads that process large data sets in memory.

13. Which of the following statements best describes a Proof of Concept (POC) ?
ANS: A POC is a small scal, practical example of the proposed solution.

14. When meeting with a customer to present a solution, what would be considered best practice(choose two)?
ANS: (1) Bring markers
     (2) Prepare thoroughly

15. Which statement best describes Amazon Elastic Block Store (Amazon EBS)?
ANS: Amazon EBS provides persistent block level storage volumes for use with Amazon EC2 instances.

16. Whic migration startegy consists of a simple transfer of application resources from an-on-premises data center to the AWS cloud?
ANS: Rehost: lift and shift

17. Which best describes Amazon Elastic Cloud Comput (Amazon EC2) "Compute Optimized" instances types?
ANS: Ideal for compute bound applications that benefit from high performance processors

18. Which statement best describes Amazon Simple Storage Service (Amazon S3)?
ANS: Amazon S3 is an object storage service that can be used to store and retrieve any amount of data, at any time, from anywhere on the web.

19. Which statements are true regarding regarding APN Consulting Partners (choose two)?
ANS: (1) APN Consulting Partners help customers design, architech, build, migrate, and manage their workloads and applications on AWS
     (2) APN Consulting Partners include Managed Service Providers (MSP)

20. Which definition best describes AWS Regions?
AWS: Seperate, isolated geographic areas that contains availability zones.

21. Which migration strategy consists of re-architeching an application, typically using cloud native features?
ANS: Refactor: modernize

22. At what level do Network Access Control List (NACLs) provide protection?
ANS: Subnet

23. When meeting with a customer to gather information about their business chanllenges, what would be considered best practices(choose two)
ANS: (1) Ask open-ended questions
     (2) Focus on listening

24. Which statement best describes the AWS Well-Architected Framework?
ANS: It is a resource to help you design solutions following AWS best practices.

25. Which of the following AWS services could serve as a migration target for an on-premises MySQL database?
ANS: Amazon RDS

26. Which best describes Amazon Elastic Cloud Compute (Amazon EC2) "General Purpose" instance types?
ANS: Provides a balance of compute, memory, and networking resources, and canbe used for a variety of diverse workloads.

27. Which statement best describes APN Partner Central?
ANS: It is a resource providing APN Partners with the tools and content they need to grow their business on AWS.

28. A customer wishes to increase the availability of their cloud-hosted application. Which approaches will help them achieve their goal(choose two)?
ANS: (1) Host application instances on multiple AZs
     (2) Use multiple instances instead of just one

29. Which best describes Amazon Elastic Cloud Compute (Amazon EC2) "General Purpose" instance types?
ANS: Provides a balance of compute, memory, and networking resources, and canbe used for a variety of diverse workloads.

30. Which of the following statements best describes Serverless architechtures?
ANS: Serverless architechtures run applications without provisioning, maintaining, and administering servers.

答錯的第四題正解與總成績如下 :

OK, 剩下最後一個課程 Cloud Economics 了, 加油!

AWS 學習筆記 (三) : AWS Business Professional 課程筆記

本周開始聽 AWS 的線上學習課程, 因為參加 AWS 認證之前必須上三個基本課程, 網址如下 :

# AWS Business Professional (Digital : 編號 30254)

以下是我聽完 AWS Business Professional 後的摘要筆記 :

1. 此課程之目標 :了解 AWS 產品 (products) 與其價值 (values)
2. AWS 的計費方式為 pay-as-you-go (用多少付多少), 不需要千長期合約 (no long-term contract)
3. 採用 AWS 服務可增加 ROI (Return On Investment)
4. 三種雲端佈署模式 (Cloud deployment models) :

• private cloud
• public cloud
• hybrid cloud

5. 在幫客戶評估 AWS 解決方案時需先了解 :

• 客戶的技術與 IT 設施是甚麼?
• 客戶的技術放在哪裡?
• 客戶的經營遇到那些挑戰?

6. AWS 的優勢是提供全球性安全與多重的資訊基礎設施 (AWS provides global, secure and redundant infrastructure), 具備 :

• 22 regions
• 69 AZ
• 199 edge locations (for CDN)

7. AWS 服務始自 2006 年, 擁有超過 175 種服務, 在全球 22 個區域有 69 個 AZ, 有 35000 個合作夥伴 (APN), 以保護客戶資料安全為最優先, 符合 58 個資安規範認證.

8. 資安責任分界 : AWS 負責雲端的資安 (the secure "of" the cloud), 例如軟硬體, 資料庫與網路等. 客戶則負責雲端內的資安 (the secure "in" the cloud).

9. Cloud computing is the on-demand delivery of IT resources via the internet with pay-as-you-go pricing.

10. APN 夥伴分成 consulting (顧問夥伴) 與 technology (技術夥伴) 兩種, 顧問夥伴負責為客戶設計, 架構, 建立, 遷移, 與管理, 包含下列五種 :

• system integrators (系統整合)
• strategic consultancies (策略顧問) 
• agencies (代理商)
• managed service providers (受控服務提供者)
• value-added resellers (加值經銷商)

11. 技術夥伴負責為客戶提供軟體與 AWS 整合之解決方案, 包含 :

• ISV
• SaaS
• PaaS
• developer tools
• management vendors
• security vendors

12. 採用 AWS 雲端所面對的衝擊面向 :

• People
• Governance
• Operation
• Platform
• Security
• Business

13. AWS 的 IAM 服務是免費的.
14. AWS 的主要服務單元 :

• AWS EC2 : Virtual Application Server=instance
• AWS S3 (Simple Storage Service) : object storage

15. AWS 訓練目標 :

• How to design
• How to deploy
• How to Operate

2020-03-16 補充 :

昨天晚上看完 Business Professional 最後一個學習模組, 最後還有一個 Assessment Quiz (就是考試), 總共有 30 題選擇題 (部分為複選), 答對 80% 為 pass (即只能錯 6 題, 沒過還可重測), 早上原以為可以很快做完, 沒想到部分題目不熟 (可能有聽沒有懂), 還回看了相關的上課內容, 直到中午 12 點過後才交卷, 終於一次 90% pass (錯 3 題), 總共花了 3.5 小時才完成, 可見真的要認真看才能一次 pass.


我的題目如下 (有三題答錯) :

1. Which of the following are parts of the AWS global infrastructure? (Select THREE.)

ANS: AZ, Edge locations, Region (複選)

2. What are the three types of cloud deployment models?

ANS: private, public, hybrid (單選)

3. What is an objection-handling technique that allows customer to try a solution or service before purchasing?

ANS: Proof of concepts(POC)

4. What is a key benefit of the APN Partner community?

ANS: Provides members with biness, tecnical, and marketing supports.

5. How can APN Partners differentiate their practice with AWS?

ANS: Offer AWS Technic Account Manager (TAC) to customers whoa are on the Development Support plan

6. What does the AWS Identity and Access Management (IAM) service do?

ANS: Manages access security to AWS products and resources

7. The AWS pricing principles are based on which of the following items?  (Select THREE.)

ANS: Pay as you go, volume pricing discounts, reserved instance discounts

8. What are some key benefits of cloud computing? (Select TWO.)

ANS: increased speed and agility, ability to scale globally

9. According to the AWS shared responsibility model, which of the following controls are managed by AWS? (Select THREE.)

ANS: (1) pysical security of the facilities in which the services operate,
     (2) components of the physical servers
     (3) global infrastructure

10. Who helps with the onboarding process of becoming an APN Partner?

ANS: AWS partner development manager

11. What stage in the cloud adoption journey describes a customer who runs operations in the cloud but wants to further optimize a business?

ANS: All-in

12. Which tool helps customers connect with APN Partners who have specific skills?

ANS: AWS partner solutions finder

13. What is an advantage of using the on-demand pricing model?

ANS: No long-term commitments

14. Which AWS service is a compute service?

ANS: Amazon EC2

15. How can APN Partners help customers get accustomed to cloud adoption?

ANS: select workloads that are less complicated to migrate

16. What is the main job of APN Consulting Partners?

ANS: Design, architech, build, migrate, and operate

17. What are two comprehensive frameworks that can help guide conversations with customers? (Select TWO.)

ANS: (1) Cloud adoption framwork
     (2) Outcome based accountant framwork

18. Which program highlights APN Partners who have demonstrated technical proficiency and proven customer success in a specialized solution, industry, or workload?

ANS: AWS competency program

19. In this course, which skills and knowledge were identified as helping APN Partners move their customers forward in the cloud adoption process? (Select THREE.)

ANS: (1) Unique consulting expertise
     (2) Deep understanding of the customers
     (3) Deep understanding of the AWS tools

20. What is the main job of APN Technology Partners?

ANS: Provide software solutions that are hosted on or run with AWS products and services

21. Which tier does every APN Partner start in?

ANS: Registered

22. What is the primary tool used to price AWS services and solutions?

ANS: AWS pricing calculator

23. Which program provides  step-by-step guidance on how to build, market, sell, and specialize as an APN Partner?

ANS: APN Navigate

24. Which AWS service models and provisions resources based on a template in an automated and secure way?

ANS: AWS CloudFormation

25. At AWS, what does the term cloud computing refer to?

ANS: On-demand delivery of IT resource, accross the internet, with pay-as-you-go pricing

26. Which AWS service helps to globally deliver content with low-latency, high-transfer speeds to customers?

ANS: Amazon CloudFront

27. What is the online software store that helps customers and APN Partners find, buy, and immediately start using the software and services that run on AWS? It is also a place where APN Technology Partners can sell their solutions.

ANS: AWS Marketplace

28. How do partners help their customers right-size service choices?

ANS: Find the right instance type and storage class for a customer's workload

29. Which program is designed for APN Consulting Partners who provide proactive monitoring, automation, and management of their customers’ environments?

ANS: AWS managed service provider partner program

30. What are the benefits of AWS Sponsorships?

ANS: Allow access to customer data for APN Patners to see which patners can benefit from their services

# Prepare for Your AWS Certification Exam

AWS 學習筆記 (二) : 註冊 Fundation 培訓與認證帳號

年前在 momo 買了 "AWS實戰：快速開發、建立和部署應用程式" 這本書, 看到第三章就因為忙 Git/Heroku 而停頓了. 今天開始要來認真準備 AWS Fundation (基礎) 認證.

首先須至 AWS training 網站註冊一個 APN 帳號 :

# https://aws.amazon.com/tw/training

按 "開始使用" 鈕 :

按 "LET'S GET STARTED" 鈕 :

選右邊 via APN Partner Central 的 "SIGN IN" 鈕 :

按底下的 "Create Your APN Partner Central Account" 鈕 :

填寫個人資訊 (有打 * 的欄位必填), 注意名字最好與護照英文姓名拼字一樣, Business Email 要填公司郵件信箱, 填好後按底下的 "Submit" :

到公司 email 信箱收確認信, 按其中的確認連結 :

確認後會開啟密碼設定網頁, 密碼最短 8 個字元, 至少含一個數字與字母, 按左邊的 "Set Password" 鈕 :

最後設定三個安全問題 (三個都要設) 後按 "Save" 鈕即可 :

AWS 會寄 email 通知已註冊成功 :

可從 APN Portal 網址登入 :

# https://partnercentral.awspartner.com

點 APN Partner Training 底下的 "Learn more" 進入學習網頁 :

進入時會顯示你的 profile, 填寫 Language, Country, 與 Time Zone 後按 "Save" 鈕 :

點上面的 "Learning Library" 即進入學習網站 :

可點左下角的 "Language" 篩選語言, 或者用左上角的搜尋框搜尋課程名稱.

也可以從下列網址進入 :

# https://www.aws.training

初級認證必須完成下面三項課程 :

1. AWS Business Professional (Digital : 編號 30254)
2. AWS Technical Professional (Digital : 編號 45423)
3. AWS Cloud Economics (Digital : 編號 35616)

課程目標主要是讓學習者了解基礎的銷售與核心服務.

momo 買旗標書兩本 + 威剛 64GB SD 卡

今天在手機看到一本 1 月底剛出版的旗標新書 :

# 機器學習的數學基礎：AI、深度學習打底必讀 $580

旗標的書在明儀 VIP 只打 85 折, 在 momo 活動打 79 折, 因為打折後不滿 500 元要加 75 元運費, 所以我又找到一本也是旗標的 GCP 新書 :

# 機器學習開發神器！Google Cloud Platform 雲端開發應用超入門 $490

原價 580+490=1070, 打 79 折是 846, 滿 500 折 50 為 797, 加購 64GB SD 卡 199 共 996 元. 不計 SD 卡的話, 書大約打 75 折, 很划算.

SD 卡是買來給 Jetson Nano 用的, 因為 Nvidia 官方文件使用 64GB 示範, 我可能會用它來架站. 我前幾天有問建國路店家, 創見 64GB 要 240 元, 威剛 199 算便宜了. 日本人寫的書都整理得不錯, 但本周要開始準備 AWS 認證了, 考過後再來玩 GCP 吧!

AWS 的入門好書

最近要開始準備 AWS 基礎級認證 (foundation practitioners), 但 AWS 的中文書實在很少, 是因為認證考試都用英文的緣故嗎? 我只找到前陣子在 momo 買的 "AWS實戰：快速開發、建立和部署應用程式" 這本而已, 參考 :

# momo 買書兩本 (AWS & Google AI)

不過 AWS 原文書卻出奇的多. 在網路書店找到下面幾本還不錯的書 :

1. Amazon Web Services in Action, 2nd Edition (Manning, 2018)

Source : 天瓏

此書的進度編排最適合初學者, 難怪會出第二版.


2. Learn Amazon Web Services in a Month of Lunches (Manning, 2017)

Source : 天瓏

在官網試閱此書, 覺得該書實作性很強, 每章結尾都有 Lab 作業.


3. AWS For Admins For Dummies (2016, For Dummies)

Source : 天瓏

此書保持懶人包 (for dummies) 系列一貫的簡單入門款特色.

Lead2pass 測試網站 (AWS 認證用)

今天同事傳給我 AWS 認證用的測試網站 :

# https://www.lead2pass.com/
# Lead2pass 已有帳號登入

聽說 Foundation practitioners 只要認真做練習過關不難.

momo 買書兩本 (AWS & Google AI)

今天在 Yahoo 看到 momo 促銷廣告, 想起上回缺貨的 AWS 書, 查詢已可購買, 立馬下訂買了 :

# AWS實戰：快速開發、建立和部署應用程式 $580 ->
# 用Google玩人工智慧實驗 $320 ->

兩書原價合計 900 元, 使用折價券折扣後總價 594 元, 相當於 66 折.

關於 AWS 認證

昨天被上面指派明年參加 AWS 認證, 考試分四級 :

1. 基礎級 : Practitioner

2. 助理級 : Associate

3. 專業級 : Professinal

4. 專家級 : Specialty

大數據分析, 機器學習應用, 以及 Alexa 語音應用都屬於專家級證照, 參考 :

# AWS Certification
# 準備 AWS Certification 考試

下面這幾篇前人心得可參考 :

# AWS Certified Solutions Architect - Associate 準備心得
# 如何準備AWS Certified Solutions Architect - Associate (SAA)
# AWS Certified Solutions Architect - Associate 準備心得
# 考取 AWS Cloud Practioner 證照的秘訣與最新資訊
# AWS Certified Developer - Associate 認證考試心得分享
# AWS Solution Architect Associate 2018考試心得
# SAA – 96%分通过AWS Solutions Architect Associate考试
# 兩年取得 AWS All-5 + BigData 認證的學習心得
# How to get all AWS Certifications in Asia?
# The most efficient way to study for AWS certifications - Professional
# My Path to 5/5

AWS 學習筆記 (一)

最近因為公司有在介紹 Amazon 雲端服務 AWS, 所以昨晚去明儀找看看有沒有中文書, 結果竟然只找到一本, 而且是我沒興趣的網路滲透測試課題. 奇怪, AWS 的原文書在網路書店一大堆, 為何連一本翻譯書都沒有? 我想應該是台灣企業入雲需要低, 原因也是因為產業根本還沒轉型, 當然書商也不可能出版翻譯書吧!

十年前我開始用 Google 雲端, 那時 Google App Engine (GAS) 讓我非常驚豔, 原來架設網站根本不需要 Bottom-Up, 開發者只要專注在服務層面的商業邏輯, 底層的那些軟硬體細節就全部交給雲端搞定, 開發者只要了解如何在 Dashboard 網頁佈署自己的應用即可.

後來因為 GAS 的限制較多 (Crontab), Appfog 又改為收取昂貴費用, 我又轉回傳統的 LAMP 虛擬主機. 這次重新對雲端產生興趣, 是因為覺得這部分在台灣發展空間很大, 特別是 AWS 有提供 Python 開發套件, 對於在 AWS 上開發 ML 應用很方便, 參考 :

# 適用於 Python 的 AWS 開發套件 (Boto3)

亞馬遜於 2006 年將其內部營運使用的運算環境商用, 現在已是雲端計算市場的佼佼者. 這兩天找了一些資料來學習, 以下是初步的筆記, 但只是草稿而已, 主要是在了解其服務架構時遇到的一些術語註解. 大略來說, 雲端主要由下列五項構成 :

1. Network
2. Server
3. Applications
4. Database
5. Storage

AWS 網路基礎架構參考 :

# https://infrastructure.aws/

Edge Location
    |__ Region (以城市命名)
              |__ Availability Zones (AZ, 網路/電力等獨立)
                         |__ Data Centers

AWS 提供三種管理工具來佈署雲端應用服務 :

1. Console (Web GUI, 也有 App 版)
2. SDK ( Java/Python/Node.js 等多語言支援)
3. CLI (Bash 或 PowerShell)

AWS Core Service :

1. Networking
2. Computing
3. Storage

VPC (Virtual Private Cloud) :
在相同或不同 AZ 內定義之邏輯上獨立的網路環境 (A logically isolated section of AWS region), 可指定 IP 範圍與多個 private subnet (內網) 或 public subnet (需指派一個 IGW 以連上 Internet).

Subnet (類似 VLAN 概念) :
    |__ public subnet (可連 Internet, 開啟 80/443 port for 0.0.0.0/0)
    |__ private subnet (僅開啟特定 IP 來源或 SG-ID以 port 22 存取 )

Security group (SG) :
VPC 內部以 instance (即 VM) 為基礎的單向 stateful virtual firewall (會自動建立 return session), 可控制 inbound 與 outbound 訊務.

EC2 : Elastic Compute Cloud (虛擬主機)
提供安全可調整之運算能力, 可根據使用場景 (use case, 即計算需求) 來挑選擇適當的實體類型 (instance types, 即 CPU + Memory 等硬體資源組合).

AMI : Amazon Machine Image
已經調校打包好的作業系統與運算環境映像檔, 可挑選後佈署到 EC2 的 instance 上, 也可從市場  (Marketplace) 與社群 (Community) 取得分享之映像檔, 或從已有環境自行建立 (MyAMI), 但要注意資安問題.

AWS 提供多種資料儲存選項, 主要有三 :

1. Block storage : EBS
2. Object storage : S3
3. Archive storage : Gracier

說明如下 :

EBS :
可以掛載到 EC2 instance 上可調整的大量儲存空間 (Block Storage), 其實就是網路硬碟.

S3 :
區域性分散的物件儲存空間 (透過 Web API 呼叫), 資料是以物件形式儲存 (單一物件最大 5TB), 可以將 Javascript, HTML, 影像等丟進 S3 的 Bucket (即物件容器), 每一個物件都有對應的 URL 連結, 因此可經由 Internet 存取, 也可以用 static content 方式達成 serverless access (不需要 EC2), 還可設定 Requester pays (請求者付費).

Gracier :
低成本的 Archive 檔案封存系統, 適合用來儲存較不常用需長期保存的資料, 例如健檢資料或多媒體數位典藏影像等, 資料來源為 S3 (可透過生命週期管理丟過去), 資料取得時間較久 (約 3~5 小時), 若要加速取回需另付 retrieval fee (加速取得費).

參考 :

# AWS 10 分鐘教學 (AWS 產品實作訓練)
# 使用 EC2 啟動 Linux 虛擬機器
# 雲端平台怎麼選？比較三大雲端供應商 GCP 與 AWS 與 Azure
# 適用於 PHP 的 AWS 開發套件
# 在 AWS Elastic Beanstalk 上佈署 PHP 應用
# 使用 AWS CodeStar 部署 PHP 專案

簡單入門，發展適度