AWS Architecture for Amazon Associates
AWS Fundamentals
The Global Reach of AWS
Amazon Web Services (AWS) isn't just a single massive data center. It's a vast, global network of them. To understand AWS, you first need to understand its physical footprint. This infrastructure is designed for high availability and low latency, meaning your applications can be both reliable and fast for users anywhere in the world.
The foundation of this network is built on two key concepts: Regions and Availability Zones.
- Region: A physical location in the world where AWS has multiple data centers. Examples include North Virginia, London, and Tokyo.
- Availability Zone (AZ): A cluster of one or more data centers within a Region. Each AZ is isolated from the others with its own power, cooling, and networking to prevent a single point of failure.
Think of a Region as a major city. Within that city, AWS has several separate, independent facilities (the Availability Zones). If one facility has a problem, like a power outage, the others keep running without interruption. By deploying applications across multiple AZs in a single region, you build in resilience from the start.
Core Building Blocks
With a global infrastructure in place, you can start using AWS services. While there are hundreds of services, most solutions are built on a handful of core ones. Let's look at three of the most fundamental services for compute, storage, and databases.
EC2
noun
Stands for Elastic Compute Cloud. It provides scalable virtual servers in the cloud, known as instances. It's like renting a computer that you can access over the internet.
You use EC2 instances to run applications, host websites, process data, or perform any task you'd normally use a physical server for. The "elastic" part means you can easily increase or decrease the number of servers you're using based on demand, paying only for what you use.
S3
noun
Stands for Simple Storage Service. It's an object storage service that allows you to store and retrieve any amount of data, from anywhere. Think of it as an infinitely large hard drive for the internet.
Unlike a traditional file system, S3 stores data as objects within containers called "buckets." It's incredibly durable and is commonly used for storing everything from website images and videos to application backups and large datasets for analytics.
RDS
noun
Stands for Relational Database Service. It's a managed service that makes it easy to set up, operate, and scale a relational database in the cloud.
While you could install a database like MySQL or PostgreSQL on an EC2 instance yourself, RDS handles tedious tasks like patching, backups, and scaling for you. This frees you up to focus on your application instead of database administration. It supports several popular database engines.
Sharing the Responsibility
When you use a cloud provider like AWS, who is responsible for keeping everything secure? The answer is both of you. This is known as the Shared Responsibility Model.
AWS is responsible for security of the cloud. You are responsible for security in the cloud.
This means AWS manages and secures the physical infrastructure that runs all of its services. They protect the data centers, the hardware, the networking, and the software that powers the cloud itself.
Your responsibility depends on the services you use. It includes things like:
- Managing who has access to your AWS account and resources.
- Encrypting your data.
- Configuring security groups and network rules.
- Patching the operating systems on your EC2 instances.
Understanding these foundational pieces—the global network, the core services, and how security is managed—is the first step to building effectively on AWS.