Amazon VPC
Virtual Private Cloud & Networking

A VPC creates an isolated virtual network environment in the AWS cloud. AWS resources and services operate inside of the VPC network to provide the client cloud services.

Select activities performed by Ocean Vista:

• VPC IP address range selection
• Subnet creation.
• Route table creation and update.
• Establishing Internet connectivity.
• Network/subnet security activities.
• Virtual Private Network (VPN) design.
• VPC peering.

Amazon IAM
Identity & Access Management

IAM provides fine-grained access control across all of the customers AWS account . With IAM, you can specify who can access which services and resources and under which conditions. With IAM policies, you manage permissions to your workforce and systems to ensure least-privilege permissions.

Select activities performed by Ocean Vista:

• Setting up users.
• Creating groups.
• Developing and assigning policies.
• Establishing roles.
• Ensuring security.
• Creating access keys.
• Security audit functions.

Amazon EC2
Elastic Compute Cloud

EC2 provides scalable computing capacity in the AWS Cloud. EC2 eliminates the need to invest in hardware upfront, so applications can be develop and deployed faster. Launch as many or as few EC2 virtual servers as needed. EC2 server count can automatically expand and contract to instantly handle changes in increasing loads or spikes in popularity, thereby reducing the difficult task of forecasting traffic.

Select activities performed by Ocean Vista:

• Select instance type.
• Amazon Machine Image (AMI) selection.
• Create or select an existing security group.
• Create a key pair.
• Configure instance details.
• Configure status checks.
• Determine termination policy.
• Load user data.
• Handle windows instance considerations.
• Determine tenancy.
• Select EBS and EFS storage options.
• Configure Auto Scaling Group (ASG) and Elastic Load Balancer (ELB).

Amazon S3
Simple Storage Service

S3 is an object storage service that offers infinite scaling, data availability, security, and performance. It is used to store and protect any amount of data for a range of use cases, such as data lakes, websites, mobile applications, backup and restore, archive, enterprise applications, IoT devices, and big data analytics. Management features enable the optimization, organization, and controlled data access to meet specific business and compliance requirements.

Select activities performed by Ocean Vista:

• Create bucket(s).
• Storage class configuration and intelligent-tiering strategy.
• Develop access management strategy and bucket policies.
• Implement object lifecycle policy.
• Upload, download, replicate and delete objects.
• Undertake server access logging, audit and analysis.
• Setup event triggers for Lambda, SNS and SQS.
• Create S3 hosted static website.

Amazon RDS
Relational Database Service

RDS is a managed SQL database service provided by Amazon Web Services (AWS). Amazon RDS supports an array of database engines to store and organize data. It also helps with relational database management tasks, such as data migration, backup, recovery and patching.

Select activities performed by Ocean Vista:

• Create database using Postgres, MySQL, Oracle, MS SQL Server or Aurora engines(s).
• Create read replicas.
• Implement disaster recovery using multi-AZ.
• Select instance class, memory, block storage and automatic scaling parameters.
• Implement encryption, security groups, roles and authentication.
• Setup backups, advanced monitoring, audit logs and deletion protection.

Amazon ECS
Elastic Container Service

Amazon Elastic Container Service (Amazon ECS) is a highly scalable, fast, container management service that makes it easy to run, stop, and manage Docker containers on a cluster of Amazon EC2 instances. A container is a package of code and all its dependencies so the application runs quickly and reliably from one computing environment to another.

Select activities performed by Ocean Vista:

• Installing the latest Docker engine package.
• Starting the Docker service.
• Creating creating Docker files and building Docker images.
• Push Docker images into the Elastic Registry Service (ECR)
• Running and testing the containerized application.