Lab: Introduction to AWS IAM

Note: This blog is for you to make your life easier. 

Don't make your life complicated, just enjoy the blog. ^_^

This is my first time to create Blog. Please pardon my simplicity of my own blog and look for the content. Enjoy reading! ^_^

What Is IAM?

AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. You use IAM to control who is authenticated (signed in) and authorized (has permissions) to use resources. 

(https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html)

After creating account for AWS it will begin with single sign-in identity which is completed to access all AWS services and resources in the account. The identity you created called AWS account which is primarily your root user and it is used for your everyday tasks, including the administrative account. When it comes to the best practices of using the root user only it is advisable to create your first IAM user then securely lock away the root and use them to perform only a management tasks with few account.

Watch the video for your reference:

Activity: Cost analysis

Note: This blog is for you to make your life easier. 

Don't make your life complicated, just enjoy the blog. ^_^
This is my first time to create Blog. Please pardon my simplicity of my own blog and look for the content. Enjoy reading! ^_^

In this blog I am currently using Simple Monthly Calculator to estimate the cost of the customer's usage.

Customers needed better ways to model their applications and estimate their costs. The flexible nature of on-demand scalable computing allows you pick and choose the services you like and only pay for those.

references: https://aws.amazon.com/blogs/aws/the-new-aws-simple-monthly-calculator/

With this scenario: the user is currently at US West (Oregon) Region and using Web Application with an Amazon RDS hosted database.

Here are the details below:

Service	Requirements
Amazon Elastic Compute Cloud  (Amazon EC2)	Two Linux t3.2xlarge instances  20 hours per day usage 1-Year Reserved billing with no upfront costs
Amazon Simple Storage Service  (Amazon S3)	100 GB Standard storage  10,000 PUT, COPY, POST, or LIST requests  5,000 GET, SELECT, and other requests 1 GB data returned by S3 Select 10 GB data scanned by S3 Select Amazon S3 data is replicated to US East (Ohio) to S3 Standard storage
Elastic Load Balancing	Three Application Load Balancers  Average of 50 connections/second per Application Load Balancer Average connection time is 60 seconds Average of 100 requests per second for each Application Load Balancer Data processed per Application Load Balancer for EC2 instances with IP address as targets is 100 GB/month The average number of rule evaluations per request is 10

Amazon Route 53	Five hosted zones, not using traffic flow 10 million standard queries per month 10,000 basic Domain Name System (DNS) health checks per month within AWS 20,000 basic DNS health checks per month outside of AWS 10 elastic network interfaces Average of 2 million resolver queries per month
Amazon Relational Database  Service (Amazon RDS)	Two RDS db.r3.8xlage standard instances that run MySQL   100 GB of General Purpose storage and no Provisioned IOPS 30 GB of data transferred out per month and 5 GB of data transferred in
AWS Support	Business Support

Total amount will be(Estimated amount): $24,553.72

2. Lab Configure OpenStack Network Routing

Configure Network Routing in OpenStack

Note: This blog is for you to make your life easier. 

Don't make your life complicated, just enjoy the blog. ^_^
This is my first time to create Blog. Please pardon my simplicity of my own blog and look for the content. Enjoy reading! ^_^

In this blog I will configure two networks and create a router to allow communication between the networks.

Required Software

OpenStack installed in VirtualBox
Click the link for your references: 
OpenStack installation in VirtualBox


OpenStack Networking allows you to create and manage network objects, such as networks, subnets, and ports, which other OpenStack services can use. Plug-ins can be implemented to accommodate different networking equipment and software, providing flexibility to OpenStack architecture and deployment.
references: https://docs.openstack.org/neutron/rocky/admin/intro-os-networking.html

The first step you need to do is to create networks.

Browse the network section you created in the web interface.

http://[your IP Address]/dashboard/project/networks/

This should be the IP address of the server on the host-only network.

Create a Network named GREEN

Create a GREEN_SN subnet with the network address 192.168.0.0/24

Create a BLUE network and BLUE_SN subnet with the network address 192.168.1.0/24

Now, create Instances

Browse to the instance section of the web interface
http://[your IP Address]/dashboard/project/instances/

Launch 2 instances with the name GREEN

Select the Source*

Select the source cirros-0.4.0-x86_64-disk
Set Create New Volume to No

Select the Flavor*

Select the flavour m1.nano

Select the GREEN network and launch the instances

Repeat with 1 instance in the BLUE network

Now, browse the GREEN_1 console and log-in.
Note: the console take some time.

Ping GREEN_2 you should get a response

Ping BLUE and you should not get no response

Browse the Network Topology section and view the Graph
copy & paste it to your URL for easy access: 
http://put your IP Address/dashboard/project/routers/

Create a Router

copy & paste it to your URL for easy access: 

http://put your IP Address/dashboard/project/routers/

Create ROUTER_1

Edit the ROUTER_1 and ADD both GREEN and BLUE 

network interfaces. 

Then repeat it to GREEN network interfaces.

Return to the GREEN_1 instance console

 and ping BLUE.

You should ping and connect.

1. Lab Install OpenStack Private Cloud

Introduction to Cloud Services

Note: This blog is for you to make your life easier. 

Don't make your life complicated, just enjoy the blog. ^_^
This is my first time to create Blog. Please pardon my simplicity of my own blog and look for the content. Enjoy reading! ^_^

The first thing I did is to install the OpenStack.
Required software are listed below:

-> VirtualBox 

• https://www.virtualbox.org

-> Ubuntu 

• https://ubuntu.com

-> OpenStack

• https://www.openstack.org

After downloading, I created Host Only Network. Here are the details that allows you to communicate between the host and the guest:

1. Create a Host-Only adapter

2. Configure the adapter manually

3. Enable the DHCP

4. Configure DHCP with an address range starting with the IP of OpenStack

When all of the things above are created you can now install and create the a new Virtual Box Machine. 

Name:              OpenStack

Type:                Linux

Version:            Ubuntu (64bit)

Memory Size:   4096 MB

With the above mentioned, the name should be OpenStack and the type of the machine will be Linux. The Ubuntu version is 64 bit. Lastly, the size of the memory should be 4096MB. (see below for your reference)

The next thing you need to do is to 

• edit the system settings 
• check Enable Nested VT-x/AMD-v from System > Processor

• but if you have Intel Processor execute the following command "C:\Program Files\Oracle\VirtualBox\VBoxManage" modifyvm OpenStack --nested- hw-virt on

Edit the system settings and check Enable Nested VT-x/AMD-v from System > Processor as marked in the screenshot below. If you have an Intel processor execute the following command

After that, edit the storage settings and select the ISO image for the optical drive.

When it comes to the network Configure the                     Also, Configure the Network Adapter 2 to 

Network Adapter 1 to attached to NAT                           attached to the Host-only Adapter

       

When running the virtual machine you might get error because of disabled network adapter, the best thing to do is to enable the network adapter.

--------------------------------------------------------------------------------------------------------------------------

When things go smoothly, you can now Install Ubuntu

Before you start you should take note of the IP Address of the server during the installation.

Upon installation there should be two networks.

It is more easier for you because the installer can guide you through partitioning an entire disk or if you want to make it hard for you, you have your option to do it manually and email me if problem arise. ^_^

--------------------------------------------------------------------------------------------------------------------------

Now it is time for you to UPDATE UBUNTU...

"copy paste the codes to make it more easier for you"

Using the VirtualBox change the root user and update the system

Follow the codes: sudo -i

                             apt update -y && apt upgrade -y

Install the DevStack instructions can be viewed here: https://docs.openstack.org/devstack/latest/

Add Stack User
Note: DevStack should be run as a non-root user with sudo enabled 
Follow the codes: sudo useradd -s /bin/bash -d /opt/stack -m stack
                              echo "stack ALL=(ALL) NOPASSWD: ALL" | sudo tee /etc/sudoers.d/stack
                              sudo su stack
                              cd ~

I successfully added the Stack User using the non root. As you can see I am on "stack@aileen" meaning I added up the Stack. I've also tried it using root and definitely it won't work. Just to show what will happened. ^_^

Clone DevStack

Follow the codes: git clone https://opendev.org/openstack/devstack
                              cd devstack

With these, I was actually planing to check my history and I just figured out the code must be
"history" only without any hyphen or any character before and after. ^_^ But I successfully clone the DevStack.

Copy local.conf
Note: Copy the default settings from the sample configuration.
Follow the codes: cp samples/local.conf local.conf
                              nano local.conf

I can't proceed with copying of local.conf. I had encountered error. 

So I repeated the commands again then Bingo! Got it! ^_^ 

Edit local.conf
Note: You must edit the settings first, update the password and uncomment the HOST_IP and add the IP Address of the servers IP on the Host-Only network then save.
Follow the codes: ADMIN_PASSWORD=yoursecret                                   "you can choose what you want"
                                     DATABASE_PASSWORD=$ADMIN_PASSWORD     "you can choose what you want"
                              RABBIT_PASSWORD=$ADMIN_PASSWORD           "you can choose what you want"
                              SERVICE_PASSWORD=$ADMIN_PASSWORD         "you can choose what you want"
                              HOST_IP=<HOST_ADAPTER_IP>

Now start the installation
Note: Installing the script depends on the speed of your internet connection and it make takes time for 30-40 minutes.

Follow the codes: ./stack.sh

When the script successfully completed, optionally you can configure your OpenStack with a Static of IP Address.

Follow the codes: sudo nano /etc/netplan/50-cloud-init.yaml