You're reading from AWS Certified Cloud Practitioner Exam Guide Build your cloud computing knowledge and build your skills as an AWS Certified Cloud Practitioner (CLF-C01)

Product type Paperback

Published in Jan 2022

Publisher Packt

ISBN-13 9781801075930

Length 630 pages

Edition 1st Edition

Tools

AWS

Concepts

Cloud Computing

Author (1):

Rajesh Daswani

View More author details

Table of Contents (23) Chapters

Preface

1. Section 1: Cloud Concepts

2. Chapter 1: What Is Cloud Computing? FREE CHAPTER

3. Chapter 2: Introduction to AWS and the Global Infrastructure

4. Chapter 3: Exploring AWS Accounts, Multi-Account Strategy, and AWS Organizations

5. Section 2: AWS Technologies

6. Chapter 4: Identity and Access Management

7. Chapter 5: Amazon Simple Storage Service (S3)

8. Chapter 6: AWS Networking Services – VPCs, Route53, and CloudFront

9. Chapter 7: AWS Compute Services

10. Chapter 8: AWS Database Services

11. Chapter 9: High Availability and Elasticity on AWS

12. Chapter 10: Application Integration Services

13. Chapter 11: Analytics on AWS

14. Chapter 12: Automation and Deployment on AWS

15. Chapter 13: Management and Governance on AWS

16. Section 3: AWS Security

17. Chapter 14: Implementing Security in AWS

18. Section 4: Billing and Pricing

19. Chapter 15: Billing and Pricing

20. Chapter 16: Mock Tests

21. Answers

22. Other Books You May Enjoy

Securing your VPC with bastion hosts

The use of bastion hosts (or jump boxes) is used to provide secure access to EC2 instances located in the private and public subnets of your virtual private cloud (VPC). These bastion hosts (you can have one or multiple hosts deployed for redundancy) can be used as management servers and are designed to allow you to remotely connect to them via SSH or RDP protocols. Once you have established connectivity to your bastion hosts, you can then log onto backend EC2 instances acting as web or application servers.

Bastion hosts are EC2 instances that do not host any unnecessary applications, other than those required to allow connections to backend EC2 instances. These servers are hardened and secured to reduce attack surfaces and thus minimize the chances of penetration. However, you still need to manage these instances as you would any other application or web server. The onus is on you to ensure that the EC2 instances are highly secured, patched...