đŸ•šī¸
Ghoulsec Vault
Website Toolbase
  • Welcome !
  • đŸ—ƒī¸Exam Prep Notes
    • 📔CEH V13 (Master Edition)
      • Module 02: Footprinting and Reconnaissance
      • Module 03: Scanning Networks
      • Module 04: Enumeration
      • Module 05: Vulnerability Analysis
      • Module 06: System Hacking
      • Module 07: Malware Threats
      • Module 08: Sniffing
      • Module 09 : Social Engineering
      • Module 10: Denial of Service
      • Module 11: Session Hijacking
      • Module 12: Evading IDS, Firewalls , Honeypots
      • Module 13: Hacking web servers
      • Module 14: Hacking Web Applications
      • Module 15:SQL Injection
      • Module 16: Wireless Attacks
      • Module 17: Hacking Mobile Platforms
      • Module 18: IoT & OT Hacking
      • Module 19 : Cloud Computing
      • Module 20 : Cryptography
    • 📘ISC2 -Certified in Cyber Security
      • Chapter -1 Security Principals
      • Chapter -2 Disaster Recovery,Business Continuity & Incident Response
      • Chapter -3 Access Control Concepts
      • Chapter -4 Network Security
      • Chapter -5 Security Operations
    • 📗AZ - 900
      • Basics of Cloud Computing
        • Economic of Scale
        • CapEx & OpEx
        • Consumption based model
        • Cloud Deployment Models
        • Shared Responsibility Model
        • Data centers, Regions & Availability Zones & Geographyies in Azure
        • Resources & Resource Group
        • Azure Access Tools
        • Azure Service Lifecycle
        • Azure SLAs
        • Azure Cloud Adoption Framework
      • Azure Services
        • Azure Computing Services
        • Azure Networking Services
        • Azure Storage Services
        • Azure Database Service
        • Azure Marketplace
        • Big Data & Azure
        • Azure Serverless Computing
        • IoT & Azure
        • Other Azure Services
        • Azure Resource Locks & Resource Tags
        • Azure Security Services
          • Security Groups
          • Routing Tables
          • Azure Firewall
          • Azure DDOS Protection
          • Azure Identity & Access Management (Azure AD)
          • Azure RBAC
          • Azure Security Center
          • Azure Key Vault
      • Azure policies & Blueprints
      • Azure Cost Management
      • Azure Core Tenents
    • 📗SC - 900
      • Zero Trust Model
      • Shared Responsibility Model
      • Defense in Depth
      • Security Controls
      • CIA Triad
      • Encryption / Hashing / Signing
      • Microsoft Security & Compliance Principals
      • Common Identity Attacks
      • Microsoft Identity as Primary Security Perimeter
      • Modern Authentication with Azure AD
      • Azure AD Identity Types
      • Azure External Identities
      • Hybrid Identities
      • Authentication Methods & Password Protection
      • Conditional Access
      • Azure AD Roles & RBAC
      • Governance in Azure AD
      • Azure Identity Protection
      • Azure NSG, DDOS, Firewall
      • Azure Bastion & Keyvault
      • Azure Encryption
      • Azure CSPM
      • Azure Security Center
      • Azure Defender
        • Microsoft O365 Defender
        • Azure Sentinel
      • Microsoft Cloud App Security
      • Microsoft Intune
      • Microsoft Complaince Manager
      • Information Protection
      • Microsoft insider risk capabilities
    • 📔AWS Cloud Practitioner
      • Cloud Deployment
        • AWS Global Infrastructure
      • AWS Cloud Essentials
        • AWS SNS
          • AWS SQS
      • AWS Compute & Container Services
        • AWS EC2
          • Elasticity & Agility
        • AWS Serverless Computing
        • AWS Container Services
        • AWS Beanstalk
        • AWS Load Balancing
      • AWS Storage & Databases
      • AWS Networking
      • AWS Security
        • AWS Organisation
        • AWS Compliance
        • AWS DDOS
        • Additional Security Services
      • AWS Monitoring & Analytics
        • Other Analytics Services
      • AWS Pricing & Support
      • AWS Migration & Innovation
        • Migration Statergies
        • AWS Snow Family
        • AWS Transfer Family
        • Innovation on AWS
      • AWS Well Architecture Framework
      • Other AWS Services
  • 🧑‍đŸ’ģCyber Security Base
    • Ghoul's Den
    • Cheatsheets
    • SSL Handbook
      • Installing OpenSSL
      • Encrypting Web Servers using SSL
      • Compiling .pfx file using openssl
      • De-compiling .pfx file
      • Zimbra Mail Server SSL renew
      • SSL Certificates
    • â˜ī¸Cloud Security
      • Amazon Web Services (AWS)
        • AWS - IAM & Policy Management
        • AWS Organization
        • AWS - Roles (Assume Role)
        • AWS - EC2 (Elastic Computing)
        • AWS - VPC
        • AWS - Bastion Host
        • AWS Application Load Balancer
        • AWS Auto Scaling Group
        • AWS WAF
        • AWS - VPC Peering
        • AWS Transit Gateway
        • AWS NAT Gateway
        • AWS - Route 53
        • AWS Certificates Manager
        • AWS Network Load Balancer (NLB)
    • đŸ•¸ī¸Network Security
      • Firewalls
        • Sophos - Security Suite
          • Sophos Firewalls
      • VPN
        • VPNs
          • Wireguard Tunneling
          • StrongSwan Gateway VPN Server on Ubuntu
      • IP Address and IP Subnetting
      • Basic to Advance Networking Materials
    • 🧑‍đŸ’ģVAPT
      • Sample Report Templete
      • OWASP
        • OWASP Web Application Security & WebGoat
      • Web Application testing checklist
        • Client Side Penetration Testing
          • Clickjacking
          • Websockets
          • CSRF
          • XSS Filters
        • Server Side Penetration Testing
        • Advanced Web Application Pentesting
          • OAuth
          • JWT Injection
          • Server Side Templete Injection
    • â˜„ī¸GRC
      • ISMS AUDIT PLAN
      • CIS Compliance Windows
    • 🔍Forensic
      • Forensic Tools
      • EMAIL Forensics
      • File header forensics
    • Trend Micro
      • Deep Security
        • Installation & Prerequisite
          • Microsoft SQL server 2022
          • Postgres 16 Core
          • Installation
    • Practical Malware Analysis & API Threats
  • đŸ•šī¸Server are fun !
    • Securing Linux
      • Securing SSH
      • Sudoers
      • UFW (Uncomplicated FW)
      • Unattended Upgrades
      • Password Complexiety
      • Auditing Linux
      • Samba - SMB
      • NFS - Network File System
      • FTP
      • AIDE
    • Servers
      • Linux Sever
        • OpenLDAP Server Setup
          • ldap-account-manager
          • Securing OpenLDAP
          • OpenLDAP client setup
          • Checking LDAP setup
        • Users & Groups
        • Password Policy
        • File & File Permissions
        • Automatic Updates
        • Adding GUI to Ubuntu Server
        • DNS Server
        • NTP Server
      • Windows Sever
        • Deep dive into Windows Server
        • Windows server Installation
        • Disable IPv6
        • Disable Server Manager on startup
        • Promoting OS to AD server
        • AD DNS
        • AD DHCP
        • AD Activation
        • AD Users & Groups
        • AD FileServer
        • Adding Users into AD
        • Bulk Importing users into Domain
        • Windows AD Resources
        • Group Policy Editor
          • Creating First Policy
          • Restricting CMD & Powershell
          • Password Policies
          • Audit Policies
          • Log Retention Policy
          • Windows Defender Firewall
          • Patch Management & Window Updates
        • Setting Up local accounts for windows hosts
    • Hacking Systems
      • Linux Systems
        • Battery Charge Threshold (Linux)
        • Metasploitable OS Complete Solved
      • Tricking Windows
        • Bitlocker & Time based policy bypass
    • Monitoring HeartBeats
    • RAID Technology
    • Managing Partitions
      • Parted
      • Fdisk
      • LVM
        • Re-claiming unused disk space
        • Adding physical volume into VG
        • Removing physical volume from VG
      • SWAP Memory
    • Virtualization
      • Proxmox
        • Proxmox VE Installation
        • Default Storage Expansion
        • Proxmox Network Link Aggegration
        • NAT Interface Configuration
        • Importing disk into proxmox
        • Creating an LVM Thin Pool
        • Proxmox IAM
  • đŸ™â€â™‚ī¸Dan the AI Expert
    • Ollama Ollama ...
      • Ollama
        • Ollama models
        • Open Web UI & Ollama Integration
    • Microsoft Presentation using AI
  • đŸ›Ąī¸Security Operations
    • Wazuh - Open Source XDR. Open Source SIEM.
      • Components
      • Deployment Methods
      • Installation
        • Single Node Installation
          • Wazuh Indexer Installation
          • Wazuh Server Installation
          • Wazuh Dashboard Installation
          • Single node deployment with Script
        • Managing multiple Wazuh clusters with Cross-Cluster Search
          • Cluster Configuration
          • Set up Cross-Cluster Search
        • Upgrading Wazuh Central Components
        • Uninstalling Wazuh
      • Custom Decoder & Rules
        • Pfsense Decoders
        • Pfsense Rules
      • Security Operations Center Tools (Wazuh)
    • IRIS-DFIR / Case Management
    • Graylog & ElasticSearch
    • Zabbix NMS
      • Zabbix Installation
      • Zabbix Database Management
        • Zabbix Database backup
        • Zabbix Database restore
        • MySQL Replication (M-M)
        • MySQL Replication (M-W)
      • Zabbix Geomap Setup
      • Adding Hosts into Zabbix
      • Zabbix Hostgroups
      • Auto Registration Hosts Zabbix
      • Zabbix Globalscrips
      • Zabbix HA Cluster
      • Zabbix Proxy
      • Zabbix Notifications
      • Zabbix Maintainance
      • Zabbix User Management & Authentication
      • Zabbix Housekeeping
      • Scheduled Reporting
      • Service Monitoring using Zabbix
  • Git the master!!
    • Configuring git
    • Git Branches
    • Undoing changes
    • Git - Cheat sheet
    • My first git...
Powered by GitBook
On this page
  • AWS Elasticl Block Storage
  • AWS S3 Bucket
  • AWS Elastic File System
  • AWS RDS (Relational Database Service)
  • AWS Aurora
  • DynamoDB
  • AWS Redshift
  • AWS FSx
  • AWS Database Migration Service (DMS)
  • AWS Storage Gateways
  1. Exam Prep Notes
  2. AWS Cloud Practitioner

AWS Storage & Databases

PreviousAWS Load BalancingNextAWS Networking

Last updated 1 month ago

AWS Elasticl Block Storage

Amazon Elastic Block Store (EBS) is a scalable, high-performance block storage service designed for use with Amazon EC2 instances. It provides persistent, low-latency storage volumes that can be attached to and detached from EC2 instances as needed.

  • Persistance for EC2 (consistant after reboot)

  • snapshots for EBS volumes for backups

  • replicates the working like the physical HDDs & SSDs

  • Supports upto 16TB of single block storage

  • Can survive after reboot


AWS S3 Bucket

Amazon S3 is an object storage service that provides scalable, durable, and secure storage for data of any size or format. It is designed for high availability and offers industry-leading performance, making it a foundational service for storing and retrieving data in the cloud.

  • Store & retrieve unlimited amount of data

  • stores data into the buckets & follows the bucket lifecycle policy

  • versioning support

  • create ACLs

  • Supports various storage tiers

  • supports 5TB single object size

  • Highly durable (99.99999999999%)

S3 Storage Classes

Amazon S3 offers various storage classes designed to optimize costs based on data access frequency, durability, and latency requirements.


1. S3 Standard (General Purpose)

  • Use Case: Frequently accessed data.

  • Features:

    • 99.999999999% (11 9s) durability across multiple Availability Zones.

    • Low latency and high throughput.

    • Ideal for active datasets like website hosting, mobile apps, and gaming.


2. S3 Standard-IA (Infrequent Access)

  • Use Case: Data accessed less frequently but requiring rapid access when needed.

  • Features:

    • Lower storage cost compared to S3 Standard.

    • Retrieval fees apply for data access.

    • Suitable for backups or disaster recovery.


3. S3 One Zone-IA

  • Use Case: Infrequently accessed data that does not require high availability.

  • Features:

    • Stores data in a single Availability Zone, reducing costs further.

    • Ideal for non-critical, reproducible datasets.


4. S3 Intelligent-Tiering

  • Use Case: Data with unpredictable or changing access patterns.

  • Features:

    • Automatically moves data between access tiers based on usage patterns.

    • No retrieval fees; cost savings without performance trade-offs.


5. S3 Glacier Instant Retrieval

  • Use Case: Rarely accessed data requiring millisecond retrieval.

  • Features:

    • Ideal for long-term storage with occasional need for immediate access.

    • Low-cost storage with instant retrieval.


6. S3 Glacier Flexible Retrieval (formerly Glacier)

  • Use Case: Archival data with occasional access needs.

  • Features:

    • Retrieval options: expedited (minutes), standard (3–5 hours), and bulk (5–12 hours).

    • Cost-effective for archival workloads.


7. S3 Glacier Deep Archive

  • Use Case: Long-term data archiving with infrequent access.

  • Features:

    • Lowest-cost storage class in S3.

    • Retrieval time: standard (12 hours) or bulk (48 hours).

    • Suitable for regulatory compliance and long-term backups.


8. S3 on Outposts

  • Use Case: Local data storage for low-latency applications or compliance requirements.

  • Features:

    • Extends S3 capabilities to AWS Outposts (on-premises infrastructure).

    • Fully managed service providing consistent S3 APIs and functionality.


Each storage class is tailored to balance cost and performance for specific use cases, helping optimize your storage strategy in AWS.


Amazon EFS is a scalable and fully managed Network File System (NFS) designed for AWS cloud services. It provides shared file storage that can be accessed concurrently by multiple EC2 instances, containers, and on-premises servers, with seamless scalability and low-latency access.It is based on the linux file system.


Amazon RDS is a fully managed service for relational databases, making it easy to set up, operate, and scale databases in the cloud. It automates database administration tasks like provisioning, patching, backups, and scaling, freeing developers to focus on application development.


Supported Database Engines

  1. MySQL: Popular open-source database known for scalability and reliability.

  2. PostgreSQL: Advanced open-source database with robust features like JSON support and extensibility.

  3. Oracle: Enterprise-grade database for high-performance applications with advanced security.

  4. MariaDB: Community-developed fork of MySQL with enhanced features.

  5. Microsoft SQL Server: Designed for enterprise-level database solutions with tight integration into the Microsoft ecosystem.

  6. Amazon Aurora (MySQL and PostgreSQL-compatible): AWS-optimized relational database for high performance and availability.


Key Features of Amazon RDS

  1. Migration (Lift & Shift):

    • Simplifies migrating on-premises databases to AWS, maintaining data integrity and minimal downtime.

  2. Backup and Redundancy:

    • Offers automated backups, manual snapshots, and point-in-time recovery for data protection.

  3. Failover and Disaster Recovery (DR):

    • Provides high availability through Multi-AZ deployments, with automatic failover to a standby replica in case of primary instance failure.

  4. Managed Service:

    • Handles routine tasks like software patching, database monitoring, and maintenance, reducing administrative overhead.

  5. Performance Optimization:

    • Supports scaling compute and storage independently based on workload requirements.

  6. Security:

    • Includes encryption at rest and in transit, network isolation via VPC, and AWS IAM integration for fine-grained access control.

  7. Monitoring:

    • Integrated with Amazon CloudWatch for performance metrics, alarms, and logging.


Amazon Aurora

Amazon Aurora is a fully managed relational database service designed for the cloud, offering high performance and availability. It is compatible with MySQL and PostgreSQL, combining the simplicity of open-source databases with the enterprise-grade reliability of commercial databases.It supports upto 15 read replicas & 6 backup copies at a time.


Key Features of Amazon Aurora

  1. MySQL and PostgreSQL Compatibility:

    • Supports applications written for MySQL or PostgreSQL with minimal changes.

    • Leverages familiar tools, drivers, and ecosystem.

  2. Managed Service:

    • Automates tasks like provisioning, patching, backup, recovery, and scaling.

    • Frees developers to focus on application innovation instead of database maintenance.

  3. High Performance:

    • Up to 5x faster than standard MySQL databases and 3x faster than standard PostgreSQL databases.

    • Designed for low-latency, high-throughput workloads.

  4. Scalability:

    • Automatically scales storage up to 128 TB per database instance.

    • Supports read replicas for handling increased query loads.

  5. High Availability:

    • Automatically replicates data across multiple Availability Zones (AZs).

    • Provides continuous backups and point-in-time recovery.

  6. Security:

    • Data encryption at rest and in transit using AWS Key Management Service (KMS).

    • Integrated with Amazon VPC for network isolation.

  7. Global Database:

    • Allows replication across multiple regions for low-latency global applications.


AWS DynamoDB

Amazon DynamoDB is a fully managed, serverless NoSQL database service designed for high availability, scalability, and low-latency performance. It is ideal for applications requiring fast and flexible data storage.


Features

  1. Serverless architecture

  2. Multi-AZ redundancy

  3. Low-latency performance

  4. Supports key-value and document data models

  5. Auto-scaling for variable workloads

  6. Integrated with AWS services (e.g., Lambda, IAM)

  7. On-demand and provisioned capacity modes

  8. Advanced security with encryption

Amazon DynamoDB is perfect for real-time applications like gaming, IoT, and mobile backends.


AWS Redshift

Amazon Redshift is a fully managed, petabyte-scale data warehousing service designed for analyzing large volumes of structured and semi-structured data. It supports advanced analytics and big data solutions for operational excellence.


Features

  1. Handles large volumes of data

  2. Optimized for data warehousing

  3. Enables complex analytics and business intelligence

  4. Scales to petabyte levels

  5. Integrates with big data tools and AWS services


Other Databases on AWS

1. AWS DocumentDB

A fully managed document database service optimized for JSON-like workloads and MongoDB compatibility.

2. AWS Neptune

A fully managed graph database service designed for applications that work with highly connected datasets.

3. AWS Quantum Ledger Database (QLDB)

A fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log.

4. AWS ElastiCache

A fully managed in-memory caching service for accelerating application performance using Redis or Memcached.

5. AWS DynamoDB Accelerator (DAX)

An in-memory caching service for DynamoDB that significantly improves read performance for applications.


Amazon FSx is a managed service from AWS that provides fully managed file storage solutions optimized for specific workloads. It enables you to set up and run file systems in the cloud, tailored to your needs, with native support for industry-standard protocols and features. FSx is ideal for workloads that require high-performance, low-latency file storage, such as big data analytics, machine learning, media processing, backup and restore, and enterprise applications.

Key Variants of Amazon FSx

AWS offers multiple variants of FSx to support different workloads and use cases:

  1. Amazon FSx for Windows File Server

    • Provides a native Microsoft Windows file system.

    • Supports the SMB protocol.

    • Integrates seamlessly with Windows-based applications.

    • Features include Active Directory integration, DFS namespaces, and file system backups.

  2. Amazon FSx for Lustre

    • A high-performance file system designed for compute-intensive workloads.

    • Fully compatible with Lustre, a popular open-source file system for high-performance computing (HPC).

    • Integrated with Amazon S3 for seamless data transfer between Lustre and S3 buckets.

  3. Amazon FSx for NetApp ONTAP

    • Provides fully managed NetApp ONTAP file systems.

    • Supports NFS, SMB, and iSCSI protocols.

    • Offers enterprise features like data deduplication, compression, and SnapMirror replication.

  4. Amazon FSx for OpenZFS

    • Delivers a managed version of the OpenZFS file system.

    • Provides ZFS-based capabilities like snapshotting, cloning, and data integrity checks.

    • Optimized for workloads requiring high throughput and low latency.


AWS Database Migration Service (DMS)

AWS DMS is a fully managed service that simplifies migrating databases to AWS with minimal downtime. It supports migrations between homogeneous (e.g., Oracle to Oracle) and heterogeneous (e.g., SQL Server to MySQL) database platforms while ensuring data integrity and replication.

  • Secure & easy migration

  • No downtime required

  • Source DB type & target DB type can be different

  • Homogeneous DB migration support

  • Conversion from AWS schema conversion tool for heterogeneous migration

  • Continuous database replication & data consolidation

  • migrates the DB on AWS EC2 Instance


AWS Storage Gateways

AWS Storage Gateway is a hybrid cloud storage service that enables on-premises applications to seamlessly use AWS cloud storage. It connects your on-premises infrastructure with AWS, facilitating cloud storage use cases such as backup, archiving, disaster recovery, and data migration while maintaining local access to data.

Types of AWS Storage Gateways

AWS offers three types of gateways, each designed for specific workloads and integration needs:

  1. File Gateway

    • Provides a file interface for storing files as objects in Amazon S3.

    • Supports industry-standard file protocols (NFS, SMB).

    • Enables local caching for low-latency access to frequently accessed files.

    • Ideal for use cases like backup, file sharing, and archive.

  2. Tape Gateway

    • Enables you to use AWS cloud storage for scalable and cost-effective backup and archiving while maintaining compatibility with existing tape-based backup workflows.

    • Appears to backup applications as a virtual tape library (VTL).

    • Virtual tapes are stored in S3, and archived tapes are moved to Amazon S3 Glacier or S3 Glacier Deep Archive.

  3. Volume Gateway

    • Provides cloud-backed storage volumes for block storage applications.

    • Operates in two modes:

      • Cached Mode: Stores frequently accessed data locally, while the full dataset is stored in Amazon S3.

      • Stored Mode: Stores the entire dataset locally and asynchronously backs up data to S3.

    • Supports iSCSI connectivity for use with on-premises servers.

AWS Elastic File System

AWS RDS (Relational Database Service)

AWS Aurora

DynamoDB

AWS Redshift

AWS FSx

đŸ—ƒī¸
📔