9.3 AWS Dashboard Demonstration 3

00:08

Welcome back. Cloud heads to the AWS Claude Management Consul Dashboard demo number three. So from our console home page, we're gonna dig just a little bit deeper into the amazing A. W s service is that are available via this cloud platform.

00:23

So we're gonna go over here and quick service is, And so in this demonstration, I want to spend a little time on what I call demo drive byes just to show you, via some various panes of glass within the management console, some of the really cool things you likely never thought of that could be done for this amazing cloud engine. So over here on the right,

00:41

we're going to start moving over here to this thing called a W s robo maker. So let's check out what this thing is.

00:47

So from this screen, we can see that if, for example, were a manufacturer who maintains an assembly line or health care provider like a regional hospital, and we use robotics to help us a similar products on the assembly line, or we use robots to use, uh, better patient care. So, like a mobile robot pharmacy

01:06

that works over the 802.11

01:07

network on wheels. And so we can wirelessly transport medicines, toe our patients and increase our patient health care and patient well being across the hospital. Well, this A W s robo maker, we can develop and test our own robot applications and from application Indians, two platforms

01:25

for robot application development and robot application testing

01:27

all here via the AWS robo maker so we can get started or weaken work on developing our application to a whole host of robots. It's in our robot fleet or down here in the lifecycle portion of this. We can do our homework and figure out how we can write at really intelligent app that minimizes

01:47

battery life,

01:49

minimizes the use of memory and so we can create a really smart app and a really great app for our robots.

01:56

Really cool stuff. So do you remember thing one and thing too, from Dr Seuss's cat in the Hat if you don't? They were troublesome things that created havoc in the world of Dr Seuss. Something real troublemakers.

02:07

Well, with millions of new Internet connecting devices from refrigerators and home monitoring devices, cameras and intelligent trash cans that let the garbage man know that Can is full,

02:16

and it's time to pick it up and empty it out. Well, the cloud is here to help you manage your Internet of things so that your things don't create havoc like the cat in the hat's thing. Number one and thing number two.

02:28

So from our service is Window, we're gonna go over here to the Internet of things, and we're gonna click on Internet of Things core.

02:36

So I have a customer who's a city, and they're remodeling their entire community park. This new community park is gonna have amazing rides and Ferris wheels for the kids. There's a skating rink there, says Skateboard Park.

02:52

Um, there's an ice cake rink when it's wintertime Ah, and gondola's that

02:58

fly across the sky all powered over the Internet. So I have trash cans that with the Internet, left the Waste facility group. No, it's time to come empty the trashcan to lights that

03:12

with the Internet and with management over the Internet, I can control how much lighting to use and when to turn the lights on and to monitor my lighting. So when

03:21

a light when a light bulb is no longer working and functional. It alerts me so that I can timely go and replace that light. So that's the Internet of things and how some of our

03:31

organizations out there are using these intelligent devices thes things that connect to the Internet, all that we call the eye ot or Internet of things.

03:40

So in our network area, device uses interpreter so that we can agree on how to read the binary zeroes and ones like asking the American Standard Code for information interchange.

03:52

Or we agree on how to interpret our zeros and ones. And we get the American keyboard from the alphabet to special characters like the ampersand. So here in a W S I o. T. Is this really cool service called a message broker? If are things out there are using the Internet connect to connect to the AWS cloud?

04:09

Well, then the aws I ot message broker will bridge the gap between all of the different

04:14

Internet of things out there. Each class of device using their own interpreted protocols that speak their own version of the Internet of things. So for our city park are trashcan speak a language are lighting system, speaks a language

04:28

or gondolas speak a language are Ferris will speak a language because they're all created by individual manufacturers and vendors.

04:34

And they're all created with their own software on their own applications. And they all speak their own version of a computer language and their own ways to connect to the Internet. So with the aid of U. S. I. O. T. Service, what here we could do is we can turn on this thing called a message broker service. So what that

04:51

does is if our roads are far Internet of thing, devices

04:56

can talk to the cloud and talk to this A W s cloud engine. Now we can at least be talking clouds speak. And if everybody can talk, cloud speak and we understand the same language than with this Coyote message broker service, we can ensure that all R I O T. Devices air talking, same language and thus can talk to each other.

05:15

And now that they all can talk and listen to the same language, we can group them into various management groups.

05:21

We could manage them is either individuals were, as groups do group policy, and we can see them point to them, manage them, report on them and audit them from the AWS Internet of things management console Very slick and let's take a look.

05:35

So here we click on on board for when it configure Internet of Thing device and have it connected, the cloud will go through wizards. And if the Wizards aren't working exactly what we want to cause we might be missing a protocol or two well through software development kits, we can create our own interconnection hook so that we can,

05:54

uh, create a unique tied at the AWS

05:56

i o t engine and talk to our Internet of things device we can manage so we can register a thing so we can create a thing and then we can bulk register and then we can click on here and give our thing a name. We can give it a type we can put it in a group. We can create

06:13

attributes which are descriptions. So the only one with search

06:16

all are hundreds of Internet of things out. There are attributes will say trash can or whatever character value we want to associate with it, et cetera.

06:26

So really cool.

06:28

So we can group are things into groups. We can create building cycles around our groups. Ah, we can create security policies and do things around things like pushing machine sort of certificates out to our devices. Um, and then we can create security policies like recon

06:46

conduct ongoing on its audit security audits. And then we can monitor from a security perspective

06:53

our devices and making sure by perhaps putting an agent out there on our trashcans, we can make sure that from a security that we're not getting hacked. There were not having viruses and malware put on her devices, etcetera. So really, really cool stuff on even things like we can put

07:11

software Ah, and and middleware on our Internet of things all via this aws coyote

07:17

engine

07:18

really slick stuff.

07:20

So in a network, whether it be premise based or in the cloud, we need triple A authentication, authorization and accounting, and we need to utilize the security management architecture that we call identity access management or I am, and we could have an entire class and identity access management, so I don't want to get lost in it. But it's important to know for the purposes of this discussion,

07:41

the security control and security governance in our network.

07:44

The things that we want to focus on specifically are andthe indication and authorization Well, with that within her I am architecture. Well, that service is controlled and managed by this thing called directory service. And the most popular directory service on the planet is Microsoft's active Directory or a D.

08:01

So what I want to talk about now is really around this part of this diagram. This is complex diagram. There's a lot to active directory on how we use it, but I only want to focus on what's in the circle. So what here we're talking about is that

08:18

our network is gonna have an instance of Microsoft Directory on premise

08:22

or in the cloud or both, and then we're gonna integrate them via what we call connectors through a process called Federation.

08:28

An active directory is our corporate directory. It's a phone book of all our users and all our network devices and all the resource is in our network and through directory service is and protocols like radius remote access dialing user service. We authenticate toe active directory.

08:43

The 80 service has a record of who we are Ah, hashed version of our law again or user name and password has a record of what service is in the network. We can authenticate two and have privileges for. So this way we can log into a network and we can access sales information. But the I T administrator can control and

09:03

and, uh, and police what we have access to so that we

09:05

do not have access to confidential customer financial information in the network. All of these things are controlled through radius talking to, authorized by authenticated to an authorized by Microsoft Active Directory all controlled within active directory through individual and group user policy.

09:24

Pretty neat stuff. And so what, we're going to show you next is how we can stand a perversion of Microsoft Active directory in the AWS platform.

09:31

So now we're going to go into the AWS service's cloud and we're going to create our own instance of Microsoft Active directory. So we're gonna have service, is there? We're gonna scroll down here and we're gonna click directory service,

09:45

and then we're gonna set up our directory. So we have a few different connectors here so we can click Ah a W s man is Microsoft Active Directory. Or we can create a simple instance of active directory. Or we can create a connector

09:58

thio, connect us in a premise based version of Active Directory or our new cloud instance of active directory. Maybe we want to connect it to a juror. We want to connect it to G C. P. So Well, if we want to do that, then we go down the connect

10:11

her path. We're gonna go ahead and hit a W s managed Microsoft active director gonna hit next, and you can see here there's a couple of different additions that we can choose from. So the standard edition allows us at one gig of storage and we can create a PTA 30,000

10:26

network controlled objects, user's devices, et cetera. All of those objects

10:31

Ah, that we can control in our global catalog in active directory or this Enterprise edition with up to 500,000 objects and 17 gigs of data. And if the Standard edition or the Enterprise edition, we get to domain controllers and then there's a fee for each additional domain controller or D C

10:50

primary or secondary D. C and our network depending on how we build out the architecture.

10:54

And then what we're gonna do is once we choose our version,

10:58

we're gonna give it a full decoy qualified domain name or f que tiene so that we can reach our instance of active directory from the Internet and our D. N s queries and our Dina servers out there. Which route globally the www dot my instance of active directory in the a w est

11:15

cloud dot com we confined that reach it and see it from the Internet.

11:20

Ah, then we'll go in here and give it a directory description. Ah, and then for things like network management so that we can manage and report from our directory Instance on. Then we can give it some admin level passwords and confirmed the password and be done with it. So, uh, pretty good stuff.

11:37

And then we're going to create this going on here to the next step,

11:41

and we'll create our virtual private cloud sub nets and our virtual network to ah to tie in and connect our version of active directory in the clown to the rest of our either cloud based network or route at via direct connect or other types of service is down to our premise based network

12:00

and connected up on dhe Federated. Um ah. And then we'll create our instance of active directory and push it out and turn it up and enter it into our production network.

12:11

Good stuff.

12:11

That's it for our AWS dashboard demos. On behalf of all of us. A cyber security an I t learning team. We want to wish you and all of the users on your network