access to EC2 (for developers) ## Agenda – introduction – EC2 in native environment – 3-tier architecture intro – alternative methods of resource connection: – Bastion host - SSM – EC2 Instance Classic EC2 instance in default setting. ## Resources: EC2SecurityGroup: Type: AWS:: EC2:: SecurityGroup Properties: GroupName: Launch-wizard-13 GroupDescription: Allow traffic to EC2 SecurityGroupIngress: _2.jpg) Resources: EC2SecurityGroup: Type: AWS:: EC2:: SecurityGroup Properties: GroupName: Launch-wizard-13 GroupDescription: Allow traffic to EC2 SecurityGroupIngress: - CidrIp: 3.145.12.1/32 IpProtocol:

启动 AMAZON CLOUDFORMATION 堆栈.....6 配置部署参数.....7 使用 APACHE ROCKETMQ.....13 APACHE ROCKETMQ 在 EC2 上部署所在目录说明：.....13 Nameserver :.....13 Broker:.....13 如何使用浏览器查看 APACHE ROCKETMQ 的 WEB CONSOLE 对 AMAZON WEB SERVICES 客户需要在 AMAZON WEB SERVICES 上使用 RocketMQ 的需求，我们开发了一键部署的方案，帮助客户快速的在自己的账号部署一个基于 EC2 的高可用的 RocketMQ 集群。 ## 架构 AMAZON CloudFormation 提供了一种创建和管理相关 AMAZON WEB SERVICES 资源的简便方法，并通过有序且可预 SERVICES 其他区域使用此方案，请点击此处 2. 确保您的账户下的 Elastic IP，VPC，EC2，Auto Scaling Group，NAT Gateway，EBS 等没有达到上限。如果某一项您已经达到上限，请向后台提交工单选择申请提高限制。 3. 如果在该区域内您还没有密钥对，请在 Amazon EC2 控制台的导航窗格中，依次选择密钥对、创建密钥对，选择默认的 .pem 格式，键入名称，然

AMAZON CLOUDFORMATION 堆栈 ..... 7 配置部署参数 ..... 8 使用 APACHE ROCKETMQ ..... 15 APACHE ROCKETMQ 在 EC2 上部署所在目录说明： ..... 15 Nameserver ..... 15 Broker ..... 16 如何使用浏览器查看 APACHE ROCKETMQ 的 WEB CONSOLE 具有低延迟，金融级高可用以及厂商中立的特点，目前广泛使用于国内外的互联网公司。针对亚马逊云科技客户需要在亚马逊云科技上使用 RocketMQ 的需求，我们开发了一键部署的方案，帮助客户快速的在自己的账号部署一个基于 EC2 的高可用的 RocketMQ 集群。 ## 架构 Amazon CloudFormation 提供了一种创建和管理相关 AMAZON WEB SERVICES 资源的简便方法，并通过有序且可预 SERVICES 其他区域使用此方案，请点击此处 2. 确保您的账户下的 Elastic IP，VPC，EC2，Auto Scaling Group，NAT Gateway，EBS 等没有达到上限。如果某一项您已经达到上限，请向后台提交工单选择申请提高限制。 3. 如果在该区域内您还没有密钥对，请在 Amazon EC2 控制台的导航窗格中，依次选择密钥对、创建密钥对，选择默认的 .pem 格式，键入名称，然

不支持私有的、断开连接的安装。 ## Route 53 配置示例 platform: aws: region: us-gov-west-1 serviceEndpoints: - name: ec2 url: https://ec2.us-gov-west-1.amazonaws.com - name: elasticloadbalancing url: https://elasticloadbalancing 安装所需的EC2权限 - ec2:AuthorizeSecurityGroupEgress - ec2:AuthorizeSecurityGroupIngress - ec2:CopyImage - ec2:CreateNetworkInterface - ec2:AttachNetworkInterface - ec2:CreateSecurityGroup - ec2:CreateTags ec2:CreateTags - ec2:CreateVolume - ec2:DeleteSecurityGroup - ec2:DeleteSnapshot - ec2:DeleteTags - ec2:DeregisterImage - ec2:DescribeAccountAttributes - ec2:DescribeAddresses - ec2:DescribeAvailabilityZones

不支持私有的、断开连接的安装。 ## Route 53 配置示例 platform: aws: region: us-gov-west-1 serviceEndpoints: - name: ec2 url: https://ec2.us-gov-west-1.amazonaws.com - name: elasticloadbalancing url: https://elasticloadbalancing 安装所需的EC2权限 - ec2:AuthorizeSecurityGroupEgress - ec2:AuthorizeSecurityGroupIngress - ec2:CopyImage - ec2:CreateNetworkInterface - ec2:AttachNetworkInterface - ec2:CreateSecurityGroup - ec2:CreateTags ec2:CreateTags - ec2:CreateVolume - ec2:DeleteSecurityGroup - ec2:DeleteSnapshot - ec2:DeleteTags - ec2:DeregisterImage - ec2:DescribeAccountAttributes - ec2:DescribeAddresses - ec2:DescribeAvailabilityZones

不支持私有的、断开连接的安装。 ## Route 53 配置示例 platform: aws: region: us-gov-west-1 serviceEndpoints: - name: ec2 url: https://ec2.us-gov-west-1.amazonaws.com - name: elasticloadbalancing url: https://elasticloadbalancing 安装所需的EC2权限 - ec2:AuthorizeSecurityGroupEgress - ec2:AuthorizeSecurityGroupIngress - ec2:CopyImage - ec2:CreateNetworkInterface - ec2:AttachNetworkInterface - ec2:CreateSecurityGroup - ec2:CreateTags ec2:CreateTags - ec2:CreateVolume - ec2:DeleteSecurityGroup - ec2:DeleteSnapshot - ec2:DeleteTags - ec2:DeregisterImage - ec2:DescribeAccountAttributes - ec2:DescribeAddresses - ec2:DescribeAvailabilityZones

|reference|Reference| ||Cloud Images| |cloud-images/introduction|Introduction| |cloud-images/amazon-ec2|Amazon EC2| |cloud-images/google-cloud-engine|Google Compute Engine (GCE)| |find-ubuntu-images-on-azure|Microsoft 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun 4 12:07:00 ec2: #；（14>Jun

不支持私有的、断开连接的安装。 ## Route 53 配置示例 platform: aws: region: us-gov-west-1 serviceEndpoint: - name: ec2 url: https://ec2.us-gov-west-1.amazonaws.com - name: elasticloadbalancing url: https: 安装所需的 EC2 权限 • ec2:AuthorizeSecurityGroupEgress • ec2:AuthorizeSecurityGroupIngress • ec2:CopyImage • ec2:CreateNetworkInterface • ec2:AttachNetworkInterface • ec2:CreateSecurityGroup • ec2:CreateTags ec2:CreateTags • ec2:CreateVolume • ec2:DeleteSecurityGroup • ec2:DeleteSnapshot • ec2:DeleteTags • ec2:DeregisterImage • ec2:DescribeAccountAttributes • ec2:DescribeAddresses • ec2:DescribeAvailabilityZones

不支持私有的、断开连接的安装。 ## Route 53 配置示例 platform: aws: region: us-gov-west-1 serviceEndpoints: - name: ec2 url: https://ec2.us-gov-west-1.amazonaws.com - name: elasticloadbalancing url: https://elasticloadbalancing 安装所需的 EC2 权限 • ec2:AuthorizeSecurityGroupEgress • ec2:AuthorizeSecurityGroupIngress • ec2:CopyImage • ec2:CreateNetworkInterface • ec2:AttachNetworkInterface • ec2:CreateSecurityGroup • ec2:CreateTags ec2:CreateTags • ec2:CreateVolume • ec2:DeleteSecurityGroup • ec2:DeleteSnapshot • ec2:DeleteTags • ec2:DeregisterImage • ec2:DescribeAccountAttributes • ec2:DescribeAddresses • ec2:DescribeAvailabilityZones

Deployment 22 Selecting Hardware 22 Memory 22 CPU 22 Disk 23 Network 23 Planning an Amazon EC2 Cluster 23 Capacity Planning 24 Calculating Usable Disk Capacity 24 Calculating User Data Size Cluster on Amazon EC2 Using the DataStax AMI 32 Creating an EC2 Security Group for DataStax Community Edition 33 Launching the DataStax Community AMI 34 Connecting to Your Cassandra EC2 Instance 35 default value is fine for most situations, but DataStax recommends increasing it to 12 for Amazon EC2 due to the network congestion frequently experienced on that platform. Node failures can result from