https://rishabkumar.com/notes/ Recent content in Cloud Notes on Rishab Kumar Hugo -- gohugo.io en Fri, 13 Jun 2025 12:12:25 +0000 https://rishabkumar.com/notes/gcp-generative-ai-leader/ Fri, 13 Jun 2025 12:12:25 +0000 https://rishabkumar.com/notes/gcp-generative-ai-leader/ These are my personal notes for the Google Cloud Generative AI Leader Certification, taken during following the Cloud Skills Boost Generative AI Leader path. Overview: Fundamentals of Generative AI (~30%): Understanding basic concepts and definitions related to AI and ML. Google Cloud’s Generative AI Offerings (~35%): Familiarity with Google Cloud tools and services that support generative AI. Techniques to Improve Model Output (~20%): Knowledge of methods to enhance the performance of generative AI models. https://rishabkumar.com/notes/kubernetes-cloud-native-associate/ Tue, 29 Apr 2025 12:12:25 +0000 https://rishabkumar.com/notes/kubernetes-cloud-native-associate/ Overview The Kubernetes and Cloud Native Associate (KCNA) certification is designed for beginners to demonstrate their knowledge of Kubernetes and the cloud native ecosystem. The exam tests basic concepts, principles, and terminology rather than hands-on implementation skills. KCNA Official Page Domain 1: Kubernetes Fundamentals (46%) 1.1 Kubernetes Resources Pods: Smallest deployable units in Kubernetes Can contain one or more containers Share network namespace and storage Ephemeral by nature (not persistent) Deployments: Manage ReplicaSets Provide declarative updates for Pods Support rolling updates and rollbacks Define desired state for application deployments Services: Abstract way to expose applications running on Pods Types: ClusterIP, NodePort, LoadBalancer, ExternalName Provide stable network endpoint for Pods ConfigMaps and Secrets: ConfigMaps: Store non-confidential configuration data Secrets: Store sensitive information (passwords, tokens, keys) Both can be used as environment variables or volume mounts Namespaces: Virtual clusters within a Kubernetes cluster Provide scope for resource names Allow resource isolation and quota management Other Resources: StatefulSets: For stateful applications DaemonSets: Run a Pod on all (or some) nodes Jobs and CronJobs: For batch and scheduled tasks Ingress: Manage external access to services PersistentVolumes and PersistentVolumeClaims: For storage Helpful links: https://rishabkumar.com/notes/gcp-cloud-security/ Sun, 06 Apr 2025 12:12:25 +0000 https://rishabkumar.com/notes/gcp-cloud-security/ Overview The Professional Cloud Security Engineer certification focuses on designing and implementing secure workloads and infrastructure on Google Cloud. The exam tests your ability to: Configure secure access management Establish secure network boundaries Ensure proper data protection Manage security operations Support compliance requirements Helpful resources: Exam Guide Google Cloud Skills Boost Google Cloud Documentation Section 1: Configuring Access (~25% of exam) 1.1 Managing Cloud Identity Google Cloud Directory Sync (GCDS): Synchronizes users and groups from existing LDAP/Active Directory to Google Cloud Doesn’t migrate passwords; only syncs identity information Single Sign-On (SSO): Configure SAML 2. https://rishabkumar.com/notes/lpi-linux-essentials/ Sun, 21 Nov 2021 12:12:25 +0000 https://rishabkumar.com/notes/lpi-linux-essentials/ Linux essentials Index Package management RPM based Debian based: APT and dpkg Command-line basics Command-line syntax Basic commands Command history and completion shell configuration files Environment / shell variables User-defined variables Globbing Quoting Formatting commands Working with options Locate, find, whereis Getting CLI help Linux MAN pages Info pages More local documentation Package management RPM based Yum YUM repos are located in /etc/yum.repos.d/. Unlike APT, YUM has several repo files in the folder. https://rishabkumar.com/notes/terraform-associate/ Thu, 01 Oct 2020 12:12:25 +0000 https://rishabkumar.com/notes/terraform-associate/ What is IAC? Infrastructure as Code it is the process of managing infrastructure in a file or files rather than manually configuring resources in a user interface. A resource in this instance is any piece of infrastructure in a given environment, such as a virtual machine, security group, network interface, etc. Terraform is a tool for building, changing, and versioning infrastructure safely and efficiently. Terraform can manage existing and popular service providers as well as custom in-house solutions. https://rishabkumar.com/notes/aws-sysops-admin-associate/ Mon, 21 Sep 2020 12:12:25 +0000 https://rishabkumar.com/notes/aws-sysops-admin-associate/ AWS SysOps Administrator Associate Monitoring Monitoring is accomplished through the usage of CloudWatch, which is a service to monitor your AWS resources as well as the applications that you run on AWS. CloudWatch Monitoring: Can monitor EC2 instances, Autoscaling Groups, ELBs, Route53 Health Checks, EBS Volumes, Storage Gateways, CloudFront, DynamoDB, ElastiCache nodes, RDS instances, EMR Job Flows, Redshift. SNS topics, SQS Queues, OpsWorks, CloudWatch Logs, Estimated charges on your AWS bill, and custom metrics - logs generated by your applications and services. https://rishabkumar.com/notes/aws-solutions-architect-associate/ Thu, 10 Sep 2020 12:12:25 +0000 https://rishabkumar.com/notes/aws-solutions-architect-associate/ AWS Solutions Architect Associate Regions / Availability Zones (AZs) Regions : AWS Geographical regions like US East, US West, EU Central etc Availability Zones : Distinct data centres that host the physical compute and other resources for AWS (AWS ensures a minimum of 2 AZs per region). They are often separated with each other but a geographical calamity could still impact/disrupt services on both Edge Locations : Each Region further consists of many edge locations which basically serve cached data for frequent access from nearby users. https://rishabkumar.com/notes/aws-certified-developer-associate/ Sat, 13 Jun 2020 12:12:25 +0000 https://rishabkumar.com/notes/aws-certified-developer-associate/ AWS Certfied Developer Associate IAM: Identity and Access Management When accessing AWS, the root account should never be used. Users must be created with the proper permissions. IAM is central to AWS. Users: A physical person Groups: Functions (admin, devops) Teams (engineering, design) which contain a group of users Roles: Internal usage within AWS resources Policies (JSON documents): Defines what each of the above can and cannot do. Note: IAM has predefined managed policies. https://rishabkumar.com/notes/azure-fundamentals/ Sat, 09 May 2020 12:12:25 +0000 https://rishabkumar.com/notes/azure-fundamentals/ Cloud Concept This part contains general knowledge about cloud computing e.g. what are the benefits of cloud, the differences types of cloud service offering, and the differences in cloud deployment models. Technological benefits of cloud High Availability — The major cloud providers (Azure, AWS, GCP) have multiple data centers spread around throughout the world. Data and code stored in the cloud are copied to more than one data center. If anything happens to one data center, the data can be recovered from another data center. https://rishabkumar.com/notes/oracle-cloud-foundations/ Mon, 27 Apr 2020 12:12:25 +0000 https://rishabkumar.com/notes/oracle-cloud-foundations/ OCI Foundations Associate ======================= OCI Architecture OCI Regions — 21 Available + 15 Planned; Commercial, Govt, Microsoft Azure Interconnect Region — Localized Geographical area comprised of 1 or more AD Availability Domains — One or more fault-tolerent, isolated DC located within a region, but connected to each other by low latency, high bandwidth network; Do not share physical infra Fault Domains — Grouping of hardware and infrastructure with in an AD to provide anti-affinity(logical data center); 3 FD per AD; Do not share SPOHF; change procedures are isolated at FD One AD Regions — within one year second AD or region will be made available Choosing Region — Location, Data Residency & Compliance, Service Availability Avoid SPOF — Design architecture to deploy instances that perform same tasks in different FD or different AD for multiple AD regions Data Guard — Data replication across AD HA Design — FD, AD, Region Pair Compartments — collection of related resources; helps to isolate and control access to resources; Tenancy/Root compartment; Compartment Network, Compartment Storage etc; Each resource belong to a single compartment; Resource can interact with other resource in diff compartment; Resources and compartments can be added/deleted anytime; Resources can be moved from one to another; Resources from multiple regions can be in the same compartment; Compartments can be nested (6 levels deep); can give group of users access to compartments by writing policies; Analyze cost and assign budget for resources in compartments OCI Compute Services https://rishabkumar.com/notes/aws-cloud-practitioner/ Mon, 01 Jan 0001 00:00:00 +0000 https://rishabkumar.com/notes/aws-cloud-practitioner/ Cloud Computing On-demand delivery of IT resources. Can scale up and down based on needs. Fosters agility (number one reason why customers switch to cloud computing): Speed (global reach), experimentation (operations as code, templated environments with CloudFormation) and culture of innovation (experiment quickly with low cost) Region vs Availability Zone (AZ): Region is a physical location in the world which contains multiple AZs. AZs contain one or more discrete data centers with independent resources and housed in different facilities.