AWS is the best cloud platform. 
But it is very essential to use AWS in a proper way to avoid high billing and better control

##  1. Create a billing alarm

AWS has pay-per-use pricing model for all of its services.
For example, if you launch an EC2 instance, you have to pay for it per hour.

Unwanted costs may occur if you forget to terminate unused instances or delete data from S3 that you no longer needed.

To avoid an unexpected billing amount on your AWS monthly invoice you should create a billing alarm.
A billing alert will send you a notification if the costs for the current month exceed your limit.

## 2.  Enable CloudTrail to track every API call from AWS

AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account.
This means you can use CloudTrail to track every call to the AWS API.
Whenever you or one of your team members changes your cloud infrastructure a log event is stored. 

You can use CloudTrail to detect unusual activity in your AWS accounts.

## 3. Enable MFA for root user and always use IAM user

Use of Multi Factor Authentication adds another security layer on your AWS account.

Since your root user has all the access to every part of your AWS account from launching virtual machines to deleting databases.

In other words, your root user is an easy target for all kinds of attack.

The very first thing you must do is enable MultiFactor-Authentication (MFA) for your root user.
You can use a virtual device (like Google Authenticator App on your mobile) or a hardware token.

## 4. Always allow limited permissions to an IAM user

As you already know, the root user of AWS has all the access so it is recommended that you never use root user for any project.

Then you should create IAM user for performing any task on AWS account.
But if you allow all the access to IAM user then it make no sense to create IAM user.

It is highly recommended that you give limited permission
For example, if you wants a user to read files from your S3 bucket then only provide **read only access**
Never give full S3 access to your IAM user
You can later add any other permission as required

## 5. Always try to automate repetitive

One of the biggest advantages of using AWS is that the it's API allows you to automate almost every part of your AWS infrastructure

Automation not only just saves your time but also makes you more productive and stress-free.

You should aim for automation to get the most out of AWS (try AWS CloudFormation). 



👋 Enjoyed this article? 
Reach out in the comments below or on  [Twitter](https://twitter.com/sarthaksavvy) to let me know what you think of it.

Sarthak Shrivastava

5 must do tips for better use of Amazon Web Services

# Overview
To enhance the security of our server, we can restrict the login to server with password and also restrict login of root user on that server. 

The only way to login to server is via ssh key you provide for your computer only.


# What is SSH?
It stands for **Secure Socket Shell**.

It is a protocol to connecting one computer to another using command line tool or shell on remote system

# How to create SSH key?
To create a SSH key you have to type this command on your terminal.

```bash
ssh-keygen -t -rsa -b 4096 -C 'anyIdentifyer'
```


After you create ssh key successfully, you will see something like this.

![](https://bitfumes.sfo2.digitaloceanspaces.com/images/blog/content/c70kMcYBiMIHgT9wyPZ2nQQwwUqT6i0fETsbQ2Cn.jpeg)

This will create two file in your .ssh folder. One is id_server and another is id_server.pub.

This id_server is the public key we give to other clients and private key is never shared with others

Now we have to copy this id_server.pub content, so to do that we can write this command

```bash
Cat id_server.pub | pbcopy
```


This 'cat' command open this file and 'pbcopy' command will copy its content to your clipboard.

Now on server, we will go to .ssh folder and open authorized_keys file with vim



```bash
~/.ssh # vim authorized_keys
```


Now you have to paste that ssh key we have copied in this authorized_keys file, then press esc and colon (:) + w + q. This will save and quit from Vim.

Now exit from server, and try to login to server via ssh key by using command below.


```bash
ssh -i ~/.ssh/id_server root@120.0.0.1
```


After this command you will not asked for any password and you will logged into server directly. This is very cool.

Now we have to restrict login from root user. To do that we have to create new user. To create a new user in ubuntu server you have to type this command.


```bash
adduser bitfumes
```


This command will create a user called 'bitfumes'. and now to switch to new user just type this command.

```bash
sudo su bitfumes
```


This command will switch to bitfumes user. here Sudo means 'run this command as admin' and su means switch user.

But this user does't have any admin privilege or we can say that this user is not a sudoer. 

To make this user as sudoer, firstly switch to root user by using sudo su command and then we have to type this command.


```bash
usermod -aG admin bitfumes
```


This command make bitfumes user as a admin. Now once more switch to bitfumes user by again using sudo su command.

Now we have to allow bitfumes user to login to server via ssh ,So we firstly have to create .ssh folder by using 'mkdir .ssh' command. 

Now lets create that authorized_keys file using vim and paste the same ssh public key as we have given to root user. To do that just run this command.


```bash
~/.ssh # vim authorized_keys
```


and similarly as we have done before, lets paste that ssh public key. and then press esc + w + q  to save and quit from vim.



Now we can access to server via same ssh key as both root user and also bitfumes user.

But we have to restrict login as root user. To do so login to server as bitfumes user and type this command to open ssh configuration file.



```bash
sudo vim /etc/ssh/sshd_config
```


Now on this file you have to make two things as 'No' .

One is PermitRootLogin and second is  passwordAuthentication as shown in the image below.

![](https://bitfumes.sfo2.digitaloceanspaces.com/images/blog/content/yEQv5NAHHvuBSSuF3tnBZ0CcoNpWk4BkumGx18OZ.jpeg)

Now as we have made changes in ssh configuration we have to restart ssh service for our ubuntu server.


```bash
sudo service ssh restart
```


So now if you try to login via root user, you can't. This means the only way to reach your server is via ssh with bitfumes user.

If this post helped you then please share and hit a like button at top.

Sarthak

Allow Login with SSH key only

Sometime its difficult to choose from dozens of options and that happens when you think about choosing a server provider.

# What is Forge

Forge is an tool to deploy and host your website in a no time with almost no server configuration. *Laravel Forge is a server provisioning and management tool for PHP apps.*

Its a great product of Laravel family, which allow you to focus totally on developing and not on Deploying your app.

So before Knowing about Forge in deep, **lets see why we need it.**

# Shared Hosting

Yes [Godaddy](https://godaddy.com/)/[Hostgater](http://www.hostgator.com/)/Bluehost are normal choice when you start to deploy your First Laravel App and they seems cheaper and more user friendly. ( [How to deploy laravel app on Godaddy shared hosting](https://www.youtube.com/watch?v=Fgs6AoHdp7E))

But you know in reality they are not  

# Problem with Shared Hosting

Yes they are good for starting purpose because they are intended for that only but when it comes to deploy your real project in which you have done hard work, then they create real issue.

Because you get a system shared with others so sometimes your site performance slows down because of others site, even you can't do anything when your website load increases.

On shared hosting you don't have lots of advanced features like Git, Queue, scheduling etc. You have to ask about that and may be they charge you to include this feature.

## VPS providers
Here comes VPS (Virtual Private System) providers. Like [DigitalOcean](https://m.do.co/c/a3a47da9b9a8), AWS (Amazon web service). Linode, Vultr etc.

Here you can create your server, you can define how much RAM you need, what processor has to be there, and even in which operating system you want to have in your server and these things are not available in shared hosting system.

They also include various advanced features as we have talked about, and can be configured to upgrade your server performance.

## Problem with VPS Providers

The biggest problem with normal VPS providers is that they just provide you empty system, they expect some advanced server information.

This means even they are very good in all cases, you need to configure your own server, they are not responsible for any configuration settings or anything and here is many people move from these platforms.


# PAAS (Platform as a Service)

Think about PAAS as combination of both shared hosting and VPS. But what this mean.This mean, you can design your server and then the server configurations are also done by that.

Common examples are Heroku, Pagodabox, fortrabbit etc.

So why we can't simple use PAAS and where FORGE stand in this mob.


# NEED FOR FORGE

If you are a laravel developer then this is an awesome thing for you, I am sure you will love it.

Now this forge is smart and it takes good part of each of the topics given above. As you have DigitalOcean, AWS as cheap and awesome cloud providers and also heroku type PASS. So forge combines these things. How?

Forge has many features that you don't need to think about that.

 Choose Server : you can choose between DigitalOcean, AWS, Linode or Vultr, this makes for so flexible.After you choose and forge takes care of everything to setting up your server

Forge is always up-to-date : this means you never have to think about updating your php version or mysql version.

Push to Deploy : Version controlling is a great help for every developer and if you can push your codes to server directly from github or bitbucket, then life become soo easy, and this can be done by forge.

Free SSL : Every one loves free stuffs, here is a gift for you, forge provide free SSL certificate to make your website more trustworthy. If you use shared hosting then I am sure you will going to pay for this.

Queue Worker : Every laravel developer knows the importance of queuing any event. here with forge you can start your queue worker very easily. ( What is Queue? )

There are lot more with forge, if you want you can subscribe to forge and try it for 5 days for free.



# Cons of FORGE


When you buy its subscription then it manages your server very easily and in a best way, but you also have to pay for the server you create from DigitalOcean or AWS or anywhere. This means at-least two subscriptions, one for Forge service and second for Server. On top of this if you want to use GitHub as your version control then pay for that also.

Now if you give VPS a try then yes initially you will have hard time to configure/setup your server, you think about this, how much you will going to learn when you use VPS and almost nothing you learn about servers when using forge.



Now its your choice, if money does't matter you and you don't want to give time to setup your server then FORGE is made for you. Thanks for Taylor for creating Laravel Forge.

Why You should use Forge or Why not ?

# Overview
Considering lots of options for cloud hosting sometime you get confused with the options you have. Now as AWS is growing so fast and others are trying to reach but there is one cloud  company which takes care of users/customers it has.

Here comes Digital Ocean, the best part of it is its cost is so affordable with lots of options and fast service that you will going to love it. Lets see everything in details.

# What is Cloud Hosting?
Cloud hosting describes a method of configuring servers in a flexible way to allow for the most affordable, scalable, and reliable web infrastructure -- via DigitalOcean.com

# Why Digital Ocean?
DigitalOcean’s user interface is super simple and minimalistic.

It was one of the first in the industry to offer SSD-based virtual machines. 

Clean and easy documentation.

Lots of tutorials for new people.

Most importantly: Affordable price - just $5 a month to start with 512 MB / 20 GB Disk.


# Create Account on DigitalOcean.
Just go to [digitalocean.com](https://m.do.co/c/a3a47da9b9a8)  *( if you click here, then you will get $100 credit on DigitalOcean to start )* and sign up by your valid email and secure password


After you signUp you will get an confirmation email and after you confirm your email DO ( digitalOcean) ask you to add payment method,

Don't worry they will not charge until you create a server and as **you have $100 credit** in your account you don't have to worry about but still you have to add your payment method to activate your account.


After successfully activating account,Now we have to create the droplet means the server.

To create a droplet you just have to click on this create droplet button,

And after that you have to choose the operating system you want on your server, Select click on Ubuntu.


Now select Server Configuration

![](https://bitfumes.sfo2.digitaloceanspaces.com/images/blog/content/vxIK9Ox1WiszoG5DZEYeskyspsnJxbdmvvCQEEaC.jpeg)

Then choose Datacenter. This has to be closest from your targeted audience,

![](https://bitfumes.sfo2.digitaloceanspaces.com/images/blog/content/T8RLHORsndOhOMkkqQ99DuBm2ELTxKHbvckNiODu.jpeg)


Now Finally give any name (if you want) and click on create to create server.


When everything is done, you will get an email from Digital Ocean regarding the server credentials, which include IP-address, username and password for your server.



Now open terminal ( for windows user open git bash or putty ) and type

```bash
SSH root@yourIdAddress
```


After this just give password you get on your email and login to server.

When first time you log in, server ask you to change your password.


```bash
Change password for root.
(current) UNIX password:
Enter new UNIX password:
Retype new UNIX password:
root@yourServerName :~# 
```


root@yourServerName ~: # represent that you are on server. 

So congratulations, you have successfully created and logged into your server.

5 must do tips for better use of Amazon Web Services

Server

Sarthak Shrivastava

Allow Login with SSH key only

Server

Sarthak

Why You should use Forge or Why not ?

Server

Sarthak

Logging into Digital Ocean Droplet (SSH)

Server

Sarthak