Transcript for:
Understanding DNS: Function and Importance

So today we're we're talking about um DNS um before we dive into it I just want um anybody who knows something about DNS when you hear the word DNS what comes to your mind anyone domain name domain name um let me get my pen user friendly name domain name website creation friendly name website [Music] creation what else is like IP addresses IP address IP address any anybody else let's let's get a female I need a um like phone book of chant um somebody said phone book yeah internet's phone book right internet phone book yes internet's phone book Duru what do you think about domain name shant 53 sorry Professor I just joined now okay um um event are you just hearing it for the first time when you hear the word domain name no it's not the first name okay so what comes to your mind when you hear the word Domin name um okay to my mind it's uh just like um just like like you can give it a St an online store name like something like that okay business name right that's what an online business name on name okay alas okay aliens awesome all right so this is good this is actually good okay so when you want to access a website like um Amazon.com or Google or facebook.com or netflix.com but let's take amazon.com say let's say you want to purchase something from Amazon and you go to www.amazon.com on your browser right so you type www. amazon.com on your browser there's a lot of things that happen in the background when you type that name there's a lot of things the first thing is you should know that your computer your laptop does not understand this your laptop does not understand the human friendly name somebody said user friendly the your laptop does not understand that human friendly name your laptop understands IP addresses so your laptop understands IP addresses okay so even though you're typing www.amazon.com a lot of things happen in the background to go and get that IP address and come and give your laptop so that your laptop can give you the website you're trying to get okay so there is something that the what happens in the background is called translation so there's a translation from the human friendly name to the IP address so that your laptop can load the page that you're looking for and the translation happens by something that is called a domain name system okay DNS or domain name system is needed to translate the host name or human friendly name to an IP address so that your divines can contact the application server okay so devices communicate just with IP addresses so Emma I've made you co-host please help me let people in okay devices communicate using just IP addresses we talked about this in our networking class you have your printer in an office you have your mobile phone you're sitting in a living room your mobile phone has an IP your printer has an IP you're able to send communication to your printer to print some some something for you it's the same thing with every device every device communicate with IP address by IP address so you have your laptop right here at your home AWS amazon.com has their server let's just assume that their server is in GC and you are in Dallas your laptop's IP needs to communicate with Amazon's IP to load the page so you go to your laptop and you type www.amazon.com your doesn't know your laptop needs to get the IP so that it can connect to the IP okay um Kinsley you want to mute yourself we're getting some background noise from your end so your lab your laptop needs to get amazon.com server IP so we already know how applications work we know that okay when you're hosting an application you go to AWS you create an application server you deploy the application in it so that application is s sitting in a server in an availability Zone somewhere so we're just assuming that that application server is in North Virginia let's just say North Virginia so you in Dallas you need to get the IP address of that server or your laptop needs to get the IP address of that server so that he can get the content of the application that it's looking for but now because we are human beings and we cannot memorize all the different IP addresses that are out there it becomes easy for us to know names it's like your mobile phone I can have Emma's number on my mobile phone but I don't know know her number all I know is that her name is Emma and when I want to call her I just go to my phone and I type Emma and then I call her but if you ask me that what is Emma's number I don't necessarily know what Emma's number is so it's the same thing with with um application communication or your laptop communication your laptop does not necessarily know the IP so DNS is used to basically take this name and translate it to an IP address so that your laptop can use an IP address and communicate with the server and that's what um I want us to talk about today okay now DNS let's talk about what happens now in the background we know what needs to happen we know that when you give your laptop a domain name or human friendly name your laptop needs to load that page and in order for it to load the page it needs to locate the IP address and load the page DNS is what helps the location of the IP address so if we have to Define it we'll say DNS is a discovery service it's like a database that helps systems and servers to find each other on the internet DNS is a discovery service that helps systems to or I'll say servers to locate each other in the on the internet so it is that that that's what's happening in the background DNS the process of taking a human friendly name and translating it to a computer friendly name or an IP address which is what the computer understands it is this huge database that translates the information that your computer needs to the information that human beings understand or the information that your human beings understand to the information that computers understand and again like I said it's because as humans we cannot memorize IP addresses just like we cannot memorize everybody's phone number right so DNS is there to help store the the matching of host name or domain names to IP addresses so in our networking class we we talked about the number of ipv4 addresses that are out there and we said we had about 4.3 billion ipv4 so ipv4 addresses we had 4.3 billion IPv6 IPv6 I'll tell you the ipvc are a lot they are in the trillions they are like 100 times ipv fors so just think about that if all of these ipv IP addresses have a corresponding domain name think about how huge the DNS database will be that database that translates IP addresses to domain names that's how huge the DNS is so DNS is one of the things that is really really important for systems and things to function on the internet if DNS don't match things correctly a lot of breakout or or outages will happen on the internet so today's slass we can we can talk about DS for the next four classes but I've sculped it down to just one or two classes so that we dive into the key things that you need to know when it comes to DNS and then when you guys start working in a networking environment let let say you pick up a job as a networking architect then you'll be able to dive more into DNS and learn most of those things okay so to get us started let's talk about the components of DNS let's talk about some of the key components let's talk about the key components all right the first thing I want to talk about is the DNS client a DNS client so whenever you hear the word DNS client think of whenever you hear the word client as a whole in in the industry think of your device the device on the other side that's trying to access something okay so in this case you the the gns client can be your laptop it can be your mobile phone or whatever device that you need to find the IP address of the domain name that you know okay so the DNS client could be your laptop your laptop then the second component is called the DNS resolver the DNS resolver the DNS resolver the DNS resolver so the DNS resolver is a server or a software that runs to help locate the IP addresses of the domain names that you know okay so this is the DNS resolver is a server and This Server typically runs on this software or server it typically runs on you it's run and owned by your internet service provider in most cases your internet service provider has a a server that's running DNS resolve that that's the DNS resolver okay so it's a server [Music] typically hosted by your internet service provider or I ISB that helps to locate the IP addresses uh the domain names that you have okay it helps to find the IP addresses for that domain name that you have and then we have the third component of DNS that's called a Zone file a Zone file a Zone file a Zone file a Zone file is basically a file that contains what we call DNS records the Zone file this is a file that contains DNS records a own file is a file that contains DNS records his own file is a file that contains DNS records okay and then we have the last component which is called a name server you have the last component which is called a name set Ser a name server and then name server is a server that host Zone files and responds to DNS queries okay and we'll put all of this in context right now just understand this components the name server is the server that poost the DNS files and also response to DNS queries DNS queries oh please when you say it respond to DNS what does that mean does it open like a itself or it justs I'll I'll get it we'll put all of this in context okay we'll put all of this in context momentarily give me one second um let me pause this record I'll be right back and then we'll talk about all right let's proceed let's put this all in context okay so let's go back to talking about when you try to browse Amazon okay so when you when you when you use your laptop and you type www.amazon.com from your standpoint it just loads within one second but like I said a lot happens in the background that has been abstracted from you you don't have visibility to it and everything has been simplified that makes the page to just load instantly when you type www.amazon.com but let's go over the steps of what happens okay so that because as you guys are becoming Architects you need to know what happens in the background Prof can you please go back to the previous spage sure this one no this one yes ma'am let me know why you're done we're good ma thank you you're welcome all right so let's go over what happens right the first thing is within your internet in your home there is a resolver like I mentioned every internet has a resolver or every yes in your home you have a resolver so your laptop communicate with the DNS resolver and the DNS resolver is going to be the one to help locate the IP address for your laptop okay so step one your laptop communicates where with the DNS resolver and ask the resolver to locate the IP address for WW w. amazon.com that's the first thing that happens and that's the job of the resolver the job of the resolver is to run DNS queries and trrap down the IP address for poost names that You' have okay now the resolver has what we call a hint file okay please listen carefully and if you don't understand it let me know and I'll repeat the resolver So within the resolver there is a root hint file okay and the root hint file is just a file that contains preconfigured list of DNS root servers okay which is a [Music] file a file that contains a list of all DNS root servers okay the DNS root server is the starting point of DNS resolution okay so just to Define that DNS root servers is the starting point of DNS resolution okay so your laptop knows that you need it needs the IP address of www.amazon.com it tells the resolver that can you get me the the IP address of w ww. amazon.com the resolver needs to know where where to start so it needs to know the root server to contact and start what we call the look up process again like we said the DNS is a huge database and that database is storing data in a way that is distributed so it's storing pieces of data in different parts of the database that's why we call it zones it's storing storing those pieces of in different zones and so this root hints file that we're talking about is every resolver has a hint file and that hint file will be able to send you to the right direction okay so it's like it's like someone coming to JJ Tech and they'll say I'm looking for let's say I'm looking for Zane and pro jenso doesn't have James zay's number more let's just assume that Pro Jesso doesn't have zay's number but Prof jeso knows that Zayn is in the model batch so Prof Jesso will say I don't have zay's number but if you reach out to Prof Susan then Prof Susan will probably be able to get you zay's number that's how the loal process starts with DNS so the root server that DNS root server it doesn't they don't have it doesn't have the IP address but it'll be able to tell the resolver to go to a the direction send the resolver to a proper direction to go get the IP address that's what happens all right so step one like we said is your laptop communicates with the resolver and your laptop tells the resolver that I need the IP address of www.amazon.com can you get that for me so with within the resolver you have that root hint file and that root hint file has a list of root servers so when we talk about root service this is we we we mean we mean things like you have a server that has you have a server that has UK you have a server that has that hasca you have a server that has do F you have a Ser that has. iio these are the root gns root servers okay so within your resolver you have all of these the hint file that has the corresponding root server for that has a corresponding root server for.uk that has this corresponding youth server forca fio all of the different do dot dot EU all of those different things so since we have do right here the resolver is going to point the res is going to go to the root server and it's going to ask the com root for server that I'm looking for the IP address of www. amazon.com Okay so so let's put that at step two step two the DNS resolver will use that root root hint file to contact the root name servers to ask for the IP address for wwww.com so the the DNS resolver we use the root hint file to contact the root server and ask for the IP address www. Amazon okay the root Server doesn't have the IP address but the root server has knows the top level domain server for.com okay so the root server let's just put that as step three step three the root server will give the resolver the name server for the Doom top level domain I hope you guys are following so it's like somebody will reach out to JJ te management and say we want to contact zann give us Zayn's phone number JJ Tech management doesn't have zay's phone number so J management knows that Zayn is in the model banch so you send Zane to Prof Susan and say can you give this person the information that they're looking for about Zayn I don't have Zayn's number but I know that Zayn is in Prof is in group two maybe group two is Victor's group and Victor is the lead of group two so I will tell that person that I don't have Zan number but I can direct you to Victor who would get you the information that you're looking for so that's what's happening with DNS lookup we have a series of name servers that have pieces of information that will keep pointing the resolver to the right direction until the resolver gets to the final name server that has the IP address that it's looking for okay so that's what happens here step one the your computer which is the DNS client contacts the resolver asking for the IP address step two the resolver uses its root hint file to contact the root server the root Server doesn't have the IP address the root server knows the name server for the top level domain for for. so the root server will give the resolver that information that I don't have the IP address that you're looking for but I know the TLD for. so I'll give you the TLD name server for.com and then the resolver takes the TLD name server and goes and trying to get the information information that it's looking for okay so step four the resolver now will query that TLD name server asking for the authoritative name server for www.amazon.com so the the resolve will query the TLD name server for.com and ask for the authoritative name server for www. amazon.com okay and then when it gets the authoritative name server that is when it queries the authoritative name server and gets the IP address so that's step five the resolver queries the authoritative name server for www.amazon.com to get the actual IP address and then it queries it reach out to the IP address to get the page the the the information that you're looking for and it gives back to you it gives it back to your laptop and then your laptop will be able to communicate with that with that um application server so this is what we call the DNS lookup okay it all starts with your resolver your resolver reaches out to the root name server typically this root name server will just have do information the root name the RO the root server will just have information and then the authoritative top level domain server will just have amazon.com information and then here step five which is your authoritative name server not your top level domain name server would have the full information for www.amazon.com okay and then this is where it gets the IP address and then the resolver returns the IP address to your laptop so you're laptop can communicate directly with Amazon's application server okay so take note of these steps now this is important for those of you who will be working in the networking environment and at this point it's hard to tell it's hard to tell if you you you find yourself working in as a networking architect or you find yourself working as a devops engineer or otherwise okay I'll tell you that hard to tell please hang on um next page yes ma'am it's hard to tell because when you when you get into the industry when you get in as a consultant you can be a consultant and then you bring you in and then you find yourself doing networking work okay I've done devops work I've done security work I've done networking work I've done infrastructure I've done designing all of those different things when you when you label yourself as a consultant there's a gray line between all of these different um areas okay so understanding this things are important even though you may say okay I just want to focus on devs but you find yourself some sometimes troubleshooting DNS issues within your environment so just understanding these steps of DNS look up will really help you a whole lot when you find yourself in such an environment okay so take note of that again I've simplified it in a way that you understand because you're hearing this for the first time but now this set the base for you to start build building on top of it once you get into um a real working environment okay all right let me take questions before I proceed just to make sure that we are all on the same page anybody has any question any question go ahead a uh the DNS resolver I understand you said is a software then I'm say it's a server now I'll tell you why I say that sorry I'll tell you why I say it's a software and sometimes I say it's a server okay I wanted to understand because you said it's associated with your laptop or your internet is it router so please help me understand yes so let me tell you what happens sometimes laptops comes with the resolver software already on it okay some laptops have the resolver software already on it sometimes your internet service provider has that resolver on as part of your route your internet router okay so within from from your standpoint the resolver is like a software that's running in your internet environment but again we all know that software is run on the server somewhere right so if it's a huge company sometimes they have a a a DNS resolver server running in that company because that company has even though they have a huge like amazon.com they may have a huge domain then they have other subdomains and they want to manage those things by themselves so they'll have a resolver server running within the company but you and I we're all um individual just consumers the resolver in this case is just a software okay but it's doing the same job which is helping with the DNS lookup process make sense yes mam so uh what I want to understand is uh I already have a server that's my laptop so when you say it's a server is it an external server out of my laptop or is it just a software that already come preinstalled in my laptop or in my router it is an external server that software is running in an external server you and I at this point you know that whatever software that you're using right now that software is actually running on a server somewhere right it's hosted on a server somewhere so from it really depends on the environment that you are in if it's in your house then the resolver in that case is a software that's running within your ISP which is your internet service provider okay but if it's in a huge company environment that resolver sometimes is um a software I mean it's a laptop it's a it's a it's it's a virtual machine that is hosting that software in within the company's environment okay my last question thank you for my last question is from all explanation doesn't about the DNS process does that mean when I type ww. amazon.com behind the scene the DNS system is like a query is trying to find uh the name server you call the authoritative name ser server that has a particular Zone file which is stor maybe that ww. amazon.com that correspond to IP addresses so the D is looking for that name server that has this Zone file which has this record then it begins a look up from the the root uh the root server that's from from Top going down from one name server to another until it locates that particular name server that has a what we we want to which IP address we want to locate is that is that in some what process is exactly yep that's exactly what I'm saying so every name server has a Zone file within it okay so if this is the root name server it has a Zone file and that zone file let's say this is the root that zone file maps.com with the TLD name server for. then when you go to the TLD name server this is the TLD name server top level domain name server the this TLD server will map the the do amazon.com with the authoritative name server for ww. amazon.com and this is what we call the Zone files so every name server has a those Zone file inside and it's in that zone file that you basically try to do the look up the the resolver is basically going to every name server and querying that zone file to get the information that he looking for if he doesn't get the information it gets at least a piece of the information that sends it to the right direction then he queries the next name server and keeps up on querying it until he gets the final information that it's looking for okay thanks you're welcome any other question if not let's proceed all right so yeah I'm sorry okay uh what happens if the DNS serice is is not available okay that is a really good question because on a AWS AWS has taken steps even to make sure that a is implemented when it comes to DNS name server because within AWS AWS manages AWS basically manages its own DNS by itself so what you should know is just like how within AWS when you're implementing any application server you have to think of high availability which means that you have to think of what happens if this server goes down what do you have another server that would ensure business continu it's the same thing with DNS okay it's practically the same thing with DNS same thing if we have to illustrate it like in our in in our scenario of JJ Tech looking for Zane you see that in every in every small group we have an assistant group lead so if if that person tries to reach Victor to get zay's number and Victor is not picking up the call the his phone then there's an assistant leader he's going to look look for so he a same thing all of these DNS servers they all have some level of high availability within them implemented so that if one name server is down that information is backed up in another name server that can be able to provide the the information that the resolver is looking for make sense yeah thank you yep but that's a really good question I love that question okay so sorry sorry m in the same vein um in the same ve vein of ha security is also Paramount because if a hacker gets into one of these and changes the data or something then the entire system probably gets messed up so how is that kind of secure because it's now global right any faulty um information that resid in any one of these um look up tables could cost a lot of Havoc if is the one wrong one absolutely so the way that it has happened the way that it happens from a security standpoint is that because it's Global AWS within AWS let's say AWS for example AWS has taken lots of steps to ensure that when you're storing this domain name is secured nobody can steal your domain name because even when tonight we're going to buy purchase domain names everybody in the call we're going to purchase domain names and when you want to purchase your domain names it's going to tell you if that domain name is available or not and if it's already taken then you cannot take it anymore but you cannot but there are also hackers out there that can steal your domain names right so within Route 53 which we're going to talk about down the road we'll talk about how you can secure it within route or how AWS ens show that your domain remains secured even when you're managing your your name serice within AWS those name servers are highly secured within Route 53 that it doesn't get compromised okay we'll talk about that okay all right so again just to recap the gns lookup process step one your laptop which is the DNS client needs the IP address of a host name that you have or a domain name host name domain name they are all the same thing what the first thing that happens before the resolver even starts the lookup process is the resolver checks cash we already know what cashes so the resolver will check cash and see if that information is cashed at the level of the resolver before it starts the look up because something like google.com I'll tell you that a lot of time the resolver is not actually going to reach the google.com server authoritative server because so many people are already browsing google.com so that information is typically cashed within the resolver in most cases so the first thing that happens is that the resolver will check cash and then if the cash information is not there then that's when the lookup process starts it starts look using the r the hint file to query the root server then it queries the top level domain server then it queries the authoritative name ER before it gets the IP address of the information that's looking for and it gives it back to your computer and then your computer can communicate directly with that hyp address all right with that with that server so when we say that DNS and you guys will hear about this a lot DNS is distributed and hierarchical we basically mean that you have a bunch of name servers and those name servers are sto foring pieces of information so you need to go through a lookup process to get the information that you're looking for let me put that in writing when we say that DNS is distributed and hi raal these are keyword we mean you have information distributed in different name servers and the resolver has to go [Music] through a DNS look up process to get the IP address which the DNS client needs okay so this is this is the foundation to understanding DNX DNX is more complex than this but when you understand this foundation and understand the basics of DNS look up then you can thrive in every environment that you find yourself in all right so let's bring it all to Amazon we've been talking about DNS as a whole in any environment but now let's talk about Amazon So within Amazon within AWS AWS has its own DNS product that's called Route 53 okay Route 53 Route 53 is a DNS product that offers two main Services it gives you the ability to register domains and it also gives you the ability to manage your name service okay so Route 53 is aws's DNS product that you can use to register domains and manage name servers okay in AWS we call name servers host zones okay you hear about host zones you not hear the terminology name service in AWS but host zones is basically the same thing okay so within round 53 you have the ability to do this these two things a lot of companies before coming to AWS they already have their domains they must have purchased the domains outside of AWS if you've purchased your domain outside of AWS you can bring it into AWS which means that you don't need to do this you don't need to do registered domains you just need to transfer far that domaining to abls and then you can start managing a would manage your name servers for you or host the your host zones for you host zones okay those are the two things that Route 53 offers okay so in order for Route 53 to register domains AWS has a relationship with all of the different domain registry companies across the world all of those domain registry registry companies that own the root servers and the top level domains do.uk doca net. i.e. Au all of those domain registry root top level domain companies AWS has a relationship with them and that that relationship has given AWS the ability to have its customers registered domains using them okay so when you want to register your domain the first thing is that you have to think of the name let's say you want to start a business today you can say Okay I want to start my my my online shopping shopping business and I'll give my shopping business the name Ika and Sons for example so you can say Okay I want my business name to be ikena and Sons and then you say okay I'll call it www.am and sons.com so now you need to go and register this domain so that nobody out there can take it you have to register it and that that's what registering domain means in Route 53 and AWS sells these domain names okay so you go to rout 53 you click on register domains and then it's going to tell you that put in the name and let's search if it's already been taken or not it's like creating an S3 bucket we remember that your S3 bucket name has to be globally unique so sometimes you put a bucket name and then a will tell you that oh that that name is already taken you can't take it anymore so it's the same thing with r 53 you put in your domain name and then if it's taken it will tell you to choose another one or it's going to suggest other names for you that you can take if the domain name is available then Route 53 starts creating the Zone file for that domain for you once you register it okay when it starts creating that zone file which is just basically a database it's like your name servers it's a database that contains the DNS information for you then it allocates four name servers for that zone and those four name servers are just for high availability so that if one of the name servers is down then you have three other name servants that are storing and managing your DNS for you so it takes the Zone file or the hosted Zone and puts it on four name servers and then it communicates with the top level domain registry so that he can put that information in that registry so that if somebody starts looking up www. and son when the lookup process starts the top level domain registry or the top level domain name server will know exactly where to direct any resolver that's trying to find your IP address is that making sense so all of that happens in the background in r r 53 but the main thing that I want you to understand is that within Route 53 when you register the domain it creates four name servers for you and those four name servers are for high availability okay all right can you just back up that thought last thing about these four name server with did Route 53 M so uh go ahead no I mean explain it again just so I can get it uh in my head okay so let me put it in writing it's easier when I put it in writing so the first thing is that when you register the domain if the domain name that you're trying to register is available round 53 create a Zone file for it okay so if the domain name is available rounde 53 creates a Zone file for that domain and the Zone file in you not you not hear the word Zone file I think it's a Zone fire that we call hosted Zone in round 53 okay and now these Zone files AWS around 53 takes this Zone file information and allocates four name servers that same information is stored in four name servers okay name servers are just servers that are created to manage your domain because we didn't in most cases those domain will have subdomains within that are internal domain names for it we're going to talk about subdomains but AWS allocates those four name servant for high availability so AWS allocates four name servant to store this information in a highly available Manner and then Route 53 communicates with the top level domain registry and add the name s records to the Zone files of that top level domain registry okay so rounde 53 at the Zone file information to the TLD name service okay and that is how when you create your new website today it's easy for someone to see any in any part of the world and search for that website and be able to get that information because again DNS has been able to update all of the different name servers based on the hierarchy of lookup with that information so that he can it can pull that information for you so within R 53 somebody asked about ha AWS has all name service just for your domain to make sure that the information is highly available and R 53 is a global Service it's a global Service it doesn't it's not restricted within a particular region or within a particular availability Zone it's a global Service okay any questions yes uh one more so why is it that when people then make add an edit to their to their name um you know did the website or something in there that they say with a couple of days for it to propagate I never could understand that one okay we'll talk about all of those things when we get into other aspects of domain so when when you that is your website that's your application right it just depends on because within Route 53 or within your domain you have the ability to cash information right so when information is cached like we talked about time to leave sometimes the T TTL has been set to a longer time and so it takes a while for that information to update the cached database most of the time when I when I was working with DNS when we have to make some updates we go and we change TTL to 1 minute or to to zero few seconds so now when we when you push the updates it immediately refresh that information but sometimes organizations some companies will not change TTL they'll just leave it long and then it takes a while for that for that information to be updated okay any other question abdella yeah um hi Prof so quick question how would you be able to configure this to work number one with Autos scaling also with load balancing because um if you have have your T will it be Hing your TLD to Auto scale from there and also in terms of the load balancing because I'm I'm trying to think about having a forame service is it going to all have say ww. amazon.com and then maybe your shoes department will be ww. shoes. Amazon.com or how high is it or is it going to be one two three just the same name that's a really good question so and I love the fact that you're thinking about all of that right so in our in our session on Thursday we're going to do a simulation where we're integrating Route 53 with Cloud front with um ALB and then you have your application running in your application servers so that you can see how all of that works and connects together okay but um I think that after that simulation all of this is going to make sense to you and you're going to see exactly how um what round 5 the capabilities within round 53 and the capabilities within your load balancer and where how Cloud front comes into the mix we're going to set all of that in our hands on so that you give you guys more context okay so let's not dive into all of that right now hold that question if after the simulation next week you still have any doubts in that area then we'll talk about that okay right sounds good thank you you're welcome all right give me one second guys give me actually give me five minutes I'll be right back okay I have a question but when you come back Victor them can you guys hear J me yes yes all right so it's V is if Victor is not there we can we can just proceed and then when he comes he can ask ask his question so like I mentioned earlier route with Route 53 you register your domains and you manage your name server which is basically saying that you host your Zone files on AWS managed name servers okay if you again rent sometimes I've seen organizations that prefer to bring in their domain names from from other you can go to maybe godaddy.com if you go to a website like www.go daddy.com you can purchase the domain from there and then you bring it you transfer it into round 53 if you already have a domain you don't necessarily need to buy it today you can transfer your domain into a because your the domain that you guys are going to buy tonight will cost you at least $15 I think that's the least price for a domain on AWS and AWS doesn't wait till the end of the month to charge you for that domain they charge you instantly meaning that your card will be charged today for that domain but if you already have a domain that let's assume you bought a domain before or you want to use somebody else's domain you can bring in that domain into Bless but again it's important for you to do have that domain so that you can go through the hands on for today and next week and understand everything that we're doing and how it connects to DNS Jude go ahead it's good to see you by any way how are you I'm good I'm good thank you very much so my question is quick so can I use the if I have a if I the domain I'm to create today can I use it for my online business absolutely yep yep so you can use it for because you buy you pay $15 for that domain today you use it for a whole year you have access for a whole year after one year you pay another $15 so um but you can sell it today to expire so that it doesn't renew it does not automatically renew or you can keep it for as long as you want yes you can use it for online business so good thank you should start thinking of a name maybe if you're planning to open a business at some point if you already have a name use that name to get your domain cuz I wanted I was planning to get it with Go Daddy just like you said I was I wanted I was curious when you were speaking about this domain name I was listening because so my question I was like hey I thought the gold Daddy was uh was owned by amazone I was thinking like that I thought GoDaddy was owned by Amazon because in fact it's an online something in the cloud so my mind was so much that it's Amazon that had it so but now I'm getting it more clear thank you very much you're welcome you're welcome Victor go ahead yeah yes my my question is is this um following the kind of question that Abel put in there where we were talking about ha and the rest of I never heard you mention that this was a a managed service so are you saying that all these things are supposed to be done by us because is it a managed service though ra is a completely manag service okay the only thing that you do is you register your domain when you register your domain immediately you register your domain AWS creates those form manage server name servers for you you see them it automatically gets created okay and then all you need to do now is to go and configure routing policies how you want route fys to be routing traffic because now people will no longer need you remember how when we were doing load balances you had to take the DNS of your load balancer and put it on a web browser for you to reach that application with Route 53 now people will no longer need the DNS of the load balancer they'll just need www. victor.com that's all so you can tell everybody that oh my business name is JJ tech.com or victor.com and then that Route 53 would direct them to the exact application server but now you have you as a solution architect you have to set that routing so you create routing policies within Route 53 to help route the traffic okay okay Y and we're going to talk about routing policies next Thursday um any other question all right if there's no other question I'm going to pause here for tonight next week however we're going to talk about we're going to continue from here we're going to talk about the second piece of RA 53 which is your hosted zones the two main types of hosted Zone you can host create public hosted zones and private hosted zones we're going to talk about what those are how those work and then we're going to go into routing policies how you can Route traffic health checks Route 53 has the ability to actually check if your servers are healthy and all of those things so we'll talk about all of those and then we'll do a simulation an end to endend simulation that starts from Route 53 and directs traffic all the way down to your application service so you guys can see exactly how what we talk about for tonight we're going to take our 15 minutes break and then after when we come back we're going to register our domain but we're going to use that domain to create um to uh basically we're going we're going to create pretty much the same thing we did with a with a static website with S3 and then we're going to remember that when we created a static website you had to take that your your S3 your your S3 name and put it on the web browser this time we will not do that we will integrate your study website with round 53 so that you can hit your domain name and then you would use that domain name to get to that studed website so that's what we're going to do tonight and then next week we'll do something more complex than that okay all right so let's take 15 and then when we come back at 8:45 we will get into into our hands on all right yeah Prof I got a question sorry for good daddy how much is website how much is domain name for on Go Daddy honestly it used to be cheaper than Amazon but it looks like uh it's gone expensive right now because there's a lot of tax involved when you when you it will tell you that it's cheaper and then when you go to check out it goes almost the same price as Amazon so I'll just recommend instead of getting it from gold Daddy and then you transferring it into into Amazon I recommend that you just get it from Amazon if you don't have one just it's about 50 4950 exactly so but Amazon is I think the cheapest is $14 or maybe less no it's not $49.50 I just renewed one for $23 but they give you some discounts when you start but then it balloons after one year and you start paying the high price that's what they do they get Amazon is a fixed price and there's no tax involved it's not it's not like you you know how you purchase something and then after that with tax it goes up with Amazon it doesn't it doesn't do that you can just Google it and you'll find it and then you you know just tried checking it now I saw 49 so I don't know I never knew if when you which is it no net yeah because some of those domains are cheaper than others so you can look for.com cheaper then correct okay all right see you guys in 15 right see you bye I just restarted the recording the guys that share could you guys also try to let other people try to share before you quickly do that oh you want to sh no I don't want to share but just to give other people a chance if in case they want to I waited for a minute you know I'm just saying because there might be other people who might want to share every now and then who wants to share ma go ahead you've shared already go ahead thank you did you get a new haircut let me worry so we cannot see your cons I'm bringing it now so for the Run um hands on for today we registering a domain and selling of the T static website I think I said that before starting the recording and we for that we would need to register a domain you can register it add register you you prepare but if you're in AWS you can already use rounde 53 for that go also works then you would need to uh can bring in your name servers into into AWS in order to cons uh configure Route 53 as your DNS service so there a register and DNS service so Route 53 performs both functions then we would create two buckets one bucket for the top level for our domain name and um another bucket with for the subdomain and configure our uh subdomain bucket to redirect every request that comes with uh from the clan from the browser with the subdomain to be redirected to the top domain and upload some HTML to The Domain blet which would be displayed when somebody tries to reach our website and ensure that we configure R 53 to um route our traffic whenever somebody is trying to reach our website to the back end uh sory bucket okay so for that we start by registering our new domain for those that already have a domain I guess you can hold on this oh Prof I already have a domain name should I let somebody else share probably that would be best okay I'm going to stop sharing shant J you've been quiet at least for the past few sessions that I've been here all good so far with your training uh prop I got a domain uh earlier this year from good daddy and I think it's in my account already you think it's where in your AWS account yes okay if you if you um configured AWS your DNS server that's also fine that would work all right thank you just a little bit overwhelmed Chantel you want to share I can't stop so um we go to Route 53 as you go to every other AWS service by typing Route 53 you contact that so that you have direct access to it and under domains register domains then you click on register domain so doesn't have um should I use a ramb or it can be my name or any name I want to use you cannot use the domain that is in the Run book two domains cannot be registered okay so you need to give your own domain it's like S3 so if I already have a domain register you can't register the same domain that's why if you see in the Run book it's um we are making a general reference to JJ tech.com because you guys are all under there for the academic section but if you look at the Run book I have a completely different domain because that's mine if you copy the domain in the runbook or.com is going to tell that that domain is no more available so you need to give your own domain okay Romain 33 click on register domain then in here you put the domain name you want I would advise you I don't know if you intend to do something in the future just get a domain name that maybe you can use or maybe maybe not maybe $40 or 10 off for just for the year and for the for your demo I keep this domain because even when you're doing other things you're studying other aspects you can always use um The Domain to um basically set up do your PC's right for example when we get to kubernetes or ECS you can you would always be uh trying to make your website that is running in a container available you need a load balancer for that that load balancer needs to talk to something in it a domain name so would you would not only use this for at least for our training not only use this for this S3 hosting of status website we'll be using it going going for other aspects are going down all right are we together yes so if you type in the domain name which you want you click on search and AWS and R 53 is going to search the whole internet to tell you yeah I I was going to say that R3 is going to search the whole internet to tell you if that domain is available so Franchesca when you're creating a website there cannot be space between your um characters okay so you can use a hyphone that would work but whes space is not allowed for domain names I think I will need I'll use a Hy so you can see that the is 14 usd.net is what 15 if you want to use iio I think iio is the most expensive $71 um so if you're using are we all here Fran hold on okay are we here anybody good so you select the the domain with the price that you want you can see that this is a price per year so if you're keeping this domain beyond the uh same time next year and AWS is going to recharge I guess using the pricing at the time which one think which one should be is it the 14 or the $15 you're the one paying you can also use 7 to1 if you that's if you prefer that is that what you saw so this is going to be charge you when you created your account you uh uh did put in payment details with your credit card right so a immediately is going to remove the money from your account um my apologies my question might be a bit silly um can I use UK it's quite cheaper for me9 us if it is there you want to use it then go ahead okay thank you we need a domain name wherever you register that's fine so I advise you use the cheapest okaye work for you works for that's fine okay except somebody has need for so I do not recommend that pardon what's do are you typically use for I think it's also for uh businesses right there a couple of businesses that I have send your websites toio but you can also look that up I know is for much commercial businesses. for Education related. org it's from nonprofit organizations yeah so you can just look that up oh there's $14 so there's there's $14 but you you you selected net yeah you prefer net no that's call so you need to select it you're buying two no you need you need to select this buy me one too props I need to remove this right so yes you need to remove that net oh okay so I did a do that's so once you select the domain the top the TD the top level domain which you want then you just click on select so and check this right oh you you already selected it that's why it's here 50 um $14 so it's just like you're buying from Amazon you need to go to your checkout and pay so you can see here in the next Details page is telling you that um this is the pricing for one year if you're sure you want to keep this domain for the next 10 years you can also change it and you pay I guess with some discount and auto renew is on auto renew basically means that same time next year AWS is going to recharge your account for this domain if you if you uncheck that then after a Year's period the Francesca afoc cod.com will be available and some other person can get it okay so at this point you just click on next what oh wait go back you chose Auto do you want to keep it no okay thank you you're welcome leave leave click on you have to do it all over again we supposed to get can Tel cancel okay Prof Prof I have a question yes so let's say I didn't choose Auto renew then where AWS send me a a notification to remind me that my domain is about to expire whether I want to renew or not it's Auto renew so I think they just Auto renew it but iess I what about if I didn't select like like if I don't want Auto renew canic I think so I don't know mine is auto advise do we put it on auto renew or it's if do you want to keep it Beyond one year period if yes okay if you're not then you you can just um use for one year I have mine on auto renew so nobody gets it so when I get a job will I still be using this or you can use it for your private um po U study right whatever you're doing in but most likely once you in know company they already have the do they would already have a domain you can play with some subdomains right you understand what domain and subdomain is right anyway I would throw more light on it when we get there okay PA can two people use the same domain no once Francis buys this domain if you look for the same name it's going to tell you it's no more available you can just try by checking g.com I think it's jch inc.com it will tell you there no more available because um gch bought it already all right thank you if that's the case then I will go and buy tesla.com um um Prof is it the same concept as naming the sray bucket yes I would say but basically you cannot go to the internet and you say tesla.com and you have two different Teslas right that's what they're trying to avoid so just one webite website should be available over the internet on specific domain Professor for the general information what do we put like is it person company or we can just use anything you can use person so this is your your details because um I don't know if you guys heard the story I think Elon mus bought this his Tesla domain for about 80,000 USD and that's because somebody already bought the domain I was just keeping it and when El decided that it was Tesla I needed person needed they needed to R negotiate the price for it so if you go to the internet and you're searching some domains it will tell you that it's not available but you can't really see a website for it because some people just buy domains that they anticipate that oh maybe somebody want this someday then they keep it then when you need it they resell Pro just like I I when I search my name I found the person who already registered his information and how much he wants to yes that's that's what happened so some people just register domains they can say okay this is a domain that somebody might like in the future they will just register and keep so a good example is Tesla when they wanted Tesla I don't know how Alon arrived at Tesla but it was not available he had to go negotiate the person first of all refused to S sell and at some point they agreed on about 80,000 something if I remember the story right before the person transferred ownership of the domain to to I so if I use it as a person as a personal domain can I use it for my business yes you can use it for your business it's yours once you register and pay it's yours so if you um do not select auto renew bu new same time next year the domain becomes available so somebody can get it at that point or if you want to sell the domain you can also leave your we get to a point you can leave your information there and if I say oh I want uh Franchesca something in the future then your contact details are already there for me to reach out to you so once you check out the domain AWS is going to uh process your details in the background then send you a confirmation Link in your email so you need to go to your email and validate your address so your email you need to validate that and your payment details for your AWS account should be fine then everything would be smooth lesie do you have a question time is raised if you're talking M my hand sorry BR quick question if I have a domain name registered with a a different domain company can I bring it into AWS yes yes we do that all the time so that also happens it's a a support startat So a different company like Go Daddy will be your register you can also keep your your domain name with the register but configure AWS only as a DNS service or you could completely migrate your domain into AWS however you want it works so I've actually faced a c couple of projects that are like that we have the top level domain like the what is it here Francisco afoc cod.com it's with another company and we are controlling just the subdomain but there are limitations to that because of recent I was on a project and um they had they already registered their domain for um domain registry company here in Europe they call them host Europe then we were setting up environment for them and they wanted us to use um Cloud front with your top level domain then they there are some limitations to that architecture so I propose them the what to do the limitations to it at some point they said no it's preferable migrate everything to L so yes it's possible does match the price for you when um you migrate you bring it in pardon does AWS match the price for you when you bring it in does does what is it going to match the price that you are paying um let's say go daddy is it going to it's going to be on the price at the time you bring it in so they going to evaluate it then oh okay well if I mistakenly choose the auto renew can I up out after the domain has been registered I think that's possible I've still not gotten an email yet please refresh your email did you put in email details yes def admin Amazon did you put in your email details I think I did not did I refresh the oh got it from my my my challenge is um the the the my the bank card the card I used in opening my AWS account I have it cently I have no money inside I want I want to change it and put up another one so what how you go to the AWS billing and cost automization and billing page um Fran just go so we can U that right there bilding and cost management one of your tabs here I can see it there so you go to AWS Billings and cost management and there is uh should be a section called bills go to oh no payments that's it to your left payments so if you have a pending payment it will show here so you do not have any payments due then you can do uh complete payment or uh change your payment details here I think all right yeah you can do that from here Fran let's go back to ra 53 can we continue so um um who was that should was it yeah yes you would buy your change your payment details and you catch up with us right yeah that what I want to do thank you all right let's continue do we do you already have your domain validated yes I do if if you have your domain validated you go back to Route 53 once you buy a domain with AWS AWS creates what we call a hosted Zone um you already covered what a host is that was a question did you cover host zones today yes we talked about yes yes we did great good so AWS creates a hosted Zone which is basically a container for your records so if you go there they would create a hosted zone for the uh domain which you you you you bought so go down to hosted zones up up up up up yes so R 53 is a global global Service so you should you see everything here now you have a Francesca aoc.com public hosted Zone and once you buy a hosted Zone the are two important records that are created by default a start of authority record which basically says that this is where the authority of this record this is the Hoster Zone that holds authority of this record and where the S SOA is you also need to have the name servers the name servers are basically servers in the background that actually have your Zone file with the name and everything thing so the top L domains.com would talk down right down to this name server so the name servers are what we call authoritative servers they are the ones that are authoritative for Franchesca aoc.com so wherever you go to there is what we call the root domain the is what the root domain if you go to the internet and you say I want Francesca ao.com the root domain doesn't know a franch ao.com okay so it's going to look for that information by making contact to um how do you call it the name servers for franches so the name servers are what we call authoritative they always called authoritative name servers the root domain is going to make a call down to this name servers and the name service is going to supply the right information in the wall of DNS they call it walking the tree let's go so can you click on select the the domain you just created so we see the name servers I'm talking about there always four of them yes so that will be created for you by default and the S OA record can you click on that there is another record called start of authority yes where my pen yeah click on this yes this is what I'm talking about so for these domains please do not delete this two records these two records must always be there all right good Pro so it created a hosted zone for Franchesca because she bought the domain inside of AWS yes got it so way that we already have it um domain names we should just go ahead and create a Hoster Zone do you where did you have the domain where do you have the domain name uh I bought it on um I've had it for quite some time now but it's on names cheap okay do you need to migrate the domain into AWS there is a section go down if you go back to register domains yeah register domain Francis can you click on register domains you with me yeah Prof what did you say should do here okay register transfer in transfer in what go back so click on transfer in single domain so enter the domain name so this for those that want to transfer domain name here all right not transable what cck check you see notable because it's here yes yes I was just saying did Francesca actually confirmed with the email that must do or you'll get a call from AWS to do whatever confirmation meod so she said she said she confirmed did I hear you right Franchesca you confirmed right yes I got it yes okay if you do not confirm the process will not get to completion well they said it will they will delete it uh 14 days end so yes they'll give you a time for you to make that confirmation deleted ref right you deleted ref right I deleted what no it's they're talking about something else yes my domain is is still on progress even mine are you in AWS or you bringing it into AWS no in AWS refresh your page go to your email and and confirm did you confirm no email yet please refresh your email I already refreshed mine hopefully you put in the right email address yes my wallet yeah go to your email on that link that's it there's an email just go to the email and valid it so there are two things that could store that process you clicking on the validation link and your payment details you must have money a to to to charge that amount give two three more minutes for this process then we move on please so it tells me that I have done have registered and they've created a hosted zone for the domain yeah that's your confirmation yeah um Prof is asking me for authorization codes when I'm trying to transfer it yes you need to give authorization from the um um from the register that you use so it depends so um so I'm in the I'm in their website but I'm not sure where to get the confirmation C I use one two three right why one 123 is that what they are giving you I use one two3 to register the domain name that's like this is like a while ago you used what I think the the company is got one two three r one two three R I know that so every every um register would give have a different me of authorization so I I account no you're right prop M you need to log into that that provider into your account and it's in there that you have to initiate the transfer from there yeah you initiate the transfer from there and then they will give you that authorization code which you will put into the yes AWS oh okay so every register would have a different way of validating that transfer so you go to the register it's always a pretty straightforward process because I'm sure companies are doing this all the time and they would give you the authorization if you do not give the authorization from the register AWS will not receive authority over that domain um Prof um if you're already getting um in progress pending and you don't have an email how do you resolve that how do you drop show that just just give it a minute there's nothing we can do it's a that needs to send you the email refresh just keep refreshing your your how do you call it also try to check check your spam to make sure that the email did not get to spam correct it's likely in the spam so bring it out from the spam and click it so go to your spam forther because I'm very sure they sent an email if everything checks out why fine your payment is okay I'm very sure that email email will sent go go to your spam and check it's a no reply it's most likely a no reply it's from Amazon Route 53 are there so many people in the C I did not get an email shant did you get one I didn't I'm still I didn't I refresh I check my SPAM I didn't can I can I see your your conso shant you're doing in AWS right yes yes I just give us few minutes so I'm sure should be having issue with their billing yes so I said there are two things either that either that email you've not clicked or you're billing so billing could be issue if there's no billing way for them to build they will never send you that email they send you when they cut their money I had the same I had the same issue my billing so I had to reify that Shanta go to your billing dashboard and see if you have a pending payment so if your card is expired or there's no no money there for them to make that deduction they going to tell you there I'll check the email I receive is not from non rep it's from Amazon rounde 53 I think can you guys see my um M just says um Amazon registra you have access to Amazon regist yeah same with me if is there a link there for you to verify um it just says to manage your account access keys go to the G me a website just give it give it a few moments you can get second email so that's the first you can get a second one and then you can click on that to activate and then you get a third one that confirms the activation okay all right give me a minute let me Shanta please go to your billing and and cost management dashboard just type billing in the service sear services and yes yes click on that go to build okay I have a thing it says access Denine or the user you're using right here does not have permissions to see this okay I say I need permission and I'm very sure it's also because this user if you this user does not have R 50 permissions you will not be able to perform what you just did maybe are you sure this user has full access which user is this Shanta can you go to a am can also check I can see probably see the permissions but you cannot make changes all depends go to users shant click on it shant click click on it not not don't check click s oh okay whatever which of them is right is Click right yeah but you have admin access go down where scroll down scroll down oh okay is this account part of a control tower or a organization it's the one that we we did here it's my account okay um this is weird that you do not have that you don't have permissions for that I thought it was maybe in the setting when I was said I don't know when I was setting the building with the day we did it but yeah that's the problem I have I don't want to spend some time looking at something a little bit okay someone else can sh no but I want I'm curious to see why you don't have it go back to your building dashboard billing billing billing building so the others did you receive the email no I didn't yeah I I did show me that it's in progress benefit of Doubt let's give those that in progress couple of minutes so we don't leave you behind for okay this is very weird why do you have access denight here say are you sure she paid her last month Bill if she had a bill for last month no but access denied is a permission issue it should not be matter of scroll down to bills click on bills yeah Prof uh maybe she should try to use the road user she creating the root user sometimes maybe they need some policies for the administrative right to continue the IM yeah because that's I that's why I ask if this is part of an organization or some SCP policies are there because with that you can have admin access in this account but still um they can block some things from higher up but I'm very sure that's not something you guys have current so um um Pro yes so if she goes into her root account and and gives this particular account admin access I think this should work yeah should work so but that's why I was looking at the policy I could already see admin access there yeah I get the admin access oh you do have right yes okay so that's weird can you lock in as your root user just let me I have to remember everything let me see please never ever abandon the or forget or throw away the password for the root user that's important this this I am user you can uh uh uh discard the password and something forget this one but the admin R of your account please put that in a vot I have to go to SRO here you need to log in sign out do do a sign out yeah and then and then sign in with the root user account sign in with the root user account oh okay switch to root user does it write down and sign in using root user email write down last but one yes yeah there you go what's the email what's the email no email okay wait yeah you got to put the email in there or yeah when you created this AWS account you supplied an email address yes and a password that's what they need here it's right there at the bottom click on that so safe yeah sorry I wasn't watching my password is already now your MFA code you remember what you use you do you do you have the thing I think you saved it that's I think we did this with you isn't get it from your phone get it from your phone I have to get it from my phone I'm just trying to yeah it's the Microsoft authenticator I have it you give me a second see why this exercises are important um and pro insists that we go through this because it's the learning process as well for all of us there you go now go back to building and cost management there it right here view buuse buuse oh sorry here scroll down scroll down sorry can you go to payments let me see where isay payments on the bills there payments oh no payments due so I don't think you have a issue here to purchase orders purchase orders okay Prof um I remember there was something we did when we were creating static websites that needed to uncheck to allow users have uh the ability to to read the uh the billing I think it's some kind of permission thing yeah it's always permission once you get access deny it's always permissions always that's the only thing it's a 403 yeah why don't you just create a so because just just at this point go back to um Franchesco go back to the Route 53 and buy that website can you go down let's see no sorry you you're the one facing the issue oh okay Chantel right Chantel sorry go to Route 53 put in the domain name which you you try to buy if it's still available it would show it would pop up if it's not available then it would tell us okay can I do it here should I go yes do it do it right here please be fast oh it's already there where is it so it's there yeah click on hosted Zone that's it you have a hosted Zone there that's it there you go okay so you can lo log in back as your user your I am user all right let's go ahead let's move I receive an email that they can't register my my my domain name because your domain contact AWS support we all the they give a website to contact them and that's all they said what's the name of your domain rich bross.com what rich bross.com rich bross.com give me a minute let me see what's happening with that did it give you an error no nothing nothing when I when I created it just show a zap so I thought it was good then you just look for another domain name please did they already build you I don't know they've not build I don't know if they build you you can always tell them I don't want rich.com rich bros.com is already taken right rich.com yeah you type it up something shows up yeah I just available yeah I also did that I'm the one who got it first but when I tped it there it came out like that mine is still showing domain registration in progress please go to your hosted zones refresh and see make sure that there is no host Zone as what the case of sh well I went to host hosters zones and um it showed one yes two records yes that's what we looking for I didn't get any email though yeah but check your whole I'm very short how did you set in the when you're putting in the verification details how did you do it I just typed in everything and typed in the email it's supposed to go to yeah there is a link in that email are you sure you did not click yeah I don't see any email I've been refreshing yeah but they would create it if your thing your thing is there they've created it but you need to validate that thing and they will give you a time period if not that thing would that domain will go I guess you have August 11 to make sure you click on that email so if it haven't come it will come all right sure let's go ahead I verified the email but I still don't see the domain do you still hosted Zone hosted Zone a hosted Zone I don't have a hosted Zone to either Shantel yes no it's EV oh EV I see theost you see the host on yes sir um um EV please refresh your browser I've refreshed it Prof like 10 times throw your laptop are I come and get no host Zone and it's still in progress like when I check the domain registration it say it says it's still in progress and your billing is okay yeah my billing is okay I have access to it but there is nothing not access to it is there money for a to deduct in your account then they will not give you they need to deduct that money immediately not something that done after the fact um they haven't deducted my money but really my car I know there's money on the definitely be mine was mine was was done immediately The Bu doesn't show on my on my bu conso I don't know how to help you then oh they've deducted it yeah I know it's supposed to be done immediately this is different from a other bills if you're registering a domain they cut that money immediately just expending bill St is spending yeah it says it's spending here would also say it's spending in um what do you call it your credit card but it must be some validation that's gone in the background ensure that that amount of money is already there Mara when you check your estimated grand total is the bill included in it for the domain name is included yes but it says Bill status pending okay EV I I don't know why you you're getting an issue because if your bill is fine your poster zone is your how do you call it the name the host the domain name you selected was available it was available and you've tried to redo it thinking that maybe I made a mistake and they said there is already a request for that and it's in progress so I hate to leave you behind but I think like give me a minute this is what 3:30 oh no sh let's see there's the last please if you have an issue try to follow up so we could we can actually do what we need to do today we can do it under 1 hour actually hopefully no no more is I I I I hate to leave you behind for no fault that's yours this is my build go to you already have it oh my God it was not like this already have it I've been checking go already have St I checked 10 times let's go let's go let's go thanks for your patience Pro welcome so Pro S3 right and thank you all to the your patience very important yes we have to go to S3 and we need to create you guys already did S3 right so all this is familiar we need to create a bucket you give the bucket bucket name so in this case because we want to create a static website the bucket name must match the domain name so the domain your domain name please put it here the domain name I used the domain name you just bought from AWS okay right Francesca a.net was it not oh sorry yeah and there was no space in between I she us I used Hy there's you can you can also open your Route 53 in a new tab and ensure that this is exactly the same yeah that's it please ensure this is wrong you will not get a result at the end of the session it's right I wrote it down so right we add ww put in put in the name the domain name there we'll get to it yes you can add but we'll create another bucket for that okay are we together okay y good and we want to leave everything as default and we create this Bucket please ensure I repeat ensure that the bucket name is exactly the same as the domain name you just registered if not you will not get I did I did I've checked it's the same thing you guys I'm not talking I'm I'm not talking to you Francesca I'm just General note to everybody in the call just go to your R3 and copy the name to be on the safe side it it's very long then just copy it if it's a long name from rounde 53 and paste it in the S3 that way you're sure 100% the pro crate right yes if that's done then we can create a bucket yep we need to create another bucket now with the sub doain so sorry you guys understand what the subdomain is all right let me let me just take a minute and say this here if you have a domain we have the comp. net.edu ad. .org that's what we call Root domains okay so you register a domain like what we all did and to the root so if you're either doing it on the do com you're using the do as a root domain or theame as a root domain so you put your domain that case is called a t a top level domain so what you have here Franchesca um aoc.com that's your TLD that's your top level domain so your Franchesco avoco is under the root domain.com so now um you can have different websites under panesa ao.com if let's say this is um um what can I use um let's say this is an e-commerce business or education okay and you want to have different aspects of your education under F AFU then you can separate that using domains you can say um trainings do this. afoc um what is it again um basically different aspects of your business under your subdomain right does it make sense so if this was for example a group aoc.com was a group you can say under the group you can have an education afoc uh that's a long domain name a Francesca aoc.com you can have um if you have a restaurant you can say e. afaa.com that's to say that okay this is taking care of my my restaurant part of my business does that make sense yeah it so yeah somebody was about to ask a question I was going to ask is it the same um formula that AWS uses when um you create a new S3 bucket it makes it like do S3 so Prof I can use this name is that bucket is it S3 I'm not cuz you know you can you just need need to pick a unique name so is it the same sub domain Amazon already has a top L domain nobody can get that so all other buckets would be using that top L domain anything that comes in now goes in under the subdomain and um if you go to a good example I think is Google right google.com so they should be what maps.google.com right yes maps. dole.com what again um docs docs.google.com and those are all different subdomains that are telling you the different aspects of the top Lev domain to google.com so Google is the top the the name they choose under the dot root domain does it make sense yes sir yes so let's go ahead Franchesca why don't you use shop. aoc.com that way it's easy so no no no Franchesca at this point this is not um a subdomain so subdomains are separated from the domain using the dot symbol so you still you still need to have all your um so you still need to have all your TLD the Franchesco ao.com that's your top level domain TLD means top level domain then a subdomain is separated using a DOT so any character before Franchesco afoko deiminated with a DOT sign the full stop that make sense yep dot that thing you're writing is not correct come on any query at this point all good come so so Franchesca AF give me a minute this is what you just registered for 53 right this is what we call youring this is your top level domain okay now we want a subdomain for this so you can whatever character you need some characters before Francesco aoc.com and you diiminate it with a DOT with a full stop so if you look at you have JJJ in.com you can put academy. JJ in.com so Academy here is a subdomain of JJ in.com does it make sense yeah I use Google do Google because that's very um so you have maps.google.com dos. google.com whatever google.com that's out therea it's on the other before not on the other side remove the dot remove dot yeah yeah just put something like Shar you know no you need you remove the dot before your characters you need a character before the dot I just got do like yes shop shop that from.com so that you don't confuse yourself this this is Fran Francesca ao.com try to use try to use I would really advise you to always try to use descriptive names but however please at this point I would like us to use a common subdomain for all our tlds just do ww. franco.com so ww. in this case is a subdomain all right for franchis cfo.com okay so we all should use ww. so it's easier okay your your fr. Francesco aoc.com will still work but let's just try to find some common ground here with the subdomain so this is the only change we need to to make here ww. Francesca aoc.com North Virginia good so now we've created two buckets one bucket is our root domain this is the bucket the one with the TLD is the bucket that's going to host our website and we are going to configure the second bucket as our redirect bucket what does this mean it means that sometimes you go to the internet right and most people when they want to type a website site they always use the worldwide web do whatever website that you want to get information from so what we are going to configure with the bucket with the subdomain is we want to redirect every traffic that comes from the internet to this subdomain to be to go back to the the bucket the root domain that actually contains our website make sense yes sir good so for us to continue we need to go back to our root domain the bucket that actually needs will contain our website the root domain bucket so in your case Franchesca aoc.com and we need to configure this bucket to host a static website so you select the bucket and you go on to properties you already selected you go to properties you scroll down to the bottom of the page so on the properties I'm sure you already covered is bucket for versioning encryption and and um intelligent sharing and servers access loging Cloud trade data events event notifications I'm sure you guys already talked about this Pro yes so what we interested in here is to use the bucket as starting website so in this case you could host your website in a on is server but AWS makes a way chip gives you way cheaper options with S3 so you can configure your S3 to also sa at your static website endpoint so you click on edit static website hosting and you enable and you ensure that it the hosting type is to host the static website this means that this is where our document is going to be our uh uh whatever index document that that um would serve our website page and you will need to pass in the details so you you're choosing the the the the wrong hosting type Franchesca so hosting type should be host a static website not redirect here St website oh sorry thank you for okay you like to click so so um you will need to specify the document that's going to our static website page so it's going to be a document called index.html okay so index.html index.html so you can also pass in an error document trans just you need to type index.html here so HTML is basically another what is it front end are there developers in the call yes sir good so HTML is mostly use for fun in right Pages yeah yes for for we websites websites yeah then an optional error document basically this this means if somebody is trying to get a do or something from your start from your uh website and they not giving it the right information then AWS can present them a customized error page say oh this is not available or we are still working on it or coming soon or whatever this is going to be all right so this is optional so we'll leave that for now and uh just save changes so once you save these changes if you go back to the properties go back to static website then AWS will configure a website a static website endpoint for this bucket scroll down to the bottom of the page now you have a static website endpoint for this bucket called um P S3 website us is1 amazon.com so you see this Amazon aws.com so that's AWS TLD nobody can use it only just them so you cannot create a subdomain for a domain that you do not control so you cannot go and say I want to create a franches go. amazon. Amazon aws.com because you do not have control over the top level domain this won't work okay except Amazon explicitly gives you access to the TLD which also works as you get into the job you will face companies that are um set up this way um I just set up a website for a company and I think I already mentioned they are controlling the re the the the top level domain so you could also create the subdomain for a top Li domain in in AWS so just the subdomain would be in AWS and the company still keeps their top level domain wherever they want to keep it all right so in that case you would create a hosted Zone with the subdomain that would provide you name servers then you transfer the name server you give the name servers to them to put it inside the top level domain wherever it is anyway that's just an outside so edit right you already did this I just wanted to show you so let's go ahead so we need to set up your subdomain bucket for website read it Direct so you need to go to the second bucket with your subdomain ww. francis.com at the end of this session I will know your website by so you need to select it same thing you go to properties and we scroll down to the end of the bucket so static website hosting we 80 so this is the bucket we want to configure redirection our subdomain to this top level domain bucket so what do we select here just hold this good redirect so we want to redirect and we want to select to redirect to what host name so to the top level domain so you need to typ type in the top level domain here which is exactly the same as the bucket that will be hosting our website make sense no this is a domain we want to type in the name of our top level domain so Franchesca ao.com yeah sorry I save Ral we can't hear you you are muted thank you this is one of the drawbacks we using S3 as your static website you cannot use https let's go ahead you cannot use hcvs but how just by configuring the domain name and and the bucket itself and you cannot use htps however if you want to use htps with your custom domain then you need to uh integrate that with Route 53 no sorry with um Cloud front with Cloud front then you we can configure htps but for for for our call today we just stick with HTTP okay sorry Prof can you repeat that because you kind of fed in and out you said drawback of this using it as S3 using an S3 bucket so using just an S3 bucket with Route 53 you will not be able to configure your traffic to use SSL htps however if you want to get this done as possible but you would need to add uh cloudfront in the mix because with Cloud front then we can pass in a custom domain name and a certificate for that domain then the traffic then would use SSL okay but just R3 and and um and S3 you do not have the option to configure SSL traffic okay yep that was just an as like just just remark let's go ahead um Pro so why does it give the option what why does it give um the option in the protocol yeah they other other other option if if you put the https for this you also need to pass it a certificate right okay in in that casee it will not be able to to to there's no option for you to supply the certificate here but if you use it with cloudfront cloudfront has what we call original request original request means cloudfront is making a request to the origin S3 in that case will be um um how do you call it the origin and you can also tell cloudone that please use https for your origin request so when cloudone is making when it receiv request from your clown IT call that uh viewers request it could be could you could enforce https and it could also enforce https for origin request so Cloud phone also uses SSL to talk to S3 so in that case it will work so that's why that option is there but we are just using Route 53 and S3 and there's no uh place for us to configure certificates SSL is all about certificates you need certificates for that so you can add certific ific so S3 buckets basically all right sir so let's go ahead we done with the redirect bucket yeah good so in we need to now create our index of HTML bucket U file which we already conf um um configured in the host pocket in the top level domain pocket and we said we the um document is supposed to be index. HTML right yes so I would share an index of HML file in the chart just give me a sec e you can download that and you you upload that to the S3 bucket do we use um notepad you just need to download and upload you don't need notepad for any configuration if you can change the message that's in the index or HTML file in a way but you can do that when you're practicing just download the index of HTML file and you upload it into the top level domain blet you don't need notepad for that do you are we together yeah why is it saying this why is it saying what I'm looking at your bucket I'm not seeing your error message Franco okay that's fine we are uploading that into the top level domain bucket top level domain bucket right yes so if you download it you just go to S3 you click on upload so what if it is it right here where you in the right page I so just go to the top level domain bucket that's this click on bucket yes and you click on upload that's it right there so you can drag and drop the file from your machine or you can add files there are multiple options so you just go to add files that would take you to um wherever you have that document it's index do HTML why does it look like that okay yeah that's good so once that's done then you can upload so scroll down and you click on upload are we all here yes sir great once we upload the index of htmf f we need to edit this bucket you remember when we created a bucket um we block all public access to the bucket so you go to permissions edit block public access settings then you click on edit and we uncheck the box for block or Public Access I share another file with the permission policy SEC Prof is when we upload what next when you upload the bucket the s3i you need to uh un uh edit the bucket settings to uncheck the block or Public Access because we trying to make this bucket a website to everybody right so we need to uncheck that the block out Public Access means nobody can access the bucket but way we want it to be a static website so we need to uncheck that e are we supposed to update or upload the index file into the other bucket as well no just just the top level domain at this point I need to share with you um a bucket policy just give me a minute I'm looking for my bucket policy fine it's also in the give me a sec please yes what's your question so the bucket policy is in the chart someone was asking a question can you ask again the document is in the chat left is there already okay it is so no no no do not upload the uh the uh bucket policy you need to add the bucket policy so it's different so you need to go to the bucket policy file which I shared with you that you need to open in your notepad because you need to make an adjustment you need to pass in the name of your bucket in the bucket policy where's my downloads so are we adding the this policy to the top or to the sub to the top but you're adding it on the permissions so please open the bucket policy and the notepad so we can edit so if you see in the bucket policy on the resource it says it gives you the Arn for S3 but there's a replacement U syntax there with bucket name so you need to replace bucket name all that from this this give me a minute let me my pen this here right resource you need to replace this just this with your actual bucket name are we together yes sir so when so which which of the bucket name the main the first bucket or the second one top level domain the top level domain okay Franchesca including the signs because when you're doing um looking at um I should take off the signs yes those greater than and less than what is it less than and greater than it's basically a replace me um what's the right word basically when you look at that when you have that in in in in code or in run books it always signifies that that's something you should replace it's uh to be replaced okay okay good so including the everything in bracket including the signs okay okay oh I think you're supposed to leave those right you're supposed to leave the forward SL star and and end of quotes command Z do we command Z please command Z she's using a Windows do control Z yes so just um backspace one two three hit your back space back space backspace go again go go go again yes start stay there copy the bucket name and put it in there I like copy and past stay f Franchesca ao.com Ure there is no error nope yeah so now you copy the the policy into your clipboard so just do a contrl a contrl c so give me a minute um I'm not so sure you guys I you already did I am so you should be able you understand this policy right so it's basically the C is giving it a name the effect is allow and we saying that all everybody the principal star means everybody so if you wanted only AWS identities you will say AWS star so principal star means everybody so everybody in the in the internet can can get to this can so basically what this says is I'm allowing everybody to get objects from this bucket a franchisco AF code.com and okay that's basically what this this policy is saying does it make sense yes sir good copy that into your clipboard contrl a contrl c control C control a I'm expecting to see control a with everything highlighted yes yeah contr c c yeah then go to S3 go to the bucket not this bucket the top level domain bucket you can just go yes you click on permission scroll down after the block of as a bucket policy click on edit you dump the bucket policy here you paste the bucket policy so C control v v control V yeah Prof I don't know why right click and right click and paste cck and did you control c yeah I did I okay so now you can save once that is done you can test your website because you configured this bucket for uh static website hosting you can test it to ensure that it's saving the index. HML page which you just added to the bucket if you go back to properties go scroll down to static website at the end of it it gives you a website endpoint this so you copy that into your clipboard and put it in the browser so just open another browser you should be able to get the end point good that's what we expecting to see so once you when you go back and you you're starting on your own you can develop this static website this HTML document to whatever you want okay Prof would this would the S3 bucket be like a cheaper way to host like a like a profile website like like a yes but this is not for dynamic content it's static means the content does change it's not something people can interact add information and stuff it's not Dynamic you just display information you can if you have your your website and the everything there it's static content then you can put it there and people can see it all right so this would be cheaper than creating E2 instances this is way cheaper than creating E2 instances oh okay sir thank you this is way cheaper I don't know how many percent but more than 60 70 80% I agree that was fun and and to be honest with you hosting static website content is something that you will face on the job some interviews would definitely ask you this at least you should always know that S3 and Cloud phone and R 53 you can use to host a static website and I'm trying to get a record of all my projects just somebody without S3 static M did not work pardon my bucket is not uh I copied the end point but not uh it's not did you uncheck block all public access and you added the bucket policy yes I did you upload the index document I did in the to the right bucket ensure the index document is in the top level domain bucket and not the sub doain bucket are we together yes I have I have it in and you still not working I can't hear you if you're speaking yes it's still not working okay what time is it for I think we done in the next 30 minutes so let's take two minutes and look at what you're facing is there some other person be Mar jenta hope I pronounced that correctly everything okay yeah good I'm having same issu all right you follow up here I'm left behind because can't go I have to create that domain yes you need the domain to I chose another one again he said it can't I should contact the support so I'm just following here I'll do that I'll have to are you are you sure you don't have issues with your account no no I don't think so all right just at the end of it we we'll take five minutes to look at yours okay and see why you cannot create it okay okay um you have a bucket called Zan groups.com can I go into the bucket you have the index to HTML that's okay can you go to properties scroll down to the end okay go back to um go back to buckets permissions wait wait wait go back scroll down I want to see the bucket policy that you have there zs.com effect principal Allah again here and looks good and it wait wait wait wait S3 saying groups.com give it some time let's see what happens here because this looks okay okay you let me see the the browser no that's not going to work this is what I should do right yes that's what I did it's going to redirect it to yes reload that's weird um is he using a sub bucket wait I think shouldn't he be using the actual um sub no not the sub so not the sub doain seeing autog groups.com that looks okay principles fine get objects that's okay go down to let me see your static website again go to properties to the bucket properties scroll down to static website edit host index enable host yes index scroll down this actually looks okay save changes just refresh your browser not here um the anyway here too you can also refresh in the where you're doing the Z uh calling the static website endpoint I think the problem is with his endpoint sir yeah go back to the end point let's see maybe Victor spotted something yeah it resolved the go ahead just copy that again oh just click it yeah I just click it okay go to incognito if you prefer yeah I think that was issue enter Windows was blocking was block SEC yeah oh okay I have VPN on my system okay that's thank you sir thank you welcome so Franchesca let's go ahead um where Did We End um so I went to we ended by verifying the website so now we want to use rout 53 to direct our traffic to this bucket so we need to go back to the Hoster zones which we created so you go to hosted zones and we want to create a record so you click on create record so like I said there two records you never touch them you can add and remove other records so on the create record you can either use the quick create record or you can use the switch to wizard so let's use this switch to wizard give me a minute yes did you all see the the switch to wizard where did you click how did you get scroll back um is is right by the at the top right top right so just go to create create record create yes franisco give me a minute this is it here switch to nine you're in the Wizard so here you will see something thing called switch to wizard this is now switched to Quick crate because she already switched to the wizard are we together yes sir Victor we good yes great so now Emma was the one who was asking Emma are you good not so you do you see where you have on Francesca's screen switch to Quick rate um yeah I I clicked on on my um domain okay so click on the subdomain on the Sub subdomain sub and there is click on the hosted Zone when you click on the hosted Zone franches do that please yes click on the hosted zone right here am I watching yes then it would give you an option to create records okay I don't know if you covered it already records what you would use then it comes there's a place that say switch to pick okay switch to wizard okay yeah yeah I missed that so for those that do not get records records are basically how you're telling Route 52 is your route traffic to your endpoints okay so it could be a load balancer it could be whatever endpoint that's serving your traffic so you tell Route 5 please when traffic hits this domain please route it to this back at an endpoint by creating records in the hosted Zone okay so there's different types of Records but um you should at least know that if you're routing to another website for example um Victor might have his his website called victor.com and Franchesca has Franchesca ao.com if Victor if Franchesco wants to Route traffic to vctor Victor's website that's another name so you will create a a record of type c name if you want to re uh Route traffic to an endpoint with IP addresses if it's ipv4 you create an a record if it's IPv6 you create an a a a record a a a a 4 a record and there so many there SVC records there mail records the MX records there are so many different types of Records okay so but Ure to to to always know about ipv4 IPv6 C names those are very common scenarios so routing policies I don't know if profan already covered routing policies today if not I think it will be done in the rest next class so there are different types of routing policies with AWS there's simple routing there's waiter there's latency geolocation fail over multiv value answer and I think you can you can look look at look that up on oh if not covered we will cover it in the next slass okay so we don't spend time on this so we select the simple routing policy and you click on next are we together Emma yes great so now we want to define the simple routing policies record so we are creating a record for our top level domain all right so because it's our top level domain for the option for sub domain we keep it empty and we are routing to an a record we leave this as it is because if you remember when we're doing VPC endpoints we try to Route traffic to um using Gateway endpoints to S3 and once you create the Gateway endpoint for S3 AWS Add a prefix list do you remember MH and we told you that that prefix list is basically a network and inside the CER ranges you have direct IP addresses so it was a prefix list with sl3 um ipv for Siders remember so what that means is all S3 buckets in the back backround um reachable via those ipv4 side arranges so it's an a record at the end so please go back I was trying to explain the record type a Cod so Route traffic earier to an S3 website endpoint then you need to select the region where the S3 where you created the bucket then we need to enter the end point so it it can either show up and that's it we good is there so if you your your R 53 can be in another AWS account and this bucket pocket is in another AWS account in that case you will not see this here so you need to copy this endpoint and put it here it still work I say that because in most environments that you will get into working environments you have more account setup so most of this like rout 53 Transit gateways some environments they call it their infrastructure account these cor companies they keep them in one account and all the other lower accounts are talking to them okay so we create record so now if you go to the hosted zones we should have three records here the two default records and the one we just created so you can test that this is working by creating by take by putting your domain name in the browser and it should give you the same point the same result so now we are using Route 53 to get to our end point if you remember the the static website endpoint that they that S3 gave us it was full of so much information and AWS is um also TLD do you understand what we mean yeah good please if you do if something is not clear you speak of so I can elaborate please can you say that again please I can get you I say at this point if you've done this then we can test that it's working by just copying your domain name to the browser this is your domain name franches gra.com this should work directly on the browser yes you can type it in the browser um fres did you guys get the result sir do you understand what we've done does it make sense to you no can you Franchesca I think you still have your S3 um can you take it out and just have Franchesca um.com he said I have my what come again yes you have your S3 you look yeah if you look franisco what he's saying is if you look at this I do not want this in your domain name I want just Francesco ao.com so this means that R 53 now is talking to the right end point so when you get to a foco.com then you click on backspace so to uh Delete all what it will be highlighted yes backspace enter so if you can see now you're using just your top level domain and you can get the result that is hosted in your S3 bucket are we good you yeah we're going to explain again but why is it saying not secure is it it's not HTP so Prof how how so what's the the con connectivity between the the two bucket at this point at this point we not we don't have a connectivity but we already set up give me a there there's some sort of connection but we need to do this we we'll finish that for the last part of of the demo but if you remember when we set up the bucket the second bucket it was with a subdomain and we also configured it for static website but in the static website settings we did not say it's hosting the website we said it's redirecting so what that does is the bucket name was www.f Francesco ao.com for her case and it was redirecting to back to the top level domain what does that mean it means that we will now create a record for our subdomain and if somebody gets gets to the browser and says I want to go to ww. francisco.com they should get back to this page because the redirect bucket will redirect that information back to the right bucket that is actually hosting the website does it make sense yes yes for but uh uh what is the essence of redirecting it from the sub doain to the hood domain can we not just create that record to direct it to the hood domain at once will not still work hello will it will work but static website hosting with Works a little bit different that's why you need to do it like that but I'm thinking if I'm sure if you're using um how you you call um direct ipv fors like IP server IPs and you put it here that would work but for s for S3 and starting website hosting AWS says that's how you do it you can also test I did not test but for for for load balancers it works as you speak at least that I've done so Prof which ones do we delete so we don't get charged or you're not deleting anything here s don't really cost money right that's true yeah the the the Route 53 you already paid M so Route 53 would also build you on traffic s on request but it's really minimal so this your website nobody knows it so there will be no traffic here the no charge so I can say from what we're doing today should not really incure any cost the major cost is what you've paid already if I get charged I I'll just call you for your card details you can also clean up and redo it to practice all right course but do not do not do not do not um delete your domain because if you delete it you want to create another one I guess you will pay so you can always just keep your domain up in so we need to finish up by creating this record for the subdomain so same procedure you go to the hosted zones create record go to the wizard I mean the host on okay yeah we still using this route yes simple we using the simple routing and we want to create a simple record Define the simple record 9 and9 Define the simple record you need to define a record so now we want it for the subdomain so we called it ww do so no do not put a dot by default a once you put in details for the subdomain AWS already adds a DOT here let me show you okay yeah that's it there yes so you need to Alas to an S3 endpoint then we need to select the region and the static website endpoint for that region and you create a record so once your record is created you can then Test Now by trying to reach your your website with the subdomain hey is it possible that I can create the uh a different HTML file inside the subdomain you can create a different HTML file for the subdomain but remember that the subdomain bucket you did not you did not set it as the hosting you in the setting it was redirect so in that case it's different okay so if you want your redirect bucket to host another HTMI then you need to go back to it and tell it to to be the host type right not redirect Bookers does it make sense it makes sense thank you we're done so that was fast okay Prof so um to define the record that's what gives us that's what enables us to use the our top name and the subname in a search on like a web web browser and URL yes so a record is basically Route 53 is acts as two things you use it like a register and you use it like a DNS service so a register is you registering it which you can use goad so defining records now is actually using it as a DNS service so what does that mean it means you're telling Route 53 that please somebody goes to my website emma.com or ww. emma.com I want you to send this person to this endpoint so you do that by creating record you see when you're creating the record you're configuring um how Route 53 is going to Route traffic that gets to that website to its backend end point okay so go back to um um Route 53 um Franchesca okay just go back to your hosted Zone and let's say create another record just create another record okay go back leave this go back to switch switch to Quick create just go back to here that's my pen yeah go back up up up up oh okay okay in here you can see uh Emma this is to answer your question you can tell um Route 53 that I want to create a record name for this subdomain you can select the record type please click on record type I'm not we're not creating anything I'm just trying to explain here you see em I I think you're the one that asked the question so if this was to another uh uh names uh domain name we can use a c name if it's an IPv6 a if it is a for for email record it's called MX record txt records um and the different types of Records Okay so you can look that up so you select the record type here and once you select the record type it means that if it is an a record we need to pass in an a record value remember you see franches do you have a load balancer in this account um I think so I'm not sure anyway if you want to direct your traffic to if you want to direct your traffic to a load balancer you can just put the C name then you put in the load balancer DNS name because remember when you created a load balancer AWS creates a DNS name for that Lo balancer you can put in the DNS name here and everything with basically tell you how to ride your traffic to the back and end points does that answer your question Emma yes it does we'll play around with it a little bit later just give me a minute let me show you sample account with some records maybe it helps commit some things to memory I would pause the recording all right important okay it's fine okay Victor write it down well I he has to say it again sorry so I was saying that when once you if you create a subdomain because you have a top level domain in another registra you can do it um Zone delegation so we are delegating this subdomain you're delegating the subdomain of your zone of your domain name to AWS and you do that by creating the subdomain in AWS once you create the subdomain in in a hosted zone for the subdomain in AWS AWS creates those S A and NS Rec um name servers you need to transfer those name servers back to the regist so now how does traffic flows if somebody says I want to go to emma.com that's emma.com which is outside AWS so the register already is authoritative it has the authoritative name servers for emma.com but now I want ww. mma.com which is a subdomain in AWS in that case you would transfer the name servers from the subdomain www.mi.com in AWS into the UI or however your register works you basically can transfer those name servers there so the working the tree happens I want www.mr.com the root domain is so com name servers those are the name servers you and I will do not see but the um resolver the DNS resolver knows where these name servers are so when you go to the browser the browser knows where to go look for the name servers for com. n. ad.org and stuff like that and says I want wwm.com but those name servers do not know where ww. mma.com is but they know where emma.com is the top level domain so they say I don't know where ww. emma.com is but I know where emma.com the name the authorization name servers from emma.com so it redirects your traffic back to the name servers for emma.com it gets to the name servers for emma.com and say I'm looking for ww.com it says oh I am not the authoritative name servers for ww.com but I know these name servers for ww. am.com which is where you transfer from AWS into your register so it traffic now gets to this authoritative name servers for the subdomain and then your website is basically given to you you like a Cent you will just go into your browser you do not understand but that's actually how the traffic happens in the background that's it in the back background does that make sense wonderful so so so Mao you didn't have to pay tonight Prof you can stop recording okay