云平台提供按需、弹性、可编程的基础设施。理解三大云厂商的核心服务，用CLI/API实现基础设施自动化。
服务类别 | AWS | Azure | 阿里云/腾讯云 --------------+------------------+-----------------+-------------- 计算(ECS) | EC2 | Virtual Machine | ECS/CVM 容器服务 | EKS | AKS | ACK/TKE 对象存储 | S3 | Blob Storage | OSS/COS CDN | CloudFront | Azure CDN | CDN 数据库(RDB) | RDS | SQL Database | RDS/TDSQL IaC | CloudFormation | ARM/Bicep | ROS 监控 | CloudWatch | Monitor | CloudMonitor Serverless | Lambda | Functions | FC/SCF
| 模型 | 你管什么 | 云厂商管什么 | 示例 |
|---|---|---|---|
| IaaS | OS+应用+数据 | 硬件+网络+虚拟化 | EC2, ECS |
| PaaS | 应用+数据 | OS+运行时+中间件 | Elastic Beanstalk |
| FaaS | 代码 | 一切基础设施 | Lambda, SCF |
| SaaS | 使用 | 一切 | Gmail, GitHub |
# 安装AWS CLI v2
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip && sudo ./aws/install
aws configure # Access Key / Secret Key / Region
# EC2实例管理
aws ec2 describe-instances --query 'Reservations[].Instances[].[InstanceId,State.Name,InstanceType]' --output table
# 创建EC2实例
aws ec2 run-instances --image-id ami-0c7686628807b59b4 --instance-type t3.medium --key-name mykey --tag-specifications 'ResourceType=instance,Tags=[{Key=Name,Value=devops-node}]' --user-data '#!/bin/bash
apt update && apt install -y docker.io
usermod -aG docker ubuntu'
# S3操作
aws s3 mb s3://my-devops-bucket-2026
aws s3 cp ./app.tar.gz s3://my-devops-bucket-2026/artifacts/
aws s3 sync ./dist/ s3://my-devops-bucket-2026/static/
# CloudWatch
aws cloudwatch put-metric-data --namespace "DevOps/App" --metric-name "DeployCount" --value 1
# 日志查询
aws logs filter-log-events --log-group-name "/ecs/myapp" --filter-pattern "ERROR" --start-time $(date -d '1 hour ago' +%s)000# 安装
curl -o aliyun-cli.tgz https://aliyuncli.alicdn.com/aliyun-cli-linux-latest-amd64.tgz
tar xzf aliyun-cli.tgz && sudo mv aliyun /usr/local/bin/
aliyun configure # AccessKey/Secret/Region: cn-hangzhou
# ECS管理
aliyun ecs DescribeInstances --RegionId cn-hangzhou
# 创建ECS
aliyun ecs CreateInstance --RegionId cn-hangzhou --ImageId ubuntu_22_04_x64_20G_alibase_20240815.vhd --InstanceType ecs.c7.large --SecurityGroupId sg-xxx --InstanceName devops-node
# OSS操作
aliyun oss mb oss://my-devops-bucket
aliyun oss cp ./app.tar.gz oss://my-devops-bucket/artifacts/
aliyun oss ls oss://my-devops-bucket/
# 费用查询
aliyun bssopenapi QueryAccountBalance
aliyun bssopenapi QueryBill --BillingCycle 2026-05#!/bin/bash
echo "╔════════════════════════════════════════╗"
echo "║ 多云计算成本对比（2C4G 月价） ║"
echo "╠════════════════════════════════════════╣"
printf "║ %-10s %-18s %-10s ║
" "云厂商" "实例类型" "月费(USD)"
echo "╠════════════════════════════════════════╣"
printf "║ %-10s %-18s \$%-8.2f ║
" "AWS" "t3.medium" "30.38"
printf "║ %-10s %-18s \$%-8.2f ║
" "Azure" "D2s_v5" "28.60"
printf "║ %-10s %-18s \$%-8.2f ║
" "阿里云" "ecs.c7.large" "45.00"
printf "║ %-10s %-18s \$%-8.2f ║
" "腾讯云" "S5.MEDIUM4" "40.00"
echo "╚════════════════════════════════════════╝"
# Spot实例价格
aws ec2 describe-spot-price-history --instance-types t3.medium --product-descriptions "Linux/UNIX" --start-time $(date -Is) --query 'SpotPriceHistory[0].[InstanceType,AZ,SpotPrice]' --output table
┌──────────────────────────────────┐
│ Terraform/IaC │
│ (统一管理多云基础设施) │
└───────────┬──────────────────────┘
┌───────────────┼───────────────┐
▼ ▼ ▼
┌───────────────┐ ┌──────────────┐ ┌──────────────┐
│ AWS │ │ Azure │ │ 阿里云 │
│ (海外业务) │ │ (企业客户) │ │ (国内业务) │
│ EKS + EC2 │ │ AKS + VM │ │ ACK + ECS │
│ RDS + S3 │ │ SQL + Blob │ │ RDS + OSS │
│ CloudFront │ │ Azure CDN │ │ CDN │
└───────┬───────┘ └──────┬───────┘ └──────┬───────┘
└───────────────┼───────────────┘
▼
┌──────────────────┐
│ 统一监控Grafana │
└──────────────────┘# 查看API调用统计
aws cloudwatch get-metric-statistics --namespace AWS/Usage --metric-name CallCount --start-time $(date -d '1 hour ago' -Is) --end-time $(date -Is) --period 60 --statistics Sum
# 解决：指数退避重试/批量API/申请提高限额
aws service-quotas request-service-quota-increase --service-code ec2 --quota-code L-12345678 --desired-value 100掌握AWS/阿里云CLI操作、多云架构设计、成本优化——云是DevOps的舞台
| 安全领域 | 措施 | AWS服务 | 阿里云服务 |
|---|---|---|---|
| 身份管理 | 最小权限IAM | IAM + MFA | RAM + MFA |
| 网络安全 | VPC隔离+安全组 | Security Group | 安全组 |
| 数据加密 | 传输+静态加密 | KMS + ACM | KMS + SSL |
| 日志审计 | API调用记录 | CloudTrail | ActionTrail |
| 合规检查 | 自动安全评估 | Security Hub | Security Center |
| 标签Key | 值示例 | 用途 |
|---|---|---|
| Environment | prod/staging/dev | 环境区分 |
| Team | devops/backend/frontend | 团队归属 |
| CostCenter | CC-001/CC-002 | 成本归集 |
| Application | myapp/api/worker | 应用标识 |
| ManagedBy | terraform/ansible | 管理方式 |