AWS Course

AWS Certified Solutions Architect Associate 2023
Section 1: Introduction – AWS Certified Solutions Architect Associate
- Course Introduction – AWS Certified Solutions Architect Associate
- Creating an AWS Account
Section 2: Getting started with AWS
- AWS Cloud Overview – Regions & AZ
- Tour of the Console & Services in AWS
Section 3: IAM & AWS CLI
- IAM Introduction: Users, Groups, Policies
- IAM Policies
- IAM MFA Overview
- AWS Access Keys, CLI and SDK
- AWS CLI Setup on Windows
- AWS CLI Setup on Linux
- AWS CloudShell: Region Availability
- AWS CloudShell
- IAM Roles for AWS Services
- IAM Security Tools
- IAM Best Practices
Section 4: EC2 Fundamentals
- AWS Budget Setup
- EC2 Basics
- Create an EC2 Instance with EC2 User Data to have a Website
- EC2 Instance Types Basics
- Security Groups & Classic Ports Overview
- SSH Overview
- How to SSH using Linux or Mac
- How to SSH using Windows
- How to SSH using Windows 10
- EC2 Instance Connect
- EC2 Instance Roles
- EC2 Instance Launch Types
- Spot Instances & Spot Fleet
- EC2 Instances Launch Types
Section 5: EC2 – Solutions Architect Associate Level
- Private vs Public vs Elastic IP
- EC2 Placement Groups
- Elastic Network Interfaces (ENI)
- EC2 Hibernate
Section 6: EC2 Instance Storage
- EBS Overview
- EBS Snapshots Overview
- AMI Overview
- EC2 Instance Store
- EBS Volume Types
- EBS Multi-Attach
- EBS Encryption
- EFS Overview
- EFS vs EBS
Section 7: High Availability and Scalability: ELB & ASG
- High Availability and Scalability
- Elastic Load Balancing (ELB) Overview
- Classic Load Balancer (CLB)
- Application Load Balancer (ALB)
- Network Load Balancer (NLB)
- Gateway Load Balancer (GWLB)
- Elastic Load Balancer – Sticky Sessions
- Elastic Load Balancer – Cross Zone Load Balancing
- Elastic Load Balancer – SSL Certificates
- Elastic Load Balancer – Connection Draining
- Auto Scaling Groups (ASG) Overview
- Auto Scaling Groups – Scaling Policies
- Auto Scaling Groups – for Solutions Architects
Section 8: AWS Fundamentals: RDS + Aurora + ElastiCach
- Amazon RDS Overview
- RDS Read Replicas vs Multi AZ
- RDS Encryption + Security
- Aurora Overview
- Aurora – Advanced Concepts
- ElastiCache Overview
- ElastiCache for Solution Architects
- List of Ports to be familiar with
Section 9: Route 53
- What is a DNS?
- Route 53 Overview
- Route 53 – Registering a domain
- Route 53 – Creating our first records
- Route 53 – EC2 Setup
- Route 53 – TTL
- Route 53 CNAME vs Alias
- Routing Policy – Simple
- Routing Policy – Weighted
- Routing Policy – Latency
- Route 53 – Health Checks
- Routing Policy – Failover
- Routing Policy – Geolocation
- Routing Policy – Geoproximity
- Routing Policy – Multi Value
- 3rd Party Domains & Route 53
Section 10: Classic Solutions Architecture Discussions
- Solutions Architecture Discussions Overview
- WhatsTheTime.com
- MyClothes.com
- MyWordPress.com
- Instantiating applications quickly
- Beanstalk Overview
Section 11: Amazon S3 Introduction
- Amazon S3 – Section Introduction
- S3 Buckets and Objects
- S3 Versioning
- S3 Encryption
- S3 Security & Bucket Policies
- S3 Websites
- S3 CORS
- S3 Consistency Model
Section 12: AWS SDK, IAM Roles & Policies
- IAM Roles and Policies
- AWS Policy Simulator
- AWS EC2 Instance Metadata
- AWS SDK Overview
Section 13: Advanced Amazon S3 & Athena
- S3 MFA Delete
- S3 Default Encryption
- S3 Access Logs
- S3 Replication (Cross Region and Same Region)
- S3 Pre-signed URLs
- S3 Storage Classes + Glacier
- S3 Lifecycle Rules
- S3 Analytics
- S3 Performance
- S3 Select & Glacier Select
- S3 Event Notifications
- S3 Requester Pays
- Athena Overview
- S3 Lock Policies & Glacier Vault Lock
Section 14: CloudFront & AWS Global Accelerator
- CloudFront Overview
- CloudFront with S3
- CloudFront Signed URL / Cookies
- CloudFront Advanced Concepts
- AWS Global Accelerator – Overview
Section 15: AWS Storage Extras
- AWS Snow Family Overview
- Architecture: Snowball into Glacier
- Amazon FSx
- Amazon FSx
- Storage Gateway Overview
- Amazon FSx File Gateway
- AWS Transfer Family
- All AWS Storage Options Compared
Section 16: Decoupling applications: SQS, SNS, Kinesis, Active MQ
- Introduction to Messaging
- Amazon SQS – Standard Queues Overview
- SQS – Queue Access Policy
- SQS – Message Visibility Timeout
- SQS – Dead Letter Queues
- SQS – Delay Queues
- SQS – Long Polling
- SQS – Request Response
- SQS – FIFO Queues
- SQS + Auto Scaling Group
- Amazon Simple Notification Service (AWS SNS)
- SNS and SQS – Fan Out Pattern
- Amazon Kinesis
- Data Ordering for Kinesis vs SQS FIFO
- SQS vs SNS vs Kinesis
- Amazon MQ
Section 17: Containers on AWS: ECS, Fargate, ECR & EKS
- Docker Introduction
- Amazon ECS
- Amazon ECS – Services, Tasks & Load Balancing
- Creating ECS Cluster
- Creating ECS Service
- Amazon ECS – Auto Scaling
- Amazon ECS – Rolling Updates
- Amazon ECS – Solutions Architectures
- Amazon ECR
- EKS Overview
Section 18: Serverless Overviews from a Solution Architect Perspective
- About the Serverless Section
- Serverless Introduction
- Serverless Application Model (SAM) Overview
- Lambda Overview
- Lambda Limits
- Lambda@Edge
- Amazon DynamoDB
- Amazon DynamoDB – Advanced Features
- API Gateway Overview
- API Gateway Security
- AWS Cognito Overview
Section 19: Serverless Solution Architecture Discussions
- Mobile Application: MyTodoList
- Serverless Website: MyBlog.com
- MicroServices Architecture
- Distributing Paid Content
- Software updates distribution
- Big Data Ingestion Pipeline
Section 20: Databases in AWS
- Choosing the right database
- RDS
- Aurora
- ElastiCache
- DynamoDB
- S3
- Athena
- Redshift
- Glue
- Neptune
- Amazon ElasticSearch is now OpenSearch
- ElasticSearch / OpenSearch
Section 21: AWS Monitoring & Audit: CloudWatch, CloudTrail & Config
- AWS Monitoring – Section Introduction
- CloudWatch Metrics
- CloudWatch Custom Metrics
- CloudWatch Dashboards
- CloudWatch Logs
- CloudWatch Agent & CloudWatch Logs Agent
- CloudWatch Alarms
- EC2 Instance Recovery with CloudWatch Alarms
- AWS CloudWatch Events
- Amazon EventBridge
- CloudTrail Overview
- AWS Config – Overview
- CloudTrail vs CloudWatch vs Config
Section 22: Identity and Access Management (IAM) – Advanced
- Security Token Service (STS) Overview
- Identity Federation & Cognito
- Directory Services – Overview
- Organizations – Overview
- IAM – Advanced
- IAM – Policy Evaluation Logic
- Resource Access Manager (RAM)
- AWS Single Sign on (SSO) – Overview
Section 23: AWS Security & Encryption: KMS, SSM Parameter Store, CloudHSM, Shield, WAF
- AWS Security – Section Introduction
- Encryption 101
- KMS Overview
- KMS Hands On w/ CLI
- KMS Key Rotation
- SSM Parameter Store Overview
- AWS Secrets Manager – Overview
- CloudHSM
- Shield – DDoS Protection
- Web Application Firewall (WAF)
- Amazon GuardDuty
- Amazon Inspector
- Macie
- Shared Responsibility Model
Section 24: Networking – VPC
- CIDR, Private vs Public IP
- Default VPC Overview
- VPC Overview
- Subnet Overview
- Internet Gateways & Route Tables
- Bastion Hosts
- NAT Instances
- NAT Gateways
- DNS Resolution Options & Route 53 Private Zones
- NACL & Security Groups
- VPC Reachability Analyzer
- VPC Peering
- VPC Endpoints
- VPC Flow Logs
- Site to Site VPN, Virtual Private Gateway & Customer Gateway
- Direct Connect & Direct Connect Gateway
- AWS PrivateLink – VPC Endpoint Services
- AWS ClassicLink
- Transit Gateway
- VPC Traffic Mirroring
- IPv6 for VPC
- Egress Only Internet Gateway
- Section Cleanup
- VPC Section Summary
- Networking Costs in AWS
Section 25: Disaster Recovery & Migrations
- Disaster Recovery in AWS
- Database Migration Service (DMS)
- On-Premises Strategies with AWS
- DataSync – Overview
- Transferring Large Datasets into AWS
- AWS Backup
Section 26: More Solution Architectures
- Event Processing in AWS
- Caching Strategies in AWS
- Blocking an IP Address in AWS
- High Performance Computing (HPC) on AWS
- EC2 Instance High Availability
- Bastion Host High Availability
Section 27: Other Services
- Other Services Section Introduction
- CICD Introduction
- CloudFormation Intro
- Step Functions & SWF
- EMR
- OpsWorks
- AWS Workspaces
- AppSync
- Cost Explorer