book

AWS Certified Solutions Architect - Associate (SAA-C03) Exam Guide

by Michelle Chismon, Kate Gawron

November 2024

Intermediate to advanced

346 pages

9h 35m

English

Packt Publishing

Read now

Unlock full access

ContributorsAbout the AuthorsAbout the Reviewer
Why This Book?What This Book CoversHow to Get the Most Out of This BookOnline Practice ResourcesDownload the Color ImagesConventions UsedGet in TouchTechnical RequirementsAWS Certified Solutions Architect - Associate (SAA-C03) Exam OverviewExam FormatExam DomainsDomain 1: Design Secure ArchitecturesDomain 2: Design Resilient ArchitecturesDomain 4: Design Cost-Optimized ArchitecturesShare Your ThoughtsDownload a Free PDF Copy of This Book
Making the Most of This Book – Your Certification and BeyondCloud ComputingCloud Deployment ModelsPrivateCommunityPublicHybridTypes of Cloud ServicesThe AWS CloudThe Core AWS ServicesVPCEC2RDSS3LambdaAWS Global InfrastructureRegionsAvailability ZonesEdge LocationsOutpostsAWS ArchitectureDesign Secure ArchitectureDesigning Resilient ArchitectureDesigning High-Performing ArchitectureDesigning Cost-Optimized ArchitectureCloud EconomicsUnderstanding Cloud CostsInfrastructure ManagementCapital ExpensesScalabilityFlexibilityCost Optimization StrategiesOptimizing Costs in AWSAWS Cost Management and Optimization ToolsTotal Cost of Ownership (TCO) and Return on Investment (ROI)TCOROIWhen to Use WhichCalculating TCOCreating an AWS AccountCreating an IAM User and Access KeysInstalling the AWS CLITo install the AWS CLI for Windows, follow these steps:To install the AWS CLI for macOS/Linux, follow these steps:Configuring the AWS CLIVerify the ConfigurationSummaryExam Readiness Drill – Chapter Review QuestionsHOW TO GET STARTED
Introduction to AWS VPCsKey Components of AWS VPCsStateful Versus StatelessVPC Configuration BasicsCIDR NotationIP Addressing and Subnetting in VPCsSubnet Design FlexibilityAZs and RegionsDefault VPC Versus Custom VPCSecurity in AWS VPCsSecurity Groups (SGs)NACLsVPC ConnectivityInternet GatewaysNetwork Address Translation (NAT) GatewaysKey differences between NAT and internet gatewaysRoute TablesVirtual Private Network (VPN) ConnectionsVPC PeeringAWS Transit GatewayHands-on LabCreating the First VPCCreating Subnets for the First VPCSetting up an Internet Gateway for the First VPCSetting up a NAT Gateway for the First VPCConfiguring Route Tables for the First VPCRepeating the Previous Steps for the Second VPCSetting up VPC PeeringCreating the First VPCCreating Subnets for the First VPCSetting up an Internet Gateway for the First VPCSetting up a NAT Gateway for the First VPCConfiguring Route Tables for the First VPCPublic route tablePrivate route tableRepeating the Previous Steps for the Second VPCSetting up VPC PeeringSummaryExam Readiness Drill – Chapter Review QuestionsHOW TO GET STARTED
An IAM OverviewUsers, Roles, and PoliciesUsersGroupsRolesPoliciesIdentity Providers (IdPs)IAM Access AnalyzerThe IAM Policy SimulatorHands-on LabCreating an IAM GroupCreating an IAM UserCreating a Custom PolicySetting a Permissions Boundary for a UserTestingSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
Introduction to Compute on AWSVirtual Machines (VMs)ContainersElastic Compute Cloud (EC2)Understanding EC2 Instance TypesAmazon Machine Images (AMIs)Instance Store Versus Amazon Elastic Block Store (EBS)Spot InstancesReserved Instances (RIs)Auto ScalingAuto Scaling Groups (ASGs)Scaling PoliciesScaling ActionsPredictive ScalingLifecycle HooksAWS Elastic BeanstalkElastic Beanstalk ArchitectureAWS ContainersECS ArchitectureECS OptimizationTask Placement StrategiesEKS ArchitectureEKS OptimizationPod SchedulingAWS FargateAWS BatchWorking with AWS BatchInstance and Container SecurityEC2 SecurityECS or EKS Cluster SecurityHands-on LabEC2 LabECS LabSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
Introduction to AWS StorageObject StorageBlock StorageFile StorageFile Systems and FormattingAmazon S3Security Controls in Amazon S3Versioning in Amazon S3Lifecycle Policies and Storage ClassesS3 ReplicationAmazon EBSStorage OptionsData PersistenceEBS SnapshotsAmazon EFSLifecycle Policies and Storage ClassesData PersistencePerformancePerformance ModesThroughput ModesAmazon FSxAmazon FSx for Windows File ServerFSx for LustreAWS BackupHands-on LabS3 WebsiteAWS Backup PlanSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
Overview of DNSDomain NamesAnatomy of a DNS NameDNS ResolutionAmazon Route 53Route 53 DNS ResolutionHealth ChecksRouting PoliciesOverview of Load BalancingHigh Availability and RedundancyHigh AvailabilityRedundancyELBTarget GroupsListenersLoad Balancer TypesOverview of Amazon CloudFrontCaching RulesSecurityCaching Content from an ALBCaching Content from an Amazon S3 OriginSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
Databases on AWSRelational DatabasesAmazon Relational Database Service (RDS)Amazon AuroraRDS ProxyEC2NoSQL DatabasesAmazon DynamoDBAmazon ElastiCacheAmazon DocumentDBAmazon NeptuneAmazon KeyspacesAmazon Quantum Ledger DatabaseAnalytics on AWSAmazon RedshiftCapacityDeployment ModesPerformanceZero-ETLSecurityMonitoring and ManagementAmazon EMRDeployment OptionsPerformanceSecurityMonitoring and ManagementAmazon QuickSightData SourcesAdvanced FeaturesPerformanceSecurityAWS GlueData Catalog and DiscoveryETL JobsArchitectureData QualityMonitoringAmazon AthenaData Sources and IntegrationPerformanceSecurity and Access ControlAWS Lake FormationData SourcesStorage and FormatsSecurityPerformanceMachine Learning and Artificial Intelligence ToolsAmazon SageMakerData SourcesModelsCost ManagementSecurityAmazon RekognitionAmazon ComprehendData Ingestion and StreamingAmazon KinesisData SourcesData ProcessingPerformance and ScalabilitySecurityAmazon Managed Streaming for KafkaData SourcesData ProcessingPerformance and ScalabilitySecurityHands-on LabCreating the Data LakeSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
Storage MigrationAWS DataSyncAWS Transfer FamilyAWS Storage GatewayAWS Snow FamilyApplication MigrationDatabase MigrationSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED

Overview of ServerlessAWS LambdaWhat Does Event-Driven Mean?Lambda FunctionsConcurrencyLogging and MonitoringApplication Integration ServicesAmazon SQSDead Letter QueuesPolling MethodsQueue TypesMessage OrderingMessage DeduplicationAmazon SNSAmazon EventBridgeSNS or EventBridge?AWS Step FunctionsSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
Controlling AccessEncryption and Secrets ManagementEncryption at RestEncryption in TransitAWS Key Management Service (KMS)AWS Secrets ManagerThreat DetectionAmazon InspectorAmazon GuardDutyAmazon MacieAWS Security HubProtecting ApplicationsAWS WAFAWS ShieldHands-on LabSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
GovernanceAWS OrganizationsAWS Control TowerGuardrailsAccount FactoryProvisioning and OrchestrationAWS CloudFormationAnatomy of a CloudFormation TemplateCloudFormation Service FeaturesAWS Service CatalogCentralized OperationsAWS Systems ManagerPatch ManagerRun CommandParameter StoreInventoryAutomationAWS ConfigLogging and MonitoringAWS CloudTrailAmazon CloudWatchCloudWatch MetricsCloudWatch LogsCloudWatch AlarmsCost ManagementAWS BudgetsAWS Cost ExplorerAWS Cost and Usage ReportsHands-on LabSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
Design Secure Access to AWS ResourcesBest Practices for Securing IAM UsersIAM Roles and RBACIAM Permissions at ScaleDesign Secure Workloads and ApplicationsThreat Vectors: Detections and MitigationsApplication Network SecurityDetermine Appropriate Data Security ControlsControlling DataEncrypting DataSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
Designing Highly Available and/or Fault-Tolerant ArchitecturesDisaster Recovery StrategiesDesigning Scalable and Loosely Coupled ArchitecturesServerless ScalabilitySummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
High-Performing and Scalable Storage SolutionsTypes of AWS Storage ServicesSelecting Storage Services Based on Performance DemandsDesigning Scalable Storage SolutionsHigh-Performing and Elastic Compute SolutionsAWS Compute Services OverviewDecoupling Workloads for Independent ScalingManaging Compute Elasticity with Auto ScalingSelecting Compute Resources Based on Business RequirementsIdentifying Appropriate Instance Types and SizesServerless Computing Options and When to Use ThemManaging Distributed Computing WorkloadsHigh-Performing Database SolutionsOverview of Database ServicesPerformance Optimization in DatabasesCapacity PlanningCaching StrategiesReplication and Read ReplicasMonitoring and TuningSelecting Database Engines and ConfigurationsComparing Relational and Non-Relational DatabasesDatabase Connections and ProxiesOptimizing Data Access PatternsConfiguration ConsiderationsHigh-Performing and/or Scalable Network ArchitecturesOverview of Network ServicesDesigning Scalable Network ArchitecturesCreating Scalable Network TopologiesSelecting the Appropriate Load BalancerNetwork Configurations for Global and Hybrid ArchitecturesImplementing Redundancy and FailoverOptimizing Network PerformanceUsing Edge ServicesOptimizing Network Connection OptionsPlacement of ResourcesMonitoring and TroubleshootingHigh-Performing Data Ingestion and Transformation SolutionsOverview of Data Ingestion ServicesDesigning Data Streaming ArchitecturesImplementing Data LakesDesigning for ScalabilityData Transformation and ProcessingTransforming Data FormatsSelecting Compute Options for Large-Scale Data ProcessingImplementing Visualization StrategiesSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
Design Cost-Optimized Storage SolutionsUnderstanding AWS Storage Services and Cost CharacteristicsAmazon S3Amazon S3 GlacierAmazon EFSAmazon EBSLeveraging Storage Access Patterns for Cost OptimizationBatch Uploads versus Individual UploadsStorage Tiering and Lifecycle ManagementDesign Cost-Optimized Compute SolutionsAWS Compute Service Pricing ModelsSelecting the Appropriate Compute Service and Instance TypeOptimizing Compute UtilizationLeveraging the AWS Global Infrastructure for Cost OptimizationDesign Cost-Optimized Database SolutionsChoosing the Right Database ServiceDatabase Capacity Planning and OptimizationLeveraging Database Features for Cost SavingsManaging Database Backup and Retention CostsDesign Cost-Optimized Network ArchitecturesNetwork Connectivity Options and Their CostsOptimizing Network Routing and Traffic PatternsUtilizing AWS Cost Management Tools and ServicesSummaryExam Readiness Drill - Chapter Review QuestionsHOW TO GET STARTED
How to Access These MaterialsPurchased from Packt Store (packtpub.com)Packt+ SubscriptionPurchased from Amazon and Other SourcesSTEP 1STEP 2STEP 3STEP 4STEP 5Troubleshooting TipsShare FeedbackBack to the Book
Other Books You May EnjoyShare Your ThoughtsDownload a Free PDF Copy of This Book

Content preview from AWS Certified Solutions Architect - Associate (SAA-C03) Exam Guide

2 Virtual Private Cloud

This chapter delves into the intricacies of AWS Virtual Private Clouds (VPCs), offering you an in-depth understanding of their structure and functionality. You will gain valuable insights into how VPCs provide a dedicated, isolated section within the AWS cloud, empowering you with full control over your network architecture. From setting up IP address ranges and creating subnets to managing intricate network settings, this chapter is designed to equip you with the knowledge and skills needed to efficiently harness the potential of AWS VPCs in your cloud-based projects.

In this chapter, you will cover the following main topics: