AWS Certified Solutions Architect - Associate (SAA-C03) Cert Guide (Certification Guide)

Cover
Title Page
Copyright Page
Contents at a Glance
Table of Contents
Introduction
Chapter 1: Understanding the Foundations of AWS Architecture
	Essential Characteristics of AWS Cloud Computing
	AWS Cloud Computing and NIST
		On-Demand Self-Service
		Broad Network Access
		Resource Pooling
		Rapid Elasticity
		Measured Service
	Moving to AWS
		Infrastructure as a Service (IaaS)
		Platform as a Service (PaaS)
	Operational Benefits of AWS
	Cloud Provider Responsibilities
	Security at AWS
		Network Security at AWS
		Application Security at AWS
	Migrating Applications
		Applications That Can Be Moved to AWS and Hosted on an EC2 Instance with No Changes
		Applications with Many Local Dependencies That Cause Problems When Being Moved to the Cloud
		Replacing an Existing Application with a SaaS Application Hosted by a Public Cloud Provider
		Applications That Should Remain On Premises and Eventually Be Deprecated
	The AWS Well-Architected Framework
		The Well-Architected Tool
	AWS Services Cheat Sheet
	In Conclusion
Chapter 2: The AWS Well-Architected Framework
	“Do I Know This Already?”
	Foundation Topics
	The Well-Architected Framework
		Operational Excellence Pillar
		Security Pillar
		Defense in Depth
		Reliability Pillar
		Performance Efficiency Pillar
		Cost Optimization Pillar
		Sustainability Pillar
	Designing a Workload SLA
		Reliability and Performance Are Linked
		Disaster Recovery
		Placing Cloud Services
		Data Residency and Compute Locations
		Caching Data with CDNs
		Data Replication
		Load Balancing Within and Between Regions
		Failover Architecture
	Deployment Methodologies
		Factor 1: Use One Codebase That Is Tracked with Version Control to Allow Many Deployments
		AWS CodeCommit
		Factor 2: Explicitly Declare and Isolate Dependencies
		Factor 3: Store Configuration in the Environment
		Factor 4: Treat Backing Services as Attached Resources
		Factor 5: Separate Build and Run Stages
		Factor 6: Execute an App as One or More Stateless Processes
		Factor 7: Export Services via Port Binding
		Factor 8: Scale Out via the Process Model
		Factor 9: Maximize Robustness with Fast Startup and Graceful Shutdown
		Factor 10: Keep Development, Staging, and Production as Similar as Possible
		Factor 11: Treat Logs as Event Streams
		Factor 12: Run Admin/Management Tasks as One-Off Processes
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 3: Designing Secure Access to AWS Resources
	“Do I Know This Already?”
	Foundation Topics
	Identity and Access Management (IAM)
		IAM Policy Definitions
		IAM Authentication
		Requesting Access to AWS Resources
		The Authorization Process
		Actions
	IAM Users and Groups
		The Root User
		The IAM User
		Creating an IAM User
		IAM User Access Keys
		IAM Groups
		Signing In as an IAM User
		IAM Account Details
		Creating a Password Policy
		Rotating Access Keys
		Using Multi-Factor Authentication
	Creating IAM Policies
		IAM Policy Types
		Identity-Based Policies
		Resource-Based Policies
		Inline Policies
		IAM Policy Creation
		Policy Elements
		Reading a Simple JSON Policy
		Policy Actions
		Additional Policy Control Options
		Reviewing Policy Permissions
		IAM Policy Versions
		Using Conditional Elements
		Using Tags with IAM Identities
	IAM Roles
		When to Use IAM Roles
		AWS Services Perform Actions on Your Behalf
		EC2 Instances Hosting Applications Need Access to AWS Resources
		Access to AWS Accounts by Third Parties
		Web Identity Federation
		SAML 2.0 Federation
		Cross-Account Access
		AWS Security Token Service
		IAM Best Practices
		IAM Security Tools
		IAM Cheat Sheet
		AWS Identity Center
	AWS Organizations
		AWS Organizations Cheat Sheet
	AWS Resource Access Manager
	AWS Control Tower
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 4: Designing Secure Workloads and Applications
	“Do I Know This Already?”
	Foundation Topics
	Securing Network Infrastructure
		Networking Services Located at Edge Locations
		AWS Shield (Standard and Advanced)
		AWS Web Application Firewall (WAF)
		VPC Networking Services for Securing Workloads
		Route Tables
		The Main Route Table
		Security Groups
		Security Groups Cheat Sheet
		Web Server Inbound Ports
		Database Server Inbound Ports
		Administration Access
		Understanding Ephemeral Ports
		Security Group Planning
		Network ACLs
		Network ACL Implementation Details
		Network ACL Cheat Sheet
		Network ACL Rule Processing
		VPC Flow Logs
		NAT Services
		NAT Gateway Service
		NAT Instance
		AWS NAT Gateway Service Cheat Sheet
	Amazon Cognito
		User Pool
		Federated Identity Provider
	External Connections
		Virtual Private Gateway
		Customer Gateway
		AWS Managed VPN Connection Options
		Understanding Route Propagation
		AWS Direct Connect
		AWS Direct Connect Gateway
		AWS Direct Connect Cheat Sheet
	Amazon GuardDuty
		Amazon GuardDuty Cheat Sheet
	Amazon Macie
		Amazon Macie Cheat Sheet
	Security Services for Securing Workloads
		AWS CloudTrail
		Creating an AWS CloudWatch Trail
		AWS CloudTrail Cheat Sheet
		AWS Secrets Manager
		Amazon Inspector
		AWS Trusted Advisor
		AWS Config
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 5: Determining Appropriate Data Security Controls
	“Do I Know This Already?”
	Foundation Topics
	Data Access and Governance
		Data Retention and Classification
		Infrastructure Security
		IAM Controls
		Detective Controls
	Amazon EBS Encryption
	Amazon S3 Bucket Security
		S3 Storage at Rest
		Amazon S3 Object Lock Policies
		Legal Hold
		Amazon S3 Glacier Storage at Rest
		Data Backup and Replication
	AWS Key Management Service
		Envelope Encryption
		AWS KMS Cheat Sheet
		AWS CloudHSM
	AWS Certificate Manager
		Encryption in Transit
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 6: Designing Resilient Architecture
	“Do I Know This Already?”
	Foundation Topics
	Scalable and Resilient Architecture
		Scalable Delivery from Edge Locations
		Stateful Versus Stateless Application Design
		Changing User State Location
		User Session Management
		Container Orchestration
		Migrating Applications to Containers
		Resilient Storage Options
	Application Integration Services
		Amazon Simple Notification Service
		Amazon SNS Cheat Sheet
		Amazon Simple Queue Service
		SQS Components
		Amazon SQS Cheat Sheet
		AWS Step Functions
		Amazon EventBridge
	Amazon API Gateway
		API Gateway Cheat Sheet
		Building a Serverless Web App
		Step 1: Create a Static Website
		Step 2: User Authentication
		Step 3: Create the Serverless Backend Components
		Step 4: Set Up the API Gateway
		Step 5: Register for the Conference
	Automating AWS Infrastructure
		AWS CloudFormation
		CloudFormation Components
		CloudFormation Templates
		CloudFormation Stacks
		CloudFormation Stack Sets
		Third-Party Solutions
		AWS Service Catalog
	AWS Elastic Beanstalk
		Updating Elastic Beanstalk Applications
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 7: Designing Highly Available and Fault-Tolerant Architecture
	“Do I Know This Already?”
	Foundation Topics
	High Availability and Fault Tolerance
		High Availability in the Cloud
		Reliability
	AWS Regions and Availability Zones
		Availability Zones
		Availability Zone Distribution
		Planning Network Topology
		Local Zones
		Wavelength Zones
		AWS Services Use Cases
	Choosing an AWS Region
		Compliance Rules
		Understanding Compliance Rules at AWS: Use Case
		AWS Compliance Standards
		HIPAA
		NIST
		AWS GovCloud
		Latency Concerns
		Services Offered in Each AWS Region
		Calculating Costs
	Distributed Design Patterns
		Designing for High Availability and Fault Tolerance
		Removing Single Points of Failure
		Immutable Infrastructure
		Storage Options and Characteristics
	Failover Strategies
		Backup and Restore
		Pilot Light
		Warm Standby
		Multi-Region Scenarios
		Warm Standby with Amazon Aurora
		Active-Active
		Single and Multi-Region Recovery Cheat Sheet
		Disaster Recovery Cheat Sheet
	AWS Service Quotas
		AWS Service Quotas Cheat Sheet
	Amazon Route 53
		Route 53 Health Checks
		Route 53 Routing Policies
		Route 53 Traffic Flow Policies
		Alias Records
		Route 53 Resolver
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 8: High-Performing and Scalable Storage Solutions
	“Do I Know This Already?”
	Foundation Topics
	AWS Storage Options
		Workload Storage Requirements
	Amazon Elastic Block Store
		EBS Volume Types
		General Purpose SSD (gp2/gp3)
		Elastic EBS Volumes
		Attaching an EBS Volume
		Amazon EBS Cheat Sheet
		EBS Snapshots
		Taking a Snapshot from a Linux Instance
		Taking a Snapshot from a Windows Instance
		Fast Snapshot Restore
		Snapshot Administration
		EBS Recycle Bin
		Snapshot Cheat Sheet
		Local EC2 Instance Storage Volumes
	Amazon Elastic File System
		EFS Performance Modes
		EFS Throughput Modes
		EFS Security
		EFS Storage Classes
		EFS Lifecycle Management
		Amazon EFS Cheat Sheet
		AWS DataSync
	Amazon FSx for Windows File Server
		Amazon FSx for Windows File Server Cheat Sheet
	Amazon Simple Storage Service
		Amazon S3 Bucket Concepts
		Amazon S3 Data Consistency
		Amazon S3 Storage Classes
		Amazon S3 Management
		S3 Bucket Versioning
		Amazon S3 Access Points
		Multi-Region Access Points
		Preselected URLs for S3 Objects
		S3 Cheat Sheet
	Amazon S3 Glacier
		Vaults and Archives
		S3 Glacier Retrieval Policies
		S3 Glacier Deep Archive
		Amazon S3 Glacier Cheat Sheet
	AWS Data Lake
		AWS Lake Formation
		Structured and Unstructured Data
		Analytical Tools and Datasets
		AWS Glue
		Analytic Services
		Amazon Kinesis Data Streams
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 9: Designing High-Performing and Elastic Compute Solutions
	“Do I Know This Already?”
	Foundation Topics
	AWS Compute Services
		AWS EC2 Instances
		Amazon Machine Images
		AWS AMIs
		Creating a Custom AMI
		AMI Build Considerations
		Amazon EC2 Image Builder
	AWS Lambda
		AWS Lambda Integration
		Lambda Settings
		AWS Lambda Cheat Sheet
	Amazon Container Services
		Amazon Elastic Container Service
		AWS ECS Task Definition Choices
		Amazon Elastic Kubernetes Service
	Monitoring with AWS CloudWatch
		CloudWatch Basic Monitoring
		CloudWatch Logs
		Collecting Data with the CloudWatch Agent
		Planning for Monitoring
		Amazon CloudWatch Integration
		Amazon CloudWatch Terminology
		Creating a CloudWatch Alarm
		Additional Alarm and Action Settings
		Amazon CloudWatch Cheat Sheet
	Auto Scaling Options at AWS
		EC2 Auto Scaling
		EC2 Auto Scaling Operation
		Launch Configuration
		Launch Templates
		Auto Scaling Groups
		Scaling Options for Auto Scaling Groups
		Management Options for Auto Scaling Groups
		Cooldown Period
		Termination Policy
		Lifecycle Hooks
		EC2 Auto Scaling Cheat Sheet
		AWS Auto Scaling
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q& A
Chapter 10: Determining High-Performing Database Solutions
	“Do I Know This Already?”
	Foundation Topics
	AWS Cloud Databases
	Amazon Relational Database Service
		Amazon RDS Database Instances
		Database Instance Class Types
		High-Availability Design for RDS
		Multi-AZ RDS Deployments
		Big-Picture RDS Installation Steps
		Monitoring Database Performance
		Best Practices for RDS
		Amazon Relational Database Service Proxy
		Amazon RDS Cheat Sheet
	Amazon Aurora
		Amazon Aurora Storage
		Amazon Aurora Replication
		Communicating with Amazon Aurora
		Amazon Aurora Cheat Sheet
	Amazon DynamoDB
		Amazon DynamoDB Tables
		Provisioning Table Capacity
		Adaptive Capacity
		Data Consistency
		ACID and Amazon DynamoDB
		Global Tables
		Amazon DynamoDB Accelerator
		Backup and Restoration
		Amazon DynamoDB Cheat Sheet
	Amazon ElastiCache
		Amazon ElastiCache for Memcached
		Amazon ElastiCache for Memcached Cheat Sheet
		Amazon ElastiCache for Redis
		Amazon ElastiCache for Redis Cheat Sheet
		ElastiCache for Redis: Global Datastore
	Amazon Redshift
		Amazon Redshift Cheat Sheet
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 11: High-Performing and Scalable Networking Architecture
	“Do I Know This Already?”
	Foundation Topics
	Amazon CloudFront
		How Amazon CloudFront Works
		Regional Edge Caches
		CloudFront Use Cases
		HTTPS Access
		Serving Private Content
		Using Signed URLs
		Using an Origin Access Identifier
		Restricting Distribution of Content
		CloudFront Origin Failover
		Video-on-Demand and Live Streaming Support
		Edge Functions
		CloudFront Functions
		Lambda@Edge Functions
		Lambda@Edge Use Cases
		CloudFront Cheat Sheet
	AWS Global Accelerator
	Elastic Load Balancing Service
		Application Load Balancer Features
		Application Load Balancer Deployment
		Health Checks
		Target Group Attributes
		Sticky Session Support
		Access Logs
		ALB Cheat Sheet
		Network Load Balancer
		NLB Cheat Sheet
		Multi-Region Failover
		CloudWatch Metrics
	AWS VPC Networking
		The Shared Security Model
		AWS Networking Terminology
		VPC Cheat Sheet
		Creating a VPC
		Using the Create VPC Wizard
		Using the AWS CLI to Create a VPC
		How Many VPCs Does Your Organization Need?
		Creating the VPC CIDR Block
	Subnets
		Subnet Cheat Sheet
	IP Address Types
		Private IPv4 Addresses
		Private IPv4 Address Summary
		Public IPv4 Addresses
		Elastic IP Addresses
		Public IPv4 Address Cheat Sheet
		Inbound and Outbound Traffic Charges
		Bring-Your-Own IP
		The BYOIP Process
		IPv6 Addresses
		VPC Flow Logs
	Connectivity Options
		VPC Peering
		Establishing a Peering Connection
		VPC Endpoints
		VPC Gateway Endpoints
		VPC Interface Endpoints
		Endpoint Services
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 12: Designing Cost-Optimized Storage Solutions
	“Do I Know This Already?”
	Foundation Topics
	Calculating AWS Costs
		Cloud Service Costs
		Tiered Pricing at AWS
		Management Tool Pricing Example: AWS Config
		AWS Config Results
	Cost Management Tools
		AWS Cost Explorer
		AWS Budgets
		AWS Cost and Usage Reports
		Managing Costs Cheat Sheet
		Tagging AWS Resources
		Using Cost Allocation Tags
	Storage Types and Costs
	AWS Backup
		Lifecycle Rules
		AWS Backup Cheat Sheet
	Data Transfer Costs
	AWS Storage Gateway
		AWS Storage Gateway Cheat Sheet
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 13: Designing Cost-Effective Compute Solutions
	“Do I Know This Already?”
	Foundation Topics
	EC2 Instance Types
		What Is a vCPU?
		EC2 Instance Choices
		Dedicated Host
		Dedicated Hosts Cheat Sheet
		Dedicated Instances
		Placement Groups
	EC2 Instance Purchasing Options
		EC2 Pricing—On-demand
		On-demand Instance Service Quotas
		Reserved Instances
		Term Commitment
		Payment Options
		EC2 Reserved Instance Types
		Scheduled Reserved EC2 Instances
		Regional and Zonal Reserved Instances
		Savings Plans
		Spot Instances
		Spot Fleet Optimization Strategies
		Spot Capacity Pools
		EC2 Pricing Cheat Sheet
		Compute Tools and Utilities
	Strategies for Optimizing Compute
		Matching Compute Utilization with Requirements
		Compute Scaling Strategies
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 14: Designing Cost-Effective Database Solutions
	“Do I Know This Already?”
	Foundation Topics
	Database Design Choices
		RDS Deployments
		RDS Costs Cheat Sheet
		RDS Database Design Solutions
		NoSQL Deployments
		NoSQL Costs Cheat Sheet
		Migrating Databases
		AWS Schema Conversion Tool
	Database Data Transfer Costs
		Data Transfer Costs and RDS
		Data Transfer Costs with DynamoDB
		Data Transfer Costs with Amazon Redshift
		Data Transfer Costs with DocumentDB
		Data Transfer Costs Cheat Sheet
	Database Retention Policies
		Database Backup Policies Cheat Sheet
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 15: Designing Cost-Effective Network Architectures
	“Do I Know This Already?”
	Foundation Topics
	Networking Services and Connectivity Costs
		Elastic Load Balancing Deployments
		NAT Devices
		AWS CloudFront
		CloudFront Pricing Cheat Sheet
		VPC Endpoints
		Network Services from On-Premises Locations
	Data Transfer Costs
		Accessing AWS Services in the Same Region
		Workload Components in the Same Region
		Accessing AWS Services in Different Regions
		Data Transfer at Edge Locations
		Network Data Transfer
		Public Versus Private Traffic Charges
		Data Transfer Costs Cheat Sheet
	Exam Preparation Tasks
	Review All Key Topics
	Define Key Terms
	Q&A
Chapter 16: Final Preparation
	Exam Information
	Tips for Getting Ready for the Exam
	Scheduling Your Exam
	Tools for Final Preparation
		Pearson Test Prep Practice Test Software and Questions on the Website
		Accessing the Pearson Test Prep Software Online
		Accessing the Pearson Test Prep Software Offline
		Customizing Your Exams
		Updating Your Exams
		Premium Edition
		Chapter-Ending Review Tools
	Suggested Plan for Final Review/Study
	Summary
Appendix A: Answers to the “Do I Know This Already?” Quizzes and Q&A Sections
Appendix B: AWS Certified Solutions Architect – Associate (SAA-C03) Cert Guide Exam Updates
Glossary of Key Terms
	A
	B
	C
	D
	E
	F
	H
	I
	K
	L
	M
	N
	O
	P
	Q
	R
	S
	T
	U
	V
	W
	Z
Index
	A
	B
	C
	D
	E
	F
	G
	H
	I
	J
	K
	L
	M
	N
	O
	P
	Q
	R
	S
	T
	U
	V
	W
	X
	Y
	Z
Online Elements
	Appendix C: Study Planner
	Glossary of Key Terms
		A
		B
		C
		D
		E
		F
		H
		I
		K
		L
		M
		N
		O
		P
		Q
		R
		S
		T
		U
		V
		W
		Z