AWS Certified Solutions Architect Study Guide, 3E- Associate SAA-C02 Exam (Aws Certified Solutions Architect Official: Associate Exam)

Cover
Title Page
Copyright
Acknowledgments
About the Authors
Contents at a Glance
Contents
Table of Exercises
Introduction
Part I The Core AWS Services
	Chapter 1 Introduction to Cloud Computing and AWS
		Cloud Computing and Virtualization
			Cloud Computing Architecture
			Cloud Computing Optimization
		The AWS Cloud
		AWS Platform Architecture
		AWS Reliability and Compliance
			The AWS Shared Responsibility Model
			The AWS Service Level Agreement
		Working with AWS
			The AWS CLI
			AWS SDKs
			Technical Support and Online Resources
			Support Plans
			Other Support Resources
		Summary
		Exam Essentials
		Review Questions
	Chapter 2 Amazon Elastic Compute Cloud and Amazon Elastic Block Store
		Introduction
		EC2 Instances
			Provisioning Your Instance
			Configuring Instance Behavior
			Placement Groups
			Instance Pricing
			Instance Lifecycle
			Resource Tags
			Service Limits
		EC2 Storage Volumes
			Elastic Block Store Volumes
			Instance Store Volumes
		Accessing Your EC2 Instance
		Securing Your EC2 Instance
			Security Groups
			IAM Roles
			NAT Devices
			Key Pairs
		EC2 Auto Scaling
			Launch Configurations
			Launch Templates
			Auto Scaling Groups
			Auto Scaling Options
		AWS Systems Manager
			Actions
			Insights
		AWS CLI Example
		Summary
		Exam Essentials
		Review Questions
	Chapter 3 AWS Storage
		Introduction
		S3 Service Architecture
			Prefixes and Delimiters
			Working with Large Objects
			Encryption
			Logging
		S3 Durability and Availability
			Durability
			Availability
			Eventually Consistent Data
		S3 Object Lifecycle
			Versioning
			Lifecycle Management
		Accessing S3 Objects
			Access Control
			Presigned URLs
			Static Website Hosting
		Amazon S3 Glacier
			Storage Pricing
		Other Storage-Related Services
			Amazon Elastic File System
			Amazon FSx
			AWS Storage Gateway
			AWS Snowball
			AWS DataSync
		AWS CLI Example
		Summary
		Exam Essentials
		Review Questions
	Chapter 4 Amazon Virtual Private Cloud
		Introduction
		VPC CIDR Blocks
			Secondary CIDR Blocks
			IPv6 CIDR Blocks
		Subnets
			Subnet CIDR Blocks
			Availability Zones
			IPv6 CIDR Blocks
		Elastic Network Interfaces
			Primary and Secondary Private IP Addresses
			Attaching Elastic Network Interfaces
			Enhanced Networking
		Internet Gateways
		Route Tables
			Routes
			The Default Route
		Security Groups
			Inbound Rules
			Outbound Rules
			Sources and Destinations
			Stateful Firewall
			Default Security Group
		Network Access Control Lists
			Inbound Rules
			Outbound Rules
			Using Network Access Control Lists and Security Groups Together
		Public IP Addresses
		Elastic IP Addresses
		AWS Global Accelerator
		Network Address Translation
		Network Address Translation Devices
			Configuring Route Tables to Use NAT Devices
			NAT Gateway
			NAT Instance
		VPC Peering
		Hybrid Cloud Networking
			Virtual Private Networks
			AWS Transit Gateway
			AWS Direct Connect
		High-Performance Computing
			Elastic Fabric Adapter
			AWS ParallelCluster
		Summary
		Exam Essentials
		Review Questions
	Chapter 5 Database Services
		Introduction
		Relational Databases
			Columns and Attributes
			Using Multiple Tables
			Structured Query Language
			Online Transaction Processing vs. Online Analytic Processing
		Amazon Relational Database Service
			Database Engines
			Licensing Considerations
			Database Option Groups
			Database Instance Classes
			Storage
			Read Replicas
			High Availability (Multi-AZ)
			Single-Master
			Multi-Master
			Backup and Recovery
			Automated Snapshots
			Maintenance Items
		Amazon Redshift
			Compute Nodes
			Data Distribution Styles
			Redshift Spectrum
			AWS Database Migration Service
		Nonrelational (NoSQL) Databases
			Storing Data
			Querying Data
			Types of Nonrelational Databases
		DynamoDB
			Partition and Hash Keys
			Attributes and Items
			Throughput Capacity
			Reading Data
			Global Tables
			Backups
		Summary
		Exam Essentials
		Review Questions
	Chapter 6 Authentication and Authorization—AWS Identity and Access Management
		Introduction
		IAM Identities
			IAM Policies
			User and Root Accounts
			Access Keys
			Groups
			Roles
		Authentication Tools
			Amazon Cognito
			AWS Managed Microsoft AD
			AWS Single Sign-On
			AWS Key Management Service
			AWS Secrets Manager
			AWS CloudHSM
		AWS CLI Example
		Summary
		Exam Essentials
		Review Questions
	Chapter 7 CloudTrail, CloudWatch, and AWS Config
		Introduction
		CloudTrail
			Management Events
			Data Events
			Event History
			Trails
			Log File Integrity Validation
		CloudWatch
			CloudWatch Metrics
			Graphing Metrics
			Metric Math
			CloudWatch Logs
			CloudWatch Alarms
			Amazon EventBridge
		AWS Config
			The Configuration Recorder
			Configuration Items
			Configuration History
			Configuration Snapshots
			Monitoring Changes
		Summary
		Exam Essentials
		Review Questions
	Chapter 8 The Domain Name System and Network Routing: Amazon Route 53 and Amazon CloudFront
		Introduction
		The Domain Name System
			Namespaces
			Name Servers
			Domains and Domain Names
			Domain Registration
			Domain Layers
			Fully Qualified Domain Names
			Zones and Zone Files
			Record Types
			Alias Records
		Amazon Route 53
			Domain Registration
			DNS Management
			Availability Monitoring
			Routing Policies
			Traffic Flow
			Route 53 Resolver
		Amazon CloudFront
		AWS CLI Example
		Summary
		Exam Essentials
		Review Questions
	Chapter 9 Simple Queue Service and Kinesis
		Introduction
		Simple Queue Service
			Queues
			Queue Types
			Polling
			Dead-Letter Queues
		Kinesis
			Kinesis Video Streams
			Kinesis Data Streams
			Kinesis Data Firehose
			Kinesis Data Firehose vs. Kinesis Data Streams
		Summary
		Exam Essentials
		Review Questions
Part II The Well-Architected Framework
	Chapter 10 The Reliability Pillar
		Introduction
		Calculating Availability
			Availability Differences in Traditional vs. Cloud-Native Applications
			Know Your Limits
			Increasing Availability
		EC2 Auto Scaling
			Launch Configurations
			Launch Templates
			Auto Scaling Groups
			Auto Scaling Options
		Data Backup and Recovery
			S3
			Elastic File System
			Elastic Block Storage
			Database Resiliency
		Creating a Resilient Network
			VPC Design Considerations
			External Connectivity
		Designing for Availability
			Designing for 99 Percent Availability
			Designing for 99.9 Percent Availability
			Designing for 99.99 Percent Availability
		Summary
		Exam Essentials
		Review Questions
	Chapter 11 The Performance Efficiency Pillar
		Introduction
		Optimizing Performance for the Core AWS Services
			Compute
			Storage
			Database
			Network Optimization and Load Balancing
		Infrastructure Automation
			CloudFormation
			Third-Party Automation Solutions
		Reviewing and Optimizing Infrastructure Configurations
			Load Testing
			Visualization
		Optimizing Data Operations
			Caching
			Partitioning/Sharding
			Compression
		Summary
		Exam Essentials
		Review Questions
	Chapter 12 The Security Pillar
		Introduction
		Identity and Access Management
			Protecting AWS Credentials
			Fine-Grained Authorization
			Permissions Boundaries
			Roles
			Enforcing Service-Level Protection
		Detective Controls
			CloudTrail
			CloudWatch Logs
			Searching Logs with Athena
			Auditing Resource Configurations with AWS Config
			Amazon GuardDuty
			Amazon Inspector
			Amazon Detective
			Security Hub
		Protecting Network Boundaries
			Network Access Control Lists and Security Groups
			AWS Web Application Firewall
			AWS Shield
		Data Encryption
			Data at Rest
			Data in Transit
			Macie
		Summary
		Exam Essentials
		Review Questions
	Chapter 13 The Cost Optimization Pillar
		Introduction
		Planning, Tracking, and Controlling Costs
			AWS Budgets
			Monitoring Tools
			AWS Organizations
			AWS Trusted Advisor
			Online Calculator Tools
		Cost-Optimizing Compute
			Maximizing Server Density
			EC2 Reserved Instances
			EC2 Spot Instances
			Auto Scaling
			Elastic Block Store Lifecycle Manager
		Summary
		Exam Essentials
		Review Questions
	Chapter 14 The Operational Excellence Pillar
		Introduction
		CloudFormation
			Creating Stacks
			Deleting Stacks
			Using Multiple Stacks
			Stack Updates
			Preventing Updates to Specific Resources
			Overriding Stack Policies
		CodeCommit
			Creating a Repository
			Repository Security
			Interacting with a Repository Using Git
		CodeDeploy
			The CodeDeploy Agent
			Deployments
			Deployment Groups
			Deployment Types
			Deployment Configurations
			Lifecycle Events
			The Application Specification File
			Triggers and Alarms
			Rollbacks
		CodePipeline
			Continuous Integration
			Continuous Delivery
			Creating the Pipeline
			Artifacts
		AWS Systems Manager
			Actions
			Insights
		AWS Landing Zone
		Summary
		Exam Essentials
		Review Questions
Appendix Answers to Review Questions
	Chapter 1: Introduction to Cloud Computing and AWS
	Chapter 2: Amazon Elastic Compute Cloud and Amazon Elastic Block Store
	Chapter 3: AWS Storage
	Chapter 4: Amazon Virtual Private Cloud
	Chapter 5: Database Services
	Chapter 6: Authentication and Authorization—AWS Identity and Access Management
	Chapter 7: CloudTrail, Cloud Watch, and AWS Config
	Chapter 8: The Domain Name System and Network Routing: Amazon Route 53 and Amazon CloudFront
	Chapter 9: Simple Queue Service and Kinesis
	Chapter 10: The Reliability Pillar
	Chapter 11: The Performance Efficiency Pillar
	Chapter 12: The Security Pillar
	Chapter 13: The Cost Optimization Pillar
	Chapter 14: The Operational Excellence Pillar
Index
Online Test Bank
EULA