AWS Certified Solutions Architect Study Guide: Associate (SAA-C03) Exam,

Cover
Title Page
Copyright Page
Acknowledgments
About the Authors
About the Technical Editor
Contents at a Glance
Contents
Table of Exercises
Introduction
	What Does This Book Cover?
	Interactive Online Learning Environment and Test Bank
	Exam Objectives
	Objective Map
	Assessment Test
	Answers to Assessment Test
Part I The Core AWS Services
	Chapter 1 Introduction to Cloud Computing and AWS
		Cloud Computing and Virtualization
			Cloud Computing Architecture
			Cloud Computing Optimization
		The AWS Cloud
		AWS Platform Architecture
		AWS Reliability and Compliance
			The AWS Shared Responsibility Model
			The AWS Service Level Agreement
		Working with AWS
			AWS Organizations
			AWS Control Tower
			AWS Service Catalog
			AWS License Manager
			AWS Artifact
			The AWS CLI
			AWS SDKs
			Technical Support and Online Resources
			Support Plans
			Other Support Resources
		Migrating Existing Resources to AWS
			AWS Migration Hub
			AWS Application Migration Service
			AWS Database Migration Service
			AWS Application Discovery Service
		Summary
		Exam Essentials
		Review Questions
	Chapter 2 Compute Services
		Introduction
		EC2 Instances
			Provisioning Your Instance
			Configuring Instance Behavior
			Placement Groups
			Instance Pricing
			Instance Life Cycle
			Resource Tags
			Service Limits
		EC2 Storage Volumes
			Elastic Block Store Volumes
			Instance Store Volumes
		Accessing Your EC2 Instance
		Securing Your EC2 Instance
			Security Groups
			IAM Roles
			NAT Devices
			Key Pairs
		EC2 Auto Scaling
			Launch Configurations
			Launch Templates
			Auto Scaling Groups
			Auto Scaling Options
		AWS Systems Manager
			Actions
			Insights
			AWS Systems Manager Inventory
		Running Containers
			Amazon Elastic Container Service
			Amazon Elastic Kubernetes Service
			Other Container-Oriented Services
		AWS CLI Example
		Summary
		Exam Essentials
		Review Questions
	Chapter 3 AWS Storage
		Introduction
		S3 Service Architecture
			Prefixes and Delimiters
			Working with Large Objects
			Encryption
			Logging
		S3 Durability and Availability
			Durability
			Availability
			Eventually Consistent Data
		S3 Object Life Cycle
			Versioning
			Life Cycle Management
		Accessing S3 Objects
			Access Control
			Presigned URLs
			Static Website Hosting
		Amazon S3 Glacier
			Storage Pricing
		Other Storage-Related Services
			Amazon Elastic File System
			Amazon FSx
			AWS Storage Gateway
			AWS Snow Family
			AWS DataSync
		AWS CLI Example
		Summary
		Exam Essentials
		Review Questions
	Chapter 4 Amazon Virtual Private Cloud (VPC)
		Introduction
		VPC CIDR Blocks
			Secondary CIDR Blocks
			IPv6 CIDR Blocks
		Subnets
			Subnet CIDR Blocks
			Availability Zones
			IPv6 CIDR Blocks
		Elastic Network Interfaces
			Primary and Secondary Private IP Addresses
			Attaching Elastic Network Interfaces
			Enhanced Networking
		Internet Gateways
		Route Tables
			Routes
			The Default Route
		Security Groups
			Inbound Rules
			Outbound Rules
			Sources and Destinations
			Stateful Firewall
			Default Security Group
		Network Access Control Lists
			Inbound Rules
			Outbound Rules
			Using Network Access Control Lists and Security Groups Together
		AWS Network Firewall
		Public IP Addresses
		Elastic IP Addresses
		AWS Global Accelerator
		Network Address Translation
		Network Address Translation Devices
			Configuring Route Tables to Use NAT Devices
			NAT Gateway
			NAT Instance
		AWS PrivateLink
		VPC Peering
		Hybrid Cloud Networking
			AWS Site-to-Site VPN
			AWS Transit Gateway
			AWS Direct Connect
		High-Performance Computing
			Elastic Fabric Adapter
			AWS ParallelCluster
		Summary
		Exam Essentials
		Review Questions
	Chapter 5 Database Services
		Introduction
		Relational Databases
			Columns and Attributes
			Using Multiple Tables
			Structured Query Language
			Online Transaction Processing vs. Online Analytic Processing
		Amazon Relational Database Service
			Database Engines
			Licensing Considerations
			Database Option Groups
			Database Instance Classes
			Storage
			Read Replicas
			High Availability (Multi-AZ)
			Single-Master
			Multi-Master
			Backup and Recovery
			Automated Snapshots
			Maintenance Items
			Amazon RDS Proxy
		Amazon Redshift
			Compute Nodes
			Data Distribution Styles
			Redshift Spectrum
			AWS Database Migration Service
		Nonrelational (NoSQL) Databases
			Storing Data
			Querying Data
			Types of Nonrelational Databases
		DynamoDB
			Partition and Hash Keys
			Attributes and Items
			Throughput Capacity
			Reading Data
			Global Tables
			Backups
		Summary
		Exam Essentials
		Review Questions
	Chapter 6 Authentication and Authorization—AWS Identity and Access Management
		Introduction
		IAM Identities
			IAM Policies
			User and Root Accounts
			Access Keys
			Groups
			Roles
		Authentication Tools
			Amazon Cognito
			AWS Managed Microsoft AD
			AWS Single Sign-On
			AWS Key Management Service
			AWS Secrets Manager
			AWS CloudHSM
			AWS Resource Access Manager (AWS RAM)
		AWS CLI Example
		Summary
		Exam Essentials
		Review Questions
	Chapter 7 CloudTrail, CloudWatch, and AWS Config
		Introduction
		CloudTrail
			Management Events
			Data Events
			Event History
			Trails
			Log File Integrity Validation
		CloudWatch
			CloudWatch Metrics
			Graphing Metrics
			Metric Math
			CloudWatch Logs
			CloudWatch Alarms
			Amazon EventBridge
		AWS Config
			The Configuration Recorder
			Configuration Items
			Configuration History
			Configuration Snapshots
			Monitoring Changes
		Summary
		Exam Essentials
		Review Questions
	Chapter 8 The Domain Name System and Network Routing: Amazon Route 53 and Amazon CloudFront
		Introduction
		The Domain Name System
			Namespaces
			Name Servers
			Domains and Domain Names
			Domain Registration
			Domain Layers
			Fully Qualified Domain Names
			Zones and Zone Files
			Record Types
			Alias Records
		Amazon Route 53
			Domain Registration
			DNS Management
			Availability Monitoring
			Routing Policies
			Traffic Flow
			Route 53 Resolver
		Amazon CloudFront
		AWS CLI Example
		Summary
		Exam Essentials
		Review Questions
	Chapter 9 Data Ingestion, Transformation, and Analytics
		Introduction
		AWS Lake Formation
			Ingestion
			Transformation
			Analytics
		AWS Transfer Family
		Kinesis
			Kinesis Video Streams
			Kinesis Data Streams
			Kinesis Data Firehose
			Kinesis Data Firehose vs. Kinesis Data Streams
		Summary
		Exam Essentials
		Review Questions
Part II Architecting for Requirements
	Chapter 10 Resilient Architectures
		Introduction
		Calculating Availability
			Availability Differences in Traditional vs. Cloud-Native Applications
			Know Your Limits
			Increasing Availability
		EC2 Auto Scaling
			Launch Configurations
			Launch Templates
			Auto Scaling Groups
			Auto Scaling Options
		Data Backup and Recovery
			S3
			Elastic File System
			Elastic Block Storage
			Database Resiliency
		Creating a Resilient Network
			VPC Design Considerations
			External Connectivity
		Simple Queue Service
			Queues
			Queue Types
			Polling
			Dead-Letter Queues
		Designing for Availability
			Designing for 99 Percent Availability
			Designing for 99.9 Percent Availability
			Designing for 99.99 Percent Availability
		Summary
		Exam Essentials
		Review Questions
	Chapter 11 High-Performing Architectures
		Introduction
		Optimizing Performance for the Core AWS Services
			Compute
			Storage
			Database
			Network Optimization and Load Balancing
		Infrastructure Automation
			CloudFormation
			Third-Party Automation Solutions
		Reviewing and Optimizing Infrastructure Configurations
			AWS Well-Architected Tool
			Load Testing
			Visualization
		Optimizing Data Operations
			Caching
			Partitioning/Sharding
			Compression
		Summary
		Exam Essentials
		Review Questions
	Chapter 12 Secure Architectures
		Introduction
		Identity and Access Management
			Protecting AWS Credentials
			Fine-Grained Authorization
			Permissions Boundaries
			Roles
			Enforcing Service-Level Protection
		Detective Controls
			CloudTrail
			CloudWatch Logs
			Searching Logs with Athena
			Auditing Resource Configurations with AWS Config
			Amazon GuardDuty
			Amazon Inspector
			Amazon Detective
			Security Hub
			Amazon Fraud Detector
			AWS Audit Manager
		Protecting Network Boundaries
			Network Access Control Lists and Security Groups
			AWS Web Application Firewall
			AWS Shield
		AWS Firewall Manager
		Data Encryption
			Data at Rest
			Data in Transit
			Macie
		Summary
		Exam Essentials
		Review Questions
	Chapter 13 Cost-Optimized Architectures
		Introduction
		Planning, Tracking, and Controlling Costs
			AWS Budgets
			Monitoring Tools
			AWS Trusted Advisor
			Online Calculator Tools
		Cost-Optimizing Compute
			Maximizing Server Density
			EC2 Reserved Instances
			EC2 Spot Instances
			Auto Scaling
			Elastic Block Store Lifecycle Manager
		Summary
		Exam Essentials
		Review Questions
Appendix A: Answers to Review Questions
	Chapter 1: Introduction to Cloud Computing and AWS
	Chapter 2: Compute Services
	Chapter 3: AWS Storage
	Chapter 4: Amazon Virtual Private Cloud (VPC)
	Chapter 5: Database Services
	Chapter 6: Authentication and Authorization—AWS Identity and Access Management
	Chapter 7: CloudTrail, CloudWatch, and AWS Config
	Chapter 8: The Domain Name System and Network Routing: Amazon Route 53 and Amazon CloudFront
	Chapter 9: Data Ingestion, Transformation, and Analytics
	Chapter 10: Resilient Architectures
	Chapter 11: High-Performing Architectures
	Chapter 12: Secure Architectures
	Chapter 13: Cost-Optimized Architectures
Appendix B: Additional Services
	Deployment Tools
		AWS Amplify
		AWS Serverless Application Repository
		AWS Proton
	Developer Tools
		Amazon API Gateway
		AWS Device Farm
		AWS Step Functions
	Infrastructure Tools
		AWS Outposts
		AWS Wavelength
		VMware Cloud on AWS
	Connectivity Tools
		Amazon Pinpoint
		AWS Transfer Family
		AWS AppSync
	Database Tools
		Amazon DocumentDB (with MongoDB Compatibility)
		Amazon Keyspaces (for Apache Cassandra)
		Amazon Quantum Ledger Database (QLDB)
	Data Streaming Tools
		Amazon Managed Streaming for Apache Kafka (MSK)
		Amazon MQ
		AWS Data Exchange
		Amazon Timestream
		AWS Data Pipeline
		Amazon AppFlow
	Machine Learning and Artificial Intelligence
		Amazon Comprehend
		Amazon Forecast
		Amazon Lex
		Amazon Polly
		Amazon Rekognition
		Amazon Textract
		Amazon Transcribe
		Amazon Translate
	Other Tools
		AWS Batch
		AWS X-Ray
		Amazon Kendra
		Amazon OpenSearch Service (Amazon Elasticsearch Service)
		Amazon Managed Grafana
		Amazon Managed Service for Prometheus
Index
EULA