Book Image

AWS Certified Database – Specialty (DBS-C01) Certification Guide

By : Kate Gawron
5 (1)
Book Image

AWS Certified Database – Specialty (DBS-C01) Certification Guide

5 (1)
By: Kate Gawron

Overview of this book

The AWS Certified Database – Specialty certification is one of the most challenging AWS certifications. It validates your comprehensive understanding of databases, including the concepts of design, migration, deployment, access, maintenance, automation, monitoring, security, and troubleshooting. With this guide, you'll understand how to use various AWS databases, such as Aurora Serverless and Global Database, and even services such as Redshift and Neptune. You’ll start with an introduction to the AWS databases, and then delve into workload-specific database design. As you advance through the chapters, you'll learn about migrating and deploying the databases, along with database security techniques such as encryption, auditing, and access controls. This AWS book will also cover monitoring, troubleshooting, and disaster recovery techniques, before testing all the knowledge you've gained throughout the book with the help of mock tests. By the end of this book, you'll have covered everything you need to pass the DBS-C01 AWS certification exam and have a handy, on-the-job desk reference guide.
Table of Contents (24 chapters)
1
Part 1: Introduction to Databases on AWS
Free Chapter
2
Chapter 1: AWS Certified Database – Specialty Overview
5
Part 2: Workload-Specific Database Design
12
Part 3: Deployment and Migration and Database Security
16
Part 4: Monitoring and Optimization
20
Part 5: Assessment
21
Chapter 16: Exam Practice

Auditing databases

Database auditing can be configured to help you identify unauthorized access to the databases, as well as closely monitor highly sensitive tables to stop them from being tampered with. In AWS, you can use four different tools to comprehensively monitor your database estate:

  • CloudWatch: You can configure your databases to send their logs to CloudWatch, which acts as a centralized repository.
  • CloudTrail: This can be used to monitor actions that have been taken by a user or another AWS service that affects your RDS instance. Creating, deleting, or modifying an RDS would be recorded. This also tracks user logins using IAM authentication.
  • Database Activity Stream: This is only used for RDS Oracle. It sends a record of all audited database changes to an external stream that the DBAs have no access to, thereby improving compliance.
  • Database logs: As well as the other monitoring tools, RDS gives you access to the standard logs for each database, such...