Book Image

Part 1: AWS Certified Solutions Architect (and CD,SO) [Video]

By : Chandra Lingam
Book Image

Part 1: AWS Certified Solutions Architect (and CD,SO) [Video]

By: Chandra Lingam

Overview of this book

<p>This course will give you a structured introduction to AWS and prepare you for the associate-level certification. This course covers services that form the foundation of AWS - networking, compute, load balancing, elastic scaling, storage, monitoring, security, and cost estimation. Each topic is covered with a detailed explanation of concepts, hands-on activities, and practice questions. The question bank consists of 300+ quizzes that simulate the exam. You’ll be able to download presentations for offline review and find all the code and supporting files for this course are at https://github.com/PacktPublishing/Part-1-AWS-Certified-Solutions-Architect-and-CD-SO-</p>

Related Content you might be interested in

Current Title:

Small book image
Part 1: AWS Certified Solutions Architect (and CD,SO) [Video]
Chandra Lingam
Apr, 2019 | 17 hours 17 minutes
No titles found
Table of Contents (13 chapters)
Free Chapter
1
Introduction
Introduction
Associate Exam Overview and Preparation Strategies - SA, Developer, SysOps
Six Advantages of Cloud Computing
AWS Global Infrastructure
2
Housekeeping
AWS Root Account Setup
Billing Alerts Setup and Granting Billing Access to IAM Users
IAM User and Command Line Tool Setup
KeyPair and Tools to connect to EC2 Instances
3
Networking Primer
Classless Inter Domain Routing, Subnets, Private IP
4
Virtual Private Cloud (VPC) - Networking Infrastructure
Introduction
VPC, Region and Availability Zones
VPC Core Components
Demo - VPC Wizard Launch Configuration
Demo - Default VPC Overview
Demo - Create a Public VPC
Demo - Launch EC2 Instance
VPC Security - IAM, Firewall, Flow Logs
Demo - Security Group and ACL Firewall
Demo - Ping EC2 Instances
VPC Data Flow Walk Through
Demo - IPv6 Configuration and Testing
Demo - VPC Flow Log
VPC Endpoints
VPC Hybrid Architectures - VPN and Direct Connect
VPC Peering Connection
Demo - Peering Connection (Same Region)
Demo - Cross Region Peering Connection
VPN CloudHub
VPC Pricing
Summary
5
Elastic Compute Cloud (EC2) - Compute Service
Introduction
Instance and Elastic Block Store (EBS), Dedicated and Shared Resources
EC2 Virtualization Types, Nitro and BareMetal
EC2 Console and Amazon Machine Images (AMI)
Instance Family, Type, Size, Hardware Acceleration
General Purpose, Burstable, Unlimited, CPU Credits
Compute, Storage, Memory, Accelerated Computing Instance Families
Which Instance Family to Pick?
Demo - CPU Credits, Burstable and Unlimited Mode
Instance Root Access - Secure Login Key Pairs
Physical Location - Region, Availability Zone and Virtual Private Cloud
Demo - EC2 Web Server Setup
Demo - EC2 Reboot, Stop, Start
Demo - Elastic IP
Demo - Resize Instances
Demo - Launch Windows EC2 instances
Placement Group
Elastic Block Store (EBS) Optimized Instances
Bastion Host
Demo - Bastion Host VPC Setup with Public and Private Subnets
Demo - Bastion Host Security Group, Launch Private and Public Instances
Demo - Bastion Host Credential Forwarding and Connecting to Instances
Demo - Bastion Host Cleanup
Security Group In Depth
Network Access Control List (ACL)
Access Control - IAM, Key Pairs and Sharing AMI
IAM Roles - Access Other AWS Services From EC2
Demo - EC2 Instance with IAM Roles to Access S3
Lifecycle of EC2 Instance
Recover Instance - Handle AWS Infrastructure, Host and Instance issues
EC2 Instance Purchasing Options
Reserved Instance Pricing and Features
Spot Instance Pricing Model
Spot Usage Examples, Best Practices
Demo - Spot Instance Launch
Demo - Spot Instance Diversified Allocation Strategy
Pricing - EC2, Elastic IP, Data Transfer, Storage, GPU
Managing Instance, OS, Users
Managing Instance with EC2 Instance Manager, Processor State Control
User Data - Customize Instance at Launch
Instance Metadata - Query Instance Attributes at Runtime
Demo - Customize Instance with User Data
Demo - Query Instance Metadata
6
CloudWatch - Monitoring Service for the Cloud
Architecture, CloudWatch Log, CloudWatch Events
Data Retention, Related AWS Services
Concepts and Terminology
Dimension Overview
Statistics, Percentiles
Alarms
Monitoring EC2 Instances - Metrics, Status Checks, Basic and Detailed Monitoring
Demo - Monitoring CloudWatch Dashboard
Demo - Alarm - Billing Alarm, Shutdown Idle Instance, Recover Instance
Demo - Metrics – Percentiles
CloudWatch Log Architecture and Concepts
Demo - CloudWatch Log - Configure Log Group and Stream
Demo - CloudWatch Log - Publish Events, Metric Filters for Count, Errors, Plot
7
Storage
Introduction to Instance Store, EBS, Snapshot, EFS and S3
Storage Units
Storage Technology Comparison
Storage - EC2 Instance Store
Pricing
Encryption of Elastic Block Store Volume
Volume Type Comparison - Elastic Block Store
Throughput Vs IOPS
EBS Optimized Instances
Snapshot - Backup solution for EBS Volume
Snapshot Best Practices, Sharing Snapshot, Modifying Volume
Monitoring EBS Volumes
Demo - Storage Monitoring
Demo - Storage Create Snapshot, Launch Volume from Snapshot
Demo - Create Amazon Machine Image (AMI) From Snapshot, Launch Instance, Encrypt
Demo - Attach New Volume to an Instance, Encrypted Volumes
8
Elastic Load Balancing - Load Balancer for the Cloud
Introduction to Elastic Load Balancers
Security Benefits of an Elastic Load Balancer
Internet Facing and Internal Load Balancers
Elastic Load Balancer Types
WebSocket and HTTP/2 - What is it?
Cross Zone Load Balancing – Concept
Demo - Internet Facing Classic Load Balancer Setup
Demo - Create VPC with Public and Private Subnets in Two Availability Zones
Demo - Launch Web Servers, Bastion Host and Configure Security Groups
Demo - Test Private Web Server Instances from Bastion Host
Demo - Launch Classic Load Balancer - Configure Health Checks
Demo - Attach EC2 Instances to Load Balancer, Test Load Balancer, Metrics
Demo - Simulate Error Conditions and Verify How Load Balancer Handles Failures
Demo - Internal Load Balancer, Testing Load Balancer
Identifying Client IP, Listener Configuration for Classic Load Balancer
Load Balancer Access Logs
Application Load Balancer - Architecture and Concept
Demo - Application Load Balancer Setup and Usage
Demo - Path Based Routing, Monitoring and Metrics
Demo – Cleanup
Demo - Network Load Balancer
Demo - Network Load Balancer Cross Zone Load Balancing
Demo - Review Billing Dashboard
Billing - Load Balancer Charges - How are they calculated?
Summary
9
Auto Scaling
Introduction to Auto Scaling
Scenarios and Examples where you can use Auto Scaling
CloudWatch Alarms - Trigger for Auto Scaling
Auto Scaling Terminology
Demo - Auto Scaling Interface, Constant Fleet Size Maintenance
Demo - Auto Scaling Instance Termination Test
Demo - Auto Scaling Availability Zone Test
Demo - Auto Scaling with Elastic Load Balancer Test
Demo - Auto Scaling With Load Balancer Health Check
Demo - Auto Scaling with Application Load Balancer
Demo - Auto Scaling Adjust Desired Capacity Test
Rebalance Across Availability Zones
Lifecycle of an Auto Scaling EC2 instance
Triggers for Scale out and Scale In
Demo - Dynamic Scaling with Simple Scaling Policy
Demo - Dynamic Scaling with Step Scaling Policy
Summary - Scaling Options - Constant, Manual, Scheduled, Dynamic
Summary - Multiple Scaling Policies and how concurrent trigger is handled
Summary - Scale in - Process for Identifying Instance to Terminate
10
Identity and Access Management - Security - Manage Access to Services
Introduction to Identity and Access Management
IAM Roles
Policy – Types
User Types - Root, IAM Users
Corporate Network Federated Users
Internet Identity Federated Users
Service Users
Amazon Resource Name (ARN)
Demo - Setup IAM Users Needed For Testing
Demo - Setup S3 Bucket, Policy & Test Files and Resource Level Policy Structure
Demo - Policy Generator and Test Resource Level Policy
Demo - Cross Account Access Using Bucket Level Policy
Demo - User Inline Policy
Demo - Maintaining an Inline Policy
Demo - Managed Policy
Demo - Policy Variables and User Home Directory
Demo - Policy Conditions to Restrict Access by Source IP Address and CIDR Block
Demo - VPC Endpoints based Policy Conditions
11
Simple Storage Service (S3) - Cloud Storage
Introduction to Simple Storage Service (S3)
Terminology - Bucket, Object, Key, Region
Consistency Model - How S3 Responds When Changes are propagated
Versioning - Concept and Usage Scenarios ADD, DELETE
Versioning - Usage Scenarios GET Object, List Bucket, Undelete, Restore
Suspend Versioning – Scenarios
Demo - S3 Versioning
Demo - Versioned Object Delete, Un-delete, Permanent Delete of a Version
Demo - Suspend Versioning
Storage Class - Standard and Infrequent Access
Storage Class - Glacier Storage
Storage Class - One Zone IA
Storage Class - Reduced Redundancy Storage (RRS)
Table - Comparison of Storage Classes and Attributes
Changing Storage Class
Demo - Storage Class - Specifying Storage Class, Changing It, Version Storage
Billing - S3 Cost Structure
Billing - Requester Pays For Transfer Option
Performance - Multipart Loading for Large Objects and Improved Reliability
Performance Continued - Content Distribution Network, Key Naming
Transfer Acceleration & Performance Comparison Tool
Lifecycle Management - Manage Retention, Storage Class, Cost of S3 Storage
Lifecycle Management Rules - Recommended Object Lifecycle Flow
Lifecycle Behavior - UnVersioned, Version Enabled, Version Suspended Bucket
Demo - Object Retention by Age
Demo - Object Retention by Folder and Age
Demo - Tiered Storage Management
Demo - Versioned Object Management
Cross Region Replication (CRR) - Introduction and Usage Scenarios
CRR - What is replicated and what is Not Replicated?
Replication Status - How to Check?
Demo - Cross Region Replication Setup, Add, Delete, Update Test, Check Status
Access - When to use Object Access Control List (ACL) and Predefined Groups?
Access Management - When to use Bucket ACL and Bucket Policies?
Demo - Object ACL and Bucket ACL
Encryption Options - Protecting Data at Rest and In-Transit
Table - Server Side Encryption (SSE) Types and Comparison
Demo - Encrypting New and Existing Objects with Server Side Encryption
Static Website Hosting vs REST Based Access
Presigned URL - Allow Temporary Access to Object and Upload Access
Event Notification - Send Alerts and Trigger WorkFlows Based on S3 Events
Monitoring - CloudWatch Metrics and Server Access Logs
Request Routing in S3 - Handling Errors during RESTful Calls
BitTorrent Based S3 Content Distribution
Cross Origin Resource Sharing (CORS) - Serving Javascripts, Images, Videos
12
Glacier
Glacier Features an Introduction
Demo - S3 Glacier Storage Class Usage
Demo - Glacier Vault and Archive Usage
13
Route 53 - Domain Name System Service
Introduction to Domain Name System Service
Domain Name System - Query, Name Server, Cache Example Walk Through
Trace DNS Request - Dig, NSLookUp, SimpleDNS
Domain Registration, DNS, Private DNS, Health Check, Global Traffic
Routing Policy - Types of Traffic Routing
Terminology and Concepts
Route 53 Availability, Latency, SLA, Service Credits
Demo - Route 53 Management Console, S3 Static Website Access using Custom Domain
Demo - Access Website and Bastion on EC2 instance using Custom Domain
Demo - Access RDS MySql Database Instance Using Custom Domain
Demo - Private Hosted Zone - Private DNS for Your VPC
Demo - Distributing Traffic across Global Infrastructure
Demo - Handling Regional Failures by Failing over To Other Available Regions
Traffic Flow - Visual Tool for Managing Application Traffic
Pricing
Route 53 - IAM Security and CloudWatch Monitoring
Chapter 5
Elastic Compute Cloud (EC2) - Compute Service
Content Locked
Section 6
General Purpose, Burstable, Unlimited, CPU Credits
Elastic Compute Cloud (EC2) - Compute Service: General Purpose, Burstable, Unlimited, CPU Credits
Previous Section
End of Section 6
Next Section