Cloud Technology Solutions Architect Associate (SF)

• Regions
• Availability Zones and Data centers
• AWS Credentials
• Review of All AWS Services

• • Fundamental APIs: PUT, GET, LIST, DELETE
  • Consistency model
  • • Types of consistency model for distributed storage
    • S3’s consistency model
    • Really understanding eventual consistency
  • S3 Namespace
  • Access Control List
  • Bucket Policy
  • Pre-signed URL
  • Multipart upload
  • Understanding Pricing for S3

  Hands-on: S3 Lab; Creating Buckets, objects, and managing access control

  • Data encryption with S3
  • Multipart upload
  • Understanding Pricing for S3
  • Data encryption with S3
  • AWS Import/Export Service
  • Server side logging
  • Versioning of data in S3
  • Architecture case study of common Use Cases of S3

• EC2 Architecture
• EC2 Instance types

• • Hardware differences
  • On-Demand Instances
  • Reserved Instances
  • Spot Instances

• Data Persistence Models
• Amazon Elastic Block Storage (EBS)
• Amazon Machine Image (AMI)

• • S3 AMI
  • EBS AMI

• EC2 Security Model

• • Security Credentials
    • Signon Credentials
    • Key pairs
    • X.509 certificate
    • Access keys
  • EC2 Security Groups

• Instance addressing
• Generating Custom AMIs
• Working with EC2 Console
• Monitoring Instances with Amazon CloudWatch
• Amazon Elastic IP

Hands-on: Hosting an Application on EC2

• Architecture of CloudWatch
• APIs and Use Cases
• Canned metrics
• Custom metrics

• Core advantages of EBS
• Starting an EBS database instance
• Starting read-replica of database
• High fault tolerant multi AZ deployment

Hands-on: Deploying and scaling and application using RDS

• Fundamentals of a Load Balancer
• Starting a load balancer instance
• Sticky sessions
• SSL termination on ELB

Hands-on: Scaling the Application using Amazon ELB

• Understanding auto-scaling
• Auto-scaling Fundamentals
• Setting up auto-scaling rules

Hands-on: Deploying an auto-scaling app on the cloud using auto-scaling, EC2, RDS, ELB

• Deep Dive into AWS networking infrastructure
• VPC Networking Fundamentals
• Private and Public Subnets

• • Allocation of IP Addresses
  • CIDR Notation

• Elastic Network Interface (ENI)
• Routing inside VPC

• • Network Address Translation (NAT)
  • Internet Gateways
  • Configuring Routes

• VPN tunnels to VPC

Hands-on: Hosting secure applications using public and private subnets

• Understanding IAM
• Groups and Users
• Application “Roles” in IAM
• Access Policies
• Federated Authentication on IAM

Hands-on: Generating groups, users, access policies and control

• Deep Dive on DNS Architecture
• Using Route53 for your Domain Name
• Creating Name Server Entries
• Setting up Health Checks
• Configuring for Multi-Location application

• • Master – Slave Configuration
  • Master – Master Configuration
  • Weighted Round Robin
  • Geo-location Aware Routing

Hands-on: Moving an existing domain name to Route53 and configuring multi-location Routing

• Infrastructure as Code
• Understanding the Cloud Formation template sub-sections
• Generating template for our Infrastructure
• Deploying using Cloud Formation

Hands-on: Generating and Deploying Cloud Formation Templates

• CDN Fundamentals
• Using CloudFront for Public Data
• Using CloudFront for Access Controlled Data

Hands-on: Setup CloudFront CDN for an Application

• What is DynamoDB
• DynamoDB supported Platforms
• DynamoDB Concepts
• Types of Indexing