Amazon Web Services (AWS) - Certified Solutions Architect Associate and Professional

Lehrplan

In der Schulung für die AWS Certified Solutions Architect - Associate und Professional Zertifizierungen lernen Sie folgende Inhalte:

Certified Solutions Architect - Associate

Domain 1.0: Designing highly available, cost efficient, fault tolerant, scalable systems

Identify and recognise cloud architecture considerations, such as fundamental components and effective designs.

Content may include:

• How to design cloud services
• Planning and design
• Monitoring

You'll become familiar with:

• Best practices
• Developing to Client Specifications including pricing/cost (e.g., on Demand vs. Reserved vs. Spot, RTO and RPO DR Design)
• Architectural trade-off decisions (high availability vs. cost, Amazon Relational Database Service (RDS) vs. installing your own database on Amazon Elastic Compute Cloud (EC2))
• Integrating with existing development environments and building scalable architecture
• Elasticity and scalability

Domain 2.0: Implementation/Deployment

Identify the appropriate techniques and methods using Amazon EC2, Amazon S3, Elastic Beanstalk, CloudFormation, Amazon Virtual Private Cloud (VPC), and AWS Identity and Access Management (IAM) to code and implement a cloud solution.

Content may include:

• Configure an Amazon Machine Image (AMI)
• Operate and extend service management in the private cloud
• Configure compliance in the private and public cloud
• Launching instances in a variety of geographical regions

Domain 3.0: Data Security

Recognise and implement secure procedures for optimum cloud deployment and maintenance.

Content may include:

• Cloud Security Best Practices
• How to build and use a threat model
• How to build and use a data flow diagram for risk management
• Use cases
• Abuse Cases (Negative use cases)
• Security Architecture with AWS
• Shared Security Responsibility Model
• AWS Platform Compliance
• AWS security attributes (customer workloads down to physical layer)
• Security Services
• AWS Identity and Access Management (IAM)
• Amazon Virtual Private Cloud (VPC)
• CIA and AAA models, ingress vs. egress filtering, and which AWS services and features fit
• "Core" Amazon EC2 and S3 security feature sets
• Incorporating common conventional security products (Firewall, IDS:HIDS/NIDS, SIEM, VPN)
• Design Patterns
• DDOS mitigation
• Encryption solutions
• Complex access controls (building sophisticated security groups, ACLs, etc.)
• Amazon CloudWatch for the security architect

Recognise critical disaster recovery techniques and their implementation.

Content may include:

• Disaster Recovery
• Recovery time objective
• Recovery point objective
• Amazon Elastic Block Store
• AWS Import/Export
• AWS Storage Gateway
• Amazon Route53
• Testing the recovered data

4 Domain 4.0: Troubleshooting

Content may include:

• General troubleshooting information and questions

Certified Solutions Architect - Professional

Domain 1.0: High Availability and Business Continuity

• Demonstrate ability to architect the appropriate level of availability based on stakeholder requirements
• Demonstrate ability to implement DR for systems based on RPO and RTO
• Determine appropriate use of multi-Availability Zones vs. multi-Region architectures
• Demonstrate ability to implement self-healing capabilities

Content may include the following:

• High Availability vs. Fault Tolerance

Domain 2.0: Costing

• Demonstrate ability to make architectural decisions that minimise and optimise infrastructure cost
• Apply the appropriate AWS account and billing set-up options based on scenario
• Ability to compare and contrast the cost implications of different architectures

Domain 3.0: Deployment Management

• Ability to manage the lifecycle of an application on AWS
• Demonstrate ability to implement the right architecture for development, testing, and staging environments
• Position and select most appropriate AWS deployment mechanism based on scenario

Domain 4.0: Network Design for a complex large scale deployment

• Demonstrate ability to design and implement networking features of AWS
• Demonstrate ability to design and implement connectivity features of AWS

Domain 5.0: Data Storage for a complex large scale deployment

• Demonstrate ability to make architectural trade off decisions involving storage options
• Demonstrate ability to make architectural trade off decisions involving database options
• Demonstrate ability to implement the most appropriate data storage architecture
• Determine use of synchronous versus asynchronous replication

Domain 6.0: Security

• Design information security management systems and compliance controls
• Design security controls with the AWS shared responsibility model and global infrastructure
• Design identity and access management controls
• Design protection of Data at Rest controls
• Design protection of Data in Flight and Network Perimeter controls

Domain 7.0: Scalability and Elasticity

• Demonstrate the ability to design a loosely coupled system
• Demonstrate ability to implement the most appropriate front-end scaling architecture
• Demonstrate ability to implement the most appropriate middle-tier scaling architecture
• Demonstrate ability to implement the most appropriate data storage scaling architecture
• Determine trade-offs between vertical and horizontal scaling

Domain 8.0: Cloud Migration and Hybrid Architecture

• Plan and execute for applications migrations
• Demonstrate ability to design hybrid cloud architectures