|
|
AWS Certified Solutions Architect - Associate (Amazon Cloud AWS SAA) 國際認可證書課程
課程簡稱：Amazon Cloud AWS SAA Training Course
十月開課的 AWS Certified Solutions Architect - Associate (Amazon Cloud AWS SAA) 國際認可證書課程 (FQ1031CM) 會教授新 Syllabus (SAA-C03) 內容。
|
|
課程優惠！現凡同時報讀以下三個課程：
即減 $1,350！報讀其中兩個即減 $900！
|
傳統服務：課程上堂時間表 (地點：旺角 總費用：$5,980) 學員使用電話或本網頁報名，待本中心確認已為學員留位後，即可使用  繳付學費，過程簡便！
|
超震撼： |
凡於 2022年 9月 30日 (五) 或之前報讀本課程，
原價 $7,475，現只需
$5,980！ |
|
* 各政府部門可使用 P Card 付款
如使用 P Card 繳付考試費，考試費需另加 1.3% 附加費
*** 質素保證：
免費於任何地點試睇首 3 小時課堂錄影，從而可預先了解導師及教材的質素，才報讀課程來上堂。***
請致電與本中心職員預約。
查看各地點電話
| 旺角 |
2332-6544 |
| 觀塘 |
3563-8425 |
| 北角 |
3580-1893 |
| 沙田 |
2151-9360 |
| 屯門 |
3523-1560 |
| 免費補堂： |
學員可於任何地點補看課堂錄影，從而可銜接往後的課堂！ |
| 免費重讀： |
學員可於課程結束後三個月內於任何地點不限次數地重看課堂錄影，從而可反覆重溫整個課程！ |
| 課時： |
30 小時 |
| 課堂導師： |
Franco (任教課程清單) |
傳統服務的免費補堂或免費重讀，若選擇旺角或觀塘的閒日星期一至四，便需於 6:30p.m. 或之前完成觀看課堂錄影。
|
注意！ 客戶必須查問報讀學校的教育局註冊編號，以確認該校為註冊學校，以免蒙受不必要的損失！
|
雲端運算 (Cloud Computing) 提供一種簡單的方式，透過互聯網、VPN (Virtual Private Network) 等的方式存取雲端伺服器、儲存、資料庫和各種應用程式服務。它有以下的好處：
現時有不少公司提供雲端運算 (Cloud Computing) 服務，Amazon Web Service (AWS) 被 Gartner* 評為全球第一的 Cloud Infrastructure as a Service。
“Magic Quadrant for Cloud Infrastructure and Platform Services”
Source: https://aws.amazon.com/resources/analyst-reports/gartner-mq-cips-2021/
* Gartner 是知名的信息技術研究和顧問的美國上市公司。
為了你有知識和能力使用 AWS 技術以構建和部署安全可靠的服務，AWS 便推出 AWS Certified Solutions Architect – Associate 國際認可證書。本中心的 AWS Certified Solutions Architect – Associate 國際認可證書課程由 Franco Tsang 籌備多時，精心編排。由上堂、溫習、考試研習、做試題至最後考試，均為你度身訂造，作出有系統的編排。務求真正教識你，又令你考試及格。
以下是本課程內容簡介：
1. Public cloud computing overview
2. Regions and Availability Zones
3. Amazon Elastic Compute Cloud (Amazon EC2)
4. AWS Command Line Interface (AWS CLI)
5. Amazon Elastic Block Store (Amazon EBS)
6. Amazon CloudWatch and Amazon Simple Notification Service (Amazon SNS)
7. Virtual Private Cloud (VPC) [with Elastic IP (EIP), Elastic Network Interface (ENI), Network Address Translation (NAT) and Virtual Private Network (VPN)]
8. Elastic Load Balancing (ELB) 和 Auto Scaling
9. Simple Storage Service (S3), Glacier / S3 Glacier and Storage Gateway
10. RDS, DynamoDB and ElastiCache Service
11. Route 53
12. CloudFront
13. Simple Queue Service (SQS), Lambda and API Gateway
14. Identity and Access Management (IAM)
15. AWS Certified Solutions Architect – Associate Examination
16. Appendix |
 |
本課程緊貼時代需要，相關的概念 / 內容 / 產品能被應用到不同的情景中，例如：
|
| 課程名稱： |
AWS Certified Solutions Architect - Associate (Amazon Cloud AWS SAA) 國際認可證書課程
- 簡稱：Amazon Cloud AWS SAA Training Course |
| 課程時數： |
課堂 24 小時 (共 8 堂) |
| 適合人士： |
對雲端運算 (Cloud Computing) 技術有興趣的人士 |
| 授課語言： |
以廣東話為主，輔以英語 |
| 課程筆記： |
本中心導師親自編寫英文為主筆記，而部份英文字附有中文對照。 |
| 提供模擬考試題目： |
本中心為學員提供模擬考試題目，每條考試題目均附有標準答案。 |
|
只要你於下列科目取得合格成績，便可獲 AWS 頒發 AWS Certified Solutions Architect - Associate 國際認可證書：
| 考試名稱 |
| AWS Certified Solutions Architect - Associate |
|
| 本中心為 PSI 指定的 AWS Certified Solutions Architect - Associate 考試試場，導師會在課堂上講解考試程序。考試費為 USD $150。
|
課程名稱：AWS Certified Solutions Architect - Associate (Amazon Cloud AWS SAA) 國際認可證書課程
- 簡稱：Amazon Cloud AWS SAA Training Course |
儘管 AWS Certified Solutions Architect – Associate 考試理論色彩比較濃厚，但導師仍然會以示範為主導的方式教授這課程，令同學可以實在一點學習 / 享受 AWS 技術。
- 第 1 部份：背景知識，例如 Regions and Availability Zones 等。
- 第 2 部份：EC2 (Elastic Compute Cloud) 和 EBS (Elastic Block Store) 。本章節主要教授如何操作 EC2 instances (可以粗略地理解為 Virtual Machines) 及 EBS (可以粗略地理解為 instance 的 hard disk) ，而在課堂上會有準確的解釋。
- 新增 EC2 instances (Linux 和 Windows Server) 並了解其相關的知識，例如 AMI、Instance Types、User data (示範使用如何 Shell Scripting 及 PowerShell)、Storage、Tags、Security Groups、Key Pairs、接駁 instances 等概念
- 改變 EC2 instances 的 instance types (示範由少 RAM 的 instance types 變為多 RAM 的 instance types)
- 了解 On-demand、Reserved Instances、Dedicated Hosts、Spot Instances 的特點 (教授如何以節省 90% 的費用使用 EC2)
- Instance Store、Encrypted / Unencrypted volumes (示範新增 Encrypted EBS 及擴大 EBS 的容量，例如 1G → 2G)
- 第 3 部份：CloudWatch 和 SNS (Simple Notification Service)。本章節主要教授如何監控 Cloud Infrastructure。
- 新增 SNS topics 和 subscriptions
- CloudWatch Alarm (示範如何建立 CloudWatch Alarm，如果 CPU Utilization 過高就 send email 給 Franco)。
- CloudWatch Metric (示範如何操作 CloudWatch Metric)。
- CloudWatch Log (示範如何操作 CloudWatch Log) 。
- 預設 CloudWatch 不能監察 Instance 的 memory，究竟如何監察 Instance 的 memory? 導師會在課堂上教授監察 Instance memory 的技巧。
- 第 4 部份：VPC (Virtual Private Cloud) 和VPN。本章節主要教授如何設定 Cloud networking 及架設 VPN (virtual private network) + BGP (Border Gateway Protocol) 以進行連接 “天和地 (AWS VPC 及 企業內部網絡)” 。
- VPC、NACL 及 Security Groups (示範如何建立 VPC) 。
- Public Subnets 、Internet gateway 及 public route table (示範如何建立 Public Subnet) 。
- Private Subnets 、NAT gateway 及 private route table (示範如何建立 Private Subnet) 。
- Flow log (示範如何取得 Flow log) 。
- 架設 VPN 以將企業內部網絡接駁到 AWS VPC 內 (示範以 Cisco router架設 VPN 到 AWS)。
- 第 5 部份：ELB (Elastic Load Balancing) 和 Auto Scaling。本章節主要教授 AWS 的負載平衡和動態擴展縮減方案 。
- Elastic Load Balancing 概念
- Application Load Balancing (示範如何實踐 Application Load Balancing with path listener)
 
- Manual Scaling (示範 Manual Scaling 由 2 個 instances 擴展到 3 個 instances)
- Auto Scaling (示範如果 CPU Utilization 過高，就會由 2 個 instances 擴展至 CPU Utilization 下降到一個理想的水平)
- 第 6 部份：S3、Glacier 和 Storage Gateway。本章節主要教授 AWS 的儲存方案 。
- S3 bucket (示範新增 S3 bucket 以儲存檔案)
- S3 versioning (示範在 S3 內實踐版本控制)
- S3 web host 並了解其限制 (使用 S3 以寄存網頁)
- 導師會在課堂教授一種有趣的技術令大家 “在地” 的 Windows 或 Linux 有 “7.99 EB” 的儲存空間。其實真實的儲存空間是不是 7.99 EB 呢？導師在課堂再詳談當中的故事。
- 第 7 部份：RDS (Relational Database Service) 、Dynamo DB 和 ElastiCache。本章節主要教授 AWS 的 database 及 caching 方案。
- 在EC2內安裝 database 還是使用 RDS?
- 新增 RDS (示範新增 Multi-AZ RDS (writer and reader))
- DB Snapshot 及其作用 (示範建立及使用 DB Snapshot)
- DynamoDB 的特色及其操作 (示範建立及使用 DynamoDB)
- ElastiCache 的特色及其操作 (示範建立及使用 ElastiCache: Redis)
- 第 8 部份：Route 53。本章節主要教授 AWS 的 DNS 方案。
- 在 Route 53 內使用現有的 domains (無需在 AWS 內購買 domains)
- Hosted Zones (示範建立 Hosted Zones以開始管理 domains)
- 示範按比例進行 DNS name resolution
- 示範按地區進行 DNS name resolution
- 示範按 latency 進行 DNS name resolution
- 示範按 failover (示範 failover policy)
- 其他理論性質的知識及細項技術，例如 Record Types 等
- 第 9 部份：CloudFront。本章節主要教授 AWS 的 CDN (Content Delivery Network) 方案。
- 教授CDN (Content Delivery Network) 的技術概念，甚麼場合適合使用 CDN
- 教授使用 Origin Access Identity (OAI) 進行存取控制 (Access Control)
- 第 10 部份：SQS (Simple Queue Service) 、API Gateway 和 Lambda。本章節主要教授 AWS message queue、應用程式後端服務及無伺服器應用程式方案。
- 教授 message queue、應用程式後端服務及無伺服器應用程式的技術概念，甚麼場合適合使用它們
- 示範使用 SQS
- 示範以 Node.js 作為程式語言使用 Lambda
- 第 11 部份：IAM (Identity and Access Management) 。本章節主要教授如何安全地管理對 AWS 服務和資源的存取。
- 示範 MFA (Multi-Factor Authentication)
- 新增 Policy 並限制某些用戶不能 stop production 的 instances。
- 第 12 部份：Miscellaneous 。本章節主要教授其他 AWS 的概念和技術，例如 DataSync、CloudTrail、Athena、WAF、Secrets Manager、Inspector、Macie、GuardDuty 等
The course content above may change at any time without notice in order to better reflect the content of the examination.
|
1 Regions and Availability Zones (AZ)
1.1 Regions
1.2 Availability Zones (AZ)
1.3 Local Zone
2 Amazon Elastic Compute Cloud (Amazon EC2)
2.1 Introduction to Amazon EC2
2.2 Amazon Machine Images (AMI)
2.2.1 AWS Marketplace
2.3 Instance store (Ephemeral) vs Amazon Elastic Block Store (Amazon EBS)
2.3.1 Instance store (Ephemeral)
2.3.2 Amazon Elastic Block Store (Amazon EBS)
2.4 Instance types
2.4.1 T2 / T3
2.4.1.1 CPU Credits and Baseline Performance
2.4.1.1.1 One CPU credit (Spending CPU Credits)
2.4.1.1.2 Earning CPU Credits
2.4.1.1.3 CPU Credits Monitoring
2.5 On-Demand Instances, Reserved Instances (RI) and Spot Instances
2.5.1 On-Demand instances
2.5.2 Reserved instances (RI)
2.5.3 Spot instances
2.5.4 Dedicated hosts and dedicated instances
2.5.4.1 Dedicated hosts
2.5.4.2 Dedicated instances
2.5.4.3 Compare dedicated hosts and dedicated instances
2.6 Network and Security
2.6.1 Network
2.6.1.1 Network speed and placement group
2.6.1.2 IP addresses
2.6.1.2.1 Elastic IP addresses (EIP)
2.6.2 Security
2.6.2.1 Key Pairs
2.6.2.2 Security Groups
2.6.2.2.1 Rules of Security Groups
2.7 Pricing
2.7.1 “Charging items”
2.8 Demonstration: Launch and connect to a Linux instance
2.8.1 Demonstration: Name and tags
2.8.2 Demonstration: Choose AMI (Amazon Machine Image)
2.8.3 Demonstration: Choose instance types
2.8.4 Demonstration: Create Key pair
2.8.5 Demonstration: Convert private key from pem to ppk (Optional)
2.8.6 Demonstration: Network settings and Security Group
2.8.7 Demonstration: Configure Storage
2.8.8 Demonstration: Advanced details / user data
2.8.9 Demonstration: Launch instance
2.8.10 Demonstration: Connect to a Linux instance (CLI) via EC2 Instance Connect
2.8.11 Demonstration: Connect to a Linux instance (CLI) via PuTTY
2.8.12 Demonstration: Connect to a Linux instance (File transfer)
2.8.13 Demonstration: “user-data” verification
2.9 Instance metadata
2.9.1 Demonstration: Instance metadata (General)
2.9.2 Demonstration: Instance metadata (local-ipv4)
2.9.3 Demonstration: Instance metadata (public-ipv4)
2.10 Demonstration: Stop, change instance type and start an instance
2.10.1 Demonstration: Stop an instance
2.10.2 Change instance type and start an instance
2.11 Demonstration: Screenshot and system log (console output)
2.11.1 Demonstration: Screenshot
2.11.2 Demonstration: System log
2.12 Launch more like this
2.12.1 Demonstration: Launch more like this
2.13 Terminate an instance
2.13.1 Demonstration: Terminate an instance
2.14 Custom AMIs (Amazon Machine Images)
2.14.1 Demonstration: Create a custom AMI (Amazon Machine Images)
2.14.2 Demonstration: Create an instance based on a custom AMI
2.14.3 Demonstration: Deregister an AMI
2.15 Demonstration: Windows instances (Windows Server)
2.16 Demonstration: From ppk to pem
2.17 Demonstration: Decrypt the password and connect to EC2 Windows instance
2.18 Spot instances
2.18.1 Demonstration: Create a spot instance
2.18.2 Demonstration: Terminate a spot instance
3 AWS Command Line Interface (AWS CLI)
3.1 Install AWS CLI
3.1.1 Demonstration: Install AWS CLI in Windows
3.2 Access key ID and Secret access key
3.2.1 Demonstration: Generate Access key ID and Secret access key
3.3 Using AWS CLI
3.3.1 Demonstration: “Login” to AWS CLI and list out all regions
3.3.2 Demonstration: JSON format vs table format
4 Amazon Elastic Block Store (Amazon EBS)
4.1 Introduction to Amazon EBS
4.2 Volume types (io1, io2, io2 Block Express, gp2, gp3, st1 and sc1)
4.3 Snapshot
4.4 Encryption
4.5 Amazon EBS–optimized instances
4.6 Demonstration: “View” Instance store (Ephemeral)
4.7 Demonstration: Create EBS volumes
4.8 Demonstration: Attach EBS volumes
4.9 Demonstration: Use the newly created EBS volumes
4.10 Demonstration: Resize the volumes
4.11 Demonstration: Creating snapshot from volume
4.12 Demonstration: Exploring “copy snapshot”
4.13 Demonstration: Detach and delete volumes, snapshots and EC2 instances
5 Amazon CloudWatch and Amazon Simple Notification Service (Amazon SNS)
5.1 Amazon CloudWatch
5.1.1 Introduction to CloudWatch
5.1.2 Metrics
5.1.2.1 Basic and Detailed Monitoring
5.1.2.1.1 Basic Monitoring
5.1.2.1.2 Detailed Monitoring
5.1.2.2 Custom Metrics
5.1.3 Logs
5.1.4 Alarms
5.1.5 CloudWatch Events / Amazon EventBridge
5.2 Amazon Simple Notification Service (SNS)
5.2.1 Introduction to SNS
5.2.2 Characteristics of SNS
5.3 Demonstration: CloudWatch in EC2 instances and SNS
5.3.1 Demonstration: Create a SNS topic and subscription
5.3.2 Demonstration: Basic Monitoring of EC2 instances
5.3.3 Demonstration: Alarms of EC2 instances
5.3.4 Demonstration: Delete alarms, SNS topics and SNS subscriptions.
5.3.5 Demonstration: Detailed Monitoring
5.3.6 Monitor EC2 instances’ memory (Custom metrics) with EC2 instance profile
5.3.6.1 Background of EC2 instance profile
5.3.6.2 Background of EC2 memory monitoring
5.3.6.3 Demonstration: Monitor EC2 instances’ memory (Custom metrics) with EC2 instance profiles (IAM roles)
5.3.6.3.1 Demonstration: Create an IAM role
5.3.6.3.2 Demonstration: Create an EC2 instance with instance profiles (IAM roles)
5.3.6.3.3 Demonstration: Install CloudWatch Agent
5.3.6.3.4 Demonstration: Generate the CloudWatch configuration file
5.3.6.3.5 Demonstration: Monitor EC2 instances’ memory (Custom metrics)
5.3.6.3.6 Demonstration: Delete EC2 instances, IAM roles and its relevant inline policies
6 Virtual Private Cloud (VPC) [with Elastic IP (EIP), Elastic Network Interface (ENI), Network Address Translation (NAT) and Virtual Private Network (VPN)]
6.1 Introduction to Virtual Private Cloud (VPC)
6.2 Pricing
6.3 Create VPC, Edit DNS Resolution and Edit DNS Hostnames
6.3.1 Demonstration: Exploring VPC Wizards
6.3.2 Demonstration: Create VPC, Edit DNS Resolution and Edit DNS Hostnames
6.4 Security Groups in a VPC
6.4.1 Demonstration: Security Groups in a VPC
6.5 Network Access Control Lists (NACLs)
6.5.1 Introduction to Network Access Control Lists (NACLs)
6.5.2 Demonstration: Network Access Control Lists (NACLs)
6.6 Subnets and Routing
6.6.1 Introduction to subnet concepts
6.6.1.1 Subnets
6.6.1.2 Public subnets
6.6.1.3 Private subnets
6.6.2 Introduction to routing concepts in VPC
6.6.2.1 Route tables
6.6.2.2 Main route tables / Default route table
6.6.3 Demonstration: Public Subnets
6.6.3.1 Demonstration: Create an internet gateway and attach to a VPC
6.6.3.2 Demonstration: Create a subnet
6.6.3.3 Demonstration: Create a route table and associate to a public subnet (internet gateway, igw)
6.6.3.4 Demonstration: Create an EC2 instance in a public subnet
6.6.4 Demonstration: Private Subnets
6.6.4.1 Demonstration: Create a subnet
6.6.4.2 Demonstration: Create an EC2 instance with a custom ENI (Elastic Network Interface) with private IP
6.6.4.2.1 Demonstration: Create a custom ENI (Elastic Network Interface) with private IP
6.6.4.2.2 Demonstration: Create an EC2 instance with a custom ENI (Elastic Network Interface)
6.6.4.3 Demonstration: Connect to private subnet instance from public subnet instance
6.6.4.4 Demonstration: NAT gateway (ngw), route tables and Elastic IP (EIP)
6.6.4.4.1 Demonstration: Allocate an Elastic IP (EIP)
6.6.4.4.2 Demonstration: Create a NAT gateway (ngw)
6.6.4.4.3 Demonstration: Prepare a route table and use NAT gateway (ngw)
6.6.4.4.4 Demonstration: Delete NAT gateway (ngw) and release Elastic IP (EIP)
6.7 VPC Flow Logs
6.7.1 Demonstration: VPC Flow Logs
6.7.1.1 Demonstration: Create CloudWatch log group
6.7.1.2 Demonstration: Create IAM Role with “assume role” concepts
6.7.1.3 Demonstration: Create VPC flow log
6.7.2 Demonstration: Delete VPC Flow Logs, IAM role and Log Group
6.7.2.1 Demonstration: Delete VPC Flow Logs
6.7.2.2 Demonstration: Delete IAM role
6.7.2.3 Demonstration: Delete Log Group
6.8 Virtual Private Network (VPN) and Border Gateway Protocol (BGP)
6.8.1 Introduction to Virtual Private Network (VPN)
6.8.2 Introduction to Border Gateway Protocol (BGP)
6.8.3 Demonstration: Connect on-premise infrastructure to AWS VPC
6.8.3.1 Demonstration: Prepare a customer gateway (Cisco Routers)
6.8.3.2 Demonstration: Create Customer Gateway in VPC (cgw)
6.8.3.3 Demonstration: Create Virtual Private Gateway (vgw) and attach Virtual Private Gateway to a VPC
6.8.3.4 Demonstration: Create a VPN connection in VPC
6.8.3.5 Demonstration: Create a VPN connection and configure BGP in Cisco Router
6.8.3.6 Demonstration: Configure BGP route propagation in VPC
6.8.3.7 Demonstration: Delete VPN Connection, Virtual Private Gateway (vgw), Customer Gateway (cgw)
6.8.3.7.1 Demonstration: Delete VPN Connection
6.8.3.7.2 Demonstration: Delete Virtual Private Gateway (vgw)
6.8.3.7.3 Demonstration: Delete Customer Gateway (cgw)
6.9 Demonstration: Delete VPC
7 Elastic Load Balancing (ELB) 和 Auto Scaling
7.1 Elastic Load Balancing (ELB)
7.1.1 Introduction to Elastic Load Balancing (ELB)
7.1.2 Classic Load Balancer, Network Load Balancer, Application Load Balancer and Gateway Load Balancer
7.1.2.1 Application Load Balancer
7.1.2.2 Network Load Balancer
7.1.2.3 Gateway Load Balancer
7.1.2.4 Comparison of different types of load balancers
7.2 Pricing
7.2.1 Application Load Balancer
7.2.2 Network Load Balancer
7.2.3 Gateway Load Balancer
7.3 Demonstration: Application Load Balancer with path listeners
7.3.1 Demonstration: Design
7.3.2 Demonstration: Two instances in two availability zones
7.3.2.1 Demonstration: Create an instance in availability zone “a”
7.3.2.2 Demonstration: Create an instance in availability zone “b”
7.3.3 Demonstration: Create Target Groups to “group” instances
7.3.3.1 Demonstration: Create Target Groups for availability zone “a”
7.3.3.2 Demonstration: Create Target Groups for availability zone “b”
7.3.3.3 Demonstration: Create Target Groups for availability zone “a” and “b”
7.3.4 Demonstration: Create an Application Load Balancer
7.3.5 Demonstration: Adjust path listener’s rules
7.3.6 Demonstration: Verify Application Load Balancer and path listener’s rules
7.3.7 Demonstration: If one target group “a” is down
7.3.8 Attach TLS / SSL Certificate in Elastic Load Balancer (ELB)
7.3.8.1 AWS Certificate Manager (ACM)
7.3.8.2 Attach to Elastic Load Balancer (ELB)
7.3.9 Demonstration: Delete Application Load Balancer
7.3.9.1 Demonstration: Delete Application Load Balancer
7.3.9.2 Demonstration: Target groups
7.3.9.3 Demonstration: Delete instances
7.4 More about target group’s attributes
7.4.1.1 Load balancing algorithm
7.4.1.2 Stickiness
7.4.1.3 Slow start duration
7.4.1.4 Deregistration delay
7.5 Auto Scaling
7.5.1 Introduction to Auto Scaling
7.5.2 Features provided by Auto Scaling
7.5.3 Launch Template
7.5.4 Auto Scaling Groups (Minimum, Maximum and Desired capacity)
7.5.5 Pricing
7.5.6 Demonstration: Auto Scaling (Manual)
7.5.6.1 Demonstration: Create an SNS notification (optional)
7.5.6.2 Demonstration: Create a Target Group
7.5.6.3 Demonstration: Create an Application Load Balancer
7.5.6.4 Demonstration: Create a Launch Template
7.5.6.5 Demonstration: Create an Auto Scaling Group
7.5.6.6 Demonstration: Exploring Scheduled Actions
7.5.6.7 Demonstration: Manual Scale Out
7.5.6.8 Demonstration: Manual Scale in to minimum capacity
7.5.6.9 Demonstration: Delete Auto Scaling (Manual)
7.5.6.9.1 Demonstration: Delete Auto Scaling Group
7.5.6.9.2 Demonstration: Delete Launch Template
7.5.6.9.3 Demonstration: Delete Application Load Balancer and target group
7.5.7 Demonstration: Auto Scaling (Based on CPU Utilization)
7.5.7.1 Demonstration: Create a Target Group
7.5.7.2 Demonstration: Create an Application Load Balancer
7.5.7.3 Demonstration: Create a Launch Template
7.5.7.4 Demonstration: Create an Auto Scaling Group
7.5.7.5 Demonstration: Adjusting Scaling Policy
7.5.7.6 Demonstration: Scaling out when CPU Utilization is high
7.5.7.7 Demonstration: Delete Auto Scaling (Based on CPU Utilization)
8 Simple Storage Service (S3), Glacier / S3 Glacier and Storage Gateway
8.1 Simple Storage Service (S3)
8.1.1 Introduction to S3
8.1.2 “Size” of S3
8.1.2.1 Multipart Upload
8.1.3 S3 Transfer Acceleration
8.1.4 Storage classes and pricing
8.1.5 Event Notification
8.1.6 Object Lock
8.1.7 Protecting Data Using Encryption
8.1.7.1 Server-side
8.1.7.1.1 SSE-S3 (Server-Side Encryption with Amazon S3-Managed Keys)
8.1.7.1.2 SSE-KMS (Server-Side Encryption with AWS KMS-Managed Keys)
8.1.7.1.3 SSE-C (Server-Side Encryption with Customer-Provided Keys)
8.1.7.2 Client-side
8.1.8 Versioning
8.1.9 Lifecycle Management
8.1.10 S3 Select
8.1.11 Replication
8.1.11.1 Cross-Region Replication (CRR)
8.1.11.2 Same-Region Replication (SRR)
8.1.12 Requester Pays
8.1.13 Access Points
8.1.14 Demonstration: S3 bucket and its operations
8.1.14.1 Demonstration: Create a S3 bucket
8.1.14.2 Demonstration: Upload a file to S3
8.1.14.3 Demonstration: Explore a file’s properties
8.1.14.4 Demonstration: Download a file from S3
8.1.14.5 Demonstration: Exploring lifecycle rules
8.1.15 Demonstration: Versioning
8.1.16 Demonstration: Making “Public”
8.1.17 Demonstration: Delete a bucket
8.1.18 Hosting static website / contents
8.1.18.1 Demonstration: Hosting static website
8.1.19 Miscellaneous topics in Amazon S3 (MFA delete and pre-signed URL)
8.2 Storage Gateway
8.2.1 Introduction to Storage Gateway
8.2.2 Storage interfaces
8.2.2.1 Amazon S3 File gateway
8.2.2.2 Amazon FSx File Gateway
8.2.2.3 Volume gateway
8.2.2.4 Tape gateway
8.2.3 Storage Gateway Virtual Machine (VM) and Local cache
8.2.3.1 Storage Gateway Virtual Machine (VM)
8.2.3.1.1 Hardware and storage requirements
8.2.3.1.1.1 Storage requirements
8.2.3.2 The role of local cache
8.2.4 Demonstration: Storage File Gateway
8.2.4.1 Demonstration: NFS client
8.2.4.2 Demonstration: Create a S3 bucket
8.2.4.3 Demonstration: Creating Storage Gateway through EC2 instances
8.2.4.4 Demonstration: Connect and activate the gateway
8.2.4.5 Demonstration: CloudWatch for storage gateway
8.2.4.6 Demonstration: Create file share
8.2.4.7 Demonstration: Connect to the file share
8.2.4.8 Demonstration: Refresh file share cache
8.2.4.9 Demonstration: Delete the whole setup
8.2.4.9.1 Demonstration: Delete “shared drive”
8.2.4.9.2 Demonstration: Delete file share
8.2.4.9.3 Demonstration: Delete storage gateway
8.2.4.9.4 Demonstration: Delete EC2 instances
8.2.4.9.5 Demonstration: Delete S3 bucket
8.3 Amazon Elastic File System (EFS)
8.4 Amazon FSx file systems
8.4.1 Amazon FSx for Windows File Server
8.4.2 Amazon FSx for Lustre
9 Relational Database Service (RDS), DynamoDB and ElastiCache Service
9.1 Relational Database Service (RDS)
9.1.1 Overview of data organization and Relational Database Service (RDS)
9.1.2 Introduction to Relational Database Service (RDS)
9.1.3 Amazon Aurora
9.1.4 Auto Backup / Snapshots
9.1.5 Multi-AZ Deployments and Read Replicas
9.1.5.1 Multi-AZ Deployments
9.1.5.2 Read Replicas
9.1.6 Demonstration: Lab Topology
9.1.7 Demonstration: Preparations
9.1.7.1 Demonstration: MySQL clients
9.1.7.2 Demonstration: Security groups
9.1.7.3 Demonstration: Subnet groups
9.1.8 Demonstration: RDS instances (Aurora, Multi-AZ, Read Replica)
9.1.8.1 Demonstration: Create the RDS cluster and instances
9.1.8.2 Demonstration: Connect RDS cluster / endpoints
9.1.9 Demonstration: Read Replica / Reader
9.1.9.1 Demonstration: Connect to the read replica
9.1.9.2 Demonstration: Create more Read Replicas / Readers
9.1.10 Demonstration: Snapshots
9.1.10.1 Demonstration: Create Snapshots
9.1.11 Demonstration: Delete RDS components
9.1.11.1 Demonstration: Delete Read Replica / Reader instances
9.1.11.2 Demonstration: Delete Master / Writer instances
9.1.11.3 Demonstration: Delete Snapshots
9.1.12 Aurora Auto Scaling
9.1.13 Aurora Serverless
9.1.14 Aurora global database
9.1.15 RDS Proxy
9.2 DynamoDB
9.2.1 Introduction to DynamoDB
9.2.2 Data model of DynamoDB
9.2.2.1 Tables
9.2.2.2 Items
9.2.3 Consistency models of DynamoDB
9.2.3.1 Eventually consistent
9.2.3.2 Strongly consistent
9.2.4 Read/Write Capacity Mode
9.2.4.1 On-Demand Mode
9.2.4.2 Provisioned Mode
9.2.4.3 Read Capacity Units (RCUs) and Write Capacity Units (WCUs)
9.2.5 DynamoDB Accelerator (DAX)
9.2.6 Table classes
9.2.7 Demonstration: DynamoDB
9.2.7.1 Demonstration: Create a DynamoDB table
9.2.7.2 Demonstration: Create DynamoDB items
9.2.7.3 Demonstration: Delete DynamoDB tables
9.3 ElastiCache
9.3.1 Introduction to ElastiCache
9.3.2 Redis vs Memcached
9.3.3 In-memory data store
9.3.4 Demonstration: ElastiCache Service with Redis
9.3.4.1 Demonstration: Redis clients (EC2)
9.3.4.2 Demonstration: Security groups
9.3.4.3 Demonstration: Create a Redis node
9.3.4.4 Demonstration: Connect to a Redis node and subnet group
9.3.4.5 Demonstration: Delete the Redis node
9.3.4.6 Demonstration: Delete the Redis client (EC2)
10 Route 53
10.1 Introduction to Route 53
10.2 Hosted Zone
10.3 DNS record types
10.3.1 “Standard” record types
10.3.2 “Alias” records
10.4 Time to reflect changes
10.5 DNS query logging
10.6 Health Checks & DNS Failover
10.6.1 Health Checks
10.6.2 DNS Failover
10.7 Route 53 Resolver
10.8 Demonstration: “Integrate” public hosted zone to registered domains
10.9 Routing Policies
10.10 Demonstration: Routing Policies
10.10.1 Demonstration: Routing Policy (Simple)
10.10.2 Demonstration: Routing Policy (Weight)
10.10.3 Demonstration: Routing Policy (Geolocation)
10.10.4 Demonstration: Routing Policy (Latency)
10.10.5 Demonstration: Routing Policy (Health Checks + Failover)
10.10.5.1 Demonstration: Prepare S3 static web host
10.10.5.2 Demonstration: Prepare an EC2 instance with web server
10.10.5.3 Demonstration: Routing Policy (Failover with Health Checks)
10.10.5.4 Demonstration: Routing Policy with Health Checks and Failover
10.10.5.5 Demonstration: Clean Up
10.10.5.5.1 Demonstration: Delete the record set
10.10.5.5.2 Demonstration: Terminate the EC2 instance
10.10.5.5.3 Demonstration: Delete the S3 bucket
10.10.5.5.4 Delete Route 53 Health Check
10.11 Multivalue answer routing policy
10.12 IP-based routing
11 CloudFront
11.1 Introduction to CloudFront
11.2 Edge Locations and high performance
11.3 Expiration period and Invalidation API
11.3.1 Expiration period
11.3.2 Invalidation API
11.4 Updating content
11.5 Demonstration: CloudFront
11.5.1 Demonstration: Preparation
11.5.1.1 Demonstration: Create a S3 bucket for images
11.5.1.2 Demonstration: Upload contents to S3 buckets
11.5.2 Demonstration: Create CloudFront Distribution
11.5.3 Demonstration: Verify OAI (Origin Access Identity) access
11.5.4 Demonstration: Clean up
11.5.4.1 Demonstration: Disable a CloudFront distribution
11.5.4.2 Demonstration: Delete a CloudFront distribution and OAI
11.5.4.3 Demonstration: Delete a S3 bucket
12 Simple Queue Service (SQS), Lambda and API Gateway
12.1 Simple Queue Service (SQS)
12.1.1 Introduction to SQS (Simple Queue Service)
12.1.2 Standard queues and FIFO queues
12.1.2.1 Standard queue
12.1.2.2 FIFO queue
12.1.3 Demonstration: SQS
12.1.3.1 Demonstration: Create a SQS queue
12.1.3.2 Demonstration: Send a message to the queue
12.1.3.3 Demonstration: Polling for messages / read messages
12.1.3.4 Demonstration: Delete messages
12.1.3.5 Demonstration: Delete a SQS queue
12.2 Lambda
12.2.1 Introduction to Lambda and serverless computing
12.2.2 Triggers
12.2.3 Stateless
12.2.4 Lambda@Edge
12.3 API Gateway
12.3.1 Introduction to API Gateway
12.3.2 Demonstration: Lambda (with Node.js) + API Gateway
12.3.2.1 Goal
12.3.2.2 Demonstration: Create a Lambda execution role
12.3.2.3 Demonstration: Create a Lambda function with API Gateway as a trigger
12.3.2.4 Demonstration: Create a test event and test the Lambda function
12.3.3 Demonstration: Clean up
12.3.3.1 Demonstration: Delete Lambda functions
12.3.3.2 Demonstration: Delete API
12.3.3.3 Demonstration: Delete IAM roles
12.4 More about Lambda
13 Identity and Access Management (IAM)
13.1 IAM users, roles, groups
13.1.1 IAM users
13.1.2 IAM roles
13.1.3 Groups
13.2 Permissions
13.2.1 An example of permission
13.3 Multi-Factor Authentication (MFA)
13.4 Demonstration: IAM
13.4.1 Demonstration: Create a group with “administrator” permissions
13.4.2 Demonstration: Create an administrator IAM user with “administrator” group
13.4.3 Demonstration: IAM user sign-in link and perform sign-in operations
13.4.4 Demonstration: Limit EC2 operations
13.4.4.1 Demonstration: Preparation
13.4.4.1.1 Demonstration: Create an instance for testing
13.4.4.1.2 Demonstration: Remove “administrator” permissions
13.4.4.2 Demonstration: Create Policy
13.4.4.3 Demonstration: Attach policies to users
13.4.4.4 Demonstration: Verify if the policy functions properly
13.4.5 Multi-Factor Authentication (MFA)
13.4.6 Demonstration: Clean up
13.4.6.1 Demonstration: Delete groups
13.4.6.2 Demonstration: Delete users
13.4.6.3 Demonstration: Delete policies
13.4.6.4 Demonstration: Terminate EC2 for testing
14 AWS Certified Solutions Architect – Associate Examination
14.1 Examination details
14.2 Examination registration
15 Miscellaneous topics
15.1 VPC peering
15.2 AWS Direct Connect and transit gateway
15.3 Kinesis
15.3.1 Kinesis Firehose
15.3.2 Kinesis Streams
15.3.2.1 Other types of Kinesis
15.4 Redshift
15.5 AWS Config
15.6 CloudTrail
15.7 ECS (Elastic Container Service)
15.7.1 Containers
15.7.2 Elastic Container Service (ECS) and container orchestration
15.8 Amazon EKS
15.9 Elastic Beanstalk
15.10 AWS Database Migration Service (DMS)
15.11 AWS DataSync
15.12 AWS Snowball / Snowball Edge Storage Optimized / Snowball Edge Compute Optimized
15.13 Amazon Athena
15.14 AWS Shield
15.15 AWS WAF (Web Application Firewall)
15.16 AWS Secrets Manager
15.17 Amazon Inspector
15.18 Amazon Macie
15.19 Amazon GuardDuty
15.20 Global accelerator
15.21 Compute optimizer
15.22 Cost allocation tag
15.23 AWS Backup
15.24 Amazon Rekognition
15.26 Amazon Polly
15.27 AWS Lake Formation and AWS Glue
15.28 Amazon Elastic Transcoder
16 Further reading
16.1 Demonstration: EBS labs in Amazon Linux (the same as chapter 4.8 - 4.10, but the OS is changed from Windows Server to Linux this time)
16.1.1 Demonstration: Attach EBS volumes
16.1.2 Demonstration: Build and mount a Linux file system
16.1.3 Demonstration: Detach EBS volumes
16.1.4 Demonstration: Resize and reattach volumes
16.1.5 Demonstration: Create snapshots from EBS volumes
16.2 Demonstration: Exploring “copy snapshot”
16.3 Demonstration: Create volumes from snapshots and attach to instances
16.4 Demonstration: From unencrypted to encrypted volumes
16.5 Demonstration: Delete volumes and snapshots
16.6 Trust Advisor
16.6.1 Demonstration: Trust Advisor
16.7 Shared responsibility model
16.8 An Integrated design of ELB, EC2, VPC Subnets, NACL and security group
16.9 AWS Auto Scaling default termination policy
16.10 EBS: SSD (gp2), IOPS (Input/Output Operations Per Second) and burst concepts
16.10.1 Demonstration: SSD (io1 / io2) and its IOPS provision concepts
16.10.2 Demonstration: Throughput Optimized HDD (st1)
16.10.3 Demonstration: Cold HDD (SC1)
16.10.4 Demonstration: Select the correct available zone!!
16.11 EBS: From unencrypted to encrypted volume
16.12 CloudFront Security
16.12.1 Geo-Restriction
16.12.2 TLS / SSL (https) and custom domain name
16.12.3 Signed URLs or cookies
The course content above may change at any time without notice in order to better reflect the content of the examination. |
|
|
