AWS Solutions Architect

Course Contents

Introduction to AWS

 Classic Data Center

 Virtualization

 Cloud and Cloud Computing

 Cloud Computing Service Models

 Cloud Computing Deployment Models

 Service Comparison: AWS, Azure, and GCP

 Amazon Web Services (AWS) and its Benefits

 AWS Global Infrastructure

 AWS Regions and Replication of data between the

Regions

 Availability Zones and High Availability

 PoP Locations

 Signup an AWS Free Tier Account

 Different Amazon Web Services

 Ways to access AWS: CLI, Console, and SDKs

 Explore Management Console and Configure AWS CLI

 AWS Cloud Shell

Hands-On

 Signup an AWS Free Tier Account

 Explore Management Console and AWS CLI

Identity and Access Management in AWS

 Threats to AWS Security

 AWS Shared Responsibility Model

 AWS Security Solutions

 Identity and Access Management (IAM)

 Managing Users with IAM

 Managing Permissions with Groups

 IAM Policy and its Elements

 IAM Roles

 Password Policy

 MFA

 Best Practices for IAM

 AWS Security Token Services

 AWS Single Sign-on

 AWS Resources Access Manager

 Active directory

 Microsoft Active directory

 AWS Directory Services

 AWS Artifact

 AWS Audit Manager

 AWS Certificate Manager

Accessing Billing and Alerts

Hands-On

 Creating New Users on AWS Console

 Create Role for an Application

 Creating Policies for New User

 Creating an user group for a collection of IAM users

 Login to AWS Console via MFA

 AWS Artifact

Amazon EC2

 Compute Virtualization

 Amazon Elastic Compute Cloud (EC2) and Its Benefits

 Amazon Machine Image (AMI)

 Security Groups in AWS

 Authentication through Key-pair

 Hardware Tenancy – Shared vs. Dedicated

 Networking Layer in EC2: VPC

 Elastic Network Interface (ENI) and Its Attributes

 Public IP vs. Elastic IP

 Instance Store

 Elastic Block Store (EBS), Its Features and Volume

Types

 Solid State Drive: General Purpose SSD and

Provisioned IOPS

 Hard Disk Drive: Throughput Optimized HDD and

Cold HDD

 Snapshots

 Elastic File System (EFS) and Its Features

 Amazon Batch

 Windows File Server

 Amazon FSx for Windows File Server

 Use case of Amazon FSx for Windows File Server

 Amazon FSx for Lustre

AWS Storage Options

 Traditional Storage

 Need to Move to Cloud Storage

 Traditional vs. Cloud Storage Cost

 Cloud Storage

 Different Storage Options Available on AWS

 Simple Storage Service (S3) and Its Components

 Working of S3

 Bucket Policy

 Access Control List (ACL)

 Versioning

 S3 Replicate

 Cross-Region Replication (CRR) and Its Use Case

 Amazon S3 Transfer Acceleration

 Choice of Storage Classes on S3

 Lifecycle Policy of S3 Bucket

 AWS Backup

CDN: CloudFront

 Storage Gateway

Hands-On

 Hosting a Static Website on Amazon S3

 Versioning in AWS S3

 Replicating Data Across Regions

 S3 Transfer Acceleration

 Transfer and Retrieve Data from Glacier

 Build a Backup plan from scratch

 Accessing Website Using CloudFront

 Enable File Share using Storage Gateway

Networking using AWS

 Traditional and Virtual Network

 Virtual Private Cloud (VPC) and Its Benefits

 Default and Non-default VPC

 Major Steps to Configure VPC

 IP Address

 CIDR- Classless Inter-domain Routing

 Subnet

 Private and Public Subnet

 Internet Gateway and Route Tables

 Security Group with VPC

 NACL and Security Group

 NAT Gateway and NAT Instance

 Limitations of VPC Peering

 Transit VPC

 Transit Gateway

 VPC Endpoints

 AWS Private Link

 VPN and Direct Connect

 AWS Global Accelerator

Hands-On

 To Create a Non-Default VPC

 Accessing the Internet Inside Private Subnet

 Connect Two Instances in Different VPCs

 Connect to an Application Hosted in different VPC