Class Overview
In this course, each module presents a scenario with an architectural challenge to be solved. You will
examine available AWS services and features as solutions to the problem. You will gain insights by
participating in problem-based discussions and learning about the AWS services that you could apply to
meet the challenges. Over 3 days, the course goes beyond the basics of a cloud infrastructure and covers
topics to meet a variety of needs for AWS customers. Course modules focus on managing multiple AWS
accounts, hybrid connectivity and devices, networking with a focus on AWS Transit Gateway connectivity,
container services, automation tools for continuous integration/continuous delivery (CI/CD), security and
distributed denial of service (DDoS) protection, data lakes and data stores, edge services, migration options,
and managing costs. The course concludes by presenting you with scenarios and challenging you to
identify the best solutions.
Course Objectives
Course objectives include reviewing the AWS Well-Architected Framework, securing Amazon S3 VPC endpoint connections, implementing centralized permissions management, comparing permissions management capabilities, exploring AWS hybrid network designs, examining container solutions, optimizing the CI/CD pipeline, identifying anomaly detection and protection services, securing data with AWS KMS and AWS Secrets Manager, setting up a data lake, optimizing edge services, automating the scaling of global applications, deploying AWS Storage Gateway file gateway and AWS DataSync, reviewing AWS cost management tools, reviewing migration tools and services, and completing a Capstone Project. These objectives cover a range of topics related to cloud design, security, optimization, and cost management.
Module 0: Introductions and Course Overview:
-------------------------------------------
Online Course Supplement
AWS Glossary
Architecting Learning Path
Module 1: Review Architecting Concepts:
-------------------------------------------
VPCs and Subnets
NAT Gateways
Target Groups for Your Application Load Balancer
Launch Configurations
Caching Overview
High Availability (Multi-AZ) for Amazon RD
Internet Gateways
Connect to Your Linux Instance
Using Amazon S3 Origins, MediaPackage Channels, and Custom Origins for Web Distributions
Amazon EFS FAQs
Amazon Route 53 FAQs
VPC Endpoints
Architecting on AWS Notes Page
Module 2: Single to Multiple Accounts:
-------------------------------------------
SSO limit
AWS Organizations limit
Control Tower limit
Service Catalog limit
Single Sign-on
SSO Documentation
SSO Features
CLI and SSO
Understanding key AWS Single Sign-On concepts
AWS Organizations
AWS Organizations Documentation
AWS Organizations Features
Creating and managing an organization
Example Service Control Policies
Best Practices for AWS Organizations 1
Best Practices for AWS Organizations 2
Control Tower
Control Tower Documentation
Control Tower Features
How AWS Control Tower Works:
Best practices for AWS Control Tower administrators
Customizations for Control Tower
Control Tower Controls
Control Tower Mandatory Controls
CloudFormation Guard
Migrate an AWS member account from AWS Organizations to AWS Control Tower
Enable AWS Control Tower on organizations and accounts
Service Catalog
Service Catalog Documentation
Service Catalog Features
Module 3: Hybrid Connectivity:
-------------------------------------------
Client VPN limit
Site-to-Site VPN limit
Direct Connect & DX Gateway limit
Transit Gateway limit
Route 53 Resolver
Client VPN
Client VPN Documentation - Admin
Client VPN Documentation - User
Client VPN Features
Client VPN endpoints
Client-to-client access
Site-to-Site VPN
Site-to-Site VPN Documentation
Site-to-Site VPN Features
Site-to-Site VPN FAQs
Connect your VPC to remote networks
Site-to-Site VPN tunnel initiation options
Your customer gateway device
Customer gateway options for your Site-to-Site VPN connection
Accelerated Site-to-Site VPN connections
Direct Connect
Direct Connect Documentation
Direct Connect Features
Direct Connect FAQs
Direct Connect Partners
Jumbo frames
DX SiteLink Features
DX SiteLink FAQs
Route 53 (Resolver) Documentation
Route 53 (Resolver) Features
Route 53 FAQs
Working with private hosted zones
Resolving DNS queries between VPCs and your network
IP Address Manager Documentation
IP Address Manager Features
IP Address Manager Route priority
IP Address Manager IPv6-only Subnets Documentation
Cloud WAN
Cloud WAN Documentation
Cloud WAN Features
Cloud WAN FAQs
Well Architected
Reliability: Plan your Network Topology
Performance Efficiency: Network Architecture Selection
Module 4: Specialized Infrastructure:
-------------------------------------------
Volume Gateway limit
S3 File Gateway limit
FSx File Gateway limit
Tape Gateway limit
VMware Cloud on AWS
Outposts
Wavelength Zones
Storage Gateways
Storage Gateways FAQs
Creating Your Gateway
Managing Your Gateway
S3 File Gateway
S3 File Gateway Documentation
FSx File Gateway
FSx File Gateway Documentation
Volume Gateway
Volume Gateway Documentation
Tape Gateway
Tape Gateway Documentation
VMware Cloud on AWS
VMware web site
VMware Features
VMware FAQs
Network Reference Architectures
Backup and Restore to VMware Cloud on AWS
VMware's pricing guide
Outposts
Outposts Documentation
Outposts Site requirements
Outposts Networking Reference Architecture
Launch an Instance on your Outpost
Amazon Elastic Container Service on AWS Outposts
Working with Amazon RDS on AWS Outposts
Using Amazon S3 on Outposts
VMware Cloud on AWS Outposts
Outposts Rack
Outposts Rack Features
How Local Gateways work
Outposts Server
Outposts Server Features
Local Zones
Local Zones Documentation
Local Zones Features
Local Zones Locations
Local Zones FAQs
Wavelength Zones
Wavelength Zones Documentation
Wavelength Zones Features
Wavelength Zones FAQs
Wavelength Zones Locations
Wavelength Zones Use Cases
How Wavelength works
Private 5G
Private 5G FAQs
Supported Devices
Module 5: Connecting Networks:
-------------------------------------------
Transit Gateway limit
Resource Access Manager
PrivateLink
Transit Gateway
Transit Gateway Documentation
Transit Gateway Features
Transit Gateway Scenarios
STNO
STNO Implementation Guide
Network Manager
Network Manager FAQs
Network Manager Documentation
Resource Access Manager
Resource Access Manager Documentation
Resource Access Manager FAQs
VPC Sharing
PrivateLink
PrivateLink Documentation
PrivateLink Features
Connect your VPC to services using AWS PrivateLink
Module 6: Containers
-------------------------------------------
ECR limit
ECS & Fargate limit
EKS & Fargate limit
Microservices
AWS Containers
Docker
DockerHub
AWS ECR
AWS EKS
AWS Fargate
Module 7: Continuous Integration/Continuous Delivery
-------------------------------------------
CodeStar limit
CodePipeline limit
CodeCommit limit
CodeBuild limit
CodeDeploy limit
CodeArtifact limit
CodeStar
CodeStar Documentation
CodeStar Features
CodePipeline
CodePipeline Documentation
CodePipeline Features
CodePipeline Product integrations
CodeCommit
CodeCommit Documentation
CodeCommit Features
CodeCommit Integration with Cloud9
CodeCommit Integration with Visual Studio
CodeCommit Integration with Eclipse
CodeBuild
CodeBuild Documentation
CodeBuild Features
Bitbucket webhook
GitHub webhook
CodeDeploy
CodeDeploy Documentation
CodeDeploy Features
AWS service integrations
3rd-Party Product integrations
Blue/Green deployment with CodeDeploy
CodeDeploy identity-based policy examples
CodeArtifact
CodeArtifact Documentation
CodeArtifact Features
CodeGuru
CodeGuru Documentation
Fault Injection Simulator
Fault Injection Simulator Documentation
X-Ray
X-Ray Documentation
Module 8: Architecting for high availability and DDoS protection
-------------------------------------------
WAF limit
Shield Advanced limit
Firewall Manager limit
Network Firewall limit
WAF
WAF Documentation
WAF Features
How WAF Works
WAF Rules
WAF Automation
How WAF Processes a Web ACL
Managing and using a web access control list (web ACL)
Shield Advanced
Shield Advanced Documentation
Shield Advanced Features
Shield Engagement Lambda
IoT Button
How Shield Works
Firewall Manager
Firewall Manager Documentation
Firewall Manager Features
Network Firewall
Network Firewall Documentation
Network Firewall Features
Network Firewall FAQs
Module 9: Securing Data
-------------------------------------------
KMS limit
CloudHSM limit
Secrets Manager limit
KMS
KMS Documentation
KMS Features
KMS Cryptography concepts
KMS Cryptographic Details
Reducing the cost of SSE-KMS with S3 Bucket Keys
Custom key stores
Importing key material in KMS keys
Deleting KMS keys
CloudHSM
CloudHSM Documentation
CloudHSM Features
CloudHSM Use Cases
Managing HSM users and keys in AWS CloudHSM
Secrets Manager
Secrets Manager Documentation
Secrets Manager Features
Rotate secrets
Rotation function templates
Module 10: Large-Scale Data Stores
-------------------------------------------
S3 Limits
S3 Quotas
S3
S3 Documentation
S3 Storage Classes
S3 Access Points
S3 Access Points Documentation
S3 Batch Operations
S3 Batch Ops. Documentation
S3 Inventory
Data Lake
Data Lake Documentation
Data Lake Storage
Data Lake FAQ
Lake Formation
Lake Formation Documentation
Lake Formation Features
Lake Formation FAQ
Lake Formation Security
Lake Formation Blueprints
Module 11: Migrating Workloads
-------------------------------------------
Migration Hub limit
Application Discovery Service
Application Migration Service Limits
Application Migration Service Quotas
Server Migration Service Quotas
Database Migration Service Quotas
DataSync
Cloud Readiness Assessment
CAF (Cloud Adoption Framework)
CAF Documenation
MAP (Migration Acceleration Program)
Migration Evaluator
MRA (Migration Readiness)
Migration Hub
Migration Hub Documentation
Migration Hub Features
Migration Hub FAQs
Refactor Spaces
Strategy Recommendations
Migration Hub Orchestrator
Application Discovery Service
Application Discovery Service Documentation
Application Discovery Service Features
Application Discovery Service FAQs
Application Migration Service
Application Migration Service Documentation
Server Migration Service
Server Migration Service Documentation
Server Migration Service FAQs
Database Migration Service
DMS Documentation
DMS FAQs
DMS Step-by-Step Walkthroughs
Schema Conversion Tool
SCT Documentation
DataSync Documentation
Snowball
Snowball Documentation
Module 12: Optimizing Cost
-------------------------------------------
Billing limit
Cost Management limit
Cost & Usage Reports limit
Billing
Billing Documentation
Billing Features
Cost Categories
Cost Categories Documentation
Using Cost Allocation Tags
Billing Details
Budget Best Practices
Cloud Financial Management
Cloud Financial Management Documentation
Cost Optimization Best Practices
Practice Cloud Financial Management
Cost Explorer
Cost Explorer Documentation
Budgets
Budgets Documentation
Configuring AWS Budgets actions
Cost Anomaly Detection
Cost Anomaly Detection Documentation
Reserved Instance (RI) Reporting
Reserved Instance (RI) Reporting Documentation
Cost & Usage Report
Cost & Usage Report Documentation
Cost & Usage Report Features
Cost & Usage Report FAQs
Cost & Usage Report Tagging
Tag EC2 Resources
Tagging Strategies
Tagging Best Practices
Well Architected Framework
Cost Optimization Pillar
Cost-effective resources
Instance Scheduler
Instance Scheduler FAQs
Instance Scheduler Implementation Guide
Module 13: Architecting for the Edge
-------------------------------------------
CloudFront Limit
Global Accelerator Limit
CloudFront
CloudFront Documentation
CloudFront Features
CloudFront FAQs
CloudFront Use Cases
CloudFront Overview of distributions
CloudFront Creating an origin group
Using various origins with CloudFront distributions
Managing cache expiration
Origin Shield
Lambda@Edge
Lambda@Edge Example Functions
CloudFront Functions
CloudFront Functions Example Code
Video on Demand with CloudFront
Global Accelerator
Global Accelerator Documentation
Global Accelerator Features
Global Accelerator FAQs
Global Accelerator Use Cases
Health Checks for Your Target Groups
Global Accelerator Endpoints Weights
Global Accelerator Speed Comparison Tool
AI Website Generator