Advanced Architecting on AWS
Please not that this is not a prep course for the “AWS Certified Solutions Architect - Professional” certification!
This document contains links mentioned in the “Advanced Architecting on AWS” course.
Module 0: Course Introduction
Full name: Advanced Architecting on AWS
Product code: 300-ADVARC-37
These links are based on the course version 3.7.3.
The official course material: eVantage Bookshelf (VitalSource)
Online Course Supplement (OCS) material
Additional material: AWS Skill Builder
Module 1: Review Architecting Concepts
Websites
- Amazon Virtual Private Cloud (VPC) User Guide
- EC2 Auto Scaling User Guide
- Amazon Aurora User Guide
- S3 User Guide
- EC2 User Guide
- EFS overview & User Guide
- Route 53 overview & Developer Guide
- NAT gateways
- Target groups for your Application Load Balancers
- Launch Templates
- Caching Overview
- High availability for Amazon Aurora
- S3 lifecycle configuration
- Connect to the internet using an internet gateway
- Connect to your Linux instance
- CloudFront distribution origins
- AWS PrivateLink for S3
Module 2: Single to Multiple Accounts
Websites
- IAM User Guide
- AWS Organizations User Guide
- IAM Identity Center User Guide
- AWS CLI User Guide
- AWS Control Tower User Guide
- Providing access to an IAM user in another AWS account
- Cross-account access
- Switching to an IAM role
- Test access by switching roles
- AWS Organizations terminology and concepts
- Managing organizational units
- Service control policy examples
- SCP syntax
- manage users within AWS IAM Identity Center
- AWS CLI new features
- AWS CLI update instructions
- AWS Services by Region
- About controls in AWS Control Tower
- manage accounts with Account Factory
- How AWS Control Tower Works
- Field Notes: Enroll Existing AWS Accounts into AWS Control Tower
- Enroll an existing AWS account
- Best practices for AWS Control Tower administrators
- Best Practices for Organizational Units with AWS Organizations
Module 3: Hybrid Connectivity
Websites
- AWS Global Accelerator Developer Guide
- AWS Direct Connect User Guide
- VPCs and subnets
- What is AWS Client VPN?
- Scenarios and examples for AWS Client VPN
- Authenticate AWS Client VPN users with AWS IAM Identity Center
- Modify Client VPN Endpoint
- customer gateway device
- Tunnel options for your Site-to-Site VPN connection
- Customer gateway options for your Site-to-Site VPN connection
- Scaling VPN throughput using AWS Transit Gateway
- Improve VPN Network Performance
- Encryption in AWS Direct Connect
- AWS Direct Connect features
- AWS Direct Connect Delivery Partners
- Bidirectional Forwarding Detection (BFD) for Direct Connect
- Network MTU for private virtual interfaces
- EFS and Direct Connect
- Private IP VPN with AWS Direct Connect
- Site-to-Site VPN routing options
Module 4: Specialized Infrastructure
Websites
- AWS Storage Gateway User Guides
- AWS Wavelength Developer Guide
- AWS Outposts Family
- Site requirements for Outposts rack
- AWS Outposts Servers Features
- AWS Local Zones locations
- AWS Local Zones overview
- AWS Storage Gateway FAQs
- AWS Outposts Rack FAQs
- AWS Local Zones FAQs
Module 5: Connecting Networks
Websites
- Transit gateway use cases
- Transit gateway associations
- How Reachability Analyzer works
- AWS PrivateLink
- AWS Marketplace
- AWS Compliance Programs
- AWS PrivateLink Guide
Videos
- AWS on Air 2020: VPC Reachability Analyzer
Module 6: Containers
Websites
- Containers on AWS
- Docker Engine overview
- Understanding Docker Container Architecture
- Docker overview
- Amazon ECR Public User Guide
- ECR Public and ECR Public Gallery
- Docker image tag
- Amazon EKS Anywhere
- ECS task definition
- Example ECS task definitions
- ECS Developer Guide
- ECS task placement strategies
- Amazon ECS task placement constraints
- Cluster management
- Amazon EKS ended support for Dockershim
- Creating a task definition using the console
- Task definition parameters
- ECS clusters and capacity
- Migrating Your Amazon ECS Containers to AWS Fargate
- Using data volumes in tasks
Module 7: Continuous Integration/Continuous Delivery (CI/CD)
Websites
- CodePipeline User Guide
- Code Commit User Guide
- CodeDeploy User Guide
- Developer Tools on AWS (overview)
- Developer tools
- Getting started with Amazon CodeWhisperer
- CodeWhisperer Resources
- CodeWhisperer course in Skill Builder
- A small tutorial to create a simple pipeline
- CodePipeline product integrations
- integrations with CodeDeploy
- CodeDeploy policy examples
- Continuous Deployment using AWS CodePipeline
- What is DevOps?
- Practicing Continuous Integration and Continuous Delivery on AWS
- What can I do with CodePipeline?
- Infrastructure as code (IaC)
- Blue/Green Deployments on AWS
Module 8: High Availability and DDos
Websites
- AWS WAF User Guide
- How AWS Shield works
- WAF Rule statement basics
- Analyze AWS WAF logs
- Security Automations for AWS WAF
- Use GuardDuty and WAF to automatically block suspicious hosts
- AWS Shield Features
- Control traffic to subnets using network ACLs
- AWS Shield Engagement Lambda
- AWS WAF pricing
- AWS Config pricing
- AWS Firewall Manager prerequisites
Module 9: Securing Data
Websites
- AWS Key Management Service (KMS) Developer Guide
- AWS Secrets Manager User Guide
- AWS CloudHSM User Guide
- KMS features
- KMS concepts
- Asymmetric keys
- HSM users in CloudHSM
- Using quorum authentication for crypto officers
- Oracle Transparent Data Encryption
- Oracle Transparent Data Encryption configuration
- Database credentials and AWS Secrets Manager
- AWS Secrets Manager concepts
- Rotate AWS Secrets Manager secrets
- Configuring S3 default encryption
- Using server-side encryption with customer-provided keys (SSE-C)
Module 10: Large Scale Data Stores
Websites
- S3 pricing
- Amazon S3 Inventory
- Lake Formation permissions
- S3 access with VPC endpoints and S3 Access Points
- S3 Batch Operations
- S3 Intelligent-Tiering
- Blueprints and workflows in Lake Formation
Module 11: Migrating Workloads
Websites
- AWS DataSync User Guide
- AWS Database Migration (DMS) Service Documentation
- AWS Schema Conversion (SCT) User Guide
- AWS Cloud Readiness Assessment
- AWS Migration Acceleration Program
- Migration Evaluator
- Agentless snapshot based replication for vCenter source environments
- How AWS DataSync works
- Working with AWS DMS endpoints
- Using Oracle GoldenGate with RDS
- Getting started with AWS SCT
- SCT general information and use cases
Videos
Module 12: Optimizing Cost
Websites
- AWS Billing and Cost Management Documentation
- AWS Resource Groups User Guide
- Creating an Amazon SNS topic for budget notifications
- Tag policies
- Tag enforcement
- Using the AWS CLI to manage DynamoDB auto scaling
- Cost Optimization with AWS
Videos
- AWS re:Invent 2016: Cost Optimizing Your Architecture
Module 13: Architecting for the Edge
Websites
- Amazon CloudFront Developer Guide
- AWS Global Accelerator Developer Guide
- Amazon CloudFront Key Features
- Using various origins with CloudFront distributions
- Amazon CloudFront introduces Origin Access Control (OAC)
- Migrating from origin access identity (OAI) to origin access control (OAC)
- OriginGroup
- Video on demand and live streaming video with CloudFront
- Website endpoints
- Restricting access to files on custom origins
- Overview of serving private content
- Restricting access to an Amazon S3 origin
- Amazon CloudFront Custom SSL
- How CloudFront delivers content
- Understanding the cache key
- Customizing at the edge with functions
- Customizing at the edge with CloudFront Functions
- Customizing at the edge with Lambda@Edge
- AWS Global Accelerator for Availability and Performance
- Starting Small with AWS Global Accelerator
- Health checks for your target groups
- CloudFront CacheBehavior
Module 14: Review
Websites
- AWS Certification exam preparation
- AWS Certification
- AWS Recertification
- All AWS Certification exams
- Schedule an Exam
- AWS Skill Builder subscription
- AWS Training and Certification
- AWS Online Tech Talks
- AWS Ramp-Up Guides
Courses
- Advanced Architecting on AWS Online Course Supplement
- AWS Skill Builder
- AWS Builder Labs
- AWS Workshops