AWS Certified Solutions Architect Study Guide with Online Labs

69IPv6 CIDR Blocks 69Subnets 70Subnet CIDR Blocks 70Availability Zones 71IPv6 CIDR Blocks 72Elastic Network Interfaces 72Primary and Secondary Private IP Addresses 72Attaching Elastic Network Interfaces 73Internet Gateways 73Route Tables 74Routes 74The Default Route 75Security Groups 76Inbound Rules 76Outbound Rules 77Sources and Destinations 78Stateful Firewall 78Default Security Group 78Network Access Control Lists 79Inbound Rules 79Outbound Rules 80Using Network Access Control Lists and Security Groups Together 81Public IP Addresses 82Elastic IP Addresses 82Network Address Translation 83Network Address Translation Devices 84Configuring Route Tables to Use NAT Devices 85NAT Gateway 86NAT Instance 87VPC Peering 87Summary 88Exam Essentials 89Review Questions 91Chapter 5 Databases 95Introduction 96Relational Databases 96Columns and Attributes 96Using Multiple Tables 97Structured Query Language 98Online Transaction Processing vs. Online Analytic Processing 99Amazon Relational Database Service 99Database Engines 100Licensing Considerations 101Database Option Groups 101Database Instance Classes 102Storage 103Read Replicas 106High Availability (Multi-AZ) 108Backup and Recovery 109Automated Snapshots 109Maintenance Items 110Amazon Redshift 110Compute Nodes 110Data Distribution Styles 111Nonrelational (No-SQL) Databases 111Storing Data 111Querying Data 112Types of Nonrelational Databases 112DynamoDB 112Partition and Hash Keys 113Attributes and Items 113Throughput Capacity 114Reading Data 116Summary 117Exam Essentials 117Review Questions 119Chapter 6 Authentication and Authorization--AWS Identity and Access Management 123Introduction 124IAM Identities 125IAM Policies 125User and Root Accounts 126Access Keys 129Groups 130Roles 131Authentication Tools 131Amazon Cognito 132AWS Managed Microsoft AD 132AWS Single Sign-On 132AWS Key Management Service 133AWS Secrets Manager 133AWS CloudHSM 133AWS CLI Example 134Summary 135Exam Essentials 136Review Questions 137Chapter 7 CloudTrail, CloudWatch, and AWS Config 141Introduction 142CloudTrail 143Management Events 143Data Events 144Event History 144Trails 144Log File Integrity Validation 146CloudWatch 147CloudWatch Metrics 147Graphing Metrics 149Metric Math 150CloudWatch Logs 152Log Streams and Log Groups 153Metric Filters 153CloudWatch Agent 153Sending CloudTrail Logs to CloudWatch Logs 154CloudWatch Alarms 155Data Point to Monitor 155Threshold 155Alarm States 156Data Points to Alarm and Evaluation Period 156Missing Data 157Actions 157AWS Config 158The Configuration Recorder 159Configuration Items 159Configuration History 159Configuration Snapshots 160Monitoring Changes 161Summary 162Exam Essentials 162Review Questions 164Chapter 8 The Domain Name System and Network Routing: Amazon Route 53 and Amazon CloudFront 169Introduction 170The Domain Name System 170Namespaces 170Name Servers 171Domains and Domain Names 171Domain Registration 172Domain Layers 172Fully Qualified Domain Names 172Zones and Zone Files 173Record Types 173Alias Records 174Amazon Route 53 174Domain Registration 174DNS Management 175Availability Monitoring 176Routing Policies 177Traffic Flow 180Amazon CloudFront 181AWS CLI Example 182Summary 183Exam Essentials 183Review Questions 185Part II The Well-Architected Framework 189Chapter 9 The Reliability Pillar 191Introduction 192Calculating Availability 192Availability Differences in Traditional vs. Cloud-Native Applications 193Know Your Limits 196Increasing Availability 196EC2 Auto Scaling 197Launch Configurations 197Launch Templates 197Auto Scaling Groups 199Auto Scaling Options 200Data Backup and Recovery 204S3 204Elastic File System 205Elastic Block Storage 205Database Resiliency 205Creating a Resilient Network 206VPC Design Considerations 206External Connectivity 207Designing for Availability 207Designing for 99 Percent Availability 208Designing for 99.9 Percent Availability 209Designing for 99.99 Percent Availability 210Summary 211Exam Essentials 211Review Questions 213Chapter 10 The Performance Efficiency Pillar 217Introduction 218Optimizing Performance for the Core AWS Services 218Compute 219Storage 223Database 226Network Optimization and Load Balancing 227Infrastructure Automation 230CloudFormation 230Third-Party Automation Solutions 232Continuous Integration and Continuous Deployment 232Reviewing and Optimizing Infrastructure Configurations 234Load Testing 235Visualization 235Optimizing Data Operations 236Caching 237Partitioning/Sharding 238Compression 239Summary 239Exam Essentials 240Review Questions 242Chapter 11 The Security Pillar 247Introduction 248Identity and Access Management 248Protecting AWS Credentials 248Fine-Grained Authorization 249Permissions Boundaries 251Roles 252Enforcing Service-Level Protection 258Detective Controls 258CloudTrail 258CloudWatch Logs 259Searching Logs with Athena 260Auditing Resource Configurations with AWS Config 262Amazon GuardDuty 264Amazon Inspector 265Protecting Network Boundaries 267Network Access Control Lists and Security Groups 267AWS Web Application Firewall 267AWS Shield 268Data Encryption 268Data at Rest 268Data in Transit 270Summary 270Exam Essentials 271Review Questions 272Chapter 12 The Cost Optimization Pillar 277Introduction 278Planning, Tracking, and Controlling Costs 278AWS Budgets 279Monitoring Tools 280AWS Organizations 281AWS Trusted Advisor 282Online Calculator Tools 282Cost-Optimizing Compute 284Maximizing Server Density 284EC2 Reserved Instances 285EC2 Spot Instances 285Auto Scaling 288Elastic Block Store Lifecycle Manager 288Summary 288Exam Essentials 289Review Questions 290Chapter 13 The Operational Excellence Pillar 295Introduction 296CloudFormation 296Creating Stacks 297Deleting Stacks 298Using Multiple Stacks 298Stack Updates 301Preventing Updates to Specific Resources 302Overriding Stack Policies 303CodeCommit 303Creating a Repository 304Repository Security 304Interacting with a Repository Using Git 305CodeDeploy 307The CodeDeploy Agent 308Deployments 308Deployment Groups 308Deployment Types 308Deployment Configurations 309Lifecycle Events 310The Application Specification File 311Triggers and Alarms 312Rollbacks 312CodePipeline 313Continuous Integration 313Continuous Delivery 313Creating the Pipeline 314Artifacts 315AWS Systems Manager 316Actions 316Insights 318Summary 320Exam Essentials 320Review Questions 322Appendix Answers to Review Questions 327Chapter 1: Introduction to Cloud Computing and AWS 328Chapter 2: Amazon Elastic Compute Cloud and Amazon Elastic Block Store 329Chapter 3: Amazon Simple Storage Service and Amazon Glacier Storage 331Chapter 4: Amazon Virtual Private Cloud 332Chapter 5: Databases 334Chapter 6: Authentication and Authorization--AWS Identity and Access Management 336Chapter 7: CloudTrail, CloudWatch, and AWS Config 338Chapter 8: The Domain Name System and Network Routing: Amazon Route 53 and Amazon CloudFront 340Chapter 9: The Reliability Pillar 342Chapter 10: The Performance Efficiency Pillar 344Chapter 11: The Security Pillar 346Chapter 12: The Cost Optimization Pillar 348Chapter 13: The Operational Excellence Pillar 349Index 353