Recommended
More Related Content
What's hot
What's hot (20)
Similar to AWS Solution Architect - Associate Cohort.pptx
Similar to AWS Solution Architect - Associate Cohort.pptx (20)
Recently uploaded
Recently uploaded (20)
AWS Solution Architect - Associate Cohort.pptx
- 1. AWS Certified Solution Architect – Associate (SAA-C02) June 2022 Akesh Patil ACCELERATE GROWTH ON CLOUD
- 2. Speaker Akesh Patil Sr. Cloud Architect Digital & Cloud Consulting AWS Community Builder | AWS APN Ambassador
- 3. Agenda • Introduction • Exam Summary • Exam Topics • Exam Resources • Online Quiz
- 4. Introduction 4 © Blazeclan Technologies • AWS SA Associate (SAA-C02) is the latest exam that has replaced previous exam SAA-C01 • Validates knowledge of how to architect and deploy secure and robust applications on AWS technologies
- 5. Exam Summary 5 © Blazeclan Technologies • SAA-C02 consists of 65 questions in 130 minutes • You must be able to visualize the architecture • Focus more on building of scalable, highly available, cost-effective, performant, resilient. • Exam is available online
- 6. © Blazeclan Technologies 6 Exam Topics - Networking • VPC and CIDR patterns • Private and Public subnets, Route Tables, SG, NACL, NAT Gateway • 2-Tier, 3-Tier applications (understand SGs and NACLs to enable communication between various tiers) • VPC Endpoints • CLB vs ALB vs NLB (SAA-C02 focus more on ALB and NLB) • VPN and Direct Connect • Data Migration Techniques (Snowball, SnowMobile, VPNs, Direct Connect) • Route 53 – Public Hosted Zones, Private Hosted Zones, Health checks, Failover, Routing policies
- 7. © Blazeclan Technologies 7 Exam Topics - Security • IAM – IAM roles, Users, Policies • Encryption services – KMS, S3(SSE, SSE-C, SSE-KMS), SQS now supports SSE • AWS WAF, AWS Shield • Different recovery types with impact on RTO/RPO
- 8. © Blazeclan Technologies 8 Exam Topics - Storage • Understand various storage options S3, EBS, Instance Store, EFS, Glacier, FSx and their use cases and anti-patterns • Understand Instance Store and difference between EBS and Instance Store • Understand EBS volumes in detail including volume types and snapshots, IOPS, throughput, burst performance, I/O credits • Understand S3 in in details including storage classes, lifecycle policies, static website hosting, versioning, glacier as an archival storage • Understand storage gateway (Cached Volumes, Stored Volume and File Gateway) and FSx • Understand difference between EBS vs S3 vs EFS
- 9. © Blazeclan Technologies 9 Exam Topics - Compute • Understand EC2 • Understand Autoscaling and ELB and how they work together to provide highly available and scalable solution • Understand EC2 Instances purchase types (Reserved, Scheduled, On-Demand, Spot) • Understand EC2 placement groups • Understand lambda and serverless architecture • Understand ECS with its ability to deploy containers and microservices architecture • Know elastic beanstalk at high level
- 10. © Blazeclan Technologies 10 Exam Topics - Databases • Understand relational and NoSQL data storage options including RDS, DynamoDB, Aurora and use cases • Understand RDS features – Read Replicas vs Multi-AZ • Understand Aurora including Aurora serverless • Understand DynamoDB including DAX, provisioned throughput for Read/Writes • Know ElastiCache use cases mainly for caching performance
- 11. © Blazeclan Technologies 11 Exam Topics - Others • Integration Tools – SQS, SNS • Analytics – Redshift, Kinesis and basic of AWS Glue • Management Tools – CloudWatch, EC2 metrics, CloudTrail, Config and basic understanding of CloudFormation, OpsWorks
- 12. Exam Resources • Ultimate AWS Certified Solutions Architect Associate 2021 by Stephane Maarek • Practice tests • Braincert SAA-C02 practice exams • Stephane Maarek – AWS Certified Solutions Architect Associate Practice Exams 12 © Blazeclan Technologies
- 13. thank you © Blazeclan Technologies 13
Editor's Notes
- AWS Solutions Architect – Associate SAA-C02 exam is the latest AWS exam that has replaced the previous SAA-C01 certification exam. It basically validates the ability to effectively demonstrate knowledge of how to architect and deploy secure and robust applications on AWS technologies It validates an examinee’s ability to Define a solution using architectural design principles based on customer requirements. Provide implementation guidance based on best practices to the organization throughout the life cycle of the project.
- SAA-C02 exam consists of 65 questions in 130 minutes, and the time is more than sufficient if you are well prepared. SAA-C02 Exam covers the architecture aspects in deep, so you must be able to visualize the architecture, even draw them out in the exam just to understand how it would work and how different services relate AWS has updated the exam concepts from the focus being on individual services to more building of scalable, highly available, cost-effective, performant, resilient. If you had been preparing for the SAA-C01 – SAA-C02 is pretty much similar to SAA-C01 except the operational effective architecture domain has been dropped Although, most of the services and concepts covered by the SAA-C01 are the same. There are few new additions like Aurora Serverless, AWS Global Accelerator, FSx for Windows, FSx for Lustre AWS exams are available online, and I took the online one. Just make sure you have a proper place to take the exam with no disturbance and nothing around you.
- Be sure to create VPC from scratch. This is mandatory. Create VPC and understand whats an CIDR and addressing patterns Create public and private subnets, configure proper routes, security groups, NACLs. (hint: Subnets are public or private depending on whether they can route traffic directly through Internet gateway) Create Bastion for communication with instances Create NAT Gateway or Instances for instances in private subnets to interact with internet Create two tier architecture with application in public and database in private subnets Create three tier architecture with web servers in public, application and database servers in private. (hint: focus on security group configuration with least privilege) Make sure to understand how the communication happens between Internet, Public subnets, Private subnets, NAT, Bastion etc. Understand VPC endpoints and what services it can help interact (hint: VPC Endpoints routes traffic internally without Internet) VPC Gateway Endpoints supports S3 and DynamoDB. VPC Interface Endpoints OR Private Links supports others Understand difference between NAT Gateway and NAT Instance (hint: NAT Gateway is AWS managed and is scalable and highly available) Be sure to cover ELB concepts in deep. SAA-C02 focuses on ALB and NLB and does not cover CLB Understand differences between CLB vs ALB vs NLB Understand VPN and Direct Connect for on-premises to AWS connectivity VPN provides quick connectivity, cost-effective, secure channel, however routes through internet and does not provide consistent throughput Direct Connect provides consistent dedicated throughput without Internet, however requires time to setup and is not cost-effective Understand Data Migration techniques Choose Snowball vs Snowmobile vs Direct Connect vs VPN depending on the bandwidth available, data transfer needed, time available, encryption requirement, one-time or continuous requirement Snowball, SnowMobile are for one-time data, cost-effective, quick and ideal for huge data transfer Direct Connect, VPN are ideal for continuous or frequent data transfers Understand CloudFront as CDN and the static and dynamic caching it provides, what can be its origin (hint: CloudFront can point to on-premises sources and its usecases with S3 to reduce load and cost) Understand Route 53 for routing Understand Route 53 health checks and failover routing Understand Route 53 Routing Policies it provides and their use cases mainly for high availability (hint: focus on weighted, latency, geolocation, failover routing)
- Understand IAM as a whole Focus on IAM role (hint: can be used for EC2 application access and Cross-account access) Understand IAM identity providers and federation and use cases Understand MFA and how would implement two factor authentication for an application Understand IAM Policies (hint: expect couple of questions with policies defined and you need to select correct statements) Understand encryption services KMS for key management and envelope encryption Focus on S3 with SSE, SSE-C, SSE-KMS Know SQS now provides SSE support AWS WAF integrates with CloudFront to provide protection against Cross-site scripting (XSS) attacks. It also provide IP blocking and geo-protection. AWS Shield integrates with CloudFront to provide protection against DDoS. Refer Disaster Recovery whitepaper, be sure you know the different recovery types with impact on RTO/RPO.
- Understand various storage options S3, EBS, Instance store, EFS, Glacier, FSx and what are the use cases and anti patterns for each Instance Store Understand Instance Store (hint: it is physically attached to the EC2 instance and provides the lowest latency and highest IOPS) Elastic Block Storage – EBS Understand various EBS volume types and their use cases in terms of IOPS and throughput. SSD for IOPS and HDD for throughput Understand Burst performance and I/O credits to handle occasional peaks Understand EBS Snapshots (hint: backups are automated, snapshots are manual) Simple Storage Service – S3 Cover S3 in depth Understand S3 storage classes with lifecycle policies Understand the difference between SA Standard vs SA IA vs SA IA One Zone in terms of cost and durability Understand S3 Data Protection (hint: S3 Client side encryption encrypts data before storing it in S3) Understand S3 features including S3 provides a cost effective static website hosting S3 versioning provides protection against accidental overwrites and deletions S3 Pre-Signed URLs for both upload and download provides access without needing AWS credentials S3 CORS allows cross domain calls S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket. Understand Glacier as an archival storage with various retrieval patterns Glacier Expedited retrieval now allows object retrieval within mins Understand Storage gateway and its different types. Cached Volume Gateway provides access to frequently accessed data, while using AWS as the actual storage Stored Volume gateway uses AWS as a backup, while the data is being stored on-premises as well File Gateway supports SMB protocol Understand FSx easy and cost effective to launch and run popular file systems. FSx provides two file systems to choose from: Amazon FSx for Windows File Server for business applications and Amazon FSx for Lustre for high-performance workloads. Understand the difference between EBS vs S3 vs EFS EFS provides shared volume across multiple EC2 instances, while EBS can be attached to a single volume within the same AZ. Understand the difference between EBS vs Instance Store Would recommend referring Storage Options whitepaper, although a bit dated 90% still holds right
- Understand Elastic Cloud Compute – EC2 Understand Auto Scaling and ELB, how they work together to provide High Available and Scalable solution. (hint: Span both ELB and Auto Scaling across Multi-AZs to provide High Availability) Understand EC2 Instance Purchase Types – Reserved, Scheduled Reserved, On-demand and Spot and their use cases Choose Reserved Instances for continuous persistent load Choose Scheduled Reserved Instances for load with fixed scheduled and time interval Choose Spot instances for fault tolerant and Spiky loads Reserved instances provides cost benefits for long terms requirements over On-demand instances Spot instances provides cost benefits for temporary fault tolerant spiky load Understand EC2 Placement Groups (hint: Cluster placement groups provide low latency and high throughput communication, while Spread placement group provides high availability) Understand Lambda and serverless architecture, its features and use cases. (hint: Lambda integrated with API Gateway to provide a serverless, highly scalable, cost-effective architecture) Understand ECS with its ability to deploy containers and micro services architecture. ECS role for tasks can be provided through taskRoleArn ALB provides dynamic port mapping to allow multiple same tasks on the same node Know Elastic Beanstalk at a high level, what it provides and its ability to get an application running quickly.
- Understand relational and NoSQLs data storage options which include RDS, DynamoDB, Aurora and their use cases RDS Understand RDS features – Read Replicas vs Multi-AZ Read Replicas for scalability, Multi-AZ for High Availability Multi-AZ are regional only Read Replicas can span across regions and can be used for disaster recovery Understand Automated Backups, underlying volume types Aurora Understand Aurora provides multiple read replicas and replicates 6 copies of data across Azs Understand Aurora Serverless provides a highly scalable cost-effective database solution DynamoDB Understand DynamoDB with its low latency performance, key-value store (hint: DynamoDB is not a relational database) DynamoDB DAX provides caching for DynamoDB Understand DynamoDB provisioned throughput for Read/Writes (It is more cover in Developer exam though.) Know ElastiCache use cases, mainly for caching performance
- Integration Tools Understand SQS as message queuing service and SNS as pub/sub notification service Understand SQS features like visibility, long poll vs short poll Focus on SQS as a decoupling service Understand SQS Standard vs SQS FIFO difference (hint: FIFO provides exactly once delivery both low throughput) Analytics Know Redshift as a business intelligence tool Know Kinesis for real time data capture and analytics Atleast know what AWS Glue does, so you can eliminate the answer Management Tools Understand CloudWatch monitoring to provide operational transparency Know which EC2 metrics it can track. Remember, it cannot track memory and disk space/swap utilization Understand CloudWatch is extendable with custom metrics Understand CloudTrail for Audit Have a basic understanding of CloudFormation, OpsWorks