Course: AWS Certified SysOps Administrator - Associate 2022 (exam SOA-C02)

The AWS Global Infrastructure facilitates the deployment of AWS services that meet business needs. Business needs must be mapped to the appropriate AWS services while ensuring that cloud solutions can protect sensitive data. In this course, discover how regions and availability zones affect resource placement and high availability. Then, explore the AWS Well-Architected Framework and match AWS services to business needs. Next, install the AWS CLI on Windows, Linux, and the macOS. Finally, view existing service quotas and limits. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

AWS Virtual Private Clouds (VPCs) provide virtual network infrastructure for AWS services. VPC subnets are configured with IP address ranges which are then assigned to deployed resources. VPC settings related to dynamic host configuration protocol (DHCP) and domain name system (DNS) control specific Transmission Control Protocol/Internet Protocol (TCP/IP) behavior. Elastic IP addresses can be assigned to EC2 instances to provide public IP addressing. In this course, discover how VPCs and subnets can address cloud networking needs. Then, create VPCs and subnets using the console, the command line interface (CLI), and PowerShell. Next, configure VPC DHCP and DNS settings as well as subnet IP addressing. Then, create and assign Elastic IP addresses to provide public IP addressing. Lastly, peer VPCs together, configure a virtual private network (VPN), and troubleshoot VPC issues. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

Network security includes controlling which network traffic is allowed into and out of networks and virtual machines. Network access control lists (ACLs) serve as packet filtering firewalls to control network traffic at the subnet level while security groups control network traffic flow to specific virtual machine instances. In this course, discover how to create network ACLs using the AWS console, the command line interface (CLI), and PowerShell. Then, create rules in the network ACL to restrict inbound and outbound traffic and associate the network ACL with a subnet. Next, create security groups using the AWS console, the CLI, and PowerShell. Learn how to create security group rules and associate a virtual machine. Lastly, deploy the AWS Network Firewall and Web Application Firewall. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

AWS Simple Storage Service (S3) buckets provide object storage in the AWS cloud. Stored objects can use storage tiers to enhance performance or optimize costs. AWS Storage Gateway services are an on-premises cache of cloud-stored files and Amazon CloudFront is the AWS content delivery network solution. In this course, discover ways to create and manage S3 buckets and their contents including using the console, the command line interface (CLI), and PowerShell. Then, configure object storage tiers based on object accessibility requirements and configure bucket policies and the AWS Storage Gateway. Next, work with Elastic File System (EFS) and Windows FSx. Lastly, configure web caching with CloudFront and use Amazon Macie to discover and classify data. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

AWS provides various storage services, including databases. Cloud technicians must know when to use a specific database engine and how it should be configured to accommodate the related workload. In this course, discover how and when to use AWS database solutions. Then, plan database usage in accordance with anticipated workloads. Next, deploy and manage various database solutions such as Amazon Aurora, MySQL, and Microsoft SQL Server. Discover how to work with database parameter groups and Relational Database Service (RDS) snapshots and replicas. Lastly, deploy an ElastiCache cluster to optimize database read performance. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

Whether deployed manually or provisioned automatically in the background for managed services, Elastic Compute Cloud (EC2) instances are the compute workhorse in AWS. EC2 instances can be deployed and managed for Windows and Linux using a variety of tools. In this course, discover how to deploy EC2 instances using the console, the command line interface (CLI), and PowerShell. Next, size instances to accommodate their workloads. Then, configure EC2 instance hibernation using the console and the CLI. Lastly, create a custom Amazon Machine Image (AMI) and the EC2 Image Builder. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

The domain name system (DNS) is primarily used for forward lookups, where a fully qualified domain name (FQDN) is provided and the DNS service resolve the name to an IPv4 or IPv6 address. In this course, discover how AWS Route 53 addresses DNS functionality. Next, create DNS hosted zones in AWS and create DNS records in those zones. Then, register a public DNS name using Route 53 followed by configuring VPC DNS settings. Lastly, explore when various Route 53 traffic policies should be used and configure the DNS firewall. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

AWS supports the creation and management of users and groups. Settings such as password and resource policies can secure user sign-in and restrict access to specific AWS resources in accordance with roles. Multi-factor authentication (MFA) can also be enabled to help mitigate common account cracking techniques. In this course, discover how AWS provides identity and access management (IAM) capabilities. Explore how to create and manage IAM users and groups using the console, the CLI, and PowerShell. Next, configure IAM policies and test user sign-in. Learn how to configure IAM policies and roles, enable user MFA to harden user sign-ins, and use the IAM Identity Center Console. Lastly, discover how identity federation can provide centralized trusted identities. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

AWS offers a variety of application solutions to meet specific app requirements. Application containers provide a logical boundary for application files and settings. In this course, discover when and how to work with containerized application in the AWS cloud. First, you will store app secrets using Secrets Manager, deploy a message queue, and work with the Simple Notification Service (SNS). Next, you will focus on application containers and install the Docker engine on the Linux and Windows platforms. Then you will deploy a container registry and deploy container instances and an Elastic Kubernetes Service (EKS) cluster in the cloud. Lastly, you will confiture a static web app, create a Lambda function, and work with OpsWorks stacks. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

Using cryptographic solutions helps prevent data tampering and exposure of sensitive data to unauthorized parties, ensuring data confidentiality and integrity. AWS supports the creation and management of encryption keys and digital security certificates. In this course, discover how cryptography can provide data integrity and confidentiality. Then examine the public key infrastructure (PKI) hierarchy and how certificates can be used to secure AWS services. Next, work with AWS Key Management Service (AWS KMS) to manage encryption keys and AWS Certificate Manager to create a private certificate authority (CA) and issue PKI certificates. Finally, practice renewing certificates, enabling HTTPS, and encrypting an Elastic Block Store (EBS) volume. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

Automation expedites the execution of repeatable tasks while minimizing human error. AWS offers a variety of automation solutions. In this course, discover how CloudFormation templates can be used to automate the deployment of related resources. Manage CloudFormation StackSets and deploy resources using existing and custom templates. Use EventBridge to connect applications for notifications, data sharing, and scheduling tasks. Next, enable cloud elasticity with Auto Scaling and manage subnet sizing. Finally, work with AWS Config to view resource compliance. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

The centralized change management of EC2 instances can be simplified and automated using AWS Systems Manager. In this course, discover how Systems Manager works along with its capabilities. Next, use Systems Manager Operations Management, app parameters, and Change Management, as well as execute run commands. Then, view Systems Manager Inventory followed by deploying patches and software packages to instances. Lastly, remotely manage instances using Session Manager. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

AWS provides solutions for governance of the AWS environment in compliance with organizational security requirements. In this course, explore AWS organizations creation and management. Next, discover how to set the maximum allowed permissions with service control policies (SCPs). Next, work with resource tagging policies, tagging using the console, as well as command line tools. Lastly, share AWS resources across accounts and configure cross-account roles. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

Proactive planning goes a long way in minimizing the impact of IT service disruptions. AWS provides methods of ensuring IT service high availability across a variety of services, data availability, and long-term data retention. In this course, discover disaster recovery terminology and common deployment strategies. Next, configure Amazon S3 Glacier archiving and enable S3 replication, versioning, and data immutability. Then configure S3 bucket lifecycle rules and create Elastic Block Store (EBS) volume snapshots. Finally, deploy a network load balancer, automate incident response with AWS Incident Manager, and manage the AWS Elastic Disaster Recovery service. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

The Recovery Point Objective (RPO) determines the maximum amount of tolerable data loss. Data backups have always been, and continue to be, essential to providing a method of restoring lost or corrupted data. AWS Backup provides a cloud-based backup service. Discover how AWS Backup can be used to protect a wide variety of backup sources. Then configure a backup plan to determine settings such as backup frequency. Next, perform an on-demand backup, followed by restoring data from an AWS Backup. Lastly, work with Elastic Block Store (EBS) snapshots using Data Lifecycle Manager. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

Cloud computing services incur ongoing monthly charges, which are categorized as operating expenses (OPEX). AWS provides many ways to reduce monthly charges across all AWS services, along with powerful tools to analyze monthly charges. In this course, explore AWS Compute Optimizer and learn when to use various cost savings strategies. Next, configure the S3 Requester Pays option and work with Elastic Compute Cloud (EC2) instance reservations and spot instances. Then, tag resources for cost allocation purposes using the console, the CLI, and PowerShell. Analyze AWS charges using the Cost Explorer tool. Finally, create cost and usage budgets in order to track monthly expenditures and to be alerted when a certain threshold cost is reached. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

Monitoring IT solutions is normally done for a number of reasons, including optimizing service performance, detecting security anomalies, regulatory compliance, and minimizing cost. In this course, discover how CloudWatch can be used to track AWS and on-premises service performance. Next, explore how CloudWatch can provide alert notifications based on configured metric thresholds. Then use EventBridge rules and trigger actions for notifications. Lastly, work with CloudWatch dashboards and notifications between AWS accounts and monitor VPC network traffic. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

Continuous monitoring for security-related issues is at the core of overall AWS cloud security governance. In this course, explore how to detect security vulnerabilities using Amazon Inspector. Then focus on using Amazon GuardDuty to view security findings. Next, view Security Hub recommendations and the AWS Health dashboard to see the status of your AWS services. Finally, work with Amazon CloudTrail to audit AWS service usage and to ensure log integrity. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.

The SOA-C02 exam consists of multiple-choice questions and hands-on lab questions where testers will be required to answer questions by performing AWS configurations using the AWS management console or the AWS CLI. In this course, you will be planning solutions that address common business needs in the AWS environment. First, you will configure database settings to increase performance and availability and you will ensure secure network connections into the AWS cloud for users working remotely. Then you will enable settings to improve web application performance, automate common AWS tasks using the CLI, and apply cost-saving techniques to minimize monthly AWS charges. Next, practice how to limit resource access using AWS Identity and Access Management, automate patch deployment, and simplify EC2 instance remote management. Finally, use Route 53 to enable app failover and use Amazon Elastic File System (EFS) to share files across Linux instances. This course can be used to prepare for exam SOA-C02, AWS Certified SysOps Administrator - Associate.