Course: AWS Solutions Architect Professional (Exam SAP-C02)

• The AWS Global Infrastructure facilitates the deployment of AWS

• services that meet business needs. In recent years, data privacy
• legislation has required cloud professionals to understand how
• cloud solutions can protect sensitive data. In this course,
• discover how regions and availability zones affect resource
• placement and high availability. Then, explore the AWS
• Well-Architected Framework, and match AWS services to business
• needs. Next, view existing service quotas and limits and learn how
• to request quota increases. Lastly, use Amazon Macie to classify S3
• data to facilitate the securing of personally identifiable
• information (PII). This course can be used to prepare for exam
• SAP-C02, AWS Certified Solutions Architect - Professional.

• AWS Virtual Private Clouds (VPCs) provide virtual network

• infrastructure for AWS services. In this course, discover how VPCs
• and subnets can address cloud networking needs. Create VPCs and
• subnets using the console, the command-line interface (CLI), and
• PowerShell. Next, configure VPC dynamic host configuration protocol
• (DHCP) and domain name system (DNS) settings as well as subnet IP
• addressing. Lastly, create and assign Elastic IP addresses to
• provide public IP addressing. This course can be used to prepare
• for exam SAP-C02, AWS Certified Solutions Architect -
• Professional.

• Virtual Private Cloud (VPC) peering allows for service and

• network connectivity between VPCs and various AWS services. Virtual
• Private Networks (VPNs) allow for secured connections to AWS and
• Direct Connect provides dedicated network circuits to AWS. In this
• course, you will learn about managing AWS network configurations
• related to VPC peering, VPNs, Direct Connect, and network gateways.
• Discover when to use VPC peering, how to enable VPS peering using
• the console, and how endpoints are used for AWS service
• connectivity. Next, learn how to configure site-to-site and client
• VPN connections to AWS. Finally, practice configuring various
• network gateways. This course can be used to prepare for exam
• SAP-C02, AWS Certified Solutions Architect - Professional.

• The Domain Name System (DNS) is primarily used for forward

• lookups, where a Fully Qualified Domain Name (FQDN) is provided and
• the DNS service resolves the name to an IPv4 or IPv6 address. In
• this course, discover how AWS Route 53 addresses DNS functionality.
• Create DNS-hosted zones in AWS and DNS records in those zones.
• Next, register a public DNS name using Route 53 and configure
• Virtual Private Cloud (VPC) DNS settings. Lastly, explore when
• various Route 53 traffic policies should be used and configure the
• DNS Firewall. This course can be used to prepare for exam SAP-C02,
• AWS Certified Solutions Architect - Professional.

• AWS S3 buckets provide object storage in the AWS Cloud, and

• stored objects can use storage tiers to enhance performance or
• optimize costs. AWS Storage Gateway services offer an on-premises
• cache of cloud-stored files and Amazon CloudFront is the AWS
• content delivery network (CDN) solution. Through this course, learn
• various ways to create, deploy, and manage S3 buckets and use AWS
• CloudFront. Discover how to use the Console, the CLI, and
• PowerShell to create S3 buckets and manage their contents. Next,
• learn how to configure object storage tiers based on object
• accessibility requirements. Finally, investigate how to configure
• S3 bucket policies and deploy AWS Storage Gateway. This course can
• be used to prepare for exam SAP-C02, AWS Certified Solutions
• Architect - Professional.

• AWS provides various storage services, including databases,

• among other AWS cloud storage options. Cloud technicians must know
• when to use a specific database engine and how it should be
• configured to accommodate the related workload. In this course,
• discover how and when to use AWS database solutions. Then, plan
• database usage in accordance with anticipated workloads. Next,
• deploy and manage various database solutions such as MySQL,
• Microsoft SQL Server, and DynamoDB. Next, discover when to use
• ElastiCache database caching. Lastly, create and attach an EBS
• volume and configure an Elastic File System (EFS). This course can
• be used to prepare for exam SAP-C02, AWS Certified Solutions
• Architect - Professional.

• Whether deployed manually or provisioned automatically in the

• background for managed services, Amazon Elastic Compute Cloud (EC2)
• instances are the compute workhorse in AWS. EC2 instances can be
• deployed and managed for Windows and Linux using a variety of
• tools. In this course, discover how to deploy Linux and Windows EC2
• instances using the console, the command-line interface (CLI), and
• PowerShell. Next, learn how to remotely manage Windows using Remote
• Desktop Protocol (RDP) and Linux using Secure Shell Protocol (SSH).
• Finally, deploy instances using Fleet Manager and Lightsail. This
• course can be used to prepare for exam SAP-C02, AWS Certified
• Solutions Architect - Professional.

• Suspending Elastic Compute Cloud (EC2) workloads is done through

• instance hibernation, which allows the rapid startup of EC2
• instance workloads. The underlying compute horsepower for EC2
• instances must be monitored and adjusted accordingly to accommodate
• running workloads. This can be done during instance deployment as
• well as afterward. In this course, discover how to manage EC2
• instance hibernation settings during deployment, and how to enter
• hibernation mode using the console and the AWS command line
• interface (CLI). Next, monitor EC2 instance performance metrics and
• change the instance type using the graphical user interface (GUI)
• and command line tools. Lastly, configure Auto Scaling for the
• automatic adjustment of the number of underlying instances
• supporting a workload. This course can be used to prepare for exam
• SAP-C02, AWS Certified Solutions Architect - Professional.

• AWS offers a variety of application solutions to meet specific

• app requirements. In particular, application containers provide a
• logical boundary for application files and settings. Through this
• course, discover when and how to work with containerized
• applications in the AWS Cloud. Learn how to install Docker on Linux
• and Windows platforms. Next, practice deploying a containerized
• application, container image repository, and an Amazon Elastic
• Kubernetes Service (EKS) cluster in the cloud. Finally, discover
• when and how to use AWS Fargate in conjunction with application
• containers. This course can be used to prepare for exam SAP-C02,
• AWS Certified Solutions Architect - Professional.

• Software developers can leverage a variety of AWS services to

• expedite the creation and management of custom software solutions.
• You will begin this course with storing various types of secrets
• that can be retrieved by code, centrally using AWS Secrets Manager.
• Next, you will deploy a message queue and Step and Lambda
• functions. You will then discover how continuous integration and
• continuous deployment (CI/CD) pipelines apply to AWS. Moving on,
• you will discover how application deployment stacks work with
• Elastic Beanstalk and how to use the OpenSearch service. Lastly,
• you will deploy a Cloud9 integrated development environment (IDE).
• This course can be used to prepare for exam SAP-C02, AWS Certified
• Solutions Architect - Professional.

• A good IT security strategy involves security at all phases of

• IT service usage, from planning to deployment and maintenance. A
• thorough understanding of network protocols, ports, and IP
• addressing helps to properly select and deploy AWS network security
• solutions. Various AWS resources such as Virtual Private Clouds
• (VPCs), network access control lists (ACLs), and Security Groups
• require an in-depth knowledge of these networking components. In
• this course, discover how AWS supports standard security concepts
• such as Defense in Depth and least privilege. Then, review the Open
• Systems Interconnection (OSI) model and network protocols such as
• IPv4 and IPv6. Next, discover how network services listen on a
• given port number, and then examine a network traffic capture.
• Lastly, enable threat detection with AWS GuardDuty, and review AWS
• Trusted Advisor recommendations. This course can be used to prepare
• for exam SAP-C02, AWS Certified Solutions Architect -
• Professional.

• Providing data confidentiality and integrity is possible using

• various cryptographic solutions. This helps prevent data tampering
• and exposure of sensitive data to unauthorized parties. AWS
• supports the creation and management of encryption keys and digital
• security certificates. In this course, discover how cryptography
• can provide data integrity and confidentiality. Then, examine the
• public key infrastructure (PKI) hierarchy and how certificates can
• be used to secure AWS services. Next, work with AWS Key Management
• Service (AWS KMS) to manage encryption keys and AWS Certificate
• Manager to create a private certificate authority (CA) and issue
• PKI certificates. Finally, practice renewing certificates, enabling
• HTTPS, and encrypting an Elastic Block Storage (EBS) volume. This
• course can be used to prepare for exam SAP-C02, AWS Certified
• Solutions Architect - Professional.

• AWS supports the creation and management of users and groups.

• Settings such as password policies and resource policies can secure
• user sign-in and restrict access to specific AWS resources in
• accordance with roles. Multi-factor authentication (MFA) can be
• enabled to mitigate common user account cracking techniques. In
• this course, discover how AWS provides identity and access
• management (IAM) capabilities. Explore how to create and manage IAM
• user accounts using the console, the CLI, and PowerShell. Next,
• configure user password policies and test user sign-in. Then,
• manage IAM groups using the console, the CLI, and PowerShell.
• Moving on, you will configure IAM policies and roles, enable user
• MFA to harden user sign-ins, and use the IAM Identity Center
• console. Lastly, discover how identity federation can provide
• centralized trusted identities. This course can be used to prepare
• for exam SAP-C02, AWS Certified Solutions Architect -
• Professional.

• A directory service is a central repository of network

• configuration items, such as user accounts. AWS provides a variety
• of directory service options to meet customer needs, including
• identify federation. In this course, compare authentication to
• authorization and discover how they relate to AWS resource access.
• Then, explore AWS-specific directory service options and join an
• Elastic Compute Cloud (EC2) instance to an AWS directory service.
• Next, create AWS Managed Active Directory (AD) user and group
• accounts. Finally, deploy Simple AD and examine how identify
• federation provides a central trusted identity provider for
• applications. This course can be used to prepare for exam SAP-C02,
• AWS Certified Solutions Architect - Professional.

• Network security includes controlling which network traffic is

• allowed into and out of networks and virtual machines. Network
• access control lists (ACLs) serve as packet filtering firewalls to
• control network traffic at the subnet level while security groups
• control network traffic flow to specific virtual machine instances.
• In this course, discover how to create network ACLs using the AWS
• console, the CLI, and PowerShell. Then, create rules in the network
• ACL to restrict inbound and outbound traffic and associate the
• network ACL with a subnet. Next, create security groups using the
• AWS console, the CLI, and PowerShell and learn how to create
• security group rules and associate a virtual machine. Finally,
• deploy the AWS Network Firewall for network perimeter protection
• including intrusion prevention. This course can be used to prepare
• for exam SAP-C02, AWS Certified Solutions Architect -
• Professional.

• AWS provides solutions for governance of the AWS environment in

• compliance with organizational security requirements. AWS Config
• provides methods of centrally managing and inventorying AWS
• instances. In this course, explore the creation and management of
• AWS Organizations. Next, discover how to set the maximum allowed
• permissions with service control policies (SCPs) and work with AWS
• Config to track resource configuration changes. Finally, use
• CloudFormation templates to automate the deployment of AWS
• resources. This course can be used to prepare for exam SAP-C02, AWS
• Certified Solutions Architect - Professional.

• Proactive planning goes a long way in minimizing the impact of

• IT service disruptions. AWS provides methods of ensuring IT service
• high availability across a variety of services, data availability,
• and long-term data retention. In this course, you will discover
• disaster recovery terminology and common strategies. Then, you will
• work with Amazon Simple Storage Service (S3) Glacier archiving, S3
• replication, versioning, and lifecycle management. Next, explore
• Elastic Block Storage (EBS) volume snapshots. Finally, you will
• configure a load balancer to improve application performance and
• resiliency to failure. This course can be used to prepare for exam
• SAP-C02, AWS Certified Solutions Architect - Professional.

The Recovery Point Objective (RPO) determines the maximum amount of tolerable data loss. Data backups are essential to providing a method of restoring lost or corrupted data. Through this course, learn about AWS Backup, a cloud-based backup service. Discover how AWS Backup can be used to protect a wide variety of backup sources. Next, practice configuring a backup plan, executing an on-demand backup, and restoring data from an AWS Backup. Finally, work with MySQL database replicas and snapshots and learn how to restore data from a MySQL database snapshot. This course can be used to prepare for exam SAP-C02, AWS Certified Solutions Architect - Professional.

Cloud computing services incur ongoing monthly charges, which are categorized as operating expenses (OPEX). AWS provides many ways to reduce monthly charges across all AWS services, in addition to powerful tools to analyze monthly charges. Through this course, learn how to manage monthly AWS cloud computing charges. Work with EC2 instance reservations and Spot Instances. Next, practice tagging resources for cost allocation purposes using the console, CLI, and PowerShell and discover how to analyze AWS charges using the Cost Explorer tool. Finally, learn how to create cost and usage budgets to track monthly expenditures and send alerts when a certain threshold cost is reached. This course can be used to prepare for exam SAP-C02, AWS Certified Solutions Architect - Professional.

Monitoring of IT solutions can be done for a number of reasons. Optimizing service performance, detecting security anomalies, regulatory compliance, and minimizing cost are a few of those reasons. Through this course, learn how to utilize continuous monitoring to improve AWS service performance, security, and efficiency. Discover how CloudWatch can be used to track AWS service performance and provide alert notifications based on configured metric thresholds. Next, work with S3 Storage Lens to analyze S3 storage patterns, configure AWS CloudTrail audit settings, and use AWS Systems Manager to centrally manage EC2 instances. Finally, learn how to configure cross-account event notifications and monitor VPC network traffic. This course can be used to prepare for exam SAP-C02, AWS Certified Solutions Architect - Professional.

Migrating on-premises or other cloud services to AWS allows organizations to continue using their existing investment. Physical and virtual servers, applications, and data can be migrated into AWS using a variety of methods. In this course, discover migration strategies for getting services and data into AWS efficiently. Explore various AWS Migration Hub capabilities. Learn how to perform a migration discovery, and migrate servers into AWS. Lastly, explore AWS Snow Family options for the large-scale transfer of data into the AWS cloud. This course can be used to prepare for exam SAP-C02, AWS Certified Solutions Architect - Professional.