Introduction & Prerequisites
- Course Introduction
- Why AWS Certified CloudOps Engineer Associate Certification
- Course Overview
- Demo RegisteringTaking an Exam for the First Time What to know
- Demo CloudOps Engineer Associates Exam Guide What to focus on
- Where Are You Now Take an assessment to know what you dont know
- Demo The KodeKloud AWS Playgrounds
- Demo Setting Up Your Own AWS Account A walkthrough
Domain 1: Monitoring, Logging, and Remediation
- Importance of Monitoring and Logging in Cloud Operations
- CloudWatch and CloudTrail Overview
- Logging With CloudWatch Logs
- Demo Finding Logs with CloudWatch Logs
- Discovering With CloudWatch Log Insights
- Auditing With CloudTrail
- Demo Tracking Access with CloudTrail
- Monitoring With CloudWatch
- Using CloudWatch Agent to Collect Metrics and Logs
- Demo Installing and Configuring CloudWatch Agent
- Understanding and Responding to CloudWatch Alarms
- Configuring Metric Filters for Specific Log Data
- Demo Creating CloudWatch Alarms
- Building Cloudwatch Dashboards for Visualization
- Demo Building a simple CloudWatch Dashboard
- Configuring Notifications With SNS
- Demo Setting up SNSSQS to send Messages
- AWS EventBridge Introduction
- Configuring EventBridge Rules to Trigger Actions
- Systems Manager and Its Sub Services Overview
- Remediation With Systems Manager Automation Runbooks
- Triggering Automated Actions With AWS Config
- Demo Creating and Executing Automation Runbooks
- Compute Platform Selection Analyzing Performance Metrics
- EC2 Instance Types and Host Size for Optimal Performance
- Monitoring EBS Metrics for Performance and More
- S3 Storage Tiers and Their Uses The Cost and Performance Perspective
- S3 Transfer Acceleration and Multipart Uploads Performance Enhancing Features
- Monitoring RDS Metrics for database performance optimization
- Modifying RDS Configurations With Performance Insights and RDS Proxy
- Enhanced EC2 Add Ons for Performance
- Placement Groups and Their Use
- Understanding Lambdas Performance Capabilities and Limitations
- Navigating Concurrency Cold Starts and Other Enhancements for Lambda
Domain 2: Reliability and BCP
- Importance of Reliability and Business Continuity in Cloud Operations
- AWS Auto Scaling Overview
- The Various Scaling Types in AWS Auto Scaling
- Demo Setting up Various Autoscaling Plans
- Understanding Caching and Caching Strategies
- Implementing Caching With Elasticache
- Implementing Caching With DynamoDB and DAX
- General Replication Options for Data Services on AWS
- AWS RDS Replication Types Introduction
- AWS Aurora Replication Options Introduction
- Demo Setting up AWS RDS Multi AZ Cluster Deployment with Read Replicas
- Understanding and Exploring Global Tables on Dynamodb
- Demo Setting up Global Tables with DynamoDB
- Understanding Loosely Coupled and Various Scenarios
- High Availability and Fault Tolerance in AWS Introduction
- Understanding Elastic Load Balancing and Load Distribution
- Adding Route 53 Health Checks With an ELB and Route 53 Policies
- Adding in Global Accelerator With ELB
- Single AZ vs Multi AZ in Service and Deployments
- Multi AZ Architectures for Various AWS Services Overview
- Strategies for Fault Tolerant Workloads on AWS
- Demo Implementing Fault Tolerant Storage using EFS
- Backup and Snapshot Options on AWS Overview
- Demo Configuring RDS Snapshots for your Database
- Configuring AWS Backup for Various Services
- Performing Point in Time Restores for Various Database Services
- Promoting Read Replicas as a Restoration
- Demo Promoting your own Read Replica to a Primary
- Versioning and Lifecycle Options in AWS Overview
- Implementing Versioning on S3
- Implementing Lifecycle Rules on S3
- Demo Memory Stress on Enabling Versioning and Lifecycle Rules for S3
- CRR and DR Options in AWS Overview
- Setting Up S3 for CRR
- Demo Setting up S3 for CRR
Domain 3: Deployment, Provisioning, and Automation
- Cloud Resource Provisioning Introduction
- Importance of Automation and IaC in Service Provisioning
- Amazon Machine Images in AWS Overview
- Building With EC2 Image Builder for Automated Image Creation VMs and Containers
- Demo Creating and Managing AMIs with EC2 Image Builder
- CloudFormation Overview
- Creating and Managing Services With CloudFormation Templates
- Demo The Anatomy of a CloudFormation Template
- Advanced Automation Features of CloudFormation
- Demo Creating a simple S3 Bucket with CloudFormation
- Strategies for Service Provisioning Across AWS Globally
- Utilizing CloudFormation StackSets for Distributing Globally
- Discovering Services Using the Resource Access Manager
- Understanding Different Deployment Strategies
- Configuring Different Deployment Strategies for Various AWS Services
- Common Deployment Issues and Challenges
- Strategies for Identifying and Remedying Deployment Issues
Domain 4: Security and Compliance
- Security and Compliance Policies in AWS Overview
- IAM Overview
- Implementing IAM Features MFA Password Policies and Roles
- Configuring IAM Policies for Fine Grained Access Control
- Demo Configuring Users and Group Access and Policies
- Utilizing Permissions Boundaries to Scope User Permissions
- Enabling Service Control Policies to Scope Account Permissions
- Using Organizational Policies to Scope Organization Permissions
- Auditing Access Policies With IAM Policy Simulator
- Troubleshooting Access With IAM Access Analyzer
- Trusted Advisor Security Checks Overview
- Multi Account in AWS Strategies
- Multi Account Security With AWS Organizations
- Exploring Multi Account Security With AWS Control Tower
- Protection Strategies Overview
- Classifying Data Based on Sensitivity and Regulatory Requirements
- Importance of Network Defense
- VPC and Its Defenses Overview
- Demo Exploring the VPCs Security Groups and NACLs
- Network Firewall Service Overview
- AWS GuardDuty Overview
- Encryption at Rest Options for AWS Services Overview
- Demo Migrating an EBS Volumes from Unencrypted to Encrypted
- Encryption in Transit Options for AWS Services Overview
- Key Management Service KMS
- KMS Around Encryption Keys Best Practices
- AWS Inspector Overview
- WAF and Shield Overview
- Using and Storing Secrets on AWS Secrets Manager
- Using and Storing Secrets on AWS Systems Manager Parameter Store
- Demo Setting up Secrets Manager with RDS
- Security Hub Overview
- AWS Config Overview
- AWS Audit Manager Overview
Domain 5: Networking and Content Delivery
- Configuring VPC Components Subnets Route Tables and Security GroupsNACLs
- Setting Up External Access NAT Gateways Internet Gateways and Egress Only IGW
- Configuring EC2 Connectivity Using Systems Manager Session Manager
- Implementing Private Service Connectivity Using VPC Endpoints and PrivateLink
- Internal Network to Network Connectivity With VPC Peering
- Internal Network to Network Connectivity With Transit Gateway
- Client and Site to Site VPN Overview
- AWS Direct Connect
- Route 53 Overview
- Configuring Domain Names Hosted Zones and Records
- Route 53 Routing Policies
- Route 53 Resolvers Introduction
- Setting Up DNS Forwarding and Conditional Forwarding
- CloudFront Overview
- Demo Exploring the Options with CloudFront
- Access Controls and Security With CloudFront
- Configuring Amazon S3 for Hosting Static Sites
- Common Misconfigurations and Troubleshooting VPC Issues
- Networking in AWS Understanding Various Logs Available
- CloudFront Caching Mechanism and Potential Issues
- VPN Direct Connect Peering and VPC Endpoints Common Issues
Domain 6: Cost and Performance Optimization
- Importance of Cost optimization
- Cost Optimization Strategies Overview and Best Practices
- Configuring Cost Allocation Tags
- Tagging Resources for Cost Management Best Practices
- Using Tools Like Trusted Advisor and Cost Explorer to Find Unused Resources
- Using Tools Like Cost Optimizer to Find Underutilized Resources
- Setting Up AWS Budgets to Monitor and Control Costs
- Configuring Billing Alarms to Send Notifications for Cost Monitoring
- EC2 Spot Instances Pros and Cons
- What Workloads Are Perfect for EC2 Spot Instances
- Highly Managed AWS Services Overview
- Trade Offs Between Managed Services and Self Managed Services
Summary
- Summary of Domain 1 Monitoring Logging and Remediation
- Summary of Domain 2 Reliability and Business Continuity
- Summary of Domain 3 Deployment Provisioning and Automation
- Summary of Domain 4 Security and Compliance
- Summary of Domain 5 Networking and Content Delivery
- Summary of Domain 6 Cost and Performance Optimization