Notes for the AWS Certified DevOps Engineer – Professional course: 126 lessons across 7 sections.

​

Introduction

• Introduction
• Course Introduction Prerequisites Details Audience Outcomes and Structure
• Why AWS DevOps Engineer Professional Certification
• Demo RegisteringTaking an Exam for the First Time What to Know
• Demo DevOps Engineer Professional Exam Guide What to focus on
• Where Are You Now Take an Assessment Explained
• Demo The KodeKloud AWS Playgrounds
• Setting up your own AWS Account A walk through

​

Domain 1 - SDLC Automation

• Fundamentals of CICD Pipelines
• Understanding SDLC Concepts Phases and Models
• Single vs Multi Account Pipelines in AWS
• Using Git Repositories With AWS Where Is CodeCommit
• Demo Simple CICD Pipeline With GitHub and CodePipeline
• CodeBuild and the Buildspec file
• Demo Basic Buildspec Usage
• Storing Secrets on AWS
• Demo Secrets in CodeBuild Using Secrets Manager and SSM Parameter Store
• Types of Automated Test in a CICD Pipeline
• Artifact Lifecycle and Secure Storage for Code
• Demo Storing Artifacts in CodeArtifact
• Demo EC2 Image Builder in Action
• Deployment Methods for EC2 ECS EKS and Lambda Overview
• Demo ECS Deployment Methods in Action
• Demo Serverless Deployments and Traffic Shifting With Lambda
• Storage Patterns for Deployment Artifacts and Applications
• Demo IAM and Cross Service Permissions for CodeArtifact and S3
• Immutable vs Mutable Deployments
• Demo Immutable Infrastructure With CloudFormation
• BlueGreen Deployments for Multi Service Applications
• Troubleshooting Common Failures in Advanced Deployments
• Demo Debugging a Failed Deployment

​

Domain 2 - Configuration Management and IaC

• What Is Infrastructure as Code for AWS
• Configuration Management in AWS
• Demo AWS Config for Basic Resource Inventory
• The Basics of CloudFormation
• Demo Building Your First Stack
• Configuration Drift and Stack Policies
• Demo Drift Detection in CloudFormation
• Modularizing CloudFormation Templates
• Demo Nested Stacks in CloudFormation
• Enforcing Best Practices With cfn lint CloudFormation Guard and Automated Checks
• Multi Account Strategies
• Demo CloudFormation StackSets
• AWS Control Tower and Account Governance
• Demo Control Tower and AWS Organizations
• The AWS CDK Overview
• Demo Building With the CDK
• Systems Manager Overview Eighteen Subservices of SSM
• Demo State Manager and the Run Command Services
• AWS AppConfig Dynamic App Configuration
• Demo Rolling Out Config Changes With AppConfig
• Service Catalog and Reusable Templates
• Demo Service Catalog Portfolio
• Enforcing Governance With AWS Config

​

Domain 3 - Resilient Cloud Solutions

• Resilience Concepts 101 in AWS
• Identifying Single Points of Failure
• Demo Basic Multi AZ Setup Using Instance Deployments
• EC2 Auto Scaling and Load Balancing
• Demo Autoscaling From Idea to Scale in EC2
• RDS High Availability Options
• Demo RDS Multi AZ Read Replicas
• NoSQL HA With DynamoDB
• Demo DynamoDB Global Table
• ECS and EKS Resiliency Considerations
• Demo ECS With Multi AZ
• Lambda and Serverless High Availability
• Edge Services for CloudFront Functions and Lambda Edge
• Demo With and Without CloudFront
• Global Services for Failover Global Accelerator and Route 53
• DR Concepts RTORPO Pilot Light Warm Standby and ACtiveACtive
• Demo Cross Region Backup and Replication
• Demo Route 53 and Global Accelerator for DR Failover

​

Domain 4 - Monitoring and Logging

• Why Metrics Logs and Traces Matter
• Demo Core AWS Monitoring Tools CloudWatch X ray Config and CloudTrail
• CloudWatch Logs and Log Insights Beyond the Basics
• Demo Pushing Custom Metrics to CloudWatch Logs
• Demo Setting Up Custom Log Retention and Encryption
• Subscription Filters and Log Streams to Kinesis Lambda and OpenSearch
• Demo Kinesis Data Streams for Log Ingestion
• Demo CloudWatch Metrics and Namespaces
• Demo Publishing Custom Metrics
• Demo CloudWatch Dashboards and Widgets
• Advanced CloudWatch Alarms With Anomaly Detection and Alarm Conditions
• Demo Configuring Advanced Alarms and Notifications
• Event Driven Notifications
• AWS X Ray for Tracing
• Demo Instrumenting an App With X ray
• CloudTrail for API Logging
• AWS Config and Detective Work
• CloudWatch Log Insights
• Demo Real Time Log Analysis With Insights
• EventBridge for Automated Responses

​

Domain 5 - Incident and Event Response

• Why Incident and Event Response Matter
• Services for Incident Response Overview
• AWS Health and Personal Health Dashboards
• Demo Subscribing to AWS Health Events
• Amazon EventBridge and SNS
• Demo EventBridge Rule to SNS and Lambda
• AWS Systems Manager Automation
• Demo Remediation Runbook
• Demo AWS Config Auto Remediation
• Systematic Troubleshooting
• Demo Debugging and EC2 Outage
• OpsCenter and Incident Tracking
• Demo OpsCenter Integration
• Demo AWS Fault Injection Simulator

​

Domain 6 - Security and Compliance

• Shared Responsibility and Security Pillars
• Beyond the Basics of IAM
• Multi Account Security With AWS Organizations
• Demo Setting Up SCPs and OUs With AWS Organizations
• Demo Cross Account Roles and How to Assume Them
• IAM Policy Debugging With IAM
• Federation and Single Sign On
• Demo AWS Identity Center Setup
• AWS KMS and Customer Managed Keys
• Demo S3 and EBS Using KMS and SSE
• Secrets Management in AWS for RDS
• AWS Config and Auto Remediation
• Demo Config Rules for Compliance
• Security Hub and Consolidating Findings in AWS
• Amazon GuardDuty Threat Detection in AWS
• Demo GuardDuty Alerts
• Amazon Macie Watching S3 for PII
• Demo Network Security From Ingress to APP on AWS
• CloudTrail and Security Auditing
• Demo Querying CloudTrail With Athena