Please enable JavaScript.

Coggle requires JavaScript to display documents.

AWS Certified Solutions Architect - Associate 2017 (Services (Analytics…

- - - - DevOps Professional
      - Certified Solutions Architect Pro
    - - Certified SysOps Administrator Associate
      - Certified Developer Associate
      - Certified Solutions Architect Associate
        
        The Exam Blue Print
        AWS Certified Solutions Architect Associate
        Weight
        
        Designing highly available, cost efficient, fault tollerant, scaleable systems -> 60%
        
        Data Security -> 20%
        
        Implementing / Deploying -> 10%
        
        Troubleshooting -> 10%
        
        80 minutes
        60 questions (can change)
        Scenario based questions
        Multiple choice
        70% to pass the exam
        Valid for 2 years (half of the price to renew)
    - - Security
      - Advanced Networking
      - Big Data
- - - - CDN - A content delivery network is a system of distributed servers (network)
        that deliver webpages and other web content to a user based on the geographic
        locations of the user, the region origin of the webpage and a content delivery server.
        
        Key Terminology
        
        Edge Location
        
        The location where content will be cached.
        
        Separate to an AWS Region/AZ
        
        Edge locations are not just READ only, you can write to them too.
        
        Objects are cached for the life of the TTL(Time to Live)
        
        You can clear cached objcts, but you will be charged.
        
        Origin
        
        The origin of all the files that the CDN will distribute.
        
        This can be either an S3 Bucket, an EC2 Instance, an Elastic Load Balancer or Route53
        
        Distribution
        
        The name given the CDN which consists of a collection of Edge Locations.
        
        Types of Distribution:
        
        Web Distribution - Typically used for website
        
        RTMP - Used for media streaming
        
        Characteristics
        Amazon CloudFront can be used to deliver your entire website,
        including dynamic, static, streaming, and interactive content
        using a global network of edge locations. Requests for your content
        are automatically routed to the nearest edge location, so content is
        deliverd with the best possible performance.
  - - - S3 - Simple Storage Service
        S3 provides developers and IT teams with secure, durable, highly-scalable object storage. Amazon S3 is easy to use, with a simple web services interface to store and retrieve any amount of data from anywhere on the web.
        
        Characteristics
        
        S3 is Object based i.e. allows you to upload files;
        
        Files can be from 0 Bytes to 5 TB;
        
        There is unlimited storage;
        
        Files are stored in Buckets (Bucket is a folder)
        
        S3 is a universal namespace, that is, names must be unique globally;
        
        Bucket URL: https://s3-region.amazonaws.com/bucket-name
        
        When you upload a file to S3 you will receive a HTTP 200 code if the upload was successful.
        
        Built for 99.99% availability for the S3 platform;
        
        Amazon guarantee 99.9% availability;
        
        Amazon guarantee 99.999999999% durability for S3 information. (11 x 9's)
        
        Core
        Objects consist of the following:
        
        Key - this is simply the name of the object;
        
        Value - this is simply the data and is made up of a sequence of bytes.
        
        Version ID - important for versioning;
        
        Metadata - data about the data you are storing;
        
        Subresources:
        
        Access Control Lists
        
        Policies
        
        Torrent
        
        Data Consistency Model for S3
        
        Read after Write consistency for PUTS of new Objects;
        
        Eventual Consistency for overwrite PUTS and DELETES(can take some time to propagate)
        
        Features
        
        Tiered Storage Available
        
        Lifecycle Management
        
        Versioning
        
        Events
        
        Encryption
        
        Cross-region replication
        
        Logging
        
        Transfer Acceleration
        
        Static Website Hosting
        
        Secure your data using Access Control Lists and Bucket Policies
        
        Analytics
        
        Metrics
        
        Inventory
        
        Lifecycle Management
        
        Can be used in conjunction with versioning
        
        Can be applied to current versions and previous versions
        
        Following actions can now be done:
        
        Transition to the Standard - IA Storage Class (128Kb and 30 days after the creation date)
        
        Archive to the Glacier Storage Class (30 days after IA, if relevant)
        
        Permanently Delete (S3 and Glacier)
        
        Glacier is not available in South America (São Paulo) nor Asia Pacific (Singapore)
        Glacier requires 90 days storage minimum
        
        Storage Tiers/Classes
        * S3 Standard - is 99.9% availability, 99.999999999% durability, stored redundantly accross multiple devices in multiple facilities and is designed to sustain the loss of 2 facilities concurrently.
        * S3 Standard IA (Infrequently Accessed) - for data that is accessed less frequently, but requires rapid access when needed. Lower fee than S3, but you are charged a retrieval fee.
        * Reduced Redundancy Storage - Designed to provide 99.99% durability and 99.99% availability of objects over a given year.
        * Glacier - Very cheap, but used for archival only. It takes 3 - 5 hours to restore from Glacier.
        
        S3 Charges
        
        Storage
        
        Requests
        
        Storage Management Pricing (use tags to track cost)
        
        Data Transfer Pricing
        
        Transfer Acceleration
        
        S3 Transfer Acceleration
        S3 Transfer Acceleration - enables fast, easy, and secure transfers of files over long distances between your end users and S3 bucket. Transfer Acceleration takes advantage of Amazon CloudFront's globally distributed edge locations. As the data arrives at an edge location, data is routed to Amazon S3 over an optimized network path.
  - - - Features
        
        Centralized control of your AWS account
        
        Shared Access to your AWS account
        
        Granular Permissions
        
        Identity Federation(including Active Directory, Facebook, Linkedin etc)
        
        Multifactor Authentication
        
        Provide temporary access for users/devices and services where necessary
        
        Allows you to set up your own password rotation policy
        
        Integrates with many different AWS services
        
        Supports PCI DSS Compliance
      - Core
        
        Users
        End Users(people)
        
        Groups
        A collection of users under onde set of permissions
        
        Roles
        You create roles and can then assign then assign them to AWS resources
        
        Policies
        A document that defines one(or more) permission.
      - First Steps
        
        Enable Billing Alerts
        
        My Billing Dashboard -> Preferences -> Receive Billing Alerts -> Save Preferences
        
        Go to Cloud Watch Service -> Billing -> Create Alarm
        
        Customize IAM users sign-in link
        
        Activate MFA on your root account
        
        Create individual IAM users
        
        Use groups to assign permissions
        
        Apply an IAM password policy
      - Characteristics
        
        IAM is universal. It does not apply to regions at this time;
        
        The root account is simply the account created when first setup your aws account. It has complete admin access;
        
        New users have NO permissions when first created;
        
        Access types:
        Programmatic access - Enables an access key ID and secret access key for the AWS API, CLI, SDK, and other development tools AWS Management Console access - Enables a password that allows users to sign-in to the AWS Management Console
        
        Programmatic access: New users are assigned Access Key ID & Secret Access Keys when first created
        These are not the same as a password, and you cannot use the access key and secret key to login in to the console. You can use this to access AWS via APIs and command line however.
        
        You only get to view the User Access Info once. If you lose them, you have to regenerate them. So save them in a secure location.
        
        Always setup Multifactor Authentication on your root account.
        
        You can create and customize your own password rotation policies.