AWS Certified DevOps Engineer Professional
Prepare for the AWS Certified DevOps Engineer Professional exam with this comprehensive course. Dive deep into advanced DevOps practices and ...
Show more
- Description
- Curriculum
- Reviews
Prepare for the AWS Certified DevOps Engineer Professional exam with this comprehensive course. Dive deep into advanced DevOps practices and AWS services, focusing on automation, continuous integration/continuous delivery (CI/CD), and infrastructure as code. Learn to design and implement scalable, highly available, and secure AWS architectures for deploying and managing applications. Explore advanced topics such as monitoring, logging, and troubleshooting using AWS CloudWatch, CloudTrail, and other monitoring tools. Gain hands-on experience with AWS services like CodePipeline, CodeDeploy, and Elastic Beanstalk to streamline software delivery pipelines. This course includes practical exercises and real-world scenarios to help you master the skills needed to excel as a DevOps Engineer on AWS. Ideal for DevOps professionals and experienced AWS users looking to validate their expertise in managing and automating AWS-based applications and infrastructure.
Domain 1: SDLC Automation
-
1
Implement CI/CD pipelines- Software development lifecycle (SDLC) concepts, phases, and models
- Pipeline deployment patterns for single- and multi-account environments
-
2
Integrate automated testing into CI/CD pipelines
- Different types of tests (unit tests, integration tests, acceptance tests, user interface tests, security scans)
- Reasonable use of different types of tests at different stages of the CI/CD pipeline
-
3
Build and manage artifacts
- Artifact use cases and secure management
- Methods to create and generate artifacts
- Artifact lifecycle considerations
-
4
Implement deployment strategies for instance, container, and serverless environments
- Deployment methodologies for various platforms (Amazon EC2, Amazon Elastic Container Service [Amazon ECS], Amazon Elastic Kubernetes Service [Amazon EKS], Lambda)
- Application storage patterns (Amazon Elastic File System [Amazon EFS], Amazon S3, Amazon Elastic Block Store [Amazon EBS])
- Mutable deployment patterns in contrast to immutable deployment patterns
- Tools and services available for distributing code (CodeDeploy, EC2 Image Builder)
Domain 2: Configuration Management and Infrastructure as Code
-
5
Define cloud infrastructure and reusable components to provision and manage systems throughout their lifecycle
- Infrastructure as code (IaC) options and tools for AWS
- Change management processes for IaC-based platforms
- Configuration management services and strategies
-
6
Deploy automation to create, onboard, and secure AWS accounts in a multi-account or multi-Region environment
- AWS account structures, best practices, and related AWS services
-
7
Design and build automated solutions for complex tasks and large-scale environments
- AWS services and solutions to automate tasks and processes
- Methods and strategies to interact with the AWS software-defined infrastructure
Domain 3: Resilient Cloud Solutions
-
8
Implement highly available solutions to meet resilience and business requirements
- Multi-AZ and multi-Region deployments (compute layer, data layer)
- SLAs
- Replication and failover methods for stateful services
- Techniques to achieve high availability (multi-AZ, multi-Region)
-
9
Implement solutions that are scalable to meet business requirements
- Appropriate metrics for scaling services
- Loosely coupled and distributed architectures
- Serverless architectures
- Container platforms
-
10
Implement automated recovery processes to meet RTO and RPO requirements
- Disaster recovery concepts (RTO, RPO)
- Backup and recovery strategies (pilot light, warm standby)
- Recovery procedures
Domain 4: Monitoring and Logging
-
11
Configure the collection, aggregation, and storage of logs and metrics
- How to monitor applications and infrastructure
- Amazon CloudWatch metrics (namespaces, metrics, dimensions, and resolution)
- Real-time log ingestion
- Encryption options for at-rest and in-transit logs and metrics (client-side and server-side, AWS Key Management Service [AWS KMS])
- Security configurations (IAM roles and permissions to allow for log collection)
-
12
Audit, monitor, and analyze logs and metrics to detect issues
- Anomaly detection alarms (CloudWatch anomaly detection)
- Common CloudWatch metrics and logs (CPU utilization with Amazon EC2, queue length with Amazon RDS, 5xx errors with an Application Load Balancer [ALB])
- Amazon Inspector and common assessment templates
- AWS Config rules
- AWS CloudTrail log events
-
13
Automate monitoring and event management of complex environments
- Event-driven, asynchronous design patterns (S3 Event Notifications or Amazon EventBridge events to Amazon Simple Notification Service [Amazon SNS] or Lambda)
- Capabilities of auto scaling for a variety of AWS services (EC2 Auto Scaling groups, RDS storage auto scaling, DynamoDB, ECS capacity provider, EKS autoscalers)
- Alert notification and action capabilities (CloudWatch alarms to Amazon SNS, Lambda, EC2 automatic recovery)
- Health check capabilities in AWS services (ALB target groups, Route 53)
Domain 5: Incident and Event Response
-
14
Manage event sources to process, notify, and take action in response to events
- AWS services that generate, capture, and process events (AWS Health, EventBridge, CloudTrail)
- Event-driven architectures (fan out, event streaming, queuing)
-
15
Implement configuration changes in response to events
- Fleet management services (Systems Manager, AWS Auto Scaling)
- Configuration management services (AWS Config)
-
16
Troubleshoot system and application failures
- AWS metrics and logging services (CloudWatch, X-Ray)
- AWS service health services (AWS Health, CloudWatch, Systems Manager OpsCenter)
- Root cause analysis
Domain 6: Security and Compliance
-
17
Implement techniques for identity and access management at scale
- Appropriate usage of different IAM entities for human and machine access (users, groups, roles, identity providers, identity-based policies, resource-based policies, session policies)
- Identity federation techniques (using IAM identity providers and AWS IAM Identity Center [AWS Single Sign-On])
- Permission management delegation by using IAM permissions boundaries
- Organizational SCPs
-
18
Apply automation for security controls and data protection
- Network security components (security groups, network ACLs, routing, AWS Network Firewall, AWS WAF, AWS Shield)
- Certificates and public key infrastructure (PKI)
- Data management (data classification, encryption, key management, access controls)
-
19
Implement security monitoring and auditing solutions
- Security auditing services and features (CloudTrail, AWS Config, VPC Flow Logs, CloudFormation drift detection)
- AWS services for identifying security vulnerabilities and events (GuardDuty, Amazon Inspector, IAM Access Analyzer, AWS Config)
- Common cloud security threats (insecure web traffic, exposed AWS access keys, S3 buckets with public access enabled or encryption disabled)
Please, login to leave a review
