Module 1: Design Solutions for Organizational Complexity
Task 1.1: Architect network connectivity strategies.
- AWS Global Infrastructure
- AWS networking concepts (Amazon VPC, AWS Direct Connect, AWS VPN, transitive routing, AWS container services)
- Hybrid DNS concepts (Amazon Route 53 Resolver, on-premises DNS integration)
- Network segmentation (subnetting, IP addressing, connectivity among VPCs)
- Network traffic monitoring
Task 1.2: Prescribe security controls.
- AWS IAM and AWS IAM Identity Center
- Route tables, security groups, and network ACLs
- Encryption keys and certificate management (AWS KMS, AWS Certificate Manager)
- AWS security, identity, and compliance tools (AWS CloudTrail, AWS Identity and Access Management Access Analyzer, AWS Security Hub, Amazon Inspector)
Task 1.3: Design reliable and resilient architectures.
- Recovery time objectives (RTOs) and recovery point objectives (RPOs)
- Disaster recovery strategies (AWS Elastic Disaster Recovery, pilot light, warm standby, and multi-site)
- Data backup and restoration
Task 1.4: Design a multi-account AWS environment.
- AWS Organizations and AWS Control Tower
- Multi-account event notifications
- AWS resource sharing across environments
Task 1.5: Determine cost optimization and visibility strategies.
- AWS cost and usage monitoring tools (AWS Trusted Advisor, AWS Pricing Calculator, AWS Cost Explorer, AWS Budgets)
- AWS purchasing options (Reserved Instances, Savings Plans, Spot Instances)
- AWS rightsizing visibility tools (AWS Compute Optimizer, Amazon S3 Storage Lens)
Module 2: Design for New Solutions
Task 2.1: Design a deployment strategy to meet business requirements.
- Infrastructure as code (IaC) (AWS CloudFormation)
- Continuous integration and continuous delivery (CI/CD)
- Change management processes
- Configuration management tools (AWS Systems Manager)
Task 2.2: Design a solution to ensure business continuity.
- AWS Global Infrastructure
- AWS networking concepts (Route 53, routing methods)
- RTOs and RPOs
- Disaster recovery scenarios (backup and restore, pilot light, warm standby, multi-site)
- Disaster recovery solutions on AWS
Task 2.3: Determine security controls based on requirements.
- IAM
- Route tables, security groups, and network ACLs
- Encryption options for data at rest and data in transit
- AWS service endpoints
- Credential management services
- AWS managed security services (AWS Shield, AWS WAF, GuardDuty, AWS Security Hub)
Task 2.4: Design a strategy to meet reliability requirements.
- AWS Global Infrastructure
- AWS storage services and replication strategies (Amazon S3, RDS, ElastiCache)
- Multi-AZ and multi-Region architectures
- Auto scaling policies and events
- Application integration (Amazon SNS, Amazon SQS, AWS Step Functions)
- Service quotas and limits
Task 2.5: Design a solution to meet performance objectives.
- Performance monitoring technologies
- Storage options on AWS
- Instance families and use cases
- Purpose-built databases
Task 2.6: Determine a cost optimization strategy to meet solution goals and objectives.
- AWS cost and usage monitoring tools (Cost Explorer, Trusted Advisor, Pricing Calculator)
- Pricing models (Reserved Instances, Savings Plans)
- Storage tiering
- Data transfer costs
- AWS managed service offerings
Module 3: Continuous Improvement for Existing Solutions
Task 3.1: Determine a strategy to improve overall operational excellence.
- Alerting and automatic remediation strategies
- Disaster recovery planning
- Monitoring and logging solutions (Amazon CloudWatch)
- CI/CD pipelines and deployment strategies (blue/green, all-at-once, rolling)
- Configuration management tools (Systems Manager)
Task 3.2: Determine a strategy to improve security.
- Data retention, data sensitivity, and data regulatory requirements
- Automated monitoring and remediation strategies (AWS Config rules)
- Secrets management (Systems Manager, AWS Secrets Manager)
- Principle of least privilege access
- Security-specific AWS solutions
- Patching practices
- Backup practices and methods
Task 3.3: Determine a strategy to improve performance.
- High-performing systems architectures (auto scaling, instance fleets, placement groups)
- Global service offerings (AWS Global Accelerator, CloudFront, edge computing services)
- Monitoring tool sets and services (CloudWatch)
- Service level agreements (SLAs) and key performance indicators (KPIs)
Task 3.4: Determine a strategy to improve reliability.
- AWS Global Infrastructure
- Data replication methods
- Scaling methodologies (load balancing, auto scaling)
- High availability and resiliency
- Disaster recovery methods and tools
- Service quotas and limits
Task 3.5: Identify opportunities for cost optimizations.
- Cost-conscious architecture choices (Spot Instances, scaling policies, rightsizing resources)
- Price model adoptions (Reserved Instances, Savings Plans)
- Networking and data transfer costs
- Cost management, alerting, and reporting
Module 4: Accelerate Workload Migration and Modernization
Task 4.1: Select existing workloads and processes for potential migration.
- Migration assessment and tracking tools (AWS Migration Hub)
- Portfolio assessment
- Asset planning
- Prioritization and migration of workloads (wave planning)
Task 4.2: Determine the optimal migration approach for existing workloads.
- Data migration options and tools (AWS DataSync, AWS Transfer Family, AWS Snow Family, S3 Transfer Acceleration)
- Application migration tools (AWS Application Discovery, AWS Application Migration)
- AWS networking services and DNS (Direct Connect, AWS Site-to-Site VPN, Route 53)
- Identity services (IAM Identity Center, AWS Directory Service)
- Database migration tools (AWS Database Migration, AWS Schema Conversion Tool)
- Governance tools (AWS Control Tower, Organizations)
Task 4.3: Determine a new architecture for existing workloads.
- Compute services (Amazon EC2, AWS Elastic Beanstalk)
- Containers (Amazon ECS, Amazon EKS, AWS Fargate, Amazon ECR)
- AWS storage services (Amazon EBS, EFS, FSx, S3, Volume Gateway)
- Databases (Amazon DynamoDB, OpenSearch, RDS, self-managed databases on EC2)
