Advanced Architecting on AWS

Learn database high availability, disaster recovery, and backup strategies, plus automated backups with CloudWatch events, and explore file, cached, stored, and tape gateways.

Compare traditional disaster recovery with cloud-based options and learn to define recovery time objective and recovery point objective to minimize downtime for mission-critical apps.

Explore disaster recovery options, including backup and restore and pilot light approaches, with off-site tape and cloud backups, storage gateway, and snapshots.

Explore warm standby and multi-site disaster recovery methodologies that keep standby sites ready, replicate data, and route traffic via Route 53 to cut recovery time and support scalable failover.

Learn how multi-AZ deployments in AWS deliver high availability with automatic failover, synchronous replication, standby replicas, DNS failover, and disaster recovery across zones.

Configure and test a multi-az database deployment on AWS, create a db subnet group, enable a cross-az replica, and perform manual failover to validate high availability.

Learn how automated backups work across AWS services, including EBS volumes and databases, schedule incremental snapshots with cron, and manage storage in S3 buckets while considering performance impact and retention.

Learn to schedule automated EBS snapshots with CloudWatch Events by creating a rule that triggers the snapshot API for a specific volume at regular intervals, producing incremental backups.

Understand how the storage gateway bridges on-premises environments and cloud storage, enabling file, volume, and virtual tape gateways with caching, NFS/SMB access, and point-in-time snapshots.

activate the storage gateway, create and map a file share to an s3 bucket, enabling on-premises clients to write data via smb or nfs as s3 objects.

Explore cached volumes in a storage gateway that keep frequently accessed data on premises for low-latency access while backing up everything to S3-backed volumes.

Configure on-premises data storage using the stored volume architecture, mounting volumes as iSCSI devices via a storage gateway and synchronously backing data and snapshots to cloud storage.

Explore tape gateway architecture that archives on-premises backups to the cloud using virtual tapes backed by S3, exposing iSCSI tape drives and media changers for seamless backup integration.

Create and configure a file gateway on an Amazon EC2 instance, attach a file share mapped to an S3 bucket, and test data transfer from a local client.

Learn how to clean up an AWS storage gateway: delete the gateway, detach and delete associated volumes, remove the S3 bucket, and terminate the instance to avoid charges.

Master cost management and multi-account governance in AWS by learning cross-account access, organizations, budgeting and billing notes, tagging, resource groups, and reserved instances purchasing options.

Discover cross account access across development and production accounts, enabling role switching to access a production bucket without separate credentials.

Explore how AWS consolidated billing under a central paying account aggregates multiple accounts in an organization, enabling centralized policy management and cost savings via volume discounts and reserved instances.

learn how to configure an AWS organization, invite and group multiple accounts into organizational units, and apply service control policies to centrally manage billing and restrict EC2 access.

Navigate the AWS billing dashboard to set cost management preferences, create a budget alarm, and receive email notifications when monthly spending exceeds a threshold, such as 100 USD.

Learn how tagging uses keys and values to categorize resources by owner or environment and manage multiple instances across regions with bulk actions and resource groups.

Tag resources to form region-based resource groups, then perform bulk actions and run automation across the grouped resources, simplifying monitoring and management on a single dashboard.

Reduce compute costs and guarantee capacity with Amazon EC2 reserved instances, offering up to 75 percent discount with standard, convertible, or scheduled reservations for one- or three-year terms.

Learn how Amazon RDS reserved instances reduce costs for steady-state workloads with one- or two-year terms, discounts up to 65%, and no upfront, partial upfront, or all upfront options.

This section introduces three main topics, covering elastic beanstalk, opsworks, and cloud formation, with a focus on a configuration management solution and deploying a sample php application.

Convert traditional infrastructure into code with CloudFormation templates in JSON or YAML, deploying stacks of resources. Manage resources, parameters, and outputs; control dependencies; and enable versioned updates and safe rollbacks.

Upload your application to elastic beanstalk and automatically provision capacity, load balancing, and auto scaling, while managing versions in Amazon S3 with IAM, VPC, and IP restrictions.

Explore how AWS OpsWorks provides a single configuration management service to deploy and operate applications across hybrid architectures using stacks, layers, recipes, and apps.

Set up a stack and layer in AWS OpsWorks, provision a PHP app server, deploy a PHP application from a repository, and verify it in a browser.

Master AWS networking by learning VPC essentials, components, access control, and IP addressing, then explore VPC peering, Direct Connect, and high‑performance computing concepts.

Explore how a VPC acts as a private data center in the cloud. Gain control over resources, IP addressing, traffic, NAT, and gateways across public and private subnets.

Establish a secure hybrid cloud by connecting private and public networks with encrypted VPN tunnels between gateways, using VPC components, subnets, route tables, and internet gateways for flexible, cost-effective connectivity.

Examine private, public, and elastic IP addressing in AWS. Private IPs enable internal communication; public IPs expose instances to the internet; elastic IPs are static and controllable, reallocatable as needed.

Explore how a vpc uses public and private subnets, an internet gateway, elastic ip, and nat devices to expose resources and allow internet access for patches.

Understand how the default VPC automatically provides an internet gateway and IP addresses, while the non-default VPC requires manual setup and private IP addressing.

Route tables control traffic flow for subnets in a VPC. Define routes with destination and target, using internet gateway for public subnets and NAT or VPN gateways for private access.

Explore how internet gateways connect a VPC to the internet, enabling traffic, routing, and gateway attachment for default and non-default VPCs.

Compare NAT gateway and NAT instance for private subnets. NAT gateway provides high availability and easier management, while NAT instance requires configuration and more maintenance.

Build your first non-default VPC from scratch using a blueprint and a 14-step checklist to configure public and private subnets, internet gateway and NAT gateway.

Create a non-default VPC, carve public and private subnets in a chosen region, and create and attach an internet gateway to enable internet access.

Create a route table to the internet gateway for the public subnet, launch public and private instances, assign an elastic ip to the public instance, and verify ssh connectivity.

Advanced architecting on AWS: step through initiating a public-to-private connection in a VPC, using the same key, and deploying a NAT gateway to download patches securely.

Master how private subnets access the internet by configuring a NAT gateway and routing through 0.0.0.0/0, then apply updates and clean up resources in steps 10–14.

Learn NACL theory fundamentals in AWS. Discover how inbound and outbound traffic for subnets is controlled by ascending ordered rules that allow or deny traffic, using default and custom ACLs.

Configure custom AWS network ACLs by defining inbound and outbound rules in ascending order, applying them to subnets, and distinguishing them from security groups that apply to instances.

Discover how VPC peering uses private IPs to connect VPCs across accounts and regions without gateways or hardware, creating a single-network feel. Learn one-to-one, non-transitive relationships and non-overlapping CIDR constraints.

Establish a VPC peering connection between two VPCs in the same region and account. Create, accept, and update route tables so default VPC 172.31.0.0/16 can reach non-default VPC 10.0.0.0/16.

Learn AWS direct connect: establish a private, high performance link from your data center to AWS, access public and private resources (S3, VPC) via interfaces, with VPN backup.

Explore high performance computing concepts, jumbo frames, enhanced networking, and cluster placement groups, and learn how they deliver low latency and high network performance for compute-intensive workloads.

Compare directory services with AD connector and simple AD, distinguish CloudTrail from CloudWatch, monitor cloud events, and learn to share master keys across two accounts.

Explore AWS Directory Service options, including AD Connector to link on-premises Active Directory to the cloud and Simple AD for cloud-native directory, enabling SSO and MFA.

Compare AWS CloudTrail and Amazon CloudWatch, showing Amazon CloudWatch's performance monitoring, metrics, alarms, and automated actions, and AWS CloudTrail's API activity auditing and event history.

Learn to create CloudWatch alarms triggered by CloudTrail events, configuring log streams and metric filters to notify you of security group changes.

Learn how to share a KMS customer master key across accounts, create a CMK, configure cross-account access, and grant encryption and decryption rights via IAM policies.

Explore the differences between scalability and elasticity in cloud computing, then cover data storage options and CloudFront basics, components, and advanced features for secure content delivery.

Explore the difference between elasticity and scalability: elasticity automatically grows or shrinks resources in response to demand, while scalability increases capacity long-term by scaling up or out.

Learn to create and modify ebs volumes, switch from magnetic standard to general purpose, resize on the fly and increase only, and unmount and remount on Windows or Linux instances.

Explore Amazon CloudFront basics, a global content delivery network that uses edge caching to deliver static, dynamic, and streaming content with low latency.

Explore advanced CloudFront features to serve dynamic and static content from multiple origins with cache behaviors by URL patterns, and enforce access with signed cookies or URLs and IP restrictions.

Learn to set up a data pipeline that moves, transforms, and processes data across compute and storage services, including on-premises data notes and sources, with flexible scheduling and automatic retries.

Export DynamoDB table data to an S3 bucket using AWS data pipeline. Configure SNS notifications for success and failure, then verify the exported data in S3 and perform cleanup.

Begin with foundational concepts for advanced architecting on AWS, outline routing policies in business architecture, and explain their relevance and implementation, followed by extensive hands-on lab sessions.

Understand the domain name system that translates names to IPs using authoritative DNS servers. See how DNS routes traffic to AWS resources, supports domain registration, health checks, and failover.

Explore AWS Route 53 DNS service options, including domain registration and transfer, hosted zones, health checks, and DNS failover, to manage and link external domains with AWS infrastructure.

Explore the six routing policies for Route 53, learn their definitions, and see how they respond to queries for record sets in host zones and production environments.

Demonstrate AWS Route 53 simple routing policy by mapping a domain to a single resource, such as an IP address or load balancer, in a two-region lab.

Split traffic using weighted routing policies in Route 53 by configuring two record sets with 50 percent weights to Mumbai and California, demonstrating how to distribute traffic across regional resources.

Explore Route 53 latency routing policy to direct users to the nearest region with the lowest latency, using Mumbai and California alias records.

Configure a failover routing policy in Route 53 with a primary Mumbai load balancer and a secondary California load balancer, using health checks and alias records, plus SNS alerts.

Learn how geolocation routing policy directs end users to region-specific load balancers, such as Asia to Mumbai and North America to California, and how it differs from latency routing.

Learn to configure multivalue answer routing in Route 53 to return multiple IP addresses for a domain, improving availability and traffic distribution, not a substitute for a load balancer.

Review Route 53 concepts, including DNS service, domain registration, health checks, and routing policies like simple, weighted, latency-based, failover, geolocation, and time-based routing.

Learn how Route 53 DNS translates domain names to IPs, registers domains, and uses health checks with latency, geolocation, and failover routing to guide multi-region traffic.