AWS Certified Solutions Architect Associate 2021- Complete

Amazon S3 is a foundational, highly integrated object storage service used by nearly all applications for backup and disaster recovery. It provides flexible storage classes and encryption and access control.

Compare block storage and file storage, including device-level versus operating system–level data management, and see how storage area networks (SAN) and network attached storage (NAS) enable access via CIFS.

Explore object storage with Amazon S3. Store data as objects inside buckets identified by unique keys, and perform put, get, and update operations via the API.

Explore buckets as containers for objects in cloud object storage, noting that bucket names are globally unique across all accounts and can hold multiple objects.

We explain how AWS regions affect where buckets and objects are stored, enabling low latency near end users and disaster recovery through copying data across regions.

Explore how AWS S3 objects in a bucket store data from zero bytes to five terabytes, with unlimited objects and metadata like last modified date.

Understand how object storage uses a unique key to identify each object within a bucket, with an optional version id for object versioning.

Explore how Amazon S3 stores data in buckets, assigns unique object keys, and performs simple operations like create and delete buckets and create and write objects.

Explain the REST interface as Amazon's native REST API, showing how standard SDK and S3 storage support create, get, update, and delete object operations.

Explore Amazon S3 features: high availability and durability, automatic replication across locations in region, redundancy storage options, strong data consistency, and secure access controls with fine-grained permissions and bucket policies.

Master static web hosting, delivering fast, scalable sites without server-side processing. Learn to upload files to a bucket, make them public, enable hosting, and configure a domain on Amazon S3.

Explore advanced Amazon S3 features, including prefixes, delimiters, and prefix search to organize, browse, and retrieve objects in a bucket.

Explore AWS storage classes, including standard and infrequent access, to balance high availability and performance with lower costs for long-lived data and long-term backups that require no real-time access.

Discover how object lifecycle management in AWS S3 automatically moves data between storage classes and eventually deletes it, using 30-day transitions and 90-day transitions and prefixes to save costs.

Encrypt data in flight and at rest using SSL endpoints and 256-bit encryption, with server-side or client-side options. Use versioning and MFA delete to guard against accidental or malicious deletions.

Explore Glacier storage as a low-cost, long-term data archiving and online backup solution for infrequent access data, with retrieval times of two to five hours.

Log in to the AWS management console, create a new S3 bucket in a selected region, upload objects, and set permissions and bucket properties.

Learn how to make an object public in Amazon S3 by changing object permissions, testing with the public link, and verifying access to the object's data.

Enable versioning on a bucket to track object versions, upload updated files to create new versions, view latest and previous versions, and manage public access or deletion.

Explore lifecycle management in Amazon S3 by configuring bucket rules to automatically transition objects, such as moving data from S3 standard to Glacier after 30 days to reduce costs.

Enable static hosting on a bucket by configuring properties, setting the index document, creating and uploading the required text files, and making the bucket public.

Enable web hosting by uploading files, setting the index and error documents, and resolving any issues during setup. Make uploaded objects public, copy the hosting url, and test locally.

Amazon elastic compute cloud provides resizable, scalable compute capacity in the cloud to support workload.

Explore ec2 instances on aws, learning how running versus stopped states affect billing and how virtual hardware and software loaded on the instance shape performance.

Discover the diverse AWS instance types and families, including memory, storage, network resources, and CPU performance, and learn how balanced resources guide medium workload applications.

Learn how to select instance types by evaluating performance metrics, considering enhanced networking, and understanding virtualization effects on packets per second.

Explore how Amazon machine images define the initial software, operating system, and configuration of an instance. Review four AMI sources, including marketplace, existing-instance images, and the import-export service.

Launch and manage your own instance using AWS services, leveraging public DNS names, public IPs, and elastic IPs to ensure persistent addressing and secure operations.

Discover how instance initial access uses public key cryptography to encrypt login information and enable secure access to AWS Windows or Linux instances via key pairs.

Explore how virtual firewall protection and security groups control AWS traffic, including ports, protocols, and source–destination rules for classic and VPC environments.

Explore the lifecycle of AWS EC2 instances, from launching and bootstrapping with user data to importing and exporting virtual machines between cloud and on premises, and ongoing instance management.

Explore the lifecycle of instances and how tagging with key-value metadata helps track each instance, then use AWS monitoring to monitor and meter usage.

Learn how placement groups in a single availability zone optimize latency and gigabit-per-second networking with enhanced networking, and understand ephemeral instance storage as temporary host-attached storage.

Learn how elastic block store provides persistent block-level storage for EC2 instances, with automatic replication within an availability zone and support for multiple volumes per instance.

Explore AWS EBS volume types, including magnetic volumes, general purpose SSD, and provisioned IOPS SSD, comparing cost, size, and performance for different workloads.

Compare ebs volumes by examining ssd and magnetic types, their size, i/o performance, and maximum throughput to optimize cost and performance for small to medium databases and critical business applications.

Learn to launch and connect to a Linux Amazon EC2 instance, selecting an Amazon Machine Image, configuring storage and security groups, and reviewing networking options across availability zones.

Launch an Amazon Linux instance by selecting the AMI, configuring instance details, attaching storage and security groups, adding tags, and reviewing settings before launch.

Create and configure an ec2 instance, generate a key pair, and save the private key. Connect using the instance's public ip or dns and the private key via ssh.

Explore AWS VPC basics, define virtual private cloud, create and manage subnets and IP address ranges, understand logical isolation across regions, and compare VPC with classic networking.

Explore virtual private cloud components, including subnets, security groups, network ACLs, dhcp options, elastic IPs, elastic network interfaces, gateways, endpoints, and virtual private networks across regions and availability zones.

Explore how subnets guide network segmentation within an Amazon virtual private cloud, including public and private subnets, CIDR blocks, and subnet-to-availability zone constraints.

Learn how route tables govern subnet traffic in a private cloud, including default routes, implicit routes, and how to create or modify tables to control communication with the VPC.

Learn how internet gateways connect your VPC to the internet, enabling communication between instances and public networks. The lecture covers routing to the gateway, public IPs, and setting destination rules.

Explore how the dynamic host configuration protocol standard passes configuration information to hosts and review common options such as domain name, dns, and netbios name servers.

Discover elastic IP addresses in a region, locate and assign them to an instance in a virtual private cloud, and maintain a one-to-one link with networking devices.

Configure elastic network interfaces as virtual network interfaces that attach to instances in a private cloud, enabling subnet association and both public and private IP addresses.

Learn how private connections enable a virtual private cloud, allow non-internet access, and create multiple endpoints for a service by selecting the virtual private cloud, the service, and a policy.

Explore VPC peering, a networking connection that lets two VPCs communicate as a single network through a request-and-accept protocol. It covers non-overlapping CIDR blocks, cross-account setups, and cross-region considerations.

Learn how AWS security groups act as virtual firewalls to control inbound and outbound traffic for EC2 instances within a VPC, and how they differ from network access control lists.

Explore network access control lists (NACLs) as a subnet-level security layer in AWS, enforcing ordered inbound and outbound rules and a default deny, contrasted with instance-level security groups.

Explore how NAT instances and NAT gateways provide internet access to private subnets by translating private IP addresses to public IP addresses, enabling controlled outbound traffic.

Learn how VPG and CGW enable connections between a private cloud and a corporate network, using customer-side hardware or software, and supporting dynamic or static routing for high availability.

Learn how to create a virtual private cloud (VPC) in AWS, configure private and public subnets, enable endpoints, and launch instances with correct subnet CIDR, routes, and network ACLs.

Create a subnet under your VPC, assign an IPv4 CIDR block such as 192.168.1.0, and designate it as a public subnet. Learn to add and delete subnets via subnet actions.

Elastic load balancing automatically distributes traffic across multiple instances to provide high availability across availability zones.

Explore ELB (elastic load balancing) as a managed, highly available service that automatically scales to traffic, supports SSL and certificate management for internet-facing and internal applications.

Learn about types of load balancers, including internet-facing and encrypted connections, and how elastic load balancing routes client requests from the internet to registered instances via a public DNS name.

Learn how load balancers distribute traffic across multiple applications, including internal load balancing, and how SSL protocols enable encrypted connections to back-end instances.

Explore how listeners handle connection requests by configuring protocols in elastic load balancing, and secure data by encryption to protect traffic over insecure networks.

Learn elastic load balancing configuration, including idle connection timeout, client-to-backend connections, proxy protocol, and sticky sessions, to optimize performance and costs.

Enable cross-zone load balancing to distribute traffic evenly across backend instances across all availability zones. Improve application availability and resilience by handling backend instance loss and balancing traffic across zones.

Configure the elastic load balancer to keep in-flight requests alive and manage idle timeouts, setting a maximum timeout to control connection lifetimes and route traffic from unhealthy instances.

Learn how to configure the load balancer with proxy protocol and sticky sessions, including how source and destination IP addresses and ports influence session affinity to a single backend instance.

Explore how health checks assess the status of instances behind an elastic load balancer, distinguishing healthy in-service instances from unhealthy ones, and how periodic checks determine readiness.

Explore Amazon cloudwatch to monitor resources and applications, set alarms, and automate notifications and actions based on metrics and utilization.

Explains how AWS CloudWatch basic and detailed monitoring collect data points every five minutes, or every minute, and notes alarm limits with a two-week retention.

Master auto scaling to manage capacity by scaling up, scaling out, or scaling down, launching and terminating instances within scaling groups to maintain a minimum number of running servers.

Explore auto scaling types and how to set maximum, minimum, and desired capacity, manage instances, and implement scheduled and dynamic scaling through events.

Create a load balancer in the AWS Management Console by choosing between application and classic types, configuring security groups, health checks, and subnets within a VPC.

Master auto scaling by configuring launch configurations, setting up scaling groups with alarms, and using scaling in and out to manage instance capacity in a virtual private cloud.

Explore AWS IAM basics: manage users, groups, and access policies to control who can use resources, with authentication and authorization across operating system and application access.

The lecture explains identity-based access principles for AWS, introduces IAM concepts, mentions security tokens, and discusses a single sign-in principle with full access to all resources.

Create and manage separate IAM users for each application member, assign administrator privileges via risk and access management controls, and persist permanent credentials with no expiry.

Explore IAM principles part 3, focusing on security tokens and temporary privileges granted to specific actors for a set duration in cloud environments.

Explore IAM authentication concepts, including principals, username/password verification, password policy and complexity, access key id and secret key usage, and session-based authorization.

Explore how IAM authentication combines username/password, access keys, and session tokens to grant console access and secure API calls for IAM users.

Explore how authorization defines what actions a principal can or cannot perform, using policies that specify effects, resources, and services to secure IAM infrastructure.

Explore the key features of AWS IAM, focusing on multi-factor authentication as an extra security layer, with hardware or software tokens and mobile app options.