AWS Certified Solutions Architect Associate: Complete Course

Master hands-on IAM by creating users and groups, attaching policies, and managing credentials, with a focus on MFA and password policies for secure AWS access.

Launch an Amazon EC2 instance, explore storage, IAM roles and users, IP addresses and elastic IP, and learn region, security groups, and key pair basics for hands-on cloud experimentation.

Learn how to securely access an EC2 Linux instance using instance connect, verify readiness via status checks, locate public DNS or IP, and manage security group rules for port 22.

Learn hands-on installation of git, docker, and apache on an Amazon Linux 2 instance, configuring sudo, docker group, and using user data to automate setup.

Learn how instance user data automates configuration at launch by running root scripts (plain text or a file) to install git, docker, and apache and display the hostname across sessions.

Explore the EC2 instance lifecycle and state transitions from pending to running, rebooting, stopping, stopped, stop hibernate, and terminated, with billing and memory persistence implications.

Explore aws ec2 instance types, their naming and family categories, and learn to choose general-purpose, compute-optimized, memory-optimized, or storage-optimized types by cpu, memory, pricing, and region availability.

Understand public and private IP addresses and how elastic IP addresses provide a persistent endpoint. Allocate, associate, and release elastic IP addresses to keep a stable public address across restarts.

Elastic network interfaces in a VPC act as portable network cards with private and elastic IP addresses and security groups; attach or detach them to instances in an availability zone.

Amazon EBS volumes, durable block storage you attach to instances, format, and read or write like a local drive, with benefits including high availability and snapshots.

Learn how to create independent Amazon EBS volumes, attach them to EC2 instances in the same availability zone, format and mount them, and preserve data across terminations and reattachments.

Explore how the Amazon EC2 instance store provides temporary block storage physically attached to the host for transient data, and remember it is ephemeral and not for long-term storage.

Explore Amazon elastic file system, a fully managed, scalable network file system using NFS 4.1, offering shared access in AZs and regions with standard and infrequent access storage, lifecycle management.

Compare EBS and EFS: EBS provides block storage for a single EC2 instance up to 16 TB; EFS offers elastic, scalable file storage for many instances across multiple availability zones.

Learn to create and manage S3 buckets and objects, including name rules, region selection, uploading files, and understanding that folders are not real and access via object URLs.

Explore how Amazon S3 encryption provides server-side and client-side options, including SSE-S3, SSE-C, and customer-managed keys, with bucket defaults and per-object versioning.

Explore S3 security through bucket policies and resource-based controls, enforce server-side encryption with policy conditions, and use the policy generator to apply least-privilege access.

Explore cross-origin resource sharing (CORS) for S3 hosted websites. Learn about pre-flight checks, origins, and where to configure CORS in the bucket permissions.

Configure an ec2 instance with IAM roles and policies to securely access services without exposing credentials. Attach roles, create policies, and simulate permissions for secure access via the CLI.

Explore Amazon EC2 instance metadata, accessed inside the instance at 169.254.169.254/latest/meta-data, with categories like hostname and security groups, and how user data configures the instance for automation.

Learn how S3 MFA delete protects versioned buckets by requiring a six-digit code from an approved device to delete objects. Understand who can enable it and its PCI DSS relevance.

Learn how Amazon S3 automatically scales to high request rates, enabling thousands of transactions per second, with techniques like parallel connections, range requests, and transfer acceleration to optimize performance.

Explore Amazon S3 storage classes: S3 Standard, S3 Standard-IA, S3 One Zone-IA, S3 Glacier, S3 Glacier Deep Archive, and S3 Intelligent-Tiering to balance durability, availability, and cost.

Create an Athena crawler to catalog S3 data with glue, configure a data store and connection, and query the cataloged tables in Athena.

Compare Athena and Macie: Athena is serverless, pay-per-scan data analysis integrated with Redshift or EMR, while Macie uses ML to detect and protect sensitive data in S3.

Discover aws rds high availability with multi-az deployments, automatic failover, and synchronous replication across zones. Use read replicas for load reduction and automated backups for point-in-time recovery.

Explore the major AWS databases: Aurora serverless with PostgreSQL compatibility, DynamoDB as a fast key-value and document store, Redshift for petabyte-scale data warehousing, and ElastiCache for in-memory caching.

Discover Amazon DynamoDB, a fully managed, serverless key-value and document database delivering single-digit millisecond performance at any scale, with streams, security, monitoring, and transactions.

Harness Amazon Redshift, a fast, cloud data warehouse that analyzes terabytes to petabytes of structured and semi-structured data with standard SQL using parallel query execution for analytics and business intelligence.

Explore Amazon S3 as a scalable object store, a serverless key-value database for large objects, with storage classes, glacier, encryption at rest and in transit, and security via IAM policies.

Explore Amazon Glue, a serverless data integration service that extracts, transforms, and loads data, catalogs datasets with crawlers and classifiers, and enables visual or code-based ETL workflows for analytics.

Take a hands-on walkthrough of creating an AWS storage gateway, choosing between Amazon S3 file gateway, FSx file gateway, volume gateway, or tape gateway, and activating it.

Explore Amazon FSx, a managed file system offering Windows Server and Lustre options, with encryption at rest and in transit, data deduplication, Active Directory integration, and S3 and CloudWatch integrations.

Walk through hands-on steps to create an Amazon FSx for Windows File Server file system in the AWS console, including deployment type, storage options, throughput, and security settings.

Configure Route 53 health checks to monitor web applications, servers, and resources, using an endpoint or IP, and learn default 30-second checks and CloudWatch alarm options.

Configure latency routing policy to direct users to the region with the lowest latency. Create latency records across us east 1 and singapore, with health checks and ttl 300 seconds.

Learn to configure geolocation routing policies to steer traffic by end-user location using IP-mapped continents and countries, with health checks, Asia and Europe examples.

Learn to apply weighted routing policy to split traffic between two instances, with weights from zero to 255 or by percentage, using v2 routing policy and optional health checks.

Compare cname and alias: cname maps a hostname to another hostname and cannot target root domains; alias maps to AWS resources and supports root and non-root domains with health checks.

Explore geo proximity routing with a bias value to shift traffic toward a region, using Route 53 traffic flow to expand or shrink the geographic area feeding a resource.