AWS Certified Solutions Architect Associate SAA-C03 (2025)

Explore AWS identity and access management (IAM), including users, groups, rules, and policies (JSON documents), and learn how multi-factor authentication using Google Authenticator enhances resource security.

Create and manage an AWS IAM user with console access, assign permissions such as read-only and S3 full access, and enable activity tracking with CloudTrail.

Learn how to create an IAM group in AWS, assign permissions at the group level, and auto-grant S3 full access and EC2 full access as team members join.

Learn how to create an IAM role to grant temporary permissions for AWS services like EC2, understand how roles differ from IAM users, and grant access across AWS accounts.

Discover how IAM policies grant permissions to actions on resources under conditions via JSON, covering version and statement with effect, action, resource, and condition, illustrated by an S3 read-only example.

Identify the two AWS policy types: AWS managed and customer managed, and learn to create a custom policy, like an S3 read-only policy, to use within customer managed policies.

Explore password policies in IAM to define strong rules for creating and managing AWS user passwords, including a 12-character minimum, character variety, 90 days expiration, and reuse prevention.

Learn how IAM access keys provide security credentials for AWS access, including how to create a key ID and secret key and use the AWS CLI to list S3 buckets.

Learn to create an S3 bucket in the AWS Management Console, create a data folder, upload and download files, copy S3 URI, and delete files with default public access blocked.

Learn how to copy and move files between folders inside an AWS S3 bucket, including creating folders, uploading a CSV, and selecting a destination with the Excel copy option.

Learn how data versioning in S3 lets you keep multiple versions of an object in a bucket, retrieve previous versions, and prevent accidental deletion or overwrites by enabling versioning.

Learn how to run a sql query on an s3 file using s3 select, fix delimiter issues by enabling quoted record delimiter and custom csv delimiter, view top five rows.

Learn the seven AWS S3 storage classes, including standard, intelligent-tiering, standard IA, one zone IA, glacier, glacier deep archive, and reduced redundancy storage, plus their costs and retrieval times.

Define S3 lifecycle rules to automatically manage current and non-current object versions, moving from standard to standard-ia after 30 days, to glacier after 90 days, and expire after 365 days.

Master aws s3 commands in Cloud Shell: list buckets and files, create buckets in eu-north-1, enable versioning, upload and download, create folders, copy and move objects, and delete buckets.

Explore how pre-signed URLs in AWS S3 grant temporary access to specific objects for a limited time, enabling secure file sharing from a bucket.

Explore cross region replication in AWS S3, automatically copying data from a source bucket to a destination bucket in another region, enabling disaster recovery, latency reduction, and data redundancy.

Explore multi-part uploads in s3 by splitting a large file into parts, uploading each part with the aws cli, and completing the upload to assemble the final file.

Learn how object lock in AWS S3 protects files from deletion by enforcing a write once, read rule, enabled by bucket versioning and demonstrated in a demo.

Enable the requester pays option in an AWS S3 bucket to shift data transfer costs from the bucket owner to the requester, and save changes.

Learn encryption in AWS S3, including S3 managed keys, AWS KMS keys, and dual layer encryption, with a hands-on demo creating a bucket and configuring default encryption.

Explore transfer acceleration in AWS S3 and how routing through the nearest CloudFront location speeds up large file uploads to final storage.

Learn to host a static website on AWS S3 by creating a bucket, enabling ACL, disabling block public access, enabling versioning, uploading index.html, and configuring hosting and bucket policy.

Explore elastic file system (efs), a linux-only, fully managed, scalable shared storage across EC2 instances with multi-az resilience, and learn setup steps like creating EC2s and mounting via IP.

Learn Amazon EC2: Elastic Compute Cloud, virtual servers for hosting sites, big data, and ML/DL workloads, with instance types, pricing models, storage options, volumes, snapshots, and placement groups.

Learn how to create and manage elastic IPs to assign static IPv4 addresses to EC2 instances, including allocating, attaching, disassociating, and releasing up to five IPs.

Deploy a Streamlit application on an AWS EC2 instance by installing dependencies, transferring files with PuTTY and WinSCP, launching Streamlit on port 8501, and configuring security groups.

Explore how AWS's application load balancer distributes http and https traffic across multiple microservices, using VPC subnets, EC2 instances, and a target group.

Explore AWS Lambda function, a serverless compute service that runs code, scales automatically with demand, and uses pay for value according to usage, with fault tolerance.

Explore lambda layer, a package of libraries for AWS Lambda, and learn how to create and attach a custom layer to a function.

Learn how to create an S3 bucket trigger with a Lambda function, including setting up an IAM role, configuring the trigger, deploying Python code, and testing with CloudWatch logs.

Build an automated data preprocessing pipeline with AWS Lambda, S3 buckets for raw and processed data, an IAM role, and a Python script that cleans data and logs in CloudWatch.

Learn to build an automated email alert by wiring S3, SNS, IAM, and a Python Lambda function that triggers on file uploads and sends notifications, with CloudWatch monitoring.

Explore exposing a simple rest API directly from a lambda function with function URL, configuring none authentication, and validating the hello from lambda endpoint.

Create a GitHub webhook using an AWS Lambda function, configure a Python Lambda and a function URL, deploy, and emit JSON event data like repo name and stars.

Elastic Beanstalk is a managed service for deploying and scaling web applications. It supports Python, Java, and Ruby; provides a platform to upload code for server and worker environments.

Discover how to design and manage a VPC in AWS, allocate CIDR blocks, and create public and private subnets across availability zones with internet gateways and route tables.

Learn how to create two VPCs with subnets and internet gateways, set up a VPC peering connection, update routes, and launch EC2 instances with security groups for inter-VPC communication.

Transit gateway acts as a central hub connecting three VPCs, enabling simple inter-VPC communication through attachments and routes, demonstrated by creating VPCs, subnets, gateways, and EC2 instances.

Configure a vpc with public and private subnets, attach an internet gateway, and set up route tables. Create a nat gateway with an elastic ip to provide internet access.

Learn how to privately connect your VPC to AWS services like S3 or DynamoDB using a VPC endpoint, keeping traffic within the AWS network to boost security and reduce latency.

Explore network access control lists in AWS, learn how ACLs allow or deny traffic by IP and how to block specific IPs to protect a website, contrasting with security groups.

Explore AWS Relational Database Service (RDS), a fully managed database platform, and learn to create a MySQL database with standard create, configure instance, storage, connectivity, and public access.

Explore DynamoDB, a fully managed NoSQL database, and learn about fast, scalable, serverless data storage with partition keys, composite keys, and on-demand versus provisioned capacity.

Learn to perform CRUD operations on DynamoDB using Python and the Boto3 library, including creating tables with partition and sort keys, inserting, updating, querying, scanning, and deleting records.

Master DynamoDB CRUD in cloud shell using AWS CLI, creating an employee table with hash key employee id and range key last name, then insert, read, update, and delete table.

Learn to implement basic CRUD operations on a DynamoDB table using an AWS Lambda function, with an IAM role, Python code, and testing workflows.