AWS Certified SysOps Administrator Associate SOA-C02 [2025]

this lecture explains amazon machine image (ami) as os and software configuration for ec2 instances, enabling prepackaged setups, faster boot, sharing, and launching customized instances from public or marketplace amis.

Hands-on with AMIs: launch an instance, create a custom AMI from configured settings, and launch new instances from that image using security groups and key pairs.

Learn how the no reboot option lets you create an ami from an EC2 instance by taking an EBS snapshot, with OS buffers not flushed and no reboot guarantees integrity.

Explore how to migrate EC2 instances by sharing and copying AMIs across regions and accounts, including unencrypted and kms-encrypted AMIs, cmks, and cross-account permissions.

Automate the creation, maintenance, validation, and testing of EC2 AMIs with EC2 image builder, including building software on a builder instance and scheduling regional distributions.

Create and customize an ec2 image builder pipeline by defining a recipe, infrastructure configuration, and build components, then manually run the pipeline to build and test an ami.

In production, restrict users to EC2 instances from pre-approved AMIs using IAM policies and tags. AWS Config monitors compliance, preventing non-approved AMIs from connecting and ensuring only approved AMIs run.

Discover how AWS Systems Manager manages EC2 and on-premises infrastructure at scale with insights, automation, patching, and CloudWatch and Config integrations.

Register EC2 instances in AWS Systems Manager with Fleet Manager, attach an SSM IAM role, and launch Amazon Linux 2 instances; ensure the fleet shows online with the SSM agent.

Explore how AWS SSM Parameter Store securely stores configurations and secrets with KMS encryption, versioning, IAM access control, and EventBridge integration, including parameter hierarchies, standard and advanced tiers, and policies.

Explore creating and managing parameters in AWS SSM parameter store using the CLI. Learn to store standard and secure string values, including passwords and URLs, and retrieve them with decryption.

Learn how SSM patch manager automates OS, application, and security updates across EC2 and on-premises servers using patch baselines, patch groups, and maintenance windows.

Learn to use AWS systems manager patch manager to create patch baselines and policies, automate maintenance windows, and configure cron or rate schedules for automated patching.

Explore how SSM session manager provides secure shell access to EC2 and on-premises servers. Leverage the SSM agent, avoid SSH keys or bastion hosts, and log to S3 or CloudWatch.

Explore how ssm session manager connects to ec2 instances without ssh, start sessions via ui or cli, run commands, install httpd, and review session history and preferences.

Explore scalability and high availability by comparing vertical and horizontal scaling, elasticity, and multi-location data strategies that ensure availability through AZs and services like EC2 and RDS multi-AZ.

Explore how elastic load balancers distribute traffic across EC2 instances, perform health checks, provide SSL termination, and separate public from private traffic with AWS managed options like CLB, ALB, NLB.

Explore application load balancer version two, routing http traffic by hostname, path, query, or headers across target groups, with target-group health checks and client IP carried in x-forwarded-for.

Launch two EC2 instances, configure a security group, and create an application load balancer with a target group to distribute HTTP traffic across multiple availability zones.

Learn how to access your instances via the load balancer DNS name or IP across three AZs and secure traffic via inbound rules.

Explore AWS network load balancers that forward TCP and UDP traffic at millions of requests per second, delivering low latency with IPs per availability zone and elastic IP options.

Gateway load balancer deploys a fleet of third-party network virtual appliances at layer 3, using a transparent gateway to distribute traffic to private IP target groups via Geneve port 6081.

Learn how to enable sticky sessions in classic and network load balancers to bind a user to a target with configurable cookies and expiration dates, not for application load balancers.

Understand cross zone load balancing, which distributes traffic evenly across all availability zones for various load balancers and the impact of enabling it on load and data charges.

Learn how SSL and TLS encrypt traffic between clients and load balancers with X509 certificates managed by AWS Certificate Manager, including SNI and multi-domain support across ALB and NLB.

Perform a hands-on setup of SSL and TLS certificates on elastic load balancers, selecting port 443 and sourcing certificates from ACM or IAM, including PEM import to target groups.

Learn how elastic load balancers perform connection draining (registration delay), via a deregistering time of 1–3600 seconds, to allow in-flight requests to complete and rebalance traffic to healthy instances.

Configure Elastic Load Balancer health checks to monitor target groups, set http or https protocols, health check paths, timeouts, and thresholds, and ensure healthy routing of traffic.

Explore elastic load balancer error codes and CloudWatch metrics, including 200, 4xx, 5xx statuses, latency, request count, and queue length, plus basic request tracing with custom headers.

Explore target group attributes and load balancer settings, including registration delay, stickiness, and slow start, and compare hashing, round robin, least outstanding, and flow hash routing algorithms.

Explore alb rules, targets, and actions, including the default rule and weighted blue-green deployments that route traffic across target groups based on conditions like host header and path.

Learn how auto scaling groups add or remove EC2 instances to match load, set min/desired/max capacity, and integrate with load balancers and CloudWatch alarms to balance cost and availability.

Create an auto scaling group in the EC2 dashboard using a launch template, connect to a load balancer target group, and manage desired capacity with health checks.

Explore auto scaling groups and scaling policies. Prepare for dynamic, target tracking, simple, and step scaling, plus scheduled and predictive scaling driven by CloudWatch metrics such as CPU utilization.

Explore ASG lifecycle hooks and pending state to run pre-init scripts before in-service or termination, and understand launch template versus launch configuration, health checks, and SQS/SNS/EventBridge integrations.

Explore Elastic Beanstalk, a developer-centric AWS deployment service that automates capacity provisioning, load balancing, and auto scaling while you manage app code, environments, and versioning.

Learn to create an Elastic Beanstalk app and dev environment, choose Python, configure IAM roles and launch templates, and monitor deployment through CloudFormation and the running sample app.

Demonstrate how CloudFormation creates and manages stacks with json or yaml templates, upload templates, provision a free tier eligible EC2 T2.micro in us-east-1, and delete resources to avoid costs.