[RETIRED] AWS Certified Solution Architect Professional

Explore cross-account access with trust relationships and resource-based policies, and understand external IDs, SAML 2.0 identity federation, Cognito web identity, and AWS Organizations guardrails.

Explore IAM cross-account access for external partners, highlighting external ID and MFA as security enhancements. Review identity federation, SSO concepts, and exam-aligned practice questions.

Explore CloudFront concepts and error codes, including edge and regional caches, origin shield, origin access identity, and origin failover, with insights on signed URLs, cookies, and Lambda@Edge.

Design secure, globally accessible apps with CloudFront, geo-blocking, Shield ddos protection, and WAF rules against SQL injection and XSS; restrict S3 access with origin access identity and enable origin failover.

Explore Amazon EC2 instance families and compute optimized options, pricing models such as on-demand, reserved, savings plans, and spot, plus ECS concepts like task definitions, services, and clusters.

Explain AWS Lambda as a serverless, event-driven compute service with triggers, and show when to use it for unpredictable or event-driven workloads. Cover invocation models, limits, and pricing.

Explore how AWS Lambda handles concurrency, cold starts, provisioned and reserved concurrency, and ramp-up, with monitoring via CloudWatch, VPC connectivity, environment variables, and dead-letter queues for async invocations.

Compare EC2, Lambda, and ECS to choose the right compute service; Lambda suits event-driven and unpredictable workloads, ECS handles microservices and bad jobs, EC2 fits legacy monoliths.

Learn how elastic load balancers distribute traffic across target groups and zones, enabling cross-zone balancing, regional failover via Route 53 and Global Accelerator, and private link with gateway load balancer.

Master AWS auto scaling policies, including dynamic, predictive, and scheduled scaling with target tracking, simple, and step modes, plus lifecycle hooks and termination policies.

Compare nlb and alb: nlb operates at layer four with tcp/ip and tls for performance. Alb runs at layer seven with http and tls and enables path and host routing.

Evaluate EC2 spot fleets with capacity optimized allocation to minimize interruptions. Explore private SaaS data sharing via VPC endpoints and PrivateLink, and hybrid on-prem routing with VPN or Transit Gateway.

Explore DynamoDB, Aurora, and elasticache concepts, including global tables, DAX, and streams. Learn when to export to S3, query with Athena, and visualize with QuickSight.

Explore certification practice questions on building highly available multi-region database solutions with Aurora and elastic cache, including automated cross-region failover, Route 53 routing, and DynamoDB global tables.

Explore how AWS data analytics services, especially Kinesis data stream, Kinesis data analytics, and Kinesis Firehose, enable real-time ingestion, transformation, and downstream processing with Athena, Redshift, OpenSearch, and QuickSight.

Master real-time data analytics for predictive maintenance by ingesting sensor streams with Kinesis Data Streams, persisting to S3, and triggering alerts with Lambda and Kinesis Data Analytics.

Explore cloud migration strategy, seven approaches, and three phases (mobilize, migrate, modernize), using cloud adoption framework and migration readiness assessment to plan, execute, and optimize migrations.

Delivers cloud migration practice: evaluating on-prem to AWS connectivity, offline data transfer with Snowball, Oracle to Aurora migration, and secure content delivery using CloudFront and S3 with migration tools.

Explore hybrid connectivity between on-premises data centers and Amazon VPCs, comparing managed VPN, VPN cloud hub, software VPN, and direct connect options, including transit gateway for multi-region VPC connectivity.

Assess hybrid connectivity and multi-vpc architectures using Direct Connect and Transit Gateway, weighing centralized egress against NAT gateways for cost-effective internet access.

Explore Elastic Beanstalk deployment concepts including applications, environments, and deployment options, and cloud formation practices like change sets, deletion policies, stack sets, and nested templates.

Explore the differences between SNS, SQS, and Kinesis with a focus on push versus pull, message persistence, and fan-out patterns, plus an overview of AWS Service Catalog.