AWS Solutions Architect- Professional- 2021

Explore core network fundamentals: IP addressing, slash notation, and subnetting; understand gateways, DHCP, and firewall rules that govern traffic in cloud VPCs and isolated networks.

Explore AWS VPC fundamentals by designing isolated networks with subnets, calculating subnet masks and devices, and configuring gateways and traffic rules to control inter-subnet communication.

Learn how to design and create an AWS VPC in a region, configure subnets and an internet gateway, and map traffic with route tables while following company naming standards.

Launch your first AWS EC2 instance by selecting an Amazon Linux image and a t2 micro, enable auto public IP, configure security groups, and log in with a key pair.

Learn how to launch an EC2 instance, connect with PuTTY using a PEM key, set up a web server, open http/https ports in security groups, and publish a simple page.

Explore the four types of EC2 instances—on-demand, spot, reserved, and dedicated—and learn how pricing, tenancy, and utilization affect cost and capacity planning.

Learn how nat gateways and bastion hosts enable secure access to private subnets behind an internet gateway, using elastic ips, public subnets, and controlled security groups.

Explore network access control lists, NACLs, at the subnet level, a stateless firewall with ordered inbound and outbound rules evaluated from the lowest number first, unlike security groups.

Learn how AWS Direct Connect establishes a private, dedicated link between on-prem networks and AWS, enabling private or public access to resources like S3 and EC2 with elastic bandwidth.

Learn how to establish a site-to-site VPN between on-premises networks and AWS VPC using a VPN gateway and customer gateway, including public IPs, dynamic and static routing, and vendor-specific configuration.

Understand AWS VPC peering for private, gateway-free communication between VPCs using private IPs, across regions or accounts, with non-transitive constraints and explicit route-table configuration.

Learn cloud-based disaster recovery with AWS, comparing traditional vs. cloud DR, and mastering recovery time and recovery point objectives using backup, pilot light, warm standby, and multi-site strategies.

Explore how storage gateway connects on-premises appliances with cloud storage and distinguishes file-based, volume-based, and tape-based gateways for secure, scalable storage.

Explore how a file storage gateway, a virtual appliance on premises, connects to S3, enabling file shares via NFS or SMB and access from cloud apps with replication.

Discover the tape gateway, a virtual tape infrastructure that archives backups to Amazon Glacier for scalable long-term retention, reducing operational burden and lowering recovery time objective to 1–2 hours.

Explore volume storage gateway configurations, including cached and stored volumes, to mount cloud-backed iSCSI storage on premises with S3 backups and incremental snapshots.

Understand the file gateway architecture: activate the gateway, map file shares to S3, and enable on-prem to cloud data flow via SMB/NFS with encryption and asynchronous replication.

Explore architectures for cached and stored volumes using the AWS storage gateway, with on-prem cache and upload buffers backing S3, via iSCSI volumes, deployed as a gateway appliance or VM.

Explore setting up an AWS storage gateway, connect a gateway to an S3 bucket, and map SMB or NFS file shares for hybrid cloud storage.

Explore cross-account IAM access, multi-account resource sharing, tagging, billing alerts, and infrastructure as code with CloudFormation for VPC, EC2, load balancers, and resource groups.

Create groups and attach policies to grant group-based access, then add users to those groups to assign billing or full access permissions for services like S3.

Learn how to enable cross account access in AWS by creating users, groups, inline policies, and roles across two subscriptions, with MFA, access keys, and cross account role assumptions.

Learn how encryption keys protect data at rest and in transit, compare symmetric and asymmetric encryption, and use AWS KMS and certificates to secure confidentiality, integrity, and availability.

Explore how distributed denial of service attacks threaten apps and how Ada Blue Shield standard and advanced protections with CloudFront and a web application firewall deliver automatic, 24/7 mitigation.

The lecture explains how traditional networks exposed web servers to threats and how AWS WAF shields resources by blocking malicious requests, oversized packets, and country- and IP-based rules.

Explore cloud directory services and workspaces, enabling on-premises Active Directory integration with AD Connector, federation with third-party identities, and Windows or Linux directory options.

Explore how CloudTrail enables governance, compliance, and auditing by logging all account activities across regions, delivering encrypted logs to S3 buckets, and supporting export to analytics tools.

Track monthly spend with the billing dashboard, cost explorer, and budgets, and set alerts. Understand on-demand, reserved, spot, and dedicated instances, plus cost allocation tags.

Learn how cloud formation describes infrastructure as code with json or yammer templates to provision, update, and rollback resources in a repeatable workflow, and use the designer to drag‑and‑drop stacks.

Elastic Beanstalk lets developers deploy code as a zip on various platforms, while AWS builds the infrastructure, load balancer, and auto scaling, with blue-green deployment via environment cloning.