AWS Certified Solutions Architect - Associate

This covers the organization of AWS from an account and services perspective and how it is represented in the Orion Papers.

This covers the organization of AWS from a physical and networking perspective and how they are represented in the Orion Papers.

In this lesson, we discuss key terminology that is required for the AWS exam, and that you will need to know to be an AWS Solutions Architect.

In this lesson, we discuss how security on AWS is a shared responsibility between AWS and you, the customer.

In this lesson, we will take a look at how to navigate around the AWS console to find important items; such as account settings, AWS support, and AWS documentation.

This lesson is an introduction to IAM as an access management service; covering common uses of IAM and how it is structured.

This lesson covers the ins-and-outs of IAM permissions and policies. This is how you grant access to your AWS users to your AWS resources.

Exploring more of IAM, here we learn about IAM users, including how they are created and how policies are used to grant users access to AWS resources.

Moving from users to groups, here we explore how groups are used to manage the application of policies to IAM users.

IAM roles allow us to grant permissions to our services without using permanent credentials, which run the risk of compromise. IAM roles are preferred for cross-account access and applications running on EC2.

API Access Keys are used to grant access to AWS Services programmatically. IAM Users receive permanent access keys, while STS can provide keys with a shorter lifetime.

AWS offers easy ways to authenticate users outside of AWS using the Identity Federation. In this lesson, we will look at using Web Identities, SAML, and custom Identity Providers.

Many AWS Customers have multiple AWS accounts which can be difficult to control. AWS has a feature called AWS Organizations that allows you to group AWS Accounts into Organizational Units (OUs) and apply service control policies at the OU or account level, which restricts the use of specific AWS Service APIs.

Welcome to the start of the EC2 section of the CSA course. This lesson will introduce you to the essentials topics for EC2 and outline what you will learn in this section.

The first step when provisioning an on-demand EC2 instance is to choose the Amazon Machine Image (AMI). This lesson reviews what an AMI is and discusses its various components.

In step two of the instance creation process, you need to select an appropriate instance type. This lesson reviews what an instance type is and what its components are.

In this lesson, we configure EC2 instance details such as networking options, IP addressing, and bootstrapping.

In this lesson, we explore EBS and Instance store options for your EC2 instance and the use cases for each.

In this lesson, we'll create a security group and assign it to an EC2 instance. We'll then launch an instance and connect it with an SSH key pair.

Backups are an essential part of maintaining a durable application. This lesson will teach you about snapshots, which are an easy and scalable way to create backups of EBS volumes.

In this lesson, we will learn about EC2 placement groups, including what they are, why they exist, and some important troubleshooting tips.

EC2 is very versatile in that there are several different ways to purchase instances, all based on your needs. In this lesson, we review the three main EC2 purchasing options that you need to know.

In this lesson, we will learn the essentials of AWS Elastic File System (EFS), including what it is and its benefits.

How does data travel in and out of the AWS VPC? If you have customers access your web application, what are all the components you need in place to make sure the traffic is routed properly? Well, hit that play button and learn all about AWS VPC routing.

Security is something you always need to be thinking about when setting up your networking architecture. This lesson covers AWS's two core networking security features: network access control lists and security groups

AWS provides three types of Elastic Load Balancer services. In this lesson, we contrast their features and use cases.

In this lesson, we introduce the use and purpose of a Bastion Host and NAT Gateway. Both are key elements in creating a more secure architecture.

Sometimes our instances in a VPC need to communicate with services with public endpoints, such as S3 and DynamoDB. In this lesson, we learn how to create VPC endpoints for these services so that our data does not go over a public network.

Autoscaling is one of the compelling reasons to migrate to the cloud. In this lesson, we will show how to configure your environment to automatically scale.

A stateful application can limit the effectiveness of autoscaling and load distribution. It can also cause problems for your users if instances are terminated. In this lesson, we discuss how to make your applications stateless.

You should always architect for High Availability, which means launching resources in multiple AZs. However, a special case of High Availability is Fault Tolerance, which requires additional resources.

In this lesson, we introduce AWS's DNS service, Route 53, which has some special features for AWS workloads.

In this lesson, we review the process for configuring Route 53 for DNS failover to an S3 bucket.