AWS Solutions Architect Associate SAA-C03

Learn to create iam users and groups, assign administrator access via a group, and manage sign-in with an account alias while avoiding the root account for daily tasks.

Learn how to manage identities and access rights with IAM by creating users and groups, crafting policies, and applying least privilege in AWS.

Explore how IAM policies govern user access by applying group policies that extend to members, inline policies for individuals, and cross-group permissions across DevOps and marketing teams.

Explore IAM policies by managing Danielle’s admin and read-only access, attaching policies, and testing permissions with user groups like DevOps in the IAM console.

Enforce a robust password policy and implement MFA with AWS IAM. Explore MFA options such as virtual devices (Google Authenticator, OFI) and hardware keys (YubiKey, Gemalto) to protect accounts.

Configure a customizable password policy in IAM, then set up root-account multi-factor authentication with an authenticator app and QR code. Learn MFA codes, device management, and secure AWS access.

Explore three AWS access methods: management console, CLI, and SDK, emphasizing secure access keys and best practices for interacting with AWS APIs.

Install the AWS CLI on Linux by downloading the version two zip, unzipping, and running the installer with sudo; verify with the version command and follow troubleshooting tips.

Learn to create aws access keys and configure the aws cli, set a region, and manage users and permissions via the cli, paralleling the management console.

Explore AWS Cloud Shell as a cloud-based terminal for AWS CLI commands. Choose supported regions, preserve files after restarts, and use tabs or split terminals for efficient workflows.

Explore how IAM roles let AWS services like Lambda assume permissions to act on resources such as S3. Learn common roles for EC2 and CloudFormation as groundwork for role creation.

Learn to create and attach an IAM role for EC2 and Lambda, configure trusted entities, and apply the IAM read only access policy.

Explore IAM security tools, including the credentials report at the account level and the per-user Access Advisor, to identify underused permissions, enforce least privilege, and improve security posture.

Generate and download the AWS credentials report to audit root and user accounts, check password status, multi-factor authentication, access keys, and last accessed services to strengthen security.

Learn essential AWS IAM best practices, including separate root and user accounts, groups and policies, MFA, password policies, roles for EC2, access keys, and credential monitoring with last access.

Learn how AWS organizations centralize multi-account management with a management account, consolidated billing, and cross-account savings, while using organizational units and service control policies for governance.

Learn to organize AWS accounts with organizations and organizational units (OUs), move accounts between OUs, and implement service control policies to govern access, including denying S3 actions.

Explore IAM conditions and their role in policies, including source IP, requested region, EC2 resource tag, and multifactor authentication, plus S3 bucket and object permissions and principal orgid.

Compare IAM roles with resource-based policies for cross-account access to S3 and DynamoDB. Understand when to assume a role versus applying a bucket policy and how EventBridge uses either approach.

Explore how IAM permission boundaries limit user and role actions alongside IAM policies, and learn the policy evaluation flow, including explicit deny and SCP considerations.

Learn how AWS IAM Identity Center replaces AWS SSO to provide unified single sign-on across accounts and apps using SAML 2.0, with flexible identity sources and permission sets.

Explore how AWS Directory Services mirrors Microsoft Active Directory in the cloud, including AWS Managed AD, AD Connector, and Simple AD, with on-premise trusts, MFA, and seamless IAM integration.

Explore AWS directory services in the management console, comparing AWS Managed Microsoft AD, Simple AD, and AD Connector, including MFA support, object limits, and hybrid or on-prem integrations.

Discover how AWS Control Tower creates a secure, compliant multi-account environment using the AWS Organization Service. Apply preventive and detective guardrails with SCPs, AWS Config, SNS, and Lambda for governance.

Explore how Amazon S3 uses buckets and objects with keys and prefixes to store data across regions, and learn about metadata, tags, versioning, and multi-part uploads.

Learn to create and manage an Amazon S3 bucket, set region and public access, upload objects, create folders, and use pre-signed URLs for secure access.

Learn how IAM policies and S3 bucket policies control access, enable cross-account and public access, use ACLs vs bucket policies, and apply encryption and block public access settings.

Create a public S3 bucket policy using the AWS policy generator to allow get object access, while evaluating the security risks of making a bucket public.

Learn how Amazon S3 hosts static websites, create an S3 bucket for HTML documents and images, and enable public read access with a bucket policy to serve the site.

Configure an Amazon S3 bucket for static website hosting, upload index.html and assets, and enable public access to serve the site from its endpoint.

Enable bucket-level versioning to track file iterations; uploading with the same key creates new versions and delete markers protect against accidental deletions with easy rollback.

Enable bucket versioning in the S3 properties to maintain multiple file versions. View version IDs, manage delete markers, and revert to earlier content when needed.

Explore cross region replication and same region replication in Amazon S3, with versioning on both buckets, IAM permissions, and batch replication for existing objects and delete markers.

Create origin and replica s3 buckets with versioning, and configure a replication rule to copy new objects across regions, including delete marker replication.

Explore Amazon S3 storage classes, including standard, infrequent access, one zone infrequent access, glacier instant retrieval, glacier flexible retrieval, glacier deep archive, and intelligent-tiering, while noting durability and lifecycle rules.

Create an S3 bucket, upload an object, and explore storage classes from S3 standard to glacier. Use intelligent tiering, standard IA, and one zone IA, lifecycle rules to automate transitions.

Learn how Amazon S3 lifecycle rules automate transition and expiration actions across storage classes—standard, standard-ia, intelligent-tiering, one-zone-ia, glacier, and deep archive—for cost optimization and data retention.

Configure an S3 lifecycle rule for a versioned bucket. Automate object lifecycles by moving current versions between storage classes and expiring or deleting non-current versions, while removing expired delete markers.

Explore how S3 requester pays shifts data transfer costs from bucket owners to authenticated requesters, while owners retain storage fees, enabling sharing of large data sets across AWS accounts.

Learn how S3 event notifications trigger actions on object events and filtering, enabling automated responses like thumbnail generation. Route notifications to SNS, SQS, Lambda, or EventBridge with resource-based policies.

Demonstrates configuring S3 event notifications to send all object-creation events to an SQS queue, with optional EventBridge routing for broader processing.

Discover how S3 batch operations perform bulk actions on S3 objects, including updating metadata, encrypting unencrypted objects, transferring between buckets, and triggering Lambda functions.

Explore the S3 performance baseline, including per-prefix throughput and low latency for fast data access. Learn how multi-part uploads, transfer acceleration, and byte range fetches enable scalable, parallel transfers.

Explore Amazon S3 object encryption, covering SSE-S3, SSE-KMS, SSE-C, and client-side encryption. Ensure encryption in transit via SSL/TLS and HTTPS, and enforce bucket policy to require secure transport.

Explore S3 encryption by creating a bucket with default encryption and versioning, then apply SSE-S3 or SSE-KMS for objects using the default S3 KMS key.

Discover how AWS S3 defaults encryption for new buckets with S3 managed keys. Learn how bucket policies are evaluated before encryption to enforce standards using KMS.

Explore how cross-origin resource sharing uses origins defined by scheme, host, and port, including preflight requests, and configure access-control-allow-origin headers to permit specific or all origins in S3 CORS.

Engage in a hands-on s3 cors lab that uploads files to buckets, enables static website hosting, updates index.html across origins, and configures cross-origin resource sharing with correct headers.

Enable MFA delete to require a verification code for permanent deletions of specific object versions in S3, which requires enabling versioning and safeguards against accidental or unauthorized loss.

Demonstrates enabling MFA delete on an S3 bucket via the AWS CLI, with bucket versioning enabled and verification through commands after configuring a root account profile.

Enable S3 access logs to audit all requests by storing entries in a separate logging bucket, in the same region, and analyze with Amazon Athena, avoiding logging loops.

Create a dedicated logging bucket and enable server access logging on the source bucket. Verify the bucket policy permits log writes to the destination bucket in eu-west-1.

Explore Amazon S3 pre-signed URLs, which grant time-limited access to specific files in private buckets by inheriting the creator's permissions, with 12 hours in console and 168 hours in CLI.

Explore how to generate S3 presigned URLs to securely share private bucket objects, using both the AWS CLI and the management console, with URL expiry controls.

Lock your AWS Glacier vault with a vault lock policy to render objects immutable, then enable S3 object lock with versioning, compliance and governance retention modes, and legal holds.

Explore how S3 access points streamline security with dedicated accounting and marketing data points offering read and write access, a read-only analytics point, and private VPC access via endpoints.

Explore how S3 Object Lambda uses access points and Lambda to redact or enrich objects in real time from a single bucket, enabling tailored data for analytics, marketing, and more.

Set up budgets and alerts in the AWS billing console, enable IAM access, and configure zero spend and monthly budgets with email notifications and cost breakdowns to avoid overspending.

Explore how EC2 delivers infrastructure as a service with virtual machines and EBS storage. Configure OS options, CPU, RAM, EBS or EFS storage, and boot with EC2 user data.

Launch an EC2 instance on Amazon Linux using the EC2 console, deploy a web server with a user data script, and learn to start, stop, and terminate the instance.

Explore EC2 instance types across general purpose, compute optimized, memory optimized, and storage optimized families, learn naming conventions, and compare vCPU and memory using the T2 micro as a case.

Learn how security groups act as EC2 firewalls, regulating inbound and outbound traffic with rules based on IP ranges or security groups, including ports 22, 21, 80, 443, and 3389.

Master security groups by managing inbound and outbound traffic for EC2 instances, including ssh on port 22 and http on port 80, with multiple groups and cidr sources.

Discover how to securely access linux servers with ssh for maintenance across mac, linux, and windows. Use built-in terminals, putty for older windows, or EC2 Instance Connect in your browser.

Connect to your EC2 instance from a Linux or Mac terminal by using the SSH client in the AWS console, paste the commands, and log out after verifying the IP.

Connect to your EC2 instance with EC2 Instance Connect by enabling an SSH inbound rule in the instance's security group. Use the terminal for commands.

Attach an IAM role to an EC2 instance to securely supply credentials, access via EC2 Instance Connect, and verify with aws iam list-users while avoiding aws configure on the instance.

Explore EC2 purchasing options including on-demand, reserved and convertible reserved instances, savings plans, spot, dedicated hosts and instances, and capacity reservations, with pricing, terms, and suitability for different workloads.

Understand AWS IPv4 costs, including $0.005 per hour per public IPv4 and $3.60 monthly per address. EC2 free tier offers 750 hours monthly; beyond that, charges apply to other services.

Explore how AWS spot instances and spot fleets cut costs with max price controls, price fluctuations, two-minute grace periods, spot blocks, and launch pools for varied workloads.

Learn to launch EC2 instances using spot requests and spot fleets, analyze C3 and C4 Linux pricing history, and optimize costs with reserved instances and savings plans.

Explore how private and public IP addresses, NAT, and elastic IPs shape AWS networking, including IPv4 vs IPv6, EC2 public IP behavior, VPN access, and DNS routing with Route 53.

Explore how public and private IP addresses work on EC2, the role of elastic IPs, and how stop-start actions affect public IPv4 while keeping private IP constant.

Discover how AWS EC2 placement groups optimize instance placement for high throughput and fault tolerance using cluster, spread, and partition strategies, ideal for data apps like Hadoop, Cassandra, and Kafka.

Configure EC2 placement groups by selecting cluster, spread, or partition strategies to optimize network capability and distribution for launched instances.

Explore elastic network interfaces (eni) in a VPC, attachable to EC2 instances with primary and secondary private IPs, elastic or public addresses, security groups, and availability-zone bound failover capability.

Explore elastic network interfaces by launching two EC2 instances, creating and attaching an ENI, and performing failover between instances to manage private and public IPv4 addresses.

Explore EC2 hibernate, which preserves ram to an encrypted root ebs for faster startup, supports Linux and Windows, ram below 150 gb, and all instance types up to 60 days.

Practice using EC2 hibernation to save ram to encrypted root EBS, launch an Amazon Linux 2 t2.micro instance, and verify uptime to understand resumed operation after hibernation.

Explore elastic block store volumes as network based drives attached to EC2 instances, with data persisting after termination, including gp2 and gp3 volumes, and snapshots for cross-zone transfers.

Learn to manage EBS volumes for EC2 by creating, attaching, and deleting gp2 and gp3 volumes, verifying availability zones, and reviewing delete on termination settings.

Back up your EBS volume without detaching it, and copy snapshots across zones or regions. Archive for savings, enable recycle bin retention, and use fast snapshot restore with higher cost.

Explore creating and managing EBS snapshots, copying across regions for disaster recovery, and building volumes from snapshots, with retention rules and a recycle bin for safe recovery.

Use public AMIs as templates to launch EC2 instances with operating system configurations. Create custom AMIs from configured instances to speed boots and enable regional deployment with EBS snapshots.

Launch an EC2 instance, configure httpd via user data, and create a custom AMI to speed future launches, then deploy and manage from the AMI.

Explore Amazon EBS volume types including GP2, GP3, IO1 and IO2, and learn how boot volumes, provisioned IOPs, and throughput guide performance decisions for diverse workloads.

Explore EC2 instance store, a hardware disk attached to an EC2 instance, delivering high IOPs and throughput for caching and temporary data, with data loss on stop; EBS offers persistence.

Attach an EBS volume to multiple EC2 instances in the AZ for read and write access, using io1 or io2 with a cluster-aware file system; max 16 instances.

Encrypt Amazon EBS volumes using AWS KMS keys, securing data at rest and in transit, and encrypt snapshots and volumes created from them with ES 256 encryption.

Explore Amazon Elastic File System (EFS) as a fully managed, scalable NFS that supports multi-AZ mounts, encryption at rest, automatic scaling, and tiered storage for cost optimization.

Practice configuring a regional Amazon EFS in a default VPC with backups and lifecycle management. Explore elastic, bursting, and provisioned throughput modes and mounting EFS to EC2 instances.

Compare EBS and EFS: EBS attaches to a single EC2 in one AZ with scalable IOPs and snapshots, while EFS is a multi-AZ network file system shared by many instances.

Learn vertical and horizontal scalability, elasticity, and high availability in AWS, with practical examples using EC2, RDS, and ElastiCache, and how to scale with auto scaling and multi-az designs.

Discover how the Elastic Load Balancer distributes traffic across multiple EC2 instances, uses health checks and SSL termination, and supports session sticky features for high availability across zones.

Explore the application load balancer (alb) at layer seven, routing HTTP traffic to target groups including EC2, Docker, ECS, and Lambda, with path-based routing, host-based routing, and HTTP/2 WebSocket support.

Launch two EC2 instances behind an application load balancer to route HTTP traffic to a demo target group, configure health checks, and explore ALB rules and security settings.

Explore the network load balancer (NLB) at layer 4, handling TCP and UDP with ultra low latency, static IPs per availability zone, and EC2 or private IP targets.

Configure a network load balancer in an existing VPC across all availability zones with a security group and TCP port 80 listener, and monitor HTTP health checks.

Discover how the gateway load balancer routes all traffic through third-party security appliances in your VPC, enabling centralized inspection and safe delivery to applications.

Discover how sticky sessions (session affinity) keep a user's requests on the same backend instance via cookies, including application-based and duration-based cookies, for classic, application, and network load balancers.

Explore cross zone load balancing in AWS and how application load balancers distribute traffic across zones. Learn how enabling or disabling cross zone balancing affects traffic distribution and costs.

Learn how SSL and TLS certificates enable in-flight encryption between clients and load balancers, with SNI and multi-certificate support on ALB and NLB via ACM for multiple domains.

Enable SSL certificates on a load balancer by adding an HTTPS listener on port 443 and directing traffic to a target group of EC2 instances, using ACM for certificate management.

Explore connection draining (deregistration delay) for classic, ALB, and NLB; let in-flight requests finish while deregistering, with ELB rerouting to healthy instances. Configure 1–3600 seconds (default 300); zero disables.

Explore how auto scaling groups dynamically scale EC2 instances, scale out and in with min, max, and desired capacity, and stay balanced with elastic load balancers and health checks.

Build and configure an auto scaling group with a launch template, enable health checks, and connect to a load balancer and target group to practice scaling up and down.

Explore auto scaling policies for ASG, including dynamic target tracking with CPU utilization, step and scheduled scaling, predictive scaling, and custom CloudWatch metrics to optimize performance and costs.

Explore automatic scaling for an auto scaling group, covering scheduled actions, predictive scaling based on historical metrics, and dynamic policies like target tracking to keep CPU utilization around a target.

Explore AWS RDS, a managed relational database service supporting engines like PostgreSQL, MySQL, MariaDB, Oracle, SQL Server, IBM DB2, and Aurora, with automated provisioning, backups, and point-in-time restore.

Compare RDS read replicas and Multi-AZ deployments to improve read capacity and provide disaster recovery, highlighting asynchronous replication, eventual consistency, failover, and cross-region cost considerations.

Learn to create and configure an Amazon RDS MySQL database with standard create, manage storage and backups, configure VPC and security groups, and connect via pgAdmin to run basic SQL.

Grant direct access to the operating system and database with rds custom for Oracle and Microsoft SQL Server, enable deeper customization, disable automation, and take snapshots.

Discover Amazon Aurora, a cloud-optimized, Postgres- and MySQL-compatible database that auto scales storage 10 gb to 128 tb and supports 15 read replicas with under ten ms lag.

Learn to set up an Amazon Aurora database with MySQL, using the production template and default version 3.05.2. Explore storage, read replicas, endpoints, backups, encryption, and scalability options.

Master advanced Amazon Aurora concepts including replica auto scaling, custom endpoints, and serverless, plus Aurora global database for cross-region resilience and machine learning integration with SageMaker and Comprehend.

Learn RDS automated backups with 1–35 day retention and manual snapshots, disable option, and Aurora backups with point-in-time recovery, plus restore via S3 and fast cloning for staging.

Secure your RDS and Aurora databases with encryption at rest via KMS, in-flight TLS, IAM-based authentication, controlled by security groups, and audit logging to CloudWatch.

Explore how the RDS proxy pools connections to RDS and Aurora databases, reducing open connections and boosting performance within a VPC, with serverless scaling and IAM authentication via Secrets Manager.

Explore Amazon ElastiCache, a managed in-memory cache service for Readus and Memcached. It reduces database load and enables stateless applications through cache hits and misses.

Configure an AWS ElastiCache Redis instance, compare serverless and manual cache designs, set up subnet groups and security, enable auto failover, and plan backups and maintenance.

Explore ElastiCache security with IAM authentication for Reedus, Reedus auth, SSL, and memcached SASL, and learn lazy loading, write-through, and TTL-based session storage for real-time leaderboards.

Explore AWS snowball for secure, portable data transfer at the edge with a physical device, enabling petabytes of data migrations to and from S3.

Explore the AWS snow family, configure import or export data jobs with Snowball devices, set S3 targets, security options, and shipping details for transfers.

Learn how to import data with AWS Snowball into Amazon S3 and automate long-term storage by transitioning objects to Amazon Glacier using an S3 lifecycle policy.

Explore Amazon FSx options for Windows File Server, Lustre, NetApp ONTAP, and OpenZFS, including S3 backups, private link, and performance modes from SSD to HPC workloads.

Explore Amazon FSx file systems for Lustre, Windows File Server, NetApp Ontap, and Openzfs, focusing on high-level differences, deployment options, encryption, and performance basics for exam prep.

Explore how AWS Storage Gateway links on-premises data to the cloud, enabling disaster recovery, backups, cloud migration, and scalable hybrid storage with S3, FSX, and tape gateways.

Explore the four AWS storage gateway offerings—S3 file gateway, volume gateway, tape gateway, and FSX file gateway (discontinued). Understand on-premises caching and platform options for these gateways.

Transfer data to and from Amazon S3 or EFS with the AWS Transfer Family, using ftp, ftps, and SftP, via credentials and an IAM role.

Master AWS DataSync for data synchronization between on-premises and AWS storage using NFS, SMB, or HDFS with an agent, moving data to S3, EFS, or FSx while preserving metadata.

Explore AWS storage options including S3, Glacier, EBS GP3 and IO2, EC2 instance storage, EFS, FSX variants, Storage Gateway, Transfer Family, Data Sync, and Snow family for diverse arch needs.

Discover the serverless concept in AWS, where you avoid server provisioning and services scale. Explore AWS Lambda, DynamoDB, API Gateway, S3, Cognito, and other services in a pay-as-you-go architecture.

Explore how AWS Lambda delivers serverless compute, billed by requests and compute time with a generous free tier, and integrates with S3, API Gateway, and DynamoDB for event-driven apps.

Learn how AWS Lambda runs code in a serverless architecture, supports languages like Python, Node.js, Java, and Ruby, auto-scales with event-driven triggers, and offers a generous free tier.

Understand AWS lambda limits, memory 128 MB to 10 GB in 64 MB steps and 900-second cap; note 4 KB env vars, 10 GB tmp space, concurrency, zip size limits.

Explore Lambda concurrency and throttling, reserve concurrency, and provisioned concurrency to manage scalable AWS Lambda functions, including asynchronous retries for events like S3 notifications and cold-start considerations.

Explore AWS Lambda concurrency settings, including unreserved and reserve concurrency, test throttling with zero, and understand provisioned concurrency, cold starts, and versioning for cost-aware tuning.

Boost lambda performance by up to ten times with SnapStart, pre-initializing functions and using memory and disk snapshots to skip initialization and reduce latency for Java, Python, and .NET.

Explore edge computing with CloudFront functions and Lambda@Edge, delivering ultra-fast, serverless customization at edge locations to tailor requests, responses, and content near users.

Deploy lambda functions inside a VPC with private subnets to access resources like RDS; use an RDS Proxy for connection pooling, faster failover, and secure IAM auth with Secrets Manager.

Learn to trigger Lambda functions from an RDS or Aurora MySQL database on data events, configure network connectivity with VPC endpoints or NAT gateways, and apply IAM policies.

Explore Amazon DynamoDB, a managed NoSQL database offered by AWS that uses tables with primary keys, scales to millions of requests with single-digit latency, and offers provisioned or on-demand capacity.

Explore DynamoDB by creating a table with a user ID partition key, optional sort key, inserting items with flexible attributes, and choosing on-demand or provisioned capacity with encryption at rest.

Explore advanced DynamoDB features like DAX caching, streams and Kinesis integration, global tables, TTL, backups, and data export/import with S3 for analytics and OpenSearch.

Explore how the aws api gateway exposes lambda-backed rest APIs with authentication, throttling, versioning, environments, and web socket support for secure access to aws services.

Set up a rest API in the api gateway console. Configure regional deployment with lambda proxy integration and test endpoints returning hello from my lambda in json.

Explore AWS step functions as a serverless, visual workflow tool that orchestrates tasks, including lambda functions, with sequencing, parallelism, conditions, timeouts, error handling, and human approval.

Explore Amazon Cognito, including Cognito user pools for sign-in and Cognito identity pools for temporary credentials, enabling secure web and mobile access to AWS resources via API Gateway or ALB.

Define the domain name system and explain how it translates user friendly domain names into ip addresses, enabling browsers to reach web servers. Explore dns resolution and Route 53 basics.

Explore Amazon Route 53 as an authoritative, highly available dns provider. Learn to configure public and private hosted zones, A and AAAA records, CNAME and NS records, and domain registration.

Learn to register a domain in Route 53, complete checkout, set auto renew and privacy protection, and verify the hosted zone with name server and start of authority records.

Create and verify your first route 53 A record in a hosted zone, using nslookup or dig in cloud shell, mapping test two three to a mock IPv4 address.

Launch three EC2 instances across Frankfurt, Singapore, and Northern Virginia with Route 53 bootstrapping and http access, set up an application load balancer, and validate hello world responses.

Explore TTL (time to live) and DNS caching for an A record in Route 53, comparing high and low TTL with 24-hour versus 60-second examples.

Compare CNAME records and alias records in Route 53, showing how alias links root domains to AWS resources like load balancers, with automatic TTL and built-in health checks.

Explore Amazon Route 53 routing policies, focusing on the simple routing policy with an A record, multiple IP addresses, and TTL settings.

Master weighted routing in Amazon Route 53 to direct traffic among three EC2 instances using weights 65, 20, and 15, translating to roughly 65%, 20%, and 15% shares.

Learn latency-based routing with Route 53 to send users to the closest AWS region, configure latency records, and verify routing with health checks.

Explore AWS Route 53 health checks to monitor public and private resources, enable automated DNS failover across multi-region architectures, and tailor checks using HTTP, HTTPS, or TCP with CloudWatch metrics.

Set up three route 53 health checks for ec2 instances in us east, ap-sydney, and eu central, configuring ip addresses, intervals, consecutive failures, string matching, and calculated checks.

Explore failover routing policies with Route 53 health checks, linking a primary and secondary EC2 instance for automatic DNS failover and disaster recovery.

Explain geolocation routing in Route 53, routing users by region from ap southeast one to us east one and eu central one, with a default and health checks.

Explore IP-based routing policy in AWS to direct traffic and optimize performance for AWS environments.

Explore the multivalue routing policy, returning up to eight healthy records for client-side load balancing, with health checks, regional A records, TTLs, and testing via dig.

Use geo proximity routing with a bias value in Advanced Route 53 Traffic Flow to steer traffic toward specific regions, such as US West 1 or US East 1.

Clarify the difference between a domain registrar and a DNS service. Use Route 53 with a third-party registrar by creating a public hosted zone and updating NS records.

Tidy up route 53 configurations to minimize costs by deleting unused hosted zones, clearing records, and terminating EC2 instances, load balancers, and target groups across regions.

Learn to speed up cloud deployments by using a golden army to launch EC2 instances, using bootstrapping with user data for dynamic initialization, and restoring RDS and EBS from snapshots.

Learn how AWS Elastic Beanstalk automates deployment of web and worker environments using EC2, auto scaling, load balancing, and RDS, with application versioning and health monitoring.

Deploy a web app with Elastic Beanstalk by selecting a web server environment and a Node.js platform, using a sample code, and review IAM roles, auto scaling, and domain access.