[NEW] AWS Certified Solutions Architect Associate (SAA-C03)

Explore how an AWS account provides access to regions and AZs, with EC2 and RDS at AZ level, while VPC and S3 are regional, IAM and Route 53 are global.

Create and activate a new AWS account, set a cost budget, and create an IAM user. Prepare SSH key pairs for EC2 access; optionally buy and configure a domain name.

Navigate the AWS management console to switch regions, access account details, and open EC2 and S3 consoles via the search box, with parallel tabs.

Explore how AWS accounts and IAM connect, distinguish root vs non-root users, and manage permissions with IAM policies, groups, and roles for secure cloud access.

Learn how every aws action is an api call accessed via rest endpoints, and how the management console, cli, and sdk simplify authentication with iam.

Learn about IAM credentials, authentication using username and password for the console, and access keys for CLI or SDK, plus default password policies and creating an IAM user.

Version IAM policies to enable safe changes; new policy versions allow rollback to older versions, with up to five versions and the most recent set as default.

Preview advanced IAM topics and their relevance to other AWS services, including cross-account IAM roles, AWS IAM Identity Center, AWS Organizations, and Control Tower for centralized access.

Discover IAM best practices for working in AWS, with exam-relevant concepts to help you prepare for the AWS certified solutions architect associate (SAA-C03) exam.

Learn how Amazon EC2 delivers elastic compute cloud virtual machines in the AWS cloud, letting you select operating system and compute resources while AWS manages hardware across regions and AZs.

Explore elastic block storage for EC2, including root and data volumes, and its persistent, AZ-bound nature. Learn how to resize, snapshot, and back up EBS in S3.

Learn the basics of virtual private cloud networking in AWS. Discover how VPC components like subnets, availability zones, and CIDR ranges determine EC2 IP addressing—private, public, and elastic—and internet access.

Execute a hands-on exercise to enable an EC2 instance with an IAM role to access an S3 bucket, download a file, and serve it via a web server.

Explore the EC2 pricing options—on demand, spot, savings plan, and reserved instances—and how per-second and per-hour pricing and workload patterns drive cost decisions.

Demonstrates how to request spot instances in the EC2 console, set launch parameters, define target capacity and price constraints, and leverage capacity-based matching to save on costs.

Pause the video to read through the Amazon EC2 summary, reinforcing EC2 fundamentals, the section summary, and exam essentials for the AWS SAA-C03 track.

Explore the EC2 advanced topics, including an in-depth look at EBS, elastic network interfaces, hibernation for cost savings, low-latency arrangements, and the EC2 instance metadata service.

Explore elastic block storage (EBS) terminologies like volume size, IOPS (baseline, provisioned, credits), burst performance, and throughput for read/write operations on EC2.

review the exam essentials for the AWS certified solutions architect associate course by pausing each slide to read the notes and reinforce understanding.

Automate the entire ami lifecycle with ec2 image builder, using recipes to create, verify, and distribute custom amis from a base amazon linux ami across regions and accounts.

Enable ALB sticky sessions on the target group using duration-based cookies and a load balancer generated cookie for five minutes, so requests stay on the same EC2 instance.

Compare application load balancer, network load balancer, gateway load balancer, and classic load balancer, covering external vs internal deployment, cross-zone balancing, server name indication, client IP preservation, and proxy protocol.

Explore key autoscaling group features, including termination policy, cooldown period, instance refresh, lifecycle hooks, and warm pools, to optimize scaling and rolling updates for exam readiness.

Configure an autoscaling group with base on-demand capacity and spot pools, using on-demand percentage above base and diverse spot strategies to optimize costs.

Explore load balancers with auto scaling groups, using simple and target tracking scaling policies and CloudWatch alarms. Learn job processing with SQS and S3, plus blue-green deployment with target groups.

Understand that a VPC is an isolated cloud network with subnets. Explore CIDR ranges, internet gateway, NAT gateways, IP addresses, route tables, and VPC firewall (security groups and ACLs).

Attach an internet gateway to the VPC, create a public subnet in one AZ and a private subnet in another, and set up route tables for internet access.

Create a NAT gateway in a public subnet, allocate an elastic IP, and update the private subnet route to flow outbound traffic through the NAT gateway; verify by pinging google.com.

Explore how AWS Transit Gateway uses a hub-and-spoke model to connect thousands of VPCs and on-prem networks via VPN or Direct Connect. Understand regional peering and connect attachments for SD-WAN.

Explore AWS site-to-site VPN architectures, including multiple redundant connections for high availability, public IPs, and VPN cloud hub pattern with detached mode, unique BGP ASNs, and up to 10 sites.

Learn how VPC flow logs capture traffic at ENI, subnet, or VPC levels to troubleshoot issues and monitor bandwidth, with options to send logs to CloudWatch, S3, or Kinesis Firehose.

Explore VPC architectures across availability zones with public and private subnets, NAT gateways, and VPC endpoints to support scalable web and 3-tier applications.

Create a new S3 bucket in the Mumbai region, upload a sample file, and learn about globally unique bucket names and making objects public.

Understand how S3 Intelligent Tiering automatically moves objects between frequently accessed, infrequently accessed, and archived tiers based on usage, with optional Glacier Flexible Retrieval and deep archive.

Explore how s3 sse-kms uses envelope encryption, deriving per-object data keys from a master key and requiring kms generate data key, kms decrypt, and kms describe key permissions.

Enable S3 bucket versioning, demonstrate viewing versions, overwriting with the same key, and recovering from deletes or delete markers to restore previous versions.

Enable S3 server access logs to collect request records, including requester, operation, status, and bytes transferred, stored in a separate bucket. Analyze these logs to enhance security and optimize costs.

Explore S3 Storage Lens, a visualization tool across an AWS organization that surfaces more than 100 metrics on bucket usage, encryption status, requests, and costs to optimize storage and archiving.

Explore S3 performance optimization techniques, including prefix partitioning, multipart uploads, byte-range fetches, transfer acceleration, and CloudFront as a content delivery network to reduce latency for global users.

Learn to use S3 batch operations to replace object tags by creating a manifest, configuring an IAM role with required permissions, running the job, and verifying the results.

Host a static website on s3 using static website hosting over http, then learn how cloudfront and route 53 enable https and custom domains.

Explore the S3 requester pays feature, shifting data access and transfer costs to the requester. Enforce usage via bucket policies and headers, while storage costs stay with the bucket owner.

Amazon S3 explains cross-origin resource sharing (CORS), the same-origin policy, preflight requests, and bucket-level CORS configuration with origins, methods, and headers.