AWS Architect

Unit 1: Designing highly available, cost efficient, fault tolerant, scalable systems

1) How to design cloud services?
2) Planning and design?
3) Monitoring
4) Developing to Client Specifications including pricing/cost (e.g., on Demand vs. Reserved vs. Spot, RTO and RPO DR Design)
5) Architectural trade-off decisions (high availability vs. cost, Amazon Relational Database Service
6) (RDS) vs. installing your own database on Amazon Elastic Compute Cloud (EC2)
7) Integrating with existing development environments and building scalable architecture
8) Elasticity and scalability

Unit 2: Implementation/Deployment

1) Configure an Amazon Machine Image (AMI)
2) Operate and extend service management in the private cloud
3) Configure compliance in the private and public cloud
4) Launching instances in a variety of geographical regions

Unit 3: Recognize and implement secure procedures for optimum cloud deployment and maintenance

1) Cloud Security Best Practices
2) How to build and use a threat model
3) How to build and use a data flow diagram for risk management
4) Use cases
5) Abuse Cases (Negative use cases)

Unit 4: Security Architecture with AWS

1) Shared Security Responsibility Mode
2) AWS Platform Compliance
3) AWS security attributes (customer workloads down to physical layer)
4) Security Services
5) AWS Identity and Access Management (IAM)
6) Amazon Virtual Private Cloud (VPC)
7) CIA and AAA models, ingress vs. egress filtering, and which AWS services and features fit
8) “Core” Amazon EC2 and S3 security feature sets
9) Incorporating common conventional security products (Firewall, IDS:HIDS/NIDS, SIEM,VPN)
10) Design patterns
11) DDOS mitigation
12) Encryption
13) Complex access controls (building sophisticated security groups, ACLs, etc.)
14) Amazon CloudWatch for the security architect

Unit 5: Recognize critical disaster recovery techniques and their implementation

1) Disaster Recovery
2) Recovery time objective
3) Recovery point objective
4) Amazon elastic lock store
5) AWS Import/Export
6) AWS storage Gateway
7) Amazon Route53
8) Testing the recovered data

Unit 6: Troubleshooting

1) General troubleshooting information and questions