AWS Certified SysOps Administrator Study Guide

ABOUT THE AUTHORS JORGE T. NEGRÓN is part of Cloud Academy’s AWS Subject Matter Experts team where he builds courses, writes blogs and records podcast while helping customers learn and improve their skills in AWS technologies. Prior to that Jorge was AWS Academy’s Technical Program Manager within the training and certification teams. He was born and raised in San Juan Puerto Rico and travels the world enabling customers and partners gain intimate knowledge of Cloud Computing related skills and development. His passion is in education and contributing to the next generation work force with Cloud Computing literacy. CHRISTOFFER JONES, AWS Certified DevOps Professional, is a technologist, IT consultant, and educator who has spent more than 20 years working with IT operations, network engineering, and IT administration. He has spent the last six years diving deep into Amazon Web Services to consult, teach, and mentor others on AWS services and solutions. GEORGE SAWYER has been in technology education since before the turn of the century and was an early adopter of cloud computing. In addition to teaching around the world with his own training company, George has been a senior technical trainer and global learning strategist at Amazon Web Services. He is currently developing learning programs for Compass, Inc. George is a doctoral candidate and lives on his farm with his wife Mandi where they practice regenerative farming and raise heritage livestock.

• Introduction xxiChapter 1 AWS Fundamentals 1Getting Started 1 2The AWS Shared Responsibility Model 8General Root Account Best Practices 9The AWS Global Infrastructure 16The AWS Command-Line Interface 17The AWS Health API and Dashboards 23Pricing 24Summary 25Exam Essentials 25Hands-On Exercises 26Review Questions 29Chapter 2 Account Creation, Security, and Compliance 33Shared Responsibility 34Compliance 37IAM 38AWS Organizations and Control Tower 60AWS Directory Service 68AWS License Manager 72Summary 74Exam Essentials 74Review Questions 75Chapter 3 AWS Cost Management 81AWS Cost and Usage Reports 82AWS Cost Explorer 88Savings Plans 90AWS Budgets 95Managing Costs with Managed Services 99Amazon EC2 Spot Instances and Cost Optimization 100Summary 101Exam Essentials 102Review Questions 104Chapter 4 Automated Security Services and Compliance 109Review Reports, Findings, and Checks 110Data Protection Strategies 131Network Protection Strategies 160Summary 190Exam Essentials 193Review Questions 195Chapter 5 Compute 201The Hypervisor 202Amazon Machine Image (AMI) 203Amazon EC2 206Amazon EC2 Image Builder 211Compute Optimizer 213Elastic Load Balancing 214Auto Scaling 218AWS Application Auto Scaling 223AWS Lambda 225Summary 230Exam Essentials 230Review Questions 232Chapter 6 Storage, Migration, and Transfer 237Storage vs. Migration 238Amazon Simple Storage Service (S3) 239Amazon S3 Glacier 247Amazon Elastic Block Store 252Amazon Elastic File System 256Amazon FSx 259Migration and Transfer 263AWS Backup 263AWS Storage Gateway 267AWS DataSync 270AWS Transfer Family 272Summary 273Exam Essentials 276Review Questions 278Chapter 7 Databases 285Amazon Relational Database Service 286Amazon ElastiCache 294Summary 300Exam Essentials 300Review Questions 302Chapter 8 Monitoring, Logging, and Remediation 307Amazon CloudWatch 308Monitoring on AWS 313Basic CloudWatch Terms and Concepts 315Monitoring Compute 317Monitoring Storage 318CloudWatch Alarms 319CloudWatch Events 320Exercises 322AWS CloudTrail 327API Logs Are Trails of Data 332CloudTrail as a Monitoring Tool 334Exercises 336AWS Config 340AWS Systems Manager 346Exercises 351Summary 357Exam Essentials 358Review Questions 360Chapter 9 Networking 365Networking 366Troubleshooting 371VPC IP Address Manager 371Hubs, Spokes, and Bastion Hosts 373Connecting to the Internet 374Connecting to Networks and Services 375VPC Peering 376Bastion Hosts 378Monitoring VPC Traffic 381AWS Client VPN 384VPC Endpoints 385AWS Transit Gateway 386Cloud WAN 389Summary 389Exam Essentials 389Review Questions 391Chapter 10 Content Delivery 395Domain Name System 396Amazon Route 53 399Route 53 Health Checks 401Routing Policies 404Route 53 Traffic Flow 408Route 53 Guided Exercise 409Amazon CloudFront 412Edge Locations 413The CloudFront Cache Process 413Restricting Access to S3 (OAI vs. OAC) 414CloudFront Functions 415CloudFront Guided Exercise 415AWS Global Accelerator 420Pricing 421Summary 421Exam Essentials 422Review Questions 423Chapter 11 Deployment, Provisioning, and Automation 427Elastic Beanstalk 429Elastic Beanstalk Extensions 433AWS CloudFormation 435Amazon SQS 446Amazon SNS 449Amazon Kinesis Services 451Step Functions 454Summary 457Exam Essentials 458Review Questions 460Appendix Answers to Review Questions 465Chapter 1: AWS Fundamentals 466Chapter 2: Account Creation, Security, and Compliance 468Chapter 3: AWS Cost Management 470Chapter 4: Automated Security Services and Compliance 472Chapter 5: Compute 475Chapter 6: Storage, Migration, and Transfer 477Chapter 7: Databases 481Chapter 8: Monitoring, Logging, and Remediation 483Chapter 9: Networking 485Chapter 10: Content Delivery 487Chapter 11: Deployment, Provisioning, and Automation 488Index 491