AWS Certified SysOps Administrator - Associate (SOA-C02) Exam Cram

Marko Sluga has more than 20 years of experience in IT and has had the benefit of witnessing the rise of cloud computing. Marko has worked on a variety of cloud-related projects, from the early stages of SOC, corporate virtualization, and open-source API offerings to modern, fully automated, intelligent, serverless, and cloud-native solutions. Marko has been working with Amazon Web Services (AWS) since the start of the 2010s and holds three associate, two professional, and three specialty AWS certifications. Marko performs training and advising on cloud technologies and strategies, DevOps, and IT system and process optimization to clients from a wide range of companies, including startups, SMBs, enterprise businesses, and Fortune 500 companies. Marko runs his own cloud training, coaching, and consulting practice under the markocloud.com brand. He is the author of the AWS Certified Developer -Associate (DVA-C01) Cert Guide. Rick Crisci is the founder and principal trainer for Trainertests.com and is an experienced AWS and VMware instructor. Original content by Rick can be found on a variety of platforms including Pearson, LinkedIn Learning, and Udemy, with more than 30 courses, over 250,000 students, and exceptionally high course review scores. Rick also teaches live hands-on AWS courses regularly for Pearson on O'Reilly. Prior to becoming an instructor, Rick had over 15 years of real-world experience. Some career highlights include designing high-speed Internet networks in the early 2000s and managing virtualization and networking teams for a financial institution. In 2017, VMware recognized Rick as the first runner-up for Instructor of the Year for the Americas. This honor was largely due to the glowing feedback from his students. Rick seeks to help students learn by taking complex concepts and providing clear and simple explanations, diagrams, and analogies. At the impressionable age of 14, William “Bo” Rothwell crossed paths with a TRS-80 Micro Computer System (affectionately known as a “Trash 80”). Soon after, the adults responsible for Bo made the mistake of leaving him alone with the TRS-80. He immediately dismantled it and held his first computer class, showing his friends what made this “computer thing” work. Since that experience, Bo's passion for understanding how computers work and sharing this knowledge with others has resulted in a rewarding career in IT training. His experience includes Cloud, Linux, UNIX, IT security, DevOps, and programming languages such as Perl, Python, Tcl, and BASH. He is the founder and lead instructor of One Course Source, an IT training organization.

    Introduction. . . . . . . . . . . . . . . . . . . . . . . xviii

CHAPTER 1: Introduction to AWS. . . . . . . . . . . . . . . . . . . . . 1

    What Is Cloud Computing?.. . . . . . . . . . . . . . . . 2

    The AWS Cloud. . . . . . . . . . . . . . . . . . . . 8

    Six Benefits of the AWS Cloud.. . . . . . . . . . . . . . . 13

    AWS Services Overview. . . . . . . . . . . . . . . . . 16

    What Next?.. . . . . . . . . . . . . . . . . . . . . 23

CHAPTER 2: Monitoring Services in AWS.. . . . . . . . . . . . . . . . . 25

    Metering, Monitoring, and Alerting. . . . . . . . . . . . . 26

    CloudWatch. . . . . . . . . . . . . . . . . . . . . 30

    CloudTrail.. . . . . . . . . . . . . . . . . . . . . . 36

    What Next?.. . . . . . . . . . . . . . . . . . . . . 39

CHAPTER 3: Troubleshooting and Remediation. . . . . . . . . . . . . . . 41

    Responding to Alarms.. . . . . . . . . . . . . . . . . . 42

    Amazon EventBridge. . . . . . . . . . . . . . . . . . 48

    AWS Config. . . . . . . . . . . . . . . . . . . . . 51

    What Next?.. . . . . . . . . . . . . . . . . . . . . 53

CHAPTER 4: Implementing Scalability and Elasticity.. . . . . . . . . . . . . 55

    Scaling in the Cloud.. . . . . . . . . . . . . . . . . . 56

    Caching.. . . . . . . . . . . . . . . . . . . . . . . 67

    Read Replicas.. . . . . . . . . . . . . . . . . . . . . 78

    What Next?.. . . . . . . . . . . . . . . . . . . . . 83

CHAPTER 5: High Availability and Resilience. . . . . . . . . . . . . . . . 85

    Availability Zones in AWS.. . . . . . . . . . . . . . . . 88

    High Availability with Elastic Load Balancers and Route 53.. . . . . 94

    Highly Available Datastores.. . . . . . . . . . . . . . . . 98

    Highly Available Databases. . . . . . . . . . . . . . . . 103

    What Next?.. . . . . . . . . . . . . . . . . . . . . 108

CHAPTER 6: Backup and Restore Strategies. . . . . . . . . . . . . . . . 109

    Backup in the Cloud.. . . . . . . . . . . . . . . . . . 110

    S3 as a Backup Service.. . . . . . . . . . . . . . . . . . 119

    What Next?.. . . . . . . . . . . . . . . . . . . . . 124

CHAPTER 7: Provisioning Resources.. . . . . . . . . . . . . . . . . . . 125

    Deployment Tools in AWS. . . . . . . . . . . . . . . . 126

    What Next?.. . . . . . . . . . . . . . . . . . . . . 136

CHAPTER 8: Application Management.. . . . . . . . . . . . . . . . . . 137

    Lifecycle Management. . . . . . . . . . . . . . . . . . 138

    Patching.. . . . . . . . . . . . . . . . . . . . . . 147

    What Next?.. . . . . . . . . . . . . . . . . . . . . 153

CHAPTER 9: Security and Compliance.. . . . . . . . . . . . . . . . . . 155

    Account Management.. . . . . . . . . . . . . . . . . . 156

    What Next?.. . . . . . . . . . . . . . . . . . . . . 169

CHAPTER 10: Data Protection at Rest and in Transit. . . . . . . . . . . . . . 171

    Protecting Data.. . . . . . . . . . . . . . . . . . . . 172

    What Next?.. . . . . . . . . . . . . . . . . . . . . 182

CHAPTER 11: Networking and Connectivity.. . . . . . . . . . . . . . . . . 183

    The VPC. . . . . . . . . . . . . . . . . . . . . . 184

    VPC Connectivity. . . . . . . . . . . . . . . . . . . 189

    AWS Network Firewall.. . . . . . . . . . . . . . . . . 197

    VPC Endpoints.. . . . . . . . . . . . . . . . . . . . 199

    VPC Peering.. . . . . . . . . . . . . . . . . . . . . 202

    VPN .. . . . . . . . . . . . . . . . . . . . . . . 206

    Direct Connect. . . . . . . . . . . . . . . . . . . . 209

    AWS WAF. . . . . . . . . . . . . . . . . . . . . . 212

    AWS Shield.. . . . . . . . . . . . . . . . . . . . . 214

    What Next?.. . . . . . . . . . . . . . . . . . . . . 216

CHAPTER 12: Domains, DNS, and Content Delivery.. . . . . . . . . . . . . . 217

    Route 53.. . . . . . . . . . . . . . . . . . . . . . 218

    Route 53 Routing Policies.. . . . . . . . . . . . . . . . 222

    S3 Static Website Hosting.. . . . . . . . . . . . . . . . 227

    Amazon CloudFront.. . . . . . . . . . . . . . . . . . 231

    S3 Origin Access Identity.. . . . . . . . . . . . . . . . . 235

    What Next?.. . . . . . . . . . . . . . . . . . . . . 237

CHAPTER 13: Troubleshoot Network Connectivity. . . . . . . . . . . . . . . 239

    Configuring VPC Flow Logs.. . . . . . . . . . . . . 240

    ELB Access Logs.. . . . . . . . . . . . . . . . . . . 245

    AWS WAF ACL Logs.. . . . . . . . . . . . . . . . . . 248

    CloudFront Logs.. . . . . . . . . . . . . . . . . . . 251

    CloudFront Caching Issues.. . . . . . . . . . . . . . . . 253

    Troubleshooting Hybrid and Private Links. . . . . . . . . . . 256

    What Next?.. . . . . . . . . . . . . . . . . . . . . 258

CHAPTER 14: Cost Optimization Strategies.. . . . . . . . . . . . . . . . . 259

    Operational Optimization.. . . . . . . . . . . . . . . . 260

    What Next?.. . . . . . . . . . . . . . . . . . . . . 269

CHAPTER 15: Performance Optimization.. . . . . . . . . . . . . . . . . . 271

    Optimizing for Performance. . . . . . . . . . . . . . . . 272

    What Next?.. . . . . . . . . . . . . . . . . . . . . 281

Glossary.. . . . . . . . . . . . . . . . . . . . . . . . 283

9780137509584, TOC, 3/30/22