AWS – ARCH

About This Course

Architecting on AWS is for solutions architects, solution-design engineers, and developers seeking an understanding of AWS architecting. In this course, you will learn to identify services and features to build resilient, secure and highly available IT solutions on the AWS Cloud. Architectural solutions differ depending on industry, types of applications, and business size. AWS Instructors emphasize best practices using the AWS Well-Architected Framework, and guide you through the process of designing optimal IT solutions, based on real-life scenarios. The modules focus on account security, networking, compute, storage, databases, monitoring, automation, containers, server less architecture, edge services, and backup and recovery. At the end of the course, you will practice building a solution and apply what you have learned with confidence.

Audience Profile

This course is intended for solutions architects, solution-design engineers, developers seeking an understanding of AWS architecting and individuals seeking the AWS Solutions Architect-Associate certification.

Course Objectives

• Identify AWS architecting basic practices.
• Explore using the AWS management tools: The AWS Console, Command Line Interface (CLI), and
• Cloud Formation in a lab environment.
• Examine the enforcement of accounts security using policies.
• Identify the elements that build an elastic, secure, virtual network that includes private and public subnets.
• Practice building an AWS core networking infrastructure.
• Determine strategies for a layered security approach to Virtual Private Cloud (VPC) subnets.
• Identify strategies to select the appropriate compute resources based on business use-cases.
• Practice building a VPC and adding an Elastic Cloud Compute (EC2) instance in a lab
• Environment.
• Practice installing an Amazon Relational Database Service (RDS) instance and an Application Load Balancer (ALB) in the VPC you created.
• Compare and contrast AWS storage products and services, based on business scenarios.
• Compare and contrast the different types of AWS database services based on business needs.
• Practice building a highly available, auto-scaling database layer in a lab.
• Explore the business value of AWS monitoring solutions.
• Identify the role of monitoring, event driven load balancing, and auto scaling responses, based on usage and needs
• Identify and discuss AWS automation tools that will help you build, maintain and evolve your
• Infrastructure.
• Discuss network peering, VPC endpoints, gateway and routing solutions based on use-cases.
• Discuss hybrid networking configurations to extend and secure your infrastructure.
• Discuss the benefits of micro services as an effective decoupling strategy to power highly available applications at scale.
• Explore AWS container services for the rapid implementation of an infrastructure-agnostic,
• Portable application environment.
• Identify the business and security benefits of AWS server less services based on business examples.
•  
• Practice building a server less infrastructure.
• Discuss the ways in which AWS edge services address latency and security.
• Practice building a Cloud Front deployment with an S3 backend in a lab environment.

Prerequisites

We recommend that attendees of this course have the following prerequisites:

Working knowledge of distributed systems:

• AWS Essentials
• Familiarity with general networking concepts
• Familiarity with IP addressing
• Working knowledge of multi-tier architectures
• Familiarity with cloud computing concepts

Course Outline

Module 1: Understanding On-premises Datacenter Architecture

• Understanding Virtualized Datacenter
• What is Cloud?
• Characteristics of Cloud
• How Cloud Works?
• Cloud Offerings
• Types of Cloud

Module 2: AWS Services and Infrastructure

• Architecture Of AWS and Infrastructure Models
• AWS well Architected Framework

Module 3: AWS Networking

• What is AWS Virtual Private Cloud?
• How AWS Virtual Private Cloud Works
• Understanding Subnets (Public and Private) and Implementing Subnets
• Understanding Routing Table and Creating Custom Routing Table
• What is internet Gateway
• How Internet Gateway works
• Creating Internet Gateway
• Attaching Internet Gateway with VPC
• Configuring routing table to access internet gateway
• understanding NAT Gateway and Instance
• Creating NAT Gateway in Public Subnet
• Configuring routing table to access NAT Gateway,
• VPC peering
• VPC Endpoint

Module 4: Amazon Elastic Compute Cloud

• Understanding EC2 Instance
• EC2 Instance types and Purchase Options
• EC2 Instance Selection
• Creating EC2 Instance and accessing Ec2 Instance

Module 5: Securing EC2 Instance and Subnets

• Security Group and NACL
• What is Security group?
• Why Security Group?
• How Security Group Works
• Creating Inbound and Outbound rule
• Implementing Security Group In EC2 Instances
• What is NACL
• How NACL Works
• Inbound and Outbound rule
• Implementing NACL

Module 6: AWS Storage

• Architecture of AWS Storage (EBS,EFS,S3,Instance Store)
• Use Case of EBS, EFS,S3,instance Store
• Understanding and Configuring EBS Volumes
• Understanding EBS Snapshots and Creating EBS Snapshots
• How to restore EBS snapshots
• Understanding EFS
• How it works and Mounting to ec2 instances
• Understanding s3 storage
• Use cases of s3 storage
• Storage Classes of S3 Bucket and high availability of s3 bucket
• Understanding of object life cycle management
• configuring s3 bucket as static website host
• S3 Bucket permissions and policies
• Storage Gateway

Module 7: AWS High Availability, Load Balancing and Traffic Management

• Elastic Load Balancer and Route 53
• What is ELB
• How ELB Works
• Types Of ELB
• Difference between NLB, ALB, CLB
• Use cases of all the ELB
• Implementing ELB
• Understanding Route 53
• Understanding routing policy (simple, failover, weight, latency, geolocation, geoproximity, Multivalued answer)
• Implementing route 53 between the regions

Module 8: IAM ( Identity and Access Management)

• Understanding IAM
• How IAM works
• Creating a users and Group
• Understanding IAM Policy
• Creating IAM Policy using Visua editor
• Configuring and Applying IAM policy
• Configuring MFA

Module 9: AWS Database Services

• AWS Database Solutions
• AWS Relational Database Service(RDS)
• Dynamo DB Features and use cases
• Understanding Red Shift
• Creating and managing AWS Relational Database Service Infrastructure
• Understanding and Implementing Elastic Cache
• Implementing Dynamo DB
• Implementing Redshift

Module 10: Server Less Computing, Containers and Server less Architecture

• Understanding Lambda
• How Lambda Works
• use case of LAMBDA
• Implementing Lambda
• Understanding Elastic Beanstalk
• Implementing Elastic Beanstalk
• Amazon API Gateway
• Amazon SQS
• Amazon SNS
• Amazon Kinesis Data Streams & Kinesis Fire hose
• Step Function

Module 11: Monitoring and Scaling

• Cloud Watch
• Cloud Trail
• VPC Flow Logs
• Auto Scaling Options and Monitoring Cost

Module 12: Edge Services

• Amazon Cloud Front
• AWS Global Accelerator
• AWS Web Application Firewall (WAF)
• DDOS and Firewall Manager

Module 13: AWS Server Migration Services

• AWS Server Migration Services
• What is AWS Server Migration Service
• How AWS Server Migration Service works
• Implementing Server Migration Services