Concept

  • AWS foundations - The shared responsibility model and the Well-Architected Framework, the two ideas the other AWS pages assume.

Pattern

  • AWS cost - How AWS charges (pricing models) and the Billing and Cost Management tools for tracking and controlling spend.
  • AWS multi-account governance - Running many AWS accounts under AWS Organizations, with guardrails applied from the organization rather than per account.
  • AWS security monitoring - Recording API activity with CloudTrail, detecting threats with GuardDuty, and aggregating findings in Security Hub into one response pipeline.

Tool

  • AWS operations tooling - Monitoring with CloudWatch, defining infrastructure with CloudFormation, and managing instances with Systems Manager.

Service

  • AWS AI services - Pre-trained AWS APIs for language, vision, speech, translation, chatbots, and enterprise search.
  • AWS analytics - Querying, transforming, warehousing, and visualizing data on AWS: Athena, Glue, EMR, Redshift, QuickSight, Data Pipeline, and AppFlow.
  • AWS application integration - APIs, GraphQL, workflows, message brokers, email, and contact centers for connecting application components.
  • AWS application security - Protecting internet-facing AWS applications: web filtering, DDoS protection, TLS certificates, app sign-in, directories, and hardware key storage.
  • AWS compliance and posture - Services that record configuration, scan for vulnerabilities, find sensitive data, investigate incidents, and supply AWS compliance reports.
  • AWS compute - Choosing AWS compute, and running EC2 instances behind load balancers in Auto Scaling groups.
  • AWS compute platforms - Batch jobs, simple virtual servers, managed web platforms, on-premises AWS hardware, and scaling for non-EC2 resources.
  • AWS containers and serverless - Running containers on ECS or EKS with images in ECR, and running functions on Lambda.
  • AWS developer tools - The command line, SDKs, infrastructure-as-code frameworks, cloud IDE, and front-end hosting tools for building on AWS.
  • AWS ecosystem and cloud foundations - Cloud computing basics, the AWS partner ecosystem, and AWS Solutions offerings for starting on AWS.
  • AWS encryption and secrets - Envelope encryption with AWS KMS keys, and storing and rotating credentials in Secrets Manager.
  • AWS IAM - How AWS IAM grants access: identities and roles, how a request’s policies are evaluated, and IAM Identity Center for workforce sign-in.
  • AWS machine learning platforms - Building and serving your own models with SageMaker, plus the managed Personalize and Forecast services.
  • AWS management and governance - Landing zones, service catalogs, quotas, licenses, resource sharing and grouping, and managed operations across AWS accounts.
  • AWS networking - Amazon VPC for private networks in AWS, and Direct Connect for private links from on-premises.
  • AWS operational insight - Tracing requests, AWS service health, account best-practice checks, and configuration management with X-Ray, Health, Trusted Advisor, and OpsWorks.
  • AWS specialized databases - Purpose-built AWS databases beyond RDS and DynamoDB: DocumentDB, Neptune, QLDB, and Managed Blockchain.
  • AWS storage and migration - Backup, file systems, hybrid storage, data transfer, and server and database migration services on AWS.
  • AWS streaming and search - Real-time data streams with Kinesis and MSK, and full-text search with OpenSearch and CloudSearch.
  • CD on AWS - AWS’s code services for source hosting, builds, deployments, pipelines, package repositories, and code review.

Comparison

  • AWS certifications - The Cloud Practitioner, Developer Associate, and Solutions Architect Associate exams compared, with the study path the legacy outlines share.
  • AWS data stores - Choosing an AWS data store, and the main options: RDS, DynamoDB, ElastiCache, and S3.
  • AWS global traffic routing - Getting users to the right AWS endpoint: Route 53 DNS, CloudFront caching, and Global Accelerator, and how to choose between them.
  • AWS messaging - Choosing between SQS queues, SNS topics, and EventBridge event buses for decoupling AWS services.