Podcast
Questions and Answers
A company is designing a multi-region application that requires low latency access to data. Which AWS service, when integrated with Amazon S3, would BEST accelerate data retrieval?
A company is designing a multi-region application that requires low latency access to data. Which AWS service, when integrated with Amazon S3, would BEST accelerate data retrieval?
- Amazon CloudFront (correct)
- AWS Direct Connect
- AWS Storage Gateway
- AWS DataSync
An organization wants to control costs and ensure that their AWS resources are being used efficiently. Which of the following strategies is the MOST effective for achieving this goal?
An organization wants to control costs and ensure that their AWS resources are being used efficiently. Which of the following strategies is the MOST effective for achieving this goal?
- Implementing AWS Cost Explorer and regularly reviewing the Cost and Usage Report. (correct)
- Provisioning all resources as Reserved Instances for maximum discounts.
- Using only On-Demand Instances to avoid long-term commitments.
- Relying solely on AWS Trusted Advisor's recommendations without further analysis.
A company needs to ensure its web application can withstand sudden spikes in traffic. Which combination of AWS services would BEST provide scalability and protect against DDoS attacks?
A company needs to ensure its web application can withstand sudden spikes in traffic. Which combination of AWS services would BEST provide scalability and protect against DDoS attacks?
- AWS KMS, Amazon S3, and Amazon Route 53.
- AWS Shield, Amazon EC2 Auto Scaling, and Amazon CloudWatch.
- AWS IAM, AWS Lambda, and Amazon SQS.
- AWS WAF, Amazon CloudFront, and Amazon EC2 Auto Scaling. (correct)
A solutions architect is designing a data lake solution on AWS. The data lake must support various analytics tools and provide fine-grained access control. Which combination of AWS services would BEST meet these requirements?
A solutions architect is designing a data lake solution on AWS. The data lake must support various analytics tools and provide fine-grained access control. Which combination of AWS services would BEST meet these requirements?
A company wants to improve the security posture of its AWS environment by implementing a solution that continuously monitors for malicious activity and unauthorized behavior. Which AWS service BEST fits this use case?
A company wants to improve the security posture of its AWS environment by implementing a solution that continuously monitors for malicious activity and unauthorized behavior. Which AWS service BEST fits this use case?
An organization is required to maintain a detailed audit trail of all API calls made within their AWS environment for compliance purposes. Which AWS service should they implement to meet this requirement?
An organization is required to maintain a detailed audit trail of all API calls made within their AWS environment for compliance purposes. Which AWS service should they implement to meet this requirement?
A company needs to securely store and manage encryption keys used to protect sensitive data in their AWS environment. Which AWS service is specifically designed for this purpose?
A company needs to securely store and manage encryption keys used to protect sensitive data in their AWS environment. Which AWS service is specifically designed for this purpose?
An architect is designing a solution that requires processing large streams of data in real-time. Which AWS service is BEST suited for ingesting, buffering, and processing these data streams?
An architect is designing a solution that requires processing large streams of data in real-time. Which AWS service is BEST suited for ingesting, buffering, and processing these data streams?
A solutions architect must design a highly available and scalable e-commerce platform. Which strategy should the architect implement to minimize dependencies and ensure resilience?
A solutions architect must design a highly available and scalable e-commerce platform. Which strategy should the architect implement to minimize dependencies and ensure resilience?
A company is migrating a legacy application to AWS and needs to minimize downtime during the database migration. Which AWS service would BEST facilitate this with minimal application changes?
A company is migrating a legacy application to AWS and needs to minimize downtime during the database migration. Which AWS service would BEST facilitate this with minimal application changes?
An organization wants to automate infrastructure provisioning and management on AWS using infrastructure as code. Which AWS service is designed for this purpose?
An organization wants to automate infrastructure provisioning and management on AWS using infrastructure as code. Which AWS service is designed for this purpose?
A company is developing a serverless application that requires a fully managed NoSQL database with predictable performance at any scale. Which AWS database service is MOST suitable for this application?
A company is developing a serverless application that requires a fully managed NoSQL database with predictable performance at any scale. Which AWS database service is MOST suitable for this application?
A solutions architect is designing a cost-effective backup and recovery solution for a critical application. Which storage tier is BEST suited for archiving infrequent accessed data while minimizing storage costs?
A solutions architect is designing a cost-effective backup and recovery solution for a critical application. Which storage tier is BEST suited for archiving infrequent accessed data while minimizing storage costs?
A company is looking to implement a hybrid cloud architecture that allows them to seamlessly extend their on-premises network to AWS. Which AWS service would BEST facilitate this connection?
A company is looking to implement a hybrid cloud architecture that allows them to seamlessly extend their on-premises network to AWS. Which AWS service would BEST facilitate this connection?
An architect is designing a solution for a global company that requires the ability to route users to the nearest endpoint for optimal performance. Which AWS service should they implement to achieve this?
An architect is designing a solution for a global company that requires the ability to route users to the nearest endpoint for optimal performance. Which AWS service should they implement to achieve this?
A development team needs to share code and collaborate efficiently using a private Git repository hosted on AWS. Which AWS service is designed for this purpose?
A development team needs to share code and collaborate efficiently using a private Git repository hosted on AWS. Which AWS service is designed for this purpose?
A company wants to automate the deployment of applications to various environments on AWS using a continuous delivery pipeline. Which AWS service can be used to orchestrate this pipeline?
A company wants to automate the deployment of applications to various environments on AWS using a continuous delivery pipeline. Which AWS service can be used to orchestrate this pipeline?
A security engineer needs to ensure that all data stored in Amazon S3 is encrypted at rest and in transit. Which combination of actions would BEST achieve this?
A security engineer needs to ensure that all data stored in Amazon S3 is encrypted at rest and in transit. Which combination of actions would BEST achieve this?
Which disaster recovery (DR) strategy involves replicating data to a secondary AWS Region and bringing up a scaled-down version of the application in that region?
Which disaster recovery (DR) strategy involves replicating data to a secondary AWS Region and bringing up a scaled-down version of the application in that region?
A company requires a high-performance computing (HPC) environment for running complex simulations. Which AWS service is BEST suited for running these workloads?
A company requires a high-performance computing (HPC) environment for running complex simulations. Which AWS service is BEST suited for running these workloads?
Which AWS service is specifically designed to provide a managed Apache Kafka service, enabling you to build real-time streaming applications?
Which AWS service is specifically designed to provide a managed Apache Kafka service, enabling you to build real-time streaming applications?
A company wants to detect and prevent intrusions into their AWS environment. Which AWS service offers intrusion detection and prevention capabilities?
A company wants to detect and prevent intrusions into their AWS environment. Which AWS service offers intrusion detection and prevention capabilities?
An organization needs to categorize and protect sensitive data stored in Amazon S3 based on its content. Which AWS service can automatically discover, classify, and protect sensitive data in S3?
An organization needs to categorize and protect sensitive data stored in Amazon S3 based on its content. Which AWS service can automatically discover, classify, and protect sensitive data in S3?
A financial services company must ensure that all data stored in their AWS environment is compliant with strict regulatory requirements for data residency. Which AWS service can help meet these requirements?
A financial services company must ensure that all data stored in their AWS environment is compliant with strict regulatory requirements for data residency. Which AWS service can help meet these requirements?
A solutions architect is designing a resilient application that needs to distribute incoming traffic across multiple EC2 instances in different Availability Zones. Which AWS service is BEST suited to achieve this?
A solutions architect is designing a resilient application that needs to distribute incoming traffic across multiple EC2 instances in different Availability Zones. Which AWS service is BEST suited to achieve this?
Flashcards
AWS Certified Solutions Architect - Associate (SAA-C03) exam
AWS Certified Solutions Architect - Associate (SAA-C03) exam
Validates a candidate's ability to design solutions based on the AWS Well-Architected Framework.
Designing solutions on AWS
Designing solutions on AWS
Involves incorporating AWS services to meet current and future business needs.
Key architecture considerations
Key architecture considerations
Architectures that are secure, resilient, high-performing, and cost-optimized.
Target candidate experience
Target candidate experience
Signup and view all the flashcards
Multiple choice questions
Multiple choice questions
Signup and view all the flashcards
Multiple response questions
Multiple response questions
Signup and view all the flashcards
Purpose of unscored questions
Purpose of unscored questions
Signup and view all the flashcards
Minimum passing score
Minimum passing score
Signup and view all the flashcards
Task Statement 1.1
Task Statement 1.1
Signup and view all the flashcards
Access management knowledge
Access management knowledge
Signup and view all the flashcards
AWS federated access services
AWS federated access services
Signup and view all the flashcards
Task Statement 1.2
Task Statement 1.2
Signup and view all the flashcards
Application security knowledge
Application security knowledge
Signup and view all the flashcards
AWS Security Services
AWS Security Services
Signup and view all the flashcards
Task Statement 1.3
Task Statement 1.3
Signup and view all the flashcards
Data Access Knowledge
Data Access Knowledge
Signup and view all the flashcards
Task Statement 2.1
Task Statement 2.1
Signup and view all the flashcards
API creation
API creation
Signup and view all the flashcards
Task Statement 2.2
Task Statement 2.2
Signup and view all the flashcards
Global AWS Infrastructure
Global AWS Infrastructure
Signup and view all the flashcards
Task Statement 3.1
Task Statement 3.1
Signup and view all the flashcards
Hybrid Cloud Storage
Hybrid Cloud Storage
Signup and view all the flashcards
Task Statement 4.1
Task Statement 4.1
Signup and view all the flashcards
AWS Cost features
AWS Cost features
Signup and view all the flashcards
Task Statement 4.2
Task Statement 4.2
Signup and view all the flashcards
Study Notes
- The AWS Certified Solutions Architect - Associate (SAA-C03) exam validates the ability to design solutions based on the AWS Well-Architected Framework.
- The exam is intended for individuals who perform a solutions architect role.
- Successfully completing the exam shows the ability to:
- Designing solutions that incorporate AWS services to meet current business requirements and future projected needs
- Design architectures that are secure, resilient, high-performing, and cost-optimized
- Review existing solutions and determine improvements
- Target candidates should have at least 1 year of hands-on experience designing cloud solutions that use AWS services.
Exam Content: Response Types
- Multiple-choice questions have one correct response and three incorrect responses (distractors).
- Multiple-response questions have two or more correct responses out of five or more response options.
- Distractors are plausible, incorrect answer options designed to test incomplete knowledge.
- There is no penalty for guessing.
- The exam includes 50 questions that affect your score.
- There are 15 unscored questions that do not affect your score.
- AWS collects information about performance on these unscored questions to evaluate these questions for future use as scored questions.
Exam Results
- The AWS Certified Solutions Architect - Associate (SAA-C03) exam has a pass or fail designation.
- The exam is scored against a minimum standard established by AWS professionals following certification industry best practices and guidelines.
- Results are reported as a scaled score from 100–1,000 and the minimum passing score is 720.
- The score shows performance and whether the examinee passed.
- Scaled scoring models help equate scores across multiple exam forms with slightly different difficulty levels.
- A score report contains a table of classifications of performance at each section level.
- The exam uses a compensatory scoring model, meaning no passing score is needed in each section, only on the overall exam.
- Each section has a specific weighting; some sections have more questions than others.
Content Outline
- This exam guide includes weightings, content domains, and task statements for the exam.
- The guide does not provide a comprehensive list of the content.
- Additional context for each task statement is available to help prepare for the exam.
Content Domains and Weightings
- Domain 1: Design Secure Architectures (30% of scored content)
- Domain 2: Design Resilient Architectures (26% of scored content)
- Domain 3: Design High-Performing Architectures (24% of scored content)
- Domain 4: Design Cost-Optimized Architectures (20% of scored content)
Domain 1: Design Secure Architectures
- Task Statement 1.1: Design secure access to AWS resources
Task Statement 1.1 Knowledge
- Access controls and management across multiple accounts
- AWS federated access and identity services (for example, AWS Identity and Access Management [IAM], AWS IAM Identity Center [AWS Single Sign-On])
- AWS global infrastructure (for example, Availability Zones, AWS Regions)
- AWS security best practices (for example, the principle of least privilege)
- The AWS shared responsibility model
Task Statement 1.1 Skills
- Applying AWS security best practices to IAM users and root users (for example, multi-factor authentication [MFA])
- Designing a flexible authorization model that includes IAM users, groups, roles, and policies
- Designing a role-based access control strategy (for example, AWS Security Token Service [AWS STS], role switching, cross-account access)
- Designing a security strategy for multiple AWS accounts (for example, AWS Control Tower, service control policies [SCPs])
- Determining the appropriate use of resource policies for AWS services
- Determining when to federate a directory service with IAM roles
Domain 1: Task statement 1.2
- Task Statement 1.2: Design secure workloads and applications.
Task Statement 1.2 Knowledge
- Application configuration and credentials security
- AWS service endpoints
- Control ports, protocols, and network traffic on AWS
- Secure application access
- Security services with appropriate use cases (for example, Amazon Cognito, Amazon GuardDuty, Amazon Macie)
- Threat vectors external to AWS (for example, DDoS, SQL injection)
Task Statement 1.2 Skills
- Designing VPC architectures with security components (for example, security groups, route tables, network ACLs, NAT gateways)
- Determining network segmentation strategies (for example, using public subnets and private subnets)
- Integrating AWS services to secure applications (for example, AWS Shield, AWS WAF, IAM Identity Center, AWS Secrets Manager)
- Securing external network connections to and from the AWS Cloud (for example, VPN, AWS Direct Connect)
Domain 1: Task statement 1.3
- Task Statement 1.3: Determine appropriate data security controls
Task Statement 1.3 Knowledge
- Data access and governance
- Data recovery
- Data retention and classification
- Encryption and appropriate key management
Task Statement 1.3 Skills
- Aligning AWS technologies to meet compliance requirements
- Encrypting data at rest (for example, AWS Key Management Service [AWS KMS])
- Encrypting data in transit (for example, AWS Certificate Manager [ACM] using TLS)
- Implementing access policies for encryption keys
- Implementing data backups and replications
- Implementing policies for data access, lifecycle, and protection
- Rotating encryption keys and renewing certificates
Domain 2: Design Resilient Architectures
- Task Statement 2.1: Design scalable and loosely coupled architectures.
Task Statement 2.1 Knowledge
- API creation and management (for example, Amazon API Gateway, REST API)
- AWS managed services with appropriate use cases (for example, AWS Transfer Family, Amazon Simple Queue Service [Amazon SQS], Secrets Manager)
- Caching strategies
- Design principles for microservices (for example, stateless workloads compared with stateful workloads)
- Event-driven architectures
- Horizontal scaling and vertical scaling
- How to appropriately use edge accelerators (for example, content delivery network [CDN])
- How to migrate applications into containers
- Load balancing concepts (for example, Application Load Balancer)
- Multi-tier architectures
- Queuing and messaging concepts (for example, publish/subscribe)
- Serverless technologies and patterns (for example, AWS Fargate, AWS Lambda)
- Storage types with associated characteristics (for example, object, file, block)
- The orchestration of containers (for example, Amazon Elastic Container Service [Amazon ECS], Amazon Elastic Kubernetes Service [Amazon EKS])
- When to use read replicas
- Workflow orchestration (for example, AWS Step Functions)
Task Statement 2.1 Skills
- Designing event-driven, microservice, and/or multi-tier architectures based on requirements
- Determining scaling strategies for components used in an architecture design
- Determining the AWS services required to achieve loose coupling based on requirements
- Determining when to use containers
- Determining when to use serverless technologies and patterns
- Recommending appropriate compute, storage, networking, and database technologies based on requirements
- Using purpose-built AWS services for workloads
Domain 2: Task Statement 2.2
- Task Statement 2.2: Design highly available and/or fault-tolerant architectures
Task Statement 2.2 Knowledge
- AWS global infrastructure (for example, Availability Zones, AWS Regions, Amazon Route 53)
- AWS managed services with appropriate use cases (for example, Amazon Comprehend, Amazon Polly)
- Basic networking concepts (for example, route tables)
- Disaster recovery (DR) strategies (for example, backup and restore, pilot light, warm standby, active-active failover, recovery point objective [RPO], recovery time objective [RTO])
- Distributed design patterns
- Failover strategies
- Immutable infrastructure
- Load balancing concepts (for example, Application Load Balancer)
- Proxy concepts (for example, Amazon RDS Proxy)
- Service quotas and throttling (for example, how to configure the service quotas for a workload in a standby environment)
- Storage options and characteristics (for example, durability, replication)
- Workload visibility (for example, AWS X-Ray)
Task Statement 2.2 Skills
- Determining automation strategies to ensure infrastructure integrity
- Determining the AWS services required to provide a highly available and/or fault-tolerant architecture across AWS Regions or Availability Zones
- Identifying metrics based on business requirements to deliver a highly available solution
- Implementing designs to mitigate single points of failure
- Implementing strategies to ensure the durability and availability of data (for example, backups)
- Selecting an appropriate DR strategy to meet business requirements
- Using AWS services that improve the reliability of legacy applications and applications not built for the cloud (for example, when application changes are not possible)
- Using purpose-built AWS services for workloads
Domain 3: Design High-Performing Architectures
- Task Statement 3.1: Determine high-performing and/or scalable storage solutions.
Task Statement 3.1 Knowledge
- Hybrid storage solutions to meet business requirements
- Storage services with appropriate use cases (for example, Amazon S3, Amazon Elastic File System [Amazon EFS], Amazon Elastic Block Store [Amazon EBS])
- Storage types with associated characteristics (for example, object, file, block)
Task Statement 3.1 Skills
- Determining storage services and configurations that meet performance demands
- Determining storage services that can scale to accommodate future needs
Domain 3: Task Statement 3.2
- Task Statement 3.2: Design high-performing and elastic compute solutions.
Task Statement 3.2 Knowledge
- AWS compute services with appropriate use cases (for example, AWS Batch, Amazon EMR, Fargate)
- Distributed computing concepts supported by AWS global infrastructure and edge services
- Queuing and messaging concepts (for example, publish/subscribe)
- Scalability capabilities with appropriate use cases (for example, Amazon EC2 Auto Scaling, AWS Auto Scaling)
- Serverless technologies and patterns (for example, Lambda, Fargate)
- The orchestration of containers (for example, Amazon ECS, Amazon EKS)
Task Statement 3.2 Skills
- Decoupling workloads so that components can scale independently
- Identifying metrics and conditions to perform scaling actions
- Selecting the appropriate compute options and features (for example, EC2 instance types) to meet business requirements
- Selecting the appropriate resource type and size (for example, the amount of Lambda memory) to meet business requirements
Domain 3: Task Statement 3.3
- Task Statement 3.3: Determine high-performing database solutions.
Task Statement 3.3 Knowledge
- AWS global infrastructure (for example, Availability Zones, AWS Regions)
- Caching strategies and services (for example, Amazon ElastiCache)
- Data access patterns (for example, read-intensive compared with write-intensive)
- Database capacity planning (for example, capacity units, instance types, Provisioned IOPS)
- Database connections and proxies
- Database engines with appropriate use cases (for example, heterogeneous migrations, homogeneous migrations)
- Database replication (for example, read replicas)
- Database types and services (for example, serverless, relational compared with non-relational, in-memory)
Task Statement 3.3 Skills
- Configuring read replicas to meet business requirements
- Designing database architectures
Domain 3: Task Statement 3.4
-Task Statement 3.4: Determine high-performing and/or scalable network architectures
Task Statement 3.4 Knowledge
- Edge networking services with appropriate use cases (for example, Amazon CloudFront, AWS Global Accelerator)
- How to design network architecture (for example, subnet tiers, routing, IP addressing)
- Load balancing concepts (for example, Application Load Balancer)
- Network connection options (for example, AWS VPN, Direct Connect, AWS PrivateLink)
Task Statement 3.4 Skills
- Creating a network topology for various architectures (for example, global, hybrid, multi-tier)
- Determining network configurations that can scale to accommodate future needs
- Determining the appropriate placement of resources to meet business requirements
- Selecting the appropriate load balancing strategy
Domain 3: Task Statement 3.5
- Task Statement 3.5: Determine high-performing data ingestion and transformation solutions.
Task Statement 3.5 Knowledge
- Data analytics and visualization services with appropriate use cases (for example, Amazon Athena, AWS Lake Formation, Amazon QuickSight)
- Data ingestion patterns (for example, frequency)
- Data transfer services with appropriate use cases (for example, AWS DataSync, AWS Storage Gateway)
- Data transformation services with appropriate use cases (for example, AWS Glue)
- Secure access to ingestion access points
- Sizes and speeds needed to meet business requirements
- Streaming data services with appropriate use cases (for example, Amazon Kinesis)
Task Statement 3.5 Skills
- Building and securing data lakes
- Designing data streaming architectures
- Designing data transfer solutions
- Implementing visualization strategies
- Selecting appropriate compute options for data processing (for example, Amazon EMR)
- Selecting appropriate configurations for ingestion
- Transforming data between formats (for example, .csv to .parquet)
Domain 4: Design Cost-Optimized Architectures
- Task Statement 4.1: Design cost-optimized storage solutions.
Task Statement 4.1 Knowledge
- Access options (for example, an S3 bucket with Requester Pays object storage)
- AWS cost management service features (for example, cost allocation tags, multi-account billing)
- AWS cost management tools with appropriate use cases (for example, AWS Cost Explorer, AWS Budgets, AWS Cost and Usage Report)
- AWS storage services with appropriate use cases (for example, Amazon FSx, Amazon EFS, Amazon S3, Amazon EBS)
- Backup strategies
- Block storage options (for example, hard disk drive [HDD] volume types, solid state drive [SSD] volume types)
- Data lifecycles
- Hybrid storage options (for example, DataSync, Transfer Family, Storage Gateway)
- Storage access patterns
- Storage tiering (for example, cold tiering for object storage)
- Storage types with associated characteristics (for example, object, file, block)
Task Statement 4.1 Skills
- Designing appropriate storage strategies (for example, batch uploads to Amazon S3 compared with individual uploads)
- Determining the correct storage size for a workload
- Determining the lowest cost method of transferring data for a workload to AWS storage
- Determining when storage auto scaling is required
- Managing S3 object lifecycles
- Selecting the appropriate backup and/or archival solution
- Selecting the appropriate service for data migration to storage services
- Selecting the appropriate storage tier
- Selecting the correct data lifecycle for storage
- Selecting the most cost-effective storage service for a workload
Domain 4: Task Statement 4.2
- Task Statement 4.2: Design cost-optimized compute solutions.
Task Statement 4.2 Knowledge
- AWS cost management service features (for example, cost allocation tags, multi-account billing)
- AWS cost management tools with appropriate use cases (for example, Cost Explorer, AWS Budgets, AWS Cost and Usage Report)
- AWS global infrastructure (for example, Availability Zones, AWS Regions)
- AWS purchasing options (for example, Spot Instances, Reserved Instances, Savings Plans)
- Distributed compute strategies (for example, edge processing)
- Hybrid compute options (for example, AWS Outposts, AWS Snowball Edge)
- Instance types, families, and sizes (for example, memory optimized, compute optimized, virtualization)
- Optimization of compute utilization (for example, containers, serverless computing, microservices)
- Scaling strategies (for example, auto scaling, hibernation)
Task Statement 4.2 Skills
- Determining an appropriate load balancing strategy (for example, Application Load Balancer [Layer 7] compared with Network Load Balancer [Layer 4] compared with Gateway Load Balancer)
- Determining appropriate scaling methods and strategies for elastic workloads (for example, horizontal compared with vertical, EC2 hibernation)
- Determining cost-effective AWS compute services with appropriate use cases (for example, Lambda, Amazon EC2, Fargate)
- Determining the required availability for different classes of workloads (for example, production workloads, non-production workloads)
- Selecting the appropriate instance family for a workload
- Selecting the appropriate instance size for a workload
Domain 4: Task Statement 4.3
- Task Statement 4.3: Design cost-optimized database solutions.
Task Statement 4.3 Knowledge
- AWS cost management service features (for example, cost allocation tags, multi-account billing)
- AWS cost management tools with appropriate use cases (for example, Cost Explorer, AWS Budgets, AWS Cost and Usage Report)
- Caching strategies
- Data retention policies
- Database capacity planning (for example, capacity units)
- Database connections and proxies
- Database engines with appropriate use cases (for example, heterogeneous migrations, homogeneous migrations)
- Database replication (for example, read replicas)
- Database types and services (for example, relational compared with non-relational, Aurora, DynamoDB)
Task Statement 4.3 Skills
- Designing appropriate backup and retention policies (for example, snapshot frequency)
- Determining an appropriate database engine (for example, MySQL compared with PostgreSQL)
Domain 4: Task Statement 4.4
- Task Statement 4.4: Design cost-optimized network architectures.
Task Statement 4.4 Knowledge
- AWS cost management service features (for example, cost allocation tags, multi-account billing)
- AWS cost management tools with appropriate use cases (for example, Cost Explorer, AWS Budgets, AWS Cost and Usage Report)
- Load balancing concepts (for example, Application Load Balancer)
- NAT gateways (for example, NAT instance costs compared with NAT gateway costs)
- Network connectivity (for example, private lines, dedicated lines, VPNs)
- Network routing, topology, and peering (for example, AWS Transit Gateway, VPC peering)
- Network services with appropriate use cases (for example, DNS)
Task Statement 4.4 Skills
- Configuring appropriate NAT gateway types for a network (for example, a single shared NAT gateway compared with NAT gateways for each Availability Zone)
- Configuring appropriate network connections (for example, Direct Connect compared with VPN compared with internet)
- Configuring appropriate network routes to minimize network transfer costs (for example, Region to Region, Availability Zone to Availability Zone, private to public, Global Accelerator, VPC endpoints)
- Determining strategic needs for content delivery networks (CDNs) and edge caching
- Reviewing existing workloads for network optimizations
- Selecting an appropriate throttling strategy
Skills
- Selecting the appropriate bandwidth allocation for a network device (for example, a single VPN compared with multiple VPNs, Direct Connect speed)
Appendix: Technologies and concepts that might appear on the exam
- This list is non-exhaustive.
- Compute
- Cost management
- Database
- Disaster recovery
- High performance
- Management and governance
- Microservices and component delivery
- Migration and data transfer
- Networking, connectivity, and content delivery
- Resiliency
- Security
- Serverless and event-driven design principles
- Storage
In-scope AWS services and features: Analytics
- Amazon Athena
- AWS Data Exchange
- AWS Data Pipeline
- Amazon EMR
- AWS Glue
- Amazon Kinesis
- AWS Lake Formation
- Amazon Managed Streaming for Apache Kafka (Amazon MSK)
- Amazon OpenSearch Service
- Amazon QuickSight
- Amazon Redshift
In-scope AWS services and features: Application Integration
- Amazon AppFlow
- AWS AppSync
- Amazon EventBridge
- Amazon MQ
- Amazon Simple Notification Service (Amazon SNS)
- Amazon Simple Queue Service (Amazon SQS)
- AWS Step Functions
In-scope AWS services and features: AWS Cost Management
- AWS Budgets
- AWS Cost and Usage Report
- AWS Cost Explorer
- Savings Plans
In-scope AWS services and features: Compute
- AWS Batch
- Amazon EC2
- Amazon EC2 Auto Scaling
- AWS Elastic Beanstalk
- AWS Outposts
- AWS Serverless Application Repository
- VMware Cloud on AWS
- AWS Wavelength
In-scope AWS services and features: Containers
- Amazon ECS Anywhere
- Amazon EKS Anywhere
- Amazon EKS Distro
- Amazon Elastic Container Registry (Amazon ECR)
- Amazon Elastic Container Service (Amazon ECS)
- Amazon Elastic Kubernetes Service (Amazon EKS)
In-scope AWS services and features: Database
- Amazon Aurora
- Amazon Aurora Serverless
- Amazon DocumentDB (with MongoDB compatibility)
- Amazon DynamoDB
- Amazon ElastiCache
- Amazon Keyspaces (for Apache Cassandra)
- Amazon Neptune
- Amazon Quantum Ledger Database (Amazon QLDB)
- Amazon RDS
- Amazon Redshift
In-scope AWS services and features: Developer Tools
- AWS X-Ray
In-scope AWS services and features: Front-End Web and Mobile
- AWS Amplify
- Amazon API Gateway
- AWS Device Farm
- Amazon Pinpoint
In-scope AWS services and features: Machine Learning
- Amazon Comprehend
- Amazon Forecast
- Amazon Fraud Detector
- Amazon Kendra
- Amazon Lex
- Amazon Polly
- Amazon Rekognition
- Amazon SageMaker
- Amazon Textract
In-scope AWS services and features: Management and Governance
- AWS Auto Scaling
- AWS CloudFormation
- AWS CloudTrail
- Amazon CloudWatch
- AWS Command Line Interface (AWS CLI)
- AWS Compute Optimizer
- AWS Config
- AWS Control Tower
- AWS Health Dashboard
- AWS License Manager
- Amazon Managed Grafana
- Amazon Managed Service for Prometheus
- AWS Management Console
- AWS Organizations
- AWS Proton
- AWS Service Catalog
- AWS Systems Manager
- AWS Trusted Advisor
- AWS Well-Architected Tool
In-scope AWS services and features: Media Services
- Amazon Elastic Transcoder
- Amazon Kinesis Video Streams
In-scope AWS services and features: Migration and Transfer
- AWS Application Discovery Service
- AWS Application Migration Service
- AWS Database Migration Service (AWS DMS)
- AWS DataSync
- AWS Migration Hub
In-scope AWS services and features: Other
- AWS Snow Family
- AWS Transfer Family
In-scope AWS services and features: Networking and Content Delivery
- AWS Client VPN
- Amazon CloudFront
- AWS Direct Connect
- Elastic Load Balancing (ELB)
- AWS Global Accelerator
- AWS PrivateLink
- Amazon Route 53
- AWS Site-to-Site VPN
- AWS Transit Gateway
- Amazon VPC
In-scope AWS services and features: Security, Identity, and Compliance
- AWS Artifact
- AWS Audit Manager
- AWS Certificate Manager (ACM)
- AWS CloudHSM
- Amazon Cognito
- Amazon Detective
- AWS Directory Service
- AWS Firewall Manager
- Amazon GuardDuty
- AWS IAM Identity Center (AWS Single Sign-On)
- AWS Identity and Access Management (IAM)
- Amazon Inspector
- AWS Key Management Service (AWS KMS)
- Amazon Macie
- AWS Network Firewall
- AWS Resource Access Manager (AWS RAM)
- AWS Secrets Manager
- AWS Security Hub
- AWS Shield
- AWS WAF
In-scope AWS services and features: Serverless
- AWS AppSync
- AWS Fargate
- AWS Lambda
In-scope AWS services and features: Storage
- AWS Backup
- Amazon Elastic Block Store (Amazon EBS)
- Amazon Elastic File System (Amazon EFS)
- Amazon FSx (for all types)
- Amazon S3
- Amazon S3 Glacier
- AWS Storage Gateway
Out-of-scope AWS services and features: Analytics
- Amazon CloudSearch
Out-of-scope AWS services and features: Application Integration
- Amazon Managed Workflows for Apache Airflow (Amazon MWAA)
Out-of-scope AWS services and features: AR and VR
- Amazon Sumerian
Out-of-scope AWS services and features: Blockchain
- Amazon Managed Blockchain
Out-of-scope AWS services and features: Compute
- Amazon Lightsail
Out-of-scope AWS services and features: Database
- Amazon RDS on VMware
Out-of-scope AWS services and features: Developer Tools
- AWS Cloud9
- AWS Cloud Development Kit (AWS CDK)
- AWS CloudShell
- AWS CodeArtifact
- AWS CodeBuild
- AWS CodeCommit
- AWS CodeDeploy
- Amazon CodeGuru
- AWS CodeStar
- Amazon Corretto
- AWS Fault Injection Simulator (AWS FIS)
- AWS Tools and SDKs
Out-of-scope AWS services and features: Front-End Web and Mobile
- Amazon Location Service
Out-of-scope AWS services and features: Game Tech
- Amazon GameLift
- Amazon Lumberyard
Out-of-scope AWS services and features: Machine Learning
- Apache MXNet on AWS
- Amazon Augmented AI (Amazon A2I)
- AWS DeepComposer
- AWS Deep Learning AMIs (DLAMI)
- AWS Deep Learning Containers
- AWS DeepLens
- AWS DeepRacer
- Amazon DevOps Guru
- Amazon Elastic Inference
- Amazon HealthLake
- AWS Inferentia
- Amazon Lookout for Equipment
- Amazon Lookout for Metrics
- Amazon Lookout for Vision
- Amazon Monitron
- AWS Panorama
- Amazon Personalize
- PyTorch on AWS
- Amazon SageMaker Data Wrangler
- Amazon SageMaker Ground Truth
- TensorFlow on AWS
Out-of-scope AWS services and features: Management and Governance
- AWS Chatbot
- AWS Console Mobile Application
- AWS Distro for OpenTelemetry
- AWS OpsWorks
Out-of-scope AWS services and features: Media Services
- AWS Elemental Appliances and Software
- AWS Elemental MediaConnect
- AWS Elemental MediaConvert
- AWS Elemental MediaLive
Out-of-scope AWS services and features: Migration and Transfer
- Migration Evaluator
Out-of-scope AWS services and features: Networking and Content Delivery
- AWS App Mesh
- AWS Cloud Map
Out-of-scope AWS services and features: Quantum Technologies
- Amazon Braket
Out-of-scope AWS services and features: Robotics
- AWS RoboMaker
Out-of-scope AWS services and features: Satellite
- AWS Ground Station
Out-of-scope AWS services and features: All services
- Internet of Things
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
