0%

Book Description

Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.


This study guide covers 100% of the objectives for the AWS Certified SysOps Administrator Associate exam

Take the challenging AWS Certified SysOps Administrator Associate exam with confidence using this highly effective self-study guide. You will learn how to provision systems, ensure data integrity, handle security, and monitor and tune Amazon Web Services performance. Written by an industry-leading expert, AWS Certified SysOps Administrator Associate All-in-One Exam Guide (Exam SOA-C01) fully covers every objective for the exam and follows a hands-on, step-by-step methodology. Beyond fully preparing you for the exam, the book also serves as a valuable on-the-job reference.

Covers all exam topics, including:
•Systems operations
•Signing up, working with the AWS Management Console, and the AWS CLI
•AWS Identity and Access Management (IAM) and AWS service security
•AWS compute services and the Elastic Compute Cloud (EC2)
•Amazon ECS, AWS Batch, AWS Lambda, and other compute services
•Storage and archiving in the AWS cloud with Amazon EBS, Amazon EFS, and Amazon S3 Glacier
•Managing databases in the cloud—Amazon RDS, Amazon Aurora, Amazon DynamoDB, Amazon ElastiCache, and Amazon Redshift
•Application integration with Amazon SQS and Amazon SNS
•AWS high availability strategies
•Monitoring with Amazon CloudWatch, logging, and managing events
•Managing AWS costs and billing
•Infrastructure provisioning through AWS CloudFormation and AWS OpsWorks, application deployment, and creating scalable infrastructures

Online content includes:
•130 practice questions
•Test engine that provides full-length practice exams or customized quizzes by chapter or by exam domain


Table of Contents

  1. Cover
  2. Title Page
  3. Copyright Page
  4. Dedication
  5. Contents
  6. Acknowledgments
  7. Introduction
  8. Chapter 1 System Operations: An Overview of AWS
    1. Benefits of Cloud Computing
    2. Types of Cloud Services: IaaS, PaaS, SaaS
    3. Types of Cloud Deployments: Public, Private, and Hybrid
    4. The AWS Services
      1. AWS: The Global Infrastructure
      2. Regions and Availability Zones
      3. AWS Foundational Services
    5. AWS Platform Services
      1. Databases
      2. Application Services
    6. Deployment and Management Services
      1. Developer and Deployment Tools
    7. AWS Management Tools
      1. Operations Management
      2. Accessing the AWS Cloud Platform
    8. Chapter Review
      1. Questions
      2. Answers
  9. Chapter 2 Working with AWS: Signing Up, the AWS Management Console, and Command Line Tools
    1. Signing Up for AWS
    2. Understanding AWS Security Credentials
      1. AWS Account Root User Credentials
      2. IAM User Credentials
      3. Access Keys and Key Pairs
    3. Working with the AWS Management Console
    4. Accessing AWS Services the Right Way
      1. Creating an IAM User
      2. Using a Key Pair to Connect to an EC2 Instance
    5. Working with the AWS CLI
      1. The Structure of AWS CLI Commands
      2. Installing AWS CLI
      3. Configuring the AWS CLI
      4. Specifying Environment Variables to Configure AWS CLI
      5. Configuration Precedence
      6. Using the AWS CLI
      7. Controlling the Command Output
      8. Reading in Configuration Parameters from a File
      9. Connecting to a Running EC2 Instance from the Command Line
    6. AWS SDKs and Python Boto3
      1. Installing Boto3
      2. Setting Up Credentials
      3. Testing the Boto3 Installation
    7. Chapter Review
      1. Exercises
    8. Exercise 2-1: Create an access key (access ID and secret key) using the AWS Management Console.
    9. Exercise 2-2: Install the AWS CLI on a linux server.
    10. Exercise 2-3: Configure the AWS CLI.
    11. Exercise 2-4: Change your AWS account password from the AWS Management Console.
    12. Exercise 2-5: Get billing information from the AWS Management Console.
    13. Questions
    14. Answers
  10. Chapter 3 AWS Identity and Access Management and AWS Service Security
    1. The AWS Shared Responsibility Security Model
      1. AWS Responsibility: Security of the Cloud
      2. Customer’s Responsibility: Security in the Cloud
      3. Sharing Security Responsibility for AWS Services
      4. Responsibility for IT Controls and Compliance
      5. Security for the AWS-Managed Services
      6. Network Security
    2. AWS Account Security Features
      1. AWS Credentials
      2. Individual User Accounts
      3. Secure HTTP Access Points
      4. Security Logs
      5. AWS Trusted Advisor Security Checks
      6. Managing Cryptographic Keys for Encryption
    3. AWS Identity and Access Management
      1. How IAM Works
      2. Managing the Identity Component of IAM
      3. IAM ARN Formats
      4. Managing the Authentication Component of IAM
      5. Granting IAM Users Permissions to Switch to Other Roles
    4. Managing IAM Authorization Policies
      1. Permissions Policies
      2. Permissions Boundaries
    5. IAM Best Practices
      1. Restrict and Protect the AWS Account Root User Access Key
      2. Create Individual IAM Users
      3. Grant Least Privilege
      4. Use Roles and Groups to Delegate and Assign Permissions
      5. Use AWS-Defined Policies to Assign Permissions
      6. Monitor Activity in your AWS Account
    6. AWS Component Security
      1. Amazon EC2 Security
      2. Securing the Operating System and Applications
      3. Elastic Block Store Security
      4. Securing the Analytics Services
    7. Securing the Network
      1. Amazon Elastic Load Balancing Security
      2. Securing Amazon Virtual Private Cloud
      3. Amazon Route 53 Security
      4. Amazon CloudFront Security
      5. Securing AWS Direct Connect
    8. Securing the Storage Services
      1. Securing Simple Storage Service
      2. Securing Glacier
      3. Securing the AWS Storage Gateway
      4. Securing AWS Import/Export
    9. Securing Databases
      1. Securing DynamoDB
      2. Securing RDS
      3. Securing Redshift
      4. Securing ElastiCache
    10. Application Services Security
      1. Securing Amazon SQS
      2. Securing Amazon SNS
      3. AWS Monitoring Tools and Services that Help with Security
      4. Amazon CloudWatch
      5. AWS Trusted Advisor Tool
      6. Amazon Inspector
      7. AWS Config
      8. AWS CloudTrail
      9. CloudTrail Events
      10. AWS Web Application Firewall
      11. AWS Certificate Manager
    11. Chapter Review
      1. Exercises
    12. Exercise 3-1: Create an IAM user from the AWS Management Console.
    13. Exercise 3-2: Create a new IAM permissions policy from the AWS Management Console.
    14. Exercise 3-3: Create an Administrator IAM user and an Administrators Group from the console (create the group, assign the user to the group).
    15. Exercise 3-4: Create an IAM role.
    16. Exercise 3-5: Disable an IAM user’s access keys via the console.
    17. Questions
    18. Answers
  11. Chapter 4 Computing in the Cloud: AWS Compute Services and Amazon EC2
    1. What Is Amazon Elastic Compute Cloud?
    2. Amazon Machine Images
      1. Obtaining an AMI
      2. Selecting an AMI
      3. Backing the AMI: EBS or Instance Store
      4. Linux AMI Virtualization Types
      5. Creating a Linux AMI from the Command Line
      6. Copying an AMI
      7. Launching an EC2 Instance
      8. Troubleshooting EC2 Instances
      9. Listing Your Instances from the CLI
      10. The EC2 Instance Lifecycle
      11. The Pending and Running States
      12. Stopping, Rebooting, and Terminating an Instance
    3. Selecting the EC2 Instance Type
      1. Choices for an Instance Type
      2. Optimizing the CPU Options
      3. Changing the Instance Type
    4. Instance Purchase Options
      1. Purchasing Options and the Instance Lifecycle
      2. On-Demand Instances
      3. Reserved Instances
      4. Scheduled Reserved Instances
      5. Spot Instances
      6. Dedicated Hosts and Dedicated Instances
    5. Storage for EC2 Instances
      1. Amazon EC2 Instance Store
      2. Amazon Elastic Block Store
      3. Restoring an EBS-Backed EC2 Instance
      4. EBS Volume Types
      5. Creating an EBS Volume
      6. Availability of EBS Volumes
      7. Amazon Elastic File System
    6. The Root Device Volume
      1. Choosing the Root Device Type
      2. Finding the Root Device Type
    7. Additional EC2 Features
      1. Instance Placement Groups
      2. Auto Scaling
      3. Amazon EBS-Optimized Instances
      4. Backing Up Instances and Volumes with EC2Rescue for Linux
    8. Monitoring EC2 Instances
      1. Amazon CloudWatch Monitoring
      2. Amazon CloudTrail Logging
    9. Tagging EC2 Resources
      1. Creating Tags
      2. Resource Groups and Tags
      3. Viewing Tags
    10. Configuring EC2 Instances
      1. Passing User Data with Shell Scripts
      2. Passing User Data with Cloud-Init Directives
      3. Instance Metadata
      4. EC2 Network and Security
      5. Elastic, Private, and Public IP Addresses
      6. Amazon Systems Manager
    11. Chapter Review
      1. Exercises
    12. Exercise 4-1: Find the root device type of an AMI using the console.
    13. Exercise 4-2: Launch an EC2 Linux instance from the EC2 console (with the Instance Launch Wizard).
    14. Exercise 4-3: Restore a failed (or old) EC2 instance by creating a new AMI with a snapshot.
    15. Exercise 4-4: Create an AMI from an instance using the console.
    16. Exercise 4-5: Associate an Elastic IP address with an EC2 instance.
    17. Exercise 4-6: Resize an Amazon EBS-backed instance.
    18. Exercise 4-7: Create a security group using the Amazon EC2 console.
    19. Questions
    20. Answers
  12. Chapter 5 Computing in the Cloud: ECS, Batch, Lambda, and Other Compute Services
    1. Docker and the Amazon Elastic Container Service
      1. Container Launch Types
      2. Installing Docker
      3. Creating Docker Containers and Images
      4. Amazon ECS Architecture
      5. Using the Amazon ECS CLI
      6. Monitoring Amazon ECS
      7. ECS IAM Policies, Roles, and Permissions
    2. AWS Batch
      1. Batch-Related Concepts
    3. AWS Lambda
      1. Implementing Lambda
      2. Where You Can Use Lambda
      3. Lambda-Based Application Concepts
      4. Invoking a Lambda Function
      5. Lambda in Action
      6. Securing Lambda
    4. AWS Lightsail
    5. AWS Elastic Beanstalk
      1. Building Blocks of Elastic Beanstalk
      2. Creating and Deploying Applications
      3. Monitoring the Elastic Beanstalk Environment
    6. Chapter Review
      1. Exercises
    7. Exercise 5-1: Set up Amazon ECS to prepare for launching an ECS cluster.
    8. Exercise 5-2: Create and launch an ECS cluster with a Fargate task.
    9. Exercise 5-3: Create a Linux-based Lightsail instance and connect to it.
    10. Exercise 5-4: Create a Lambda function.
    11. Exercise 5-5: Create and deploy an application with AWS Elastic Beanstalk.
    12. Questions
    13. Answers
  13. Chapter 6 Networking in the AWS Cloud
    1. Basic AWS Networking Concepts
      1. Virtual Private Cloud
      2. Subnets
      3. Route Tables
      4. Security Groups
      5. Network Access Control Lists
      6. Domain Name System
    2. Amazon Virtual Private Cloud
      1. IP Address Types and IP Ranges
      2. Accessing the Internet from a VPC
      3. Amazon Virtual Private Cloud Components
      4. The Default VPC
      5. Elastic Network Interfaces
      6. Elastic IP Addresses
      7. Route Tables
      8. Connecting to the Internet or Other External Networks from a VPC
      9. Enabling Internet Access for an EC2 Instance Inside a Subnet
      10. Creating a VPC
      11. Common VPC Scenarios
      12. Securing Your VPC
      13. Amazon VPC Optional Components
      14. VPC Endpoints
      15. Troubleshooting AWS Network Connectivity Problems
    3. AWS Direct Connect
      1. Setting Up Direct Connect
      2. Direct Connect Components
      3. Direct Connect Gateways
    4. Elastic Load Balancing
      1. How Load Balancing Works
      2. Creating a Load Balancer
    5. Amazon Route 53
      1. Basics of the Domain Name System
      2. Using Traffic Flow to Route DNS Traffic
      3. Handling Service Failovers (Enhancing Resiliency) with Health Checks
      4. Monitoring Route 53
    6. CloudFront: Amazon’s Content Delivery Network
      1. CloudFront Use Cases
      2. Configuring CloudFront to Deliver Content
      3. How CloudFront Delivers Content
      4. Regional Edge Caches
      5. Configuring an Amazon CloudFront Distribution
      6. Adding, Updating, and Removing Content that CloudFront Distributes
      7. How CloudFront Handles HTTP Status Codes from an Origin
    7. Chapter Review
      1. Exercises
    8. Exercise 6-1: Create an Elastic IP (EIP) address.
    9. Exercise 6-2: Create an Amazon Virtual Private Cloud (VPC).
    10. Exercise 6-3: Create a subnet in a VPC.
    11. Exercise 6-4: Create a network interface.
    12. Exercise 6-5: Create a security group.
    13. Exercise 6-6: Launch an EC2 instance in a subnet.
    14. Exercise 6-7: Create a NAT gateway.
    15. Exercise 6-8: Create a route for a NAT gateway.
    16. Exercise 6-9: Configure Amazon Route 53 to route traffic to an Amazon EC2 instance.
    17. Exercise 6-10: Create and update a Route 53 health check.
    18. Exercise 6-11: Create a CloudFront distribution.
    19. Questions
    20. Answers
  14. Chapter 7 Storage and Archiving in the AWS Cloud
    1. Overview of AWS Storage Options
      1. Identifying Your Storage Requirements
      2. AWS Storage Categories
    2. Amazon Elastic Block Storage
      1. Benefits of Amazon EBS Storage
      2. Enhancing EBS Performance and Best Practices
      3. EBS Volume Types
      4. Managing Amazon EBS
      5. Backing Up EBS Volumes with Snapshots
    3. Amazon S3: Object Storage in the Cloud
      1. S3 Basic Entities and Key Concepts
      2. S3 Storage Classes
      3. S3 and Object Lifecycle Management
      4. S3 Multipart Uploads
      5. Making Requests for S3 Data
      6. Hosting a Static Web Site on Amazon S3
      7. Managing Access to Your S3 Resources
      8. Access Policy Language
      9. Protecting Your Amazon S3 Objects
      10. Optimizing Amazon S3 Storage
      11. Setting Up Event Notifications for an S3 Bucket
    4. Archival Storage with Amazon S3 Glacier
      1. Key Glacier Concepts and Components
      2. Glacier Archive Retrieval and Data Retrieval Policies
      3. S3 Glacier Vault Lock
    5. Amazon Elastic File System
      1. Setting Up an EFS-Based File System
      2. Using an EFS File System
    6. Amazon Snowball
    7. AWS Storage Gateway
      1. Gateway Types
      2. Setting Up and Activating the AWS Storage Gateway
      3. Creating a File Share
      4. Using the File Share
    8. Chapter Review
      1. Exercises
    9. Exercise 7-1: Create an EBS volume from the console.
    10. Exercise 7-2: Attach an EBS volume to an EC2 instance from the console.
    11. Exercise 7-3: Create an EBS snapshot from the EC2 console.
    12. Exercise 7-4: Create an Amazon EFS file system.
    13. Exercise 7-5: Mount an EFS file system.
    14. Exercise 7-6: Create an Amazon S3 bucket.
    15. Exercise 7-7: Upload an object to an Amazon S3 bucket.
    16. Exercise 7-8: Delete an Amazon S3 object and bucket.
    17. Exercise 7-9: Enable versioning for an Amazon S3 bucket.
    18. Exercise 7-10: Create an Amazon S3 Glacier vault.
    19. Exercise 7-11: Create a lifecycle policy for an Amazon S3 bucket from the S3 console.
    20. Questions
    21. Answers
  15. Chapter 8 Managing Databases in the Cloud
    1. Relational and Non-Relational Databases
      1. Relational Databases
      2. Non-Relational Databases
    2. Working with Amazon Relational Database Service
      1. Amazon RDS: An Overview
      2. DB Instances
      3. Scheduling a Maintenance Window for RDS Databases
      4. DB Instance Status
      5. DB Instance Storage
      6. Lifecycle of a DB Instance
      7. Backing Up and Restoring an Amazon RDS DB Instance
      8. Configuring Security for Amazon RDS
      9. Monitoring Amazon RDS
      10. How AWS Bills You for RDS Databases
      11. Scaling RDS Databases
    3. Amazon Aurora
      1. Aurora DB Clusters
      2. Aurora Endpoints
      3. Aurora Storage and Reliability
    4. Amazon DynamoDB Database
      1. How DynamoDB Works
      2. Backing Up, Restoring, and Recovering a DynamoDB Database
      3. Using Amazon VPC Endpoints for DynamoDB
      4. Inserting and Querying Data
      5. Working with DynamoDB Data
    5. Amazon Redshift
      1. Clusters and Nodes
      2. Databases
      3. Amazon Redshift Enhanced VPC Routing
      4. Amazon Redshift Snapshots
    6. Amazon ElastiCache
      1. Use Cases for ElastiCache
      2. ElasticCache Components
    7. AWS Database Migration Service
      1. How AWS DMS Works
    8. Chapter Review
      1. Exercises
    9. Exercise 8-1: Create a DB instance in Amazon RDS (using the MySQL DB engine).
    10. Exercise 8-2: Create a MySQL DB instance.
    11. Exercise 8-3: Create a Read Replica from a source MySQL DB instance.
    12. Exercise 8-4: Create a DB snapshot for an Amazon RDS DB instance.
    13. Exercise 8-5: Restore a DB instance from a DB snapshot.
    14. Exercise 8-6: Set an alarm using the CloudWatch console.
    15. Exercise 8-7: Create an Amazon DynamoDB table.
    16. Exercise 8-8: Launch an Amazon Redshift cluster.
    17. Questions
    18. Answers
  16. Chapter 9 Application Integration and Ensuring High Availability
    1. Amazon Simple Queue Service
      1. Basic SQS Architecture
      2. Standard and FIFO Queues
      3. Efficient Message Processing with SQS
    2. Amazon Simple Notification Service
      1. How SNS Works
      2. Interaction Between SQS and SNS
      3. SNS Message Durability
      4. SNS Use Cases and Scenarios
    3. AWS Fault Tolerance and High Availability
      1. How AWS Provides Redundancy with Regions and AZs
      2. Configuring HA for EC2 with Fully Preconfigured AMIs
      3. Launching EC2 Instances in Multiple AZs
      4. Using EC2 Auto Recovery to Enhance Availability
      5. Using Auto Scaling for HA in EC2
      6. Configuring HA for Databases
      7. Setting Up a Fault-Tolerant and HA Network
      8. Using Route 53 DNS for HA with Health Checks and Failover
      9. EBS and S3: Configuring Fault Tolerance and HA for Data
      10. Architecting an HA System in the AWS Cloud
    4. AWS Disaster Recovery
      1. Traditional DR Strategies
      2. Recovery Time Objective and Recovery Point Objective
      3. AWS Services and Features that Support DR
      4. AWS Disaster Recovery Scenarios
    5. Chapter Review
      1. Exercises
    6. Exercise 9-1: Create an Amazon SQS FIFO queue.
    7. Exercise 9-2: Send a simple message to an Amazon SQS queue.
    8. Exercise 9-3: Create an Amazon SNS topic.
    9. Exercise 9-4: Subscribe to an Amazon SNS topic.
    10. Exercise 9-5: Publish to an Amazon SNS topic.
    11. Exercise 9-6: Configure a CloudWatch alarm to recover an EC2 instance (with EC2 Recovery).
    12. Questions
    13. Answers
  17. Chapter 10   Monitoring, Logging, Events, and Managing Billing
    1. Monitoring AWS with Amazon CloudWatch
      1. CloudWatch Terminology and Concepts
      2. CloudWatch Dashboards
      3. AWS Service Health Dashboard and AWS Personal Heath Dashboard
      4. Working with CloudWatch Alarms
      5. Publishing Custom Metrics
      6. How CloudWatch Monitoring Works for EC2 Instances
      7. CloudWatch Metrics for Amazon ElastiCache
      8. CloudWatch Amazon RDS-Related Metrics
      9. CloudWatch Metrics for the Application Load Balancer
      10. Graphing a CloudWatch Metric and Sharing the Graph
      11. Using CloudWatch Agents to Collect Additional Metrics and Logs
      12. CloudWatch Authentication and Access Control
      13. CloudWatch Events
      14. Example CloudWatch Events
      15. CloudWatch Logs
      16. CloudWatch Logs Concepts
      17. Unified CloudWatch Agent
      18. Searching and Filtering Log Data
      19. CloudWatch Logs Metrics
    2. AWS CloudTrail
      1. Types of CloudTrail Trails
      2. Creating a Trail
      3. Logging Management and Data Events
      4. Monitoring CloudTrail Log Files with CloudWatch Logs
    3. AWS Config
      1. Key Concepts: Resources and Rules
    4. Optimizing Resources Usage and Managing Billing and Costs
      1. AWS Trusted Advisor
      2. Amazon Inspector
      3. AWS Billing and Cost Management
      4. AWS Cost and Usage Reports
      5. Consolidated Billing for Organizations
    5. Chapter Review
      1. Exercises
    6. Exercise 10-1: Enable detailed CloudWatch monitoring for an EC2 instance.
    7. Exercise 10-2: Create a CloudWatch dashboard.
    8. Exercise 10-3: Create a CloudWatch billing alarm to monitor your estimated charges.
    9. Exercise 10-4: View available CloudWatch EC2 metrics (by namespace/dimension) from the console.
    10. Exercise 10-5: Create a graph for a CloudWatch metric.
    11. Exercise 10-6: Enable detailed CloudWatch monitoring for an EC2 instance.
    12. Exercise 10-7: Set up a CloudWatch Load Balancer latency alarm using the AWS console.
    13. Exercise 10-8: Create a CloudTrail trail from the CloudTrail console.
    14. Exercise 10-9: Create a CloudWatch alarm that is triggered by a CloudTrail event that makes changes to an EC2 instance.
    15. Exercise 10-10: Create a CloudWatch event that triggers an event emitted by an EC2 instance.
    16. Exercise 10-11: Enable billing alerts.
    17. Exercise 10-12: Create a billing alarm.
    18. Questions
    19. Answers
  18. Chapter 11   Provisioning Infrastructure, Deploying Applications, and Creating Scalable Infrastructures
    1. AWS Deployment and Provisioning Services
      1. Integration with Other AWS Services
      2. Key Services Offered by AWS Deployment Services
      3. Strategies for Updating Your Application Code
    2. Using AWS CloudFormation
      1. Templates, Stacks, and Change Sets
      2. AWS Best Practice Recommendations for CloudFormation
    3. Using AWS OpsWorks
      1. Stacks
      2. Layers
      3. Instances
      4. Apps
      5. Cookbooks, Recipes, and Lifecycle Events
      6. Resource Management
      7. AWS CodeDeploy
    4. Using AWS Auto Scaling
      1. Amazon EC2 Auto Scaling
      2. How Auto Scaling Works
      3. Amazon EC2 Auto Scaling
      4. EC2 Auto Scaling Components
      5. Scaling Processes, and How to Suspend and Resume Them
    5. Chapter Review
      1. Exercises
    6. Exercise 11-1: Create an ASG with the Amazon EC2 Launch Wizard.
    7. Exercise 11-2: Add a scaling policy to an ASG via the EC2 console.
    8. Exercise 11-3: Attach an instance to an existing ASG from the AWS Management Console.
    9. Exercise 11-4: Create an AWS Auto Scaling plan for an EC2 ASG.
    10. Exercise 11-5: Add Elastic Load Balancer health checks to an ASG.
    11. Exercise 11-6: Create a WordPress stack from the AWS CloudFormation console.
    12. Exercise 11-7: Create a CloudFormation change set from the CloudWatch console.
    13. Exercise 11-8: Create a cookbook for use with AWS OpsWorks Stacks.
    14. Exercise 11-9: Create a demo Linux stack from the AWS OpsWorks console.
    15. Exercise 11-10: Create a layer for an AWS OpsWorks Stack from the AWS OpsWorks console.
    16. Exercise 11-11: Add a load balancer to an ASG using the console.
    17. Questions
    18. Answers
  19. Appendix A Objective Map
    1. Exam SOA-C01
  20. Appendix B About the Online Content
    1. System Requirements
    2. Your Total Seminars Training Hub Account
    3. Privacy Notice
    4. Single User License Terms and Conditions
    5. TotalTester Online
    6. Technical Support
  21. Glossary
  22. Index
18.222.148.124