114 AWS SOA Index
Links: 100 Home
Recommended Reads:
- AWS SAA
- AWS DVA
EC2¶
EC2 Basics
EC2 Placement Groups
EC2 Troubleshooting
EC2 Instance Purchasing Options
EC2 Spot Instances and Fleet
EC2 Burstable Instances
EC2 Status Checks
EC2 Hibernate
EC2 - SOA
AMI¶
Systems Manager (SSM)¶
Systems Manager (SSM)
SSM Documents
SSM Automations
SSM Parameter Store
SSM Inventory
SSM State Manager
SSM Patch Manager
SSM Session Manager
- OpsWorks is for using managed chef (Recipes) or Puppet (manifests) on AWS.
- It is an alternative to SSM.
ELB¶
ELB
Types of ELBs
Stickiness, Cross zone balancing & Connection Draining
ELB Monitoring and Troubleshooting
ELB SOA
ASG¶
ASG
Launch Configuration and Template
Scaling Policies
Life cycle hooks
ASG SOA
ElasticBeanstalk¶
CloudFormation¶
CloudFormation
CloudFormation Template Components
CloudFormation Intrinsic Functions
CloudFormation Rollbacks
CloudFormation Advanced
CloudFormation SOA
Lambda¶
Lambda
Lambda Permissions
Logging & Tracing
X-ray tracing
Lambda Performance
Lambda Concurrency
Lambda Monitoring
- EventBridge lambda - Asynchronous, resource based policies
- S3 Events - Asynchronous, resource based policies
EBS & EFS¶
EBS
Instance Store
EBS SOA
EFS
EFS SOA
S3¶
S3
S3 Websites
S3 Encryption
S3 Replication
S3 Storage Classes
S3 Lifecycle Rules
S3 Performance
S3 Miscellaneous
S3 Access Points
- VPC Endpoint Gateway:
vpce
: one or more specific endpointsvpc
: all endpoints
Advanced Storage¶
AWS Snow
AWS FSx
AWS Storage Gateway
AWS Storage Gateway SOA
CloudFront¶
CloudFront
CloudFront SOA
CloudFront Caching SOA
Databases¶
RDS
RDS Read Replica & Multi AZ
RDS Security
RDS Proxy
RDS SOA
Aurora SOA
ElastiCache
ElastiCache Replication
ElastiCache SOA
Monitoring¶
CloudWatch
EventBridge
CloudTrail
Config
- Difference between CloudWatch, Config and CloudTrail (Example Load Balancer)
Account Management¶
Account Management
Organisations
AWS Control Tower
AWS Service Catalog
AWS Budgets
AWS Compute Optimiser
Disaster Recovery¶
Security & Compliance¶
Shared Responsibility Model
Shield, WAF & Firewall
Inspector & Macie
GuardDuty
Trusted Advisor
KMS
KMS SOA
CloudHSM
AWS Artifact
AWS Certificate Manager
Secrets Manager
SSM Parameter Store vs Secrets Manager
- We can do pentesting on cloud but it is limited to only a few services.
- We CANNOT do DoS or DDoS attacks on our system.
- Cannot perform pentesting on Route53.
Identity¶
Security Miscellaneous Services
STS & Identity Federation
STS Advanced
Cognito
AWS IAM Identity Centre
Route53¶
Route53
Route53 Routing Policies
Route53 Health Checks
Route53 SOA
VPC¶
Other Services¶
Extra Notes¶
Maybe¶
Resources¶
- AWS Certified Sysops Administrator - Associate Certification (amazon.com)
- Scroll to the bottom to the exam review section for practice questions.
- AWS-Certified-SysOps-Administrator-Associate_Exam-Guide.pdf (awsstatic.com)
- AWS Certified SysOps Administrator - Associate Exam – Free Exam Q&As, Page 1 | ExamTopics
Last updated: 2023-03-18