Log In
Or create an account ->
Imperial Library
Home
About
News
Upload
Forum
Help
Login/SignUp
Index
AWS Certified Cloud Practitioner Exam Guide
Contributors
About the author
About the reviewer
Preface
Who this book is for
What this book covers
To get the most out of this book
Download the example code files
Download the color images
Conventions used
Get in touch
Reviews
Share Your Thoughts
Section 1: Cloud Concepts
Chapter 1: What Is Cloud Computing?
What is cloud computing?
The six advantages of cloud computing
Exploring the basics of virtualization
Exploring cloud computing models
Infrastructure as a Service
Platform as a Service
SaaS
Understanding cloud deployment models
Public cloud
Private cloud
Hybrid cloud
Summary
Questions
Chapter 2: Introduction to AWS and the Global Infrastructure
What is AWS?
A quick history of AWS
Exploring the AWS Global Infrastructure
Regions
AZs
Edge locations
Regional edge caches
Regional services
Global services
On-premises services
Choosing the right AWS support plan for your business
Basic support plan
Developer support plan
Business support plan
Enterprise support plan
Overview of the AWS Service Health Dashboard
The AWS AuP
Summary
Questions
Chapter 3: Exploring AWS Accounts, Multi-Account Strategy, and AWS Organizations
Why have a multi-account AWS environment?
AWS Landing Zone
AWS Control Tower
Managing multiple accounts – AWS Organizations
Introducing AWS Organizations
Consolidated billing
How many AWS accounts do you need?
Core AWS OUs
Additional OUs
AWS Free Tier accounts
Free tools
Always free services (limited offering)
Free trials
Exercise 3.1 – Setting up your first AWS Free Tier account
Exercise 3.2 – Setting up a billing alarm
Questions
Section 2: AWS Technologies
Chapter 4: Identity and Access Management
Introduction to the AWS IAM service
The AWS IAM console
The AWS IAM services
The root user account and implementing Multi-Factor Authentication (MFA)
Setting up MFA
The importance of defining IAM password policies
Key differences between IAM users and IAM groups
IAM users
IAM groups
Defining permissions with IAM policies
Types of identity-based policies
Example of an IAM policy
Assigning temporary credentials with IAM roles
Temporary credentials
Reviewing credential reports
Exercise 4.1 – creating an IAM group
Exercise 4.2 – creating an IAM user
Exercise 4.3 – logging in to your AWS account as an IAM user
Accessing the AWS platform using the CLI
Accessing your account via the CLI
Downloading the CLI tools
Exercise 4.4 – accessing the AWS platform using the AWS CLI on a Windows computer
Exercise 4.5 – creating an IAM user with administrative privileges
Summary
Questions
Chapter 5: Amazon Simple Storage Service (S3)
Technical requirements
Introduction to storage options on AWS
Block storage
File storage
Object storage
Introduction to Amazon S3
Buckets and objects
Managing your objects in a bucket
Regional hosting – global availability
Access permissions
Versioning
Cross-Region and same-Region replication
S3 encryption
Static website hosting
Amazon S3TA
Learning about archiving solutions with Amazon S3 Glacier
Connecting your on-premises storage to AWS with Amazon Storage Gateway
Migrating large datasets to AWS with the AWS Snow Family
AWS Snowball
Amazon Snowcone
Amazon Snowmobile
Exercise 5.1 – Setting up an Amazon S3 bucket
Exercise 5.2 – Configuring public access to S3 buckets
Exercise 5.3 – Enabling versioning on your bucket
Exercise 5.4 – Setting up static website hosting
Summary
Questions
Chapter 6: AWS Networking Services – VPCs, Route53, and CloudFront
Technical requirements
Introduction to on-premises networks
Basic corporate networks
Fundamentals of IP addressing and CIDRs
IP address version 4 – IPv4
Limitations of IPv4 addresses
Businesses need internet access
What about IPv6?
Network sizes and classes
What are subnet masks?
What is subnetting?
Classless Interdomain Routing (CIDR)
Virtual Private Clouds (VPCs)
All about subnets
Internet access
VPC security
Network Address Translation (NAT)
VPC peering
VPC transit gateway
Virtual Private Networks (VPNs)
Direct Connect
Learning about DNS and global routing with Amazon Route53
Domain registration
Hosted zones
Routing policies
Health checks
Traffic flow and traffic policies
Implementing a robust CDN with Amazon CloudFront
Choosing a price class for your CloudFront distribution
Introduction to Amazon API Gateway
Exercise 6.1 – setting up a public subnet VPC
Summary
Questions
Chapter 7: AWS Compute Services
Introduction to Amazon EC2
Amazon Machine Images (AMIs)
Exploring EC2 instance types
Learning about Amazon EBS and instance backed store
Amazon Elastic Block Store
AWS EC2 instance store volumes
Learning about EC2 pricing options
On-Demand Instance Pricing Option
Reserved Instance Pricing Option
Spot Instance Pricing Option
Implementing Shared File Storage with Amazon EFS
Learning about VPSes with Amazon Lightsail
Introduction to Amazon ECS and Kubernetes
Amazon ECS comes in two deployment options
Amazon Elastic Kubernetes Service (Amazon EKS)
Learning about additional compute services on AWS
Serverless option – AWS Lambda
AWS Batch
AWS Outposts
Understanding additional storage options in AWS
Amazon FSx for Lustre
Amazon FSx for Windows File Server
Securing your VPC with bastion hosts
Exercise 7.1 – Expanding ProductionVPC so that it includes two public subnets and two private subnets
Setting up additional subnets
Creating private subnets
Exercise 7.2 – Creating a Bastion Host security group
Exercise 7.3 – Launching an EC2 instance
Exercise 7.4 – Launching an application on Amazon Fargate
Summary
Questions
Chapter 8: AWS Database Services
Technical requirements
Managed databases versus unmanaged databases
Learning about additional database services for specific niche requirements
Introduction to database concepts and models
Relational databases
Non-relational (NoSQL) databases
Introduction to Amazon RDS
Deploying in Amazon VPCs
Backup and recovery
High availability with Multi-AZ
Backup and recovery
Horizontal scaling with read replicas
A brief introduction to Amazon Aurora
Learning about Amazon DynamoDB (NoSQL database solution)
Tables, items, and attributes
Provisioning capacity for DynamoDB
Understanding the use cases for Amazon Redshift and data warehousing
Online Analytical Processing (OLAP)
Redshift architecture
About Redshift Spectrum
Understanding the importance of in-memory caching options with Amazon Elasticache
Learning about additional database services for specific niche requirements
Introduction to Amazon Neptune
Amazon QLDB
Database Migration Service
Exercise 8.1 – Extending your VPC to host database subnets
Exercise 8.2 – Creating a database subnet group
Exercise 8.3 – Launching your Amazon RDS database in ProductionVPC
Exercise 8.4 – Deploying an Amazon DynamoDB table
Summary
Questions
Chapter 9: High Availability and Elasticity on AWS
Technical requirements
Introduction to vertical and horizontal scaling concepts
Overview of the OSI model
Distributing web traffic with Amazon ELB
Load balancers and VPCs
ALB
ALB and WAF
NLB
GWLB
CLB
Implementing elasticity with Amazon Auto Scaling
Auto Scaling groups
Configuration templates
Scaling options
Designing multi-Region HA solutions
Extended exercises – setting the scene
Exercise 9.1 – setting up an Amazon S3 bucket to host source files
Exercise 9.2 – creating an IAM role
Exercise 9.3 – configuring an ALB
Exercise 9.4 – amending the Production-VPC security group
Exercise 9.5 – deploying a NAT gateway
Exercise 9.6 – deploying your application servers with Amazon Auto Scaling
Exercise 9.7 – cleanup
Summary
Questions
Chapter 10: Application Integration Services
Technical requirements
Understanding notification services such as Amazon SNS
Amazon SNS endpoints
Amazon SNS topics
Standard and FIFO topics
Amazon SNS Fanout scenario
Amazon SNS pricing
Decoupling your application architecture with Amazon SQS and Amazon MQ
Amazon SQS queue types
Amazon SQS pricing and security
Amazon MQ
Designing event-driven application workflows using AWS EventBridge
Coordinating multiple AWS services into serverless workloads with Amazon Step Functions and Amazon SWF
AWS Step Functions
Workflow types
Amazon Simple Workflow Service (SWF)
Exercise 10.1 – Amazon S3 event notification using Amazon SNS
Step 1 – creating an SNS topic and subscribing to the topic
Step 2 – configuring your SNS topic policy
Step 3 – setting up the Amazon S3 event notification service
Step 4 – testing the configuration
Exercise 10.2 – cleaning up
Summary
Questions
Chapter 11: Analytics on AWS
Technical requirements
Learning about data streaming with Amazon Kinesis
Amazon Kinesis Data Firehose
Amazon Kinesis Data Streams
Amazon Kinesis Data Analytics
Amazon Kinesis Video Streams
Learning how to query data stored in Amazon S3 with Amazon Athena
Introduction to Amazon Elasticsearch
Overview of Amazon Glue and QuickSight
Overview of Amazon Glue
Overview of Amazon QuickSight
Additional analytics services
Exercise 11.1 – analyzing your sales report with Amazon Athena and AWS Glue
Step 1 – Amazon S3
Step 2 – Amazon Athena and Amazon Glue
Step 3 – Amazon Athena
Exercise 11.2 – cleaning up
Summary
Questions
Chapter 12: Automation and Deployment on AWS
Technical requirements
Understanding application deployment with Amazon Elastic Beanstalk
Core components of Amazon Elastic Beanstalk
Understanding the benefits of IaC using Amazon CloudFormation
CloudFormation templates
CloudFormation stacks
Change sets
Drift detection
Introduction to the orchestration of Chef and Puppet solutions using AWS OpsWorks
AWS OpsWorks stacks
IT automation with Lambda
Exercise 12.1 – stopping and starting EC2 instances at regular intervals using AWS Lambda
Step 1 - Launching an EC2 instance
Step 2 - Creating an IAM policy and execution role for your Lambda function
Step 3 - Creating Lambda functions that stop and start your EC2 instances
Step 4 - Creating CloudWatch event rules to trigger your Lambda functions
Step 5 - Testing your Lambda function
Exercise 12.2 – cleaning up
Summary
Questions
Chapter 13: Management and Governance on AWS
Technical requirements
The basics of Amazon CloudWatch
CloudWatch metrics
Dashboards
Alarms
CloudWatch Logs
Amazon CloudWatch Events
Meeting compliance requirements with Amazon CloudTrail
Trails
Learning about change management with AWS Config
Configuration items
Configuration history
Configuration recorder
Configuration snapshot
Configuration stream
Managing your AWS resources with AWS Systems Manager
Learning how to use AWS Trusted Advisor
AWS Trusted Advisor and Support plans
Understanding the AWS Well-Architected Framework
Reliability
Performance efficiency
Security
Operational excellence
Cost optimization
Exercise 13.1 – Reviewing the Trusted Advisor reports in your AWS account
Summary
Questions
Section 3: AWS Security
Chapter 14: Implementing Security in AWS
Understanding the Shared Responsibility Model
Security of the cloud
Security in the cloud
Introduction to the AWS compliance programs and AWS Artifact
About AWS Artifact
AWS vulnerability scanning
Overview of data encryption services on AWS
Amazon S3 encryption
AWS CloudHSM
Protecting cloud resources and applications with AWS WAF and AWS Shield
Protecting applications with AWS WAF
Protecting network attacks with AWS Shield
Assessing and securing your EC2 instances with AWS Inspector
Other AWS security services
Amazon Macie
AWS GuardDuty
Amazon Detective
AWS Certificate Manager
AWS Secrets Manager
Amazon Cognito
AWS Directory Service
Exercise 14.1 – preventing data leaks with Amazon Macie
Step 1 – creating a new Amazon S3 bucket
Step 2 – configuring Amazon Macie to identify sensitive employee data
Exercise 14.2 – cleaning up
Summary
Questions
Section 4: Billing and Pricing
Chapter 15: Billing and Pricing
Technical requirements
An overview of billing and pricing on AWS
Understanding AWS cost optimization
Learning about AWS billing and cost management tools
AWS Cost Explorer
Cost allocation tags
Cost and usage report
AWS Budgets
Learning how to use the AWS pricing and TCO calculators
The AWS Pricing Calculator
AWS Migration Evaluator
Exercise 15.1 – setting up cost budgets on AWS
Summary
Questions
Chapter 16: Mock Tests
Mock test 1
Mock test 2
Answers
Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Chapter 7
Chapter 8
Chapter 9
Chapter 10
Chapter 11
Chapter 12
Chapter 13
Chapter 14
Chapter 15
Chapter 16
Mock Test 1
Mock test 2
Why subscribe?
Other Books You May Enjoy
Packt is searching for authors like you
Share Your Thoughts
← Prev
Back
Next →
← Prev
Back
Next →