Domain 1: Cloud Concepts

• Define the AWS Cloud and its value proposition
• Define the benefits of the AWS cloud including:
• Security
• Reliability
• High Availability
• Elasticity
• Agility
• Pay-as-you gpricing
• Scalability
• Global Reach
• Economy of scale
• Explain how the AWS cloud allows users tfocus on business value
• Shifting technical resources trevenue-generating activities as opposed tmanaging
• infrastructure
• Identify aspects of AWS Cloud economics
• Define items that would be part of a Total Cost of Ownership proposal
• Understand the role of operational expenses (OpEx)
• Understand the role of capital expenses (CapEx)
• Understand labor costs associated with on-premises operations
• Understand the impact of software licensing costs when moving tthe cloud
• Identify which operations will reduce costs by moving tthe cloud
• Right-sized infrastructure
• Benefits of automation
• Reduce compliance scope (for example, reporting)
• Managed services (for example, RDS, ECS, EKS, DynamoDB)
• Explain the different cloud architecture design principles
• Explain the design principles
• Design for failure
• Decouple components versus monolithic architecture
• Implement elasticity in the cloud versus on-premises
• Think parallel

Domain 2: Security and Compliance

• Define the AWS shared responsibility model
• Recognize the elements of the Shared Responsibility Model
• Describe the customer’s responsibly on AWS
• Describe how the customer’s responsibilities may shift depending on the service used
• (for example with RDS, Lambda, or EC2)
• Describe AWS responsibilities
• Define AWS Cloud security and compliance concepts
• Identify where tfind AWS compliance information
• Locations of lists of recognized available compliance controls (for example, HIPPA, SOCs)
• Recognize that compliance requirements vary among AWS services
• At a high level, describe how customers achieve compliance on AWS
• Identify different encryption options on AWS (for example, In transit, At rest)
• Describe whenables encryption on AWS for a given service
• Recognize there are services that will aid in auditing and reporting
• Recognize that logs exist for auditing and monitoring (dnot have tunderstand the logs)
• Define Amazon CloudWatch, AWS Config, and AWS CloudTrail
• Explain the concept of least privileged access
• Identify AWS access management capabilities
• Understand the purpose of User and Identity Management
• Access keys and password policies (rotation, complexity)
• Multi-Factor Authentication (MFA)
• AWS Identity and Access Management (IAM)
• Groups/users
• Roles
• Policies, managed policies compared tcustom policies
• Tasks that require use of root accounts
• Protection of root accounts
• Identify resources for security support
• Recognize there are different network security capabilities
• Native AWS services (for example, security groups, Network ACLs, AWS WAF)
• 3rd party security products from the AWS Marketplace
• Recognize there is documentation and where tfind it (for example, best practices,
• whitepapers, official documents)
• AWS Knowledge Center, Security Center, security forum, and security blogs
• Partner Systems Integrators
• Know that security checks are a component of AWS Trusted Advisor

Domain 3: Technology

• Define methods of deploying and operating in the AWS Cloud
• Identify at a high level different ways of provisioning and operating in the AWS cloud
• Programmatic access, APIs, SDKs, AWS Management Console, CLI, Infrastructure as
• Code
• Identify different types of cloud deployment models
• All in with cloud/cloud native
• Hybrid
• On-premises
• Identify connectivity options
• VPN
• AWS Direct Connect
• Public internet
• Define the AWS global infrastructure
• Describe the relationships among Regions, Availability Zones, and Edge Locations
• Describe how tachieve high availability through the use of multiple Availability Zones
• Recall that high availability is achieved by using multiple Availability Zones
• Recognize that Availability Zones dnot share single points of failure
• Describe when tconsider the use of multiple AWS Regions
• Disaster recovery/business continuity
• Low latency for end-users
• Data sovereignty
• Describe at a high level the benefits of Edge Locations
• Amazon CloudFront
• AWS Global Accelerator
• Identify the core AWS services
• Describe the categories of services on AWS (compute, storage, network, database)
• Identify AWS compute services
• Recognize there are different compute families
• Recognize the different services that provide compute (for example, AWS Lambda
• compared tAmazon Elastic Container Service (Amazon ECS), or Amazon EC2, etc.)
• Recognize that elasticity is achieved through AutScaling
• Identify the purpose of load balancers
• Identify different AWS storage services
• Describe Amazon S3
• Describe Amazon Elastic Block Store (Amazon EBS)
• Describe Amazon S3 Glacier
• Describe AWS Snowball
• Describe Amazon Elastic File System (Amazon EFS)
• Describe AWS Storage Gateway
• Identify AWS networking services
• Identify VPC
• Identify security groups
• Identify the purpose of Amazon Route 53
• Identify VPN, AWS Direct Connect
• Identify different AWS database services
• Install databases on Amazon EC2 compared tAWS managed databases
• Identify Amazon RDS
• Identify Amazon DynamoDB
• Identify Amazon Redshift
• Identify resources for technology support
• Recognize there is documentation (best practices, whitepapers, AWS Knowledge Center,
• forums, blogs)
• Identify the various levels and scope of AWS support
• AWS Abuse
• AWS support cases
• Premium support
• Technical Account Managers
• Recognize there is a partner network (marketplace, third-party) including Independent
• Software Vendors and System Integrators
• Identify sources of AWS technical assistance and knowledge including professional services,
• solution architects, training and certification, and the Amazon Partner Network
• Identify the benefits of using AWS Trusted Advisor

Domain 4: Billing and Pricing

• Compare and contrast the various pricing models for AWS (for example, On-Demand Instances,
• Reserved Instances, and Spot Instance pricing)
• Identify scenarios/best fit for On-Demand Instance pricing
• Identify scenarios/best fit for Reserved-Instance pricing
• Describe Reserved-Instances flexibility
• Describe Reserved-Instances behavior in AWS Organizations
• Identify scenarios/best fit for Spot Instance pricing
• Recognize the various account structures in relation tAWS billing and pricing
• Recognize that consolidated billing is a feature of AWS Organizations
• Identify how multiple accounts aid in allocating costs across departments
• Identify resources available for billing support
• Identify ways tget billing support and information
• Cost Explorer, AWS Cost and Usage Report, Amazon QuickSight, third-party partners,
• and AWS Marketplace tools
• Open a billing support case
• The role of the Concierge for AWS Enterprise Support Plan customers
• Identify where tfind pricing information on AWS services
• AWS Simple Monthly Calculator
• AWS Services product pages
• AWS Pricing API
• Recognize that alarms/alerts exist
• Identify how tags are used in cost allocation