Résumé
AWS Certified SysOps Administrator - Associate (SOA-C02) Exam Cram is an all-inclusive study guide designed to help you pass the updated version of the AWS Certified SysOps Administrator - Associate exam. Prepare for test day success with complete coverage of exam objectives and topics, plus hundreds of realistic practice questions. Extensive prep tools include quizzes, Exam Alerts, and our essential last-minute review CramSheet. The powerful Pearson Test Prep practice software provides real-time assessment and feedback with two complete exams.
Covers the critical information needed to score higher on your AWS Certified SysOps Administrator - Associate (SOA-C02) exam!
Demonstrate baseline AWS Well-Architected Framework knowledge to support and maintain AWS workloads
Use AWS monitoring and logging services and remediate issues based on monitoring and availability metrics
Implement scalability and elasticity for reliability and business continuity
Use AWS services to provision, deploy, maintain, and automate cloud resources
Implement and manage security controls to meet compliance policies and requirements
Implement, configure, and troubleshoot network features and connectivity issues
Identify and implement cost and performance optimization strategies
Prepare for your exam with Pearson Test Prep
Realistic practice questions and answers
Comprehensive reporting and feedback
Customized testing in study, practice exam, or flash card modes
Complete coverage of AWS Certified SysOps Administrator - Associate (SOA-C02) exam objectivesIntroduction. . . . . . . . . . . . . . . . . . . . . . . xviii
CHAPTER 1: Introduction to AWS. . . . . . . . . . . . . . . . . . . . . 1
What Is Cloud Computing?.. . . . . . . . . . . . . . . . 2
The AWS Cloud. . . . . . . . . . . . . . . . . . . . 8
Six Benefits of the AWS Cloud.. . . . . . . . . . . . . . . 13
AWS Services Overview. . . . . . . . . . . . . . . . . 16
What Next?.. . . . . . . . . . . . . . . . . . . . . 23
CHAPTER 2: Monitoring Services in AWS.. . . . . . . . . . . . . . . . . 25
Metering, Monitoring, and Alerting. . . . . . . . . . . . . 26
CloudWatch. . . . . . . . . . . . . . . . . . . . . 30
CloudTrail.. . . . . . . . . . . . . . . . . . . . . . 36
What Next?.. . . . . . . . . . . . . . . . . . . . . 39
CHAPTER 3: Troubleshooting and Remediation. . . . . . . . . . . . . . . 41
Responding to Alarms.. . . . . . . . . . . . . . . . . . 42
Amazon EventBridge. . . . . . . . . . . . . . . . . . 48
AWS Config. . . . . . . . . . . . . . . . . . . . . 51
What Next?.. . . . . . . . . . . . . . . . . . . . . 53
CHAPTER 4: Implementing Scalability and Elasticity.. . . . . . . . . . . . . 55
Scaling in the Cloud.. . . . . . . . . . . . . . . . . . 56
Caching.. . . . . . . . . . . . . . . . . . . . . . . 67
Read Replicas.. . . . . . . . . . . . . . . . . . . . . 78
What Next?.. . . . . . . . . . . . . . . . . . . . . 83
CHAPTER 5: High Availability and Resilience. . . . . . . . . . . . . . . . 85
Availability Zones in AWS.. . . . . . . . . . . . . . . . 88
High Availability with Elastic Load Balancers and Route 53.. . . . . 94
Highly Available Datastores.. . . . . . . . . . . . . . . . 98
Highly Available Databases. . . . . . . . . . . . . . . . 103
What Next?.. . . . . . . . . . . . . . . . . . . . . 108
CHAPTER 6: Backup and Restore Strategies. . . . . . . . . . . . . . . . 109
Backup in the Cloud.. . . . . . . . . . . . . . . . . . 110
S3 as a Backup Service.. . . . . . . . . . . . . . . . . . 119
What Next?.. . . . . . . . . . . . . . . . . . . . . 124
CHAPTER 7: Provisioning Resources.. . . . . . . . . . . . . . . . . . . 125
Deployment Tools in AWS. . . . . . . . . . . . . . . . 126
What Next?.. . . . . . . . . . . . . . . . . . . . . 136
CHAPTER 8: Application Management.. . . . . . . . . . . . . . . . . . 137
Lifecycle Management. . . . . . . . . . . . . . . . . . 138
Patching.. . . . . . . . . . . . . . . . . . . . . . 147
What Next?.. . . . . . . . . . . . . . . . . . . . . 153
CHAPTER 9: Security and Compliance.. . . . . . . . . . . . . . . . . . 155
Account Management.. . . . . . . . . . . . . . . . . . 156
What Next?.. . . . . . . . . . . . . . . . . . . . . 169
CHAPTER 10: Data Protection at Rest and in Transit. . . . . . . . . . . . . . 171
Protecting Data.. . . . . . . . . . . . . . . . . . . . 172
What Next?.. . . . . . . . . . . . . . . . . . . . . 182
CHAPTER 11: Networking and Connectivity.. . . . . . . . . . . . . . . . . 183
The VPC. . . . . . . . . . . . . . . . . . . . . . 184
VPC Connectivity. . . . . . . . . . . . . . . . . . . 189
AWS Network Firewall.. . . . . . . . . . . . . . . . . 197
VPC Endpoints.. . . . . . . . . . . . . . . . . . . . 199
VPC Peering.. . . . . . . . . . . . . . . . . . . . . 202
VPN .. . . . . . . . . . . . . . . . . . . . . . . 206
Direct Connect. . . . . . . . . . . . . . . . . . . . 209
AWS WAF. . . . . . . . . . . . . . . . . . . . . . 212
AWS Shield.. . . . . . . . . . . . . . . . . . . . . 214
What Next?.. . . . . . . . . . . . . . . . . . . . . 216
CHAPTER 12: Domains, DNS, and Content Delivery.. . . . . . . . . . . . . . 217
Route 53.. . . . . . . . . . . . . . . . . . . . . . 218
Route 53 Routing Policies.. . . . . . . . . . . . . . . . 222
S3 Static Website Hosting.. . . . . . . . . . . . . . . . 227
Amazon CloudFront.. . . . . . . . . . . . . . . . . . 231
S3 Origin Access Identity.. . . . . . . . . . . . . . . . . 235
What Next?.. . . . . . . . . . . . . . . . . . . . . 237
CHAPTER 13: Troubleshoot Network Connectivity. . . . . . . . . . . . . . . 239
Configuring VPC Flow Logs.. . . . . . . . . . . . . 240
ELB Access Logs.. . . . . . . . . . . . . . . . . . . 245
AWS WAF ACL Logs.. . . . . . . . . . . . . . . . . . 248
CloudFront Logs.. . . . . . . . . . . . . . . . . . . 251
CloudFront Caching Issues.. . . . . . . . . . . . . . . . 253
Troubleshooting Hybrid and Private Links. . . . . . . . . . . 256
What Next?.. . . . . . . . . . . . . . . . . . . . . 258
CHAPTER 14: Cost Optimization Strategies.. . . . . . . . . . . . . . . . . 259
Operational Optimization.. . . . . . . . . . . . . . . . 260
What Next?.. . . . . . . . . . . . . . . . . . . . . 269
CHAPTER 15: Performance Optimization.. . . . . . . . . . . . . . . . . . 271
Optimizing for Performance. . . . . . . . . . . . . . . . 272
What Next?.. . . . . . . . . . . . . . . . . . . . . 281
Glossary.. . . . . . . . . . . . . . . . . . . . . . . . 283
9780137509584, TOC, 3/30/22Marko Sluga has more than 20 years of experience in IT and has had the benefit of witnessing the rise of cloud computing. Marko has worked on a variety of cloud-related projects, from the early stages of SOC, corporate virtualization, and open-source API offerings to modern, fully automated, intelligent, serverless, and cloud-native solutions. Marko has been working with Amazon Web Services (AWS) since the start of the 2010s and holds three associate, two professional, and three specialty AWS certifications. Marko performs training and advising on cloud technologies and strategies, DevOps, and IT system and process optimization to clients from a wide range of companies, including startups, SMBs, enterprise businesses, and Fortune 500 companies. Marko runs his own cloud training, coaching, and consulting practice under the markocloud.com brand. He is the author of the AWS Certified Developer -Associate (DVA-C01) Cert Guide.
Rick Crisci is the founder and principal trainer for Trainertests.com and is an experienced AWS and VMware instructor. Original content by Rick can be found on a variety of platforms including Pearson, LinkedIn Learning, and Udemy, with more than 30 courses, over 250,000 students, and exceptionally high course review scores. Rick also teaches live hands-on AWS courses regularly for Pearson on O'Reilly. Prior to becoming an instructor, Rick had over 15 years of real-world experience. Some career highlights include designing high-speed Internet networks in the early 2000s and managing virtualization and networking teams for a financial institution. In 2017, VMware recognized Rick as the first runner-up for Instructor of the Year for the Americas. This honor was largely due to the glowing feedback from his students. Rick seeks to help students learn by taking complex concepts and providing clear and simple explanations, diagrams, and analogies.
At the impressionable age of 14, William "Bo" Rothwell crossed paths with a TRS-80 Micro Computer System (affectionately known as a "Trash 80"). Soon after, the adults responsible for Bo made the mistake of leaving him alone with the TRS-80. He immediately dismantled it and held his first computer class, showing his friends what made this "computer thing" work. Since that experience, Bo's passion for understanding how computers work and sharing this knowledge with others has resulted in a rewarding career in IT training. His experience includes Cloud, Linux, UNIX, IT security, DevOps, and programming languages such as Perl, Python, Tcl, and BASH. He is the founder and lead instructor of One Course Source, an IT training organization.
