In this course, each module presents a scenario with an architectural challenge to be solved. You will examine available AWS services and features as solutions to the problem. You will gain insights by participating in problem-based discussions and learning about the AWS services that you could apply to meet the challenges. Over 3 days, the course goes beyond the basics of a cloud infrastructure and covers topics to meet a variety of needs for AWS customers. Course modules focus on managing multiple AWS accounts, hybrid connectivity and devices, networking with a focus on AWS Transit Gateway connectivity, container services, automation tools for continuous integration/continuous delivery (CI/CD), security and distributed denial of service (DDoS) protection, data lakes and data stores, edge services, migration options, and managing costs. The course concludes by presenting you with scenarios and challenging you to identify the best solutions.
This course is intended for:
Cloud architects.
Solutions architects.
Anyone who designs solutions for cloud infrastructures.
By actively participating in this course, you will learn about the following:
Review the AWS Well-Architected Framework to ensure understanding of best cloud design practices by responding to poll questions while following a graphic presentation.
Demonstrate the ability to secure Amazon Simple Storage Service (Amazon S3) virtual private cloud (VPC) endpoint connections in a lab environment.
Identify how to implement centralized permissions management and reduce risk using AWS Organizations organizational units (OUs) and service control policies (SCPs) with AWS Single Sign[1]On.
Compare the permissions management capabilities of OUs, SCPs, and AWS SSO with and without AWS Control Tower to determine best practices based on use cases.
Discuss AWS hybrid network designs to address traffic increases and streamline remote work while ensuring FIPS 140-2 Level 2, or Level 3 security compliance.
Explore the solutions and products available to design a hybrid infrastructure, including access to 5G networks, to optimize service and reduce latency while maintaining high security for critical on[1]premises applications.
Explore ways to simplify the connection configurations between applications and high[1]performance workloads across global networks.
Demonstrate the ability to configure a transit gateway in a lab environment.
Identify and discuss container solutions and define container management options.
Build and test a container in a lab environment.
Examine how the AWS developer tools optimize the CI/CD pipeline with updates based on near[1]real-time data.
Identify the anomaly detection and protection services that AWS offers to defend against DDoS attacks.
Identify ways to secure data in transit, at rest, and in use with AWS Key Management Service (AWS KMS) and AWS Secrets Manager.
Determine the best data management solution based on frequency of access, and data query and analysis needs.
Set up a data lake and examine the advantages of this type of storage configuration to crawl and query data in a lab environment.
Identify solutions to optimize edge services to eliminate latency, reduce inefficiencies, and mitigate risks
Identify the components used to automate the scaling of global applications using geolocation and traffic control.
Deploy and activate an AWS Storage Gateway file gateway and AWS DataSync in a lab environment.
Review AWS cost management tools to optimize costs while ensuring speed and performance.
Review migration tools, services, and processes that AWS provides to implement effective cloud operation models based on use cases and business needs.
Provide evidence of your ability to apply the technical knowledge and experience gained in the course to improve business practices by completing a Capstone Project.
We recommend that attendees of this course have one of the following prerequisites:
Knowledge and experience with core AWS services from the Compute, Storage Networking and AWS Indentify and Access Management (IAM) categories.
Attended our Architecting on AWS course (AWS4502).
Achieved AWS Certified Solutions Architect – Associate.
Have at least 1 year of experience operating AWS workloads.
Day 1
Course Overview
Logistics
Student resources
Agenda
Introductions
Building a Web Application on AWS
Discuss the architecture of the application you are going to build during this course
Explore the AWS services needed to build your web application
Discover how to store, manage, and host your web application
Getting Started with Development on AWS
Describe how to access AWS services programmatically
List some programmatic patterns and how they provide efficiencies within AWS SDKs and AWS CLI
Explain the value of AWS Cloud9
Getting Started with Permissions
Review AWS Identity and Access Management (IAM) features and components permissions to support a development environment
Demonstrate how to test AWS IAM permissions
Configure your IDEs and SDKs to support a development environment
Demonstrate accessing AWS services using SDKs and AWS Cloud9
Lab 1: Configure the Developer Environment
Connect to a developer environment
Verify that the IDE and the AWS CLI are installed and configured to use the application profile
Verify that the necessary permissions have been granted to run AWS CLI commands
Assign an AWS IAM policy to a role to delete an Amazon S3 bucket
Module 5: Getting Started with Storage
Describe the basic concepts of Amazon S3
List the options for securing data using Amazon S3
Define SDK dependencies for your code
Explain how to connect to the Amazon S3 service
Describe request and response objects
Module 6: Processing Your Storage Operations
Perform key bucket and object operations
Explain how to handle multiple and large objects
Create and configure an Amazon S3 bucket to host a static website
Grant temporary access to your objects
Demonstrate performing Amazon S3 operations using SDKs
Lab 2: Develop Solutions Using Amazon S3
Interact with Amazon S3 programmatically using AWS SDKs and the AWS CLI
Create a bucket using waiters and verify service exceptions codes
Build the needed requests to upload an Amazon S3 object with metadata attached
Build requests to download an object from the bucket, process data, and upload the object back to the bucket
Configure a bucket to host the website and sync the source files using the AWS CLI
Add IAM bucket policies to access the S3 website.
Day 2
Getting Started with Databases
Describe the key components of DynamoDB
Explain how to connect to DynamoDB
Describe how to build a request object
Explain how to read a response object
List the most common troubleshooting exceptions
Processing Your Database Operations
Develop programs to interact with DynamoDB using AWS SDKs
Perform CRUD operations to access tables, indexes, and data
Describe developer best practices when accessing DynamoDB
Review caching options for DynamoDB to improve performance
Perform DynamoDB operations using SDK
Lab 3: Develop Solutions Using Amazon DynamoDB
Interact with Amazon DynamoDB programmatically using low-level, document, and highlevel APIs in your programs
Retrieve items from a table using key attributes, filters, expressions, and paginations
Load a table by reading JSON objects from a file
Search items from a table based on key attributes, filters, expressions, and paginations
Update items by adding new attributes and changing data conditionally
Access DynamoDB data using PartiQL and object-persistence models where applicable
Processing Your Application Logic
Develop a Lambda function using SDKs
Configure triggers and permissions for Lambda functions
Test, deploy, and monitor Lambda functions
Lab 4: Develop Solutions Using AWS Lambda Functions
Create AWS Lambda functions and interact programmatically using AWS SDKs and AWS CLI
Configure AWS Lambda functions to use the environment variables and to integrate with other services
Generate Amazon S3 pre-signed URLs using AWS SDKs and verify the access to bucket objects
Deploy the AWS Lambda functions with .zip file archives through your IDE and test as needed
Invoke AWS Lambda functions using the AWS Console and AWS CLI
Managing the APIs
Describe the key components of API Gateway
Develop API Gateway resources to integrate with AWS services
Configure API request and response calls for your application endpoints
Test API resources and deploy your application API endpoint
Demonstrate creating API Gateway resources to interact with your application APIs
Lab 5: Develop Solutions Using Amazon API Gateway
Create RESTful API Gateway resources and configure CORS for your application
Integrate API methods with AWS Lambda functions to process application data
Configure mapping templates to transform the pass-through data during method integration
Create a request model for API methods to ensure that the pass-through data format complies with application rules
Deploy the API Gateway to a stage and validate the results using the API endpoint
Day 3
Building a Modern Application
Describe the challenges with traditional architectures
Describe the microservice architecture and benefits
Explain various approaches for designing microservice applications
Explain steps involved in decoupling monolithic applications
Demonstrate the orchestration of Lambda Functions using AWS Step Functions
Granting Access to Your Application Users
Analyze the evolution of security protocols
Explore the authentication process using Amazon Cognito
Manage user access and authorize serverless APIs
Observe best practices for implementing Amazon Cognito
Demonstrate the integration of Amazon Cognito and review JWT tokens
Lab 6: Capstone – Complete the Application Build
Create a Userpool and an Application Client for your web application using
Add new users and confirm their ability to sign-in using the Amazon Cognito CLI
Configure API Gateway methods to use Amazon Cognito as an authorizer
Verify JWT authentication tokens are generated during API Gateway calls
Develop API Gateway resources rapidly using a Swagger importing strategy
Set up your web application frontend to use Amazon Cognito and API Gateway configurations and verify the entire application functionality
Deploying Your Application
Identify risks associated with traditional software development practices
Understand DevOps methodology
Configure an AWS SAM template to deploy a serverless application
Describe various application deployment strategies
Demonstrate deploying a serverless application using AWS SAM
Observing Your Application
Differentiate between monitoring and observability
Evaluate why observability is necessary in modern development and key components
Understand CloudWatch’s part in configuring the observability
Demonstrate using CloudWatch Application Insights to monitor applications
Demonstrate using X-Ray to debug your applications
Lab 7: Observe the Application Using AWS X-Ray
Instrument your application code to use AWS X-Ray capabilities
Enable your application deployment package to generate logs
Understand the key components of an AWS SAM template and deploy your application
Create AWS X-Ray service maps to observe end-to-end processing behavior of your application
Analyze and debug application issues using AWS X-Ray traces and annotations
Course Wrap-up
Course overview
AWS training courses
Certifications
Course feedback
This course prepares you for the Amazon AWS Certified Solutions Architect Professional – the exam is not included with this course.
This training course provided by Skilltec is accredited through Global Knowledge Training Ltd. Global Knowledge Training Ltd are the authorised learning partner; all trademarks and partner statuses are provided through them.