• Introduction to Cloud Computing
• Benefits of Cloud Computing
• Cloud Service Models
• Cloud Deployment Models
• Scaling & Types
• Cloud Computing Issues
• Security
• Costing Model
• SLA, Legal and compliance
• Cloud Interoperability Issue
• Migration

• Virtualization and cloud computing
• Types of virtualization
• Virtualization terminologies
• Hypervisor, types & features

• Introduction to AWS Cloud Computing
• Benefits of choosing AWS
• Other cloud platforms comparison
• Global infrastructure, Regions & Availability Zones
• Signing up for AWS
• AWS Free usage tier& support plans
• Management Console walkthrough

• Introduction to creating scalable instances using AWS EC2
• Instances & Types
• Pricing models
• Instance purchasing options
• Amazon Machine Images (AMI)
• Instance store & EBS Volumes
• Managing Volumes, adding additional volumes, modifying the root volume
• Troubleshooting issues with volumes, snapshots and AMIs
• Launching your first AWS Windows Server & Linux Instances
• Setting up security
• Firewall & Security Groups
• Choosing & Creating custom AMIs
• Snapshots & Recovery, snapshot scheduling
• Managing updates
• Usage reports & limits
• Creating a new AMI
• Deploying a new instance from the custom AMI
• Elastic IP, BYOIP
• Hibernating instances
• Key Pairs
• Load balancing, Application & network load balancing
• Creating an ALB web server
• Auto Scaling
• Troubleshooting Issues

• Introduction to AWS CLI
• Installation
• Connecting to your AWS account via CLI
• Other functionalities with CLI

• Difference between EC2 & Lightsail
• Advantages & Functionalities
• Available options on instances and AMIs
• Creating a instance & connecting to it
• Snapshots
• DNS records
• Elastic IPs
• Troubleshooting

• Fundamentals
• Comparison with EC2, Lightsail & Elastic Beanstalk
• Hosting a sample application in EB
• Common issues & troubleshooting

• ECS (Elastic Container Service)
• EKS (Amazon Elastic Container Service for Kubernetes)
• Lambda

• Introduction to storage
• AWS Storage Tiers
• Use cases

• Buckets & Objects
• Encryption, Logging
• S3 durability and redundancy
• S3 Uploading Downloading
• S3 Permissions
• Hosting a static website in AWS S3
• Access Control Lists & Bucket Policies
• S3 Object Versioning
• S3 Lifecycle Policies
• Cross Region Replication
• EC2-S3 Integration
• Reduced Redundancy Storage, S3-IA
• S3 storage class analysis

• Introduction
• Putting & retrieving objects
• S3 Glacier Deep Archive

• Difference & features
• Use cases & capacity limits
• Creating & Managing EBS volumes
• Delete EBS Volumes
• Attach, detach & extend EBS volumes
• Mounting and unmounting EBS volume
• Termination protection
• Troubleshooting & recovery

• Concepts of Network File System (NFS)
• Creating an EFS storage
• Difference between EFS and other storage options
• Mounting EFS
• Troubleshooting issues regarding permissions

• AWS FSx
• AWS Storage Gateway
• AWS Database Services

• Selecting the Database type
• Configuring & creating the database
• DB Security groups
• Snapshots
• Recovering a db instance from snapshot
• Configuring backups
• Connecting to the database

• Creating a dynamo db
• Advantages of using DynamoDB
• Configuring alarms
• Connecting to Dynamo DB

• Elasticache
• Neptune
• Redshift

• AWS Server Migration Service
• AWS Database Migration Service
• Best Practices & Challenges

• IAM introduction
• Importance of IAM
• Creating & managing Users and Groups
• Access Key & Secret Key
• Creating custom policies
• Applying policies
• Password Policy
• Sample Policies
• Roles

• AWS Resource Access Manager (RAM)
• AWS Secrets Manager
• AWS Guard Duty
• AWS Inspector
• AWS Certificate Manager
• AWS Directory Service
• Web Application Firewall (WAF) & Shield

• Importance of creating and managing multiple accounts in a corporate scenario
• Creating an organization
• Adding OUs
• Billing & management

• Introduction to Infrastructure as a Code
• CF stacks & templates
• Creating an S3 buckets etc.
• Saving, managing & importing templates
• Updating & Versioning

• Cloud watch dashboard
• Configuring Monitoring services
• Setting thresholds
• Configuring actions
• Creating a cloud watch alarm
• Getting statistics for ec2 instances
• Monitoring other AWS services
• Configuring Notifications
• Integrating cloud watch with Auto scaling

• Introduction to Load Balancing
• Types& scenarios
• Launch configuration
• Configuring a Load balanced web server
• Introduction to Autoscaling
• Configuring auto scaling with EC2
• Rules & Alarms
• Troubleshooting

• Introduction to Logging
• Creating a trail
• Event History

• AWS Systems Manager
• AWS Trusted Advisor
• AWS License Manager
• AWS Personal Health Dashboard

• Use of cloud front
• Creating a cloud front distribution
• Hosting a website of cloud front distribution
• Invalidations
• Configuring origins and behaviors

• DNS Concepts and Working
• Domain registration
• Configuring record set
• Configuring DNS with web servers & CDN
• Routing Tables
• Troubleshooting

• What is VPC?
• VPC configuration
• Public & Private subnets
• Internet gateway & NAT gateway
• VPC security
• Elastic IP’s
• Inbound and outbound ACL’s
• Designing a VPC
• Gateways
• Routing Tables
• VPC Peering
• Best Practices

• What is SNS
• Creating a topic
• Create subscription

• WorkDocs
• WorkMail
• Workspaces

• Determine cross-account authentication and access strategy for complex organizations
• Determine how to design networks for complex organizations
• Determine how to design a multi-account AWS environment for complex organizations

• Determine security requirements and controls when designing and implementing a solution
• Determine a solution design and implementation strategy to meet reliability requirements.
• Determine a solution design to ensure business continuity.
• Determine a solution design to meet performance objectives
• Determine a deployment strategy to meet business requirements when designing and implementing a solution.

• Select existing workloads and processes for potential migration to the cloud.
• Select migration tools and/or services for new and migrated solutions based on detailed AWS knowledge.
• Determine a new cloud architecture for an existing solution.
• Determine a strategy for migrating existing on-premises workloads to the cloud.

• Select a cost-effective pricing model for a solution.
• Determine which controls to design and implement that will ensure cost optimization.
• Identify opportunities to reduce cost in an existing solution.

• Troubleshoot solution architectures.
• Determine a strategy to improve an existing solution for operational excellence.
• Determine a strategy to improve the reliability of an existing solution.
• Determine a strategy to improve the performance of an existing solution.
• Determine a strategy to improve the security of an existing solution.
• Determine how to improve the deployment of an existing solution.

• Elastic Compute Cloud
• Light Sail
• Elastic Beanstalk
• Lambda
• Overview of Other Compute Services

• Simple Storage Service (AWS S3)
• S3 Glacier storage
• Elastic Block Storage (EBS) Volumes
• Elastic File System (EFS)
• AWS FSx
• AWS Storage Gateway
• AWS Snowball

• Relational Database Service (RDS)
• Dynamo DB
• Elasticache
• Other database services

• AWS Server Migration Service
• AWS Database Migration Service

• Virtual Private Cloud (VPC)
• CloudFront CDN
• Global Accelerator
• Route 53 DNS

• AWS Organizations
• CloudWatch Monitoring
• Auto Scaling
• Cloud Trail
• Cloud Formation
• Overview of Other Services

• Identity access management (IAM)
• AWS Certificate Manager
• AWS Directory Services
• AWS Organizations
• AWS WAF & Shield
• DDoS Mitigation Strategies & Penetration Testing
• AWS KMS & Cloud HSM
• AWS Cognito
• AWS Trusted Advisor
• Overview of Other Services

• SNS
• SQS
• SWF

• Workspaces
• Appstream
• Workdocs

• AWS SQS
• AWS SNS
• Kinesis

• 1st pillar: Operational Excellence
• 2nd pillar: Security
• 3rd pillar: Reliability
• 4th pillar: Performance Efficiency
• 5th pillar: Cost optimization

Cloud Security Introduction
Cloud Security fundamentals
AWS security model
Shared Responsibility
Exam Outline.

Evaluate the suspected compromised instance
Incident response planning
Mitigation actions
AWS Incident Response Strategy
Open access keys
How to Check corrupted EC2 instances
Assess automated alerts and address security events and developing concerns.
AWS Guard Duty
Penetration Testing.

Create security alerts.
Create a logging system.
Monitoring Security Continuously.
Risk Analysis:
AWS Inspector
AWS Inspector Assessment targets
AWS EC2 systems manager
AWS Config
CloudWatch:
VPC Flow Logs
CloudWatch Events
AWS Cloud Trail
AWS Macie
AWS Detective
AWS Security Hub
S3 Event notifications

Expert advice:
Monitor and notify security.
Logging solutions.

Create an Edge security using AWS.
AWS Organizations
Managing OUs
CloudFront
AWS CloudFront Custom SSL
Firewalls
Security groups
Network ACLs
IPS/IDS concepts in cloud
AWS Web Application Firewall (WAF)
AWS Shield concepts
DDoS Mitigation
Network Segmentation
Bastion Hosts
Virtual Private Cloud (VPC)
VPC Endpoints
EC2 Tenancy
Compliance Frameworks
AWS lambda fundamentals
AWS Simple Email Service
AWS Route53 DNS
Troubleshoot a secure network infrastructure.

Create a scalable Amazon Authorization&authentication system.
Principle of Least Privilege.
IAM Policies
IAM JSON Policy Elements
IAM Roles
IAM Permission boundaries
Evaluating effective permissions
Understanding Delegation
Cross account policies & roles
Understanding Federation
AWS Directory services
AWS Organizations
Single Sign-On
SAML Overview Concepts
S3 Security
Cross Account S3 access
S3 Versioning
S3 MFA delete
AWS License manager
Fix an Amazon resource authorisation and authentication mechanism.

Implement critical management
Cryptography basics
Cloud Hardware Security Module (HSM)
AWS Key Management Service (KMS)
Envelope Encryption
KMS Authentication and Access Control
CloudTrail and Encryption
EBS Architecture and Secure Data Wiping
S3 Encryption
AWS Certificate Manager
ELB- ALB and NLB
Docker and container security fundamentals
AWS Glacier
Troubleshoot key management.
Encrypt data at rest and in transit.