AWS Certified Cloud Practitioner Study Guide

Introduction xxi Assessment Test xxvii Chapter 1 The Cloud 1 Introduction 2 What Is Cloud Computing? 2 Highly Available and Scalable Resources 2 Professionally Secured Infrastructure 3 Metered Payment Model 3 Server Virtualization: The Basics 4 Cloud Platform Models 5 Infrastructure as a Service 5 Platform as a Service 5 Software as a Service 5 Serverless Workloads 6 Scalability and Elasticity 7 Scalability 7 Elasticity 7 Summary 8 Exam Essentials 9 Review Questions 10 Chapter 2 Understanding Your AWS Account 13 Introduction 14 The Free Tier 15 How Does the Free Tier Work? 15 Tracking Your Free Tier Usage 15 What’s Available Under the Free Tier? 17 Product Pricing 18 Finding AWS Pricing Documentation 18 Working with Online Calculators 19 Service Limits 23 Billing and Cost Management 23 The AWS Billing Dashboard 24 AWS Budgets 24 Monitoring Your Costs 25 AWS Organizations 26 Summary 26 Exam Essentials 27 Review Questions 28 Chapter 3 Getting Support on AWS 33 Introduction 34 Support Plans 34 Support Plan Pricing 34 The Basic Support Plan 36 The Developer Support Plan 36 The Business Support Plan 37 The Enterprise Support Plan 37 AWS Professional Services 37 Documentation and Online Help 38 Documentation 38 Discussion Forums 40 Trusted Advisor 40 Summary 42 Exam Essentials 43 Review Questions 44 Chapter 4 Understanding the AWS Environment 49 Introduction 50 AWS Global Infrastructure: AWS Regions 50 Regionally Based Services 52 Globally Based Services 53 Service Endpoints 53 AWS Global Infrastructure: Availability Zones 54 Availability Zone Designations 54 Availability Zone Networking 55 Availability Zones and High Availability 56 AWS Global Infrastructure: Edge Locations 57 Edge Locations and CloudFront 58 Regional Edge Cache Locations 59 The AWS Shared Responsibility Model 59 Managed Resources 60 Unmanaged Resources 61 Service Health Status 61 AWS Acceptable Use Policy 61 Summary 61 Exam Essentials 62 Review Questions 63 Chapter 5 Securing Your AWS Resources 67 Introduction 68 AWS Identity and Access Management 68 Protecting the Root User 69 Authentication 69 Users, Groups, and Roles 72 Providing Federated Access 74 Credential Report 75 Encryption 75 Regulatory Compliance (AWS Artifact) 76 Summary 77 Exam Essentials 77 Review Questions 78 Chapter 6 Working with Your AWS Resources 83 Introduction 84 The AWS Management Console 85 Accessing the AWS Management Console 85 Opening a Service Console 87 Working with Shortcuts 88 Selecting a Region 88 The Account Name Menu 90 Resource Groups 90 Tag Editor 91 Tagging Strategies 92 The AWS Console Mobile Application 94 The AWS Command Line Interface 98 Requirements 99 Installation 99 Software Development Kits 101 Mobile Software Development Kits 101 Internet of Things Device Software Development Kits 102 CloudWatch 103 CloudWatch Metrics 103 CloudWatch Alarms 104 CloudWatch Dashboards 104 CloudWatch Logs 105 CloudWatch Events 106 CloudTrail 107 API and Non-API Events 107 Management and Data Events 107 Event History 108 Trails 108 Log File Integrity Validation 108 Cost Explorer 109 Cost and Usage 109 Reservation Reports 111 Reserved Instance Recommendations 112 Summary 113 Exam Essentials 113 Review Questions 115 Chapter 7 The Core Compute Services 119 Introduction 120 Deploying Amazon Elastic Compute Cloud Servers 120 Amazon Machine Images 120 Understanding EC2 Instance Types 123 Server Storage: Elastic Block Store and Instance Store Volumes 124 Understanding EC2 Pricing Models 125 Simplified Deployments Through Managed Services 127 Amazon Lightsail 128 AWS Elastic Beanstalk 128 Deploying Container and Serverless Workloads 129 Containers 129 Serverless Functions 129 Summary 130 Exam Essentials 130 Review Questions 132 Chapter 8 The Core Storage Services 137 Introduction 138 Simple Storage Service 138 Objects and Buckets 139 S3 Storage Classes 139 Access Permissions 142 Encryption 143 Versioning 143 Object Life Cycle Configurations 144 S3 Glacier 145 Archives and Vaults 145 Retrieval Options 145 AWS Storage Gateway 146 File Gateways 146 Volume Gateways 146 Tape Gateways 147 AWS Snowball 147 Hardware Specifications 148 Security 148 Snowball Edge 149 Summary 150 Exam Essentials 150 Review Questions 152 Chapter 9 The Core Database Services 157 Introduction 158 Database Models 158 Relational Databases 159 Structured Query Language 160 Nonrelational (No-SQL) Databases 160 Amazon Relational Database Service 161 Database Engines 161 Licensing 162 Instance Classes 162 Scaling Vertically 163 Storage 163 Scaling Horizontally with Read Replicas 164 High Availability with Multi-AZ 164 Backup and Recovery 165 Determining Your Recovery Point Objective 165 DynamoDB 166 Items and Tables 166 Scaling Horizontally 167 Queries and Scans 167 Amazon Redshift 168 Summary 169 Exam Essentials 170 Review Questions 171 Chapter 10 The Core Networking Services 175 Introduction 176 Virtual Private Cloud 176 VPC CIDR Blocks 176 Subnets 177 Internet Access 178 Security Groups 178 Network Access Control Lists 178 VPC Peering 179 Virtual Private Networks 179 Direct Connect 179 Route 53 180 Resource Records 180 Domain Name Registration 180 Hosted Zones 181 Routing Policies 181 Health Checks 182 Traffic Flow and Traffic Policies 182 CloudFront 183 Summary 183 Exam Essentials 184 Review Questions 185 Chapter 11 Automating Your AWS Workloads 189 Introduction 190 The Imperative Approach 190 The Declarative Approach 191 Infrastructure as Code 191 CloudFormation 191 Templates 192 Stacks 192 CloudFormation vs. the AWS CLI 193 AWS Developer Tools 194 CodeCommit 194 CodeBuild 195 CodeDeploy 196 CodePipeline 197 EC2 Auto Scaling 199 Launch Configurations and Launch Templates 199 Auto Scaling Groups 199 Scaling Actions 200 Configuration Management 200 Systems Manager 200 OpsWorks 201 Summary 203 Exam Essentials 204 Review Questions 205 Chapter 12 Common Use-Case Scenarios 209 Introduction 210 The Well-Architected Framework 210 Reliability 211 Performance Efficiency 211 Security 211 Cost Optimization 212 Operational Excellence 213 A Highly Available Web Application Using Auto Scaling and Elastic Load Balancing 213 Creating an Inbound Security Group Rule 214 Creating an Application Load Balancer 216 Creating a Launch Template 218 Creating an Auto Scaling Group 219 Static Website Hosting Using S3 222 Summary 224 Exam Essentials 224 Review Questions 226 Appendix A Answers to Review Questions 231 Chapter 1: The Cloud 232 Chapter 2: Understanding Your AWS Account 232 Chapter 3: Getting Support on AWS 234 Chapter 4: Understanding the AWS Environment 235 Chapter 5: Securing Your AWS Resources 237 Chapter 6: Working with Your AWS Resources 238 Chapter 7: The Core Compute Services 240 Chapter 8: The Core Storage Services 242 Chapter 9: The Core Database Services 244 Chapter 10: The Core Networking Services 245 Chapter 11: Automating Your AWS Workloads 247 Chapter 12: Common Use-Case Scenarios 248 Appendix B Additional Services 251 Athena 252 AWS Backup 252 AWS Glue 252 Batch 252 Cognito 253 Database Migration Service 253 Elastic File System 253 Elastic MapReduce 253 Inspector 254 Kinesis 254 Macie 254 Neptune 254 Simple Queue Service 254 WorkDocs 254 WorkSpaces 255 Index 257