Cloud Operations on AWS course material links

Please not that this is not a prep course for the “AWS Certified SysOps Administrator - Associate” certification!

This document contains links mentioned in the “Cloud Operations on AWS” course.

Module 0: Course Introduction

Full name: Cloud Operations on AWS

Product code: 200-SYSOPS-55

These links are based on the course version 5.5.5.

The official course material: eVantage Bookshelf (VitalSource)

Additional material: AWS Skill Builder

Module 1: IntroductionIntroduction to Cloud Operations on AWS

Websites

• AWS Well-Architected Framework
• Well-Architected Framework
• Operational Excellence Pillar
• Security Pillar
• Reliability Pillar
• Performance Efficiency Pillar
• Cost Optimization Pillar
• Sustainability Pillar

AWS Services

• AWS Well-Architected Tool Overview
• AWS Well-Architected Tool Documentation

---

Module 2: Access Management

Websites

• Introduction to AWS Identity and Access Management (IAM)
• IAM Identities (Users, User Groups, and Roles)
• Tasks That Only the Account Root User Can Perform
• Managing Access to Your AWS Account for the First Time
• SAML-Based Identity Federation
• Using IAM User Groups
• Managing Access Policies
• AWS Policy Generator
• Generate Policies Using Access Analyzer
• Passing an IAM Role to a Service
• Example Policy: Deny Access Based on IP Address
• Example Policy: Pass an IAM Role to a Specific AWS Service
• How IAM Policy Evaluation Works
• Policy Evaluation Logic
• IAM Best Practices
• Multi-Factor Authentication (MFA)
• Ensure Access Keys Are Rotated
• Understanding the Credential Report
• Testing IAM Policies

AWS Services

• AWS Identity and Access Management (IAM) Overview
• AWS Config Overview
• AWS Config

---

Module 3: System Discovery

Websites

• Installing the AWS CLI
• AWS CLI Command Reference
• What Is Session Manager?
• Toward a Bastion-less World
• Session Manager User Permissions
• Using AWS Config Rules
• Getting Started with AWS Config Console

AWS Services

• AWS Systems Manager Overview
• AWS Systems Manager Documentation
• AWS Config Overview
• AWS Config Documentation

---

Module 4: Deploy and Update Resources

Websites

• Tagging Best Practices
• AWS Resource Groups User Guide
• Tagging AWS Resources
• Tagging Strategies for Governance
• Using Tag Policies in AWS Organizations
• AWS CloudFormation Resource Tags
• Managing Tags in AWS Service Catalog
• Tagging IAM Resources
• Amazon Machine Images (AMIs)
• Run User Data Scripts on EC2 Instances
• EC2Launch for Windows Instances
• Creating an EBS-Backed AMI
• Copying an AMI
• AWS Image Builder
• VM Import/Export
• Retrieving Instance Metadata

AWS Services

• AWS Organizations Overview
• AWS CloudFormation Overview
• Amazon EC2 Overview
• AWS Identity and Access Management (IAM) Overview

Module 5: Automate Resource Deployment

Websites

• RollbackConfiguration
• Continue Rolling Back an Update
• Using the AWS CloudFormation Editor
• AWS CloudFormation Designer
• Resources Section Structure
• AWS Resource and Property Types Reference
• Ref
• Fn::GetAtt
• Intrinsic Function Reference
• Parameters Section Structure
• Pseudo Parameters Reference
• Mappings Section Structure
• Detecting Unmanaged Configuration Changes to Stacks and Resources
• AWS CloudFormation Helper Scripts Reference
• cfn-signal
• SignalResource
• CreationPolicy Attribute
• cfn-init
• Deploying Applications on Amazon EC2 with AWS CloudFormation
• Bootstrapping Applications on Windows Stacks
• Troubleshooting AWS CloudFormation
• create-stack
• continue-update-rollback
• AWS CloudFormation Best Practices
• Using Stack Exports
• What Are StackSets?
• Updating Stacks Using Direct Updates
• Updating Stacks Using Change Sets
• Protecting Stack Resources
• Logging AWS CloudFormation API Calls with AWS CloudTrail
• Introduction to AWS Service Catalog
• Managing Tags in AWS Service Catalog

AWS Services

• AWS CloudFormation Overview
• AWS Config Overview
• AWS Service Catalog

---

Module 6: Manage Resources

Websites

• Systems Manager Prerequisites
• Systems Manager Service Role
• Create a VPC for Systems Manager
• Default Host Management Configuration
• Resource Explorer
• OpsCenter
• What Is AWS Systems Manager Incident Manager?
• Application Manager
• Working with AppConfig
• Using AWS KMS with Parameter Store
• Parameter Hierarchies
• Public Parameters
• Executing an Automation with Approval
• Systems Manager Documents
• Automation Actions
• Maintenance Windows
• State Manager
• Patch Manager
• Troubleshooting Automation

AWS Services

• AWS Systems Manager Overview
• AWS Key Management Service (KMS) Overview

---

Module 7: Configure Highly Available Systems

Websites

• Elastic Load Balancing Features
• Introduction to Application Load Balancers
• Health Checks for Network Load Balancer Target Groups
• Health Checks for Application Load Balancer Target Groups
• Health Checks for Classic Load Balancers
• CloudWatch Metrics for Application Load Balancers
• CloudWatch Metrics for Network Load Balancers
• Access Logs for Application Load Balancers
• Routing to an ELB Load Balancer
• Creating Health Checks
• Troubleshooting Application Load Balancers

AWS Services

• Amazon Elastic Load Balancing (ELB) Overview
• Amazon Route 53 Overview

---

Module 8: Automate Scaling

Websites

• What Is Amazon EC2 Auto Scaling?
• Getting Started with Amazon EC2 Auto Scaling
• Launch Templates
• Using EC2 Launch Templates
• Auto Scaling Groups
• Load Balancer Integration with Auto Scaling
• Monitoring System and Instance Status Checks
• Simple and Step Scaling Policies
• Target Tracking Scaling Policies
• Instance Termination
• Scaling Cooldowns
• Grinder
• Apache JMeter
• Using Spot Instances
• Spot Fleet
• Launching Spot Instances in an Auto Scaling Group
• Purchase Options for Auto Scaling Groups
• License Configurations
• Mapping Licenses to Rules
• Troubleshooting Auto Scaling with AMIs

AWS Services

• Amazon EC2 Auto Scaling Overview
• Amazon EC2 Overview
• AWS License Manager Overview

---

Module 9: Monitor and MaintainSystem Health

Websites

• Amazon CloudWatch
• What Is Amazon CloudWatch?
• What Is Amazon EventBridge?
• Installing the CloudWatch Agent
• What Is CloudWatch Logs?
• Splunk Add-on for AWS: CloudWatch
• CloudWatch Concepts
• AWS Services That Publish CloudWatch Metrics
• Monitoring Your Instances Using CloudWatch
• Amazon CloudWatch Pricing
• PutMetricData
• Publishing Custom Metrics
• GetMetricStatistics
• CloudWatch Anomaly Detection
• CloudWatch Dashboards
• Creating an Alarm That Sends Email
• Monitoring Log Data
• Working with Log Groups and Streams
• Analyzing Log Data with CloudWatch Logs Insights
• CloudWatch Logs Insights Query Syntax
• Amazon EventBridge
• EventBridge Targets
• Getting Started with the AWS Health Dashboard
• Monitoring AWS Health Events with CloudWatch Events
• Visualize and Monitor Highly Distributed Applications with Amazon CloudWatch ServiceLens
• AWS X-Ray
• AWS X-Ray Concepts
• Amazon CloudWatch ServiceLens
• Why Are My CloudWatch Alarms in INSUFFICIENT_DATA State?
• Troubleshooting the CloudWatch Agent

AWS Services

• Amazon CloudWatch Overview
• Amazon EventBridge Overview
• AWS Personal Health Dashboard Overview
• AWS X-Ray Overview

---

Module 10: Data Security and System Auditing

Websites

• What Is IAM Access Analyzer?
• IAM Access Analyzer Findings
• Policy Evaluation Logic
• Creating Your First CloudTrail Trail Using the Console
• Analyzing Data in S3 Using Amazon Athena
• Supported SerDe Libraries in Amazon Athena
• Aggregating AWS Config Data
• AWS Config Resource Configuration Reference
• Using AWS Config Managed Rules
• Continuous Monitoring and Threat Detection
• Remediating Amazon GuardDuty Findings
• Incident Response in the Security Pillar
• Remediation with AWS Config
• How Do I Find AWS Config Remediation Executions?

AWS Services

• AWS Identity and Access Management (IAM) Overview
• AWS CloudTrail Overview
• Amazon Athena Overview
• AWS Config Overview
• Amazon GuardDuty Overview
• AWS Well-Architected Tool Overview

---

Module 11: Operate Secure and Resilient Networks

Websites

• Amazon VPC Limits
• Recommended Network ACL Rules
• Network ACL Rules
• Security Group Limits
• Security Group Rules Reference
• Announcing Support for Inter-Region VPC Peering
• Amazon VPC Network Administrator Guide
• AWS Transit Gateway
• AWS PrivateLink Concepts
• Route 53 Resolver
• VPC Flow Logs
• Introduction to Amazon CloudFront
• How CloudFront Works
• Specifying Origin Values
• Specifying General Distribution Values
• Specifying Cache Behavior Values
• Controlling Object Expiration
• Invalidating Objects
• AWS Managed Rule Groups
• AWS WAF Rules
• Planning to Use AWS Certificate Manager Private Certificate Authority

AWS Services

• Amazon VPC Overview
• Amazon EC2 Overview
• Amazon Route 53 Overview
• Amazon CloudFront Overview
• AWS WAF Overview
• AWS Certificate Manager Overview

---

Module 12: Mountable Storage

Websites

• Instance Storage
• Storage-Optimized Instances
• Instance Store vs. EBS
• EBS Volume Types
• General Purpose SSD Volumes
• gp3 EBS Volume Type
• HDD Volume Types
• Creating an EBS Volume
• Using EBS Volumes
• Requesting EBS Volume Modifications
• Recognizing Expanded Volumes on Linux
• Configuring RAID
• Multi-Attach for EBS Volumes
• EBS Multi-Attach Considerations
• EBS Multi-Attach Now Available
• Monitoring Volume Status
• Monitoring EBS Volumes with CloudWatch
• Copying an EBS Snapshot
• Creating a Volume from a Snapshot
• Archiving EBS Snapshots
• Snapshot Lifecycle
• AWS Backup for VMware
• Creating a Backup Plan
• Mounting an EFS File System
• Installing an NFS Client for EFS
• When to Choose Amazon FSx
• What Is Amazon FSx for NetApp ONTAP?
• What Is Amazon FSx for OpenZFS?
• What Is Amazon FSx for Windows File Server?
• What Is Amazon FSx for Lustre?

AWS Services

• Amazon EC2 Overview
• AWS Backup Overview
• Amazon Elastic File System (EFS) Overview
• Amazon FSx
• Amazon FSx for Lustre

---

Module 13: Object Storage

Websites

• Cross-Region Replication Scenarios
• Block Public Access
• S3 Access Analyzer
• S3 Server Access Log Format
• Configuring S3 Event Notifications
• Amazon S3 Storage Classes
• Performance Across S3 Storage Classes
• S3 Express One Zone
• New Amazon S3 Express One Zone Storage Class
• Lifecycle Transition Considerations
• Managing Object Lifecycles
• Restoring Objects: Retrieval Options

AWS Services

• Amazon S3 Overview

---

Module 14: Cost Reporting, Alerts, and Optimization

Websites

• Tutorial: Restrict Access to Billing
• Getting and Viewing Your AWS Bill
• What Is AWS Cost Explorer?
• Modifying Cost Explorer Preferences
• Forecasting Costs with Cost Explorer
• Creating a Cost and Usage Report
• Querying Cost and Usage Reports with Amazon Athena
• Cost and Usage Report Data Dictionary
• Automated CUR Query and Email Delivery
• Creating a Cost Budget
• Creating a Reservation Budget
• Creating a Savings Plans Budget
• Creating Budget Filters
• Setting Up Amazon SNS Alerts with AWS Chatbot
• Monitoring Estimated Charges with CloudWatch
• Rightsizing Recommendations
• Savings Plans Recommendations
• Reserved Instance Recommendations
• Trusted Advisor Check Reference
• What Is AWS Compute Optimizer?
• Viewing the Compute Optimizer Dashboard
• Discover and Compare EC2 Instance Types

AWS Services

• AWS Trusted Advisor Overview
• AWS Compute Optimizer Overview

---

Module 15: Review

Websites

• AWS Certification exam preparation
• AWS Certification
• AWS Recertification
• All AWS Certification exams
• Schedule an Exam
• AWS Skill Builder subscription
• AWS Training and Certification
• AWS Online Tech Talks
• AWS Ramp-Up Guides

Courses

• Advanced Architecting on AWS Online Course Supplement
• AWS Skill Builder
• AWS Builder Labs
• AWS Workshops