AWS Certified SysOps Administrator Associate Training

LU1: Monitoring, Logging, and Remediation

Topic 1.Implement metrics, alarms, and filters by using AWS monitoring and logging servicesSub-topic: Identify, collect, analyze, and export logs

• Collect metrics and logs using the CloudWatch agent
• Create CloudWatch alarms
• Create metric filters
• Create CloudWatch dashboards
• Configure notifications (e.g., Amazon SNS, Service Quotas, CloudWatch alarms, AWS Health events)

Topic 2 Remediate issues based on monitoring and availability metrics

• Troubleshoot or take corrective actions based on notifications and alarms
• Configure Amazon EventBridge rules to trigger actions
• Use AWS Systems Manager Automation documents to take action based on AWS Config rules

LU2: Reliability and Business Continuity

Topic 3 Implement scalability and elasticitySub-topic: Create and maintain AWS Auto Scaling plans

• Implement caching
• Implement Amazon RDS replicas and Amazon Aurora Replicas
• Implement loosely coupled architectures
• Differentiate between horizontal scaling and vertical scaling

Topic 4 Implement high availability and resilient environmentsSub-topic: Configure Elastic Load Balancer and Amazon Route 53 health checks

• Differentiate between the use of a single Availability Zone and Multi-AZ deployments (e.g., Amazon EC2 Auto Scaling groups, Elastic Load Balancing, Amazon FSx, Amazon RDS)
• Implement fault-tolerant workloads (e.g., Amazon Elastic File System [Amazon EFS], Elastic IP addresses)
• Implement Route 53 routing policies (e.g., failover, weighted, latency-based)

Topic 5: Implement backup and restore strategiesSub-topic: Automate snapshots and backups based on use cases

• Sub-topic: Restore databases (e.g., point-in-time restore, promote read replica)
• Sub-topic: Implement versioning and lifecycle rules
• Sub-topic: Configure Amazon S3 Cross-Region Replication
• Sub-topic: Execute disaster recovery procedures

LU3: Deployment, Provisioning, and Automation

Topic 6: Provision and maintain cloud resourcesSub-topic: Create and manage AMIs

• Create, manage, and troubleshoot AWS CloudFormation
• Provision resources across multiple AWS Regions and accounts (e.g., AWS Resource Access Manager, CloudFormation StackSets, IAM cross-account roles)
• Select deployment scenarios and services (e.g., blue/green, rolling, canary)
• Identify and remediate deployment issues (e.g., service quotas, subnet sizing, CloudFormation and AWS OpsWorks errors, permissions)

Topic 7 Automate manual or repeatable processes

• Use AWS services (e.g., OpsWorks, Systems Manager, CloudFormation) to automate deployment processes
• Implement automated patch management
• Schedule automated tasks by using AWS services (e.g., EventBridge, AWS Config)

Domain 4: Security and Compliance

Topic 8 Implement and manage security and compliance policiesSub-topic: Implement IAM features

• Troubleshoot and audit access issues using AWS services (e.g., CloudTrail, IAM Access Analyzer, IAM policy simulator)
• Validate service control policies and permissions boundaries
• Review AWS Trusted Advisor security checks
• Validate AWS Region and service selections based on compliance requirements
• Implement secure multi-account strategies (e.g., AWS Control Tower, AWS Organizations)

Topic 9 Implement data and infrastructure protection strategiesSub-topic: Enforce a data classification scheme

• Create, manage, and protect encryption keys
• Implement encryption at rest (e.g., AWS Key Management Service [AWS KMS])
• Implement encryption in transit (e.g., AWS Certificate Manager, VPN)
• Securely store secrets using AWS services (e.g., AWS Secrets Manager, Systems Manager Parameter Store)
• Review reports or findings (e.g., AWS Security Hub, Amazon GuardDuty, AWS Config, Amazon Inspector)

LU5 Networking and Content Delivery

Topic 10 Implement networking features and connectivitySub-topic: Configure a VPC

• Configure private connectivity (e.g., Systems Manager Session Manager, VPC endpoints, VPC peering, VPN)
• Configure AWS network protection services (e.g., AWS WAF, AWS Shield)

Topic 11 Configure domains, DNS services, and content deliverySub-topic: Configure Route 53 hosted zones and records

• Implement Route 53 routing policies (e.g., geolocation, geoproximity)
• Configure DNS (e.g., Route 53 Resolver)
• Configure Amazon CloudFront and S3 origin access identity (OAI)
• Configure S3 static website hosting

Topic12 Troubleshoot network connectivity issuesSub-topic: Interpret VPC configurations

• Collect and interpret logs (e.g., VPC Flow Logs, Elastic Load Balancer access logs, AWS WAF web ACL logs, CloudFront logs)
• Identify and remediate CloudFront caching issues
• Troubleshoot hybrid and private connectivity issues

LU6 Cost and Performance Optimization

Topic 13 Implement cost optimization strategiesSub-topic: Implement cost allocation tags

• Identify and remediate underutilized or unused resources using AWS services and tools (e.g., Trusted Advisor, AWS Compute Optimizer, Cost Explorer)
• Configure AWS Budgets and billing alarms
• Assess resource usage patterns to qualify workloads for EC2 Spot Instances
• Identify opportunities to use managed services (e.g., Amazon RDS, AWS Fargate, EFS)

Topic 14 Implement performance optimization strategies

• Recommend compute resources based on performance metrics
• Monitor Amazon EBS metrics and modify configuration to increase performance efficiency
• Implement S3 performance features (e.g., S3 Transfer Acceleration, multipart uploads)
• Monitor RDS metrics and modify the configuration to increase performance efficiency (e.g., Performance Insights, RDS Proxy)
• Enable enhanced EC2 capabilities (e.g., enhanced network adapter, instance store, placement groups)

Practice Exam