SAA-C03 Exam Preparation: Core AWS Services and Architecture Requirements

1. SAA-C03 Core AWS Services
2. SAA-C03 Architecting for Requirements

1. SAA-C03 Core AWS Services

1.1. Amazon EC2 (Elastic Compute Cloud)

1.1.1. Amazon EC2? drill aws_saa_c03

1.1.1.1. Question

What is Amazon EC2?

1.1.1.2. Answer

A web service that provides resizable compute capacity in the cloud. It is designed to make web-scale computing easier for developers.

1.1.2. EC2 Instances? drill aws_saa_c03

1.1.2.1. Question

What are the different types of EC2 instances?

1.1.2.2. Answer

General Purpose: Balance of compute, memory, and networking resources.
Compute Optimized: High performance processors for compute-intensive tasks.
Memory Optimized: Fast performance for workloads that process large datasets in memory.
Accelerated Computing: Hardware accelerators, or co-processors, to perform functions more efficiently than is possible in software running on CPUs.
Storage Optimized: High disk throughput and IOPS for storage-intensive tasks.

1.2. Amazon S3 (Simple Storage Service)

1.2.1. Amazon S3 drill aws_saa_c03

1.2.1.1. Question

What is Amazon S3?

1.2.1.2. Answer

Object storage service that offers industry-leading scalability, data availability, security, and performance.

1.2.2. Storage Classes drill aws_saa_c03

1.2.2.1. Question

What are the different S3 storage classes and their use cases?

1.2.2.2. Answer

S3 Standard: General-purpose storage for frequently accessed data.
S3 Intelligent-Tiering: Automatically optimizes costs by moving data between access tiers.
S3 Standard-Infrequent Access (SIA): For less frequently accessed data.
S3 One Zone-Infrequent Access (One Zone-IA): Lower-cost option for less frequently accessed data, but without the same durability as other classes.
S3 Glacier Instant Retrieval: Archive storage for data that needs immediate access.
S3 Glacier Flexible Retrieval: Archive storage for data that can tolerate a few hours retrieval time.
S3 Glacier Deep Archive: The lowest-cost archive storage in the cloud for data that is rarely accessed.

1.3. Amazon VPC (Virtual Private Cloud)

1.3.1. VPC drill aws_saa_c03

1.3.1.1. Question

What is Amazon VPC?

1.3.1.2. Answer

Lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define.

1.3.2. VPC Components drill aws_saa_c03

1.3.2.1. Question

What are the key components of a VPC?

1.3.2.2. Answer

Subnets: Each subnet must reside entirely within one Availability Zone and cannot span zones.
Route tables: A route table contains a set of rules, called routes, that are used to determine where network traffic is directed.
Internet gateway: An Internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between instances in your VPC and the internet.
Security groups: Act as a virtual firewall for your instance to control incoming and outgoing traffic.
Network access control lists (NACLs): Act as a firewall for controlling traffic in and out of one or more subnets.

1.4. Databases

1.4.1. Database Offerings? drill aws_saa_c03

1.4.1.1. Question

What are the main types of database services offered by AWS?

1.4.1.2. Answer

Amazon RDS (Relational Database Service)
Amazon DynamoDB (NoSQL database)
Amazon Redshift (Data warehouse)
Amazon ElastiCache (In-memory cache)
Amazon DocumentDB (MongoDB-compatible document database)
Amazon Neptune (Graph database)

1.5. IAM (Identity and Access Management)

1.5.1. AWS IAM? drill aws_saa_c03

1.5.1.1. Question

What is AWS IAM ?

1.5.1.2. Answer

Enables you to manage access to AWS services and resources securely. With IAM, you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.

1.5.2. IAM Components? drill aws_saa_c03

1.5.2.1. Question

What are the main components of AWS IAM?

1.5.2.2. Answer

Users
Groups
Roles
Policies

A service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure.

1.7. Route 53

1.7.1. Route 53? drill aws_saa_c03

1.7.1.1. Question

What is Amazon Route 53?

1.7.1.2. Answer

A highly available and scalable cloud Domain Name System (DNS) web service.

1.7.2. Route 53 Features? drill aws_saa_c03

1.7.2.1. Question

What are some key features of Route 53?

1.7.2.2. Answer

Domain name registration
DNS management
Health checks
Traffic routing

1.8. ACM

1.9. ACMPCA

1.10. APIGateway

1.11. ARCZonalShift

1.12. AccessAnalyzer

Identity and Access Management Access Analyzer helps you to set, verify, and refine your IAM policies by providing a suite of capabilities. Its features include findings for external and unused access, basic and custom policy checks for validating policies, and policy generation to generate fine-grained policies. To start using IAM Access Analyzer to identify external or unused access, you first need to create an analyzer.

https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/accessanalyzer.html

1.13. Account

Operations for Amazon Web Services Account Management

1.14. AgentsforBedrock

1.15. AgentsforBedrockRuntime

1.16. AgreementService

1.17. Amplify

1.18. AmplifyBackend

1.19. AmplifyUIBuilder

1.20. ApiGatewayManagementApi

1.21. ApiGatewayV2

Amazon API Gateway helps developers deliver robust, secure, and scalable mobile and web application back ends. API Gateway allows developers to securely connect mobile and web applications to APIs that run on Lambda, Amazon EC2, or other publicly addressable web services that are hosted outside of AWS.

1.22. AppConfig

1.23. AppConfigData

1.24. AppFabric

1.25. AppIntegrationsService

1.26. AppMesh

1.27. AppRegistry

1.28. AppRunner

1.29. AppStream

1.30. AppSync

1.31. Appflow

1.32. ApplicationAutoScaling

1.33. ApplicationCostProfiler

1.34. ApplicationDiscoveryService

1.35. ApplicationInsights

1.36. Artifact

1.37. Athena

1.38. AuditManager

1.39. AugmentedAIRuntime

1.40. AutoScaling

1.41. AutoScalingPlans

1.42. B2BI

1.43. Backup

1.44. BackupGateway

1.45. Batch

1.46. Bedrock

1.47. BedrockRuntime

1.48. BillingConductor

1.49. BillingandCostManagementDataExports

1.50. Braket

1.51. Budgets

1.52. Chatbot

1.53. Chime

1.54. ChimeSDKIdentity

1.55. ChimeSDKMediaPipelines

1.56. ChimeSDKMeetings

1.57. ChimeSDKMessaging

1.58. ChimeSDKVoice

1.59. CleanRoomsML

1.60. CleanRoomsService

1.61. Client Context Parameters

1.62. Cloud9

1.63. CloudControlApi

1.64. CloudDirectory

1.65. CloudFormation

1.66. CloudFront

1.67. CloudFrontKeyValueStore

1.68. CloudHSM

1.69. CloudHSMV2

1.70. CloudSearch

1.71. CloudSearchDomain

1.72. CloudTrail

1.73. CloudTrailDataService

1.74. CloudWatch

1.75. CloudWatchApplicationSignals

1.76. CloudWatchEvidently

1.77. CloudWatchInternetMonitor

1.78. CloudWatchLogs

1.79. CloudWatchNetworkMonitor

1.80. CloudWatchObservabilityAccessManager

1.81. CloudWatchRUM

1.82. CodeArtifact

1.83. CodeBuild

1.84. CodeCatalyst

1.85. CodeCommit

1.86. CodeConnections

1.87. CodeDeploy

1.88. CodeGuruProfiler

1.89. CodeGuruReviewer

1.90. CodeGuruSecurity

1.91. CodePipeline

1.92. CodeStar

1.93. CodeStarNotifications

1.94. CodeStarconnections

1.95. CognitoIdentity

1.96. CognitoIdentityProvider

1.97. CognitoSync

1.98. Comprehend

1.99. ComprehendMedical

1.100. ComputeOptimizer

1.101. ConfigService

1.102. Connect

1.103. ConnectCampaignService

1.104. ConnectCases

1.105. ConnectContactLens

1.106. ConnectParticipant

1.107. ConnectWisdomService

1.108. ControlCatalog

1.109. ControlTower

1.110. CostExplorer

1.111. CostOptimizationHub

1.112. CostandUsageReportService

1.113. CustomerProfiles

1.114. DAX

1.115. DLM

1.116. DataExchange

1.117. DataPipeline

1.118. DataSync

1.119. DataZone

1.120. DatabaseMigrationService

1.121. DeadlineCloud

1.122. Detective

1.123. DevOpsGuru

1.124. DeviceFarm

1.125. DirectConnect

1.126. DirectoryService

1.127. DocDB

1.128. DocDBElastic

1.129. DynamoDB

1.130. DynamoDBStreams

1.131. EBS

1.132. EC2

1.133. EC2InstanceConnect

1.134. ECR

1.135. ECRPublic

1.136. ECS

1.137. EFS

1.138. EKS

1.139. EKSAuth

1.140. EMR

1.141. EMRContainers

1.142. EMRServerless

1.143. ElastiCache

1.144. ElasticBeanstalk

1.145. ElasticInference

1.146. ElasticLoadBalancing

1.147. ElasticLoadBalancingv2

1.148. ElasticTranscoder

1.149. ElasticsearchService

1.150. EntityResolution

1.151. EventBridge

1.152. EventBridgePipes

1.153. EventBridgeScheduler

1.154. Examples

1.155. Examples

1.156. FIS

1.157. FMS

1.158. FSx

1.159. FinSpaceData

1.160. Firehose

1.161. ForecastQueryService

1.162. ForecastService

1.163. FraudDetector

1.164. FreeTier

1.165. GameLift

1.166. Glacier

1.167. GlobalAccelerator

1.168. Glue

1.169. GlueDataBrew

1.170. Greengrass

1.171. GreengrassV2

1.172. GroundStation

1.173. GuardDuty

1.174. Health

1.175. HealthImaging

1.176. HealthLake

1.177. IAM

1.178. IAMRolesAnywhere

1.179. IVS

1.180. IdentityStore

1.181. ImportExport

1.182. Inspector

1.183. Inspector2

1.184. IoT

1.185. IoT1ClickDevicesService

1.186. IoT1ClickProjects

1.187. IoTAnalytics

1.188. IoTDataPlane

1.189. IoTDeviceAdvisor

1.190. IoTEvents

1.191. IoTEventsData

1.192. IoTFleetHub

1.193. IoTFleetWise

1.194. IoTJobsDataPlane

1.195. IoTSecureTunneling

1.196. IoTSiteWise

1.197. IoTThingsGraph

1.198. IoTTwinMaker

1.199. IoTWireless

1.200. KMS

1.201. Kafka

1.202. KafkaConnect

1.203. KendraRanking

1.204. Keyspaces

1.205. Kinesis

1.206. KinesisAnalytics

1.207. KinesisAnalyticsV2

1.208. KinesisVideo

1.209. KinesisVideoArchivedMedia

1.210. KinesisVideoMedia

1.211. KinesisVideoSignalingChannels

1.212. KinesisVideoWebRTCStorage

1.213. LakeFormation

1.214. Lambda

1.215. LaunchWizard

1.216. LexModelBuildingService

1.217. LexModelsV2

1.218. LexRuntimeService

1.219. LexRuntimeV2

1.220. LicenseManager

1.221. LicenseManagerLinuxSubscriptions

1.222. LicenseManagerUserSubscriptions

1.223. Lightsail

1.224. LocationService

1.225. LookoutEquipment

1.226. LookoutMetrics

1.227. LookoutforVision

1.228. MQ

1.229. MTurk

1.230. MWAA

1.231. MachineLearning

1.232. Macie2

1.233. MailManager

1.234. MainframeModernization

1.235. MainframeModernizationApplicationTesting

1.236. ManagedBlockchain

1.237. ManagedBlockchainQuery

1.238. ManagedGrafana

1.239. MarketplaceCatalog

1.240. MarketplaceCommerceAnalytics

1.241. MarketplaceDeploymentService

1.242. MarketplaceEntitlementService

1.243. MarketplaceMetering

1.244. MediaConnect

1.245. MediaConvert

1.246. MediaLive

1.247. MediaPackage

1.248. MediaPackageVod

1.249. MediaStore

1.250. MediaStoreData

1.251. MediaTailor

1.252. MemoryDB

1.253. MigrationHub

1.254. MigrationHubConfig

1.255. MigrationHubOrchestrator

1.256. MigrationHubRefactorSpaces

1.257. MigrationHubStrategyRecommendations

1.258. Neptune

1.259. NeptuneData

1.260. NeptuneGraph

1.261. NetworkFirewall

1.262. NetworkManager

1.263. NimbleStudio

1.264. Omics

1.265. OpenSearchIngestion

1.266. OpenSearchService

1.267. OpenSearchServiceServerless

1.268. OpsWorks

1.269. OpsWorksCM

1.270. Organizations

1.271. Outposts

1.272. PI

1.273. Panorama

1.274. PaymentCryptographyControlPlane

1.275. PaymentCryptographyDataPlane

1.276. PcaConnectorAd

1.277. Personalize

1.278. PersonalizeEvents

1.279. PersonalizeRuntime

1.280. Pinpoint

1.281. PinpointEmail

1.282. PinpointSMSVoice

1.283. PinpointSMSVoiceV2

1.284. Polly

1.285. Pricing

1.286. Private5G

1.287. PrivateCAConnectorforSCEP

1.288. PrometheusService

1.289. Proton

1.290. QApps

1.291. QBusiness

1.292. QConnect

1.293. QLDB

1.294. QLDBSession

1.295. QuickSight

1.296. RAM

1.297. RDS

1.298. RDSDataService

1.299. RecycleBin

1.300. Redshift

1.301. RedshiftDataAPIService

1.302. RedshiftServerless

1.303. Rekognition

1.304. ResilienceHub

1.305. ResourceExplorer

1.306. ResourceGroups

1.307. ResourceGroupsTaggingAPI

1.308. RoboMaker

1.309. Route53

1.310. Route53Domains

1.311. Route53Profiles

1.312. Route53RecoveryCluster

1.313. Route53RecoveryControlConfig

1.314. Route53RecoveryReadiness

1.315. Route53Resolver

1.316. S3

1.317. S3Control

1.318. S3Outposts

1.319. SES

1.320. SESV2

1.321. SFN

1.322. SMS

1.323. SNS

1.324. SQS

1.325. SSM

1.326. SSMContacts

1.327. SSMIncidents

1.328. SSO

1.329. SSOAdmin

1.330. SSOOIDC

1.331. STS

1.332. SWF

1.333. SageMaker

1.334. SageMakerFeatureStoreRuntime

1.335. SageMakerMetrics

1.336. SageMakerRuntime

1.337. SageMakergeospatialcapabilities

1.338. SagemakerEdgeManager

1.339. SavingsPlans

1.340. Schemas

1.341. SecretsManager

1.342. SecurityHub

1.343. SecurityLake

1.344. ServerlessApplicationRepository

1.345. ServiceCatalog

1.346. ServiceDiscovery

1.347. ServiceQuotas

1.348. Shield

1.349. SimSpaceWeaver

1.350. SimpleDB

1.351. SnowDeviceManagement

1.352. Snowball

1.353. SsmSap

1.354. StorageGateway

1.355. SupplyChain

1.356. Support

1.357. SupportApp

1.358. Synthetics

1.359. SystemsManagerQuickSetup

1.360. TaxSettings

1.361. TelcoNetworkBuilder

1.362. Textract

1.363. TimestreamInfluxDB

1.364. TimestreamQuery

1.365. TimestreamWrite

1.366. TranscribeService

1.367. Transfer

1.368. Translate

1.369. TrustedAdvisorPublicAPI

1.370. VPCLattice

1.371. VerifiedPermissions

1.372. VoiceID

1.373. WAF

1.374. WAFRegional

1.375. WAFV2

1.376. WellArchitected

1.377. WorkDocs

1.378. WorkLink

1.379. WorkMail

1.380. WorkMailMessageFlow

1.381. WorkSpaces

1.382. WorkSpacesThinWorkSpacesWeb

2.2.1. Question

What is the difference between high availability and scalability in AWS?

2.2.2. Answer

High Availability: The ability of a system to operate continuously without failing for a designated period.
Scalability: The ability of a system to handle a growing amount of work by adding resources to the system.

2.3. Resilient Architectures

2.4. Resiliency drill aws_saa_c03

What does it mean to design for resiliency in AWS?

2.4.1. Question

2.4.2. Answer

Building systems that can recover from failures and continue to function. This involves using multiple Availability Zones, implementing health checks, and automating recovery processes.

2.5. High Performing Architectures

2.6. Performance Efficiency drill aws_saa_c03

What are some strategies for designing high-performing architectures in AWS?

2.6.1. Question

2.6.2. Answer

Choosing the right instance types
Using caching services (like ElastiCache)
Implementing load balancing (with ALBs or NLBs)
Optimizing database performance

2.7. Secure Architectures

2.8. Security drill aws_saa_c03

How does AWS Shared Responsibility Model work?

2.8.1. Answer

AWS is responsible for the security "of" the cloud (hardware, infrastructure, etc.)
You are responsible for the security "in" the cloud (your data, applications, etc.)