SAA-C03 Exam Preparation: Core AWS Services and Architecture Requirements
Table of Contents
- SAA-C03 Core AWS Services
- Amazon EC2 (Elastic Compute Cloud)
- Amazon S3 (Simple Storage Service)
- Amazon VPC (Virtual Private Cloud)
- Databases
- IAM (Identity and Access Management)
- CloudTrail
- Route 53
- ACM
- ACMPCA
- APIGateway
- ARCZonalShift
- AccessAnalyzer
- Account
- AgentsforBedrock
- AgentsforBedrockRuntime
- AgreementService
- Amplify
- AmplifyBackend
- AmplifyUIBuilder
- ApiGatewayManagementApi
- ApiGatewayV2
- AppConfig
- AppConfigData
- AppFabric
- AppIntegrationsService
- AppMesh
- AppRegistry
- AppRunner
- AppStream
- AppSync
- Appflow
- ApplicationAutoScaling
- ApplicationCostProfiler
- ApplicationDiscoveryService
- ApplicationInsights
- Artifact
- Athena
- AuditManager
- AugmentedAIRuntime
- AutoScaling
- AutoScalingPlans
- B2BI
- Backup
- BackupGateway
- Batch
- Bedrock
- BedrockRuntime
- BillingConductor
- BillingandCostManagementDataExports
- Braket
- Budgets
- Chatbot
- Chime
- ChimeSDKIdentity
- ChimeSDKMediaPipelines
- ChimeSDKMeetings
- ChimeSDKMessaging
- ChimeSDKVoice
- CleanRoomsML
- CleanRoomsService
- Client Context Parameters
- Cloud9
- CloudControlApi
- CloudDirectory
- CloudFormation
- CloudFront
- CloudFrontKeyValueStore
- CloudHSM
- CloudHSMV2
- CloudSearch
- CloudSearchDomain
- CloudTrail
- CloudTrailDataService
- CloudWatch
- CloudWatchApplicationSignals
- CloudWatchEvidently
- CloudWatchInternetMonitor
- CloudWatchLogs
- CloudWatchNetworkMonitor
- CloudWatchObservabilityAccessManager
- CloudWatchRUM
- CodeArtifact
- CodeBuild
- CodeCatalyst
- CodeCommit
- CodeConnections
- CodeDeploy
- CodeGuruProfiler
- CodeGuruReviewer
- CodeGuruSecurity
- CodePipeline
- CodeStar
- CodeStarNotifications
- CodeStarconnections
- CognitoIdentity
- CognitoIdentityProvider
- CognitoSync
- Comprehend
- ComprehendMedical
- ComputeOptimizer
- ConfigService
- Connect
- ConnectCampaignService
- ConnectCases
- ConnectContactLens
- ConnectParticipant
- ConnectWisdomService
- ControlCatalog
- ControlTower
- CostExplorer
- CostOptimizationHub
- CostandUsageReportService
- CustomerProfiles
- DAX
- DLM
- DataExchange
- DataPipeline
- DataSync
- DataZone
- DatabaseMigrationService
- DeadlineCloud
- Detective
- DevOpsGuru
- DeviceFarm
- DirectConnect
- DirectoryService
- DocDB
- DocDBElastic
- DynamoDB
- DynamoDBStreams
- EBS
- EC2
- EC2InstanceConnect
- ECR
- ECRPublic
- ECS
- EFS
- EKS
- EKSAuth
- EMR
- EMRContainers
- EMRServerless
- ElastiCache
- ElasticBeanstalk
- ElasticInference
- ElasticLoadBalancing
- ElasticLoadBalancingv2
- ElasticTranscoder
- ElasticsearchService
- EntityResolution
- EventBridge
- EventBridgePipes
- EventBridgeScheduler
- Examples
- Examples
- FIS
- FMS
- FSx
- FinSpaceData
- Firehose
- ForecastQueryService
- ForecastService
- FraudDetector
- FreeTier
- GameLift
- Glacier
- GlobalAccelerator
- Glue
- GlueDataBrew
- Greengrass
- GreengrassV2
- GroundStation
- GuardDuty
- Health
- HealthImaging
- HealthLake
- IAM
- IAMRolesAnywhere
- IVS
- IdentityStore
- ImportExport
- Inspector
- Inspector2
- IoT
- IoT1ClickDevicesService
- IoT1ClickProjects
- IoTAnalytics
- IoTDataPlane
- IoTDeviceAdvisor
- IoTEvents
- IoTEventsData
- IoTFleetHub
- IoTFleetWise
- IoTJobsDataPlane
- IoTSecureTunneling
- IoTSiteWise
- IoTThingsGraph
- IoTTwinMaker
- IoTWireless
- KMS
- Kafka
- KafkaConnect
- KendraRanking
- Keyspaces
- Kinesis
- KinesisAnalytics
- KinesisAnalyticsV2
- KinesisVideo
- KinesisVideoArchivedMedia
- KinesisVideoMedia
- KinesisVideoSignalingChannels
- KinesisVideoWebRTCStorage
- LakeFormation
- Lambda
- LaunchWizard
- LexModelBuildingService
- LexModelsV2
- LexRuntimeService
- LexRuntimeV2
- LicenseManager
- LicenseManagerLinuxSubscriptions
- LicenseManagerUserSubscriptions
- Lightsail
- LocationService
- LookoutEquipment
- LookoutMetrics
- LookoutforVision
- MQ
- MTurk
- MWAA
- MachineLearning
- Macie2
- MailManager
- MainframeModernization
- MainframeModernizationApplicationTesting
- ManagedBlockchain
- ManagedBlockchainQuery
- ManagedGrafana
- MarketplaceCatalog
- MarketplaceCommerceAnalytics
- MarketplaceDeploymentService
- MarketplaceEntitlementService
- MarketplaceMetering
- MediaConnect
- MediaConvert
- MediaLive
- MediaPackage
- MediaPackageVod
- MediaStore
- MediaStoreData
- MediaTailor
- MemoryDB
- MigrationHub
- MigrationHubConfig
- MigrationHubOrchestrator
- MigrationHubRefactorSpaces
- MigrationHubStrategyRecommendations
- Neptune
- NeptuneData
- NeptuneGraph
- NetworkFirewall
- NetworkManager
- NimbleStudio
- Omics
- OpenSearchIngestion
- OpenSearchService
- OpenSearchServiceServerless
- OpsWorks
- OpsWorksCM
- Organizations
- Outposts
- PI
- Panorama
- PaymentCryptographyControlPlane
- PaymentCryptographyDataPlane
- PcaConnectorAd
- Personalize
- PersonalizeEvents
- PersonalizeRuntime
- Pinpoint
- PinpointEmail
- PinpointSMSVoice
- PinpointSMSVoiceV2
- Polly
- Pricing
- Private5G
- PrivateCAConnectorforSCEP
- PrometheusService
- Proton
- QApps
- QBusiness
- QConnect
- QLDB
- QLDBSession
- QuickSight
- RAM
- RDS
- RDSDataService
- RecycleBin
- Redshift
- RedshiftDataAPIService
- RedshiftServerless
- Rekognition
- ResilienceHub
- ResourceExplorer
- ResourceGroups
- ResourceGroupsTaggingAPI
- RoboMaker
- Route53
- Route53Domains
- Route53Profiles
- Route53RecoveryCluster
- Route53RecoveryControlConfig
- Route53RecoveryReadiness
- Route53Resolver
- S3
- S3Control
- S3Outposts
- SES
- SESV2
- SFN
- SMS
- SNS
- SQS
- SSM
- SSMContacts
- SSMIncidents
- SSO
- SSOAdmin
- SSOOIDC
- STS
- SWF
- SageMaker
- SageMakerFeatureStoreRuntime
- SageMakerMetrics
- SageMakerRuntime
- SageMakergeospatialcapabilities
- SagemakerEdgeManager
- SavingsPlans
- Schemas
- SecretsManager
- SecurityHub
- SecurityLake
- ServerlessApplicationRepository
- ServiceCatalog
- ServiceDiscovery
- ServiceQuotas
- Shield
- SimSpaceWeaver
- SimpleDB
- SnowDeviceManagement
- Snowball
- SsmSap
- StorageGateway
- SupplyChain
- Support
- SupportApp
- Synthetics
- SystemsManagerQuickSetup
- TaxSettings
- TelcoNetworkBuilder
- Textract
- TimestreamInfluxDB
- TimestreamQuery
- TimestreamWrite
- TranscribeService
- Transfer
- Translate
- TrustedAdvisorPublicAPI
- VPCLattice
- VerifiedPermissions
- VoiceID
- WAF
- WAFRegional
- WAFV2
- WellArchitected
- WorkDocs
- WorkLink
- WorkMail
- WorkMailMessageFlow
- WorkSpaces
- WorkSpacesThinWorkSpacesWeb
- XRay
- SAA-C03 Architecting for Requirements
- High Availability and Scalability
- Availability drill aws_saa_c03
- Resilient Architectures
- Resiliency drill aws_saa_c03
- High Performing Architectures
- Performance Efficiency drill aws_saa_c03
- Secure Architectures
- Security drill aws_saa_c03
- Cost Optimized Architectures
- Cost Optimization drill aws_saa_c03
SAA-C03 Core AWS Services
Amazon EC2 (Elastic Compute Cloud)
Amazon EC2? drill aws_saa_c03
Question
What is Amazon EC2?
Answer
A web service that provides resizable compute capacity in the cloud. It is designed to make web-scale computing easier for developers.
EC2 Instances? drill aws_saa_c03
Question
What are the different types of EC2 instances?
Answer
- General Purpose: Balance of compute, memory, and networking resources.
- Compute Optimized: High performance processors for compute-intensive tasks.
- Memory Optimized: Fast performance for workloads that process large datasets in memory.
- Accelerated Computing: Hardware accelerators, or co-processors, to perform functions more efficiently than is possible in software running on CPUs.
- Storage Optimized: High disk throughput and IOPS for storage-intensive tasks.
Amazon S3 (Simple Storage Service)
Amazon S3 drill aws_saa_c03
Question
What is Amazon S3?
Answer
Object storage service that offers industry-leading scalability, data availability, security, and performance.
Storage Classes drill aws_saa_c03
Question
What are the different S3 storage classes and their use cases?
Answer
- S3 Standard: General-purpose storage for frequently accessed data.
- S3 Intelligent-Tiering: Automatically optimizes costs by moving data between access tiers.
- S3 Standard-Infrequent Access (SIA): For less frequently accessed data.
- S3 One Zone-Infrequent Access (One Zone-IA): Lower-cost option for less frequently accessed data, but without the same durability as other classes.
- S3 Glacier Instant Retrieval: Archive storage for data that needs immediate access.
- S3 Glacier Flexible Retrieval: Archive storage for data that can tolerate a few hours retrieval time.
- S3 Glacier Deep Archive: The lowest-cost archive storage in the cloud for data that is rarely accessed.
Amazon VPC (Virtual Private Cloud)
VPC drill aws_saa_c03
Question
What is Amazon VPC?
Answer
Lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define.
VPC Components drill aws_saa_c03
Question
What are the key components of a VPC?
Answer
- Subnets: Each subnet must reside entirely within one Availability Zone and cannot span zones.
- Route tables: A route table contains a set of rules, called routes, that are used to determine where network traffic is directed.
- Internet gateway: An Internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between instances in your VPC and the internet.
- Security groups: Act as a virtual firewall for your instance to control incoming and outgoing traffic.
- Network access control lists (NACLs): Act as a firewall for controlling traffic in and out of one or more subnets.
Databases
Database Offerings? drill aws_saa_c03
Question
What are the main types of database services offered by AWS?
Answer
- Amazon RDS (Relational Database Service)
- Amazon DynamoDB (NoSQL database)
- Amazon Redshift (Data warehouse)
- Amazon ElastiCache (In-memory cache)
- Amazon DocumentDB (MongoDB-compatible document database)
- Amazon Neptune (Graph database)
IAM (Identity and Access Management)
AWS IAM? drill aws_saa_c03
Question
What is AWS IAM ?
Answer
Enables you to manage access to AWS services and resources securely. With IAM, you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.
IAM Components? drill aws_saa_c03
Question
What are the main components of AWS IAM?
Answer
- Users
- Groups
- Roles
- Policies
CloudTrail
AWS CloudTrail? drill aws_saa_c03
Question
What is AWS CloudTrail?
Answer
A service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure.
Route 53
Route 53? drill aws_saa_c03
Question
What is Amazon Route 53?
Answer
A highly available and scalable cloud Domain Name System (DNS) web service.
Route 53 Features? drill aws_saa_c03
Question
What are some key features of Route 53?
Answer
- Domain name registration
- DNS management
- Health checks
- Traffic routing
ACM
ACMPCA
APIGateway
ARCZonalShift
AccessAnalyzer
Identity and Access Management Access Analyzer helps you to set, verify, and refine your IAM policies by providing a suite of capabilities. Its features include findings for external and unused access, basic and custom policy checks for validating policies, and policy generation to generate fine-grained policies. To start using IAM Access Analyzer to identify external or unused access, you first need to create an analyzer.
https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/accessanalyzer.html
Account
Operations for Amazon Web Services Account Management
AgentsforBedrock
AgentsforBedrockRuntime
AgreementService
Amplify
AmplifyBackend
AmplifyUIBuilder
ApiGatewayManagementApi
ApiGatewayV2
Amazon API Gateway helps developers deliver robust, secure, and scalable mobile and web application back ends. API Gateway allows developers to securely connect mobile and web applications to APIs that run on Lambda, Amazon EC2, or other publicly addressable web services that are hosted outside of AWS.
AppConfig
AppConfigData
AppFabric
AppIntegrationsService
AppMesh
AppRegistry
AppRunner
AppStream
AppSync
Appflow
ApplicationAutoScaling
ApplicationCostProfiler
ApplicationDiscoveryService
ApplicationInsights
Artifact
Athena
AuditManager
AugmentedAIRuntime
AutoScaling
AutoScalingPlans
B2BI
Backup
BackupGateway
Batch
Bedrock
BedrockRuntime
BillingConductor
BillingandCostManagementDataExports
Braket
Budgets
Chatbot
Chime
ChimeSDKIdentity
ChimeSDKMediaPipelines
ChimeSDKMeetings
ChimeSDKMessaging
ChimeSDKVoice
CleanRoomsML
CleanRoomsService
Client Context Parameters
Cloud9
CloudControlApi
CloudDirectory
CloudFormation
CloudFront
CloudFrontKeyValueStore
CloudHSM
CloudHSMV2
CloudSearch
CloudSearchDomain
CloudTrail
CloudTrailDataService
CloudWatch
CloudWatchApplicationSignals
CloudWatchEvidently
CloudWatchInternetMonitor
CloudWatchLogs
CloudWatchNetworkMonitor
CloudWatchObservabilityAccessManager
CloudWatchRUM
CodeArtifact
CodeBuild
CodeCatalyst
CodeCommit
CodeConnections
CodeDeploy
CodeGuruProfiler
CodeGuruReviewer
CodeGuruSecurity
CodePipeline
CodeStar
CodeStarNotifications
CodeStarconnections
CognitoIdentity
CognitoIdentityProvider
CognitoSync
Comprehend
ComprehendMedical
ComputeOptimizer
ConfigService
Connect
ConnectCampaignService
ConnectCases
ConnectContactLens
ConnectParticipant
ConnectWisdomService
ControlCatalog
ControlTower
CostExplorer
CostOptimizationHub
CostandUsageReportService
CustomerProfiles
DAX
DLM
DataExchange
DataPipeline
DataSync
DataZone
DatabaseMigrationService
DeadlineCloud
Detective
DevOpsGuru
DeviceFarm
DirectConnect
DirectoryService
DocDB
DocDBElastic
DynamoDB
DynamoDBStreams
EBS
EC2
EC2InstanceConnect
ECR
ECRPublic
ECS
EFS
EKS
EKSAuth
EMR
EMRContainers
EMRServerless
ElastiCache
ElasticBeanstalk
ElasticInference
ElasticLoadBalancing
ElasticLoadBalancingv2
ElasticTranscoder
ElasticsearchService
EntityResolution
EventBridge
EventBridgePipes
EventBridgeScheduler
Examples
Examples
FIS
FMS
FSx
FinSpaceData
Firehose
ForecastQueryService
ForecastService
FraudDetector
FreeTier
GameLift
Glacier
GlobalAccelerator
Glue
GlueDataBrew
Greengrass
GreengrassV2
GroundStation
GuardDuty
Health
HealthImaging
HealthLake
IAM
IAMRolesAnywhere
IVS
IdentityStore
ImportExport
Inspector
Inspector2
IoT
IoT1ClickDevicesService
IoT1ClickProjects
IoTAnalytics
IoTDataPlane
IoTDeviceAdvisor
IoTEvents
IoTEventsData
IoTFleetHub
IoTFleetWise
IoTJobsDataPlane
IoTSecureTunneling
IoTSiteWise
IoTThingsGraph
IoTTwinMaker
IoTWireless
KMS
Kafka
KafkaConnect
KendraRanking
Keyspaces
Kinesis
KinesisAnalytics
KinesisAnalyticsV2
KinesisVideo
KinesisVideoArchivedMedia
KinesisVideoMedia
KinesisVideoSignalingChannels
KinesisVideoWebRTCStorage
LakeFormation
Lambda
LaunchWizard
LexModelBuildingService
LexModelsV2
LexRuntimeService
LexRuntimeV2
LicenseManager
LicenseManagerLinuxSubscriptions
LicenseManagerUserSubscriptions
Lightsail
LocationService
LookoutEquipment
LookoutMetrics
LookoutforVision
MQ
MTurk
MWAA
MachineLearning
Macie2
MailManager
MainframeModernization
MainframeModernizationApplicationTesting
ManagedBlockchain
ManagedBlockchainQuery
ManagedGrafana
MarketplaceCatalog
MarketplaceCommerceAnalytics
MarketplaceDeploymentService
MarketplaceEntitlementService
MarketplaceMetering
MediaConnect
MediaConvert
MediaLive
MediaPackage
MediaPackageVod
MediaStore
MediaStoreData
MediaTailor
MemoryDB
MigrationHub
MigrationHubConfig
MigrationHubOrchestrator
MigrationHubRefactorSpaces
MigrationHubStrategyRecommendations
Neptune
NeptuneData
NeptuneGraph
NetworkFirewall
NetworkManager
NimbleStudio
Omics
OpenSearchIngestion
OpenSearchService
OpenSearchServiceServerless
OpsWorks
OpsWorksCM
Organizations
Outposts
PI
Panorama
PaymentCryptographyControlPlane
PaymentCryptographyDataPlane
PcaConnectorAd
Personalize
PersonalizeEvents
PersonalizeRuntime
Pinpoint
PinpointEmail
PinpointSMSVoice
PinpointSMSVoiceV2
Polly
Pricing
Private5G
PrivateCAConnectorforSCEP
PrometheusService
Proton
QApps
QBusiness
QConnect
QLDB
QLDBSession
QuickSight
RAM
RDS
RDSDataService
RecycleBin
Redshift
RedshiftDataAPIService
RedshiftServerless
Rekognition
ResilienceHub
ResourceExplorer
ResourceGroups
ResourceGroupsTaggingAPI
RoboMaker
Route53
Route53Domains
Route53Profiles
Route53RecoveryCluster
Route53RecoveryControlConfig
Route53RecoveryReadiness
Route53Resolver
S3
S3Control
S3Outposts
SES
SESV2
SFN
SMS
SNS
SQS
SSM
SSMContacts
SSMIncidents
SSO
SSOAdmin
SSOOIDC
STS
SWF
SageMaker
SageMakerFeatureStoreRuntime
SageMakerMetrics
SageMakerRuntime
SageMakergeospatialcapabilities
SagemakerEdgeManager
SavingsPlans
Schemas
SecretsManager
SecurityHub
SecurityLake
ServerlessApplicationRepository
ServiceCatalog
ServiceDiscovery
ServiceQuotas
Shield
SimSpaceWeaver
SimpleDB
SnowDeviceManagement
Snowball
SsmSap
StorageGateway
SupplyChain
Support
SupportApp
Synthetics
SystemsManagerQuickSetup
TaxSettings
TelcoNetworkBuilder
Textract
TimestreamInfluxDB
TimestreamQuery
TimestreamWrite
TranscribeService
Transfer
Translate
TrustedAdvisorPublicAPI
VPCLattice
VerifiedPermissions
VoiceID
WAF
WAFRegional
WAFV2
WellArchitected
WorkDocs
WorkLink
WorkMail
WorkMailMessageFlow
WorkSpaces
WorkSpacesThinWorkSpacesWeb
XRay
SAA-C03 Architecting for Requirements
High Availability and Scalability
Availability drill aws_saa_c03
Question
What is the difference between high availability and scalability in AWS?
Answer
- High Availability: The ability of a system to operate continuously without failing for a designated period.
- Scalability: The ability of a system to handle a growing amount of work by adding resources to the system.
Resilient Architectures
Resiliency drill aws_saa_c03
What does it mean to design for resiliency in AWS?
Question
Answer
Building systems that can recover from failures and continue to function. This involves using multiple Availability Zones, implementing health checks, and automating recovery processes.
High Performing Architectures
Performance Efficiency drill aws_saa_c03
What are some strategies for designing high-performing architectures in AWS?
Question
Answer
- Choosing the right instance types
- Using caching services (like ElastiCache)
- Implementing load balancing (with ALBs or NLBs)
- Optimizing database performance
Secure Architectures
Security drill aws_saa_c03
How does AWS Shared Responsibility Model work?
Answer
- AWS is responsible for the security "of" the cloud (hardware, infrastructure, etc.)
- You are responsible for the security "in" the cloud (your data, applications, etc.)
Cost Optimized Architectures
Cost Optimization drill aws_saa_c03
What are some strategies for cost optimization in AWS?
Question
Answer
- Choosing the right pricing model (On-Demand, Reserved, Spot)
- Right-sizing resources
- Using managed services
- Monitoring usage and identifying underutilized resources