SAA-C03 Exam Preparation: Core AWS Services and Architecture Requirements

Table of Contents

SAA-C03 Core AWS Services

Amazon EC2 (Elastic Compute Cloud)

Amazon EC2?   drill aws_saa_c03

Question

What is Amazon EC2?

Answer

A web service that provides resizable compute capacity in the cloud. It is designed to make web-scale computing easier for developers.

EC2 Instances?   drill aws_saa_c03

Question

What are the different types of EC2 instances?

Answer
  • General Purpose: Balance of compute, memory, and networking resources.
  • Compute Optimized: High performance processors for compute-intensive tasks.
  • Memory Optimized: Fast performance for workloads that process large datasets in memory.
  • Accelerated Computing: Hardware accelerators, or co-processors, to perform functions more efficiently than is possible in software running on CPUs.
  • Storage Optimized: High disk throughput and IOPS for storage-intensive tasks.

Amazon S3 (Simple Storage Service)

Amazon S3   drill aws_saa_c03

Question

What is Amazon S3?

Answer

Object storage service that offers industry-leading scalability, data availability, security, and performance.

Storage Classes   drill aws_saa_c03

Question

What are the different S3 storage classes and their use cases?

Answer
  • S3 Standard: General-purpose storage for frequently accessed data.
  • S3 Intelligent-Tiering: Automatically optimizes costs by moving data between access tiers.
  • S3 Standard-Infrequent Access (SIA): For less frequently accessed data.
  • S3 One Zone-Infrequent Access (One Zone-IA): Lower-cost option for less frequently accessed data, but without the same durability as other classes.
  • S3 Glacier Instant Retrieval: Archive storage for data that needs immediate access.
  • S3 Glacier Flexible Retrieval: Archive storage for data that can tolerate a few hours retrieval time.
  • S3 Glacier Deep Archive: The lowest-cost archive storage in the cloud for data that is rarely accessed.

Amazon VPC (Virtual Private Cloud)

VPC   drill aws_saa_c03

Question

What is Amazon VPC?

Answer

Lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define.

VPC Components   drill aws_saa_c03

Question

What are the key components of a VPC?

Answer
  • Subnets: Each subnet must reside entirely within one Availability Zone and cannot span zones.
  • Route tables: A route table contains a set of rules, called routes, that are used to determine where network traffic is directed.
  • Internet gateway: An Internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between instances in your VPC and the internet.
  • Security groups: Act as a virtual firewall for your instance to control incoming and outgoing traffic.
  • Network access control lists (NACLs): Act as a firewall for controlling traffic in and out of one or more subnets.

Databases

Database Offerings?   drill aws_saa_c03

Question

What are the main types of database services offered by AWS?

Answer
  • Amazon RDS (Relational Database Service)
  • Amazon DynamoDB (NoSQL database)
  • Amazon Redshift (Data warehouse)
  • Amazon ElastiCache (In-memory cache)
  • Amazon DocumentDB (MongoDB-compatible document database)
  • Amazon Neptune (Graph database)

IAM (Identity and Access Management)

AWS IAM?   drill aws_saa_c03

Question

What is AWS IAM ?

Answer

Enables you to manage access to AWS services and resources securely. With IAM, you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.  

IAM Components?   drill aws_saa_c03

Question

What are the main components of AWS IAM?

Answer
  • Users
  • Groups
  • Roles
  • Policies

CloudTrail

AWS CloudTrail?   drill aws_saa_c03

Question

What is AWS CloudTrail?

Answer

A service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across   your AWS infrastructure.

Route 53

Route 53?   drill aws_saa_c03

Question

What is Amazon Route 53?

Answer

A highly available and scalable cloud Domain Name System (DNS) web service.

Route 53 Features?   drill aws_saa_c03

Question

What are some key features of Route 53?

Answer
  • Domain name registration
  • DNS management
  • Health checks
  • Traffic routing

ACM

ACMPCA

APIGateway

ARCZonalShift

AccessAnalyzer

Identity and Access Management Access Analyzer helps you to set, verify, and refine your IAM policies by providing a suite of capabilities. Its features include findings for external and unused access, basic and custom policy checks for validating policies, and policy generation to generate fine-grained policies. To start using IAM Access Analyzer to identify external or unused access, you first need to create an analyzer.

https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/accessanalyzer.html

Account

Operations for Amazon Web Services Account Management

AgentsforBedrock

AgentsforBedrockRuntime

AgreementService

Amplify

AmplifyBackend

AmplifyUIBuilder

ApiGatewayManagementApi

ApiGatewayV2

Amazon API Gateway helps developers deliver robust, secure, and scalable mobile and web application back ends. API Gateway allows developers to securely connect mobile and web applications to APIs that run on Lambda, Amazon EC2, or other publicly addressable web services that are hosted outside of AWS.

AppConfig

AppConfigData

AppFabric

AppIntegrationsService

AppMesh

AppRegistry

AppRunner

AppStream

AppSync

Appflow

ApplicationAutoScaling

ApplicationCostProfiler

ApplicationDiscoveryService

ApplicationInsights

Artifact

Athena

AuditManager

AugmentedAIRuntime

AutoScaling

AutoScalingPlans

B2BI

Backup

BackupGateway

Batch

Bedrock

BedrockRuntime

BillingConductor

BillingandCostManagementDataExports

Braket

Budgets

Chatbot

Chime

ChimeSDKIdentity

ChimeSDKMediaPipelines

ChimeSDKMeetings

ChimeSDKMessaging

ChimeSDKVoice

CleanRoomsML

CleanRoomsService

Client Context Parameters

Cloud9

CloudControlApi

CloudDirectory

CloudFormation

CloudFront

CloudFrontKeyValueStore

CloudHSM

CloudHSMV2

CloudSearch

CloudSearchDomain

CloudTrail

CloudTrailDataService

CloudWatch

CloudWatchApplicationSignals

CloudWatchEvidently

CloudWatchInternetMonitor

CloudWatchLogs

CloudWatchNetworkMonitor

CloudWatchObservabilityAccessManager

CloudWatchRUM

CodeArtifact

CodeBuild

CodeCatalyst

CodeCommit

CodeConnections

CodeDeploy

CodeGuruProfiler

CodeGuruReviewer

CodeGuruSecurity

CodePipeline

CodeStar

CodeStarNotifications

CodeStarconnections

CognitoIdentity

CognitoIdentityProvider

CognitoSync

Comprehend

ComprehendMedical

ComputeOptimizer

ConfigService

Connect

ConnectCampaignService

ConnectCases

ConnectContactLens

ConnectParticipant

ConnectWisdomService

ControlCatalog

ControlTower

CostExplorer

CostOptimizationHub

CostandUsageReportService

CustomerProfiles

DAX

DLM

DataExchange

DataPipeline

DataSync

DataZone

DatabaseMigrationService

DeadlineCloud

Detective

DevOpsGuru

DeviceFarm

DirectConnect

DirectoryService

DocDB

DocDBElastic

DynamoDB

DynamoDBStreams

EBS

EC2

EC2InstanceConnect

ECR

ECRPublic

ECS

EFS

EKS

EKSAuth

EMR

EMRContainers

EMRServerless

ElastiCache

ElasticBeanstalk

ElasticInference

ElasticLoadBalancing

ElasticLoadBalancingv2

ElasticTranscoder

ElasticsearchService

EntityResolution

EventBridge

EventBridgePipes

EventBridgeScheduler

Examples

Examples

FIS

FMS

FSx

FinSpaceData

Firehose

ForecastQueryService

ForecastService

FraudDetector

FreeTier

GameLift

Glacier

GlobalAccelerator

Glue

GlueDataBrew

Greengrass

GreengrassV2

GroundStation

GuardDuty

Health

HealthImaging

HealthLake

IAM

IAMRolesAnywhere

IVS

IdentityStore

ImportExport

Inspector

Inspector2

IoT

IoT1ClickDevicesService

IoT1ClickProjects

IoTAnalytics

IoTDataPlane

IoTDeviceAdvisor

IoTEvents

IoTEventsData

IoTFleetHub

IoTFleetWise

IoTJobsDataPlane

IoTSecureTunneling

IoTSiteWise

IoTThingsGraph

IoTTwinMaker

IoTWireless

KMS

Kafka

KafkaConnect

KendraRanking

Keyspaces

Kinesis

KinesisAnalytics

KinesisAnalyticsV2

KinesisVideo

KinesisVideoArchivedMedia

KinesisVideoMedia

KinesisVideoSignalingChannels

KinesisVideoWebRTCStorage

LakeFormation

Lambda

LaunchWizard

LexModelBuildingService

LexModelsV2

LexRuntimeService

LexRuntimeV2

LicenseManager

LicenseManagerLinuxSubscriptions

LicenseManagerUserSubscriptions

Lightsail

LocationService

LookoutEquipment

LookoutMetrics

LookoutforVision

MQ

MTurk

MWAA

MachineLearning

Macie2

MailManager

MainframeModernization

MainframeModernizationApplicationTesting

ManagedBlockchain

ManagedBlockchainQuery

ManagedGrafana

MarketplaceCatalog

MarketplaceCommerceAnalytics

MarketplaceDeploymentService

MarketplaceEntitlementService

MarketplaceMetering

MediaConnect

MediaConvert

MediaLive

MediaPackage

MediaPackageVod

MediaStore

MediaStoreData

MediaTailor

MemoryDB

MigrationHub

MigrationHubConfig

MigrationHubOrchestrator

MigrationHubRefactorSpaces

MigrationHubStrategyRecommendations

Neptune

NeptuneData

NeptuneGraph

NetworkFirewall

NetworkManager

NimbleStudio

Omics

OpenSearchIngestion

OpenSearchService

OpenSearchServiceServerless

OpsWorks

OpsWorksCM

Organizations

Outposts

PI

Panorama

PaymentCryptographyControlPlane

PaymentCryptographyDataPlane

PcaConnectorAd

Personalize

PersonalizeEvents

PersonalizeRuntime

Pinpoint

PinpointEmail

PinpointSMSVoice

PinpointSMSVoiceV2

Polly

Pricing

Private5G

PrivateCAConnectorforSCEP

PrometheusService

Proton

QApps

QBusiness

QConnect

QLDB

QLDBSession

QuickSight

RAM

RDS

RDSDataService

RecycleBin

Redshift

RedshiftDataAPIService

RedshiftServerless

Rekognition

ResilienceHub

ResourceExplorer

ResourceGroups

ResourceGroupsTaggingAPI

RoboMaker

Route53

Route53Domains

Route53Profiles

Route53RecoveryCluster

Route53RecoveryControlConfig

Route53RecoveryReadiness

Route53Resolver

S3

S3Control

S3Outposts

SES

SESV2

SFN

SMS

SNS

SQS

SSM

SSMContacts

SSMIncidents

SSO

SSOAdmin

SSOOIDC

STS

SWF

SageMaker

SageMakerFeatureStoreRuntime

SageMakerMetrics

SageMakerRuntime

SageMakergeospatialcapabilities

SagemakerEdgeManager

SavingsPlans

Schemas

SecretsManager

SecurityHub

SecurityLake

ServerlessApplicationRepository

ServiceCatalog

ServiceDiscovery

ServiceQuotas

Shield

SimSpaceWeaver

SimpleDB

SnowDeviceManagement

Snowball

SsmSap

StorageGateway

SupplyChain

Support

SupportApp

Synthetics

SystemsManagerQuickSetup

TaxSettings

TelcoNetworkBuilder

Textract

TimestreamInfluxDB

TimestreamQuery

TimestreamWrite

TranscribeService

Transfer

Translate

TrustedAdvisorPublicAPI

VPCLattice

VerifiedPermissions

VoiceID

WAF

WAFRegional

WAFV2

WellArchitected

WorkDocs

WorkLink

WorkMail

WorkMailMessageFlow

WorkSpaces

WorkSpacesThinWorkSpacesWeb

XRay

SAA-C03 Architecting for Requirements

High Availability and Scalability

Availability   drill aws_saa_c03

Question

What is the difference between high availability and scalability in AWS?

Answer

  • High Availability: The ability of a system to operate continuously without failing for a designated period.
  • Scalability: The ability of a system to handle a growing amount of work by adding resources to the system.

Resilient Architectures

Resiliency   drill aws_saa_c03

What does it mean to design for resiliency in AWS?

Question

Answer

Building systems that can recover from failures and continue to function. This involves using multiple Availability Zones, implementing health checks, and automating recovery processes.

High Performing Architectures

Performance Efficiency   drill aws_saa_c03

What are some strategies for designing high-performing architectures in AWS?

Question

Answer

  • Choosing the right instance types
  • Using caching services (like ElastiCache)
  • Implementing load balancing (with ALBs or NLBs)
  • Optimizing database performance

Secure Architectures

Security   drill aws_saa_c03

How does AWS Shared Responsibility Model work?

Answer

  • AWS is responsible for the security "of" the cloud (hardware, infrastructure, etc.)
  • You are responsible for the security "in" the cloud (your data, applications, etc.)

Cost Optimized Architectures

Cost Optimization   drill aws_saa_c03

What are some strategies for cost optimization in AWS?

Question

Answer

  • Choosing the right pricing model (On-Demand, Reserved, Spot)
  • Right-sizing resources
  • Using managed services
  • Monitoring usage and identifying underutilized resources

Author: Jason Walsh

j@wal.sh

Last Updated: 2024-08-14 13:07:23