AWS CloudOps Engineer - Associate

Condensed notes on EC2: launch, resize, placement, SSH/Instance Connect, CloudWatch and agent, status checks, Hibernate, Instance Scheduler, AMI (create, No-Reboot, cross-account), EC2 Image Builder, AMI in production.

Condensed notes on AWS Systems Manager: agent, Fleet Manager, DHMC, documents, Run Command, Session Manager, Automation, Parameter Store, Inventory, State Manager, Distributor, Patch Manager, Maintenance Windows, OpsCenter (OpsItems, runbooks).

Accessible overview of vertical vs horizontal scaling and high availability, with a call-center analogy and AWS examples (EC2, RDS Multi-AZ, Auto Scaling).

Overview of AWS load balancers: role, benefits, health checks, four types (CLB, ALB, NLB, GWLB), security groups, sticky sessions, and TLS.

Layer 7 HTTP load balancer: target groups, routing rules (path, host, query string, headers), X-Forwarded-* headers, health checks, metrics, and weighted target groups.

Step-by-step: launch EC2 instances, create an ALB with a target group, verify load balancing and health checks (stop/start instance). Includes NLB hands-on.

A practical summary of AWS Lambda core concepts, pricing model, and common integrations like EventBridge and S3.

A practical exam-focused summary of EBS volumes, snapshots, EFS file systems, and when to choose each for AWS workloads.

Section 10 S3 notes through advanced topics: MFA delete, access logs, Object Lock and Glacier Vault Lock, VPC endpoints, Access Analyzer, plus replication, lifecycle, events, performance, batch, inventory, and Athena.

Exam-oriented notes on CloudFront as a CDN, origins (S3 OAC, VPC, custom HTTP), caching and invalidation, Origin Shield, geo restrictions, logging and reports, ALB sticky sessions, and Global Accelerator vs CloudFront.

Managed SQL and caching for CloudOps: RDS/Aurora (including Serverless and Global Database), RDS Proxy, and ElastiCache Redis/Memcached scaling, patterns, and metrics.

CloudOps notes on CloudWatch, EventBridge (CloudTrail API patterns, Pipes, DLQ), Service Quotas, CloudTrail (digest integrity, org trails, EventBridge latency), and AWS Config (rules, aggregators, SSM remediation, vs CloudWatch and CloudTrail).

CloudOps notes on AWS Health (service vs account vs org views, EventBridge automation), AWS Organizations (OUs, consolidated billing, SCPs, RI sharing, PrincipalOrgID), and Control Tower landing zones and guardrails.

CloudOps notes on AWS Service Catalog (products, portfolios, sharing, TagOptions), CloudWatch billing metrics in us-east-1, Cost Explorer, Budgets with actions, cost allocation tags, CUR, Compute Optimizer, and Billing Conductor.

CloudOps exam notes on AWS DataSync (agents, NFS/SMB/HDFS, S3/EFS/FSx targets, schedules, metadata, Snowcone) and AWS Backup (backup plans, cross-region/account, vault lock WORM, console workflow).

CloudOps exam notes on WAF, Shield, Firewall Manager, Inspector, logging with Athena, GuardDuty, Macie, Trusted Advisor, Security Hub, Audit Manager, KMS (rotation, MRK, deletion), ACM, and Secrets Manager vs Parameter Store.

CloudOps exam notes on IAM permission boundaries vs identity policies and SCPs, Credentials Report and Access Advisor, IAM Access Analyzer, STS (AssumeRole, SAML, web identity, MFA), enterprise vs app federation (SAML, custom broker, Cognito), and the IAM policy simulator.

CloudOps exam notes on DNS resolution and terminology, Route 53 as authoritative DNS and registrar, A/AAAA/CNAME/NS, email records (MX, TXT/SPF/DKIM/DMARC), TTL tradeoffs, and Route 53 alias records for ALB and zone apex.

CloudOps exam notes on Route 53 routing policies (simple, weighted, latency, failover, geolocation, geoproximity, multi-value, IP-based), health checks and calculated checks, CloudWatch for private targets, and Traffic Flow policies.

CloudOps exam notes on separating registrar from DNS, delegating NS to Route 53, S3 static website aliases, hybrid DNS with Resolver endpoints, cross-account private hosted zones, query logging, Resolver DNS Firewall, ARC, Route 53 Profiles, and cost cleanup.