- Broschiertes Buch
- Merkliste
- Auf die Merkliste
- Bewerten Bewerten
- Teilen
- Produkt teilen
- Produkterinnerung
- Produkterinnerung
Master the intricacies of Amazon Web Services and efficiently prepare for the SAA-C02 Exam with this comprehensive study guideAWS Certified Solutions Study Guide: Associate (SAA-C02) Exam, Third Edition comprehensively and efficiently prepares you for the SAA-C02 Exam. The study guide contains robust and effective study tools that will help you succeed on the exam. The guide grants you access to the regularly updated Sybex online learning environment and test bank, which contains hundreds of test questions, bonus practice exams, electronic flashcards, and a glossary of key terms.In this study…mehr
Master the intricacies of Amazon Web Services and efficiently prepare for the SAA-C02 Exam with this comprehensive study guideAWS Certified Solutions Study Guide: Associate (SAA-C02) Exam, Third Edition comprehensively and efficiently prepares you for the SAA-C02 Exam. The study guide contains robust and effective study tools that will help you succeed on the exam. The guide grants you access to the regularly updated Sybex online learning environment and test bank, which contains hundreds of test questions, bonus practice exams, electronic flashcards, and a glossary of key terms.In this study guide, accomplished and experienced authors Ben Piper and David Clinton show you how to:_ Design resilient architectures_ Create high-performing architectures_ Craft secure applications and architectures_ Design cost-optimized architecturesPerfect for anyone who hopes to begin a new career as an Amazon Web Services cloud professional, the study guide also belongs on the bookshelf of any existing AWS professional who wants to brush up on the fundamentals of their profession.
Produktdetails
- Produktdetails
- Verlag: Sybex / Wiley & Sons
- Artikelnr. des Verlages: 1W119713080
- 3. Aufl.
- Seitenzahl: 464
- Erscheinungstermin: 21. Februar 2021
- Englisch
- Abmessung: 22mm x 193mm x 236mm
- Gewicht: 762g
- ISBN-13: 9781119713081
- Artikelnr.: 59510249
- Verlag: Sybex / Wiley & Sons
- Artikelnr. des Verlages: 1W119713080
- 3. Aufl.
- Seitenzahl: 464
- Erscheinungstermin: 21. Februar 2021
- Englisch
- Abmessung: 22mm x 193mm x 236mm
- Gewicht: 762g
- ISBN-13: 9781119713081
- Artikelnr.: 59510249
BEN PIPER is an IT consultant who has created more than 30 educational courses covering Amazon Web Services, networking, and automation. Learn more about Ben from his website at www.benpiper.com.DAVID CLINTON is a system administrator, teacher, and writer. He has created training material for subjects including Linux systems, cloud computing (AWS in particular), and container technologies like Docker. David has written books on AWS, Linux administration, and server virtualization. Many of his video training courses can be found on Pluralsight.com.
Introduction xxiAssessment Test xxviiPart I The Core AWS Services 1Chapter 1 Introduction to Cloud Computing and AWS 3Cloud Computing and Virtualization 4Cloud Computing Architecture 4Cloud Computing Optimization 5The AWS Cloud 6AWS Platform Architecture 10AWS Reliability and Compliance 12The AWS Shared Responsibility Model 12The AWS Service Level Agreement 13Working with AWS 13The AWS CLI 14AWS SDKs 14Technical Support and Online Resources 14Support Plans 14Other Support Resources 15Summary 15Exam Essentials 16Review Questions 17Chapter 2 Amazon Elastic Compute Cloud and Amazon Elastic Block Store 21Introduction 22EC2 Instances 22Provisioning Your Instance 23Configuring Instance Behavior 28Placement Groups 28Instance Pricing 29Instance Lifecycle 30Resource Tags 30Service Limits 31EC2 Storage Volumes 32Elastic Block Store Volumes 32Instance Store Volumes 34Accessing Your EC2 Instance 35Securing Your EC2 Instance 36Security Groups 36IAM Roles 37NAT Devices 37Key Pairs 38EC2 Auto Scaling 38Launch Configurations 39Launch Templates 39Auto Scaling Groups 40Auto Scaling Options 42AWS Systems Manager 46Actions 47Insights 49AWS CLI Example 51Summary 52Exam Essentials 53Review Questions 54Chapter 3 AWS Storage 59Introduction 60S3 Service Architecture 61Prefixes and Delimiters 61Working with Large Objects 61Encryption 62Logging 63S3 Durability and Availability 64Durability 64Availability 65Eventually Consistent Data 65S3 Object Lifecycle 66Versioning 66Lifecycle Management 66Accessing S3 Objects 67Access Control 67Presigned URLs 69Static Website Hosting 69Amazon S3 Glacier 71Storage Pricing 72Other Storage-Related Services 73Amazon Elastic File System 73Amazon FSx 73AWS Storage Gateway 73AWS Snowball 74AWS DataSync 74AWS CLI Example 75Summary 76Exam Essentials 77Review Questions 78Chapter 4 Amazon Virtual Private Cloud 83Introduction 84VPC CIDR Blocks 84Secondary CIDR Blocks 85IPv6 CIDR Blocks 85Subnets 87Subnet CIDR Blocks 87Availability Zones 88IPv6 CIDR Blocks 91Elastic Network Interfaces 91Primary and Secondary Private IP Addresses 91Attaching Elastic Network Interfaces 91Enhanced Networking 93Internet Gateways 93Route Tables 94Routes 94The Default Route 95Security Groups 98Inbound Rules 98Outbound Rules 99Sources and Destinations 99Stateful Firewall 99Default Security Group 100Network Access Control Lists 101Inbound Rules 102Outbound Rules 105Using Network Access Control Lists and Security Groups Together 106Public IP Addresses 106Elastic IP Addresses 107AWS Global Accelerator 109Network Address Translation 109Network Address Translation Devices 110Configuring Route Tables to Use NAT Devices 112NAT Gateway 113NAT Instance 113VPC Peering 114Hybrid Cloud Networking 115Virtual Private Networks 115AWS Transit Gateway 115AWS Direct Connect 123High-Performance Computing 125Elastic Fabric Adapter 125AWS ParallelCluster 126Summary 126Exam Essentials 127Review Questions 129Chapter 5 Database Services 133Introduction 134Relational Databases 134Columns and Attributes 135Using Multiple Tables 135Structured Query Language 137Online Transaction Processing vs. Online Analytic Processing 137Amazon Relational Database Service 138Database Engines 138Licensing Considerations 139Database Option Groups 140Database Instance Classes 140Storage 141Read Replicas 145High Availability (Multi-AZ) 146Single-Master 147Multi-Master 147Backup and Recovery 148Automated Snapshots 148Maintenance Items 149Amazon Redshift 149Compute Nodes 149Data Distribution Styles 150Redshift Spectrum 150AWS Database Migration Service 150Nonrelational (NoSQL) Databases 151Storing Data 151Querying Data 152Types of Nonrelational Databases 152DynamoDB 153Partition and Hash Keys 153Attributes and Items 154Throughput Capacity 155Reading Data 157Global Tables 158Backups 158Summary 158Exam Essentials 159Review Questions 161Chapter 6 Authentication and Authorization--AWS Identity and Access Management 165Introduction 166IAM Identities 166IAM Policies 167User and Root Accounts 168Access Keys 170Groups 172Roles 173Authentication Tools 173Amazon Cognito 174AWS Managed Microsoft AD 174AWS Single Sign-On 174AWS Key Management Service 175AWS Secrets Manager 175AWS CloudHSM 175AWS CLI Example 176Summary 177Exam Essentials 177Review Questions 179Chapter 7 CloudTrail, CloudWatch, and AWS Config 183Introduction 184CloudTrail 185Management Events 185Data Events 186Event History 186Trails 186Log File Integrity Validation 189CloudWatch 189CloudWatch Metrics 190Graphing Metrics 192Metric Math 194CloudWatch Logs 195CloudWatch Alarms 198Amazon EventBridge 201AWS Config 202The Configuration Recorder 203Configuration Items 203Configuration History 203Configuration Snapshots 203Monitoring Changes 204Summary 206Exam Essentials 206Review Questions 207Chapter 8 The Domain Name System and Network Routing: Amazon Route 53 and Amazon CloudFront 211Introduction 212The Domain Name System 212Namespaces 212Name Servers 213Domains and Domain Names 213Domain Registration 214Domain Layers 214Fully Qualified Domain Names 214Zones and Zone Files 215Record Types 215Alias Records 216Amazon Route 53 216Domain Registration 217DNS Management 217Availability Monitoring 219Routing Policies 220Traffic Flow 222Route 53 Resolver 223Amazon CloudFront 223AWS CLI Example 225Summary 226Exam Essentials 226Review Questions 228Chapter 9 Simple Queue Service and Kinesis 233Introduction 234Simple Queue Service 234Queues 234Queue Types 235Polling 236Dead-Letter Queues 237Kinesis 237Kinesis Video Streams 237Kinesis Data Streams 238Kinesis Data Firehose 239Kinesis Data Firehose vs. Kinesis Data Streams 239Summary 240Exam Essentials 240Review Questions 241Part II The Well-Architected Framework 245Chapter 10 The Reliability Pillar 247Introduction 248Calculating Availability 248Availability Differences in Traditional vs. Cloud-Native Applications 249Know Your Limits 252Increasing Availability 252EC2 Auto Scaling 253Launch Configurations 253Launch Templates 254Auto Scaling Groups 255Auto Scaling Options 256Data Backup and Recovery 261S3 261Elastic File System 261Elastic Block Storage 261Database Resiliency 262Creating a Resilient Network 263VPC Design Considerations 263External Connectivity 263Designing for Availability 264Designing for 99 Percent Availability 264Designing for 99.9 Percent Availability 265Designing for 99.99 Percent Availability 266Summary 267Exam Essentials 268Review Questions 269Chapter 11 The Performance Efficiency Pillar 273Introduction 274Optimizing Performance for the Core AWS Services 274Compute 275Storage 279Database 282Network Optimization and Load Balancing 284Infrastructure Automation 286CloudFormation 286Third-Party Automation Solutions 288Reviewing and Optimizing Infrastructure Configurations 289Load Testing 289Visualization 290Optimizing Data Operations 291Caching 291Partitioning/Sharding 293Compression 294Summary 294Exam Essentials 295Review Questions 297Chapter 12 The Security Pillar 301Introduction 302Identity and Access Management 302Protecting AWS Credentials 303Fine-Grained Authorization 303Permissions Boundaries 305Roles 306Enforcing Service-Level Protection 313Detective Controls 313CloudTrail 313CloudWatch Logs 314Searching Logs with Athena 315Auditing Resource Configurations with AWS Config 317Amazon GuardDuty 318Amazon Inspector 321Amazon Detective 322Security Hub 323Protecting Network Boundaries 323Network Access Control Lists and Security Groups 323AWS Web Application Firewall 323AWS Shield 324Data Encryption 324Data at Rest 325Data in Transit 326Macie 327Summary 327Exam Essentials 328Review Questions 329Chapter 13 The Cost Optimization Pillar 335Introduction 336Planning, Tracking, and Controlling Costs 336AWS Budgets 337Monitoring Tools 338AWS Organizations 339AWS Trusted Advisor 340Online Calculator Tools 340Cost-Optimizing Compute 342Maximizing Server Density 343EC2 Reserved Instances 343EC2 Spot Instances 344Auto Scaling 347Elastic Block Store Lifecycle Manager 347Summary 347Exam Essentials 348Review Questions 349Chapter 14 The Operational Excellence Pillar 353Introduction 354CloudFormation 354Creating Stacks 355Deleting Stacks 356Using Multiple Stacks 356Stack Updates 359Preventing Updates to Specific Resources 360Overriding Stack Policies 361CodeCommit 361Creating a Repository 362Repository Security 362Interacting with a Repository Using Git 363CodeDeploy 365The CodeDeploy Agent 366Deployments 366Deployment Groups 366Deployment Types 366Deployment Configurations 367Lifecycle Events 368The Application Specification File 369Triggers and Alarms 370Rollbacks 370CodePipeline 371Continuous Integration 371Continuous Delivery 371Creating the Pipeline 372Artifacts 373AWS Systems Manager 374Actions 374Insights 377AWS Landing Zone 378Summary 379Exam Essentials 379Review Questions 381Appendix Answers to Review Questions 385Chapter 1: Introduction to Cloud Computing and AWS 386Chapter 2: Amazon Elastic Compute Cloud and Amazon Elastic Block Store 387Chapter 3: AWS Storage 389Chapter 4: Amazon Virtual Private Cloud 391Chapter 5: Database Services 393Chapter 6: Authentication and Authorization--AWS Identity and Access Management 395Chapter 7: CloudTrail, CloudWatch, and AWS Config 397Chapter 8: The Domain Name System and Network Routing: Amazon Route 53 and Amazon CloudFront 399Chapter 9: Simple Queue Service and Kinesis 401Chapter 10: The Reliability Pillar 403Chapter 11: The Performance Efficiency Pillar 405Chapter 12: The Security Pillar 407Chapter 13: The Cost Optimization Pillar 409Chapter 14: The Operational Excellence Pillar 411Index 415
Introduction xxiAssessment Test xxviiPart I The Core AWS Services 1Chapter 1 Introduction to Cloud Computing and AWS 3Cloud Computing and Virtualization 4Cloud Computing Architecture 4Cloud Computing Optimization 5The AWS Cloud 6AWS Platform Architecture 10AWS Reliability and Compliance 12The AWS Shared Responsibility Model 12The AWS Service Level Agreement 13Working with AWS 13The AWS CLI 14AWS SDKs 14Technical Support and Online Resources 14Support Plans 14Other Support Resources 15Summary 15Exam Essentials 16Review Questions 17Chapter 2 Amazon Elastic Compute Cloud and Amazon Elastic Block Store 21Introduction 22EC2 Instances 22Provisioning Your Instance 23Configuring Instance Behavior 28Placement Groups 28Instance Pricing 29Instance Lifecycle 30Resource Tags 30Service Limits 31EC2 Storage Volumes 32Elastic Block Store Volumes 32Instance Store Volumes 34Accessing Your EC2 Instance 35Securing Your EC2 Instance 36Security Groups 36IAM Roles 37NAT Devices 37Key Pairs 38EC2 Auto Scaling 38Launch Configurations 39Launch Templates 39Auto Scaling Groups 40Auto Scaling Options 42AWS Systems Manager 46Actions 47Insights 49AWS CLI Example 51Summary 52Exam Essentials 53Review Questions 54Chapter 3 AWS Storage 59Introduction 60S3 Service Architecture 61Prefixes and Delimiters 61Working with Large Objects 61Encryption 62Logging 63S3 Durability and Availability 64Durability 64Availability 65Eventually Consistent Data 65S3 Object Lifecycle 66Versioning 66Lifecycle Management 66Accessing S3 Objects 67Access Control 67Presigned URLs 69Static Website Hosting 69Amazon S3 Glacier 71Storage Pricing 72Other Storage-Related Services 73Amazon Elastic File System 73Amazon FSx 73AWS Storage Gateway 73AWS Snowball 74AWS DataSync 74AWS CLI Example 75Summary 76Exam Essentials 77Review Questions 78Chapter 4 Amazon Virtual Private Cloud 83Introduction 84VPC CIDR Blocks 84Secondary CIDR Blocks 85IPv6 CIDR Blocks 85Subnets 87Subnet CIDR Blocks 87Availability Zones 88IPv6 CIDR Blocks 91Elastic Network Interfaces 91Primary and Secondary Private IP Addresses 91Attaching Elastic Network Interfaces 91Enhanced Networking 93Internet Gateways 93Route Tables 94Routes 94The Default Route 95Security Groups 98Inbound Rules 98Outbound Rules 99Sources and Destinations 99Stateful Firewall 99Default Security Group 100Network Access Control Lists 101Inbound Rules 102Outbound Rules 105Using Network Access Control Lists and Security Groups Together 106Public IP Addresses 106Elastic IP Addresses 107AWS Global Accelerator 109Network Address Translation 109Network Address Translation Devices 110Configuring Route Tables to Use NAT Devices 112NAT Gateway 113NAT Instance 113VPC Peering 114Hybrid Cloud Networking 115Virtual Private Networks 115AWS Transit Gateway 115AWS Direct Connect 123High-Performance Computing 125Elastic Fabric Adapter 125AWS ParallelCluster 126Summary 126Exam Essentials 127Review Questions 129Chapter 5 Database Services 133Introduction 134Relational Databases 134Columns and Attributes 135Using Multiple Tables 135Structured Query Language 137Online Transaction Processing vs. Online Analytic Processing 137Amazon Relational Database Service 138Database Engines 138Licensing Considerations 139Database Option Groups 140Database Instance Classes 140Storage 141Read Replicas 145High Availability (Multi-AZ) 146Single-Master 147Multi-Master 147Backup and Recovery 148Automated Snapshots 148Maintenance Items 149Amazon Redshift 149Compute Nodes 149Data Distribution Styles 150Redshift Spectrum 150AWS Database Migration Service 150Nonrelational (NoSQL) Databases 151Storing Data 151Querying Data 152Types of Nonrelational Databases 152DynamoDB 153Partition and Hash Keys 153Attributes and Items 154Throughput Capacity 155Reading Data 157Global Tables 158Backups 158Summary 158Exam Essentials 159Review Questions 161Chapter 6 Authentication and Authorization--AWS Identity and Access Management 165Introduction 166IAM Identities 166IAM Policies 167User and Root Accounts 168Access Keys 170Groups 172Roles 173Authentication Tools 173Amazon Cognito 174AWS Managed Microsoft AD 174AWS Single Sign-On 174AWS Key Management Service 175AWS Secrets Manager 175AWS CloudHSM 175AWS CLI Example 176Summary 177Exam Essentials 177Review Questions 179Chapter 7 CloudTrail, CloudWatch, and AWS Config 183Introduction 184CloudTrail 185Management Events 185Data Events 186Event History 186Trails 186Log File Integrity Validation 189CloudWatch 189CloudWatch Metrics 190Graphing Metrics 192Metric Math 194CloudWatch Logs 195CloudWatch Alarms 198Amazon EventBridge 201AWS Config 202The Configuration Recorder 203Configuration Items 203Configuration History 203Configuration Snapshots 203Monitoring Changes 204Summary 206Exam Essentials 206Review Questions 207Chapter 8 The Domain Name System and Network Routing: Amazon Route 53 and Amazon CloudFront 211Introduction 212The Domain Name System 212Namespaces 212Name Servers 213Domains and Domain Names 213Domain Registration 214Domain Layers 214Fully Qualified Domain Names 214Zones and Zone Files 215Record Types 215Alias Records 216Amazon Route 53 216Domain Registration 217DNS Management 217Availability Monitoring 219Routing Policies 220Traffic Flow 222Route 53 Resolver 223Amazon CloudFront 223AWS CLI Example 225Summary 226Exam Essentials 226Review Questions 228Chapter 9 Simple Queue Service and Kinesis 233Introduction 234Simple Queue Service 234Queues 234Queue Types 235Polling 236Dead-Letter Queues 237Kinesis 237Kinesis Video Streams 237Kinesis Data Streams 238Kinesis Data Firehose 239Kinesis Data Firehose vs. Kinesis Data Streams 239Summary 240Exam Essentials 240Review Questions 241Part II The Well-Architected Framework 245Chapter 10 The Reliability Pillar 247Introduction 248Calculating Availability 248Availability Differences in Traditional vs. Cloud-Native Applications 249Know Your Limits 252Increasing Availability 252EC2 Auto Scaling 253Launch Configurations 253Launch Templates 254Auto Scaling Groups 255Auto Scaling Options 256Data Backup and Recovery 261S3 261Elastic File System 261Elastic Block Storage 261Database Resiliency 262Creating a Resilient Network 263VPC Design Considerations 263External Connectivity 263Designing for Availability 264Designing for 99 Percent Availability 264Designing for 99.9 Percent Availability 265Designing for 99.99 Percent Availability 266Summary 267Exam Essentials 268Review Questions 269Chapter 11 The Performance Efficiency Pillar 273Introduction 274Optimizing Performance for the Core AWS Services 274Compute 275Storage 279Database 282Network Optimization and Load Balancing 284Infrastructure Automation 286CloudFormation 286Third-Party Automation Solutions 288Reviewing and Optimizing Infrastructure Configurations 289Load Testing 289Visualization 290Optimizing Data Operations 291Caching 291Partitioning/Sharding 293Compression 294Summary 294Exam Essentials 295Review Questions 297Chapter 12 The Security Pillar 301Introduction 302Identity and Access Management 302Protecting AWS Credentials 303Fine-Grained Authorization 303Permissions Boundaries 305Roles 306Enforcing Service-Level Protection 313Detective Controls 313CloudTrail 313CloudWatch Logs 314Searching Logs with Athena 315Auditing Resource Configurations with AWS Config 317Amazon GuardDuty 318Amazon Inspector 321Amazon Detective 322Security Hub 323Protecting Network Boundaries 323Network Access Control Lists and Security Groups 323AWS Web Application Firewall 323AWS Shield 324Data Encryption 324Data at Rest 325Data in Transit 326Macie 327Summary 327Exam Essentials 328Review Questions 329Chapter 13 The Cost Optimization Pillar 335Introduction 336Planning, Tracking, and Controlling Costs 336AWS Budgets 337Monitoring Tools 338AWS Organizations 339AWS Trusted Advisor 340Online Calculator Tools 340Cost-Optimizing Compute 342Maximizing Server Density 343EC2 Reserved Instances 343EC2 Spot Instances 344Auto Scaling 347Elastic Block Store Lifecycle Manager 347Summary 347Exam Essentials 348Review Questions 349Chapter 14 The Operational Excellence Pillar 353Introduction 354CloudFormation 354Creating Stacks 355Deleting Stacks 356Using Multiple Stacks 356Stack Updates 359Preventing Updates to Specific Resources 360Overriding Stack Policies 361CodeCommit 361Creating a Repository 362Repository Security 362Interacting with a Repository Using Git 363CodeDeploy 365The CodeDeploy Agent 366Deployments 366Deployment Groups 366Deployment Types 366Deployment Configurations 367Lifecycle Events 368The Application Specification File 369Triggers and Alarms 370Rollbacks 370CodePipeline 371Continuous Integration 371Continuous Delivery 371Creating the Pipeline 372Artifacts 373AWS Systems Manager 374Actions 374Insights 377AWS Landing Zone 378Summary 379Exam Essentials 379Review Questions 381Appendix Answers to Review Questions 385Chapter 1: Introduction to Cloud Computing and AWS 386Chapter 2: Amazon Elastic Compute Cloud and Amazon Elastic Block Store 387Chapter 3: AWS Storage 389Chapter 4: Amazon Virtual Private Cloud 391Chapter 5: Database Services 393Chapter 6: Authentication and Authorization--AWS Identity and Access Management 395Chapter 7: CloudTrail, CloudWatch, and AWS Config 397Chapter 8: The Domain Name System and Network Routing: Amazon Route 53 and Amazon CloudFront 399Chapter 9: Simple Queue Service and Kinesis 401Chapter 10: The Reliability Pillar 403Chapter 11: The Performance Efficiency Pillar 405Chapter 12: The Security Pillar 407Chapter 13: The Cost Optimization Pillar 409Chapter 14: The Operational Excellence Pillar 411Index 415