Instructor: So we are almost done in this course
and with our learning journey
and so I just want to take some time
to have a look at the exam curriculum
to make sure that we are really up to date on it.
So let's have a look at it right now.
So let's have a look at the SOA-C02 exam guide, okay.
And this is going to test your one-year of handling
experience.
But hopefully if you follow along with this course,
you should be good to go.
And you're going to have be checked on all of these things.
Now, the cool thing about this documents,
I'll let you read it, is that at the bottom,
there are some more concrete bits of information.
So let's have a look. So the exam consent, first of all,
is very important.
So you'll have multiple choice questions
where one or correct.
And whether there's one correct response
and three incorrect responses,
which are called the distractors,
there is multiple response where you have two correct
responses out of five options.
And then you have exam labs that describe exam labs later on
in the next lecture.
But the idea is that this is a scenario you have to actually
practice on the alias management console or the CLI.
And so you have to be very confident with using the console.
This is why I recommend you to follow along in this course
with me. Okay.
So there is no penalty for guessing,
so you should answer every single question.
And then if we have a look at the exam itself,
so there are six different domains. So monitoring, logging,
and remediation, reliability, and business continuity,
deployment provisioning, and automation,
security and compliance, networking,
and content delivery and cost and performance optimization.
Okay. Now,
one cool thing about this new curriculum is that each domain
is actually quite documented well,
so we can have a look at whether or not the course did cover
everything. So in terms of log analysis,
we know everything we've CloudWatch logs and metric filters
and CloudWatch logs insights that we've seen to do queries
on your logs and CloudTrail logs.
So we are familiar with those.
We know how to collect metrics and logs using the CloudWatch
unified agents.
We've seen CloudWatch alarms and metrics filter.
We know CloudWatch dashboards,
and they can be multi accounts and multi region.
And we know notifications such as SNS service quotas,
which allow you to define an alarm on any kind of quotes on
your accounts. We know CloudWatch alarms and health events,
which has the personal health dashboards to get information
about the upcoming maintenance or the issues that may affect
your infrastructure.
Next,
you need to be able to remediate issues based on monitoring
and metrics.
So to understand what the metrics mean then to configure
even bridge rules,
to trigger actions and to use systems manager automation,
to take actions based on config rules.
So we've seen how we can do auto remediation with them.
So we're good to go for this section for this domain.
The main two is to implement scalability and elasticity.
So we've seen all the various auto scaling plans.
We've seen elastic cache in depth.
We know about RDS replicas in Aurora replicas,
we know about loosely coupled architecture with SQS.
And we know the difference between horizontal scaling,
which represents adding more servers or removing servers and
vertical scaling,
which represents changing the servers to make them either
bigger or smaller terms of capacity and performance.
Now we know how to do high availability.
So we've seen elastic load balancing,
and we've seen route 53 health checks to understand how we
can do a fell over for example.
We know how to differentiate between single AZ
and multi AZ deployments to supplies,
to auto scaling groups,
load balancers, Amazon FSX,
especially for windows where multi-asset is an option.
And you should definitely use that.
And Amazon RDS for filter and workloads.
We know how to use Amazon elastic file system across
multiple AZs and how elastic IP addresses allow you to remap
to be remapped very quickly between multiple AZs
in order to hide a failure of a specific Institute instance.
For example, we know all the routing policies of route 53,
so we're good to go now in terms of backups and resource
strategies, as we can see with seen artists, snapshots,
backups, RTO, and RPO, we know about Amazon data,
life cycle manager,
in order to really understand how to backups your EBS
volumes with some rules and retention policy.
We know how to restore databases.
So point in time restore or promoting a replica and whether
or not that creates a new database.
We've seen versioning and lifecycle rules.
We know cross region replication and merger replication,
and we can execute the disaster recovery procedures.
Okay. Now, in terms of domain three,
we know how to create and manage AMIs.
For example, we've seen how to use image builder.
We've seen cloud formation in depth,
especially on the different features and some
troubleshooting. We know how to use, for example,
a resource access manager to define resource that are going
to be shared across accounts stack sets to deploy a stack
across multiple accounts.
And I am across account roles as well.
If we wanted to get access to another accounts,
we've seen blue-green deployments rolling cannery.
We know how to remediate deployment issues. For example,
with service quotas,
we know that we've resized us and they're too small.
Then we won't be able to launch instances in it.
We know cloud formation errors and so on.
Okay. For services.
So we, since systems manager in CloudFormation,
I know they mentioned OpsWorks two times and it was very,
very late on the OpsWorks, but don't worry about it.
Ups works really, in my opinion is very,
very small the exam in very easy.
Okay. So we know how to do patch management using SSM,
and we know how to automate tasks, for example,
using EverBridge config with SSM documentation,
automations and so on.
Now for security and compliance, we know about everything.
So password policies, MFA roles, SAML, federated, identity,
resource policies, and policy conditions.
We know how to troubleshoot access to AWS using CloudTrail.
I am Xs analyzer to see if your resources are public or not,
and shared with other accounts outside of your zone of trust
and the IAM policy simulator to see if your policy will work
based on some API calls.
Okay. We can review trusted advisor security checks.
We can validate region and service selections based on
compliance requirements. Okay.
And we can know whether or not they're available using the
status dashboard,
and we can implement multi account secure strategy,
for example,
using organization or the control tower to provision
everything for us in advance.
Okay.
We've seen about also how to protests protect our data in
our encryption keys.
We know about KMS in depth.
We know about a certificate manager and VPN connections that
can be done to site two sites.
We can know how to security secure sort of secrets.
For example,
with secrets manager that is deeply integrated with RDS or
the parameter store.
And then we know about guard duty config, Amazon inspector,
and so on.
Now, in terms of a VPC, we know exactly how it's done.
So I'm not going to go over it as well as private
connectivity. So we've seen systems manager,
session manager. We've seen VPC endpoints, VPC, peering,
and VPN, and we've seen WAF and shields.
Perfect. So hosted zones,
we've seen routing policies as well. DNS yes.
Amazon cloud froze and S3 origin next entity yes.
And as for static website hosting on top of it,
how to combine it with route 53,
we know about VPC configurations.
We can read access logs such as VPC flow logs, and so on.
We can remediate clot, fornication issues, caching issues.
And we've seen why caching may or may not happen in
different cases. We had a very long lecture on that.
And then we understand connectivity issues. Okay.
Finally,
around cost we know how to use trusted advisor or compute
optimizer cost, Explorer, budget, and billing, alarms cost,
allocation tags.
We know how definitely how to use spot instances.
And then we know that if we use managed services,
we may have some cost saving, for example, RDS, fargate,
and EFS. Okay.
We can also know that using compute optimizer, for example,
we can recommend some group of resources based on some
performance metrics. We know how to modify our EBS volumes.
We know how to enable S3 transfer acceleration or multi-part
uploads. We can monitor RDS metrics.
We've used performance insight sites,
as well as RDS proxy for our Lambda functions.
And we know about the enhanced network adapter
instance store and placement groups
for Institute.
So overall, the course should cover
everything and more for the exam.
So you should be good to go, but have a look at this,
please go back through the lectures are not confidence,
but from my standpoint, you're ready to go with the exam.
So I wish you good luck.