AWS Solutions Architect (Associate) Exam Course Manual

1 AWS Solutions Architect ( associate ) Exam Course ManualThe Orion PapersEnterLinux AcademyKeller, TexasUnited States of AmericaMarch 31, 2017To All Linux Academy Students:Welcome to Linux Academy's AWS certified Solutions Architect ( associate level) prep Course . As part of this Course , we are introducing an exciting innovation in AWS instruction - called The Orion Orion Papers is a non-linear, visual, interactive guide designed to enhance your learning and understanding of AWS. This guide can be used independently of the video lessons, but is meant to be supplemental and used in conjunction with the video lessons and live labs provided on you for joining us on this AWS adventure!

2 Sincerely, T homas B . H aslett Thomas B. HaslettCourse AuthorThe Orion PapersContinueThe Orion PapersAppendixWelcome to the Appendix for the Orion Papers Here you will find helpful resources and links to aid in your exploration of AWS. Select a resource in the navigation panel above to explore various parts of this the ExamHelpful LinksLive LabsCSA ConceptsExitThe Orion PapersPhysical & Networking LayerAccount & Services LayerOn-Premise ServersAppendixHybridEnviornmentsOn-prem ise Data CenterOpen InternetOpen InternetAWS ConsoleAWS CLIAWS Users(dev. account)IAMAWS Account( Development Account)AWS Account( Production Account)IAMAWS Account & Services Layer The Account & Services Layer represents how you create, access, and manage an AWS account and it's services.

3 From how you interact with an AWS account and managing user rights, to how you access and use various AWS services and features. This layer is all about account management & managing Infrastructure " Container"Account Connection ToolsAWS Root Account HolderAWS Users (prod. account)Cross Account AccessThe Orion PapersAccount & Services LayerPhysical & Networking LayerOn-Premise ServersAppendixHybridEnviornmentsOn-prem ise Data ap-northeast-1 AWS Edge LocationAWS Physical & Networking Layer The Physical & Networking Layer represents the global infrastructure of AWS in terms of where resources are physically located around the world and how data flows through the AWS network.

4 This layer is all about how AWS is organized, and how internal and external communication with AWS RegionOpen InternetCustomers(front end/public access)AWS Users(back end/private access)Web Browser (http)Terminal(ssh/rdp)AWS Edge LocationAWS Infrasructure " Container"AWS RegionAWS RegionAWS RegionThe Orion PapersOn-Premise ServersHybridEnviornmentsPhysical & Networking LayerAccount & Services LayerAppendixOn-premise Data CenterAWS Physical & Networking Layer(Networking) Moving into a pure networking view, this diagram represents how data is routed through AWS's networking infrastructure for highly available and fault tolerant web application.

5 Identifying the methods of access for both customers (front end) and developers (back end). VPC PeeringAWS Account( Production Account)VPC 1(DEFAULT VPC)Route 53(DNS)CloudFrontS3 Terminal(ssh/rdp)Customers(front end/public access)AWS Users(back end/private access)Web Browser (http)Open InternetGo BackContent Delivery (CDN)Static Web Hosting/DNS FailoverAWS Infrasructure " Container"VPC 2 (user created)The Orion PapersOn-Premise ServersPhysical & Networking LayerAccount & Services LayerAppendixOn-premise Data CenterOn-Premise ServersAWS Physical & Networking Layer(Hybrid Environments)

6 Hybrid architecture allows you to combine resources located in the AWS cloud with resources located on-premise, and use them as if they were located in the same BackAWS Infrasructure " Container"Availability ZoneAvailability ZoneSubnet 2 Subnet 1 VPCV irtualPrivate NetworkAWS Direct ConnectAWS Storage GatewayThe Orion PapersPhysical & Networking LayerAccount & Services LayerHybridEnviornmentsAppendixNon-AWS Account holders who may need AWS Access On-premise Data CenterOpen InternetAWS ConsoleAWS CLIAWS Account & Services Layer(IAM)Moving into a more detailed view of IAM, here you can view an example of various ways different users and resources access an S3 bucket.

7 Including all the IAM components required, such as Users, Groups, Roles, Policies, and API Keys. IAM EssentialsAWS Infrastructure " Container"Account Connection ToolsAWS Root Account HolderAWS Users (prod. account)EC2S3 BucketOpen InternetRoot user has UNLIMITED access to all AWS resources by defaultIAM UserIAM RoleIAM GroupIAM PolicyIAM API KeysFederate with SAML providers ( Active Directory) for temporary and single sign on access Go BackThe Orion PapersPhysical & Networking LayerAccount & Services LayerOn-Premise ServersAppendixHybridEnviornmentsOn-prem ise Data CenterAWS Account & Services Layer(storage services)AWS's main storage service is S3.

8 As represented in the diagram, S3 has many different methods of importing, exporting, and syncing data with on-premise BackS3 Storage ServicesStorage GatewaySnowballMulti-Part UploadSingle Operation UploadIAMAWS Import/ExportSnowballStorage GatewayS3 GlacierOpen InternetAWS ConsoleAccount Connection ToolsAWS Root Account HolderAWS Users (prod. account)AWS Infrastructure " Container"AWS Account( Production Account)AWS CLIL ifecycle PoliciesStorage " Transit" ServicesThe Orion PapersPhysical & Networking LayerAccount & Services LayerOn-Premise ServersAppendixOn-premise Data CenterHybridEnviornmentsAWS Account & Services Layer(compute services)AWS's main compute service is EC2 - which are virtual servers you can provision in the AWS cloud.

9 AWS also offers a newer service called Lambda, which is a serverless option for a different kind of computing BackLambdaEC2 IAMOpen InternetAWS ConsoleAccount Connection ToolsAWS Root Account HolderAWS Users (prod. account)AWS Infrastructure " Container"AWS Account( Production Account)AWS CLIAWS Compute ServicesVirtual Server Based ComputingServerless ComputingThe Orion PapersPhysical & Networking LayerAccount & Services LayerOn-Premise ServersAppendixOn-premise Data CenterHybridEnviornmentsAWS Account & Services Layer(Database Services)AWS offers a wide range of database services, with its primary offerings including both RDS (SQL) and DynamoBB (NoSQL).

10 Also included in the database category are options for high-performance (ElastiCache) and data warehousing (Redshift) BackIAMOpen InternetAWS ConsoleAccount Connection ToolsAWS Root Account HolderAWS Users (prod. account)AWS Infrastructure " Container"AWS Account( Production Account)AWS CLIAWS Compute ServicesFully-Managed SQL DatabasesServerless NoSQL DatabaseIn-Memory Cache EngineRDSE lastiCacheDynamoDBPetabyte-Scale Data WarehouseRedshiftThe Orion PapersPhysical & Networking LayerAccount & Services LayerOn-Premise ServersAppendixOn-premise Data CenterHybridEnviornmentsAWS Account & Services Layer(Application Services)