Advanced Architecting On AWS
Uploaded by
ScribdTranslationsAdvanced Architecting On AWS
Uploaded by
ScribdTranslationsAdvanced Architecting on AWS
Detailed Agenda
Description
Building on the concepts introduced in the Architecting on AWS course, Advanced Architecting on AWS is
designed for individuals who are experienced with designing scalable and elastic applications on the AWS
platform. This course covers how to build complex solutions which incorporate data services, governance, and
Security on AWS. This course introduces specialized AWS services, including AWS Direct Connect and AWS.
Storage Gateway to support Hybrid architecture, as well as designing best practices for building scalable,
elastic, secure, and highly available applications on AWS.
Course Objectives
At the end of this course, you will be able to:
Understand the AWS Well-Architected Framework
Manage multiple AWS accounts for your organization
Connect on-premises data center to AWS cloud
Discuss the billing implications of connecting multi-region VPCs
Move large data from on-premises data center to AWS. Design large datastores for AWS cloud.
Understand different architectural designs for scaling a large website
Protect your infrastructure from DDoS attacks
Secure your data on AWS with encryption
Design protection of data-at-rest as well as data-in-flight
Enhance the performance of your solutions
Select the most appropriate AWS deployment mechanism
Intended Audience
This course is intended for:
Seasoned IT professionals who are already familiar with AWS services
Prerequisites
We recommend that attendees of this course have one of the following prerequisites:
AttendedArchitecting on AWS
AchievedAWS Certified Solutions Architect - Associate
This document is confidential and is provided under the terms of your nondisclosure agreement with Amazon Web
Services (AWS) or other agreement governing your receipt of AWS confidential information.
Course Outline
Day 1
Architecting on AWS: Review
AWS Account Management
o Multiple Accounts
o Multi-Account Patterns
o License Management
o Managing Security with Multiple Accounts
o Policy-Based Management with Multiple AWS Accounts
o AWS Directory Services for Authentication Management
o Managing Costs with Multiple Accounts
Advanced Network Architectures, part A
o VPC Design Patterns Review
o Achieving Maximum Network Performance on Amazon EC2
o Leveraging Maximum Network Performance with HPC Workloads
o VPN Connections over AWS
o Lab 1: Multi-VPC Connectivity Over VPN
Advanced Network Architectures, part B
o AWS Direct Connect
o Building a global transit network on AWS
o AWS Transit Gateway
o Amazon Route53 Resolver
o Appendix: Overlay Networks and Floating IPs
Deployment Management on AWS
o Application Lifecycle Management
o Deploying Applications Using Containers
Class Exercise 1: Build a Hybrid Architecture
Day 2
Data, Part A
o Optimizing Amazon S3 Usage
o Case Study: Amazon Drive
o Using Amazon ElastiCache to Handle and Store Data at Scale
o Lab 2: Build a failover solution with Amazon Route 53 and Amazon RDS Read Replication
Data, Part B
o Moving Data into AWS Using AWS Snowball
o Using AWS Storage Gateway to Back Up an On-Premises Data Store
o AWS DataSync
o Storage Gateway Hardware Appliance
o Considerations for Backing Up and Archiving Data on AWS
o Migrating Databases into AWS
Data, Part C
o Designing for Big Data
o Appendix: Amazon DynamoDB Partitioning Fundamentals
Designing for Large Scale Applications
o Offloading Web Application Traffic
o Mitigating Over-Provisioned Resources with T3 Instances
o Blue-Green Deployments on AWS
o Lab 2: Blue-Green deployment using AWS Elastic Beanstalk and Amazon ElastiCache
Class Exercise 2: All-In Multi-Region Architecture
This document is confidential and is provided under the terms of your nondisclosure agreement with Amazon Web
Services (AWS) or other agreement governing your receipt of AWS confidential information.
Day 3
Building Resilient Architectures, Part A
o DDoS Attacks Overview
o Leveraging AWS services to Protect from DDoS Attacks
o Lab 4: CloudFront Content Delivery and automating AWS WAF rules
Building Resilient Architectures, Part B
o High Availability Using Microsoft SQL Server on AWS
o High Availability and Microsoft SharePoint on AWS
o High Availability Using MongoDB on Amazon EC2
o Handling Scaling Constraints
o AWS Global Accelerator
Encryption and Data Security
o Key Management in AWS
o Protecting Data at Rest
o Protecting Data in Transit
o Lab 5: Using KMS Envelope Encryption
This document is confidential and is provided under the terms of your nondisclosure agreement with Amazon Web
Services (AWS) or other agreement governing your receipt of AWS confidential information.