Ctrl K

Beginner → Associate

AWS Solutions Architect – Associate (SAA-C03)

Every service the exam covers, taught in the order you need it: what problem it solves, how it works inside, what breaks and how to choose between options. Every mechanism is animated with the official AWS architecture icons, in the normal case and when things fail.

26 modules · 135 lessons · 51.0 h of reading

Start the course

Module 1

Cloud & AWS Foundations

What the cloud is, how AWS is laid out around the world, the ways to talk to it, and how to keep the bill safe.

  1. 1.1What the Cloud Is and How AWS Charges YouOn-premises vs cloud, IaaS / PaaS / SaaS, the shared responsibility model and pay-as-you-go pricing. 20 min
  2. 1.2Regions, Availability Zones and Edge LocationsHow AWS is built physically, how to choose a Region, and which services are global vs regional. 22 min
  3. 1.3Console, CLI, SDK and CloudShellThe three doors into AWS, access keys, and why an API call is the real unit of work. 18 min
  4. 1.4Free Tier, Budgets and Cost AlertsSet a budget before you build anything, and know what keeps charging after you stop. 14 min

Module 2

IAM Essentials

Who can do what in your account: users, groups, policies, roles, MFA, and how AWS decides allow or deny.

  1. 2.1Users, Groups and Policy DocumentsThe root account, IAM users and groups, and every field of a JSON policy. 22 min
  2. 2.2How AWS Decides: Explicit Deny, Implicit Deny, AllowEvaluate any request by hand, including a user in several groups with conflicting policies. 18 min
  3. 2.3MFA, Password Policy and Protecting RootMFA devices, password rules, MFA conditions in policies, and what the root user is (and is not) for. 16 min
  4. 2.4Roles, STS and IAM Security ToolsTemporary credentials for services and people, AssumeRole step by step, Credentials Report and Access Advisor. 22 min

Module 3

VPC Fundamentals

Your private network inside AWS: IP ranges and CIDR, subnets, internet access, NAT, and the two firewalls (security groups and NACLs).

  1. 3.1IP Addresses, CIDR and Subnet MathsRead and write any CIDR block, count its addresses, split it into subnets, and tell private ranges from public ones. 30 min
  2. 3.2VPC, Subnets and the Five Reserved AddressesWhat a VPC is, how subnets map to Availability Zones, the default VPC, VPC limits, and why a /27 cannot hold 29 servers. 26 min
  3. 3.3Internet Gateway and Route TablesHow a packet leaves a subnet: route lookup, longest prefix match, what makes a subnet public, and the classic misconfigurations. 24 min
  4. 3.4Bastion Hosts, NAT Instances and NAT GatewaysReaching private servers safely, and giving them outbound internet without exposing them: NAT step by step, high availability and cost. 30 min
  5. 3.5Security Groups vs NACLs and Ephemeral PortsStateful vs stateless filtering, rule order, ephemeral ports, a three-tier rule set, and timeout vs connection refused. 34 min
  6. 3.6Public, Private and Elastic IPsWhich address an instance gets and when it changes, Elastic IPs, the public IPv4 charge, and better alternatives. 20 min

Module 4

Amazon EC2

Virtual servers: instance types, getting in securely, bootstrapping, the purchasing options, placement and network interfaces.

  1. 4.1Instances, Families and NamingWhat an instance is made of, the instance families and how to read m7g.2xlarge. 22 min
  2. 4.2Security Groups in Practice, SSH and Session ManagerClassic ports, a WordPress rule set, SSH and Instance Connect, and keyless access with Session Manager. 24 min
  3. 4.3User Data, AMIs, IMDS and Launch TemplatesBootstrap on first boot, bake golden images, read instance metadata safely with IMDSv2, and template launches. 22 min
  4. 4.4Purchasing Options: On-Demand to SpotOn-Demand, Reserved, Savings Plans, Spot and Spot Fleet, Dedicated Hosts and Instances, Capacity Reservations, and how to choose. 30 min
  5. 4.5Placement Groups, ENIs and HibernateCluster, spread, partition and precision-time placement, moving network cards between instances, and keeping RAM across a stop. 24 min

Module 5

EC2 Storage

Disks for your instances: EBS volumes and snapshots, instance store, and shared file systems with EFS.

  1. 5.1EBS Volumes and SnapshotsNetwork disks locked to an AZ, delete-on-termination, snapshots, Snapshot Archive, Recycle Bin and Fast Snapshot Restore. 24 min
  2. 5.2EBS Volume Types, Multi-Attach and Encryptiongp3 vs gp2 vs io2 Block Express vs st1 vs sc1, Multi-Attach, and encrypting an existing volume. 26 min
  3. 5.3Instance Store: Fast and EphemeralPhysically attached disks with millions of IOPS, and exactly when their data disappears. 16 min
  4. 5.4EFS and Choosing Between EBS, EFS and Instance StoreA file system many instances share across AZs: modes, storage classes, lifecycle, and a decision table. 26 min

Module 6

High Availability & Scalability: ELB and ASG

Survive failures and absorb load: load balancers of every kind and Auto Scaling groups.

  1. 6.1Vertical vs Horizontal Scaling and High AvailabilityScale up, scale out, and why "highly available" means at least two AZs. 16 min
  2. 6.2Load Balancing, Health Checks and TCP vs UDPWhat a load balancer does, health checks, security groups that only trust the LB, and the transport refresher. 24 min
  3. 6.3ALB, NLB, GWLB and Target GroupsLayer 7 routing rules, layer 4 static IPs, inline appliances with GENEVE, and target types. 30 min
  4. 6.4Stickiness, Cross-Zone, TLS/SNI and Deregistration DelaySession affinity cookies, cross-zone traffic maths, certificates and SNI, and draining in-flight requests. 28 min
  5. 6.5Auto Scaling Groups and Scaling PoliciesMin/desired/max, launch templates, target tracking, step, scheduled and predictive scaling, cooldowns, health checks and lifecycle hooks. 33 min

Module 7

Relational Databases & Caching

Managed SQL with RDS and Aurora, replicas vs Multi-AZ, backups, security, RDS Proxy, and ElastiCache.

  1. 7.1RDS, Read Replicas and Multi-AZWhy managed, storage auto scaling, async replicas for reads, sync standby for failover, and Multi-AZ DB clusters. 28 min
  2. 7.2RDS Backups, Restores and RDS CustomAutomated backups and point-in-time restore, snapshots, long-term retention, Blue/Green deployments and RDS Custom. 24 min
  3. 7.3Amazon Aurora Inside OutSix copies in three AZs, quorum writes, endpoints, replica auto scaling, Serverless, Global Database, cloning, backtrack, ML and Babelfish. 32 min
  4. 7.4Database Security and RDS ProxyEncryption at rest and in flight, IAM authentication, security groups, audit logs, and connection pooling with RDS Proxy. 26 min
  5. 7.5ElastiCache and Caching PatternsValkey/Redis OSS vs Memcached, lazy loading, write-through, TTL, session stores, leaderboards and MemoryDB. 28 min

Module 8

Amazon Route 53

DNS on AWS: records and hosted zones, Alias, every routing policy, health checks and hybrid DNS.

  1. 8.1Records, Hosted Zones and TTLA quick DNS refresher, record types, public vs private hosted zones, and choosing a TTL. 22 min
  2. 8.2CNAME vs AliasWhy the zone apex cannot be a CNAME, what Alias does instead, and its valid targets. 16 min
  3. 8.3Routing PoliciesSimple, weighted, latency, failover, geolocation, geoproximity with bias, IP-based and multi-value answers. 32 min
  4. 8.4Health Checks and DNS FailoverEndpoint, calculated and CloudWatch-alarm health checks, the 18% rule, and checking private resources. 22 min
  5. 8.5Registrars, Third-Party Domains and Hybrid DNSRegistrar vs DNS service, pointing a domain at Route 53, and Resolver inbound/outbound endpoints. 20 min

Module 9

Classic Solution Architectures

Put the pieces together: grow a stateless app and a stateful shop step by step, share storage, launch fast, and Elastic Beanstalk.

  1. 9.1A Stateless App Grows UpFrom one instance with an Elastic IP to a multi-AZ fleet behind a load balancer, one problem at a time. 24 min
  2. 9.2A Stateful Shop: Sessions, Data and Read ScalingStickiness, cookies, server-side sessions, a database, replicas and caching, and the security groups that tie it together. 28 min
  3. 9.3Shared Storage and Launching FastEBS vs EFS for an app tier, golden AMIs, user data and restoring from snapshots. 18 min
  4. 9.4Elastic BeanstalkApplications, versions and environments, web vs worker tiers, and single-instance vs HA deployments. 18 min

Module 10

Amazon S3

Object storage from first bucket to advanced security: policies, versioning, replication, storage classes, performance, events and encryption.

  1. 10.1Buckets, Objects and KeysNaming rules, keys and prefixes, object size and multipart upload, metadata, tags and consistency. 20 min
  2. 10.2Who Can Read My Bucket? IAM, Bucket Policies and Block Public AccessUser vs resource policies, cross-account access, ACLs and Object Ownership, and the settings that prevent leaks. 26 min
  3. 10.3Static Website Hosting and CORSServing a site from a bucket, the 403 trap, and cross-origin requests with preflight. 18 min
  4. 10.4Versioning and ReplicationVersions, delete markers, suspending, CRR and SRR, Batch Replication, and why replication does not chain. 24 min
  5. 10.5Storage Classes and Lifecycle RulesDurability vs availability, every class from Standard to Deep Archive, Intelligent-Tiering, Express One Zone, lifecycle design and Storage Class Analysis. 30 min
  6. 10.6S3 PerformanceRequests per prefix, multipart upload, Transfer Acceleration and byte-range fetches. 18 min
  7. 10.7Events, Requester Pays, Batch Operations and Storage LensEvent notifications and EventBridge, who pays for downloads, bulk jobs over millions of objects, and organisation-wide storage insight. 22 min
  8. 10.8S3 EncryptionSSE-S3, SSE-KMS with Bucket Keys, DSSE-KMS, SSE-C, client-side encryption, default encryption and forcing TLS. 26 min
  9. 10.9MFA Delete, Logs, Pre-signed URLs, Object Lock and Access PointsProtecting versions, access logs (and the logging loop), temporary links, WORM storage, access points and Object Lambda. 28 min
  10. 10.10Paths to S3 (1/3): Private Network RoutesGateway and Interface endpoints, VPC Peering, Transit Gateway, and Site-to-Site VPN or Direct Connect: how traffic reaches S3 without the public internet. 30 min
  11. 10.11Paths to S3 (2/3): Moving Data in BulkS3 File Gateway, DataSync, Snowball, Transfer Acceleration and Transfer Family: which one fits which migration or daily feed. 30 min
  12. 10.12Paths to S3 (3/3): Multipart, Pre-signed URLs and Batch OperationsHow applications push big files, let users upload without credentials, and change millions of objects at once, plus a chooser across all 13 paths. 26 min

Module 11

CloudFront & Global Accelerator

Bring content and traffic close to users: caching at the edge, origins, edge functions, and anycast acceleration.

  1. 11.1CloudFront: Caching at the EdgeEdge locations, origins, Origin Access Control, cache keys and TTL, and CloudFront vs S3 replication. 26 min
  2. 11.2Geo Restriction, Invalidation, VPC Origins and Signed URLsCountry allow/block lists, purging the cache, private origins in a VPC, signed URLs and cookies, and price classes. 24 min
  3. 11.3CloudFront Functions vs Lambda@EdgeThe four event points, limits side by side, and which one fits each use case. 20 min
  4. 11.4Global Accelerator and AnycastUnicast vs anycast, two static IPs at the edge, health-based failover, and Global Accelerator vs CloudFront. 20 min

Module 12

Hybrid Storage & Data Transfer

Moving and sharing data between on-premises and AWS: Snowball, FSx, Storage Gateway, Transfer Family and DataSync.

  1. 12.1Snowball and Edge ComputingWhen shipping a box beats the network, edge compute, and getting data into Glacier. 18 min
  2. 12.2Amazon FSx FamilyFSx for Windows File Server, Lustre (scratch vs persistent), NetApp ONTAP and OpenZFS. 22 min
  3. 12.3Storage Gateway: File, Volume and TapeExposing cloud storage on-premises over NFS, SMB and iSCSI, cached vs stored volumes, and virtual tapes. 24 min
  4. 12.4Transfer Family, DataSync and the Full Storage MapManaged FTP/SFTP into S3 or EFS, scheduled sync jobs, and every storage service compared. 22 min

Module 13

Decoupling: Queues, Pub/Sub and Streams

Let services talk without waiting on each other: SQS, SNS, Kinesis, Data Firehose and Amazon MQ.

  1. 13.1Sync vs Async and Amazon SQSWhy queues, producers and consumers, at-least-once delivery, scaling consumers, and SQS security. 22 min
  2. 13.2Visibility Timeout, Long Polling and Dead-Letter QueuesThe life of a message, duplicate processing, long polling, DLQs, delay queues and large payloads. 26 min
  3. 13.3SQS FIFO QueuesMessage groups, deduplication, exactly-once processing and throughput limits. 20 min
  4. 13.4SNS, Fan-Out and Message FilteringPub/sub topics, SNS + SQS fan-out, filter policies and FIFO topics. 24 min
  5. 13.5Kinesis Data StreamsShards and capacity, partition keys and ordering, hot shards, resharding, and capacity modes. 28 min
  6. 13.6Amazon Data FirehoseNear-real-time delivery to S3, Redshift and OpenSearch, buffering, transformation, and Firehose vs Data Streams. 18 min
  7. 13.7SQS vs SNS vs Kinesis, and Amazon MQA side-by-side decision guide, and when a standard-protocol broker is the right answer. 18 min

Module 14

Containers on AWS

Docker images and registries, ECS on EC2 and Fargate, scaling, and Kubernetes with EKS.

  1. 14.1Docker, Containers vs VMs, and ECRWhat a container is, build-push-pull-run, and storing images in ECR. 18 min
  2. 14.2Amazon ECS: Launch Types, Roles, Load Balancing and StorageClusters, tasks and services, EC2 vs Fargate, the instance/execution/task roles, ALB integration and data volumes. 30 min
  3. 14.3ECS Scaling and Event-Driven TasksService auto scaling, capacity providers, and tasks started by EventBridge, schedules and queues. 22 min
  4. 14.4Amazon EKSManaged Kubernetes, node types, storage drivers, ECS vs EKS, and App Runner. 20 min

Module 15

Serverless

Lambda, DynamoDB, API Gateway, Step Functions and Cognito, and whole serverless architectures.

  1. 15.1AWS Lambda Basics and PricingFunctions vs servers, invocation types, triggers, runtimes and container images, and the pricing maths. 22 min
  2. 15.2Lambda Limits, Concurrency and Cold StartsExecution limits, reserved and provisioned concurrency, throttling and retries, cold starts and SnapStart. 26 min
  3. 15.3Lambda in a VPC, RDS Proxy and Database TriggersReaching private resources, connection storms and RDS Proxy, invoking Lambda from RDS vs RDS event notifications. 20 min
  4. 15.4DynamoDB: Keys, Capacity and ConsistencyTables and items, partition and sort keys, RCU/WCU, on-demand vs provisioned, consistency and hot partitions. 30 min
  5. 15.5DynamoDB Indexes, DAX, Streams and Global TablesLSI vs GSI, query vs scan, DAX, Streams, Global Tables, TTL, backups and S3 export/import. 28 min
  6. 15.6Amazon API GatewayAPI types and endpoint types, integrations, security, throttling and caching, and API Gateway vs ALB. 24 min
  7. 15.7Step Functions and CognitoOrchestrated workflows, user pools vs identity pools, and row-level security for app users. 24 min
  8. 15.8Serverless ArchitecturesA mobile to-do API, a global blog with emails and thumbnails, microservices, and offloading downloads to the edge. 28 min

Module 16

Choosing the Right Database

Database types and how to choose, plus DocumentDB, Neptune, Keyspaces and Timestream.

  1. 16.1Database Types and How to ChooseThe questions to ask, relational vs NoSQL vs warehouse vs search vs graph vs time series, with a decision map. 22 min
  2. 16.2DocumentDB, Neptune, Keyspaces and TimestreamMongoDB-compatible documents, graphs and Neptune Streams, managed Cassandra, and time-series data. 22 min

Module 17

Data & Analytics

Query, warehouse, search, process and visualise data: Athena, Redshift, OpenSearch, EMR, QuickSight, Glue, Lake Formation, Flink and MSK.

  1. 17.1Amazon AthenaServerless SQL on S3, columnar formats, partitions, federated queries and cost control. 20 min
  2. 17.2Amazon Redshift and SpectrumOLAP vs OLTP, leader and compute nodes, loading data, snapshots and DR, Spectrum and Serverless. 24 min
  3. 17.3Amazon OpenSearch ServiceSearch on any field, and the common pipelines from DynamoDB, CloudWatch Logs and Kinesis. 16 min
  4. 17.4Amazon EMRManaged Hadoop and Spark clusters, node types and purchasing, and serverless options. 18 min
  5. 17.5Amazon QuickSightDashboards and analyses, SPICE, users and groups, and column-level security. 14 min
  6. 17.6AWS Glue and Lake FormationETL jobs, converting to Parquet, crawlers and the Data Catalog, job bookmarks, and a governed data lake. 24 min
  7. 17.7Managed Flink and Amazon MSKStream processing with Flink, managed Kafka, and Kinesis Data Streams vs MSK. 20 min
  8. 17.8A Serverless Big Data Ingestion PipelineFrom IoT devices to dashboards: collect, deliver, transform, query and report, end to end. 18 min

Module 18

Machine Learning & AI Services

Ready-made AI for images, speech, language and documents, plus SageMaker AI and generative AI with Bedrock.

  1. 18.1Vision, Speech and Language ServicesRekognition, Transcribe, Polly, Translate, Lex and Connect, Comprehend and Comprehend Medical. 26 min
  2. 18.2SageMaker AI, Bedrock, Kendra, Personalize and TextractBuilding your own models, generative AI, document search, recommendations, document extraction, and a cheat sheet. 24 min

Module 19

Monitoring, Audit & Events

See what is happening and who did it: CloudWatch, EventBridge, CloudTrail and Config.

  1. 19.1CloudWatch Metrics and Metric StreamsNamespaces and dimensions, resolution and retention, custom metrics and streaming metrics out. 20 min
  2. 19.2CloudWatch Logs, Agents and SubscriptionsLog groups and streams, the unified agent, Logs Insights, export vs subscriptions, cross-account aggregation and Live Tail. 26 min
  3. 19.3Alarms, Composite Alarms, Recovery and SyntheticsAlarm states and targets, composite alarms, EC2 instance recovery, canaries and Network Synthetic Monitor. 22 min
  4. 19.4Container, Lambda, Contributor and Application InsightsThe four Insights features and the question each one answers. 16 min
  5. 19.5Amazon EventBridgeEvent buses, rules and patterns, schedules, schema registry, cross-account buses, archive and replay, and Pipes. 24 min
  6. 19.6AWS CloudTrailManagement, data and Insights events, retention and long-term storage, and reacting to API calls. 20 min
  7. 19.7AWS Config, and CloudWatch vs CloudTrail vs ConfigConfiguration history, rules and remediation, notifications, and which of the three answers which question. 22 min

Module 20

Advanced Identity & Multi-Account

Many accounts and many people: Organizations and SCPs, advanced policies, Identity Center, directories and Control Tower.

  1. 20.1AWS Organizations, OUs and SCPsManagement and member accounts, consolidated billing, OU designs, SCP inheritance, tag policies and resource control policies. 26 min
  2. 20.2Conditions, Resource Policies, Boundaries and Full Evaluation LogicCondition keys, S3 bucket vs object ARNs, roles vs resource policies, permission boundaries, and the complete decision flow. 28 min
  3. 20.3IAM Identity Center, Directory Services and Control TowerSingle sign-on with permission sets and ABAC, Managed AD vs AD Connector vs Simple AD, and guardrails. 24 min

Module 21

Encryption & Security Services

Protect data and applications: KMS, secrets, certificates, CloudHSM, WAF, Shield, Firewall Manager and threat detection.

  1. 21.1Encryption in Flight, at Rest and Client-SideWhere data is protected in each model, and envelope encryption with data keys. 18 min
  2. 21.2AWS KMS in DepthKey types and pricing, key policies, rotation, sharing encrypted snapshots and AMIs, multi-Region keys and S3 replication. 30 min
  3. 21.3SSM Parameter Store vs Secrets ManagerHierarchies, tiers and policies, secret rotation, multi-Region secrets, and choosing between them. 20 min
  4. 21.4AWS Certificate ManagerPublic and imported certificates, DNS validation, renewals and expiry alerts, and ALB and API Gateway integration. 18 min
  5. 21.5CloudHSM vs KMSDedicated hardware you control, high availability, KMS custom key stores, and a feature comparison. 14 min
  6. 21.6WAF, Shield, Firewall Manager and DDoS ResiliencyWeb ACLs and rate rules, Shield Standard vs Advanced, central rule management, and the DDoS best practices. 26 min
  7. 21.7GuardDuty, Inspector, Macie and Security HubThreat detection from logs, vulnerability scanning, finding sensitive data, and a single security view. 18 min

Module 22

Advanced Networking & Hybrid Connectivity

Connect VPCs, services and data centres: peering, endpoints, flow logs, VPN, Direct Connect, Transit Gateway, IPv6, Network Firewall and network costs.

  1. 22.1VPC PeeringConnecting two VPCs privately, non-transitive routing, overlapping CIDRs and cross-account peering. 18 min
  2. 22.2VPC Endpoints and PrivateLinkGateway vs interface endpoints, endpoint policies, Lambda to DynamoDB without NAT, and publishing your own service. 26 min
  3. 22.3VPC Flow Logs and TroubleshootingReading a flow log record, telling a NACL from a security group by the ACCEPT/REJECT pattern, and analysis pipelines. 20 min
  4. 22.4Site-to-Site VPN and CloudHubVirtual private and customer gateways, tunnels and route propagation, and hub-and-spoke VPN. 22 min
  5. 22.5AWS Direct ConnectDedicated vs hosted connections, virtual interfaces, DX Gateway, encryption, resiliency models and VPN backup. 28 min
  6. 22.6Transit GatewayHub-and-spoke routing for thousands of VPCs, route tables, ECMP bandwidth over VPN, and sharing Direct Connect. 24 min
  7. 22.7Traffic Mirroring, IPv6 and Network FirewallCopying traffic for inspection, IPv6 and dual stack, egress-only gateways, and VPC-wide firewalling. 24 min
  8. 22.8Networking CostsWhat is free and what is charged across AZs, Regions and the internet, NAT vs endpoints, and egress design. 18 min

Module 23

Disaster Recovery & Migration

Plan for disasters with RPO and RTO, back everything up, and move servers, databases and data into AWS.

  1. 23.1RPO, RTO and the Four DR StrategiesBackup and restore, pilot light, warm standby and multi-site, compared on cost and recovery. 28 min
  2. 23.2Elastic Disaster Recovery, AWS Backup and Vault LockContinuous block replication, central backup plans across services, and WORM backups. 20 min
  3. 23.3DMS, SCT and Database MigrationsHomogeneous vs heterogeneous moves, full load plus CDC, Multi-AZ replication instances, and RDS/Aurora migration paths. 24 min
  4. 23.4Discovery, MGN, VMware Cloud and the 7 RsPlanning with Application Discovery, rehosting with MGN, VM Import/Export, VMware Cloud on AWS, and the migration strategies. 22 min
  5. 23.5Moving Large Amounts of DataInternet vs VPN vs Direct Connect vs Snowball, worked out with real numbers, and ongoing sync. 16 min

Module 24

More Solution Architectures

Patterns that combine many services: event processing, caching, blocking IPs, HPC and a highly available single instance.

  1. 24.1Event Processing PatternsLambda with SQS and SNS, DLQs, fan-out, S3 events, intercepting API calls, and API Gateway to Kinesis. 22 min
  2. 24.2Caching at Every LayerEdge, API, application, database and session caching, and their trade-offs. 18 min
  3. 24.3Blocking an IP Address at Each LayerNACLs, security groups, ALB, NLB, WAF and CloudFront: which one can see the real client IP. 18 min
  4. 24.4High Performance Computing on AWSData transfer, enhanced networking and EFA, storage for HPC, Batch and ParallelCluster. 20 min
  5. 24.5A Highly Available Single EC2 InstanceElastic IP failover, a one-instance ASG, and carrying an EBS volume across AZs with lifecycle hooks. 18 min

Module 25

Other Services

Services that appear in a few questions each: CloudFormation, SES, Pinpoint, Systems Manager, cost tools, Outposts, Batch, AppFlow and Amplify.

  1. 25.1AWS CloudFormationInfrastructure as code, stacks, change sets, StackSets and service roles with iam:PassRole. 20 min
  2. 25.2Amazon SES and PinpointTransactional and bulk email, campaigns and journeys, and how they differ from SNS. 14 min
  3. 25.3Systems ManagerSession Manager, Run Command, Patch Manager, Maintenance Windows and Automation. 22 min
  4. 25.4Cost Explorer, Anomaly Detection and BudgetsReports and forecasts, Savings Plan recommendations, anomaly alerts and Compute Optimizer. 16 min
  5. 25.5Outposts, Batch, AppFlow, Amplify and Instance SchedulerAWS racks on-premises, batch jobs vs Lambda, SaaS data flows, full-stack app tooling and stopping idle resources. 20 min

Module 26

Well-Architected & Exam Strategy

The framework every answer is judged by, and how to approach the exam itself.

  1. 26.1Well-Architected Framework and Trusted AdvisorThe design principles, the six pillars, the Well-Architected Tool, Trusted Advisor and reference architectures. 20 min
  2. 26.2Exam Format, Strategy and the Keyword Cheat SheetHow the exam works, elimination, reading scenarios, and the keyword-to-service map from every chapter. 24 min