AWS Certified Cloud Practitioner Study Guide

Ben Piper, AWS Certified Solutions Architect, is an IT consultant who has created more than 20 training courses, covering Amazon Web Services, Cisco routing and switching, Puppet configuration management, and Windows Server Administration. David Clinton, AWS Certified Cloud Practitioner, is a Linux server admin who has worked with IT infrastructure in both academic and enterprise environments. He has created more than 15 video courses, teaching Amazon Web Services and other technologies.

• Introduction xxiAssessment Test xxviiChapter 1 The Cloud 1Introduction 2What Is Cloud Computing? 2Highly Available and Scalable Resources 2Professionally Secured Infrastructure 3Metered Payment Model 3Server Virtualization: The Basics 4Cloud Platform Models 5Infrastructure as a Service 5Platform as a Service 5Software as a Service 5Serverless Workloads 6Scalability and Elasticity 7Scalability 7Elasticity 7Summary 8Exam Essentials 9Review Questions 10Chapter 2 Understanding Your AWS Account 13Introduction 14The Free Tier 15How Does the Free Tier Work? 15Tracking Your Free Tier Usage 15What’s Available Under the Free Tier? 17Product Pricing 18Finding AWS Pricing Documentation 18Working with Online Calculators 19Service Limits 23Billing and Cost Management 23The AWS Billing Dashboard 24AWS Budgets 24Monitoring Your Costs 25AWS Organizations 26Summary 26Exam Essentials 27Review Questions 28Chapter 3 Getting Support on AWS 33Introduction 34Support Plans 34Support Plan Pricing 34The Basic Support Plan 36The Developer Support Plan 36The Business Support Plan 37The Enterprise Support Plan 37AWS Professional Services 37Documentation and Online Help 38Documentation 38Discussion Forums 40Trusted Advisor 40Summary 42Exam Essentials 43Review Questions 44Chapter 4 Understanding the AWS Environment 49Introduction 50AWS Global Infrastructure: AWS Regions 50Regionally Based Services 52Globally Based Services 53Service Endpoints 53AWS Global Infrastructure: Availability Zones 54Availability Zone Designations 54Availability Zone Networking 55Availability Zones and High Availability 56AWS Global Infrastructure: Edge Locations 57Edge Locations and CloudFront 58Regional Edge Cache Locations 59The AWS Shared Responsibility Model 59Managed Resources 60Unmanaged Resources 61Service Health Status 61AWS Acceptable Use Policy 61Summary 61Exam Essentials 62Review Questions 63Chapter 5 Securing Your AWS Resources 67Introduction 68AWS Identity and Access Management 68Protecting the Root User 69Authentication 69Users, Groups, and Roles 72Providing Federated Access 74Credential Report 75Encryption 75Regulatory Compliance (AWS Artifact) 76Summary 77Exam Essentials 77Review Questions 78Chapter 6 Working with Your AWS Resources 83Introduction 84The AWS Management Console 85Accessing the AWS Management Console 85Opening a Service Console 87Working with Shortcuts 88Selecting a Region 88The Account Name Menu 90Resource Groups 90Tag Editor 91Tagging Strategies 92The AWS Console Mobile Application 94The AWS Command Line Interface 98Requirements 99Installation 99Software Development Kits 101Mobile Software Development Kits 101Internet of Things Device Software Development Kits 102CloudWatch 103CloudWatch Metrics 103CloudWatch Alarms 104CloudWatch Dashboards 104CloudWatch Logs 105CloudWatch Events 106CloudTrail 107API and Non-API Events 107Management and Data Events 107Event History 108Trails 108Log File Integrity Validation 108Cost Explorer 109Cost and Usage 109Reservation Reports 111Reserved Instance Recommendations 112Summary 113Exam Essentials 113Review Questions 115Chapter 7 The Core Compute Services 119Introduction 120Deploying Amazon Elastic Compute Cloud Servers 120Amazon Machine Images 120Understanding EC2 Instance Types 123Server Storage: Elastic Block Store and InstanceStore Volumes 124Understanding EC2 Pricing Models 125Simplified Deployments Through Managed Services 127Amazon Lightsail 128AWS Elastic Beanstalk 128Deploying Container and Serverless Workloads 129Containers 129Serverless Functions 129Summary 130Exam Essentials 130Review Questions 132Chapter 8 The Core Storage Services 137Introduction 138Simple Storage Service 138Objects and Buckets 139S3 Storage Classes 139Access Permissions 142Encryption 143Versioning 143Object Life Cycle Configurations 144S3 Glacier 145Archives and Vaults 145Retrieval Options 145AWS Storage Gateway 146File Gateways 146Volume Gateways 146Tape Gateways 147AWS Snowball 147Hardware Specifications 148Security 148Snowball Edge 149Summary 150Exam Essentials 150Review Questions 152Chapter 9 The Core Database Services 157Introduction 158Database Models 158Relational Databases 159Structured Query Language 160Nonrelational (No-SQL) Databases 160Amazon Relational Database Service 161Database Engines 161Licensing 162Instance Classes 162Scaling Vertically 163Storage 163Scaling Horizontally with Read Replicas 164High Availability with Multi-AZ 164Backup and Recovery 165Determining Your Recovery Point Objective 165DynamoDB 166Items and Tables 166Scaling Horizontally 167Queries and Scans 167Amazon Redshift 168Summary 169Exam Essentials 170Review Questions 171Chapter 10 The Core Networking Services 175Introduction 176Virtual Private Cloud 176VPC CIDR Blocks 176Subnets 177Internet Access 178Security Groups 178Network Access Control Lists 178VPC Peering 179Virtual Private Networks 179Direct Connect 179Route 53 180Resource Records 180Domain Name Registration 180Hosted Zones 181Routing Policies 181Health Checks 182Traffic Flow and Traffic Policies 182CloudFront 183Summary 183Exam Essentials 184Review Questions 185Chapter 11 Automating Your AWS Workloads 189Introduction 190The Imperative Approach 190The Declarative Approach 191Infrastructure as Code 191CloudFormation 191Templates 192Stacks 192CloudFormation vs. the AWS CLI 193AWS Developer Tools 194CodeCommit 194CodeBuild 195CodeDeploy 196CodePipeline 197EC2 Auto Scaling 199Launch Configurations and Launch Templates 199Auto Scaling Groups 199Scaling Actions 200Configuration Management 200Systems Manager 200OpsWorks 201Summary 203Exam Essentials 204Review Questions 205Chapter 12 Common Use-Case Scenarios 209Introduction 210The Well-Architected Framework 210Reliability 211Performance Efficiency 211Security 211Cost Optimization 212Operational Excellence 213A Highly Available Web Application Using Auto Scaling and Elastic Load Balancing 213Creating an Inbound Security Group Rule 214Creating an Application Load Balancer 216Creating a Launch Template 218Creating an Auto Scaling Group 219Static Website Hosting Using S3 222Summary 224Exam Essentials 224Review Questions 226Appendix A Answers to Review Questions 231Chapter 1: The Cloud 232Chapter 2: Understanding Your AWS Account 232Chapter 3: Getting Support on AWS 234Chapter 4: Understanding the AWS Environment 235Chapter 5: Securing Your AWS Resources 237Chapter 6: Working with Your AWS Resources 238Chapter 7: The Core Compute Services 240Chapter 8: The Core Storage Services 242Chapter 9: The Core Database Services 244Chapter 10: The Core Networking Services 245Chapter 11: Automating Your AWS Workloads 247Chapter 12: Common Use-Case Scenarios 248Appendix B Additional Services 251Athena 252AWS Backup 252AWS Glue 252Batch 252Cognito 253Database Migration Service 253Elastic File System 253Elastic MapReduce 253Inspector 254Kinesis 254Macie 254Neptune 254Simple Queue Service 254WorkDocs 254WorkSpaces 255Index 257