AWS Certified Developer - Associate Guide电子书

Title Page

Copyright

AWS Certified Developer – Associate Guide

Credits

About the Author

Acknowledgments

About the Author

About the Reviewer

www.PacktPub.com

Why subscribe?

Customer Feedback

Dedication

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Downloading the color images of this book

Errata

Piracy

Questions

Overview of AWS Certified Developer - Associate Certification

Domain 1.0 – AWS fundamentals

Domain 2.0 – Designing and developing

Domain 3.0 – Deployment and security

Domain 4.0 – Debugging

Frequently asked questions about the exam

Introduction to Cloud Computing and AWS

History of the cloud

Basic AWS concepts

Benefits of using AWS over traditional data center

Accessing AWS services

AWS overview

AWS global infrastructure

Regions and AZs

What are SaaS, PaaS, and IaaS?

Understanding virtualization

Virtualization types based on virtualization software

Virtualization types based on virtualization methods

Elasticity versus scalability

Traditional data center resourcing

Cloud infrastructure resourcing

Comparing AWS cloud and on-premises data centers

Total Cost of Ownership (TCO) versus Return on Investment (ROI)

Creating a new AWS account

Deleting an AWS account

AWS free tier

Root user versus non-root user

AWS dashboard

Components of the AWS dashboard

Core AWS services

Shared security responsibility model

AWS soft limits

Disaster recovery with AWS

Backup and restore

Pilot light

Warm standby

Multi-site

Getting Familiar with Identity and Access Management

Understanding AWS root user

Elements of IAM

Users

Access key and secret key

Password policy

Multi-Factor Authentication (MFA)

Security token-based MFA

Steps for enabling a virtual MFA device for a user

SMS text message–based MFA

Creating an AWS IAM user using the AWS dashboard

Introduction to AWS CLI

Installing AWS CLI

Getting a AWS user access key and secret key

Configuring AWS CLI

AWS CLI syntax

Getting AWS CLI help

Creating an IAM user using AWS CLI

Group

Creating a new IAM group

Creating IAM group using CLI

Adding existing users to a group

IAM role

Creating roles for AWS service

Creating IAM role using AWS CLI

Policy

Managed policies

Inline policies

Resource-based policies

Example of resource-based policy

IAM policy simulator

Active Directory Federation Service (ADFS)

Integration between ADFS and AWS console

Web identity federation

STS

AWS STS and AWS regions

Using temporary credentials in Amazon EC2 instances

Using temporary security credentials with the AWS SDKs

IAM best practices

Exam tips

Virtual Private Cloud

AWS VPC

Subnet

Private subnet

Public subnet

IP addressing

Private IP

Public IP

Elastic IP address

Creating a VPC

VPC with a single public subnet

VPC with private and public subnets

VPC with public and private subnets and hardware VPN access

VPC with private subnet only and hardware VPN access

Security

Security group

Network ACLs

Security group versus NACL

Flow logs

Controlling access

VPC networking components

ENI

Route table

IGW

Egress-only IGW

NAT

Comparison of NAT instances and NAT gateways

DHCP option sets

DNS

VPC peering

VPC endpoint

ClassicLink

VPC best practices

Getting Started with Elastic Compute Cloud

Introduction to EC2

Pricing for EC2

EC2 instance lifecycle

Instance launch

Instance stop and start

Instance reboot

Instance retirement

Instance termination

AMI

Root device types

EC2 instance virtualization types

Creating an EC2 instance

Changing EC2 instance type

Connecting to the EC2 instance

Connecting to a Linux EC2 instance from a Microsoft Windows system

Connecting to an EC2 instance using PuTTY session

Troubleshooting SSH connection issues

EC2 instance metadata and user data

Placement group

Introducing EBS

Types of EBS

General Purpose SSD (gp2)

Provisioned IOPS SSD (io1)

Throughput Optimized HDD (st1)

Cold HDD (sc1)

Encrypted EBS

Monitoring EBS volumes with CloudWatch

Snapshots

EBS optimized EC2 instances

EC2 best practices

Handling Application Traffic with Elastic Load Balancing

Introduction to Elastic Load balancer

Benefits of using ELB

Types of ELB

Classic Load Balancer

Application Load Balancer

Features of ELB

Step by step – Creating a Classic Load Balancer

How ELB works

The working of a Classic Load Balancer

The working of a Application Load Balancer

ELB best practices

Monitoring with CloudWatch

How Amazon CloudWatch works

Elements of Amazon CloudWatch

Namespaces

Metrics

Dimensions

Statistics

Percentile

Alarms

Creating a CloudWatch alarm

Billing alerts

CloudWatch dashboards

Monitoring types – basic and detailed

CloudWatch best practices

Simple Storage Service, Glacier, and CloudFront

Amazon S3

Creating a bucket

Bucket restriction and limitations

Bucket access control

Bucket policy

User policies

Transfer Acceleration

Enabling Transfer Acceleration

Requester Pay model

Enabling Requestor Pays on a bucket

Understanding objects

Object keys

Object key naming guide

Object metadata

System-metadata

User-defined metadata

Versioning

Enabling versioning on a bucket

Object tagging

S3 storage classes

S3 Standard storage

S3-IA storage

S3 RRS

Glacier

Comparison of S3 storage classes and Glacier

Lifecycle management

Lifecycle configuration use cases

Defining lifecycle policy for a bucket

Hosting static website on S3

Cross-Origin Resource Sharing (CORS)

Using CORS in different scenarios

Configuring CORS on a bucket

CORS configuration example XML

Enabling CORS on a bucket

Cross-region replication

Enabling cross-region replication

Other AWS Storage Options

Amazon EFS

AWS Storage Gateway

File gateways

Volume gateways

Gateway–cached volumes

Gateway–stored volumes

Tape-based storage solutions

VTL

AWS Snowball

AWS Snowmobile

AWS Relation Database Services

Amazon RDS components

DB instances

Region and AZs

Security groups

DB parameter groups

DB option groups

RDS engine types

Amazon Aurora DB

Comparison of Amazon RDS Aurora with Amazon RDS MySQL

MariaDB

Microsoft SQL Server

MySQL

Oracle

PostgreSQL

Creating an Amazon RDS MySQL DB instance

Monitoring RDS instances

Creating a snapshot

Restoring a DB from a snapshot

Changing a RDS instance type

Amazon RDS and VPC

Amazon RDS and high availability

Connecting to an Amazon RDS DB instance

Connecting to an Amazon Aurora DB cluster

Connecting to a MariaDB Instance

Connecting to a MySQL instance

Connecting to an Oracle instance

RDS best practices

AWS DynamoDB - A NoSQL Database Service

Let us first understand what an RDBMS is

What is SQL?

What is NoSQL?

Key-value pair databases

Document databases

Graph databases

Wide column databases

When to use NoSQL databases?

SQL versus NoSQL

Introducing DynamoDB

DynamoDB components

Primary key

Secondary indexes

DynamoDB Streams

Read consistency model

Eventually consistent reads

Strong consistent reads

Naming rules and data types

Naming rules

Data types

Scalar data types

Document types

Set types

Creating a DynamoDB table – basic steps

Adding a sort key while creating a DynamoDB table

Using advanced settings while creating a DynamoDB table

Creating secondary indexes – table settings

Provisioned capacity – table settings

Auto Scaling – table settings

Methods of accessing DynamoDB

DynamoDB console

DynamoDB CLI

Working with API

DynamoDB provisioned throughput

Read capacity units

Write capacity units

Calculating table throughput

DynamoDB partitions and data distribution

Data distribution – partition key

Data Distribution – partition key and sort key

DynamoDB global and LSI

Difference between GSI and LSI

DynamoDB query

Key condition exptressions

Query with AWS CLI

DynamoDB Scan

Reading an item from a DynamoDB table

Writing an item to a DynamoDB table

PutItem

UpdateItem

DeleteItem

Conditional writes

User authentication and access control

Managing policies

DynamoDB API permissions

DynamoDB best practices

Amazon Simple Queue Service

Why to use SQS?

How queues work?

Main features of SQS

Types of queue

Dead Letter Queue (DLQ)

Queue attributes

Creating a queue

Sending a message in a queue

Viewing/deleting a message from a queue

Purging a queue

Deleting a queue

Subscribing a queue to a topic

Adding user permissions to a queue

SQS limits

Queue monitoring and logging

CloudWatch metrics available for SQS

Logging SQS API actions

SQS security

Authentication

SSE

Simple Notification Service

Introduction to Amazon SNS

Amazon SNS fanout

Application and system alerts

Mobile push notifications

Push email and text messaging

Creating Amazon SNS topic

Subscribing to a SNS topic

Publishing a message to a SNS topic

Deleting SNS topic

Managing access to Amazon SNS topics

When to use access control

Key concepts

Architectural overview

Access request evaluation logic

Invoking Lambda function using SNS notification

Sending Amazon SNS message to Amazon SQS queues

Monitoring SNS with CloudWatch

SNS best practices

Simple Workflow Service

When to use Amazon SWF

Workflow

Example workflow

Workflow history

How workflow history helps

Actors

Workflow starter

Decider

Activity worker

Tasks

SWF domains

Object identifiers

Task lists

Workflow execution closure

Lifecycle of workflow execution

Polling for tasks

SWF endpoints

Managing access with IAM

SWF – IAM policy examples

AWS CloudFormation

What is a template?

What is a stack?

Template structure

AWSTemplateFormatVersion

Description

Metadata

Parameters

AWS-specific parameters

Mappings

Conditions

Transform

Resources

Outputs

Sample CloudFormation template

CloudFormer

Rolling updates for Auto Scaling groups

CloudFormation best practices

Elastic Beanstalk

Elastic Beanstalk components

Architectural concepts

Web server environment tier

Worker environment tiers

Elastic Beanstalk supported platforms

Creating web application source bundle

Getting started using Elastic Beanstalk

Step 1 – Signing in to the AWS account

Step 2 – Creating an application

Step 3 – Viewing information about the recently created environment

Step 4 – Deploying a new application version

Step 5 – Changing the configuration

Step 6 – Cleaning up

Version lifecycle

Deploying web applications to Elastic Beanstalk environments

Monitoring the web application environment

Elastic Beanstalk best practices

Overview of AWS Lambda

Introduction to AWS Lambda

What is a Lambda function?

Lambda function invocation types

Writing a Lambda function

Lambda function handler (Node.js)

Lambda function handler (Java)

Lambda function handler (Python)

Lambda function handler (C#)

Deploying a Lambda function

AWS Lambda function versioning and aliases

Environment variables

Tagging Lambda functions

Lambda function over VPC

Building applications with AWS Lambda

Event source mapping for AWS services

Event source mapping for AWS stream-based service

Event source mapping for custom applications

AWS Lambda best practices

Mock Tests

Mock test 1

Mock test 2