Advanced Architecting on AWS

3 Days

18 CPD hours

This course is intended for Solution Architects

At the end of this course, you will be able to:
Apply the AWS Well-Architected Framework
Manage multiple AWS accounts for your organization
Connect an on-premises datacenter to AWS cloud
Move large data from an on-premises datacenter to AWS
Design large datastores for AWS cloud
Understand different architectural designs for scalability
Protect your infrastructure from DDoS attack
Secure your data on AWS with encryption
Enhance the performance of your solutions
Select the most appropriate AWS deployment mechanism

Building on concepts introduced in Architecting on AWS, Advanced Architecting on AWS is intended for individuals who are experienced with designing scalable and elastic applications on the AWS platform. Building on concepts introduced in Architecting on AWS, this course covers how to build complex solutions which incorporate data services, governance, and security on AWS. This course introduces specialized AWS services, including AWS Direct Connect and AWS Storage Gateway to support Hybrid architecture. It also covers designing best practices for building scalable, elastic, secure, and highly available applications on AWS.

Module 1: AWS Account Management

• Multiple accounts
• Multi-account patterns
• License management
• Manage security and costs with multiple accounts
• AWS Organizations
• AWS Directory Service
• Hands-on lab: Multi-VPC connectivity using a VPN

Module 2: Advanced Network Architectures

• Improve VPC network connections
• Enhance performance for HPC workloads
• VPN connections over AWS
• AWS Direct Connect
• AWS Transit Gateway
• Amazon Route 53
• Exercise: Design a hybrid architecture

Module 3: Deployment Management on AWS

• Application lifecycle management
• Application deployment using containers
• AWS Elastic Beanstalk
• AWS OpsWorks
• AWS CloudFormation

Module 4: Data

• Optimize Amazon S3 storage
• Amazon ElastiCache
• AWS Snowball
• AWS Storage Gateway
• AWS DataSync
• Backup and archival considerations
• Database migration
• Designing for big data with Amazon DynamoDB
• Hands-on lab: Build a failover solution with Amazon Route 53 and Amazon RDS

Module 5: Designing for large scale applications

• AWS Auto Scaling
• Migrating over-provisioned resources
• Blue-green deployments on AWS
• Hands-on lab: Blue-green deployment with AWS

Module 6: Building resilient architectures

• DDoS attack overview
• AWS Shield
• AWS WAF
• Amazon GuardDuty
• High availability using Microsoft SQL Server and Microsoft SharePoint on AWS
• High availability using MongoDB on Amazon EC2
• AWS Global Accelerator
• Hands-on lab: CloudFront content delivery and automating AWS WAF rules

Module 7: Encryption and data security

• Encryption primer
• DIY key management in AWS
• AWS Marketplace for encryption products
• AWS Key Management Service (AWS KMS)
• Cloud Hardware Security Module (HSM)
• Comparison of key management options
• Hands-on lab: AWS KMS with envelope encryption