Architecting on AWS

Day 1

Resources

The following resource links will provide more information and help reinforce topics covered during Day 1 of Architecting on AWS:

Module 1: Introduction

• AWS Well-Architected
• AWS Global Cloud Infrastructure (Interactive)
• Global Infrastructure
• How AWS Came to Be
• Learn how we secure AWS data centers by design

Module 2: Account Security

• AWS Identity & Access Management
• AWS Account Root User
• Identity Providers and Federation
• AWS Security Token Service
• Logging IAM and AWS STS API Calls with AWS CloudTrail
• AWS Federated Authentication with Active Directory Federation Services (AD FS)
• AWS Service Catalog
• AWS Landing Zone
• Service control policies in AWS Organizations enable fine-grained permission controls
• How to Rotate Access Keys for IAM Users
• Become an AWS IAM Policy Ninja in 60 Minutes or Less
• Policies and Permissions

Module 3: Networking, part 1

• IP Addressing in your VPC
• VPC and subnet sizing for IPv6
• CIDR.xyz
• Another Day, Another Billion Packets
• Networking and Content Delivery on AWS
• Using DNS with your VPC
• Building a Scalable and Secure Multi-VPC AWS Network Infrastructure

Module 4: Compute

• Amazon EC2 Instance Types
• EC2 Instance Comparison
• Amazon EBS volume types
• Spot Instance Advisor
• Instance metadata and user data
• Tagging Best Practices
• Amazon Machine Image (AMI)
• Amazon Elastic Block Store (Amazon EBS)
• Amazon EFSHow It Works
• SSD Instance Store Volumes
• New – Stop & Resume Workloads on EC2 Spot Instances
• Amazon EC2 Spot Lets you Pause and Resume Your Workloads