Goal: In this module, you will learn about how to securely manage your application and your AWS account using various Amazon security services.

Objective: 

Upon completing this module, you should be able to:

• Work with IAM Service 
• Manage IAM Components
• Recognize the Best Practices of IAM
• Manage the keys using KMS
• Access and create alerts on billing

Topics:

• User management through Identity Access Management (IAM)
• Various access policies across AWS Services
• Security Token Services
• AWS Resource Access Manager (RAM), 
• AWS Single Sign-On (SSO)
• AWS Cognito
• AWS Security & Encryption: KMS, CloudHSM, Shield, WAF, Guard Duty
• API keys service access
• Best practices for IAM
• Access billing and create alerts on billing

Hands-On:

• Create new users who can login to AWS console
• Create role for an application to access S3
• Create policies for new user to have either admin or limited privileges
• Configuring Strong and Secure Authentication Access Mechanism using Amazon Cognito
• Configure WAF to Protect Website from Attacks 
• Monitoring Malicious Activity or Unauthorized Behaviour via GuardDuty

Goal: In this module, you will learn about the different Object Storage Services offered by AWS, identify when to use a specific service, how to store/transfer data using these services and optimize the storage cost. 

Objective: 

Upon completing this module, you should be able to:

• Understand Traditional Storage
• Work with Amazon S3
• Know the benefits of using Amazon Glacier
• Work with CloudFront
• Get an overview of Snowball 
• Understand the concepts of Storage Gateway

Topics:

• Traditional Storage
• Need to Move to Cloud Storage
• Traditional vs. Cloud Storage Cost
• Cloud Storage
• Different Storage Options Available on AWS
• Simple Storage Service (S3) and Its Components
• Working of S3
• Difference Between S3, EBS and EFS
• Bucket Policy
• Access Control List(ACL)
• Versioning
• Cross-Region Replication (CRR) and Its Use Case
• Amazon S3 Transfer Acceleration
• Choice of Storage Classes on S3
• Lifecycle Policy of S3 Bucket
• CDN: CloudFront  and AWS Global Accelerator
• Storage Gateways

Hands-On:

• Hosting a Static Website on Amazon S3 
• Versioning in AWS S3
• Replicating data across regions
• Transfer and retrieve data from Glacier through lifecycle policy
• Direct Data Migration to Amazon S3 Glacier Vault via AWS CLI
• Accessing a static website through CloudFront
• File Share via AWS Storage Gateway

Goal: EC2 (Elastic Compute Cloud) is the backbone of AWS. In this module, you will learn about the concepts associated with an EC2 instance and their usage. This module covers different AMIs, a demo on launching an EC2 instance, ways to connect with an instance and how to host a website on EC2 instance.

Objective: 

Upon completing this module, you should be able to:

• Understand Virtualization 
• Work with EC2
• Understand Amazon Machine Image (AMI)
• Describe Security Groups, Key-pairs and Tenancy
• Differentiate between elastic IP and public IP
• Analyze various EC2 box configurations available
• Categorize different storage options associated with EC2 instance 

Topics:

• Virtualization
• Amazon Elastic Compute Cloud (EC2) and Its Benefits
• Amazon Machine Image (AMI)
• Security Groups in AWS
• Authentication through Key-pair
• Hardware Tenancy – Shared vs. Dedicated
• Networking Layer in EC2: VPC
• Elastic Network Interface (ENI) and Its Attributes
• Different Categories of IP Address
• Public IP vs. Elastic IP
• Instance Store
• Elastic Block Store (EBS), Its Features and Volume Types
• Solid State Drive: General Purpose SSD and Provisioned IOPS
• Hard Disk Drive: Throughput Optimized HDD and Cold HDD
• Snapshots
• Elastic File System (EFS) and Its Features
• EBS vs. EFS
• Amazon FSx: Windows File Server and Lustre

Hands-On:

• Host your website inside EC2
• Create an AMI
• Create an Elastic IP
• Attaching an EBS volume externally
• To create a snapshot
• Mount EFS volumes
• Mount FSx into Windows Servers and Share the File

Goal: In this module, you will learn the concepts of Load Balancing, Auto-Scaling and Route 53 to manage traffic.

Objective: 

Upon completing this module, you should be able to:

• Instrument various Load Balancers 
• Setup Auto-Scaling
• Specify components and policies of Auto-Scaling
• Hosting Domains using Route 53

Topics:

• Elastic Load Balancer and its types
• Advanced features of ELB
• Launch Templates
• Launch Configurations
• Comparison of Classic, Network and Application Load Balancer 
• Auto-Scaling 
• Components of Auto-Scaling 
• Lifecycle of Auto-Scaling
• Auto-Scaling policy
• Working of Route 53
• Various Routing Policies

Hands-On:

• Create a Classic Load Balancer
• Create a Network Load Balancer
• Work with Application Load Balancer and Auto-Scaling
• Auto-Scaling and Scaling policy
• Maintaining the User Experience with Low Latency Using Route 53 Traffic Flow Feature

Goal: In this module, you will learn about the different database services offered by AWS to handle structured and unstructured data. This module also gives you knowledge on how to analyze your data.

Objective: 

Upon completing this module, you should be able to:

• Classify different AWS database services
• Understand the working of RDS
• Describe Aurora
• Perform CRUD operations on DynamoDB
• Implement ElastiCache
• Understand Amazon RedShift
• Work with Kinesis

Topics:

• Amazon RDS and its benefits
• Read Replica
• RDS IAM Authentication 
• DynamoDB
• ElastiCache: Working, Redis vs Memcached
• Amazon RedShift
• Kinesis: AWS Kinesis Data Streams, AWS Kinesis Data Firehouse
• AWS Lake Formation
• AWS Athena
• AWS QLDB

Hands-On:

• Storing an application data in MySQL DB using Relational Database Service (RDS)
• Creating Tables, loading sample data and running queries
• Cache the static and frequently accessed application data in the memory using Amazon ElastiCache 
• Moving an Airline data From S3 to AWS Redshift and Query the data via Redshift Editor 
• Design Solution using Amazon Kinesis Data Steam, Kinesis Firehose, Kinesis Analytics

Goal: This module introduces you to the Amazon Virtual Private Cloud. You will learn to implement networking using public and private subnets with VPC. Also, this module demonstrates how to monitor your resources.

Objective: 

Upon completing this module, you should be able to:

• Understand Subnet, Subnet Mask, benefits of VPC and its components
• Differentiate between Default and Non-Default VPC
• Create VPC Wizard Scenarios for VPC
• Understand the VPN and Direct Connect
• Schedule CloudTrail
• Monitor other services using CloudWatch
• Understand Trusted Advisor

Topics:

• VPC – Benefits and Components
• CIDR Notations
• Network Access Control List v/s Security Groups 
• NAT (Network Address Translation): NAT Devices, NAT Gateway and NAT instance
• VPC peering
• Direct Connect
• Private Link 
• AWS CloudWatch
• AWS CloudTrail 
• AWS Config
• Trusted Advisor

Hands-On:

• Create a Non-default VPC and attach it to an EC2 instance
• Accessing Internet inside Private Subnet using NAT Gateway
• Connect two instances in different VPC’s using VPC peering
• Monitoring Application Metrics Using CloudWatch Dashboard
• Auditing Amazon Cloud Services via AWS CloudTrail
• Explore Trusted Advisor
• Accessing Application within two VPCs (Different Accounts) connected via Private link

Goal: This module helps you to understand how to Migrate Applications and resources to AWS Cloud environment using AWS Migrating Strategies, AWS Database Migration service, and AWS Server migration service

Objective: 

Upon completing this module, you should be able to:

• Understand the need for Cloud Migration 
• Figure out the benefits of opting AWS for Cloud Migration
• Plan Migration 
• Select appropriate migration strategy as per business necessities
• Understand CAF Perspectives
• Track Migration using AWS Migration Hub
• Discover on-premises data using AWS Application Discovery
• Perform server migration using AWS SMS
• Plan and implement Database Migration

Topics:

• Why Cloud Migration
• What is Cloud Migration
• Migration Phases
• CAF Perspectives and their Roles
• AWS Migration Hub and ways to use AWS Migration Hub
• Roles and Permissions for AWS Migration Hub
• AWS Migration Hub use cases
• AWS Application Discovery Service
• Application Discovery Tools
• Application Migration to AWS
• Application Migration Phases
• Virtual Machines migration ways
• AWS Server Migration Service(SMS) and its working
• Database Migration Implementation steps
• Working of DMS
• AWS Database Migration use cases
• Types of data transfer: Homogenous and Heterogenous
• Database Schema Migration tool
• Database Migration best practices

Hands-On:

• Gather Details of Migrating Resource via Application Discovery Service and track the migration via AWS Migration Hub.
• Migrating 3-tier Application to AWS Cloud
• Homogenous Database Migration
• Heterogeneous Database Migration

Goal: This module gives you an idea on the importance of AWS guidelines for Well Architected Framework. You will also learn about the Resilient and Performant architecture designs.

Objective: 

Upon completing this module, you should be able to:

• Design Resilient Architecture in AWS
• Design Highly Available and/or Fault-Tolerant Architectures
• Design Decoupling Mechanisms using AWS Services
• Choose Appropriate Resilient Storage
• Design Multi-Tier Architecture in AWS
• Design High-Performance Architecture in AWS

Topics:

• AWS Well-Architected Framework
• How to Build Well Architected Framework
• Pillars of AWS Well-Architected Framework
• Resilience
• Design Highly Available and/or Fault-Tolerant Architectures
• Choose Appropriate Resilient Storage
• Designing Decoupling Mechanisms Using AWS Services
• Design a Multi-tier Architecture Solution
• Disaster Recovery (DR)
• Options to Implement DR Plans
• Design High-Performance Architecture
• Achieve Performance Efficiency using Selection
• Achieve Performance Efficiency using Review
• Achieve Performance Efficiency by Monitoring
• Achieve Performance Efficiency by Performing Trade-offs

Hands-On:

• Designing a Website using Serverless Architecture

Goal: Adding to Module 10, this module covers the remaining three concepts behind AWS Well-Architected Framework – Securing Applications and Architectures, Designing Cost-Optimized Architectures, Defining Operationally Excellent Architectures.

Objective: 

Upon completing this module, you should be able to:

• Secure Applications and Architectures
• Design Cost-Optimized Architectures
• Refer and Understand the White Papers

Topics:

• Design Secure Applications and Architectures
• Cloud Security
• IAM
• How IAM Secures your Resources
• Identity and Federation
• Shared Responsibility Model
• Shared Responsibility Model for Infrastructure Services
• Shared Responsibility Model for Container Services
• Shared Responsibility Model for Abstraction Services
• Network Security Layer
• Multi-Layer Architecture With Network Security 
• AWS HSM and its working
• AWS S3 Security
• AWS Security and Compliance Centre
• Design Cost-Optimized Architectures
• Cost Optimization
• Cost Optimization Design Principles
• Cost Effective Resources

Goal: This module mainly contains exam questionnaires that will be discussed along with the guidance on taking up AWS Solution Architect Certification Exam.

Objective: 

Upon completing this module, you should be able to:

• Understand the process of getting Certified as AWS Solution Architect
• Apply for AWS Certification exam
• Take up AWS Architect Certification Exam after prior preparation

Topics:

• AWS Solution Architect Certification Exam Guide
• Certification Exam Questionnaires

Goal: In this module you will learn how to implement DevOps tools using AWS. 

Objective: 

Upon completing this module, you should be able to:

• Gain knowledge on different software release methodologies
• Understand Traditional DevOps features
• Know the benefits of DevOps on Cloud
• Identify different AWS Developer tools
• Commit your files to CodeCommit
• Create a CodePipeline
• Understand the working of CodeBuild
• Deploy your application using CodeDeploy
• Understand working of CodeStar

Topics:

• Different software release methodologies
• DevOps Lifecycle and its Building Blocks
• DevOps and cloud relation
• Different AWS Developer tools 
• AWS CodeCommit 
• Versioning in S3 vs. CodeCommit
• Working of AWS CodeCommit 
• AWS CodePipeline and its working
• Concepts of CodePipeline 
• Input and Output Artifacts
• AWS CodeBuild and its working 
• AWS CodeDeploy
• Primary Components
• Deployment Workflow: On Lambda Platform and On EC2 Platform 
• Application Specification File
• Deployment Types: In-Place Deployment and Blue/Green Deployment
• AWS CodeStar and its working

Hands-On:

• Implement AWS CodeCommit
• Implement AWS CodePipeline

<p>This Workshop focuses several real life business use case where you will be exposed to experiment the migration of Web Applications, Batch Processes, and Backend Processing Pipeline to the AWS Cloud. You will understand the functional capabilities of these on AWS after migration. This Workshop is intended to provide an insight into how to migrate to AWS in the real world. The session will be conducted by the industry practitioners, who will train you to leverage AWS Services to make the AWS Infrastructure scalable, reliable, and highly available.</p>