AWS Certified SysOps Boot Camp
DreamsPlus offers a comprehensive AWS Certified SysOps Boot Camp in Chennai and online, designed to equip you with hands-on experience and prepare you for the AWS Certified SysOps certification.
AWS certification Course Overview
- Learn AWS operations best practices
- Understand AWS services and deployment models
- Develop skills in managing and operating AWS environments
- Gain hands-on experience through interactive workshops
Syllabus Covered
Domain 1: Monitoring, Logging, and Remediation (20% of scored content)
Domain 2: Reliability and Business Continuity (16% of scored content)
Domain 3: Deployment, Provisioning, and Automation (18% of scored content)
Domain 4: Security and Compliance (16% of scored content)
Domain 5: Networking and Content Delivery (18% of scored content)
Domain 6: Cost and Performance Optimization (12% of scored content)
Domain 1: Monitoring, Logging, and Remediation
Task Statement 1.1: Implement metrics, alarms, and filters by using AWS monitoring and logging services.
- Identify, collect, analyze, and export logs (for example, Amazon CloudWatch
- Logs, CloudWatch Logs Insights, AWS CloudTrail logs).
- Collect metrics and logs by using the CloudWatch agent.
- Create CloudWatch alarms.
- Create metric filters.
- Create CloudWatch dashboards.
- Configure notifications (for example, Amazon Simple Notification Service
- [Amazon SNS], Service Quotas, CloudWatch alarms, AWS Health events).
Task Statement 1.2: Remediate issues based on monitoring and availability metrics.
- Respond to notifications and alarms to troubleshoot and correct issues.
- Configure Amazon EventBridge rules to trigger actions.
- Use AWS Systems Manager Automation runbooks to execute actions depending on AWS configuration rules.
Domain 2: Reliability and Business Continuity
Task Statement 2.1: Implement scalability and flexibility.
- Create and manage AWS Auto Scaling plans.
- Implement cache.
- Implement Amazon RDS and Aurora Replicas.
- Use loosely linked architectures.
- Differentiate between horizontal and vertical scaling.
Task Statement 2.2: Implement high availability and resilient environments.
- Set up ELB and Amazon Route 53 health checks.
- Differentiate between single and multi-Availability Zone installations, such as Amazon EC2 Auto Scaling groups, ELB, Amazon,FSX, Amazon RDS).
- Implement fault-tolerant workloads, such as Amazon Elastic File System [Amazon EFS], elastic IP addresses).
- Implement Route 53 routing policies (e.g. failover, weighted, latency-based).
Task Statement 2.3: Implement backup and restore strategies.
- Automate snapshots and backups for specific use cases, such as RDS snapshots, AWS Backup, RTO and RPO, Amazon Data Lifecycle Manager, and retention policies.
- Restore databases, including point-in-time and read replicas.
- Establish versioning and lifecycle guidelines.
- Configure Amazon S3’s Cross-Region Replication (CRR).
- Perform disaster recovery procedures.
Domain 3: Deployment, Provisioning, and Automation
Task Statement 3.1: Provision and maintain cloud resources.
- Use tools like EC2 Image Builder to create and manage AMIs.
- Manage and troubleshoot AWS Cloud Formation.
- Provision resources across AWS Regions and accounts, using AWS Resource Access Manager (RAM), CloudFormation StackSets, and IAM cross-account roles.
- Choose deployment scenarios and services (e.g. blue/green, rolling, and canary).
- Address deployment difficulties (e.g., service quotas, subnet sizing, Cloud Formation errors, and permissions).
Task Statement 3.2: Automate manual or repeatable processes.
- Use AWS technologies like Systems Manager and CloudFormation to automate deployment operations.
- Implement automatic patch management.
- Schedule automated tasks utilizing AWS services, such as EventBridge,AWS Configuration.
Domain 4: Security and Compliance
Task Statement 4.1: Implement and manage security and compliance policies.
- Implement IAM features, including password policies, MFA, roles, SAML, federated identities, resource policies, and policy conditions.
- Use AWS services to troubleshoot and audit access issues, such as CloudTrail, IAM Access Analyzer, and IAM policy simulator.
- Validate service control policies (SCPs) and permission boundaries.
- Evaluate AWS Trusted Advisor security checks.
- Validate AWS region and service selections for compliance purposes.
- Use secure multi-account strategies (e.g., AWS Control Tower and AWS Organizations).
Task Statement 4.2: Implement data and infrastructure protection strategies.
- Implement data classification scheme.
- Create, manage, and safeguard encryption keys.
- Implement encryption at rest (e.g., AWS Key Management Service [AWS KMS])
- Implement encryption in transit (e.g., AWS Certificate Manager [ACM] or VPN).
- Use AWS services to securely store secrets (such as AWS Secrets Manager and Systems Manager Parameter Store).
- Examine reports or results (for example, AWS Security Hub, Amazon GuardDuty, AWS Config, and Amazon Inspector).
Domain 5: Networking and Content Delivery
Task Statement 5.1: Implement networking features and connectivity.
- Configure a VPC, including subnets, route tables, network ACLs, security groups, NAT gateway, and internet gateway.
- Configure private connectivity, including Systems Manager Session Manager, VPC endpoints, peering, and VPN.
- Configure AWS network protection services (such as AWS WAF and AWS Shield).
Task Statement 5.2: Configure domains, DNS services, and content delivery.
- Configure Route 53’s hosted zones and records.
- Implement Route 53 routing policies (e.g., geolocation and geo proximity).
- Configure DNS (such as Route 53 Resolver).
- Configure Amazon CloudFront and S3 Origin Access Control (OAC).
- Set up S3 static website hosting.
Task Statement 5.3: Troubleshoot network connectivity issues.
- Interpret VPC configurations, including subnets, route tables, network ACLs, and security groups.
- Analyze logs (e.g., VPC Flow Logs, ELB Access Logs, AWS WAF Web ACL Logs, CloudFront Logs).
- Address CloudFront caching concerns.
- Troubleshoot hybrid and private connectivity concerns.
Domain 6: Cost and Performance Optimization
Task Statement 6.1: Implement cost optimization strategies.
- Create cost allocation tags.
- Use AWS services and tools, such as Trusted Advisor, AWS Compute Optimizer, and AWS Cost Explorer, to identify and address underutilized or idle resources.
- Set up AWS budgets and billing alarms.
- Identify resource usage trends to qualify workloads for EC2 Spot Instances.
- Consider using managed services, such as Amazon RDS, AWS Fargate, and Amazon EFS.
Task Statement 6.2: Implement performance optimization strategies.
- Recommend compute resources based on performance measurements.
- Improve Amazon Elastic Block Store (Amazon EBS) performance by monitoring metrics and modifying configurations.
- Implement S3 performance features, such as Transfer Acceleration and multipart uploads.
- Optimize RDS performance by monitoring metrics and modifying configurations (e.g., Performance Insights, RDS Proxy).
- Enhance EC2 capabilities (e.g., Elastic Network Adapter, instance storage, and placement groups).
Training Locations
- Chennai: Classroom training at our state-of-the-art facility
- Online: Live virtual training sessions with expert instructors