Integerous DevLog

AWS 자격증 공부법

2018/08/25

AWS Certified Solution Architect Associate 자격증 준비 방법과 과정을 기록
모든 자료는 중요하고 유용한 순서로 정렬함.

Index

0. 내가 정한 학습 순서
1. 필수 학습 자료
2. 추가 학습 자료
3. 합격 후기 모음
4. 기타 링크
5. 필수 학습 주제

0. 내가 정한 학습 순서

0.1. 준비

  1. AWS 용어 알아보기 를 통해 AWS 서비스들을 개략적으로 이해

0.2. 얕고 빠른 학습

‘얕고 빠른 학습’ 단계에서는 여러 리소스에서 공부한 내용들을 하나의 서비스명.md (예를 들어 EC2.md) 파일에 정리.

  1. 비공식 AWS SAA 수험가이드에 정리된 Domain 별 목차를 보고 학습할 파트 결정 (시험은 5개의 Domain으로 나뉘어 있고, 이 Domain 순서에 따라 학습하는 것이 가장 효율적)
  2. 해당 파트를 아마존 웹 서비스를 다루는 기술에서 먼저 읽고 이해하기
  3. AWS 공식 설명서에서 해당 파트 학습
  4. 해당 파트의 강의를 A Cloud Guru CSAA 강의에서 듣기
  5. Jayendra’s Blog의 해당 파트 노트를 읽고, 노트 마지막에 포함된 관련 문제들 풀어보기
  6. ‘얕고 빠른 학습’ 단계 시작부터 작성해온 각 파트 정리 파일(서비스명.md) 마무리

0.3. 시험 대비 학습

  1. AWS FAQs로 빠르게 복습하기
  2. A Cloud Guru CSAA 강의의 퀴즈 풀기
  3. A Cloud Guru CSAA 연습문제 강의의 문제 풀기
  4. 덤프 문제집 + 정답체크 사이트로 시험 대비
  5. Jayendra’s Blog에서 Cheet Sheet 및 내용 정리보고 부족한 부분 점검하기

0.4. 상시 학습

  1. AWS 공식 한국 블로그 - 매일 아침 신문 읽듯이 방문
  2. AWS This is my architecture - 실제 AWS 사용 기업들의 아키텍쳐를 8분 이내의 동영상에서 도표를 통해 설명. 공부하다 지칠 때 방문.
  3. A Cloud Guru 수강생들 시험 후기 - 시험 내용에 대한 후기가 많으므로 시간 역순으로 참고.

1. 필수 학습 자료

2. 추가 학습 자료

3. 합격 후기 모음 (유용한 순서로 정렬)

4. 기타 링크

5. 필수 학습 주제

Networking

  1. Be sure to create VPC from scratch. This is mandatory.
    • Create VPC and understand whats an CIDR.
    • Create public and private subnets, configure proper routes, security groups, NACLs.
    • Create Bastion for communication with instances
    • Create NAT Gateway or Instances for instances in private subnets to interact with internet
    • Create two tier architecture with application in public and database in private subnets
    • Create three tier architecture with web servers in public, application and database servers in private.
    • Make sure to understand how the communication happens between Internet, Public subnets, Private subnets, NAT, Bastion etc.
  2. Understand VPC endpoints and what services it can help interact
  3. Understand difference between NAT Gateway and NAT Instance
  4. Understand how NAT high availability can be achieved
  5. Understand CloudFront as CDN and the static and dynamic caching it provides, what can be its origin (it can point to on-premises sources)
  6. Understand Route 53 for routing, health checks and various routing policies it provides and their use cases mainly for high availability
  7. Be sure to cover ELB in deep. AWS has introduced ALB and NLB and there are lot of questions on ALB
  8. Understand ALB features with its ability for content based and URL based routing with support for dynamic port mapping with ECS

Storage

  1. Understand various storage options S3, EBS, Instance store, EFS, Glacier and what are the use cases and anti patterns for each
  2. Would recommend referring Storage Options whitepaper, although a bit dated 90% still holds right
  3. Understand various EBS volume types and their use cases in terms of IOPS and throughput. SSD for IOPS and HDD for throughput
  4. Understand Burst performance and I/O credits to handle occasional peaks
  5. Understand S3 features like different storage classes with lifecycle policies, static website hosting, versioning, Pre-Signed URLs for both upload and download, CORS
  6. Understand Glacier as an archival storage with various retrieval patterns
  7. Glacier Expedited retrieval now allows object retrieval within mins
  8. Understand Storage gateway and its different types

Compute

  1. Understand EC2 as a whole
  2. Understand Auto Scaling and ELB, how they work together to provide High Available and Scalable solution
  3. Understand EC2 various purchase types – Reserved, On-demand and Spot and their use cases
  4. Understand Reserved purchase types with the introduction of Scheduled and Convertible types
  5. Understand Lambda and serverless architecture, its features and use cases. How do you benefit from Lambda?
  6. Understand ECS with its ability to deploy containers and micro services architecture
  7. Know Elastic Beanstalk at a high level, what it provides and its ability to get an application running quickly

Databases

  1. Understand relational and NoSQLs data storage options which include RDS, DynamoDB, Aurora and their use cases
  2. Aurora has been added to the exam and most of time the questions refer to Aurora given its abilities for multiple read replicas and replication of data across AZs
  3. Understand S3 is not a storage option for database
  4. Understand RDS features – Read Replicas for scalability, Multi-AZ for High Availability, Automated Backups, underlying volume types
  5. Understand DynamoDB with its low latency performance, DAX
  6. Understand DynamoDB provisioned throughput for Read/Writes
  7. Know ElastiCache use cases, mainly for caching performance

Analytics

  1. Not much in deep, but understand what the services are and what they can do
  2. Understand Redshift as a business intelligence tool
  3. Know Kinesis for real time data capture and analytics
  4. Atleast know what AWS Glue does, so you can eliminate the answer

Security

  1. Understand IAM as a whole
  2. Focus on IAM role and its use case especially with EC2 instance
  3. Understand IAM identity providers and federation and use cases
  4. Understand MFA and How would implement two factor authentication for your application
  5. Understand encryption services
    • KMS for key management and envelope encryption
    • Focus on S3 with SSE, SSE-C, SSE-KMS
    • Know SQS now provides SSE support
  6. Refer Disaster Recovery whitepaper, be sure you know the different recovery types with impact on RTO/RPO.

Management Tools

  1. Understand CloudWatch monitoring to provide operational transparency
  2. Know which EC2 metrics it can track. Remember, it cannot track memory and disk space/swap utilization
  3. Understand CloudWatch is extendable with custom metrics
  4. Understand CloudTrail for Audit
  5. Have a basic understanding of CloudFormation, OpsWorks

Integration Tools

  1. Understand SQS as message queuing service and SNS as pub/sub notification service
  2. Understand SQS features like visibility, long poll vs short poll
  3. Focus on SQS as a decoupling service
  4. AWS has released SQS FIFO, make sure you know the differences between standard and FIFO

* Reference

본문 각 링크 참조