Introduction xxvi Chapter 1 Understanding the Foundations of AWS Essential Characteristics of AWS Cloud Computing On-Demand Self-Service Broad Network Access Resource Pooling Rapid Elasticity Measured Service Moving to AWS Infrastructure as a Service (IaaS) Platform as a Service (PaaS) Operational Benefits of AWS Cloud Provider Limitations Security at AWS Network Security at AWS Application Security at AWS Playing in the AWS Sandbox Determining What Problem Needs to Be Solved Migrating Applications Applications That Can Be Moved to AWS and Hosted on an EC2 Instance with No Changes Applications with Many Local Dependencies That Cause Problems When Being Moved to the Cloud Replacing an Existing Application with a SaaS Application Hosted by a Public Cloud Provider Applications That Should Remain on Premises and Eventually Be Deprecated The AWS Well-Architected Framework The Well-Architected Tool In Conclusion Chapter 2 Designing Multi-Tier Architecture Solutions "Do I Know This Already?" Quiz Foundation Topics Availability and Reliability Availability in the Cloud Reliability AWS Regions and Availability Zones Availability Zones Availability Zone Distribution Multiple Availability Zones Choosing a Region Compliance Rules Understanding Compliance Rules at AWS The Shared Responsibility Model AWS and Compliance HIPAA NIST GovCloud Latency Concerns Services Offered in Each AWS Region Calculating Costs Multi-Tier Architecture Solutions Resilient VPC Architecture Design Problems to Overcome Multi-Tier Data Redundancy Protecting Against Application Failure AWS Global Services: Edge Locations Services Located at the Edge Route 53 AWS Shield (Standard and Advanced) Web Application Firewall (WAF) CloudFront AWS Lambda@Edge AWS Service Quotas Exam Preparation Tasks Chapter 3 Highly Available and Fault-Tolerant Architectures "Do I Know This Already?" Quiz Foundation Topics Comparing Architecture Designs Designing for High Availability Adding Fault Tolerance Removing Single Points of Failure Disaster Recovery and Business Continuity Backup and Restoration Pilot Light Solution Warm Standby Solution Hot Site Solution Multi-Region Active-Active Application Deployment The AWS Service-Level Agreement (SLA) Automating AWS Architecture Automating Infrastructure with CloudFormation CloudFormation Components CloudFormation Templates CloudFormation Stacks CloudFormation Stack Sets Third-Party Solutions AWS Service Catalog Elastic Beanstalk Updating Elastic Beanstalk Applications Deployment Methodologies Rule 1: Use One Codebase That Is Tracked with Version Control to Allow Many Deployments AWS CodeCommit Rule 2: Explicitly Declare and Isolate Dependencies Rule 3: Store Configuration in the Environment Rule 4: Treat Backing Services as Attached Resources Rule 5: Separate the Build and Run Stages Rule 6: Execute an App as One or More Stateless Processes Rule 7: Export Services via Port Binding Rule 8: Scale Out via the Process Model Rule 9: Maximize Robustness with Fast Startup and Graceful Shutdown Rule 10: Keep Development, Staging, and Production as Similar as Possible Rule 11: Treat Logs as Event Streams Rule 12: Run Admin/Management Tasks as One-Off Processes Exam Preparation Tasks Chapter 4 Decoupling Mechanisms Using AWS Services "Do I Know This Already?" Quiz Foundation Topics Stateful Design Changing User State Locations User Session Management Application Integration Services Amazon SNS SNS Cheat Sheet Amazon SQS SQS Cheat Sheet AWS Step Functions Lambda Lambda Cheat Sheet API Gateway API Gateway Cheat Sheet Building a Serverless Web App Step 1: Create a Static Website Step 2: Handle User Authentication Step 3: Create the Serverless Backend Components Step 4: Set Up the API Gateway Step 5: Register for Conference Exam Preparation Tasks Chapter 5 Choosing Resilient Storage Do I Know This Already? Foundation Topics AWS Storage Options Workload Storage Requirements Elastic Block Storage (EBS) EBS Volume Types General-Purpose SSD (gp2/gp3) Elastic Volumes Attaching an EBS Volume EBS Cheat Sheet EBS Snapshots Taking a Snapshot from a Linux Instance Taking a Snapshot from a Windows Instance Snapshot Administration Snapshot Cheat Sheet Local Instance Storage Elastic File System (EFS) EFS Performance Modes EFS Throughput Modes EFS Security EFS Lifecycle Management EFS DataSync EFS Cheat Sheet FSx for Windows File Server Simple Storage Service (S3) Buckets, Objects, and Keys S3 Data Consistency S3 Storage Classes S3 Management Versioning Amazon S3 Access Points S3 Cheat Sheet S3 Glacier Storage Options S3 Glacier Vaults and Archives S3 Glacier Deep Archive Glacier Cheat Sheet Exam Preparation Tasks Chapter 6 Designing High-Performing Compute Architecture Do I Know This Already? Foundation Topics EC2 Instances Instance Families What Is a vCPU? EC2 Instance Choices Micro Instances General-Purpose Instances Instances Designed to Burst Compute-Optimized Instances Memory-Optimized Instances x1 Instances High-Memory Instances z1d Instances Accelerated Computing Instances g3 Instances f1 Instances Storage-Optimized Instances Bare-Metal Instances Dedicated Hosts Dedicated Hosts Cheat Sheet Dedicated Instances EC2 Network Performance Using Launch Templates Changing the Current Instance Type Amazon Lightsail Amazon Machine Images (AMIs) Choosing an AMI AWS Linux AMIs Windows AMIs AMIs at AWS Marketplace Creating a Custom AMI Instance Store-Backed Windows or Linux AMIs Custom Instance Store AMIs AMI Build Considerations Elastic Container Service (ECS) Amazon Elastic Container Service (ECS) AWS Fargate AWS ECS for Kubernetes (EKS) Monitoring with CloudWatch CloudWatch Basic Monitoring CloudWatch Logs Collecting Data with the CloudWatch Agent Planning for Monitoring CloudWatch Integration CloudWatch Terminology Creating a CloudWatch Alarm Additional Alarm and Action Settings CloudWatch Cheat Sheet Elastic Load Balancing (ELB) Services Redundancy in Design Health Checks ELB Cheat Sheet Classic Load Balancer (CLB) Application Load Balancer (ALB) Target Groups ALB Cheat Sheet Big-Picture Steps: ALB Creation Rule Choices HTTPS Listener Security Settings Target Group Routing Target Group Attributes Maintaining User Sessions Sticky Session Support Configuring Health Checks ALB Security Monitoring Load Balancer Operation CloudWatch Access Logs Network Load Balancer NLB Cheat Sheet EC2 Auto Scaling EC2 Auto Scaling Cheat Sheet EC2 Auto Scaling Operation Launch Configuration Launch Templates Auto Scaling Groups (ASGs) Scaling Options for Auto Scaling Groups Cooldown Period Termination Policy Lifecycle Hooks Exam Preparation Tasks Chapter 7 Choosing High-Performing and Scalable Storage Solutions Do I Know This Already? Foundation Topics Elastic Block Storage (Provisioned IOPS) io1 and io2 Storage-Optimized EC2 Instances Shared File Storage at AWS Elastic File System (EFS) EFS Performance Modes Storage Classes EFS Throughput Modes EFS Security EFS Cheat Sheet Storage Options Compared Amazon FSx for Windows File Server FSx File System Performance FSx Cheat Sheet FSx for Lustre FSx for Lustre Cheat Sheet AWS Data Transfer Options AWS Storage Gateway Family AWS Storage Gateway Cheat Sheet Exam Preparation Tasks Chapter 8 Selecting Networking Solutions for Workloads Do I Know This Already? Foundation Topics VPC Networking Partnering with AWS VPC Cheat Sheet To Host or to Associate? What''s Behind the Networking Curtain? It''s All About Packet Flow The Mapping Service Creating a VPC Using the Create VPC Wizard Using the Launch VPC Wizard Using the AWS CLI to Create a VPC How Many VPCs Do You Need? Creating the VPC CIDR Block Planning Your Primary VPC CIDR Block Adding a Secondary CIDR Block The Default VPC Revisiting Availability Zones Subnets Subnet Cheat Sheet Route Tables The Main Route Table Custom Route Tables Route Table Summary Route Table Cheat Sheet IP Address Types Private IPv4 Addresses Private IP Address Summary Public IPv4 Addresses Elastic IP Addresses Public IPv4 Address Cheat Sheet Inbound and Outbound Traffic Charges Bring-Your-Own IP (BYOIP) The BYOIP Process IPv6 Addresses Security Groups Security Group Cheat Sheet Custom Security Grou.