---
# System prepended metadata

title: 'CPE BeSA [Proposed Curriculum]'

---

# AWS Certified Cloud Practitioner 
**Proposed Curriculum for BeSA**


[toc]

----
### Important Links
----
:::info
- [Digital Version of Cloud Practitioner Essentials Course](https://explore.skillbuilder.aws/learn/course/external/view/elearning/134/aws-cloud-practitioner-essentials)
- [AWS Cloud Quest: Cloud Practitioner](https://explore.skillbuilder.aws/learn/course/external/view/elearning/11458/aws-cloud-quest-cloud-practitioner)
- [AWS Cloud Quest: Recertify Cloud Practitioner](https://explore.skillbuilder.aws/learn/course/external/view/elearning/17623/aws-cloud-quest-recertify-cloud-practitioner)
- [AWS Rampup Guides](https://aws.amazon.com/training/ramp-up-guides/)
- [AWS Certification Home Page](https://aws.amazon.com/certification/)
- [AWS Certified Cloud Practitioner Certification](https://aws.amazon.com/certification/certified-cloud-practitioner/)
- [AWS Digital Courses - Skill builder](https://explore.skillbuilder.aws/learn) 
- [AWS Trainings and Webinars](https://aws.amazon.com/training/events/)
:::

## Week 1
---
### [Introduction to AWS Certifications](https://aws.amazon.com/certification/)
---
---
### [Introduction to Cloud Computing](https://aws.amazon.com/what-is-aws/)
---
#### [Cloud Deployment Models](https://aws.amazon.com/types-of-cloud-computing/)

:::success
- Cloud
- On-premises
- Hybrid Cloud
:::

#### [AWS Global Infrastructure](https://aws.amazon.com/about-aws/global-infrastructure/)
:::success
- Regions | Cluster of 3 or more AZ | 31 Regions
- Availability Zones - Cluster of DCs | 95+ AZs
- Edge Locations | CDN | Web Content caching | 410+ PoPs
- Amazon Backbone Network | Low latency High speed physical cables connecting AWS DCs
- AWS Outposts | Run your workload on AWS from within your Data Centres
:::

#### [AWS Service interaction can be via:](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/accessing-aws-services.html)
:::success
- Console (GUI)
- AWS CLI (Command line)
- SDK (Programmatic Access)
:::
#### AWS Service Scope can be:
:::success
- Global      - IAM, Route53
- Regional    - VPC, DynamoDB
- AZ Specific - EC2, EBS, Subnets
:::

#### AWS Services can be:
:::success
- Managed --> DynamoDB, S3, VPC
- Unmanaged --> EC2, EBS
:::
#### AWS Service limits/Quotas can be:
:::success
- Hard limits --> Cannot be changed
- Soft Limits --> Can be changed
:::

:arrow_right: *Use "**Service Quotas**" to check your account specific Limits*

----
### [Compute on AWS](https://aws.amazon.com/products/compute/)
----
#### Compute Services
:::info
- Virtual Machines
    - EC2
- Containers
    - ECS
    - EKS
- Serverless
    - Lambda
:::
#### EC2 Nomenclature
:::info
m5.xlarge
m     --> Family
5     --> Generation
xlarge--> Size (vCPU / Memory / Network bandwidth)
:::

**Compute Evolution**
:::success
````
Physical Machines --> Virtual Machines  ---> Containers 
                                        ---> Serverless
````
:::


#### EC2 Pricing Options
:::info
- On Demand
- Spot (Upto 90% discounts over Ondemand)
- Commitment based ((upto 70% discounts over on demand)
    - Reserved | 1 or 3 year contract | No Upfront, Partial Upfront, Full Upfront
    - Savings Plans | 1 or 3 year contract | No Upfront, Partial Upfront, Full Upfront
- Hardware Isolation
    - Dedicated Instance
    - Dedicated Hosts
:::

---
#### [Containers on AWS](https://aws.amazon.com/containers/)
---
:::warning
##### Container Runtimes
- Docker
- Runc
- CRI-O
- Podman
- Containerd

##### Container Orchestration Engines
- Kubernetes (based on Borg at Google) | Open sourced in 2015
- OpenShift
- Apache Mesosphere
- Docker Swarm

##### [Docker Architecture](https://docs.docker.com/get-started/overview/)
  - Docker Daemon
  - Docker Host
  - Docker Containers (EC2)
  - Docker Images (AMI)
  - Registry
      - Public 
        - [Docker Hub](hub.docker.com)
      - Private
        - [Amazon ECR](https://aws.amazon.com/ecr/)
:::

#### Container Services on AWS
:::warning
- [Amazon ECS](https://aws.amazon.com/ecs/) | Proprietory Amazon Engine
- [Amazon EKS](https://aws.amazon.com/eks/) | hosted Kubernetes Engine
- [AWS Fargate](https://aws.amazon.com/fargate/) | Serverless Container workloads
:::

#### [Load Balancing on AWS](https://aws.amazon.com/elasticloadbalancing/)

:::warning
- Elastic Load Balancer (ELB)
    - ALB | Application Layer | Layer 7 | http and https | Content or Path based routing
    - NLB | Layer 4 | tcp, udp, tls | IP based routing
    - GLB | Layer 3/4 | IP filtering | security appliance integration
    - CLB | Layer 4/7 | Legacy LB | Works with EC2 classic Network
:::

#### [EC2 Auto Scaling](https://aws.amazon.com/ec2/autoscaling/)
:::warning
- EC2 Auto Scaling Components
    - Launch Template
    - Auto Scaling Group
    - Auto Scaling Policies
        - Scheduled
        - Dynamic
            - Simple
            - Step scaling
            - Target tracking
        - Predictive
:::

## Week 2

----
### [Security in AWS](https://aws.amazon.com/products/security/)
----
:::warning
- [Shared Responisbility Model](https://aws.amazon.com/compliance/shared-responsibility-model/)
- IAM
  - Users
  - Groups
  - Policies
  - Roles
      - Temporary elevated privileges
      - Federated access
      - Applications accessing resources
- Other Services
    - AWS Organizations
    - AWS Artifact
    - WAF and Shield
    - Amazon Inspector
    - AWS KMS
    - Amazon GuardDuty
:::

---
### [Networking on AWS](https://aws.amazon.com/products/networking/)
---
:::warning
- **AWS Account**
    - Region
        - VPC 
            - Subnets (Public or Private)
                - Resources (Webservers, Databases etc.)
            - Internet Gateway
            - NAT Gateway
    
    **Security**
    - Security Groups
        - Firewall at the instance level
        - Default: All incoming blocked; all outgoing allowed
        - Stateful packet filtering
    - NACL
        - Firewall at the subnet level
        - Default: All incoming/outgoing allowed
        - Stateless packet filtering

- **Hybrid Connectivity**
    - VPN
    - Virtual Private Gateway (VGW)
    - Direct Connect
:::


## Week 3

---
### [Storage on AWS](https://aws.amazon.com/products/storage/)
---
:::warning
- Object Storage
    - S3 | Internet accessible unlimited storage | Accessed via API calls | Pay for what you use
        - Versioning
        - Storage Classes
        - 99.999999999%
        - 5TB max file/object size
        - 100 Buckets per account

- Block Storage | Attach to an instance
    - EBS | Persistent Block Storage | SAN | Pay for what you provision
        - SSD Based
            - Provisioned IOPS
            - General Purpose SSD
        - HDD Based
            - throughput Optimized HDD
            - Cold HDD
    - Instance Store | Ephemeral Block Storage | DAS
- File/Network Storage (NAS) | Mount the file system to an instance | Pay for what you use
    - EFS | Linux Workloads | NFS 4.0 and 4.1
:::
**Analogies to understand storage solutions**
:::info
Block   --> C:\, D:\ 
Object  --> C:\myfiles, D:\officedocs
Network --> K:\, G:\, Z:\ (NTFS, CIFS, SMB, NFS)
:::

---
### [Databases on AWS](https://aws.amazon.com/products/databases/)
---
**Relational**
:::warning
- RDS DB Engines
    - MySQL
    - MS SQL
    - Oracle
    - PosgreSQL
    - Maria DB
    - Amazon Aurora
    - IBM Db2
- RDS Features
    - Multi-AZ (Synchronous Replication) --> High Availablity
    - Read replicas (Asynchronous Replication) --> Performance Benefit
    - Automated backups (Upto 35 Days retention)
    - Database Sharding (For Performance benefits)
:::  

**Non Relational**
:::warning
- DynamoDB
    - Fully Managed non-relational DB service
    - Global Tables
    - Eventually and Strongly consistency models
    - Extreme horizontal scaling capacity
- DocumentDB [MongoDB_compatible]
- Keyspaces [Managed_Apache_Cassandra]
:::
**Other Purpose-Built Databases**

:::warning
- Redshift [Data_warehousing]
- Elasticache [Database_Caching]
    - Redis
    - Memcached
- Neptune [Graph_Database]
- Amazon QLDB [HyperLedger/Blockchain]
- Amazon Timestream [Time_Series]
:::

## Week 4

----
### [Monitoring and Observability](https://aws.amazon.com/cloudops/monitoring-and-observability/)
---
:::warning
- CloudWatch
    - Basic Monitoring (5 Minutes granularity, Free)
    - Detailed Monitoring (1 Minute Granularity, Addtional charges apply)
- CloudTrail
- AWS Trusted Advisor
:::
----
### [AWS Pricing and Cost Management](https://aws.amazon.com/aws-cost-management/)
---
:::warning
- AWS Free Tier
- AWS Cost Explorer
- AWS Pricing Calculator
- Consolidated Billing
- AWS Budgets
- AWS Support Plans
    - Developer
    - Business
    - Enterprise
- AWS Marketplace
:::

---
### Other AWS Services
---
#### [Decoupling on AWS](https://aws.amazon.com/messaging/)
:::warning
- SNS
    - Email
    - SMS
    - http 
    - Chat
- Messaging Queue
    - SQS
    - Amazon MQ
- ELB
:::

#### [IaC on AWS](https://aws.amazon.com/what-is/iac/)
:::warning
- [CloudFormation](https://aws.amazon.com/cloudformation/)
- [AWS CDK](https://aws.amazon.com/cdk/)
:::

#### [Migration and other Concepts](https://aws.amazon.com/free/migration/)

:::warning
- [AWS CAF](https://aws.amazon.com/professional-services/CAF/)
- [7 Rs of migration](https://docs.aws.amazon.com/prescriptive-guidance/latest/large-migration-guide/migration-strategies.html)
- [AWS Snow Family](https://aws.amazon.com/snow/)
- [AWS Well Architected Framework](https://aws.amazon.com/architecture/well-architected/)
:::


---
## References
---
:::info
https://aws.amazon.com/ec2/nitro/
https://aws.amazon.com/free/
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-volume-types.html
https://aws.amazon.com/s3/storage-classes/
https://aws.amazon.com/s3/pricing/
https://d1.awsstatic.com/whitepapers/aws-tagging-best-practices.pdf
https://aws.amazon.com/compliance/services-in-scope/
https://aws.amazon.com/compliance/
https://d1.awsstatic.com/whitepapers/Security/AWS_Security_Best_Practices.pdf
https://aws.amazon.com/premiumsupport/plans/
https://aws.amazon.com/compliance/shared-responsibility-model/
https://docs.aws.amazon.com/whitepapers/latest/aws-best-practices-ddos-resiliency/aws-best-practices-ddos-resiliency.pdf
https://calculator.aws/#/
https://aws.amazon.com/compliance/
https://aws.amazon.com/professional-services/CAF/
https://d1.awsstatic.com/whitepapers/aws-caf-ebook.pdf
https://aws.amazon.com/blogs/enterprise-strategy/6-strategies-for-migrating-applications-to-the-cloud/
https://aws.amazon.com/architecture/well-architected/
:::

**Containerization**
:::info
- **Basic Level:**
https://docker-curriculum.com/
https://training.play-with-docker.com/

- **Intermediate Level:**
https://ecsworkshop.com/
https://www.eksworkshop.com/
:::


:::danger
:warning: *Disclaimer: This document is for informational purposes only and is based on BeSA member's understanding, knowledge and experience. This is **not** an official AWS documentation.*
:::