Entry-level certification to understand AWS Cloud basics.

Replacing an existing EC2 instance with a larger, more powerful one.

Increasing the compute capacity of a single EC2 instance to address the growing demands of an application.

Adding more RAM capacity to an EC2 instance.

Adding more EC2 instances of the same size to handle an increase in traffic.

Applying the principle of least privilege to all AWS resources.

Automatically provisioning new resources to meet demand.

All AWS services are considered Global Services, and this design helps customers serve their international users.

Providing compensation to customers if issues occur.

Ability to recover quickly from failures.

Responsibilities vary depending on the services used.

Security of the IaaS services is the responsibility of AWS.

Patching the guest OS is always the responsibility of AWS.

Security of the managed services is the responsibility of the customer.

The Reserved Instance discounts can only be shared with the master account.

All accounts can receive the hourly cost benefit of the Reserved Instances.

The purchased instances will have better performance than On-demand instances.

There are no cost benefits from using consolidated billing; It is for informational purposes only.

Deploy the application across multiple Availability Zones and Edge locations.

Deploy the application across multiple Availability Zones and subnets.

Deploy the application across multiple Regions and Availability Zones.

Deploy the application across multiple VPC’s and subnets.

Built-in computing capabilities that allow customers to process data locally.

A catalog of third-party software solutions that customers need to build solutions and run their businesses.

A hybrid cloud storage between on-premises environments and the AWS Cloud.

An Exabyte-scale data transfer service that allows you to move extremely large amounts of data to AWS.

Secure transfer of large amounts of data into and out of the AWS.

Applying the Amazon Connect latency-based routing policy.

Registering a new US domain name to serve the users in the US.

Building a new data center in the US and implementing a hybrid model.

Deploying new Amazon EC2 instances in a Region located in the US.

Gaining complete control over the physical infrastructure

Operating applications on behalf of customers

All of the physical security and most of the data/network security are taken care of for you

Allows treating an application as a single, cohesive unit.

Reduces inter-dependencies so that failures do not impact other components of the application.

Allows updates of any monolithic application quickly and easily.

Allows tracking of any API call made to any AWS service.

AWS services’ costs will be reduced to half the original price.

The consolidated billing feature is just for organizational purpose.

Each AWS account gets five times the free-tier services capacity.

Regularly update firmware on EBS devices.

Ensure that EBS data is encrypted at rest.

Store a backup daily in an external drive.

Prevent any unauthorized access to AWS data centers.

By automatically scaling your on-premises resources based on changes in demand.

By automatically scaling your AWS resources using an Elastic Load Balancer.

By reducing interdependencies between application components wherever possible.

By automatically provisioning the required AWS resources based on changes in demand.

Setup a CloudWatch billing alarm that triggers an SNS notification when the threshold is exceeded.

Configure the Amazon Simple Email Service to send billing alerts to their email address on a daily basis.

Configure the AWS Budgets Service to alert the company when the threshold is exceeded.

Configure AWS CloudTrail to automatically delete all AWS resources when the threshold is exceeded.

Configure the Amazon Connect Service to alert the company when the threshold is exceeded.

You should grant your users only the permissions they need when they need them and nothing more.

All IAM users should have at least the necessary permissions to access the core AWS services.

All trusted IAM users should have access to any AWS service in the respective AWS account.

IAM users should not be granted any permissions; to keep your account safe.

AWS Identity and Access Management (IAM) user

Infrastructure Event Management (IEM) engineer

A MySQL database installed on an EC2 instance

Detailed troubleshooting guidance to address AWS events impacting your resources.

Health checks for Auto Scaling instances.

A dashboard detailing vulnerabilities in your applications.

Amazon S3 provides unlimited storage for any type of data.

Amazon S3 can run any type of application or backend system.

Amazon S3 stores any number of objects, but with object size limits.

Amazon S3 can be scaled manually to store and retrieve any amount of data from anywhere.

Amazon S3 provides 99.999999999% (11 9’s) of data durability.

Controlling physical access to compute resources.

Azure Fundamental