Covers implementing metrics, alarms, and filters using AWS monitoring and logging services, identifying and remediating issues using monitoring and availability metrics, and implementing performance optimization strategies for compute, storage, and database resources.

• Implement metrics, alarms, and filters by using AWS monitoring and logging services

  Configure and manage AWS monitoring and logging services including CloudWatch, CloudTrail, and Prometheus to collect metrics, set alarms, and create dashboards.

• Identify and remediate issues by using monitoring and availability metrics

  Analyze performance metrics and automate remediation strategies using AWS services, use EventBridge for event routing, and leverage Systems Manager Automation runbooks.

• Implement performance optimization strategies for compute, storage, and database resources

  Optimize compute, EBS, S3, shared storage, RDS, and EC2 resources using performance metrics, appropriate configurations, and AWS tools.

Covers implementing scalability and elasticity, building highly available and resilient environments, and implementing backup and restore strategies to ensure business continuity.

• Implement scalability and elasticity

  Configure and manage scaling mechanisms for compute environments, implement caching, and manage scaling in AWS managed databases.

• Implement highly available and resilient environments

  Configure and troubleshoot Elastic Load Balancing and Route 53 health checks, and configure fault-tolerant systems using Multi-AZ deployments.

• Implement backup and restore strategies

  Automate snapshots and backups, restore databases to meet RTO/RPO requirements, implement versioning, and follow disaster recovery procedures.

Covers provisioning and maintaining cloud resources using IaC tools, and automating the management of existing resources through event-driven and operational automation.

• Provision and maintain cloud resources

  Create and manage AMIs, container images, CloudFormation stacks, CDK applications, and implement deployment strategies across multiple accounts and regions.

• Automate the management of existing resources

  Use AWS services to automate operational processes and implement event-driven automation using Lambda and S3 Event Notifications.

Covers implementing and managing security and compliance tools and policies, and implementing strategies to protect data and infrastructure on AWS.

• Implement and manage security and compliance tools and policies

  Implement IAM features, troubleshoot access issues, implement multi-account strategies, use Trusted Advisor, and enforce compliance requirements.

• Implement strategies to protect data and infrastructure

  Implement data classification, encryption at rest and in transit, secrets management, and configure security findings from GuardDuty, Security Hub, Config, and Inspector.

Covers implementing and optimizing networking features and connectivity, configuring domains and DNS services, and troubleshooting network connectivity issues.

• Implement and optimize networking features and connectivity

  Configure VPCs, private networking connectivity, audit network protection services, and optimize network architecture costs.

• Configure domains, DNS services, and content delivery

  Configure DNS using Route 53 Resolver, implement Route 53 routing policies, and configure content distribution using CloudFront and Global Accelerator.

• Troubleshoot network connectivity issues

  Troubleshoot VPC configurations, collect and interpret networking logs, identify CloudFront caching issues, troubleshoot hybrid connectivity, and analyze CloudWatch network monitoring.