Domain 3 - Cloud Technology and Services (34%)

Index of notes that fall under Domain 3 — the biggest domain, and mostly service identification. Task statements come from the exam guide; a note can appear in more than one domain.

3.1 — Methods of deploying and operating

• Access methods: AWS Management Console, AWS CLI, AWS CloudShell, AWS Cloud9
• Repeatable provisioning: infrastructure as code, AWS CloudFormation, AWS Service Catalog, AWS Launch Wizard, AWS Systems Manager
• Deployment Models: Public, Private, Hybrid Cloud, Multicloud, on-premises
• Connectivity: AWS VPN (AWS Site-to-Site VPN, AWS Client VPN), AWS Direct Connect, AWS PrivateLink, public internet

3.2 — AWS global infrastructure

• Global Infrastructure: Regions, Availability Zones, edge locations
• High Availability — multi-AZ removes the single point of failure
• Edge and near-edge: Amazon CloudFront, AWS Global Accelerator, AWS Local Zones, AWS Wavelength, AWS Outposts

3.3 — Compute services

• Compute — control vs abstraction across the compute options
• Amazon EC2
  • Amazon EC2 Instances: General Purpose (T3), Compute Optimized (C5), Memory Optimized (R5a), Storage Optimized (D2), Accelerated Computing (F1)
  • Amazon Machine Image (AMI), EC2 Instance store, ephemeral
• Other compute: Amazon Lightsail, AWS Elastic Beanstalk, AWS Batch
• Scaling: Amazon EC2 Auto Scaling, AWS Auto Scaling, Elasticity
• Containers: Amazon Elastic Container Service (ECS), Amazon Elastic Kubernetes Service (EKS), Amazon Elastic Container Registry (ECR)
• Serverless: AWS Lambda, AWS Fargate
• load balancers: Application Load Balancer (ALB), Network Load Balancer (NLB), Gateway Load Balancer (GWLB), Classic Load Balancer

3.4 — Database services

• Database — picking by data shape
• Relational: Amazon RDS, Amazon Aurora
• NoSQL and purpose-built: Amazon DynamoDB, Amazon MemoryDB for Redis, Amazon Neptune
• Migration tools: AWS DMS (Database Migration Service), AWS SCT (Schema Conversion Tool)

3.5 — Network services

• Networking and Content Delivery
• Amazon VPC — subnets, gateways; secured with security groups and network ACLs
• Amazon Route 53 — DNS
• Edge: Amazon CloudFront, AWS Global Accelerator
• API and private connectivity: Amazon API Gateway, AWS PrivateLink, AWS Direct Connect, AWS VPN

3.6 — Storage services

• Storage — object vs block vs file
• Object: Amazon S3
  • Classes: S3 Standard, S3 Standard-IA, S3 One Zone-IA, S3 Intelligent-Tiering, S3 Express One Zone
  • Archive: Amazon S3 Glacier — S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, S3 Glacier Deep Archive
  • lifecycle policies: Transition, Expiration
• Block: Amazon Elastic Block Store (EBS), Amazon Data Lifecycle Manager, EC2 Instance store
• File: Amazon Elastic File System (EFS), Amazon FSx
• Hybrid and protection: AWS Storage Gateway (S3 File Gateway, FSx File Gateway, Volume Gateway, Tape Gateway), AWS Backup, AWS Elastic Disaster Recovery

3.7 — AI/ML and analytics services

• Concepts: AI, What is Deep Learning, What is Generative AI
• Pre-built AI services
  • Language: Amazon Comprehend, Amazon Polly, Amazon Transcribe, Amazon Translate
  • Computer Vision and Search: Amazon Rekognition, Amazon Textract, Amazon Kendra
  • Conversational AI and Personalization: Amazon Lex, Amazon Personalize
• ML platform: Amazon SageMaker AI, Amazon SageMaker JumpStart
• Generative AI: Amazon Bedrock, Amazon Q
• Tier 3 - ML Frameworks and Infrastructure: ML Frameworks, AWS ML Infrastructure
• Data Pipelines — ingest → process → catalog → analyze → visualize
  • Data Ingestion Services: Amazon Kinesis, Amazon Kinesis Data Streams, Amazon Data Firehose, Amazon Managed Streaming for Apache Kafka (Amazon MSK)
  • Data Processing Services: AWS Glue, Amazon EMR, AWS Glue Data Catalog
  • Data Analysis: Amazon Athena, Amazon Redshift
  • Visualization: Amazon QuickSight, Amazon OpenSearch Service
  • AWS Data Exchange — third-party data sets

3.8 — Other in-scope service categories

• Application integration: Communication Between Services, Amazon EventBridge, Amazon Simple Notification Service (SNS), Amazon Simple Queue Service (SQS), AWS Step Functions
• Business Productivity: Amazon Connect, Amazon Simple Email Service (SES)
• Customer Engagement: AWS Activate for Startups, AWS IQ, AWS Managed Services (AMS), AWS Support (plans are Domain 4)
• Developer Tools: AWS AppConfig, AWS CodeArtifact, AWS CodeBuild, AWS CodeCommit, AWS CodeDeploy, AWS CodePipeline, AWS CodeStar, AWS X-Ray, Amazon CodeWhisperer
• End-User Computing: Amazon WorkSpaces, Amazon WorkSpaces Web, Amazon AppStream 2.0
• Frontend Web and Mobile: AWS Amplify, AWS AppSync, AWS Device Farm
• Internet of Things (IoT): AWS IoT Core, AWS IoT Greengrass
• Operations terminology: Operations & Automation, Tags, Resource Groups