Advanced Architecting
on AWS
Overview
Course Objective
In this course, you will learn to:
• Review the AWS Well-Architected Framework to ensure understanding of best cloud
design practices by responding to poll questions while following a graphic presentation
• Demonstrate the ability to secure Amazon Simple Storage Service (Amazon S3) virtual private cloud (VPC) endpoint connections in a lab environment
• Identify how to implement centralized permissions management and reduce risk using AWS
• Organizations organizational units (OUs) and service control policies (SCPs) with AWS Single SignOn
• Compare the permissions management capabilities of OUs, SCPs, and AWS SSO with
and without AWS Control Tower to determine best practices based on use cases
• Discuss AWS hybrid network designs to address traffic increases and streamline
remote work while ensuring FIPS 140-2 Level 2, or Level 3 security compliance
• Explore the solutions and products available to design a hybrid infrastructure, including
access to 5G networks, to optimize service and reduce latency while maintaining high
security for critical onpremises applications
• Explore ways to simplify the connection configurations between applications and
highperformance workloads across global networks
• Demonstrate the ability to configure a transit gateway in a lab environment
• Identify and discuss container solutions and define container management options
• Build and test a container in a lab environment
• Examine how the AWS developer tools optimize the CI/CD pipeline with updates based on nearreal-time data
• Identify the anomaly detection and protection services that AWS offers to defend
against DDoS attacks
• Identify ways to secure data in transit, at rest, and in use with AWS Key Management
Service (AWS KMS) and AWS Secrets Manager
• Determine the best data management solution based on frequency of access, and data query and analysis needs
• Set up a data lake and examine the advantages of this type of storage configuration to
crawl and query data in a lab environment
• Identify solutions to optimize edge services to eliminate latency, reduce inefficiencies,
and mitigate risks
• Identify the components used to automate the scaling of global applications using
geolocation and traffic control
• Deploy and activate an AWS Storage Gateway file gateway and AWS DataSync in a lab environment
• Review AWS cost management tools to optimize costs while ensuring speed and
performance
• Review migration tools, services, and processes that AWS provides to implement
effective cloud operation models based on use cases and business needs
• Provide evidence of your ability to apply the technical knowledge and experience gained in the course to improve business practices by completing a Capstone Project
Who Should Attend
This course is intended for:
• Cloud Architects
• Solutions Architects
• Anyone who designs solutions for cloud infrastructures
Prerequisites
We recommend that attendees of this course have:
• Knowledge and experience with core AWS services from the Compute, Storage, Networking, and
• AWS Identity and Access Management (IAM) categories
• Attended the Architecting on AWS classroom training OR
• Achieved the AWS Certified Solutions Architect – Associate certification OR
• Have at least 1 year of experience operating AWS workloads
Training Calendar
Intake
Duration
Program Fees
Module
Module 1 - Reviewing Architecting Concepts
• Group Exercise: Review Architecting on AWS core best practices
• Lab 1: Securing Amazon S3 VPC Endpoint Communications
Module 2 - Single to Multiple Accounts
• AWS Organizations for multi-account access and permissions
• AWS SSO to simplify access and authentication across AWS
accounts and third-party services
• AWS Control Tower
• Permissions, access, and authentication
Module 3 - Hybrid Connectivity
• AWS Client VPN authentication and control
• AWS Site-to-Site VPN
• AWS Direct Connect for hybrid public and private connections
• Increasing bandwidth and reducing cost
• Basic, high, and maximum resiliency
• Amazon Route 53 Resolver DNS resolution
Module 4 - Specialized Infrastructure
• AWS Storage Gateway solutions
• On-demand VMware Cloud on AWS
• Extending cloud infrastructure services with AWS Outposts
• AWS Local Zones for latency-sensitive workloads
• Your 5G network with and without AWS Wavelength
Module 5 - Connecting Networks
• Simplifying private subnet connections
• VPC isolation with a shared services VPC
• Transit Gateway Network Manager and VPC Reachability Analyzer
• AWS Resource Access Manager
• AWS PrivateLink and endpoint services
• Lab 2: Configuring Transit Gateways
Module 6 - Containers
• Container solutions compared to virtual machines
• Docker benefits, components, solutions architecture, and
versioning
• Container hosting on AWS to reduce cost
• Managed container services: Amazon Elastic Container Service
(Amazon ECS) and Amazon Elastic Kubernetes Service (Amazon
EKS)
• AWS Fargate
• Lab 3: Deploying an Application with Amazon EKS on Fargate
Module 7 - Continuous Integration/Continuous Delivery (CI/CD)
• CI/CD solutions and impact
• CI/CD automation with AWS CodePipeline
• Deployment models
• AWS CloudFormation StackSets to improve deployment
management
Module 8 - High Availability and DDoS Protection
• Common DDoS attacks layers
• AWS WAF
• AWS WAF web access control lists (ACLs), real-time metrics, logs,
and security automation
• AWS Shield Advanced services and AWS DDoS Response Team
(DRT) services
• AWS Network Firewall and AWS Firewall Manager to protect
accounts at scale
Module 9 - Securing Data
• What cryptography is, why you would use it, and how to use it
• AWS KMS
• AWS CloudHSM architecture
• FIPS 140-2 Level 2 and Level 3 encryption
• Secrets Manager
Module 10 - Large-Scale Data Stores
• Amazon S3 data storage management including storage class,
inventory, metrics, and policies
• Data lake vs. data warehouse: Differences, benefits, and examples
• AWS Lake Formation solutions, security, and control
• Lab 4: Setting Up a Data Lake with Lake Formation
FAQs
General Questions:
Q: What is this course about?
This 3-day course provides in-depth training on designing and implementing advanced architectural solutions using AWS services. Participants will explore various architectural challenges and learn to apply AWS features to solve complex problems. The course covers managing multiple AWS accounts, hybrid connectivity, network design with Transit Gateway, container services, CI/CD automation, security, DDoS protection, data lakes, and cost optimization strategies. It also includes practical labs and exercises to reinforce concepts and techniques.
Q: Who should attend this course?
This course is intended for Cloud Architects, Solutions Architects, and professionals who design solutions for cloud infrastructures. It is ideal for individuals who want to deepen their knowledge of AWS services and advanced architecture patterns, especially those involved in managing large-scale, high-performance cloud solutions.
Q: What are the prerequisites for this course?
To succeed in this course, participants should have knowledge and experience with core AWS services, including compute, storage, networking, and IAM. It is recommended that attendees have attended the Architecting on AWS classroom training, achieved the AWS Certified Solutions Architect – Associate certification, or have at least 1 year of experience operating AWS workloads.
Q: How long is the course?
The course is 3 days long, providing participants with extensive hands-on training and real-world scenario-based exercises to apply the AWS architectural best practices.
Q: What key topics are covered in this course?
AWS Well-Architected Framework and best practices
Centralized permissions management with AWS Organizations and AWS SSO
Hybrid network designs and AWS Client VPN, Direct Connect, and Site-to-Site VPN
Configuring Transit Gateways for optimized networking
Container services, including ECS, EKS, and AWS Fargate
Continuous integration and delivery (CI/CD) with AWS developer tools
DDoS protection and security with AWS WAF, Shield Advanced, and Firewall Manager
Securing data using AWS KMS, CloudHSM, and Secrets Manager
Setting up and managing data lakes with AWS Lake Formation
Cost management strategies and AWS migration tools
Lab exercises including securing S3, configuring Transit Gateways, and deploying containers
Q: Will I receive a certification after completing the course?
This course provides valuable skills for designing and implementing advanced AWS architectures but does not directly lead to certification. However, it prepares participants for further AWS certifications, such as the AWS Certified Solutions Architect – Professional certification, by deepening their practical knowledge and architectural understanding of AWS services.
Program Content & Skills:
Q: What foundational AWS concepts will I strengthen in this course?
This course will strengthen your understanding of essential AWS architecture concepts such as managing multiple AWS accounts, configuring hybrid network designs, and utilizing AWS security features. You will also reinforce your knowledge in optimizing networking with AWS Transit Gateway, working with container services like ECS and EKS, and applying CI/CD automation using AWS tools. Additionally, you will gain hands-on experience in securing data, setting up data lakes, and optimizing costs across AWS environments.
Q: How does the course help me apply AWS knowledge to real-world scenarios?
Through hands-on labs, you will tackle real-world architectural challenges, such as configuring secure S3 endpoint communications, designing hybrid connectivity solutions, and implementing security protocols against DDoS attacks. You’ll also work with AWS services like Transit Gateway, ECS, EKS, and AWS Fargate to build and deploy scalable solutions. These practical exercises ensure you can apply AWS services and architecture patterns in real-world production environments.
Q: What skills will I develop in implementing AWS services?
You’ll develop skills in designing and implementing secure, scalable architectures using AWS services. These include managing permissions with AWS Organizations and AWS SSO, configuring hybrid and global network solutions, deploying containerized applications, and optimizing CI/CD pipelines. You’ll also learn how to secure data in transit and at rest, protect against DDoS attacks, and implement cost optimization strategies for AWS services.
Q: Will I learn how to work with different AWS management tools?
Yes, this course covers a variety of AWS tools and services, including AWS CloudFormation, AWS CodePipeline, AWS Organizations, and AWS Control Tower. You’ll gain hands-on experience using these tools to automate deployments, manage permissions, and monitor system performance, ensuring you can effectively manage AWS resources in real-world applications.
Q: How does this course prepare me for using AWS professionally?
By providing comprehensive training on designing and managing advanced architectures, this course prepares you to handle complex, scalable cloud solutions in a professional setting. You’ll gain expertise in securing cloud environments, optimizing performance, and managing costs, ensuring you are well-equipped to design, implement, and maintain production-ready AWS solutions in various enterprise contexts.
Submit your interest today !
