AWS Certified DevOps Engineer Boot Camp

DreamsPlus offers an intensive AWS Certified DevOps Engineer Boot Camp in Singapore, available both in-person and online. This boot camp is designed to provide you with practical, hands-on experience while fully preparing you for the AWS Certified DevOps Engineer certification exam.

What’s in the Program?

• Master DevOps practices and principles to streamline development and operations.
• Gain in-depth knowledge of AWS services and explore various deployment models within the AWS ecosystem.
• Learn how to automate and optimize AWS environments, improving efficiency and scalability.
• Acquire valuable hands-on experience through interactive workshops and real-world scenarios.
•  

Syllabus

• Domain 1: SDLC Automation (22% of scored content)
• Domain 2: Configuration Management and IaC (17% of scored content)
• Domain 3: Resilient Cloud Solutions (15% of scored content)
• Domain 4: Monitoring and Logging (15% of scored content)
• Domain 5: Incident and Event Response (14% of scored content)
• Domain 6: Security and Compliance (17% of scored content)

Domain 1: SDLC Automation

Task Statement 1.1: Implement CI/CD pipelines.

• Concepts, phases, and models of the Software Development Lifecycle (SDLC).
• Pipeline deployment patterns for both single and multi-account setups.

Task Statement 1.2: Integrate automated testing into CI/CD pipelines.

• Different types of tests (for example, unit tests, integration tests, acceptance tests, user interface tests, security scans)

• Reasonable use of different types of tests at different stages of the CI/CD pipeline

Task Statement 1.3: Build and manage artifacts.

• Secure artifact management and use occasions
• Artifact creation and generation procedures 
• Artifact lifecycle concerns.

Task Statement 1.4: Implement deployment strategies for instance, container, and serverless environments.

• Deployment strategies for numerous platforms, including Amazon EC2, Amazon ECS, Amazon EKS, and Lambda.
• Application storage patterns (such as Amazon Elastic File System) [Amazon EFS], Amazon S3, Amazon Elastic Block Store (Amazon EBS)

• Mutable deployment patterns as opposed to immutable deployment.patterns
• Tools and services for distributing code (such as CodeDeploy,EC2 Image Builder.

Domain 2: Configuration Management and IaC

Task Statement 2.1: Define cloud infrastructure and reusable components to provision and manage systems throughout their lifecycle.

• AWS Infrastructure as Code (IaC) tools and options 
• Change management processes for IaC-based platforms 
• Configuration management services and strategies

Task Statement 2.2: Deploy automation to create, onboard, and secure AWS accounts in a multi-account or multi-Region environment.

• AWS account structures, best practices, and related AWS services

Task Statement 2.3: Design and build automated solutions for complex tasks and large-scale environments.

• AWS services and solutions for automating operations and processes.
• Methods and strategies for interacting with the AWS software-defined infrastructure

Domain 3: Resilient Cloud Solutions

Task Statement 3.1: Implement highly available solutions to meet resilience and business requirements.

• Supports multi-AZ and multi-region deployments (e.g., compute and data layers).
• SLAs
• Stateful service replication and failover procedures
• Techniques for high availability (e.g., multi-AZ, multi-region)

Task Statement 3.2: Implement solutions that are scalable to meet business requirements.

• Proper metrics for scaling services.
• Distributed and loosely connected systems 
• Serverless architectures
• Container platforms

Task Statement 3.3: Implement automated recovery processes to meet RTO and RPO Requirements.

• Disaster recovery concepts (e.g., RTO and RPO).
• Backup and recovery options (such as pilot light and warm standby).
• Recovery procedures.

Domain 4: Monitoring and Logging

Task Statement 4.1: Configure the collection, aggregation, and storage of logs and metrics.

• How do you monitor applications and infrastructure
  • Amazon CloudWatch metrics, including namespaces, metrics, dimensions, and resolutions.
  • Real-time log ingestion
• Encryption options for logs and metrics at rest and in transit, including client-side and server-side AWS Key Management Service (AWS KMS).
  • Security setups (for example, IAM roles and permissions to enable log collection).

Task Statement 4.2: Audit, monitor, and analyze logs and metrics to detect issues.

• Anomaly detection alarms (such as CloudWatch anomaly detection).
• Common CloudWatch metrics and logs, such as CPU utilization with Amazon EC2, queue length with Amazon RDS, and 5xx faults with an application Load Balancer (ALB)
• Amazon Inspector and common assessment templates.
• AWS configuration rules.
• AWS CloudTrail log events.

Task Statement 4.3: Automate monitoring and event management of complexenvironments.

• Design patterns that are event-driven and asynchronous (such as Lambda, Amazon SNS, or S3 Event Notifications or Amazon EventBridge events).
• Auto scaling capabilities for a range of AWS services (e.g., DynamoDB, RDS storage auto scaling, EC2 auto scaling groups, ECS capacity provider, and EKS autoscalers).
• The ability to receive alert notifications and take action (such as CloudWatch alarms to Amazon SNS, Lambda, and EC2 automatic recovery).
• The ability to check the health of AWS services (such Route 53 and ALB target groups).

Domain 5: Incident and Event Response

Task Statement 5.1: Manage event sources to process, notify, and take action in response to events.

• AWS services (such AWS Health, EventBridge, and CloudTrail) that produce, capture, and process events
• Architectures that are driven by events (such as queuing, fan out, and event streaming)

Task Statement 5.2: Implement configuration changes in response to events.

• Services for fleet management (like AWS Auto Scaling and Systems Manager).
• Services for configuration management (like AWS Config)

Task Statement 5.3: Troubleshoot system and application failures.

• AWS metrics and logging services (for example, CloudWatch, X-Ray)
• AWS service health services (for example, AWS Health, CloudWatch, Systems Manager OpsCenter)

• Root cause analysis

Domain 6: Security and Compliance

Task Statement 6.1: Implement techniques for identity and access management at scale.

• Components of network security (such as routing, security groups, network ACLs, and AWS Network Firewall, AWS WAF, and AWS Shield).
• Public key infrastructure (PKI) and certificates
• Data management, including key management, data classification, encryption, and access controls

Task Statement 6.2: Apply automation for security controls and data protection.

• Network security components (for example, security groups, network ACLs, routing, AWS Network Firewall, AWS WAF, AWS Shield)

• Certificates and public key infrastructure (PKI)
• Data management (for example, data classification, encryption, key management, access controls)

Task Statement 6.3: Implement security monitoring and auditing solutions.

• Features and services for security audits (such as CloudTrail, AWS Configuration, VPC Flow Logs, and CloudFormation drift detection)
• AWS services, such as GuardDuty, Amazon Inspector, IAM Access Analyzer, and AWS Config, for detecting security events and vulnerabilities
• Typical risks to cloud security (insecure web traffic, exposed AWS access keys, S3 buckets with encryption turned off or public access permitted, etc.)