Syllabus  

• Domain 1: Design Solutions for Organizational Complexity (26% of scored content)

• Domain 2: Design for New Solutions (29% of scored content)
• Domain 3: Continuous Improvement for Existing Solutions (25% of scored content)

• Domain 4: Accelerate Workload Migration and Modernization (20% of scored content)

Domain 1: Design Solutions for Organizational Complexity

Task Statement 1.1: Architect network connectivity strategies.

• AWS Global Infrastructure
• Understand AWS networking fundamentals, including Amazon VPC, AWS Direct Connect, AWS VPN, transitive routing, and container services.
• Hybrid DNS concepts, such as Amazon Route 53 Resolver and on-premises DNS integration.
• Network segmentation (for example, subnetting, IP addressing, and communication between VPCs).
• Monitor network traffic.

Task Statement 1.2: Prescribe security controls.

• AWS Identity and Access Management (IAM) and AWS IAM Identity Center (AWS SSO)
• Routing tables, security groups, and network access control lists
• Manage encryption keys and certificates using tools like AWS Key Management Service (AWS KMS) and AWS Certificate Manager (ACM).
• AWS security, identity, and compliance technologies include AWS CloudTrail, AWS Identity and Access Management Access Analyzer, AWS Security Hub, and Amazon Inspector.

Task Statement 1.3: Design reliable and resilient architectures.

• Recovery time objectives (RTOs), recovery point objectives (RPOs)
• Disaster recovery strategies, including AWS Elastic Disaster Recovery, pilot light, warm standby, and multi-site.
• Data Backup and Restoration.

Task Statement 1.4: Design a multi-account AWS environment. 

• AWS Organizations and AWS Control Tower
• Multi-account event notifications
• AWS resource sharing across environments

Task Statement 1.5: Determine cost optimization and visibility strategies.

• AWS cost and use monitoring tools, including AWS Trusted Advisor, Pricing Calculator, Cost Explorer, and Budgets.
• AWS purchase choices include Reserved Instances, Savings Plans, and Spot Instances.
• AWS rightsizing visibility tools, such as AWS Compute Optimizer and Amazon S3 Storage Lens.

Domain 2: Design for New Solutions

Task Statement 2.1: Design a deployment strategy to meet business requirements.

• Infrastructure as code (IaC) (such as AWS CloudFormation).
• Continuous Integration and Delivery (CI/CD)
• Change management procedures
• Configuration management tools (such as AWS Systems Manager)

Task Statement 2.2: Design a solution to ensure business continuity.

• AWS Global Infrastructure 
• AWS networking concepts (e.g. Route 53 and routing algorithms).
• Determine RTOs and RPOs.
• Plan disaster recovery scenarios, such as backup and restore, pilot light, warm standby, and multi-site.
• Disaster recovery solutions for AWS.

Task Statement 2.3: Determine security controls based on requirements.

• IAM
• Route tables, security groups, and network ACLs
• Encryption options for data at rest and data in transit
• AWS service endpoints
• Credential management services
• AWS managed security services (for example, AWS Shield, AWS WAF, Amazon GuardDuty, AWS Security Hub)

Task Statement 2.4: Design a strategy to meet reliability requirements.

• AWS Global Infrastructure
• Storage services and replication schemes (e.g. Amazon S3, Amazon RDS, Amazon ElastiCache) • Multi-AZ and multi-Region architectures
• Auto-scaling policies and events.
• Application integration (e.g., Amazon SNS, Amazon SQS, AWS Step Functions)
• Service quotas and limitations.

Task Statement 2.5: Design a solution to meet performance objectives.

• Performance monitoring tools 
• AWS storage options
• Instance families and use cases
• Purpose-built databases.

Task Statement 2.6: Determine a cost optimization strategy to meet solution goals and objectives.

• AWS cost and use monitoring tools (e.g. Cost Explorer, Trusted Advisor, AWS Pricing Calculator)
• Pricing models (e.g. Reserved Instances, Savings Plans).
• Storage tiering • Data transmission costs • AWS managed service options

Domain 3: Continuous Improvement for Existing Solutions

Task Statement 3.1: Determine a strategy to improve overall operational excellence.

• Automated alerting and repair strategies 
• Disaster recovery plans 
• Monitoring and logging systems (e.g., Amazon CloudWatch)
• CI/CD pipelines and deployment methodologies, including blue/green, all-at-once, and rolling.
• Configuration management tools (such as Systems Manager)

Task Statement 3.2: Determine a strategy to improve security.

• Data retention, data sensitivity, and data regulatory requirements
• Automated monitoring and remediation strategies (for example, AWS Config rules)

• Secrets management (for example, Systems Manager, AWS Secrets Manager)

• Principle of least privilege access
• Security-specific AWS solutions
• Patching practices
• Backup practices and methods

Task Statement 3.3: Determine a strategy to improve performance.

•  High-performance system architectures, including auto scaling, instance fleets, and placement groups.
• Global service options, including AWS Global Accelerator, Amazon CloudFront, and edge computing services.
•  Monitoring tools and services (such as CloudWatch)
• Service level agreements (SLAs) and key performance indicators (KPIs)

Task Statement 3.4: Determine a strategy to improve reliability.

• AWS Global Infrastructure
• Data replication methods
• Scaling methodologies (for example, load balancing, auto scaling)
• High availability and resiliency
• Disaster recovery methods and tools
• Service quotas and limits

Task Statement 3.5: Identify opportunities for cost optimizations.

• Cost-effective design options, such as employing Spot Instances, scaling strategies, and rightsizing resources.
• Price model adoptions (e.g., Reserved Instances, Savings Plans).
• Networking and data transfer fees
• Cost monitoring, alerting, and reporting

Domain 4: Accelerate Workload Migration and Modernization

Task Statement 4.1: Select existing workloads and processes for potential migration.

• Migration assessment and tracking tools (e.g., AWS Migration Hub).
• Portfolio assessment
• Asset planning
• Prioritization and migration of workloads (for example, wave planning)

Task Statement 4.2: Determine the optimal migration approach for existing workloads.

• Data migration options and tools (for example, AWS DataSync, AWS Transfer Family, AWS Snow Family, S3 Transfer Acceleration)

• Application migration tools (for example, AWS Application Discovery Service, AWS Application Migration Service)

• AWS networking services and DNS (for example, Direct Connect, AWS Site-to-Site VPN, Route 53)

• Identity services (for example, IAM Identity Center, AWS Directory Service)
• Database migration tools (for example, AWS Database Migration Service,[AWS DMS], AWS Schema Conversion Tool [AWS SCT])

• Governance tools (for example, AWS Control Tower, Organizations)

Task Statement 4.3: Determine a new architecture for existing workloads.

• Compute services (such as Amazon EC2 and AWS Elastic Beanstalk)
• Containers (for example, Amazon Elastic Container Service [Amazon ECS],Amazon Elastic Kubernetes Service [Amazon EKS], AWS Fargate, Amazon,Elastic Container Registry [Amazon ECR])

• AWS storage services (e.g. Amazon EBS, Amazon EFS, Amazon FSx, Amazon S3, and Volume Gateway).
• Databases, including Amazon DynamoDB, OpenSearch Service, Amazon RDS, and self-managed databases on Amazon EC2.

Task Statement 4.4: Determine opportunities for modernization and enhancements.

• Serverless compute offerings (such as AWS Lambda)
• Containers (such as Amazon ECS, EKS, and Fargate)
• AWS storage services (such as Amazon S3 and Amazon EFS)
• Purpose-built databases, such as DynamoDB, Amazon Aurora Serverless, and ElastiCache.
• Integration services (such as Amazon SQS, SNS, EventBridge, and Step Functions).