AWS Certified SysOps Boot Camp

AWS Certified SysOps Boot Camp

AWS Certification Course Overview

• Learn AWS operations best practices.

• Understand AWS services and deployment models.

• Develop skills in managing and operating AWS environments.

• Gain hands-on experience through interactive workshops and real-world scenarios.

Syllabus Covered

The course is aligned with the AWS Certified SysOps Administrator – Associate exam blueprint and covers the following domains:

Domain 1: Monitoring, Logging, and Remediation (20% of scored content)

• Task Statement 1.1: Implement metrics, alarms, and filters using AWS monitoring and logging services.

  • Identify, collect, analyze, and export logs (e.g., Amazon CloudWatch Logs, CloudWatch Logs Insights, AWS CloudTrail logs).

  • Collect metrics and logs using the CloudWatch agent.

  • Create CloudWatch alarms, metric filters, and dashboards.

  • Configure notifications (e.g., Amazon SNS, Service Quotas, CloudWatch alarms, AWS Health events).

• Task Statement 1.2: Remediate issues based on monitoring and availability metrics.

  • Respond to notifications and alarms to troubleshoot and correct issues.

  • Configure Amazon EventBridge rules to trigger actions.

  • Use AWS Systems Manager Automation runbooks to execute actions based on AWS configuration rules.

Domain 2: Reliability and Business Continuity (16% of scored content)

• Task Statement 2.1: Implement scalability and elasticity.

  • Create and manage AWS Auto Scaling plans.

  • Implement caching and Amazon RDS/Aurora Replicas.

  • Use loosely coupled architectures and differentiate between horizontal and vertical scaling.

• Task Statement 2.2: Implement high availability and resilient environments.

  • Set up ELB and Amazon Route 53 health checks.

  • Differentiate between single and multi-Availability Zone setups (e.g., EC2 Auto Scaling groups, ELB, Amazon FSx, RDS).

  • Implement fault-tolerant workloads (e.g., Amazon EFS, Elastic IP addresses).

  • Implement Route 53 routing policies (e.g., failover, weighted, latency-based).

• Task Statement 2.3: Implement backup and restore strategies.

  • Automate snapshots and backups (e.g., RDS snapshots, AWS Backup, Data Lifecycle Manager).

  • Restore databases (point-in-time and read replicas).

  • Establish versioning and lifecycle policies.

  • Configure Amazon S3 Cross-Region Replication (CRR) and perform disaster recovery procedures.

Domain 3: Deployment, Provisioning, and Automation (18% of scored content)

• Task Statement 3.1: Provision and maintain cloud resources.

  • Use EC2 Image Builder to create and manage AMIs.

  • Manage and troubleshoot AWS CloudFormation.

  • Provision resources across AWS Regions and accounts using AWS Resource Access Manager (RAM), CloudFormation StackSets, and IAM cross-account roles.

  • Choose deployment strategies (e.g., blue/green, rolling, canary) and address deployment challenges.

• Task Statement 3.2: Automate manual or repeatable processes.

  • Use AWS Systems Manager and CloudFormation to automate deployment tasks.

  • Implement automatic patch management and schedule tasks using EventBridge and AWS Config.

Domain 4: Security and Compliance (16% of scored content)

• Task Statement 4.1: Implement and manage security and compliance policies.

  • Implement IAM features (e.g., password policies, MFA, roles, SAML, federated identities).

  • Use AWS services to troubleshoot and audit access issues (e.g., CloudTrail, IAM Access Analyzer).

  • Validate service control policies (SCPs) and permission boundaries.

  • Evaluate AWS Trusted Advisor security checks and validate compliance with AWS regions and services.

• Task Statement 4.2: Implement data and infrastructure protection strategies.

  • Implement data classification, encryption at rest (e.g., AWS KMS), and encryption in transit (e.g., ACM, VPN).

  • Use AWS Secrets Manager and Systems Manager Parameter Store to securely store secrets.

  • Analyze reports from AWS Security Hub, GuardDuty, AWS Config, and Amazon Inspector.

Domain 5: Networking and Content Delivery (18% of scored content)

• Task Statement 5.1: Implement networking features and connectivity.

  • Configure VPC components (e.g., subnets, route tables, NACLs, security groups, NAT gateway, internet gateway).

  • Configure private connectivity (e.g., VPC endpoints, peering, VPN).

  • Configure AWS network protection services (e.g., AWS WAF, AWS Shield).

• Task Statement 5.2: Configure domains, DNS services, and content delivery.

  • Configure Route 53 hosted zones, records, and routing policies (e.g., geolocation, geo-proximity).

  • Set up Amazon CloudFront, S3 Origin Access Control (OAC), and S3 static website hosting.

• Task Statement 5.3: Troubleshoot network connectivity issues.

  • Interpret VPC configurations and analyze logs (e.g., VPC Flow Logs, ELB Access Logs).

  • Troubleshoot hybrid and private connectivity issues.

Domain 6: Cost and Performance Optimization (12% of scored content)

• Task Statement 6.1: Implement cost optimization strategies.

  • Create cost allocation tags and use AWS tools (e.g., Trusted Advisor, Cost Explorer) to identify underutilized resources.

  • Set up AWS budgets and billing alarms.

  • Qualify workloads for EC2 Spot Instances and consider managed services (e.g., RDS, Fargate, EFS).

• Task Statement 6.2: Implement performance optimization strategies.

  • Recommend compute resources based on performance metrics.

  • Optimize Amazon EBS, S3, RDS, and EC2 performance.

Training Locations

• Singapore: Classroom training at our state-of-the-art facility.

• Online: Live virtual training sessions with expert instructors.

Why Choose DreamsPlus?

• Expert Instructors: Learn from certified AWS professionals with real-world experience.

• Hands-On Labs: Gain practical skills through interactive workshops and labs.

• Flexible Learning: Choose between in-person training in Singapore or online sessions.

• Certification-Focused: Course content is aligned with the AWS Certified SysOps Administrator – Associate exam.