fr
en
Advanced Architecting on AWS
Complex AWS architectures require you to anticipate dependencies and service constraints. Compare options and trade-offs to prepare consistent technical choices. Strengthen your ability to explain your design decisions and evolve the environment.
- Duration
- 3 days 21 hours
- Code
- AWS05FR Code
- Certification
- AWS Certified Solutions Architect Professional Certification
Accredited training for the AWS Certified Solutions Architect Professional certification.
Presentation
Advanced cloud architectures on AWS offer greater scalability and flexibility to meet the dynamic needs of modern applications. They enable cost optimisation through pay-as-you-go models and efficient resource management. They also strengthen system availability and resilience through distributed, fault-tolerant designs. Finally, they incorporate advanced services such as artificial intelligence and machine learning, opening the way to innovation and new capabilities.
This intensive course gives you the practical skills to master the design of scalable, secure cloud architecture solutions. You will explore essential AWS services and features in depth, including AWS Organizations, AWS Transit Gateway, AWS Direct Connect and containerisation services. Through hands-on workshops, you will learn to design hybrid networks, manage multi-account environments, optimise costs and implement effective migration strategies.
By the end of this 3-day programme, you will have developed the expertise to design high-performance, secure cloud architecture solutions on AWS. You will master AWS Well-Architected Framework best practices and advanced strategies for unlocking the full potential of the AWS cloud.
As a premium training partner (ATP) authorised by Amazon Web Services, Oo2 offers skills development and certification training that meets the organisation's rigorous quality standards.
Objectives
By the end of this advanced AWS architecture course, you will be able to:
- understand cloud design best practices through the AWS Well-Architected Framework;
- secure Amazon S3 VPC Endpoint connections in a lab;
- identify how to implement centralised permission management with AWS Organizations and AWS Single Sign-On;
- compare the permission management capabilities of OUs, SCPs and AWS SSO with and without AWS Control Tower;
- design AWS hybrid networks to handle increased traffic and remote working;
- design solutions for hybrid infrastructure, including access to 5G networks;
- optimise connection configurations between applications and high-performance workloads;
- demonstrate transit gateway configuration in a lab;
- identify and compare containerisation solutions and management options;
- build and test a container in a lab;
- examine how to optimise a CI/CD pipeline with AWS developer tools;
- identify services that protect against DDoS attacks;
- identify how to secure data with AWS KMS and AWS Secrets Manager;
- determine the appropriate data management solution based on access frequency and analytics requirements;
- set up a data lake and examine its benefits;
- identify solutions for optimising edge services;
- identify components for automating the scaling of global applications;
- deploy and activate AWS Storage Gateway and AWS DataSync in a lab;
- configure AWS cost management tools and interpret their data to optimise spending;
- apply AWS migration tools and processes to implement cloud operating models;
- demonstrate your skills through a capstone project;
- prepare effectively for the AWS Solutions Architect Professional certification exam.
Program
Module 1: reviewing architecture concepts
- Introduction to foundational architecture best practices on AWS.
Lab:
- Secure Amazon S3 VPC endpoint communications.
Module 2: moving from a single account to multiple accounts
- Managing multi-account access and permissions with AWS Organizations.
- Simplifying access and authentication with AWS SSO.
- Using AWS Control Tower.
- Managing permissions, access and authentication.
Module 3: establishing hybrid connectivity
- AWS Client VPN authentication and control methods.
- Using AWS Site-to-Site VPN.
- Using AWS Direct Connect for public and private hybrid connections.
- Methods for increasing bandwidth and reducing costs.
- Resilience levels: basic, high and maximum.
- Using Amazon Route 53 Resolver for DNS resolution.
Module 4: deploying specialised infrastructure
- AWS Storage Gateway solutions.
- Using VMware Cloud on AWS on demand.
- Extending cloud infrastructure services with AWS Outposts.
- Using AWS Local Zones for latency-sensitive workloads.
- Using 5G networks with and without AWS Wavelength.
Module 5: connecting networks
- Simplifying private subnet connections.
- Isolating VPCs with a shared services VPC.
- Using Transit Gateway Network Manager and VPC Reachability Analyzer.
- Using AWS Resource Access Manager.
- Using AWS PrivateLink and endpoint services.
Lab:
- Configure transit gateways.
Module 6: deploying containers
- Comparing container solutions with virtual machines.
- Docker benefits, components, solution architecture and version control.
- Hosting containers on AWS to reduce costs.
- Using managed container services (Amazon ECS) and Amazon Elastic Kubernetes Service (Amazon EKS).
- Using AWS Fargate.
Lab:
- Deploy an application with Amazon ECS on Fargate.
Module 7: implementing continuous integration and continuous delivery (CI/CD)
- CI/CD solutions and their impact.
- Automating CI/CD with AWS CodePipeline.
- Deployment patterns.
- Improving deployment management with AWS CloudFormation StackSets.
Module 8: ensuring high availability and DDoS protection
- Common DDoS attack layers.
- Using AWS WAF.
- Using AWS WAF web access control lists (ACLs), real-time metrics, logs and security automation.
- Using AWS Shield Advanced and AWS DDoS Response Team (DRT) services.
- Protecting accounts at scale with AWS Network Firewall and AWS Firewall Manager.
Module 9: securing data
- Cryptography principles, use cases and implementation.
- Using AWS KMS.
- AWS CloudHSM architecture.
- Using FIPS 140-2 Level 2 and Level 3 encryption.
- Using Secrets Manager.
Module 10: managing data stores at scale
- Managing Amazon S3 data storage, including storage class, inventory, metrics and policies.
- Comparing a data lake with a data warehouse: differences, benefits and examples.
- AWS Lake Formation solutions, security and control.
Lab:
- Configure a data lake with Lake Formation.
Module 11: deploying applications at scale
- Edge service principles and use cases.
- Improving performance and mitigating risks with Amazon CloudFront.
- Using Lambda@Edge.
- Using AWS Global Accelerator: IP addresses, intelligent traffic distribution and health checks.
Lab:
- Migrate an on-premises NFS share using AWS DataSync and Storage Gateway.
Module 12: optimising costs
- Comparing acquisition and removal cycles on premises and in the cloud.
- Using cloud cost management tools, including reporting, control and tagging.
- Examining and analysing the five pillars of cost optimisation.
Module 13: migrating workloads
- Business drivers and the migration process.
- Successful customer practices.
- The 7 Rs of migration and modernisation.
- AWS migration tools and services.
- Migrating databases and large data stores.
- Using AWS Schema Conversion Tool (AWS SCT).
Module 14: completing a capstone project
- Using the Online Course Supplement (OCS) to review use cases, examine data and answer architecture design questions on Transit Gateway, hybrid connectivity, migration and cost optimisation.
Audience
This course is intended for:
- cloud architects responsible for the overall design, planning and governance of AWS cloud environments and infrastructure;
- solutions architects responsible for designing and implementing specific solutions and AWS services to address business requirements and technical challenges;
- anyone who designs solutions for cloud infrastructure, including system engineers, developers and IT professionals who want to deepen their AWS architecture skills and design scalable, secure, high-performance cloud systems.
Prerequisites
The following prerequisites are recommended for this AWS course:
- knowledge and experience of core AWS services: compute, storage, networking and AWS Identity and Access Management (IAM);
- completion of the Architecting on AWS course OR the AWS Certified Solutions Architect Associate certification OR at least 1 year of experience operating AWS workloads.
Teaching and assessment methods
- Initial skills assessment
- Training materials provided to participants
- Continuous assessment throughout the course
- End-of-course feedback questionnaire
- Combination of theory and practical application
- Attendance records
- Post-course follow-up evaluation
- Practical exercises
Course highlights
- Expert AWS-certified instructors: benefit from recognised, AWS-certified instructors with in-depth knowledge of AWS services and features for designing advanced cloud architectures.
- Interactive hands-on learning: master AWS architecture tools and techniques through practical demonstrations and workshops. Prepare to address real-world challenges in hybrid network design, multi-account management, data security and cloud cost optimisation.
- Key skills development: the course content is carefully designed to help you acquire essential skills in designing and implementing scalable, secure, high-performance cloud architectures, optimising costs and migrating workloads efficiently to AWS.
Dates and sessions
Choose the date and delivery format that suit you.
No upcoming sessions are currently available.
AWS, Amazon S3, Amazon VPC, Amazon EC2 and other AWS marks are registered trademarks of Amazon.com, Inc. or its affiliates.