AWS Certified SysOps Administrator - Associate Course in Rwanda

Identify, collect, analyze, and export logs (for example, Amazon CloudWatch Logs, CloudWatch Logs Insights, AWS CloudTrail logs).

Collect metrics and logs by using the CloudWatch agent.

Create CloudWatch alarms.

Create metric filters.

Create CloudWatch dashboards.

Configure notifications (for example, Amazon Simple Notification Service [Amazon SNS], Service Quotas, CloudWatch alarms, AWS Health events).

Troubleshoot or take corrective actions based on notifications and alarms.

Configure Amazon EventBridge rules to invoke actions.

Use AWS Systems Manager Automation runbooks to take action based on AWS Config rules.

Create and maintain AWS Auto Scaling plans.

Implement caching.

Implement Amazon RDS replicas and Amazon Aurora Replicas.

Implement loosely coupled architectures.

Differentiate between horizontal scaling and vertical scaling.

Configure Elastic Load Balancing (ELB) and Amazon Route 53 health checks.

Differentiate between the use of a single Availability Zone and Multi-AZ deployments (for example, Amazon EC2 Auto Scaling groups, ELB, Amazon FSx, Amazon RDS).

Implement fault-tolerant workloads (for example, Amazon Elastic File System [Amazon EFS], Elastic IP addresses).

Implement Route 53 routing policies (for example, failover, weighted, latency based).

Automate snapshots and backups based on use cases (for example, RDS snapshots, AWS Backup, RTO and RPO, Amazon Data Lifecycle Manager, retention policy).

Restore databases (for example, point-in-time restore, promote read replica).

Implement versioning and lifecycle rules.

Configure Amazon S3 Cross-Region Replication (CRR).

Perform disaster recovery procedures.

Create and manage AMIs (for example, EC2 Image Builder).

Create, manage, and troubleshoot AWS CloudFormation.

Provision resources across multiple AWS Regions and accounts (for example, AWS Resource Access Manager [AWS RAM], CloudFormation StackSets, IAM cross-account roles).

Select deployment scenarios and services (for example, blue/green, rolling, canary).

Identify and remediate deployment issues (for example, service quotas, subnet sizing, CloudFormation errors, permissions).

Use AWS services (for example, Systems Manager, CloudFormation) to automate deployment processes.

Implement automated patch management.

Schedule automated tasks by using AWS services (for example, EventBridge, AWS Config).

Implement IAM features (for example, password policies, multi-factor authentication [MFA], roles, SAML, federated identity, resource policies, policy conditions).

Troubleshoot and audit access issues by using AWS services (for example, CloudTrail, IAM Access Analyzer, IAM policy simulator).

Validate service control policies (SCPs) and permissions boundaries.

Review AWS Trusted Advisor security checks.

Validate AWS Region and service selections based on compliance requirements.

Implement secure multi-account strategies (for example, AWS Control Tower, AWS Organizations).

Enforce a data classification scheme.

Create, manage, and protect encryption keys.

Implement encryption at rest (for example, AWS Key Management Service [AWS KMS]).

Implement encryption in transit (for example, AWS Certificate Manager [ACM], VPN).

Securely store secrets by using AWS services (for example, AWS Secrets Manager, Systems Manager Parameter Store).

Review reports or findings (for example, AWS Security Hub, Amazon GuardDuty, AWS Config, Amazon Inspector).

Configure a VPC (for example, subnets, route tables, network ACLs, security groups, NAT gateway, internet gateway).

Configure private connectivity (for example, Systems Manager Session Manager, VPC endpoints, VPC peering, VPN).

Configure AWS network protection services (for example, AWS WAF, AWS Shield).

Configure Route 53 hosted zones and records.

Implement Route 53 routing policies (for example, geolocation, geoproximity).

Configure DNS (for example, Route 53 Resolver).

Configure Amazon CloudFront and S3 origin access control (OAC).

Configure S3 static website hosting.

Interpret VPC configurations (for example, subnets, route tables, network ACLs, security groups).

Collect and interpret logs (for example, VPC Flow Logs, ELB access logs, AWS WAF web ACL logs, CloudFront logs).

Identify and remediate CloudFront caching issues.

Troubleshoot hybrid and private connectivity issues.

Implement cost allocation tags.

Identify and remediate underutilized or unused resources by using AWS services and tools (for example, Trusted Advisor, AWS Compute Optimizer, AWS Cost Explorer).

Configure AWS Budgets and billing alarms.

Assess resource usage patterns to qualify workloads for EC2 Spot Instances.

Identify opportunities to use managed services (for example, Amazon RDS, AWS Fargate, Amazon EFS).

Recommend compute resources based on performance metrics.

Monitor Amazon Elastic Block Store (Amazon EBS) metrics and modify configuration to increase performance efficiency.

Implement S3 performance features (for example, S3 Transfer Acceleration, multipart uploads).

Monitor RDS metrics and modify the configuration to increase performance efficiency (for example, Performance Insights, RDS Proxy).

Enable enhanced EC2 capabilities (for example, Elastic Network Adapter, instance store, placement groups).