• Build on the AWS global infrastructure
• Take advantage of the multiple availability options on AWS
• Build multiple AWS VPCs to suit requirements
• Create custom isolated networks to meet business needs

• Take advantage of different high availability options on AWS
• Create multi-AZ services
• Create multi-region services
• Identify what availability options exist for which AWS services
• Take advantage of resilient features in AWS services

• Calculate availability in terms of up and down time
• Set reasonable business metrics for RTO and RPO
• Make determinations on what types of DR plans a company needs 
• Implement a DR plan

• Learn the importance of security in the cloud LESSON FOUR Security
• See Identity & Access Management (IAM) in action 
• Secure applications using IAM users, groups, and policies

• Monitor AWS applications
• Alert on problems in applications
• Recover failures in your platform
• Understand testing and tradeoffs in automating recovery from failure

• Recognize the major differences between traditional data centers and cloud
• Understand how cloud infrastructure offers scalability and elasticity with potentially reduced costs
• Understand the objectives of the cloud infrastructure team

• Understand the power of cloud computing
• Estimate and calculating cloud costs
• Use workload knowledge and planning factor to reduce costs
• Adapt infrastructure to meet budget and performance requirements 
• Select the optimal DB type when migrating to the cloud
• Use file retention policies to reduce storage costs and management overhead

• Define and document performance goals
• Identify and resolve performance bottlenecks 
• Understand elasticity and scalability 
• Select the best instance for your performance goals
• Leverage archiving options for cost and performance

Storage and Databases

• Identify how automation can reduce error and effort
• Understand the benefits of IaC
• Explain the tradeoffs using different provisioning tools 
• Provision infrastructure using the AWS CLI and Terraform 
• Manage Terraform State and Terraform using best practices

• Apply Identity and Access Management best practices
• Use Identity and Access Management roles to access cloud services
• Fine-tune least privilege Identity and Access Management policies
• Understand Identity Federation concepts in the cloud

• Compare techniques to set up secure access to cloud servers
• Understand options available to establish secure connectivity to cloud networks 
• Investigate methods for controlling network ingress and egress in the cloud
• Assess the network access points of your environment

• Understand options available in the cloud for encrypting data at rest
• Use cloud SDKs to encrypt data from within the application code
• Use server-side encryption to ensure data is protected by cloud services
• Apply best practices for securing S3 storage
• Structure roles and responsibilities around key usage

• Identify vulnerabilities within infrastructure as code and OS configuration
• Use cloud native tools to identify insecure and out of compliant configurations in your environment 
• Leverage methods to defend against and detect exploits and intrusion-related behavior
• Incorporate “shift-left” security practices into a DevOps deployment pipeline