AWS Solutions Architect Professional

Task Statement 1: Architect network connectivity strategies

Knowledge Of:

• AWS global infrastructure
• AWS networking concepts (for example, Amazon VPC, AWS Direct Connect, AWS VPN, transitive routing, AWS container services)
• Hybrid DNS concepts (for example, Amazon Route 53 Resolver, on-premises DNS integration)
• Network segmentation (for example, subnetting, IP addressing, connectivity among VPCs)
• Network traffic monitoring

Skills In:

• Evaluating connectivity options for multiple VPCs
• Evaluating connectivity options for on-premises, co-location, and cloud integration
• Selecting AWS Regions and Availability Zones based on network and latency requirements
• Troubleshooting traffic flows by using AWS tools
• Utilizing service endpoints for service integrations

Task Statement 2: Prescribe security controls

Knowledge Of:

• AWS Identity and Access Management (IAM) and AWS Single Sign-On
• Route tables, security groups, and network ACLs
• Encryption keys and certificate management (for example, AWS Key Management Service [AWS KMS], AWS Certificate Manager [ACM])
• AWS security, identity, and compliance tools (for example, AWS CloudTrail, AWS Identity and Access Management Access Analyzer, AWS Security Hub, Amazon Inspector)

Skills In:

• Evaluating cross-account access management
• Integrating with third-party identity providers
• Deploying encryption strategies for data at rest and data in transit
• Developing a strategy for centralized security event notifications and auditing

Task Statement 3: Design reliable and resilient architectures.

Knowledge Of:

• • Recovery time objectives (RTOs) and recovery point objectives (RPOs)

<li >Disaster recovery strategies (for example, using AWS Elastic Disaster Recovery [CloudEndure Disaster Recovery], pilot light, warm standby, and multi-site)

• Data backup and restoration

Skills In:

• Designing disaster recovery solutions based on RTO and RPO requirements
• Implementing architectures to automatically recover from failure
• Developing the optimal architecture by considering scale-up and scale-out options
• Designing an effective backup and restoration strategy

Task Statement 4: Design a multi-account AWS environment.

Knowledge Of:

• AWS Organizations and AWS Control Tower
• Multi-account event notifications
• AWS resource sharing across environments

Skills In:

• Evaluating the most appropriate account structure for organizational requirements
• Recommending a strategy for central logging and event notifications
• Developing a multi-account governance model

Task Statement 5: Determine cost optimization and visibility strategies.

Knowledge Of:

• AWS cost and usage monitoring tools (for example, AWS Trusted Advisor, AWS Pricing calculator, AWS Cost Explorer, AWS Budgets)
• AWS purchasing options (for example, Reserved Instances, Savings Plans, Spot Instances)
• AWS right-sizing visibility tools (for example, AWS Compute Optimizer, Amazon S3 Storage Lens)

Skills In:

• Monitoring cost and usage with AWS tools
• Developing an effective tagging strategy that maps costs to business units
• Understanding how purchasing options affect cost and performance

Task Statement 1: Design a deployment strategy to meet business requirements.

Task Statement 2: Design a solution to ensure business continuity.

Task Statement 3: Determine security controls based on requirements.

Task Statement 4: Design a strategy to meet reliability requirements.

Task Statement 5: Design a solution to meet performance objectives.

Task Statement 6: Determine a cost optimization strategy to meet solution goals and objectives.

Task Statement 1: Determine a strategy to improve overall operational excellence.

Task Statement 2: Determine a strategy to improve security.

Task Statement 3: Determine a strategy to improve performance.

Task Statement 4: Determine a strategy to improve reliability.

Task Statement 5: Identify opportunities for cost optimizations.

Task Statement 1: Select existing workloads and processes for potential migration.

Task Statement 2: Determine the optimal migration approach for existing workloads.

Task Statement 3: Determine a new architecture for existing workloads.

Task Statement 4: Determine opportunities for modernization and enhancements.