Certified Cloud Platform Solutions Arquitect - AWS

Certified Cloud Platform Solutions Arquitect - AWS

Domain 1: Design Secure Architectures (30%)

This domain evaluates the candidate's ability to protect data, systems, and resources using AWS best practices.

• 1.1 Design secure access to AWS resources: Identity and Access Management (IAM), access policies, roles, and identity federation.
• 1.2 Design secure workloads and applications: VPC configuration, subnets, Security Groups, NACLs, and attack protection (WAF, Shield).
• 1.3 Determine appropriate data security controls: Data encryption strategies at rest and in transit (KMS, AWS Certificate Manager) and secrets management.

Domain 2: Design Resilient Architectures (26%)

This focuses on the system's ability to recover from infrastructure or service disruptions, dynamically mitigating failures.

• 2.1 Design scalable and loosely coupled architectures: Use of messaging and queuing services (SQS, SNS), microservices (ECS, EKS), and serverless computing (Lambda).
• 2.2 Design highly available and fault-tolerant solutions: Multi-Availability Zone (Multi-AZ) deployments, load balancing strategies (ALB, NLB), and global routing (Route 53).
• 2.3 Determine disaster recovery (DR) strategies: RTO/RPO, pilot light , warm standby architectures, and multi-region deployments.

Domain 3: Design High-Performing Architectures (24%)

This evaluates the ability to select the most appropriate resource sizes and services based on compute, data, and network requirements.

• 3.1 Determine scalable and elastic storage solutions: Selection among block storage (EBS), file (EFS/FSx), and object (S3) based on access patterns.
• 3.2 Determine high-performing database solutions: Choosing between relational (RDS, Aurora) and NoSQL (DynamoDB) databases, use of caches (ElastiCache), and data warehouses (Redshift).
• 3.3 Determine network architectures that improve performance: Use of CloudFront for content delivery, AWS Global Accelerator, and latency optimization.

Domain 4: Design Cost-Optimized Architectures (20%)

This measures the capacity to design systems that deliver business value at the lowest possible price point.

• 4.1 Design cost-optimized storage solutions: S3 lifecycle policies, selection of storage classes, and elimination of orphaned resources.
• 4.2 Design cost-optimized compute solutions: Choosing the correct pricing model (Reserved Instances, Spot, Savings Plans) and auto-scaling (Auto Scaling).
• 4.3 Design cost-optimized network architectures: Minimizing data transfer costs, use of VPC Endpoints (PrivateLink), and NAT Gateways.