Cloud Solutions Architect - Certified Professional

Domain 1: Design of Scalable and Resilient Architectures

• High Availability (HA): Multi-zone and multi-region redundancy patterns.
• Disaster Recovery (DR): RTO/RPO metrics, Backup & Restore, Pilot Light, Warm Standby, and Multi-site strategies.
• Auto-scaling: Horizontal and vertical scaling policies based on demand metrics.
• Load Balancing: Layer 4 (Transport) and Layer 7 (Application) traffic distribution.
• Decoupling: Asynchronous communication using Message Queues and Pub/Sub patterns.
• Microservices: Container orchestration and stateless application design.

Domain 2: Security, Identity, and Compliance

• Identity and Access Management (IAM): Role-based access control (RBAC), federation, and Least Privilege principle.
• Network Security: Micro-segmentation, virtual firewalls (ACLs/Security Groups), and secure connectivity (VPN/Private Links).
• Data Protection: Encryption at-rest and in-transit, Key Management Systems (KMS), and SSL/TLS.
• Shared Responsibility Model: Security boundaries between the cloud provider and the consumer.
• Compliance: Activity logging, resource auditing, and regulatory standards (ISO, SOC, GDPR).

Domain 3: Data Management and Storage

• Storage Tiers: Use cases for Object, Block, and File storage.
• Database Selection: RDBMS (SQL) vs. NoSQL (Key-Value, Document, Graph, Wide-column).
• Data Consistency: CAP Theorem application and Eventual vs. Strong consistency models.
• Caching: Content Delivery Networks (CDN) and In-memory caching for latency reduction.

Domain 4: Operational Excellence and Automation

• Infrastructure as Code (IaC): Automated resource provisioning using templates and scripts.
• CI/CD Pipelines: Automated deployment workflows, Blue/Green, and Canary release strategies.
• Observability: Centralized logging, metrics telemetry, and Distributed Tracing.
• Managed Services: Evaluation of Managed vs. Self-managed (Unmanaged) infrastructure.

Domain 5: Cost Optimization and Governance (FinOps)

• Pricing Models: On-demand, Reserved capacity, and Spot/Preemptible instance utilization.
• Rightsizing: Resource utilization analysis and performance-to-cost balancing.
• Tagging and Allocation: Metadata strategies for cost attribution and department-level visibility.
• Cloud Governance: Organizational policies, service control boundaries, and automated guardrails