Amazon.co.uk Widgets

Log in

X
AWS Certified Solutions Architect Professional SAP-C02 exam Key Facts

AWS offers a comprehensive suite of services designed to meet the rigorous demands of modern enterprises. To navigate these services effectively, professionals often pursue certifications like the AWS Certified Solutions Architect Professional SAP-C02 exam, which validates expertise in designing secure and compliant cloud architectures.

TL:DR – My key notes for the AWS Certified Solutions Architect Professional SAP-C02 exam.

Contents

Technologies and concepts that might appear on the exam

  • Compute
  • Cost management
  • Database
  • Disaster recovery
  • High availability
  • Management and governance
  • Microservices and component decoupling
  • Migration and data transfer
  • Networking, connectivity, and content delivery
  • Security
  • Serverless design principles
  • Storage

In-scope AWS services and features

The following list contains AWS services and features that are in scope for the exam. This list is non-exhaustive and is subject to change. AWS offerings appear in categories that align with the offerings’ primary functions:

Analytics

Analytics in the cloud is an essential component for data-driven decision-making. AWS offers a variety of services to meet diverse analytics needs, enabling businesses to process, analyze, and derive insights from vast amounts of data.

Amazon Athena is a serverless query service that allows users to analyze data stored in Amazon S3 using standard SQL, eliminating the need for complex infrastructure setup. Amazon Kinesis, on the other hand, enables real-time processing of streaming data, allowing businesses to react instantly to live events.

For large-scale data processing, AWS Glue is a fully managed ETL service that simplifies data preparation for analytics. Similarly, Amazon Redshift provides a powerful, scalable data warehouse service optimized for complex querying and analytics across large datasets.

As data ecosystems evolve, machine learning models become increasingly important for predictive analytics. Amazon QuickSight integrates seamlessly with AWS services to deliver interactive dashboards and visualizations, helping teams make informed decisions faster.

For those preparing for the AWS Certified Solutions Architect Professional SAP-C02 exam, understanding the key analytics services is crucial. Knowledge of how to utilize these services effectively can enhance solution architecture and drive impactful insights for organizations.

These tools empower businesses to manage and extract value from data, optimizing operations and decision-making processes.

Amazon Athena
Amazon Athena – Key Facts
  • Service: A serverless interactive query service that allows you to analyze data in Amazon S3 using SQL.
  • Use Cases: Ideal for querying large datasets in S3 without the need to manage infrastructure.
  • Link: https://console.aws.amazon.com/athena
AWS Data Exchange
AWS Data Exchange – Key Facts
  • Service: A platform for finding, subscribing to, and using third-party data in the cloud.
  • Use Cases: Facilitates access to datasets from external providers for analytics or business insights.
  • Link: https://docs.aws.amazon.com/data-exchange/
Amazon Data Firehose
Amazon Data Firehose – Key Facts
  • Service: A fully managed service for real-time streaming data delivery to AWS destinations.
  • Use Cases: Used for collecting, transforming, and loading streaming data into AWS data stores.
  • Link: https://console.aws.amazon.com/kinesis/firehose
Amazon EMR
Amazon EMR – Key Facts
  • Service: A managed cluster platform for running big data frameworks like Apache Hadoop and Spark.
  • Use Cases: Ideal for processing vast amounts of data in a distributed environment.
  • Link: https://console.aws.amazon.com/elasticmapreduce
AWS Glue
AWS Glue – Key Facts
  • Service: A fully managed ETL (Extract, Transform, Load) service for moving and transforming data.
  • Use Cases: Facilitates data cleaning, cataloging, and transformation for analytics and machine learning.
  • Link: https://console.aws.amazon.com/glue
Amazon Kinesis Data Streams
Amazon Kinesis Data Streams – Key Facts
  • Service: A platform for real-time streaming data collection and processing.
  • Use Cases: Ideal for ingesting large amounts of real-time data for analytics and application monitoring.
  • Link: https://console.aws.amazon.com/kinesis
AWS Lake Formation
AWS Lake Formation – Key Facts
  • Service: A service for setting up, managing, and securing data lakes on AWS.
  • Use Cases: Facilitates the building of secure, scalable data lakes to manage large amounts of data.
  • Link: https://console.aws.amazon.com/lakeformation
Amazon Managed Service for Apache Flink
Amazon Managed Service for Apache Flink – Key Facts
Amazon Managed Streaming for Apache Kafka (Amazon MSK)
Amazon Managed Streaming for Apache Kafka (Amazon MSK) – Key Facts
  • Service: A fully managed service that simplifies setting up, managing, and scaling Apache Kafka clusters.
  • Use Cases: Used for real-time data streaming and processing large-scale data feeds.
  • Link: https://console.aws.amazon.com/msk
Amazon OpenSearch Service
Amazon OpenSearch Service – Key Facts
  • Service: A fully managed service for real-time search, monitoring, and analytics on large data sets.
  • Use Cases: Perfect for log analytics, full-text search, and performance monitoring.
  • Link: https://console.aws.amazon.com/es
Amazon QuickSight
Amazon QuickSight – Key Facts
  • Service: A fast, cloud-powered business intelligence service for data visualization and analysis.
  • Use Cases: Enables users to create interactive dashboards, reports, and machine learning-powered insights.
  • Link: https://console.aws.amazon.com/quicksight

Application Integration

Application integration is critical for building modern, scalable, and responsive systems. AWS provides a suite of services that facilitate this integration seamlessly. Amazon AppFlow enables secure data transfer between AWS services and SaaS applications, supporting bi-directional data flows with a no-code interface.

AWS AppSync empowers developers to build GraphQL APIs, simplifying real-time data access across multiple data sources. It's ideal for applications requiring low latency and high availability. For event-driven architectures, Amazon EventBridge allows seamless connection of AWS services and SaaS applications, handling a wide variety of events with minimal management.

Message-driven integration is made easier with Amazon MQ, which offers a managed message broker service. It supports both ActiveMQ and RabbitMQ, enabling smooth migration from on-premise brokers. Amazon SNS delivers scalable push messaging for sending notifications to users, while Amazon SQS facilitates the decoupling of application components, ensuring high availability and fault tolerance.

Finally, AWS Step Functions enables orchestration of multiple AWS services in a visual workflow, improving the reliability and scalability of business processes. These services, when combined, offer powerful integration solutions, streamlining complex workflows for enterprises.

For those preparing for the AWS Certified Solutions Architect Professional SAP-C02 exam, understanding the integration of these services is essential for designing robust, scalable, and efficient cloud-based applications.

Amazon AppFlow
Amazon AppFlow – Key Facts
  • Service Overview: Amazon AppFlow is a fully managed integration service that allows you to securely transfer data between AWS services and software as a service (SaaS) applications.
  • Use Cases: Useful for syncing customer data, creating insights, and automating data-driven workflows.
  • Link: https://console.aws.amazon.com/appflow
AWS AppSync
AWS AppSync – Key Facts
  • Service Overview: AWS AppSync is a fully managed service for building and deploying GraphQL APIs by securely connecting applications to data sources.
  • Use Cases: Optimized for building scalable and real-time applications, particularly mobile apps.
  • Link: https://console.aws.amazon.com/appsync
Amazon EventBridge
Amazon EventBridge – Key Facts
  • Service Overview: EventBridge is a serverless event bus that enables you to easily connect application data from your own apps, integrated SaaS apps, and AWS services.
  • Use Cases: Ideal for event-driven architectures, real-time analytics, and microservices.
  • Link: https://console.aws.amazon.com/eventbridge
Amazon MQ
Amazon MQ – Key Facts
  • Service Overview: Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ, designed to facilitate message communication between distributed systems.
  • Use Cases: Perfect for migrating from self-managed brokers to a fully managed solution with minimal application changes.
  • Link: https://console.aws.amazon.com/amazonmq
Amazon Simple Notification Service (Amazon SNS)
Amazon Simple Notification Service (Amazon SNS) – Key Facts
  • Service Overview: Amazon SNS is a fully managed messaging service for sending notifications to subscribers or other applications using a push mechanism.
  • Use Cases: Effective for applications needing to send alerts, status updates, or other communications to users or other services.
  • Link: https://console.aws.amazon.com/sns
Amazon Simple Queue Service (Amazon SQS)
Amazon Simple Queue Service (Amazon SQS) – Key Facts
  • Service Overview: Amazon SQS is a fully managed message queuing service that helps decouple distributed applications.
  • Use Cases: Ideal for handling large amounts of messages, reducing the complexity of managing messaging systems.
  • Link: https://console.aws.amazon.com/sqs
AWS Step Functions
AWS Step Functions – Key Facts
  • Service Overview: AWS Step Functions is a serverless orchestration service for creating and running workflows that coordinate multiple AWS services.
  • Use Cases: Use it to build complex workflows for microservices, batch processing, and long-running operations.
  • Link: https://console.aws.amazon.com/states

Blockchain

Amazon Managed Blockchain is a fully managed service designed to simplify the creation and management of scalable blockchain networks. It supports prominent frameworks like Hyperledger Fabric and Ethereum, providing a secure and cost-effective solution for businesses looking to leverage decentralized technology. With Amazon Managed Blockchain, users can easily set up and manage blockchain networks without the complexity of handling the underlying infrastructure.

This service is ideal for industries such as finance, supply chain, and healthcare, where data integrity and transparency are paramount. Amazon Managed Blockchain allows organizations to build blockchain networks that enable transparent, immutable records for transactions, contracts, and other business processes. The service ensures scalability by automatically adjusting resources based on usage.

Amazon Managed Blockchain integrates seamlessly with other AWS services, offering enhanced security features such as encryption, AWS Identity and Access Management (IAM) for fine-grained access control, and Amazon CloudWatch for monitoring. This integration makes it easier to manage large-scale, complex applications.

For those preparing for the AWS Certified Solutions Architect Professional SAP-C02 exam, understanding Amazon Managed Blockchain is crucial. Its ability to simplify blockchain deployment while maintaining high standards of security and performance is a key consideration for architects designing scalable, resilient systems.

Amazon Managed Blockchain
Amazon Managed Blockchain – Key Facts
  • Service Type: Blockchain as a Service
  • Purpose: Create and manage scalable blockchain networks using popular frameworks like Hyperledger Fabric and Ethereum.
  • Use Cases: Suitable for applications that require secure, decentralized record-keeping such as supply chain, financial services, and more.
  • Features: Easy-to-use, fully managed service with features like membership management, node hosting, and scalable infrastructure. Supports automatic scaling of blockchain networks.
  • Integration: Can be integrated with other AWS services like Amazon S3, Amazon CloudWatch, and AWS IAM for enhanced security and monitoring.
  • Security: Built-in encryption for data in transit and at rest. Integration with AWS Identity and Access Management (IAM) for fine-grained access control.
  • Pricing: Pay only for the resources you use with a flexible, usage-based pricing model.
  • Link: https://console.aws.amazon.com/managedblockchain

Business Applications

Amazon Simple Email Service (Amazon SES) is a highly scalable and cost-effective email-sending service that is integral for business applications requiring reliable email communication. AWS SES allows developers and businesses to send transactional emails, marketing messages, and notifications efficiently and securely. It provides features like high deliverability rates, flexible API integrations, and seamless management through the AWS Management Console.

Businesses can leverage Amazon SES to enhance customer engagement by integrating it with various AWS services. For instance, it can be used in combination with Amazon S3 for email content storage or AWS Lambda to trigger event-driven workflows based on email activity. The service’s support for both raw and templated email formats ensures that businesses can customize messages based on specific customer interactions or behaviors.

When preparing for the AWS Certified Solutions Architect Professional SAP-C02 exam, understanding how to integrate Amazon SES with other AWS services is crucial. The service allows architects to design email systems that are cost-efficient, secure, and reliable, supporting applications ranging from customer notifications to marketing campaigns.

With features like dedicated IP addresses, email feedback loops, and built-in authentication mechanisms, Amazon SES ensures businesses can maintain a high reputation and improve overall email performance. It’s a key tool in the AWS ecosystem for building robust business communication systems.

Amazon Simple Email Service (Amazon SES)
Amazon Simple Email Service (Amazon SES) – Key Facts
  • Service Overview: Amazon Simple Email Service (Amazon SES) is a cloud-based email sending service designed to help businesses send marketing, notification, and transactional emails at scale. It provides flexible email sending options, including SMTP and API-based integrations.
  • Key Features: Includes high deliverability, dedicated IP addresses, feedback loops, and content filtering for spam. SES integrates seamlessly with other AWS services like AWS Lambda for automation and AWS SNS for notifications.
  • Pricing: Pay-as-you-go pricing model, with charges based on the number of emails sent and data transfer. There is no upfront cost, and users can send up to 62,000 emails for free each month if used with Amazon EC2.
  • Use Cases: Commonly used for email marketing campaigns, sending notifications, transactional emails like invoices, and even bulk communications.
  • Link: https://console.aws.amazon.com/ses

Cloud Financial Management

Cloud financial management is crucial for organizations seeking to optimize their AWS costs while maintaining scalability and performance. Tools such as AWS Certified Solutions Architect Professional SAP-C02 exam provide professionals with the expertise needed to design and manage cost-efficient architectures, ensuring that companies can manage their cloud expenditures effectively.

AWS offers a variety of financial management tools, including AWS Budgets, AWS Cost Explorer, and the AWS Cost and Usage Report, which allow users to track spending and usage. AWS Budgets enables proactive monitoring, setting cost and usage alerts to prevent overspending. Meanwhile, AWS Cost Explorer visualizes spending trends and helps in analyzing resource utilization, offering forecasts that guide strategic decision-making.

Another important tool is AWS Savings Plans, which offers flexible pricing options. By committing to a consistent amount of usage, organizations can significantly reduce their cloud infrastructure costs, making it an essential component of any cost optimization strategy.

The ability to integrate these tools with other AWS services and customize them based on specific business needs ensures that companies can maintain a robust, cost-effective cloud infrastructure. Understanding and applying these tools through certifications like the AWS Certified Solutions Architect Professional SAP-C02 exam is key to mastering cloud financial management.

AWS Budgets
AWS Budgets – Key Facts
  • Overview: AWS Budgets helps you monitor your AWS costs and usage, allowing you to set custom cost and usage budgets that alert you when you approach or exceed those limits.
  • Benefits: Provides proactive notifications to help prevent overspending, enables tracking of cost trends and usage forecasts.
  • Link: AWS Budgets Console
AWS Cost and Usage Report
AWS Cost and Usage Report – Key Facts
  • Overview: AWS Cost and Usage Report provides detailed insights into your AWS costs and usage patterns, giving you the data you need to optimize cost efficiency.
  • Benefits: Comprehensive and detailed reports, integration with Amazon Athena for querying, and export capabilities to Amazon S3 for long-term storage.
  • Link: AWS Cost and Usage Report Console
AWS Cost Explorer
AWS Cost Explorer – Key Facts
  • Overview: AWS Cost Explorer enables you to visualize, understand, and manage your AWS costs and usage over time with a user-friendly interface.
  • Benefits: Customizable reports, filtering by service, region, or time, and the ability to forecast future costs based on historical data.
  • Link: AWS Cost Explorer Console
Savings Plans
Savings Plans – Key Facts
  • Overview: AWS Savings Plans offer flexible pricing that allows you to save money on your AWS usage in exchange for committing to consistent usage over a 1- or 3-year term.
  • Benefits: Flexible, applies to a wide range of services, and offers up to 72% savings compared to on-demand pricing.
  • Link: Savings Plans Console

Compute

The AWS compute services provide a highly flexible and scalable infrastructure, crucial for a range of cloud computing tasks. Key services, such as Amazon EC2, offer dynamic compute power with multiple instance types tailored to diverse workloads. By providing both virtual machines and serverless environments, AWS enables efficient scaling, from small applications to large-scale enterprise solutions.

AWS also integrates managed container services, like Amazon ECS and Amazon EKS, to simplify container orchestration, ensuring optimal resource utilization and enhanced deployment speeds. Services like AWS Lambda and AWS Fargate allow developers to run code and containers without provisioning or managing servers, fostering a serverless architecture.

For businesses seeking to optimize performance and reduce costs, AWS Auto Scaling automatically adjusts resources in real time, ensuring applications always operate at peak efficiency. Similarly, AWS Elastic Beanstalk abstracts infrastructure management, enabling developers to focus on coding while AWS handles deployment, monitoring, and scaling.

To achieve mastery in designing and managing AWS cloud infrastructure, it is critical to be well-prepared for certifications such as the AWS Certified Solutions Architect Professional SAP-C02 exam, which evaluates expertise in architecture, security, and high-availability best practices across AWS services.

AWS App Runner
AWS App Runner – Key Facts
  • Service Overview: AWS App Runner is a fully managed service for deploying web applications and APIs without managing infrastructure.
  • Key Features: App Runner simplifies container deployment and scaling with minimal setup required.
  • Use Cases: Ideal for developers who need to focus on code, not infrastructure.
  • Benefits: Automates deployments, scaling, and load balancing.
  • Link: AWS Console - AWS App Runner
AWS Auto Scaling
AWS Auto Scaling – Key Facts
  • Service Overview: AWS Auto Scaling automatically adjusts capacity to maintain steady, predictable performance.
  • Key Features: Scales EC2 instances, ECS, DynamoDB, and more based on dynamic metrics.
  • Use Cases: Essential for maintaining cost-effective scaling for fluctuating workloads.
  • Benefits: Reduces costs by scaling only as needed while ensuring performance.
  • Link: AWS Console - AWS Auto Scaling
AWS Batch
AWS Batch – Key Facts
  • Service Overview: AWS Batch enables the efficient running of batch processing workloads at any scale.
  • Key Features: Fully managed, scalable, and integrated with various AWS services like EC2 and EFS.
  • Use Cases: Perfect for large-scale parallel and high-performance computing tasks.
  • Benefits: Automates batch job management, reducing time and complexity.
  • Link: AWS Console - AWS Batch
AWS Elastic Beanstalk
AWS Elastic Beanstalk – Key Facts
  • Service Overview: AWS Elastic Beanstalk simplifies the process of deploying and managing applications.
  • Key Features: Automatically handles provisioning, load balancing, scaling, and monitoring.
  • Use Cases: Ideal for developers looking to deploy web apps without managing the underlying infrastructure.
  • Benefits: Allows for rapid application deployment and scaling with minimal overhead.
  • Link: AWS Console - AWS Elastic Beanstalk
Amazon Elastic Compute Cloud (Amazon EC2)
Amazon Elastic Compute Cloud (Amazon EC2) – Key Facts
  • Service Overview: Amazon EC2 provides scalable compute capacity in the cloud.
  • Key Features: Includes flexibility in choosing instances, pricing models, and configurations.
  • Use Cases: Best for running web servers, databases, or large-scale processing workloads.
  • Benefits: On-demand capacity, cost-efficiency, and quick scaling.
  • Link: AWS Console - Amazon EC2
Amazon EC2 Auto Scaling
Amazon EC2 Auto Scaling – Key Facts
  • Service Overview: EC2 Auto Scaling helps maintain application availability and scales EC2 capacity up or down automatically.
  • Key Features: Allows automatic scaling to ensure optimal performance at minimal cost.
  • Use Cases: Used in applications that need to scale dynamically based on demand.
  • Benefits: Ensures cost-effective scaling, reducing resource wastage.
  • Link: AWS Console - EC2 Auto Scaling
AWS Fargate
AWS Fargate – Key Facts
  • Service Overview: AWS Fargate is a serverless compute engine for containers.
  • Key Features: Runs containers without the need to manage servers or clusters.
  • Use Cases: Ideal for containerized applications that need flexible, on-demand scaling.
  • Benefits: Simplifies container management, reducing overhead.
  • Link: AWS Console - AWS Fargate
AWS Lambda
AWS Lambda – Key Facts
  • Service Overview: AWS Lambda runs code in response to events and automatically manages compute resources.
  • Key Features: Automatically scales and manages functions based on the incoming traffic or events.
  • Use Cases: Ideal for microservices, real-time file processing, and event-driven architectures.
  • Benefits: Reduces infrastructure management overhead and optimizes resource utilization.
  • Link: AWS Console - AWS Lambda
Amazon Lightsail
Amazon Lightsail – Key Facts
  • Service Overview: Amazon Lightsail offers an easy-to-use cloud platform with simplified VPS hosting.
  • Key Features: Pre-configured instances, databases, and scalable storage options.
  • Use Cases: Perfect for simple web apps, blogs, and websites.
  • Benefits: Easy setup, predictable pricing, and simplified management.
  • Link: AWS Console - Amazon Lightsail
AWS Outposts
AWS Outposts – Key Facts
  • Service Overview: AWS Outposts brings AWS infrastructure on-premises for a hybrid cloud environment.
  • Key Features: Consistent hybrid experience with integrated hardware and AWS cloud services.
  • Use Cases: Suitable for workloads requiring low latency or data residency requirements.
  • Benefits: Bridges on-premises data centers with cloud solutions, offering a consistent experience.
  • Link: AWS Console - AWS Outposts
AWS Wavelength
AWS Wavelength – Key Facts
  • Service Overview: AWS Wavelength extends AWS infrastructure to telecom networks, enabling ultra-low latency applications.
  • Key Features: Optimized for applications requiring single-digit millisecond latencies.
  • Use Cases: Ideal for IoT, 5G, and real-time media streaming applications.
  • Benefits: Brings cloud computing closer to end-users, reducing latency and improving performance.
  • Link: AWS Console - AWS Wavelength

Containers

Key facts about container services in AWS reflect the power of containerization to streamline development and operations. Containerized applications offer the flexibility of microservices architectures, providing rapid scaling and high availability. AWS supports container orchestration through services like Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS).

Amazon ECS, a fully managed container orchestration service, simplifies deploying and managing containers at scale. It supports both Docker containers and integration with other AWS services, including AWS Fargate for serverless computing. Similarly, Amazon EKS provides an easy way to run Kubernetes clusters on AWS, benefiting from native integrations with IAM, VPC, and AWS security tools.

For storing container images, Amazon Elastic Container Registry (ECR) offers a scalable solution, while Amazon EKS Anywhere and EKS Distro extend Kubernetes management to hybrid and on-premises environments. This seamless integration enables users to maintain consistency in containerized application management.

Achieving proficiency in these services can be pivotal for professionals seeking to advance their cloud architecture expertise. One such credential is the AWS Certified Solutions Architect Professional SAP-C02 exam, a certification that validates in-depth knowledge of AWS container services and architecture. This certification demonstrates the skill to architect highly available, cost-efficient, and scalable solutions using AWS container technologies.

Amazon Elastic Container Registry (Amazon ECR)
Amazon Elastic Container Registry (Amazon ECR) – Key Facts
  • Purpose: A fully managed container image registry that allows developers to store, manage, and deploy Docker container images.
  • Key Feature: Supports both private and public container image repositories.
  • Integration: Easily integrates with Amazon ECS, Amazon EKS, and AWS Lambda for seamless containerized application deployment.
  • Security: Provides encryption at rest and integrates with AWS IAM for fine-grained access control.
  • Link: https://console.aws.amazon.com/ecr
Amazon Elastic Container Service (Amazon ECS)
Amazon Elastic Container Service (Amazon ECS) – Key Facts
  • Purpose: A fully managed service that enables you to run Docker containers at scale on AWS.
  • Key Feature: Supports both EC2 instances and AWS Fargate for serverless container deployments.
  • Scalability: Automatically scales based on the resource needs of your containers.
  • Integration: Works seamlessly with Amazon ECR, Amazon CloudWatch, and AWS IAM for enhanced management and security.
  • Link: https://console.aws.amazon.com/ecs
Amazon ECS Anywhere
Amazon ECS Anywhere – Key Facts
  • Purpose: Extends Amazon ECS to on-premises environments, enabling hybrid cloud container management.
  • Key Feature: Allows for management of both cloud and on-premises resources using the same ECS interface.
  • Flexibility: Supports diverse on-premises infrastructures, including virtual machines and bare-metal servers.
  • Integration: Leverages existing AWS services for monitoring, scaling, and management.
  • Link: https://console.aws.amazon.com/ecs
Amazon Elastic Kubernetes Service (Amazon EKS)
Amazon Elastic Kubernetes Service (Amazon EKS) – Key Facts
  • Purpose: A fully managed Kubernetes service that simplifies deploying, managing, and scaling containerized applications using Kubernetes.
  • Key Feature: Supports high availability and security for running production workloads in Kubernetes.
  • Integration: Integrates with AWS services like IAM, CloudWatch, and VPC for enhanced security and monitoring.
  • Scalability: Automatically scales clusters based on the workload demands.
  • Link: https://console.aws.amazon.com/eks
Amazon EKS Anywhere
Amazon EKS Anywhere – Key Facts
  • Purpose: Extends Amazon EKS to on-premises environments for running Kubernetes clusters outside of AWS.
  • Key Feature: Provides consistent Kubernetes management across hybrid and multi-cloud infrastructures.
  • Flexibility: Supports on-premises bare-metal and virtual environments.
  • Integration: Seamlessly integrates with EKS and AWS ecosystem for unified management.
  • Link: https://console.aws.amazon.com/eks
Amazon EKS Distro
Amazon EKS Distro – Key Facts
  • Purpose: The open-source version of the Amazon EKS Kubernetes platform for running Kubernetes clusters on-premises or in the cloud.
  • Key Feature: Provides the same Kubernetes distribution used by Amazon EKS for seamless hybrid environments.
  • Flexibility: Can be deployed across a range of infrastructure including virtual machines and bare-metal servers.
  • Integration: Integrates with various AWS tools for monitoring, scaling, and management.
  • Link: https://console.aws.amazon.com/eks

Database

Amazon Web Services (AWS) offers a comprehensive suite of database solutions that cater to a wide range of use cases, from relational databases to NoSQL and data warehouses. AWS databases are designed for high availability, durability, and scalability, making them ideal for businesses of all sizes.

Amazon RDS (Relational Database Service) provides managed support for various database engines, including MySQL, PostgreSQL, and Oracle, enabling seamless backups, automatic patching, and scaling. Amazon DynamoDB, a fully managed NoSQL database, delivers single-digit millisecond response times, crucial for applications requiring consistent performance and rapid scalability.

For graph-based data management, Amazon Neptune supports both property-graph and RDF models, allowing for fast querying of highly connected datasets. For analytical workloads, Amazon Redshift offers a fast, fully managed data warehouse that supports complex queries over petabytes of data.

Amazon Aurora, a MySQL- and PostgreSQL-compatible relational database, delivers high performance with built-in scalability, security, and availability. Additionally, Amazon ElastiCache accelerates application performance by providing an in-memory data store, reducing database load.

To achieve proficiency in these AWS services, the AWS Certified Solutions Architect Professional SAP-C02 exam equips professionals with the skills required to architect, deploy, and manage these databases effectively in enterprise environments.

Amazon Aurora - Key Facts
Amazon Aurora - Key Facts
  • Overview: Amazon Aurora is a fully managed, relational database engine designed for high performance and availability. It is compatible with MySQL and PostgreSQL, providing 5 times the throughput of standard MySQL with better security and availability.
  • Key Feature: High availability with multi-AZ deployments and automatic failover.
  • Scalability: Aurora automatically scales storage up to 128TB and provides up to 15 read replicas for high-performance applications.
  • Link: https://console.aws.amazon.com/rds/home?region=us-east-1#databases:
Amazon Aurora Serverless - Key Facts
Amazon Aurora Serverless - Key Facts
  • Overview: Amazon Aurora Serverless is an on-demand, auto-scaling version of Amazon Aurora. It automatically adjusts capacity based on application needs, making it cost-effective for variable workloads.
  • Key Feature: Automatically scales compute capacity up and down based on application demand.
  • Scalability: Supports automatic start-up, shut-down, and scaling based on usage.
  • Link: https://console.aws.amazon.com/rds/home?region=us-east-1#databases:
Amazon DocumentDB (with MongoDB compatibility) - Key Facts
Amazon DocumentDB (with MongoDB compatibility) - Key Facts
  • Overview: Amazon DocumentDB is a fully managed document database service that supports MongoDB workloads. It is designed for high availability and scalability.
  • Key Feature: Fully managed, scalable, and highly available MongoDB-compatible database.
  • Scalability: Automatically scales storage up to 64 TB and offers high availability with automatic failover.
  • Link: https://console.aws.amazon.com/rds/home?region=us-east-1#databases:
Amazon DynamoDB - Key Facts
Amazon DynamoDB - Key Facts
  • Overview: Amazon DynamoDB is a fast, fully managed NoSQL database that provides seamless scalability and high performance. It is designed for applications requiring low-latency data access.
  • Key Feature: Fully managed with automatic scaling for tables, and support for both document and key-value store models.
  • Scalability: Scales horizontally and supports millions of requests per second without performance degradation.
  • Link: https://console.aws.amazon.com/dynamodb/home?region=us-east-1:
Amazon ElastiCache - Key Facts
Amazon ElastiCache - Key Facts
  • Overview: Amazon ElastiCache is a fully managed, in-memory data store that supports Redis and Memcached. It is used for accelerating database workloads and caching.
  • Key Feature: Improves application performance by providing faster access to data stored in memory.
  • Scalability: Scales to handle massive amounts of traffic with minimal latency.
  • Link: https://console.aws.amazon.com/elasticache/home?region=us-east-1:
Amazon Keyspaces (for Apache Cassandra) - Key Facts
Amazon Keyspaces (for Apache Cassandra) - Key Facts
  • Overview: Amazon Keyspaces is a scalable, highly available NoSQL database service compatible with Apache Cassandra.
  • Key Feature: Fully managed, scalable Cassandra-compatible database designed for applications requiring massive scale and availability.
  • Scalability: Automatically scales to meet application demands with no downtime.
  • Link: https://console.aws.amazon.com/keyspaces/home?region=us-east-1:
Amazon Neptune - Key Facts
Amazon Neptune - Key Facts
  • Overview: Amazon Neptune is a fast, fully managed graph database service that supports both property-graph and RDF graph models.
  • Key Feature: Optimized for storing and querying highly connected data at scale.
  • Scalability: Offers high availability with multi-AZ support and is capable of scaling to billions of relationships and queries.
  • Link: https://console.aws.amazon.com/neptune/home?region=us-east-1:
Amazon Relational Database Service (Amazon RDS) - Key Facts
Amazon Relational Database Service (Amazon RDS) - Key Facts
  • Overview: Amazon RDS is a fully managed relational database service that supports multiple database engines, including MySQL, PostgreSQL, Oracle, and Microsoft SQL Server.
  • Key Feature: Simplifies the management of relational databases, automating administrative tasks like backups, patching, and scaling.
  • Scalability: Supports both vertical and horizontal scaling to meet the needs of growing applications.
  • Link: https://console.aws.amazon.com/rds/home?region=us-east-1#databases:
Amazon Redshift - Key Facts
Amazon Redshift - Key Facts
  • Overview: Amazon Redshift is a fully managed data warehouse service that enables fast querying and analytics of large datasets.
  • Key Feature: Provides high-performance querying capabilities using parallel query execution and columnar storage.
  • Scalability: Automatically scales to accommodate large amounts of structured data.
  • Link: https://console.aws.amazon.com/redshift/home?region=us-east-1:
Amazon Timestream - Key Facts
Amazon Timestream - Key Facts
  • Overview: Amazon Timestream is a time-series database service designed to store and analyze time-stamped data, ideal for IoT applications, metrics, and monitoring.
  • Key Feature: Offers built-in analytics for time-series data, including functions like downsampling, filtering, and grouping.
  • Scalability: Scales to handle trillions of time-series events while providing low-latency query performance.
  • Link: https://console.aws.amazon.com/timestream/home?region=us-east-1:

Developer Tools

Key facts about AWS Developer Tools provide developers with the necessary resources to efficiently build, test, and deploy applications at scale. These tools are specifically designed to integrate seamlessly into continuous integration and continuous delivery (CI/CD) workflows, enhancing productivity and reducing time-to-market.

AWS CodePipeline automates the build, test, and deployment phases, while AWS CodeBuild offers scalable build services that are fully managed. AWS CodeDeploy simplifies the deployment process by allowing for easy integration with popular environments like Amazon EC2 and Lambda. Similarly, AWS CodeCommit is a secure, scalable Git-based source control service designed to handle large repositories with ease.

For deeper insights into code performance and recommendations, Amazon CodeGuru utilizes machine learning to identify issues, security vulnerabilities, and even performance bottlenecks within your codebase. Developers can also make use of AWS X-Ray, which provides comprehensive tracing to monitor and analyze application performance across microservices.

For those pursuing advanced cloud expertise, the AWS Certified Solutions Architect Professional SAP-C02 exam is an excellent certification to validate the skills required for designing and deploying complex applications on AWS, further enhancing expertise in leveraging AWS developer tools. These tools empower teams to deliver high-quality applications faster and more securely.

AWS CodeArtifact
AWS CodeArtifact – Key Facts
  • Service Overview: AWS CodeArtifact is a fully managed artifact repository service that makes it easy to store and share software packages used in your development process.
  • Features: Supports a variety of package formats, including Maven, npm, Python, and NuGet, with integration into existing CI/CD workflows.
  • Security: Enables controlled access to artifacts with AWS IAM roles and policies, ensuring secure package sharing and storage.
  • Integration: Seamlessly integrates with other AWS services such as AWS CodeBuild and AWS CodePipeline for a smooth DevOps workflow.
  • Link: https://console.aws.amazon.com/codeartifact
AWS CodeBuild
AWS CodeBuild – Key Facts
  • Service Overview: AWS CodeBuild is a fully managed build service that compiles source code, runs tests, and produces software packages ready for deployment.
  • Features: Provides fully customizable build environments, automatically scales to meet demand, and integrates with popular source control services like GitHub and AWS CodeCommit.
  • Security: Supports encrypted builds, with IAM permissions to control access and secure your code during the build process.
  • Integration: Easily integrates into AWS CI/CD pipelines with services such as AWS CodePipeline and AWS CodeDeploy.
  • Link: https://console.aws.amazon.com/codebuild
AWS CodeDeploy
AWS CodeDeploy – Key Facts
  • Service Overview: AWS CodeDeploy automates application deployment to a variety of compute services, such as EC2, Lambda, and on-premises servers.
  • Features: Supports blue/green and rolling deployments, ensuring minimal downtime and smoother application updates.
  • Security: Ensures secure deployments with IAM roles, encryption, and support for AWS CodePipeline for a streamlined, automated delivery process.
  • Integration: Easily integrates with GitHub, AWS CodeCommit, and other source control services for seamless DevOps operations.
  • Link: https://console.aws.amazon.com/codedeploy
Amazon CodeGuru
Amazon CodeGuru – Key Facts
  • Service Overview: Amazon CodeGuru is a machine learning-powered service that provides automated code reviews, recommendations, and performance insights for your software development lifecycle.
  • Features: Helps identify defects, security vulnerabilities, and performance bottlenecks while suggesting code improvements and best practices.
  • Security: Integrates seamlessly with GitHub and AWS CodeCommit, ensuring secure access during the code review process.
  • Integration: Works with existing CI/CD pipelines and integrates into AWS developer tools for a streamlined DevOps workflow.
  • Link: https://console.aws.amazon.com/codeguru
AWS CodePipeline
AWS CodePipeline – Key Facts
  • Service Overview: AWS CodePipeline is a fully managed CI/CD service that automates the building, testing, and deployment of code across different environments.
  • Features: Enables easy integration with popular AWS and third-party tools, enabling seamless continuous integration and delivery workflows.
  • Security: Ensures secure deployments by integrating with AWS IAM and providing encrypted access to your pipelines and resources.
  • Integration: Supports integration with other AWS developer tools, including AWS CodeBuild, AWS CodeDeploy, and AWS Lambda, for efficient automation of the delivery pipeline.
  • Link: https://console.aws.amazon.com/codepipeline
AWS X-Ray
AWS X-Ray – Key Facts
  • Service Overview: AWS X-Ray helps developers analyze and debug production applications, providing detailed insights into performance bottlenecks and issues.
  • Features: Tracks requests as they travel through an application, enabling the identification of performance inefficiencies and errors within services or components.
  • Security: Supports encrypted traces and integrates with IAM to control access to trace data.
  • Integration: Easily integrates with other AWS services such as AWS Lambda, Amazon EC2, and AWS Elastic Beanstalk for seamless monitoring.
  • Link: https://console.aws.amazon.com/xray

End User Computing

End user computing (EUC) is a critical component in modern IT infrastructure, enabling organizations to deliver desktop and application access to users from anywhere, with seamless integration and high security. AWS offers powerful solutions for EUC, allowing businesses to simplify desktop management, enhance productivity, and improve scalability.

Services like Amazon AppStream 2.0 and Amazon WorkSpaces provide fully managed environments for users to access their applications and desktops remotely. Amazon AppStream 2.0 allows streaming of desktop applications to any device, with full security and scalability. It eliminates the need for complex on-premise infrastructure while maintaining high performance for end users. Amazon WorkSpaces, on the other hand, offers virtual desktops that can be securely accessed from any device, making it ideal for businesses requiring flexibility and remote work capabilities.

These services allow organizations to easily scale their EUC solutions based on demand, ensuring they can accommodate growing teams and global users. With enhanced security features such as data encryption and multi-factor authentication (MFA), businesses can ensure their end-user environments are secure and compliant.

For those aiming to validate their expertise, understanding AWS EUC services is essential, particularly for the AWS Certified Solutions Architect Professional SAP-C02 exam. Mastering these tools is a step towards designing secure and scalable cloud architectures.

Amazon AppStream 2.0
Amazon AppStream 2.0 – Key Facts
  • Service Overview: Amazon AppStream 2.0 is a fully managed application streaming service that allows you to run desktop applications from AWS to any device.
  • Features: It provides secure access to applications from anywhere, scalability for any number of users, and integration with Active Directory for user management.
  • Security: Ensures secure application delivery by using encryption, session policies, and integration with AWS Identity and Access Management (IAM).
  • Scalability: Auto-scaling capabilities adjust resources dynamically based on usage, ensuring optimal performance and cost efficiency.
  • Link: https://console.aws.amazon.com/appstream2
Amazon WorkSpaces
Amazon WorkSpaces – Key Facts
  • Service Overview: Amazon WorkSpaces is a fully managed desktop-as-a-service (DaaS) solution that provides cloud-based virtual desktops to end users.
  • Features: Offers a wide range of desktop configurations, integration with Active Directory, and a variety of security features like multi-factor authentication (MFA).
  • Security: Supports encryption at rest and in transit, enabling secure access and storage for corporate data.
  • Scalability: Scales easily to accommodate growing businesses by allowing the addition of new users with minimal overhead.
  • Link: https://console.aws.amazon.com/workspaces

Frontend Web and Mobile

Frontend web and mobile development are crucial in creating engaging user experiences across platforms. AWS offers a range of services that streamline the development process, ensuring scalability, performance, and security. Developers focusing on frontend applications must familiarize themselves with these offerings, particularly for those preparing for the AWS Certified Solutions Architect Professional SAP-C02 exam.

AWS Amplify simplifies the creation of mobile and web applications by providing a fully managed set of tools to build and deploy applications. It integrates seamlessly with backend services like authentication, storage, and APIs, making it easier for developers to focus on the user experience. Additionally, Amazon API Gateway enables developers to create robust RESTful and WebSocket APIs that are fully scalable and secure, crucial for frontend services requiring dynamic data interaction.

For mobile development, AWS Device Farm offers the capability to test applications across a wide variety of devices, ensuring compatibility and high-quality performance before launch. Moreover, Amazon Pinpoint empowers developers to engage users through personalized messaging campaigns, facilitating improved retention rates and user interaction.

These services, along with other AWS offerings, provide a powerful suite of tools for frontend web and mobile developers, ensuring that applications are efficient, secure, and scalable—key elements for those aiming to succeed in the AWS Certified Solutions Architect Professional SAP-C02 exam.

AWS Amplify
AWS Amplify – Key Facts
  • Service Overview: AWS Amplify is a set of tools and services to help developers build scalable and secure mobile and web applications quickly.
  • Features: Includes features for backend development, hosting, authentication, and APIs, with full integration with AWS services.
  • Security: Built-in support for user authentication and authorization, including integration with Amazon Cognito.
  • Scalability: Automatically scales backend services and resources as application traffic grows.
  • Link: https://console.aws.amazon.com/amplify
Amazon API Gateway
Amazon API Gateway – Key Facts
  • Service Overview: Amazon API Gateway is a fully managed service for creating and publishing APIs at any scale.
  • Features: Supports RESTful APIs, WebSocket APIs, and HTTP APIs, with built-in traffic management, authorization, and access control.
  • Security: Provides options for AWS IAM, Amazon Cognito, and custom authorizers for API security.
  • Scalability: Automatically scales API endpoints to handle large volumes of requests with low latency.
  • Link: https://console.aws.amazon.com/apigateway
AWS Device Farm
AWS Device Farm – Key Facts
  • Service Overview: AWS Device Farm allows developers to test mobile and web applications on real devices in the cloud.
  • Features: Provides remote access to a wide range of physical devices and integrates with CI/CD pipelines for automated testing.
  • Security: Supports secure testing environments with encrypted data transfer between the application and device instances.
  • Scalability: Scales testing across multiple devices simultaneously, providing quick feedback for development teams.
  • Link: https://console.aws.amazon.com/devicefarm
Amazon Pinpoint
Amazon Pinpoint – Key Facts
  • Service Overview: Amazon Pinpoint is a flexible and scalable communication service for sending targeted messages across multiple channels, including email, SMS, and push notifications.
  • Features: Provides tools for campaign management, user segmentation, analytics, and message personalization.
  • Security: Ensures secure and compliant communication through encryption and IAM controls.
  • Scalability: Automatically scales to meet growing communication needs and can handle millions of messages simultaneously.
  • Link: https://console.aws.amazon.com/pinpoint

Internet of Things (IoT)

The Internet of Things (IoT) has rapidly transformed how industries manage and interact with devices. AWS offers a wide array of services that facilitate the efficient deployment, management, and scaling of IoT solutions. AWS Certified Solutions Architect Professional SAP-C02 exam candidates must have a thorough understanding of these services, as they play a critical role in creating robust IoT infrastructures.

Key services include AWS IoT Core, which enables secure device connectivity and management. Through it, IoT applications can efficiently interact with various devices while maintaining scalability and reliability. AWS IoT Device Defender offers a comprehensive security framework to continuously monitor and secure IoT devices. With AWS IoT Device Management, businesses can handle large fleets of devices effortlessly, ensuring smooth operations from deployment to ongoing monitoring.

Other notable services include AWS IoT Greengrass, which extends AWS capabilities to edge devices for local compute, messaging, and data storage. AWS IoT Events assists in detecting and responding to changes in IoT data, providing automated alerts and actions. These services, along with AWS IoT Things Graph and AWS IoT 1-Click, empower businesses to design, deploy, and manage IoT systems that are both efficient and secure. A strong grasp of these solutions is vital for those aiming to achieve success in the AWS Certified Solutions Architect Professional SAP-C02 exam.

AWS IoT Core
AWS IoT Core – Key Facts
  • Purpose: Securely connects devices to AWS services and other devices.
  • Features: Supports MQTT, HTTP, and WebSockets; device authentication and authorization.
  • Integration: Works with AWS Lambda, IoT Analytics, and IoT Events.
  • Use Cases: Smart home devices, industrial IoT, connected vehicles.
  • Link: https://console.aws.amazon.com/iot
AWS IoT Device Defender
AWS IoT Device Defender – Key Facts
  • Purpose: Audits and monitors IoT configurations to detect anomalies and enforce security policies.
  • Features: Detects abnormal behavior, audits device configurations, real-time alerts.
  • Integration: Compatible with AWS IoT Core and AWS IoT Device Management.
  • Use Cases: IoT security compliance, threat detection.
  • Link: https://console.aws.amazon.com/iotdefender
AWS IoT Device Management
AWS IoT Device Management – Key Facts
  • Purpose: Manages, organizes, and monitors IoT devices at scale.
  • Features: Bulk registration, over-the-air updates, device logging.
  • Integration: Integrates with IoT Core and Device Defender.
  • Use Cases: Fleet management, lifecycle tracking.
  • Link: https://console.aws.amazon.com/iotdm
AWS IoT Events
AWS IoT Events – Key Facts
  • Purpose: Detects and responds to events from IoT sensors and applications.
  • Features: Real-time event detection, workflows, alarm management.
  • Integration: Works with IoT Core, Lambda, and IoT SiteWise.
  • Use Cases: Industrial automation, smart monitoring systems.
  • Link: https://console.aws.amazon.com/iotevents
AWS IoT Greengrass
AWS IoT Greengrass – Key Facts
  • Purpose: Runs local compute, messaging, and ML inference on connected devices.
  • Features: Offline operation, secure data processing at the edge.
  • Integration: Integrates with AWS Lambda, IoT Core, and CloudWatch.
  • Use Cases: Edge computing, local automation, real-time decision-making.
  • Link: https://console.aws.amazon.com/greengrass
AWS IoT SiteWise
AWS IoT SiteWise – Key Facts
  • Purpose: Collects, organizes, and analyzes industrial equipment data at scale.
  • Features: Data modeling, asset representation, edge gateway.
  • Integration: Works with IoT Greengrass, Lambda, and QuickSight.
  • Use Cases: Industrial IoT analytics, equipment monitoring, efficiency tracking.
  • Link: https://console.aws.amazon.com/iotsitewise
AWS IoT Things Graph
AWS IoT Things Graph – Key Facts
  • Purpose: Visually connects devices and services to build IoT applications.
  • Features: Flow-based programming, prebuilt models and connectors.
  • Integration: Connects with IoT Core and Lambda.
  • Use Cases: Smart environments, industrial workflows.
  • Link: https://console.aws.amazon.com/iotthingsgraph
AWS IoT 1-Click
AWS IoT 1-Click – Key Facts
  • Purpose: Easily triggers AWS Lambda functions from simple IoT devices.
  • Features: Simplified device setup, pre-configured devices, secure connectivity.
  • Integration: Direct integration with Lambda and SNS.
  • Use Cases: Customer service buttons, alerting systems, facility maintenance.
  • Link: https://console.aws.amazon.com/iot1click

Machine Learning

Machine learning (ML) on AWS empowers organizations to innovate faster through a wide range of pre-trained services, integrated development environments, and managed infrastructure. From image recognition to personalized recommendations, AWS ML services streamline complex AI workflows and enable scalable, secure deployments across use cases. Core offerings include Amazon SageMaker for model development and deployment, Amazon Rekognition for computer vision, and Amazon Comprehend for natural language processing.

Tools like Amazon Textract and Amazon Transcribe automate the extraction of data from unstructured sources, enhancing operational efficiency. Amazon Translate and Polly support multilingual and speech-driven applications, while Amazon Lex powers conversational interfaces with natural language understanding. Specialized services such as Amazon Fraud Detector and Amazon Personalize bring domain-specific ML capabilities without requiring deep data science expertise.

These tools are tightly integrated with foundational services such as S3, IAM, and CloudWatch, reinforcing operational visibility and access control. AWS’s approach emphasizes modularity, automation, and cost efficiency—enabling faster experimentation and reduced time-to-value.

For professionals preparing for the AWS Certified Solutions Architect Professional SAP-C02 exam, understanding the strategic application and integration patterns of these ML services is vital. Emphasis is placed on architecture best practices, data flow orchestration, and the appropriate use of managed AI/ML services.

Amazon Comprehend
Amazon Comprehend – Key Facts
  • Purpose: Natural language processing (NLP) service that uses machine learning to uncover insights in text.
  • Capabilities: Entity recognition, sentiment analysis, key phrase extraction, language detection, and syntax analysis.
  • Integration: Easily integrates with AWS services like S3, Lambda, and Comprehend Medical for health-related text analysis.
  • Use Cases: Customer feedback analysis, document classification, content tagging, and social media monitoring.
  • Link: https://console.aws.amazon.com/comprehend
Amazon Fraud Detector
Amazon Fraud Detector – Key Facts
  • Purpose: Service that detects potentially fraudulent activities using machine learning models trained on historical data.
  • Capabilities: Pre-built fraud detection models and customizable rules-based decision logic.
  • Integration: Works with Amazon S3, AWS Lambda, and Amazon CloudWatch.
  • Use Cases: Online payment fraud, account takeover detection, and promotion abuse monitoring.
  • Link: https://docs.aws.amazon.com/frauddetector/
Amazon Kendra
Amazon Kendra – Key Facts
  • Purpose: Enterprise search service powered by machine learning to deliver accurate answers to natural language queries.
  • Capabilities: Full-text search, semantic search, FAQ matching, and connectors for various data sources.
  • Integration: Works with Microsoft SharePoint, S3, Salesforce, and more.
  • Use Cases: Knowledge management, intranet search, and help desk automation.
  • Link: https://console.aws.amazon.com/kendra
Amazon Lex
Amazon Lex – Key Facts
  • Purpose: Service for building conversational interfaces using voice and text, powered by the same technology as Alexa.
  • Capabilities: Intent recognition, multi-turn conversations, slot filling, and session management.
  • Integration: Integrates with AWS Lambda, Amazon Connect, and other chatbot frameworks.
  • Use Cases: Virtual assistants, IVR systems, and customer support automation.
  • Link: https://console.aws.amazon.com/lex
Amazon Personalize
Amazon Personalize – Key Facts
  • Purpose: Machine learning service for delivering personalized product and content recommendations.
  • Capabilities: Real-time personalization, user segmentation, and event tracking.
  • Integration: Works with S3, Lambda, and Amazon Pinpoint.
  • Use Cases: Ecommerce recommendations, media content suggestions, and targeted marketing.
  • Link: https://console.aws.amazon.com/personalize
Amazon Polly
Amazon Polly – Key Facts
  • Purpose: Text-to-speech service that turns text into lifelike speech using deep learning.
  • Capabilities: Dozens of voices in multiple languages, support for SSML, and real-time streaming.
  • Integration: Integrates with IoT, mobile apps, and media services.
  • Use Cases: Audiobooks, accessibility applications, and voice assistants.
  • Link: https://console.aws.amazon.com/polly
Amazon Rekognition
Amazon Rekognition – Key Facts
  • Purpose: Deep learning-based image and video analysis service.
  • Capabilities: Face detection, label detection, text recognition, unsafe content moderation.
  • Integration: Works with S3, Lambda, and Kinesis Video Streams.
  • Use Cases: Security surveillance, social media monitoring, and facial authentication.
  • Link: https://console.aws.amazon.com/rekognition
Amazon SageMaker AI
Amazon SageMaker AI – Key Facts
  • Purpose: Fully managed service for building, training, and deploying machine learning models at scale.
  • Capabilities: Integrated Jupyter notebooks, model tuning, AutoML, and inference endpoints.
  • Integration: Connects with S3, ECR, and Kubernetes (via SageMaker Inference).
  • Use Cases: Predictive analytics, computer vision, and natural language processing.
  • Link: https://console.aws.amazon.com/sagemaker
Amazon Textract
Amazon Textract – Key Facts
  • Purpose: Automatically extracts printed and handwritten text, tables, and forms from scanned documents.
  • Capabilities: Optical character recognition (OCR), key-value pair detection, and structured data extraction.
  • Integration: Integrates with S3, Comprehend, and Step Functions.
  • Use Cases: Document automation, invoice processing, and healthcare form analysis.
  • Link: https://console.aws.amazon.com/textract
Amazon Transcribe
Amazon Transcribe – Key Facts
  • Purpose: Automatic speech recognition (ASR) service for converting speech to text.
  • Capabilities: Speaker identification, custom vocabulary, and real-time streaming transcription.
  • Integration: Supports integration with Amazon S3, Lambda, and Contact Lens for Amazon Connect.
  • Use Cases: Call center analytics, closed captioning, and meeting transcription.
  • Link: https://console.aws.amazon.com/transcribe
Amazon Translate
Amazon Translate – Key Facts
  • Purpose: Neural machine translation service that delivers fast, high-quality language translation.
  • Capabilities: Supports real-time and batch translation for dozens of languages, customizable terminology.
  • Integration: Works with S3, Lambda, and Amazon Comprehend.
  • Use Cases: Website localization, content translation, and multilingual customer support.
  • Link: https://console.aws.amazon.com/translate

Management and Governance

Effective governance and streamlined management are crucial pillars of cloud operations. AWS delivers a comprehensive suite of tools that empower organizations to maintain control, visibility, and compliance across complex environments. Services such as AWS CloudFormation automate infrastructure provisioning with infrastructure as code, ensuring consistency and reducing human error. Amazon CloudWatch and AWS CloudTrail enhance observability, enabling detailed monitoring and auditing of system events.

AWS Config provides a real-time inventory of AWS resources and tracks configuration changes, while AWS Organizations allows centralized policy enforcement across multiple accounts. With AWS Control Tower, users can establish landing zones that meet governance requirements from day one. Tools like AWS Trusted Advisor and the AWS Well-Architected Tool offer continuous guidance to align deployments with best practices.

AWS Service Catalog and AWS License Manager streamline resource provisioning and license tracking, reducing operational overhead. Visualization services like Amazon Managed Grafana and Amazon Managed Service for Prometheus support advanced observability in large-scale architectures. These services collectively equip cloud architects with the means to achieve compliance, cost optimization, and operational excellence.

A thorough understanding of these capabilities is essential for candidates preparing for the AWS Certified Solutions Architect Professional SAP-C02 exam, where scenario-based knowledge of governance tools is frequently tested.

AWS CloudFormation
AWS CloudFormation – Key Facts
  • Purpose: Automates infrastructure deployment using templates.
  • Language: Supports YAML and JSON formats.
  • Features: Stack management, drift detection, rollback control.
  • Use Case: Infrastructure as Code (IaC) for consistent environments.
  • Link: https://console.aws.amazon.com/cloudformation
AWS CloudTrail
AWS CloudTrail – Key Facts
  • Purpose: Tracks user activity and API usage.
  • Data: Delivers logs to S3 and CloudWatch Logs.
  • Scope: Supports multi-account and multi-region trails.
  • Security: Helps meet compliance and audit requirements.
  • Link: https://console.aws.amazon.com/cloudtrail
Amazon CloudWatch
Amazon CloudWatch – Key Facts
  • Purpose: Observability and monitoring for AWS resources.
  • Metrics: Collects and visualizes metrics and custom data.
  • Alarms: Triggers alerts and auto-scaling based on thresholds.
  • Integration: Works with logs, dashboards, and events.
  • Link: https://console.aws.amazon.com/cloudwatch
Amazon CloudWatch Logs
Amazon CloudWatch Logs – Key Facts
  • Purpose: Centralizes log data from AWS services and applications.
  • Retention: Configurable retention settings and real-time analytics.
  • Queries: Supports Log Insights for searching and analyzing logs.
  • Use Case: Operational troubleshooting and auditing.
  • Link: https://console.aws.amazon.com/cloudwatch/home#logs
AWS Command Line Interface (AWS CLI)
AWS Command Line Interface (AWS CLI) – Key Facts
  • Purpose: Interacts with AWS services from the terminal.
  • Versions: Current major version is AWS CLI v2.
  • Automation: Ideal for scripting and CI/CD workflows.
  • Availability: Cross-platform support including Linux, macOS, and Windows.
  • Link: https://console.aws.amazon.com/cli
AWS Compute Optimizer
AWS Compute Optimizer – Key Facts
  • Purpose: Recommends optimal compute resources for EC2, Lambda, and more.
  • Metrics: Uses CloudWatch data to assess usage patterns.
  • Recommendations: Cost and performance-based suggestions.
  • Scope: Supports EC2, Auto Scaling groups, EBS volumes, and Lambda.
  • Link: https://console.aws.amazon.com/compute-optimizer
AWS Config
AWS Config – Key Facts
  • Purpose: Tracks configuration changes and evaluates compliance.
  • Rules: Supports AWS managed and custom rules.
  • Snapshot: Captures point-in-time resource state.
  • Integration: Works with AWS Config Aggregator and AWS Organizations.
  • Link: https://console.aws.amazon.com/config
AWS Control Tower
AWS Control Tower – Key Facts
  • Purpose: Sets up and governs secure multi-account AWS environments.
  • Blueprints: Automates creation of landing zones with guardrails.
  • Integration: Built on AWS Organizations, SCPs, and AWS Config.
  • Use Case: Enterprise-scale account setup with governance.
  • Link: https://console.aws.amazon.com/controltower
AWS Health Dashboard
AWS Health Dashboard – Key Facts
  • Purpose: Provides personalized alerts and service health information.
  • Types: Includes AWS Health events, open issues, and scheduled changes.
  • Scope: Shows account-specific and global events.
  • Integration: Works with Amazon EventBridge for automation.
  • Link: https://health.aws.amazon.com
AWS License Manager
AWS License Manager – Key Facts
  • Purpose: Manages software licenses across AWS and on-premises environments.
  • Integration: Works with AWS Marketplace and EC2 AMIs.
  • Enforcement: Controls usage limits and compliance tracking.
  • Use Case: Centralized license tracking and cost management.
  • Link: https://console.aws.amazon.com/license-manager
Amazon Managed Grafana
Amazon Managed Grafana – Key Facts
  • Purpose: Fully managed service for open-source Grafana dashboards.
  • Integration: Connects with AWS data sources like CloudWatch, X-Ray, and more.
  • Security: Supports AWS SSO, IAM Identity Center, and encryption.
  • Customization: Allows plugin installation and workspace control.
  • Link: https://console.aws.amazon.com/grafana
Amazon Managed Service for Prometheus
Amazon Managed Service for Prometheus – Key Facts
  • Purpose: Scalable Prometheus-compatible monitoring service.
  • Compatibility: Uses PromQL queries and Prometheus agent integrations.
  • Use Case: Ideal for Kubernetes and containerized application metrics.
  • Integration: Works with Amazon EKS, ECS, and CloudWatch.
  • Link: https://console.aws.amazon.com/prometheus
AWS Management Console
AWS Management Console – Key Facts
  • Purpose: Web-based user interface for accessing and managing AWS services.
  • Usability: Includes resource grouping, search, and recently used features.
  • Access: Supports IAM user roles and federated access.
  • Customization: Favorites and custom dashboard views available.
  • Link: https://console.aws.amazon.com
AWS Organizations
AWS Organizations – Key Facts
  • Purpose: Centralized management of multiple AWS accounts.
  • Policies: Uses Service Control Policies (SCPs) to set permissions boundaries.
  • Consolidation: Enables consolidated billing and resource sharing.
  • Integration: Works with AWS Control Tower, Config, and RAM.
  • Link: https://console.aws.amazon.com/organizations
AWS Proton
AWS Proton – Key Facts
  • Purpose: Automates provisioning and deployment of microservices infrastructure.
  • Templates: Uses infrastructure as code for consistency and reuse.
  • Targets: Focused on containers and serverless apps.
  • Governance: Platform teams define and control deployment standards.
  • Link: https://console.aws.amazon.com/proton
AWS Service Catalog
AWS Service Catalog – Key Facts
  • Purpose: Organizes and governs approved AWS products for self-service use.
  • Components: Portfolios, products, constraints, and tagging.
  • Governance: Controls configuration and usage of provisioned products.
  • Use Case: Enables standardization and cost control across teams.
  • Link: https://console.aws.amazon.com/servicecatalog
Service Quotas
Service Quotas – Key Facts
  • Purpose: View and manage AWS service limits.
  • Types: Default quotas and adjustable limits per region or service.
  • Monitoring: Alerts via Amazon CloudWatch integration.
  • Requests: Direct request form for increases.
  • Link: https://console.aws.amazon.com/servicequotas
AWS Systems Manager
AWS Systems Manager – Key Facts
  • Purpose: Centralized operational hub for infrastructure management.
  • Components: Includes Session Manager, Patch Manager, Parameter Store, and more.
  • Scope: Works across EC2, on-premises, and hybrid environments.
  • Security: Role-based access and logging via CloudTrail.
  • Link: https://console.aws.amazon.com/systems-manager
AWS Trusted Advisor
AWS Trusted Advisor – Key Facts
  • Purpose: Provides real-time guidance for best practices and cost optimization.
  • Categories: Cost, performance, security, fault tolerance, and service limits.
  • Scope: Available to all users, with advanced checks for support plans.
  • Integration: Alerts and recommendations can be automated via API.
  • Link: https://console.aws.amazon.com/trustedadvisor
AWS Well-Architected Tool
AWS Well-Architected Tool – Key Facts
  • Purpose: Assesses workloads against AWS best practices.
  • Framework: Based on six pillars: operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability.
  • Features: Workload reviews, improvement plans, and lens-based assessments.
  • Use Case: Improves workload design and operational posture.
  • Link: https://console.aws.amazon.com/wellarchitected

Media Services

AWS media services provide robust, scalable infrastructure for video processing, storage, and delivery. These services cater to dynamic workloads in live broadcasting, surveillance, and on-demand content delivery, ensuring low latency and high availability across global regions.

Amazon Elastic Transcoder simplifies media format conversions by transforming audio and video files into various output formats compatible with multiple devices. It integrates natively with Amazon S3 for seamless input/output storage, allowing automated workflows and scalable transcoding pipelines.

Amazon Kinesis Video Streams is engineered for ingesting and processing real-time video from connected devices. It offers fine-grained encryption and time-indexed video storage, making it ideal for machine learning inference, playback, and analytics. Integrations with services like Amazon Rekognition and SageMaker extend its capabilities into intelligent video applications.

These services underpin content streaming architectures that demand adaptability, durability, and operational efficiency. Mastery of AWS media tools is essential for designing high-performance media delivery systems.

Understanding these components is imperative for candidates preparing for the AWS Certified Solutions Architect Professional SAP-C02 exam, where expertise in designing reliable and cost-efficient architectures, including media services, is tested in depth.

Amazon Elastic Transcoder
Amazon Elastic Transcoder – Key Facts
  • Purpose: Media transcoding in the cloud.
  • Formats: Converts media files into formats for playback on different devices.
  • Workflow: Input stored in Amazon S3, output saved to specified S3 bucket.
  • Scalability: Automatically scales to handle workload.
  • Link: https://console.aws.amazon.com/elastictranscoder
Amazon Kinesis Video Streams
Amazon Kinesis Video Streams – Key Facts
  • Purpose: Ingests, processes, and stores video streams.
  • Sources: Supports camera devices, smartphones, drones, and more.
  • Integration: Compatible with ML services like SageMaker for analytics.
  • Storage: Automatically stores encrypted video for playback or processing.
  • Link: https://console.aws.amazon.com/kinesisvideo

Migration and Transfer

Migration and transfer services play a pivotal role in modernizing infrastructure and transitioning workloads to the cloud. AWS provides a diverse toolset that supports both large-scale data movement and real-time server replication. Services like AWS Application Migration Service enable seamless lift-and-shift transitions with minimal downtime, while AWS Database Migration Service (AWS DMS) facilitates heterogeneous and homogeneous migrations with high availability.

For environments requiring structured planning, AWS Migration Hub offers a unified dashboard for monitoring and tracking migration workflows. AWS Application Discovery Service assists by identifying system dependencies and utilization patterns, streamlining the pre-migration phase. Complementary to this, the AWS Schema Conversion Tool automates schema transformations, expediting complex database transitions.

Data transfer at scale is addressed by AWS Snow Family and AWS DataSync. These services support offline and online transfers, respectively, catering to diverse connectivity scenarios. AWS Transfer Family provides secure, protocol-based file exchange with legacy systems.

Understanding the functional nuances of each service is essential for designing effective cloud migration strategies. These capabilities form a critical knowledge area for professionals preparing for the AWS Certified Solutions Architect Professional SAP-C02 exam, where deep technical comprehension of migration architectures is a decisive advantage.

AWS Application Discovery Service
AWS Application Discovery Service – Key Facts
  • Purpose: Helps plan migration projects by discovering on-premises workloads.
  • Data Collection: Uses agents or agentless collectors to gather system and process info.
  • Output: Generates detailed reports on usage, dependencies, and performance.
  • Integration: Feeds data into AWS Migration Hub for planning.
  • Link: https://console.aws.amazon.com/discovery
AWS Application Migration Service
AWS Application Migration Service – Key Facts
  • Purpose: Replaces older services like Server Migration Service (SMS).
  • Function: Lift-and-shift migrations with minimal downtime.
  • Replication: Continuously replicates source servers into AWS.
  • Cutover: Automated testing and launching of migrated instances.
  • Link: https://console.aws.amazon.com/mgn
AWS Database Migration Service (AWS DMS)
AWS Database Migration Service (AWS DMS) – Key Facts
  • Purpose: Migrate databases to AWS quickly and securely.
  • Support: Supports homogeneous and heterogeneous migrations.
  • Continuous: Keeps source and target in sync during migration.
  • Conversion: Works with AWS SCT for schema conversions.
  • Link: https://console.aws.amazon.com/dms
AWS DataSync
AWS DataSync – Key Facts
  • Purpose: Automates data transfer between on-prem and AWS.
  • Speed: Up to 10x faster than open-source tools.
  • Use Cases: Ideal for migrations, archives, and processing workflows.
  • Support: Works with Amazon S3, EFS, FSx, NFS, SMB.
  • Link: https://console.aws.amazon.com/datasync
AWS Migration Hub
AWS Migration Hub – Key Facts
  • Purpose: Central location to track migration progress.
  • Integration: Works with discovery tools and migration services.
  • Visibility: Provides migration status across AWS services.
  • Support: Supports DMS, Application Migration Service, etc.
  • Link: https://console.aws.amazon.com/migrationhub
AWS Schema Conversion Tool (AWS SCT)
AWS Schema Conversion Tool (AWS SCT) – Key Facts
  • Purpose: Converts database schema for heterogeneous migrations.
  • Integration: Works with AWS DMS.
  • Support: Supports multiple DB engines including Oracle, SQL Server, MySQL.
  • Reports: Provides compatibility reports and guidance.
  • Link: https://aws.amazon.com/schema-conversion-tool/
AWS Snow Family
AWS Snow Family – Key Facts
  • Purpose: Edge computing and data transfer devices.
  • Variants: Includes Snowcone, Snowball, and Snowmobile.
  • Security: Hardware encryption, tamper-resistant, and secure erasure.
  • Use Cases: Data migration, edge processing, disconnected environments.
  • Link: https://console.aws.amazon.com/snowball
AWS Transfer Family
AWS Transfer Family – Key Facts
  • Purpose: Fully managed file transfers to Amazon S3 or EFS.
  • Protocols: Supports SFTP, FTPS, and FTP.
  • Integration: Seamless with IAM and CloudWatch.
  • Use Cases: Modernize legacy workflows requiring file transfer.
  • Link: https://console.aws.amazon.com/transfer

Networking and Content Delivery

Networking and content delivery are foundational to building resilient, scalable, and performant cloud architectures. AWS provides a spectrum of services—each tailored to meet distinct requirements ranging from edge caching to private connectivity and global acceleration. Amazon VPC offers isolated virtual networks, allowing granular control over traffic segmentation, subnetting, and IP addressing. Services like AWS Transit Gateway and AWS VPN facilitate hybrid connectivity, enabling secure routing across on-premises and cloud environments.

Elastic Load Balancing distributes workloads intelligently, ensuring system availability and operational continuity. Meanwhile, Amazon CloudFront leverages a global network of edge locations to reduce latency and enhance user experience for content-rich applications. For scenarios requiring deterministic routing and DNS resolution, Amazon Route 53 provides low-latency, policy-driven traffic management.

For organizations demanding private, high-throughput links, AWS Direct Connect reduces variability inherent in internet-based connections. AWS Global Accelerator optimizes traffic flow using the AWS backbone, offering consistent network performance across geographies. AWS PrivateLink adds another layer of protection by allowing private access to services without traversing the public internet.

Proficiency in these services is essential for success in the AWS Certified Solutions Architect Professional SAP-C02 exam. A strong grasp of these capabilities enables the design of secure, high-performance, and cost-effective architectures that align with modern enterprise networking standards.

Amazon CloudFront
Amazon CloudFront – Key Facts
  • Purpose: Global content delivery network (CDN) service for low-latency delivery.
  • Features: Edge locations, Lambda@Edge, origin failover, HTTPS support.
  • Use Cases: Static and dynamic web content delivery, video streaming, security integration.
  • Limitations: May require tuning for dynamic content caching.
  • Pricing: Based on data transfer out and HTTP/HTTPS requests.
  • Link: https://console.aws.amazon.com/cloudfront
AWS Direct Connect
AWS Direct Connect – Key Facts
  • Purpose: Dedicated network connection between on-prem and AWS.
  • Features: Low-latency, private connectivity, link aggregation, MACsec encryption.
  • Use Cases: Hybrid cloud, consistent network performance, secure workloads.
  • Limitations: Setup time and regional availability.
  • Pricing: Port hours and outbound data transfer.
  • Link: https://console.aws.amazon.com/directconnect
Elastic Load Balancing (ELB)
Elastic Load Balancing (ELB) – Key Facts
  • Purpose: Distributes traffic across multiple targets for high availability.
  • Features: Application, Network, and Gateway Load Balancers, SSL termination.
  • Use Cases: Web apps, microservices, hybrid deployments.
  • Limitations: Pricing and performance vary by load balancer type.
  • Pricing: Based on hours used and data processed.
  • Link: https://console.aws.amazon.com/ec2/v2/home#LoadBalancers:
AWS Global Accelerator
AWS Global Accelerator – Key Facts
  • Purpose: Improves availability and performance using AWS global network.
  • Features: Anycast IPs, health checks, regional failover.
  • Use Cases: Latency-sensitive apps, cross-region routing, HA configurations.
  • Limitations: Global traffic management only; no content caching.
  • Pricing: Fixed and data transfer-based pricing.
  • Link: https://console.aws.amazon.com/globalaccelerator
AWS PrivateLink
AWS PrivateLink – Key Facts
  • Purpose: Private connectivity to services without using public IPs.
  • Features: Interface endpoints, secure VPC access, service publishing.
  • Use Cases: SaaS access, service segmentation, VPC security.
  • Limitations: Only works with supported services and endpoint services.
  • Pricing: Per endpoint and data processed.
  • Link: https://console.aws.amazon.com/vpc
Amazon Route 53
Amazon Route 53 – Key Facts
  • Purpose: Scalable and highly available DNS and traffic management service.
  • Features: Routing policies, health checks, domain registration, latency routing.
  • Use Cases: Global app availability, custom domain setup, geo-routing.
  • Limitations: TTL considerations, per-record cost.
  • Pricing: Per hosted zone and queries.
  • Link: https://console.aws.amazon.com/route53
AWS Transit Gateway
AWS Transit Gateway – Key Facts
  • Purpose: Central hub for VPC and on-premises network connectivity.
  • Features: Scalable routing, resource sharing, multicast support.
  • Use Cases: Multi-VPC architectures, hybrid networks, centralized routing.
  • Limitations: Limited to supported AWS Regions and throughput limits apply.
  • Pricing: Per hour and per GB data processed.
  • Link: https://console.aws.amazon.com/vpc/home#TransitGateways:
Amazon Virtual Private Cloud (Amazon VPC)
Amazon Virtual Private Cloud (Amazon VPC) – Key Facts
  • Purpose: Isolated cloud environment for launching AWS resources.
  • Features: Subnets, route tables, NAT gateways, security groups, NACLs.
  • Use Cases: Custom network topologies, compliance isolation, secure workloads.
  • Limitations: Region-specific, requires IP planning.
  • Pricing: Mostly free; charges apply for NAT, VPN, etc.
  • Link: https://console.aws.amazon.com/vpc
AWS VPN
AWS VPN – Key Facts
  • Purpose: Secure site-to-site or client VPN connectivity to AWS.
  • Features: IPSec tunnels, high availability, managed client VPN option.
  • Use Cases: Hybrid connectivity, remote workforce access, secure transit.
  • Limitations: Throughput limited by virtual appliance specs.
  • Pricing: Per VPN connection-hour and data transfer.
  • Link: https://console.aws.amazon.com/vpc/home#VpnConnections:

AWS Security, identity and compliance

One of the core aspects of AWS security is its Identity and Access Management (IAM) service, enabling organizations to manage permissions and control access to resources at a granular level. Additionally, AWS provides advanced encryption capabilities, ensuring data is securely stored and transmitted. This is crucial for maintaining compliance with various regulatory standards, such as GDPR and HIPAA.

AWS also emphasizes continuous monitoring and threat detection through services like AWS Security Hub and AWS GuardDuty, which aggregate security findings across AWS accounts, providing actionable insights. The inclusion of automation in security practices, including AWS Config and AWS Systems Manager, helps maintain an up-to-date posture, reducing human error in compliance management.

Achieving proficiency in these services, as demonstrated by passing the AWS Certified Solutions Architect Professional SAP-C02 exam, equips professionals to build and operate secure, highly available, and scalable systems while adhering to strict compliance requirements. This expertise is vital for organizations seeking to leverage AWS's robust security infrastructure.

AWS Artifact
AWS Artifact – Key Facts
  • Purpose: A self-service audit artifact retrieval portal for on-demand access to AWS compliance and security reports and agreements.
  • Key Features:
    • Download audit artifacts (e.g., SOC, ISO, PCI reports)
    • View and accept legal agreements (e.g., BAA, GDPR DPA)
    • Supports account-level and org-wide agreement management
    • Self-service, no need to contact AWS support
  • Use Cases:
    • Proof of AWS compliance during customer audits
    • Vendor due diligence and risk assessments
    • Regulatory and contractual documentation for legal teams
  • Document Types:
    • Security and compliance reports (SOC 1, 2, 3, ISO 27001, PCI DSS, etc.)
    • Agreements like Business Associate Addendum (BAA), GDPR DPA
  • Limitations: Read-only portal — doesn’t support custom reports. Limited to AWS-provided documentation only.
  • Pricing: Free to use. No additional charges for accessing reports or agreements.
  • Link: https://console.aws.amazon.com/artifact/
AWS Audit Manager
AWS Audit Manager – Key Facts
  • Purpose: Automates evidence collection to help simplify audits and compliance assessments.
  • Key Features:
    • Prebuilt frameworks (e.g., PCI DSS, GDPR, HIPAA)
    • Continuously collects evidence from AWS services
    • Custom frameworks and controls supported
    • Evidence export and assessment reports
  • Use Cases:
    • Compliance readiness and continuous audit support
    • Streamlined reporting for regulatory audits
  • Limitations: AWS-native only — doesn’t collect evidence from non-AWS environments directly.
  • Pricing: Charged per resource assessment and amount of evidence collected.
  • Link: https://console.aws.amazon.com/auditmanager
AWS Certificate Manager (ACM)
ACM - Key Facts
  • Purpose: Provision, manage, and deploy SSL/TLS certificates for AWS services and internal apps.
  • Key Features:
    • Automatic renewal for ACM-issued certs
    • Public and private certs supported
    • Integrated with ELB, CloudFront, API Gateway
    • Free for public certs
  • Use Cases:
    • HTTPS for websites hosted on AWS
    • TLS for internal services using private certs
    • Custom domains via API Gateway or CloudFront
  • Validation Methods:
    • DNS validation (automated and preferred)
    • Email validation (manual)
  • Limitations: Certs can’t be exported (except private CA); only usable with supported AWS services.
  • Pricing: Public certs are free. Private certs require ACM Private CA and are billed per CA and per cert issued.
  • Link: https://console.aws.amazon.com/acm/
AWS CloudHSM
AWS CloudHSM – Key Facts
  • Purpose: Dedicated hardware security module (HSM) in the cloud for managing cryptographic keys.
  • Key Features:
    • FIPS 140-2 Level 3 validated HSMs
    • Full control of key lifecycle and access
    • Supports industry standards like PKCS#11, JCE, OpenSSL
    • Cluster-based deployment and scaling
  • Use Cases:
    • Regulated workloads (e.g., finance, healthcare)
    • Custom key management outside KMS
    • Custom cryptographic applications
  • Limitations: You manage HSMs yourself; more complex than AWS KMS. No direct integration with AWS services like KMS offers.
  • Pricing: Per-HSM hourly rate + network data transfer. No per-key fees.
  • Link: https://console.aws.amazon.com/cloudhsm
Amazon Cognito
Amazon Cognito – Key Facts
  • Purpose: Provides user sign-up, sign-in, and access control for web and mobile apps.
  • Key Features:
    • Supports username/password and social logins (Google, Facebook, etc.)
    • Standards-based (OAuth 2.0, OpenID Connect, SAML)
    • Built-in user directory or federate to external IdPs
    • Multi-factor authentication (MFA) and adaptive authentication
  • Use Cases:
    • User authentication for B2C apps
    • Federated identity with enterprise SSO providers
    • Token-based access to AWS services via IAM roles
  • Components:
    • User Pools: User directory and authentication
    • Identity Pools: AWS credential access for users
  • Limitations: Some features (e.g., custom flows, UI customization) are limited or clunky. Rate limits apply. Admin APIs require separate handling.
  • Pricing: Free tier available. Pricing based on monthly active users (MAUs) and federation usage. Identity Pools may incur AWS service usage costs.
  • Link: https://console.aws.amazon.com/cognito/
Amazon Detective
Amazon Detective – Key Facts
  • Purpose: Helps analyze and visualize security findings to identify root causes.
  • Key Features:
    • Automated graph-based investigation
    • Integrates with GuardDuty, Security Hub, IAM
    • Visualizes relationships between resources
  • Use Cases:
    • Security incident investigations
    • Root cause analysis of alerts
  • Limitations: Read-only; focused on visualization, not response.
  • Pricing: Based on GB/day of data ingested and analyzed.
  • Link: https://console.aws.amazon.com/detective
AWS Directory Service
AWS Directory Service Key Facts
  • Purpose: Provides managed Microsoft Active Directory in the AWS Cloud or connects AWS services to existing on-prem AD.
  • Directory Types:
    • AWS Managed Microsoft AD: Full Microsoft AD managed by AWS in HA deployment across AZs 
      • Standard: SMB up to 5,000 employees/30,000 objects
      • Enterprise: Up to 500,000 objects
      • Best choice if you need Standalone AD for Office 365, AD for AWS applications or Windows workloads, including Amazon RDS for Microsoft SQL Server, or you need Linux LDAP.
    • Simple AD: Low-cost, Samba-based alternative for basic AD-compatible needs or Linux LDAP
    • AD Connector: Proxy to redirect AWS services via one service account to on-premises AD
  • Use Cases:
    • EC2 domain join
    • Single sign-on (SSO) for AWS apps
    • Amazon WorkSpaces & Amazon QuickSight integration
    • Hybrid cloud directory scenarios
  • Key Features:
    • Trust relationships with existing AD domains
    • Support for Kerberos, LDAP, Group Policy
    • Highly available and automated patching/monitoring
    • Encrypted at rest and in transit
  • Limitations: No full control over directory servers; backup/restore and schema extension options limited compared to self-managed AD.
  • Pricing: Charged hourly based on directory type and size (e.g., number of users for Managed AD).
  • Link: https://console.aws.amazon.com/directoryservice/
AWS Firewall Manager
AWS Firewall Manager – Key Facts
  • Purpose: Centralized management of firewall rules and security policies across accounts.
  • Key Features:
    • Applies WAF, Shield, Network Firewall policies
    • Multi-account policy enforcement via AWS Organizations
    • Automatic remediation of non-compliant resources
  • Use Cases:
    • Consistent security controls across org units
    • Audit and enforce network protection policies
  • Limitations: Requires AWS Organizations and compatible services.
  • Pricing: Based on number of policies and accounts managed.
  • Link: https://console.aws.amazon.com/fms
Amazon GuardDuty
Amazon GuardDuty – Key Facts
  • Purpose: Threat detection service that continuously monitors AWS accounts, workloads, and data for malicious activity or unauthorized behavior.
  • Key Features:
    • Uses ML, anomaly detection, and threat intelligence
    • Detects account compromise, EC2 malware, credential exfiltration, and more
    • Integrated with AWS CloudTrail, VPC Flow Logs, DNS logs, and EKS audit logs
    • Findings sent to AWS Security Hub and EventBridge
  • Use Cases:
    • Automated threat detection without deploying agents
    • Continuous monitoring of AWS environments
    • Integration with automated incident response workflows
  • Data Sources:
    • CloudTrail management and S3 data events
    • VPC Flow Logs
    • Route 53 DNS logs
    • EKS audit logs (for Kubernetes detection)
  • Limitations: AWS-only visibility; doesn't inspect traffic inside EC2 unless logs are enabled. Requires enabling across accounts manually or via org-level config.
  • Pricing: Based on volume of data analyzed (e.g., events, logs) — pay-as-you-go with no upfront cost.
  • Link: https://console.aws.amazon.com/guardduty/
AWS IAM Identity Center
AWS IAM Identity Center – Key Facts
  • Purpose: Centralized identity management and access control across AWS accounts and applications.
  • Key Features:
    • Manage users and groups across multiple AWS accounts
    • Integrates with existing identity providers (e.g., Active Directory)
    • Seamless access to AWS apps and services
  • Use Cases:
    • Centralized authentication across AWS accounts
    • Single sign-on (SSO) for AWS services and apps
  • Limitations: Not available for all AWS regions and accounts.
  • Pricing: No extra cost; only charged for AWS resources used.
  • Link: https://console.aws.amazon.com/sso
AWS Identity and Access Management (IAM)
AWS Identity and Access Management (IAM) – Key Facts
  • Purpose: Control access to AWS services and resources securely through policies and permissions.
  • Key Features:
    • Users, groups, roles, and policies
    • Fine-grained access control with JSON policies
    • Federation with external IdPs (SAML, OIDC)
    • Service-linked roles and resource-based policies
  • Use Cases:
    • Granting least-privilege access to AWS resources
    • Federated login via corporate identity systems
    • Delegation across accounts with IAM roles
  • Policy Types:
    • Identity-based (user/group/role policies)
    • Resource-based (e.g., S3 bucket policies)
    • Permissions boundaries and session policies
  • Limitations: JSON syntax is verbose and error-prone. No built-in policy versioning or rollback. Cross-account access can be tricky to audit.
  • Pricing: Free to use. No additional charges for IAM features.
  • Link: https://console.aws.amazon.com/iam
Amazon Inspector
Amazon Inspector – Key Facts
  • Purpose: Automated security assessments to help identify vulnerabilities in applications and infrastructure.
  • Key Features:
    • Automated vulnerability scanning of EC2 instances
    • Integration with AWS Security Hub
    • Support for CIS AWS Foundations Benchmark assessments
  • Use Cases:
    • Vulnerability scanning of EC2 instances
    • Security compliance checks
  • Limitations: Limited to EC2 instances and Lambda functions for assessments.
  • Pricing: Charged based on the number of assessments and EC2 instances scanned.
  • Link: https://console.aws.amazon.com/inspector
AWS Key Management Service (AWS KMS)
AWS Key Management Service (AWS KMS) – Key Facts
  • Purpose: Easily create and manage encryption keys for use across AWS services.
  • Key Features:
    • Centralized key management for encryption
    • Integrated with AWS services like S3, RDS, Lambda
    • FIPS-compliant for regulated environments
  • Use Cases:
    • Encrypt data at rest and in transit
    • Manage access to encryption keys for sensitive workloads
  • Limitations: Key rotation needs to be manually configured, some regional restrictions.
  • Pricing: Charged based on the number of keys and requests made.
  • Link: https://console.aws.amazon.com/kms
Amazon Macie
Amazon Macie – Key Facts
  • Purpose: Automatically discover, classify, and protect sensitive data in AWS.
  • Key Features:
    • Data discovery for PII and sensitive information
    • Integrates with S3, CloudWatch, and Security Hub
    • Automated alerts and remediation for data security risks
  • Use Cases:
    • Protect sensitive data across AWS environments
    • Ensure compliance with data protection regulations
  • Limitations: Limited to S3; needs proper configuration for optimal results.
  • Pricing: Charged based on the amount of data processed and evaluated.
  • Link: https://console.aws.amazon.com/macie
AWS Network Firewall
AWS Network Firewall – Key Facts
  • Purpose: A managed firewall service to protect Amazon VPC networks from external threats.
  • Key Features:
    • Stateful and stateless traffic inspection
    • Deep packet inspection and web filtering
    • Integration with CloudWatch and VPC Traffic Mirroring
  • Use Cases:
    • Protect VPCs from external threats
    • Control traffic flow between subnets
  • Limitations: Limited to AWS VPCs, requires careful rule management.
  • Pricing: Charged based on data processed and firewall rules.
  • Link: https://console.aws.amazon.com/network-firewall
AWS Resource Access Manager (AWS RAM)
AWS Resource Access Manager (AWS RAM) – Key Facts
  • Purpose: Share AWS resources securely across multiple accounts within your AWS Organization.
  • Key Features:
    • Share VPC subnets, transit gateways, and more
    • Secure, policy-based access control
    • Integration with AWS Organizations for easier management
  • Use Cases:
    • Share resources across AWS accounts for better cost and security management
    • Enable centralized management of shared services
  • Limitations: Limited to AWS services that support sharing (e.g., VPC, Transit Gateway).
  • Pricing: No additional charge; standard AWS service fees apply for shared resources.
  • Link: https://console.aws.amazon.com/ram
AWS Secrets Manager
AWS Secrets Manager – Key Facts
  • Purpose: Protect and manage sensitive information, such as API keys, passwords, and database credentials.
  • Key Features:
    • Automated rotation of secrets
    • Integration with AWS services (e.g., Lambda, RDS)
    • Secure storage with encryption at rest
  • Use Cases:
    • Storing and rotating database credentials
    • Access management for sensitive information
  • Limitations: Limited to AWS-native services, no full control over encryption keys.
  • Pricing: Charged per secret stored and per API request.
  • Link: https://console.aws.amazon.com/secretsmanager
AWS Security Hub
AWS Security Hub – Key Facts
  • Purpose: Centralized security monitoring and alert management for AWS resources.
  • Key Features:
    • Consolidates findings from AWS services (e.g., GuardDuty, Macie)
    • Integrates with third-party security tools
    • Customizable compliance standards (e.g., CIS, GDPR)
  • Use Cases:
    • Monitor security and compliance status
    • Centralized view of security findings across AWS
  • Limitations: Needs to integrate with other services for full functionality.
  • Pricing: Based on the number of findings ingested and processed.
  • Link: https://console.aws.amazon.com/securityhub
AWS Security Token Service (AWS STS)
AWS Security Token Service (AWS STS) – Key Facts
  • Purpose: Provides temporary security credentials for AWS resources.
  • Key Features:
    • Temporary credentials for cross-account access
    • Federated user authentication (e.g., SSO)
    • Integrates with IAM roles and policies
  • Use Cases:
    • Temporary access for users or applications
    • Federated access for external users
  • Limitations: Limited validity for temporary credentials (e.g., max of 12 hours).
  • Pricing: Charged based on the number of requests made.
  • Link: https://console.aws.amazon.com/sts
AWS Shield
AWS Shield – Key Facts
  • Purpose: DDoS protection for AWS applications and resources.
  • Key Features:
    • Advanced threat detection and mitigation
    • Protection for CloudFront, Route 53, and ELB
    • Real-time attack visibility and automatic mitigation
  • Use Cases:
    • Protection from large-scale DDoS attacks
    • Application security for AWS-hosted web applications
  • Limitations: AWS Shield Advanced requires additional cost; no protection for non-AWS resources.
  • Pricing: Free for Shield Standard; Shield Advanced is charged per resource.
  • Link: https://console.aws.amazon.com/shield
AWS WAF
AWS WAF – Key Facts
  • Purpose: Web Application Firewall to protect applications from common web exploits.
  • Key Features:
    • Customizable rules for HTTP/HTTPS traffic
    • Integrates with CloudFront, ALB, and API Gateway
    • Real-time monitoring and logging
  • Use Cases:
    • Prevent SQL injection, cross-site scripting (XSS), and bot attacks
    • Filter traffic based on IP, country, or request patterns
  • Limitations: No protection for non-AWS environments.
  • Pricing: Charged per rule and number of web requests.
  • Link: https://console.aws.amazon.com/waf

Storage

AWS offers a diverse suite of storage services engineered to support virtually any workload, from ephemeral compute data to immutable archival content. Core services like Amazon S3, Amazon EBS, and Amazon EFS serve distinct storage paradigms—object, block, and file storage, respectively—enabling architects to match workload requirements with storage characteristics such as latency, throughput, durability, and cost.

Amazon S3 provides industry-leading scalability and 99.999999999% durability, making it the preferred choice for data lakes, backup, and archival. For low-latency transactional workloads, Amazon EBS delivers consistent performance and is tightly integrated with EC2. Meanwhile, Amazon EFS facilitates scalable, shared file storage for Linux-based applications without provisioning or managing infrastructure.

Services like AWS Backup and AWS Elastic Disaster Recovery introduce critical data resilience and business continuity capabilities. Amazon FSx variants address niche needs for specific file systems such as Windows, Lustre, and NetApp ONTAP. For hybrid scenarios, AWS Storage Gateway extends AWS storage to on-premises environments seamlessly.

Understanding the capabilities and constraints of these services is essential for optimizing cost and performance. Mastery of these concepts is frequently evaluated in the AWS Certified Solutions Architect Professional SAP-C02 exam, where architectural acumen and strategic selection of storage solutions are key success factors.

AWS Backup
AWS Backup – Key Facts
  • Purpose: Centralized backup service for AWS and on-prem workloads.
  • Features: Policy-based backups, cross-region support, backup vaults.
  • Use Cases: Data protection, compliance, disaster recovery.
  • Limitations: Limited to supported AWS services and resource types.
  • Pricing: Based on backup storage and restore requests.
  • Link: https://console.aws.amazon.com/backup
Amazon Elastic Block Store (Amazon EBS)
Amazon Elastic Block Store (Amazon EBS) – Key Facts
  • Purpose: Block storage for EC2 instances.
  • Features: SSD and HDD volume types, snapshots, encryption.
  • Use Cases: Databases, apps requiring persistent low-latency storage.
  • Limitations: Tied to specific AZs, not shared across instances.
  • Pricing: Based on provisioned GBs and IOPS.
  • Link: https://console.aws.amazon.com/ebs
AWS Elastic Disaster Recovery
AWS Elastic Disaster Recovery – Key Facts
  • Purpose: Disaster recovery for cloud and on-premise servers.
  • Features: Continuous replication, automated recovery, failback.
  • Use Cases: Business continuity, failover testing.
  • Limitations: Limited OS/application support and configuration complexity.
  • Pricing: Based on protected instances and usage.
  • Link: https://console.aws.amazon.com/drs
Amazon Elastic File System (Amazon EFS)
Amazon Elastic File System (Amazon EFS) – Key Facts
  • Purpose: Scalable shared file storage for Linux-based workloads.
  • Features: NFS support, burst throughput, lifecycle policies.
  • Use Cases: Web apps, lift-and-shift, content management.
  • Limitations: Only supports Linux and POSIX-compatible systems.
  • Pricing: Pay-per-use, with Standard and Infrequent Access tiers.
  • Link: https://console.aws.amazon.com/efs
Amazon FSx
Amazon FSx – Key Facts
  • Purpose: Fully managed file systems for Windows, Lustre, NetApp, OpenZFS.
  • Features: Native protocols (SMB, Lustre, NFS), backups, AD integration.
  • Use Cases: Enterprise apps, HPC, media workflows.
  • Limitations: Per-type limitations on features, cost model, protocols.
  • Pricing: Based on storage, throughput, and backups.
  • Link: https://console.aws.amazon.com/fsx
Amazon Simple Storage Service (Amazon S3)
Amazon Simple Storage Service (Amazon S3) – Key Facts
  • Purpose: Scalable object storage for all data types.
  • Features: Versioning, lifecycle rules, intelligent tiering, event notifications.
  • Use Cases: Backups, static websites, big data analytics.
  • Limitations: Object size and request rate limitations may apply.
  • Pricing: Based on storage class, requests, data transfer.
  • Link: https://console.aws.amazon.com/s3
Amazon S3 Glacier
Amazon S3 Glacier – Key Facts
  • Purpose: Low-cost archival storage for infrequently accessed data.
  • Features: Long-term storage, retrieval policies, Vault Lock.
  • Use Cases: Compliance archives, long-term backups.
  • Limitations: Retrieval latency from minutes to hours.
  • Pricing: Storage cost is low; retrieval cost varies by speed.
  • Link: https://console.aws.amazon.com/s3
AWS Storage Gateway
AWS Storage Gateway – Key Facts
  • Purpose: Hybrid storage service bridging on-prem environments to AWS.
  • Features: File, volume, and tape gateways with local caching.
  • Use Cases: Backup to cloud, archiving, disaster recovery.
  • Limitations: Requires on-premises appliance or VM deployment.
  • Pricing: Based on gateway type and data transferred.
  • Link: https://console.aws.amazon.com/storagegateway