#AWS
136 posts
AWS Certified CloudOps Engineer - Associate (SOA-C03) #3 Domain 1-2 Monitoring — CloudWatch Logs, Logs Insights, Agent
The third post in the SOA-C03 series covers the log side of CloudWatch. It covers the structure of log groups and log streams, retention periods and cost, how to collect logs and OS metrics with the CloudWatch Agent, metric filters that extract metrics from logs, Logs Insights queries, and subscription filters that deliver logs in real time.
AWS Certified Developer - Associate (DVA-C02) #9 Domain 3-1 Deployment — CI/CD
The first post of the DVA-C02 deployment domain. It covers the division of roles among the AWS developer tools (CodeCommit,CodeBuild,CodeDeploy,CodePipeline,CodeArtifact), along with CodeBuild's buildspec.yml phases and environment variables, CodeDeploy's appspec.yml with deployment groups and lifecycle hooks, and CodePipeline's stage composition and artifact flow at the exam level. The key is knowing which tool does what.
AWS Certified CloudOps Engineer - Associate (SOA-C03) #2 Domain 1-1 Monitoring — CloudWatch Metrics, Alarms, and Dashboards
The second post of the SOA-C03 series covers CloudWatch, the first topic of the largest domain, Monitoring (22%). It covers how metrics are collected along with namespaces and dimensions, the difference between standard and custom metrics, alarm state transitions and evaluation-period design, composite alarms, and dashboard composition.
AWS Certified Developer - Associate (DVA-C02) #8 Domain 2-2 Security — Encryption and Secrets
The second post of the DVA-C02 security domain. It covers KMS key types and envelope encryption, at-rest and in-transit encryption, S3 server-side encryption options (SSE-S3, SSE-KMS, SSE-C) and Lambda environment variable encryption, and the difference between Secrets Manager and Parameter Store (automatic rotation, cost, hierarchy), all at the exam level. Keeping secrets out of code is the core.
AWS Certified CloudOps Engineer - Associate (SOA-C03) #1 Exam Introduction — Exam Structure and Study Roadmap
The first post in the AWS Certified CloudOps Engineer - Associate (SOA-C03) series. It covers the rename from SysOps Administrator to CloudOps Engineer, the 65-question / 130-minute / 720-point structure, the weight of the five domains (Monitoring 22% , Reliability 22% , Deployment Automation 22% , Networking 18% , Security 16%), and a study strategy that turns the hands-on experience from the [AWS practical track](/en/posts/aws-basics-1-account-region-az), [SAA-C03](/en/posts/aws-saa-1), and [DVA-C02](/en/posts/aws-dva-1) into operational judgment. This 15-part series is designed to help you pass SOA-C03, and it ends with a full-scale mock exam in #15.
AWS Certified Developer - Associate (DVA-C02) #7 Domain 2-1 Security — Authentication and Authorization
The first post of the DVA-C02 security domain. From a developer's perspective, it revisits IAM Roles (instance profile, ECS task role, Lambda execution role), STS temporary credentials and AssumeRole/federation, and the division of roles between a Cognito User Pool (authentication) and an Identity Pool (temporary AWS credentials), all at the exam level. The security domain is the second-largest at 26%.
AWS Certified Developer - Associate (DVA-C02) #6 Domain 1-5 Development with AWS Services — SDK Development Patterns
The fifth post of the DVA-C02 development domain. It covers the common patterns that recur when calling services with the AWS SDK: pagination, exponential backoff and jitter for handling throttling and transient errors, idempotency implementation, S3 multipart upload and presigned URLs, and the SDK credential provider chain along with region and retry configuration, all at the exam level.
ALB / NLB and ACM (HTTPS)
The role differences among AWS's managed load balancers ALB / NLB / GWLB, the flow of Listener / Target Group / Health Check, and the operational flow of issuing a certificate with ACM and adding HTTPS in one go.
API Gateway + Lambda
The standard pattern for exposing Lambda over HTTP. We cover the difference between REST API and HTTP API, Lambda integration (proxy / non-proxy), routes / methods, authorization (IAM / Cognito / Lambda authorizer), CORS, stages / deployment, throttling, usage plans, caching, custom domains, and cost.
Appendix A — CLF-C02 Certification Bridge
A domain-by-domain mapping table of where this book's 27 chapters of practical content overlap with — and where they leave gaps against — the AWS Cloud Practitioner (CLF-C02) exam scope. It's a bridge for those who want to connect practical learning to the certification track, while a full exam-domain-based treatment is the territory of a separate certification book.
AWS Certified Developer - Associate (DVA-C02) #5 Domain 1-4 Development with AWS Services — Messaging and Events
The fourth post of the DVA-C02 development domain. It covers the difference between SQS standard queues and FIFO queues, visibility timeout and long polling, DLQs, SNS pub/sub and fan-out (SNS + SQS), EventBridge's event bus and rule-based routing and schedules, and Step Functions' state machines (Standard vs Express), all at the exam level. Knowing when to choose which messaging service is the core.
AWS Certified Solutions Architect - Associate (SAA-C03) #16 Full-Scale Multiple-Choice Practice Exam — 50 Questions + Explanations
The final post of the SAA-C03 series. Matched to the real exam's domain weights (security 30% , resilience 26% , high performance 24% , cost 20%), you solve 50 questions and find your weak domains through each question's answer and explanation. Solve them on the clock, then go back to the relevant domain post to shore up any gaps.