alexandre2602 / auladobruno

Links e materiais disponibilizados como conteúdo adicional para os estudos nos treinamentos da AWS.

Aula do Bruno

[DISCLAIMER] Links e materiais disponibilizados como conteúdo adicional para os estudos nos treinamentos da AWS. As informações aqui inseridas são mantidas por mim mesmo, e não expressam nenhuma informação oficial por parte da AWS; mesmo que em sua maioria sejam artigos e blog posts oficiais da Amazon Web Services.

Dicas de estudo para as certificações

• Escolha sua carreira de certificações e organize o seu roteiro de aprendizado
• Revise o arquivo Exam Guide do respectivo exame de certificação
• Defina uma estratégia eficiente de estudos. Há algumas técnicas bem interessantes como o Retrieval, Spaced e o Elaboration
• Faça um treinamento presencial oficial da AWS em aws.training
• Faça laboratórios e ganhe experiência prática
• Revise o arquivo de Sample Questions do respectivo exame de certificação
• Revise os whitepapers e FAQs dos serviços que estão no escopo do exame de certificação
• Assista os vídeos da série "This is My Architecture", com exemplos de casos reais dos clientes AWS
• Faça um treinamento oficial da AWS com foco na preparação do exame; os Exam Readiness
• Faça um Practice Exam oficial (simulado)
• Agende seu exame de certificação na PSI ou Person Vue
• Adicione 30 minutos a mais em seu exame com o ESL +30 MINUTES (disponível para não-nativos de língua inglesa)
• Seja um certificado AWS!
• Aproveite os benefícios concedidos só a quem tem certificações AWS

Architecting on AWS

• AWS Global Cloud Infrastructure Map
• AWS Global Infrastructure Regions
• Learn how we secure AWS data centers
• Compute Abstractions on AWS: A Visual Story
• AWS Well-Architected - Learn, measure, and build using architectural best practices
• AWS Well-Architected Framework
• AWS Well-Architected Tool – Review Workloads Against Best Practices
• Amazon EC2 Instance Types
• Spot Instance Advisor
• Amazon EC2 Auto Scaling Lifecycle Hooks
• Running high-scale web applications on Amazon EC2 Spot Instances
• Amazon EBS Volume Types
• Recovering files from an Amazon EBS volume backup
• Amazon Aurora Backtrack – Turn Back Time
• Best Practices for DynamoDB
• Best Practices for Designing and Using Partition Keys Effectively
• Building resiliency at scale at Tinder with Amazon ElastiCache
• Introducing Amazon Elasticsearch Service as a target in AWS Database Migration Service
• Migration Complete – Amazon’s Consumer Business Just Turned off its Final Oracle Database
• Scaling Your Amazon RDS Instance Vertically and Horizontally
• Right-size Amazon RDS instances at scale based on Oracle performance metrics
• Amazon S3 + Amazon CloudFront: A Match Made in the Cloud
• How to set up a CloudFront distribution for Amazon S3
• Overview of Managing Access on S3
• New – AWS Storage Gateway Hardware Appliance
• Using static IP addresses for Application Load Balancers
• New – Application Load Balancer Simplifies Deployment with Weighted Target Groups
• How to securely publish Internet applications at scale using Application Load Balancer and AWS PrivateLink
• Debugging tool for network connectivity from Amazon VPC
• VPC sharing: A new approach to multiple accounts and VPC management
• Multiple Region Multi-VPC Connectivity
• Working with Direct Connect Gateways
• AWS Direct Connect Partners
• AWS Network Connectivity Over MPLS
• Building a Serverless Dynamic DNS System with AWS
• How do I create an IAM policy to control access to Amazon EC2 resources using tags?
• Simplify granting access to your AWS resources by using tags on AWS IAM users and roles
• Writing IAM Policies: Grant Access to User-Specific Folders in an Amazon S3 Bucket
• Now Create and Manage AWS IAM Roles More Easily with the Updated IAM Console
• Guidelines for protecting your AWS account while using programmatic access
• Creating a Billing Alarm to Monitor Your Estimated AWS Charges
• How to better monitor your custom application metrics using Amazon CloudWatch Agent
• CloudWatch Search Expression Examples
• CloudWatch Logs Subscription Consumer + Elasticsearch + Kibana Dashboards
• Running Scripts from GitHub and Amazon S3
• Validating AWS CloudFormation Templates
• Amazon CloudFront Dynamic Content Delivery
• Implementation Considerations - Learn Caching Design Patterns
• Caching Content Based on Query String Parameters
• AWS Serverless Application Model
• Firecracker – Lightweight Virtualization for Serverless Computing
• Chaos Monkey

Advanced Architecting on AWS

• Overlay Multicast in Amazon Virtual Private Cloud
• Introducing Bring Your Own IP (BYOIP) for Amazon VPC
• Use the Serverless Developer Portal to Catalog Your API Gateway APIs
• Managing AWS resources across multiple accounts and Regions using AWS Systems Manager Automation
• How Moody’s uses AWS Systems Manager to patch servers across multiple cloud providers
• Centralized multi-account and multi-Region patching with AWS Systems Manager Automation
• Understanding Burst vs. Baseline Performance with Amazon RDS and GP2
• Scaling Based on Amazon SQS
• Under the Hood: AWS CodeDeploy and Auto Scaling Integration
• Elastic Beanstalk - Advanced environment customization with configuration files (.ebextensions)
• New – Amazon Connect and Amazon Lex Integration
• Integrating Amazon SES with Microsoft Exchange
• AWS Server Migration Service – Server Migration to the Cloud Made Easy
• Query any data source with Amazon Athena’s new federated query
• Harmonize, Query, and Visualize Data from Various Providers using AWS Glue, Amazon Athena, and Amazon QuickSight

Systems Operations on AWS

• AWS Command Line Interface
• AWS CLI v2 is now generally available
• AWS Tools for PowerShell
• Using the AWS Tools for Windows PowerShell
• Building a Virtual Classroom Application using the Amazon Chime SDK
• How can I execute user data to automatically create a file with every restart of my Amazon EC2 instance?
• How can I connect to my Amazon EC2 instance if I lost my SSH key pair after its initial launch?
• How do I install AWS Systems Manager Agent (SSM Agent) on an Amazon EC2 Linux instance at launch?
• Running Ansible Playbooks using EC2 Systems Manager Run Command and State Manager
• Query for the latest Amazon Linux AMI IDs using AWS Systems Manager Parameter Store
• Query for the Latest Windows AMI Using Systems Manager Parameter Store
• New – Query for AWS Regions, Endpoints, and More Using AWS Systems Manager Parameter Store
• Patching your Windows EC2 instances using AWS Systems Manager Patch Manager
• How to patch Windows EC2 instances in private subnets Using AWS Systems Manager
• How patches are installed - AWS Systems Manager
• Packaging to Distribution – Using AWS Systems Manager Distributor to deploy Datadog
• Taking Advantage of Amazon EC2 Spot Instance Interruption Notices
• How do I stop and start Amazon EC2 instances at regular intervals using Lambda?
• How do I stop and start my instances using the AWS Instance Scheduler?
• AWS Transit Gateway Egress VPC Demo
• Resolving DNS queries between VPCs and your network
• Securely Access Services Over AWS PrivateLink
• Securely Connect to Linux Instances Running in a Private Amazon VPC (Agent Forwarding)
• New – Port Forwarding Using AWS System Manager Session Manager
• Remote Desktop Gateway on AWS - AWS Quick Starts
• Announcing Lambda Support for PowerShell Core
• A Simple Way to Export Your IAM Settings
• Reset Your AWS Root Account’s Lost MFA Device Faster by Using the AWS Management Console
• How can I reset the administrator password on an EC2 Windows instance?
• ELB Connection Draining – Remove Instances From Service With Care
• Use Cases for AWS Managed Microsoft AD
• Enabling SAML for your AWS resources
• Enabling Federation to AWS Using Windows Active Directory, ADFS, and SAML 2.0
• How to automate SAML federation to multiple AWS accounts from Microsoft Azure Active Directory
• How do I grant my Active Directory users access to the API or AWS CLI with AD FS?
• How to retrieve short-term credentials for CLI use with AWS Single Sign-on
• Scanning Docker Images for Vulnerabilities using Clair, Amazon ECS, ECR, and AWS CodePipeline
• Automatically update instances in an Amazon ECS cluster using the AMI ID parameter
• Managing Amazon EKS Clusters with Rancher
• Build Your Own Face Recognition Service Using Amazon Rekognition
• Using Amazon RDS Proxy with AWS Lambda
• Use Amazon WorkSpaces on Your Samsung Galaxy S8/S8+ With the New Samsung DeX
• How can I use DataSync to transfer data from an Amazon EFS file system to an Amazon S3 bucket?
• AWS DataSync Demo - Easily Transfer Data to and From AWS Up to 10x Faster
• New – Amazon FSx for Windows File Server – Fast, Fully Managed, and Secure
• Working with Shadow Copies
• Deploying Multi-AZ File Systems
• Amazon FSx for Windows File Server, Capítulo 1 – Criando e configurando
• Amazon FSx for Windows File Server, Capítulo 2 – Mais funcionalidades: Shadow Copy, DFS Namespace, Data Deduplication e Quotas
• Amazon FSx for Windows File Server, Capítulo 3 – Mapeando o FSx para servidores Linux
• Amazon FSx for Windows File Server, Capítulo 4 – Migrando dados com o AWS DataSync (Cenário de Multi-Região)
• Achieving 80,000 IOPS for SQL Server on AWS EC2 and EBS
• AWS re:Invent 2018: Powering Next-Gen EC2 Instances: Deep Dive into the Nitro System
• AWS re:Inforce 2019: Security benefits of the Nitro architecture
• How Amazon Uses Explosive-Resistant Devices To Transfer Data To AWS (AWS Snowball)
• AWS OpsHub for Snow Family
• Amazon S3 performance and cost optimization
• Amazon CloudWatch Concepts
• CloudWatch Logs Agent Reference
• CloudWatch Events Tutorials
• Monitoring Trusted Advisor with Amazon CloudWatch Events and Amazon CloudWatch
• Trusted Advisor Exposed Keys CloudWatch Event Monitor
• Monitoring Amazon GuardDuty Findings with Amazon CloudWatch Events
• How Does AWS CloudFormation Work?
• How do I resolve AWS CloudFormation template validation errors or template format errors?
• A deep dive into testing with TaskCat
• Creating a Stack on the AWS CloudFormation Console
• New – Import Existing Resources into a CloudFormation Stack
• How do I prevent the resources in my AWS CloudFormation stack from getting deleted or updated?
• Template Snippets
• Getting Started with AWS Support
• AWS Tagging Strategies
• AWS re:Invent 2015: A Day in the Life of a Netflix Engineer
• AWS re:Invent 2016: Another Day in the Life of a Netflix Engineer
• AWS re:Invent 2017: A Day in the Life of a Netflix Engineer III
• AWS re:Invent 2018: Another Day in the Life of a Cloud Network Engineer at Netflix
• AWS re:Invent 2019: A day in the life of a Netflix engineer IV
• Conformity Monkey

DevOps Engineering on AWS

• DevOps and AWS
• What is Continuous Delivery?
• What is Continuous Integration?
• Setting up a CI/CD pipeline by integrating Jenkins with AWS CodeBuild and AWS CodeDeploy
• Running AWS commands from Slack using AWS Chatbot
• Introducing AWS Chatbot: ChatOps for AWS
• Creating a Trail for an Organization
• Easier way to control access to AWS regions using IAM policies
• How to Enable Caching for AWS CodeBuild
• Integrating AWS CodeCommit with Jenkins
• How to Test and Debug AWS CodeDeploy Locally Before You Ship Your Code
• Implementing DevSecOps Using AWS CodePipeline
• Debugging with Amazon CloudWatch Synthetics and AWS X-Ray
• Using ServiceLens to Monitor the Health of Your Applications
• Automating rollback of failed Amazon ECS deployments
• Amazon ECS Task Placement Strategies
• Task Definition Parameters
• Private Registry Authentication for Tasks
• AWS Summit - DevOps Culture at Amazon
• AWS re:Invent 2018: Moving to DevOps the Amazon Way

Security Engineering on AWS

• Shared Responsibility Model
• AWS IP Address Ranges
• IAM Best Practices
• Limitations on IAM Entities and Objects
• IAM JSON Policy Elements Reference
• IAM Policy Elements: Variables and Tags
• IAM: Policies and Permissions
• Create fine-grained session permissions using IAM managed policies
• Permissions Boundaries for IAM Entities
• AWS Global Condition Context Keys
• Using Service-Linked Roles
• AWS Services That Work with IAM
• Automate analyzing your permissions using IAM access advisor APIs
• How AWS uses automated reasoning to help you achieve security at scale (AWS Zelkova)
• Announcing the Golden AMI Pipeline
• Creating a Golden AMI Pipeline Integrated with Qualys for Vulnerability Assessments
• Getting Started with Automation
• How can I use user data to replace a lost SSH key pair after the initial launch of my Amazon EC2 instance?
• AWS re:Invent 2019: Deep dive on Amazon EBS
• What to Do If You Inadvertently Expose an AWS Access Key
• How to Detect and Automatically Revoke Unintended IAM Access with Amazon CloudWatch Events
• AWS re:Invent 2018: How Nubank Automates Fine-Grained Security with IAM, AWS Lambda, & CI/CD
• AWS re:Invent 2017: Use Amazon EC2 Systems Manager to Perform Automated Resilience
• Enabling MFA Devices
• Monitor Amazon Aurora Database Activities Using DataSunrise Database Security
• Using SSL/TLS to Encrypt a Connection to a DB Instance
• Applying best practices for securing sensitive data in Amazon RDS
• Best practices for securing sensitive data in AWS data stores
• Performing SQL database client-side encryption for multi-Region high availability
• How to use AWS Secrets Manager to rotate credentials for all Amazon RDS database types, including Oracle
• How to use AWS Secrets Manager to securely store and rotate SSH key pairs
• Post-quantum TLS now supported in AWS KMS
• How to add DNS filtering to your NAT instance with Squid
• How to Remediate Amazon Inspector Security Findings Automatically
• Amazon GuardDuty Partners
• Automated Response and Remediation with AWS Security Hub
• Managed Renewal for ACM's Amazon-Issued Certificates
• Tutorial: Sending VPC Flow Logs to Splunk Using Amazon Kinesis Data Firehose
• How to Visualize and Refine Your Network’s Security by Adding Security Group IDs to Your VPC Flow Logs
• How do I establish an AWS VPN over an AWS Direct Connect connection?
• Why is my presigned URL for an Amazon S3 bucket expiring before the expiration time that I specified?
• How to Enhance the Security of Sensitive Customer Data by Using Amazon CloudFront Field-Level Encryption
• Authorization@Edge using cookies: Protect your Amazon CloudFront content from being downloaded by unauthenticated users
• How do I use CloudFront to serve a static website hosted on Amazon S3?
• Reduce DDoS Risks Using Amazon Route 53 and AWS Shield
• Simplify Login with Application Load Balancer Built-in Authentication
• Building ADFS Federation for your Web App using Amazon Cognito User Pools
• SAML Security Cheat Sheet - OWASP
• Git pre-commit validation of AWS CloudFormation templates with cfn-lint
• How to Use AWS Config to Monitor for and Respond to Amazon S3 Buckets Allowing Public Access
• Using AWS Service Catalog Constraints
• AWS Landing Zone
• AWS Centralized Logging
• Vulnerability and Penetration Testing
• Tutorial: Blocking IP Addresses That Submit Bad Requests

Arquiteturas de Referência & Tools

• AWS Quick Starts
• AWS Solutions
• AWS Simple Monthly Calculator
• AWS Pricing Calculator
• The Amazon Builders' Library
• AWS Samples
• AWS CloudFormation Sample Templates
• AWS SAM - Serverless Application Repository
• AWS Geek Cloud Diagrams & Notes
• [TOOLS] CloudPing
• [TOOLS] AWS Policy Generator
• [TOOLS] S3 Transfer Acceleration Speed Comparison Tool
• [TOOLS] AWS Global Accelerator - Speed Comparison
• [TOOLS] Amazon WorkSpaces - Connection Health Check
• [TOOLS] Web Identity Federation Playground
• [TOOLS] AWS Elastic Load Balancer Demos
• [TOOLS unofficial] JMESPath
• [TOOLS unofficial] AWS IP Ranges
• [TOOLS unofficial] Cloudcraft - Create smart AWS diagrams
• [TOOLS unofficial] Bees with Machine Guns!
• [TOOLS unofficial] The Grinder
• [TOOLS unofficial] Apache JMeter
• [TOOLS unofficial] CloudFormation Lint: CFN Nag
• [TOOLS unofficial] CloudFormation Lint: CFripper
• [TOOLS unofficial] Awesome Honeypots
• [TOOLS unofficial] Modern Honey Network
• [TOOLS unofficial] Rhino Security Labs - Pacu
• [TOOLS unofficial] Rhino Security Labs - CloudGoat
• [TOOLS unofficial] Rhino Security Labs - Cloud Container Attack
• [TOOLS unofficial] Console Recorder for AWS
• [TOOLS unofficial] AWS CloudFront CDN Edge Locations
• [TOOLS unofficial] Lambda Load Testing
• [TOOLS unofficial] MySQL Samples

Workshops & Laboratórios

• [LABS] AWS Qwiklabs
• [LABS] AWS Well-Architected Labs
• [LABS] VMware Cloud on AWS
• [Workshop] AWSome AWS Workshops
• [Workshop] Networking Workshop - Transit Gateway and Traffic Mirroring
• [Workshop] Amazon EC2 Spot Instances Workshop
• [Workshop] Amazon CloudWatch
• [Workshop] SSM & Config
• [Workshop] Amazon FSx Workshop
• [Workshop] Amazon ECS Workshop for AWS Fargate
• [Workshop] Amazon EKS Workshop
• [Workshop] Amazon Lightsail Workshop
• [Workshop] Amazon DynamoDB Labs
• [Workshop] Amazon Aurora Labs for MySQL
• [Workshop] CloudEndure Deep Dive - Workshop
• [Workshop] Migration and Modernization Workshop Guide
• [Workshop] Kynesis Streaming Analytics Workshop
• [Workshop] Workshop: Choose Your Own SAML Adventure
• [Workshop] Landing Zone Workshop
• [Workshop] Security Workshops - Permission Boundaries: How to Truly Delegate Permissions on AWS
• [Workshop] Security Workshops - Data Protection, Detection, Identity, Threat Detection
• [Workshop] AWS Protecting Workloads Workshops
• [Workshop] Getting Hands on with Amazon GuardDuty
• [Workshop] Integrating security into your container pipeline
• [Workshop] DevSecOps with Snyk
• [Workshop] Microsoft Workloads Immersion Day
• [Workshop unofficial] Welcome to the flAWS challenge
• [Workshop unofficial] Play with Docker
• [Workshop unofficial] Hello Kubernetes w/ Minikube
• [SLIDES] Technical Essentials on AWS
• [EBOOK] Hands-On AWS Penetration Testing with Kali Linux
• [FILES] Security Engineering on AWS - script lab 2
• [FILES] Developing on AWS - Additional Resources
• [FILES] Developing on AWS - Solutions for Labs
• [FILES] AWSome Days - Additional Resources
• [VIDEO-LABS] How to use QwikLabs
• [VIDEO-LABS] AWS Technical Essentials
• [VIDEO-LABS] AWS Cloud Practitioner Essentials
• [VIDEO-LABS] Architecting on AWS
• [VIDEO-LABS] Systems Operations on AWS
• [VIDEO-LABS] Developing on AWS
• [VIDEO-LABS] Security Engineering on AWS
• [VIDEO-LABS] Planning and Designing Database on AWS
• [VIDEO-LABS] Deep Learning on AWS
• [VIDEO-LABS] Moving to AWS Serverless
• [VIDEO-LABS] Advanced Architecting on AWS
• [VIDEO-LABS] IoT in Scale: IoT Solution using AWS Services

[DISCLAIMER] Links e materiais disponibilizados como conteúdo adicional para os estudos nos treinamentos da AWS. As informações aqui inseridas são mantidas por mim mesmo, e não expressam nenhuma informação oficial por parte da AWS; mesmo que em sua maioria sejam artigos e blog posts oficiais da Amazon Web Services.