Jimmy R Silva
Sr Technical Trainer, AWS
📚 Module Slides
0 Introduction
Course overview, logistics, agenda, AWS training resources
1 Review Architecting Concepts
Well-Architected Framework, design principles, core services review
2 Single to Multiple Accounts
AWS Organizations, Control Tower, SCPs, Resource Control Policies
3 Hybrid Connectivity
Direct Connect, Site-to-Site VPN, Transit Gateway, routing
4 Specialized Infrastructure
HPC, Dedicated Instances/Hosts, VMware Cloud on AWS, Outposts
5 Connecting Networks
Transit Gateway advanced, VPC Peering, PrivateLink, cross-region
6 Containers
ECS, EKS, Fargate, ECR, container networking, task definitions
7 CI/CD
CodePipeline, CodeBuild, CodeDeploy, CloudFormation, CDK
8 High Availability & DDoS
Shield, WAF, Route 53, Global Accelerator, multi-region failover
9 Securing Data
KMS, CloudHSM, ACM, Secrets Manager, encryption at rest/transit
10 Large Scale Data Stores
S3 advanced, Lake Formation, Athena, Redshift, data lake patterns
11 Migrating Workloads
Migration Hub, DMS, Application Migration Service, strategies
12 Optimizing Cost
Cost Explorer, Compute Optimizer, Savings Plans, Reserved Instances
13 Architecting for the Edge
CloudFront, Lambda@Edge, CloudFront Functions, Outposts, Local Zones
14 Review
Course summary, exam preparation, certification paths, next steps
⚡ Recent AWS Updates (Last 9 Months)
Key service updates affecting course content (Oct 2025 – Jul 2026). 📄 View Full Research Report →
⚠️ Lifecycle Changes — Discuss in Class
- Amazon Kendra → Maintenance Mode (Jun 2026): No new features or customers after Jul 30, 2026. Recommend Amazon Bedrock Knowledge Bases for search architectures.
- Amazon Q Business → Amazon Quick (Jul 2026): Rebranding; no new customers after Jul 31, 2026.
- VMware Cloud on AWS: AWS no longer selling new subscriptions (Broadcom acquisition). Affects Module 4 — existing customers migrating to alternatives.
Module 2: Organizations & Control Tower
- Control Tower landing zone 4.0 — Controls-Only experience
- 750+ managed controls without full CT deployment
- Automatic enrollment of accounts — move to OU to auto-enroll
- Organizations applies account departure security controls by default
- Resource Control Policies (RCPs) and Declarative Policies — new policy types
Modules 3 & 5: Networking — Transit Gateway & Direct Connect
- Cross-Region PrivateLink — interface VPC endpoints connect to services in other Regions (Nov 2025 — removes "VPC endpoints are regional" limitation)
- Transit Gateway prefix limit increased to 200 for Direct Connect gateway associations
Module 6: Containers — ECS & EKS
Module 7: CI/CD
Module 8: DDoS & Security — WAF, Shield, CloudFront
Module 13: Edge & Content Delivery
Major Announcements
- re:Invent 2025 — Graviton5, Bedrock AgentCore, Trainium3 UltraServers, AI Factories (affects Modules 4, 6, 13)
- Top announcements of What's Next with AWS, 2026 (Apr 2026)
🧪 Hands-On Labs
Lab 1: Configure VPC Peering and Transit Gateway
Day 1 — Establish connectivity between VPCs using peering and TGW
Lab 2: Configure Hybrid Connectivity with VPN
Day 1 — Set up Site-to-Site VPN with Transit Gateway integration
Lab 3: Deploy Containers on ECS/EKS
Day 2 — Deploy containerized workloads with Fargate and service discovery
Lab 4: Implement DDoS Protection with WAF and Shield
Day 2 — Configure WAF rules, Shield Advanced, and rate limiting
Lab 5: Configure Data Encryption with KMS
Day 3 — Implement KMS key policies, envelope encryption, cross-account access
Lab 6: Migrate Workloads with Application Migration Service
Day 3 — Perform server migration with replication and cutover
📋 Course Information
Learning Objectives
- Design multi-account architectures with Organizations & Control Tower
- Implement hybrid connectivity with Direct Connect & VPN
- Optimize network routing with Transit Gateway
- Deploy container workloads on ECS and EKS
- Implement DDoS protection with WAF & Shield
- Encrypt data at rest and in transit with KMS & CloudHSM
- Migrate workloads using AWS migration services
- Optimize costs with Savings Plans & Compute Optimizer
Prerequisites
- AWS Solutions Architect Associate certification (or equivalent experience)
- Architecting on AWS course (or equivalent knowledge)
- Familiarity with VPC, IAM, EC2, S3 core services
- Understanding of networking concepts (routing, DNS, firewalls)
Key AWS Services
- Multi-Account: Organizations, Control Tower, SCPs
- Networking: Direct Connect, Transit Gateway, PrivateLink
- Containers: ECS, EKS, Fargate, ECR
- Security: WAF, Shield, KMS, CloudHSM
- Migration: DMS, Application Migration Service
- Edge: CloudFront, Lambda@Edge, Outposts
Course Schedule
- Day 1: Modules 0–5 (Accounts, Networking, Connectivity)
- Day 2: Modules 6–9 (Containers, CI/CD, HA, Security)
- Day 3: Modules 10–14 (Data, Migration, Cost, Edge, Review)
- Labs distributed across all 3 days