Module 14: Course Review - Advanced Architecting on AWS

📋 Course Summary — Day 1

Module	Key Takeaway
0: Introduction	3-day course preparing for SAP-C02
1: Review Concepts	6 pillars of Well-Architected, design principles, global infra
2: Multiple Accounts	Organizations + SCPs + RCPs + Control Tower for governance
3: Hybrid Connectivity	DX for consistent performance, VPN for quick/encrypted, TGW for hub
4: Specialized Infra	HPC (EFA + cluster), Dedicated Hosts (BYOL), Outposts (on-prem AWS)
5: Connecting Networks	TGW advanced, PrivateLink (now cross-region!), Shared VPCs

📋 Course Summary — Day 2

Module	Key Takeaway
6: Containers	ECS (simpler) vs. EKS (K8s standard). awsvpc for isolation. Fargate = serverless.
7: CI/CD	CodePipeline orchestration. Blue/Green for safe deploys. StackSets for multi-account.
8: High Availability	Route 53 failover + Global Accelerator. Shield Advanced for DDoS. WAF L7 rules.
9: Securing Data	KMS envelope encryption. CloudHSM for full control. ACM auto-renew. Secrets Manager rotation.

📋 Course Summary — Day 3

Module	Key Takeaway
10: Data Stores	S3 replication + Object Lock. Data lake (Glue + Athena). DynamoDB Global Tables.
11: Migration	7 Rs framework. MGN for servers. DMS + SCT for databases. DataSync for files.
12: Cost	Savings Plans (flexible). Spot (fault-tolerant). Right-size with Compute Optimizer.
13: Edge	CloudFront (OAC, behaviors). CF Functions vs. Lambda@Edge. Local Zones/Wavelength.

🏆 Certification: SAP-C02

Exam: AWS Certified Solutions Architect – Professional
Format: 75 questions, 180 minutes, multiple choice & multiple response
Passing score: 750/1000
Domains: Organizational Complexity (26%), New Solutions (29%), Migration (15%), Cost Control (10%), Continuous Improvement (20%)
Experience: 2+ years hands-on AWS, multi-account, hybrid architectures

This course covers all 5 exam domains. Combine with hands-on practice, whitepapers, and practice exams for best results.

📝 Exam Tips

Read carefully: Questions are long — identify the KEY requirement first
Eliminate wrong answers: Usually 2 obviously wrong, then choose between 2 plausible
Look for constraints: "Minimal operational overhead" → managed services. "Cost-effective" → Spot/Savings Plans
Multi-account questions: Think Organizations + SCPs + RAM
Networking questions: Draw the architecture mentally — identify transitive routing needs
Migration questions: Match the R strategy to the scenario description
Flag and return: Don't spend >3 min on any question — flag and move on

🎯 Key Takeaway Cards

Multi-Account

SCPs + RCPs + Control Tower

Networking

TGW hub + PrivateLink + DX

Containers

ECS/EKS + Fargate + awsvpc

Security

KMS envelope + CloudHSM + ACM

Migration

7 Rs + MGN + DMS/SCT

Cost

Savings Plans + Spot + Right-size

📚 Next Steps

Practice exams: AWS Skill Builder official practice exam (20 questions free)
Whitepapers: Well-Architected Framework, Disaster Recovery, Multi-Account Strategy
Hands-on: Build a multi-account setup with Organizations + Control Tower
Study groups: AWS re:Post community, Reddit r/AWSCertifications
Schedule exam: Book within 2-4 weeks while knowledge is fresh

Thank you for attending! You've covered the full breadth of advanced AWS architecture. Good luck on your certification journey! 🎉

🧪 Final Knowledge Check

Q1: A company needs to share a Transit Gateway with 50 accounts in their Organization. What's the simplest approach?

A) Create TGW in each account B) Share via RAM with auto-accept C) VPC Peering D) PrivateLink

B) Share via RAM with auto-accept — Resource Access Manager can share TGW with the entire Organization. Enable auto-accept on the TGW so member accounts don't need to manually accept. One TGW serves all accounts.

Q2: Which combination provides the MOST cost-effective compute for a stateless web application with variable traffic?

A) On-Demand only B) Reserved Instances + On-Demand C) Savings Plans (base) + Spot (scaling) + On-Demand (fallback) D) Spot only

C) Savings Plans (base) + Spot (scaling) + On-Demand (fallback) — Savings Plans cover predictable baseline. Spot handles scaling spikes cheaply. On-Demand auto-replaces interrupted Spot. This three-tier approach maximizes savings for variable workloads.

🎉 Course Complete!

🏗️ 🏆

Congratulations!

You've completed Advanced Architecting on AWS.

Remember: Architecture is about trade-offs. There's rarely a single "right" answer — but there's always a BEST answer for the given constraints.

Good luck on your SAP-C02 exam! 🎯