Easy way to crack AWS Solution Architect Professional

ABHISHEK KUMAR
3 min readDec 6, 2020

There are many resources available online for training and every one among them is sweet in its own ways. I shortlisted Stephane Maarek for my preparation and Tutorialsdojo for the practice exam some more questions to practice you will get on the examtopics website.

What I did I first gone through the AWS Solution Architect- Associate course by Stephane Maarek then I have given the exam Associate level and I cleared that from there I learned approximately all services which come in the exam with hands-on then I have gone through AWS solution Architect- Professional course by Stephane maarek 2 times then I tried tutorial dojo practice set. I little bit disappointed with my marks and reviewed all the questions over there and again I started the same Stephane maarek tutorials multiple times along with exam topics website question which is already solved then I again came to tutorialsdojo practice set and there I got good marks approximately 70–80 %. one more thing TutorialsDojo also offers cheat sheets containing service comparisons which is the golden source for nailing the process of elimination in MCQs.

Please do note that when you are going for a Professional AWS certification, then you need to understand that it won’t be all theoretical knowledge. You will need some experience in that field. I started reading about multiple use-cases where companies have moved onto AWS and flourished in their fields.

Some important points to revisit

Following are some important topics which come in my exam.

  1. Managing multiple accounts using AWS Organizations Units, SCPs, AWS RAM, Tree view, and about billing.
  2. Know the different types of standard access for IAM users, like Power User and Admin Access
  3. Migration over the network takes more than 1 week, use Snowball. Need to do computing during migration, use Snowball edge. Data sources are over 10PB, use SnowmobileUnderstand how to access resources within and outside Zone of trust using STS.
  4. Migrating databases using DMS (with SCT, sources, targets) and servers using SMS (Application Discovery: agentless and agent-based, features)
  5. Remember the different STS APIs and how to use them for the federation, single sign-on, and with identity brokers
  6. Some basic VPC concepts: Peering, Transit VPC, and Gateway, VPC Endpoint (interface and gateway).
  7. Know how to connect on-premise with AWS using Direct Connect (BGP, public and private VAF) and VPN.
  8. SSM Parameters Store and Secrets Manager and when to prefer one over the other
  9. Understanding security for data storage services like S3 (SSE), RDS (TDE, SSL, encrypted volumes, and snapshots), etc. at rest and in transit.
  10. Understanding durability in data storage services like S3 (lifecycle, CRR), RDS (multi-az, global Aurora Db, snapshots), etc.
  11. Understanding performance in data storage services like S3 (multipart upload, transfer acceleration), RDS (read-replicas, Aurora serverless, multi-master), etc.
  12. Security and DDoS protection options using Shield, WAF, CloudFront, Route53, Autoscaling, and deciding which one is best for us.
  13. Monitoring and automation using AWS Config and Systems Manager (Automation, Patch Manager, State Manager, Run).
  14. CloudTrail limitations and customization like CloudTrail cannot record RDS queries and wish to enable “global services” to trace IAM usage.
  15. You can install CloudWatch and X-Ray agents on EC2 instances/on-premise servers to use AWS Services for visualization of logs and stats
  16. Serverless Application Model and its limitations.
  17. LoadBalancer types and which provides the foremost optimized solution during which scenarios
  18. Types of Route53 routing policies and health checks
  19. EBS volume (types, limits, sizes, RAID), Instance store (limits, use-cases), and EFS (performance and throughput modes, storage tiers)
  20. Four parts of Kinesis: Stream (latency, limit, sharding, retention, sources), Video Stream (producers, consumers), Analysis (latency, SQL), and Firehose (targets, serverless, buffer).
  21. Data warehousing options: Elastic MapReduce, Redshift, and Redshift Spectrum.
  22. Go through FAQ of (S3, IAM, VPC, ROUTE53, AWS Organizations)
  23. Go through certain white paper especially storage service whitepaper & AWS Account Structure Considerations.
  24. Also, a minimum of once undergoes their well-architected framework. this may assist you to understand the simplest practices and why they’re called so.

Note: If you have any queries regarding the exam you can connect with me on LinkedIn.

--

--

ABHISHEK KUMAR

DevOps/Cloud | 2x AWS Certified | 1x Terraform Certified | 1x CKAD Certified | Gitlab