This chapter covers the following official AWS Certified SysOps Administrator – Associate (SOA-C02) exam domain: Domain 6: Cost and Performance Optimization (For more information on the official AWS Certified SysOps Administrator – Associate [SOA-C02] exam topics, see the Introduction.) In this chapter, you learn how to use AWS strategies and services to optimize your costs. […]

Troubleshooting Direct Connect Direct Connect issues can be difficult to diagnose. The ideal approach is to use the OSI model to help isolate the potential issues and the underlying cause. Layer 1 (physical) issues occur when you are having difficulty establishing physical connectivity to an AWS Direct Connect device. When a Direct Connect circuit is […]

HTTP Status Codes from an Origin When a cache miss occurs, the content must be retrieved from the origin. To the origin, this appears as a web request. The origin may return an HTTP error code (4xx or 5xx status codes). You can monitor, alarm, and receive notifications that include these HTTP response codes. CloudFront […]

Analyzing Standard Log Files More than 30 fields are included in each log file. They contain the date and time of the request and also the edge location where they were received. Other fields shown include the source IP, protocol, and port. Much like ALB access logs, the CloudFront logs also include the HTTP status […]

Cram Quiz Answer these questions. The answers follow the last question. If you cannot answer these questions correctly, consider reading this section again until you can. 1. You want to identify and count requests that are hitting a web application from varying on-premises datacenters. All datacenters are in the same country but have different IP address […]

Cram Quiz Answer these questions. The answers follow the last question. If you cannot answer these questions correctly, consider reading this section again until you can. 1. What are the minimum requirements for an S3 bucket that will be used to store ELB access logs? (Choose two.) A. It must be in the same AZ as […]

ExamAlert You must be capable of reading and interpreting flow logs and identifying source IP and destination IP addresses, ports, and whether the traffic was blocked or allowed. Also, you need to understand that traffic can be blocked by a network access control list, and that the NACL is enforced before the security group on […]

This chapter covers the following official AWS Certified SysOps Administrator – Associate (SOA-C02) exam domains: Domain 5: Networking and Content Delivery (For more information on the official AWS Certified SysOps Administrator – Associate [SOA-C02] exam topics, see the Introduction.) VPC Flow Logs This section covers the following objective of Domain 5 (Networking and Content Delivery) […]

S3 Origin Access Identity This section covers the following objective of Domain 5 (Networking and Content Delivery) from the official AWS Certified SysOps Administrator – Associate (SOA-C02) exam guide: 5.2 Configure domains, DNS services, and content delivery CramSaver If you can correctly answer these questions before going through this section, save time by skimming the […]

CloudFront and HTTPs When you create a CloudFront distribution, you can configure different options for HTTPs. One option is to redirect HTTP to HTTPs. This allows users to connect to the content with HTTP, but the traffic is then redirected to secure HTTPs. You can also set the distribution to HTTPs only, and HTTP requests […]