Cloud Operations on AWS Training

Written by wamrhein on 29. September 2015. Posted in AWS Training, Training.

Cloud Operations on AWS

current course dates can be found at the bottom of this page … company training available on request!

Course description

This course teaches systems operators and anyone performing system operations functions how to install, configure, automate, monitor, secure, maintain and troubleshoot the services, networks, and systems on AWS necessary to support business applications. The course also covers specific AWS features, tools, and best practices related to these functions.

Course objectives

In this course, you will learn to:

Recognize the AWS services that support the different phases of Operational Excellence, a Well-Architected Framework pillar.
Manage access to AWS resources using AWS Accounts and Organizations and AWS Identity and Access Management (IAM).
Maintain an inventory of in-use AWS resources using AWS services such as AWS Systems Manager, AWS CloudTrail, and AWS Config.
Develop a resource deployment strategy utilizing metadata tags, Amazon Machine Images, and Control tower to deploy and maintain an AWS cloud environment.
Automate resource deployment using AWS services such as AWS CloudFormation and AWS Service Catalog.
Use AWS services to manage AWS resources through SysOps lifecycle processes such as deployments and patches.
Configure a highly available cloud environment that leverages AWS services such as Amazon Route 53 and Elastic Load Balancing to route traffic for optimal latency and performance.
Configure AWS Auto Scaling and Amazon Elastic Compute Cloud auto scaling to scale your cloud environment based on demand.
Use Amazon CloudWatch and associated features such as alarms, dashboards, and widgets to monitor your cloud environment.
Manage permissions and track activity in your cloud environment using AWS services such as AWS CloudTrail and AWS Config.
Deploy your resources to an Amazon Virtual Private Cloud (Amazon VPC), establish necessary connectivity to your Amazon VPC, and protect your resources from disruptions of service.
State the purpose, benefits, and appropriate use cases for mountable storage in your AWS cloud environment.
Explain the operational characteristics of object storage in the AWS cloud, including Amazon Simple Storage Service (Amazon S3) and Amazon S3 Glacier.
Build a comprehensive costing model to help gather, optimize, and predict your cloud costs using services such as AWS Cost Explorer and the AWS Cost & Usage Report.

Intended audience

This course is intended for:

System administrators
Software developers, especially those with a DevOps role

Prerequisites

We recommend that attendees of this course have:

Successfully completed the AWS Technical Essentials course
Background in either software development or systems administration
Proficiency in maintaining operating systems at the command line, such as shell scripting in Linux environments or cmd/PowerShell in Windows
Basic knowledge of networking protocols (TCP/IP, HTTP)

Activities

This course includes:

Training with instructor
Practical exercises

Course duration / Price

3 days / € 1,845.00 (excl. tax) per person (DE)

Course outline

Day 1

Cloud Operations on AWS Overview
Networking in the Cloud
Computing in the Cloud

Day 2

Storage and archiving in the cloud
Monitoring in the cloud
Manage resource usage in the cloud

Day 3

Configuration management in the cloud
scalable deployments in the cloud
automated and repeatable deployments

IMPORTANT: Please bring your notebook (Windows, Linux or Mac) to our trainings. If this is not possible, please contact us in advance.

Course materials are in English, on request also in German (if available).
Course language is German, on request also in English.

AWS DevOps Engineering on AWS

Written by wamrhein on 29. September 2015. Posted in AWS Training, Training.

DevOps Engineering on AWS

current course dates can be found at the bottom of this page … company training available on request!

Course description

DevOps Engineering on AWS teaches you how to use the combination of DevOps cultural philosophies, practices, and tools to increase your organization’s ability to develop, deliver, and maintain applications and services at high velocity on AWS. This course covers Continuous Integration (CI), Continuous Delivery (CD), infrastructure as code, microservices, monitoring and logging, and communication and collaboration.

Course objectives

In this course, you will learn to:

Use DevOps best practices to develop, deliver, and maintain applications and services at high velocity on AWS
List the advantages, roles and responsibilities of small autonomous DevOps teams
Design and implement an infrastructure on AWS that supports DevOps development projects
Leverage AWS Cloud9 to write, run and debug your code
Deploy various environments with AWS CloudFormation
Host secure, highly scalable, and private Git repositories with AWS CodeCommit
Integrate Git repositories into CI/CD pipelines
Automate build, test, and packaging code with AWS CodeBuild
Securely store and leverage Docker images and integrate them into your CI/CD pipelines
Build CI/CD pipelines to deploy applications on Amazon EC2, serverless applications, and container-based applications
Implement common deployment strategies such as “all at once,” “rolling,” and “blue/green”
Integrate testing and security into CI/CD pipelines
Monitor applications and environments using AWS tools and technologies

Intended audience

This course is intended for:

System administrators
Software developers

Prerequisites

We recommend that attendees of this course have:

Previous attendance at the System Operations on AWS or Developing on AWS courses
Working knowledge of one or more high-level programing languages, such as C#, Java, PHP, Ruby, Python
Intermediate knowledge of administering Linux or Windows systems at the command-line level
Two or more years of experience provisioning, operating, and managing AWS environments

Activities

This course includes:

Training with instructor
Practical exercises

Course duration / Price

3 days – € 2,095.00 (excl. tax) per person (DE)

Course outline

Note: Course content may vary slightly depending on location and/or language.

Day 1

Introduction to DevOps
AWS command line interface
Introduction to DevSecOps
Deployment strategies and developer tools

Day 2

Infrastructure as code
In-depth knowledge of AWS developer tools
Automated testing on AWS

Day 3

Configuration Management
Development with AMI and Amazon EC2 Systems Manager
Containers: Docker and Amazon ECS
DevOps – customer case studies
Course Summary

IMPORTANT: Please bring your notebook (Windows, Linux or Mac) to our trainings. If this is not possible, please contact us in advance.

Course materials are in English, on request also in German (if available).
Course language is German, on request also in English.

Architecting on AWS

Written by wamrhein on 29. September 2015. Posted in AWS Training, Training.

Aws Advanced Training Partner
Aws Premium Consuting Partner
Cert 200

Architecting on AWS

current course dates can be found at the bottom of this page … company training available on request!

Course description

Architecting on AWS is for solutions architects, solution-design engineers, and developers seeking an understanding of AWS architecting. In this course, you will learn to identify services and features to build resilient, secure, and highly available IT solutions on the AWS Cloud.

Architectural solutions differ depending on industry, types of applications, and business size. AWS Authorized Instructors emphasize best practices using the AWS Well-Architected Framework, and guide you through the process of designing optimal IT solutions based on real-life scenarios.

The modules focus on account security, networking, compute, storage, databases, monitoring, automation, containers, serverless architecture, edge services, and backup and recovery. At the end of the course, you will practice building a solution and apply what you have learned.

Course objectives

In this course, you will learn:

AWS architecting basic practices
Fundamentals of account security
Strategies to build a secure virtual network that includes private and public subnets
Practice building a multi-tier architecture in AWS
Strategies to select the appropriate compute resources based on business use cases
Compare and contrast AWS storage products and services based on business scenarios
Compare and contrast AWS database services based on business needs
The role of monitoring, load balancing, and auto scaling responses based on business needs
AWS automation tools that will help you build, maintain, and evolve your infrastructure
Hybrid networking, network peering, and gateway and routing solutions to extend and
secure your infrastructure
Explore AWS container services for the rapid implementation of an infrastructure-agnostic,
portable application environment
Business and security benefits of AWS serverless services based on business examples
The ways in which AWS edge services address latency and security
AWS backup, recovery solutions, and best practices to ensure resiliency and business
continuity

Intended audience

This course is intended for:

Solutions Architects
Solution Design Engineers
Developers seeking an understanding of AWS architecting
Individuals seeking the AWS Solutions Architect-Associate certification

Prerequisites

We recommend that attendees of this course have:

Completed AWS Cloud Practitioner Essentials or AWS Technical Essentials
Working knowledge of distributed systems
Familiarity with general networking concepts
Familiarity with IP addressing
Working knowledge of multi-tier architectures
Familiarity with cloud computing concepts

Activities

This course includes:

Training with instructor
Practical exercises
group discussions
demonstrations
assessments
hands-on labs

Course duration / Price

3 days
€ 1,845.00 (excl. tax) per person (DE)
CHF 2,500.00 (excl. tax) per person (CH)

Course outline

Day 1
- Module 1: Architecting Fundamentals
  - AWS services
  - AWS infrastructure
  - AWS Well-Architected Framework
  - Hands-on lab: Explore and interact with the AWS Management Console and AWS Command Line Interface
- Module 2: Account Security
  - Principals and identities
  - Security policies
  - Managing multiple accounts
- Module 3: Networking 1
  - IP addressing
  - VPC fundamentals
  - VPC traffic security
- Module 4: Compute
  - Compute services
  - EC2 instances
  - Storage for EC2 instances
  - Amazon EC2 pricing options
  - AWS Lambda
  - Hands-On Lab: Build your Amazon VPC infrastructure
Day 2
- Module 5: Storage
  - Storage services
  - Amazon S3
  - Shared file systems
  - Data migration tools
- Module 6: Database Services
  - Database services
  - Amazon RDS
  - Amazon DynamoDB
  - Database caching
  - Database migration tools
  - Hands-on Lab: Create a database layer in your Amazon VPC infrastructure
- Module 7: Monitoring and Scaling
  - Monitoring
  - Alarms and events
  - Load balancing
  - Auto scaling
  - Hands-on Lab: Configure high availability in your Amazon VPC
- Module 8: Automation
  - AWS CloudFormation
  - Infrastructure management
- Module 9: Containers
  - Microservices
  - Containers
  - Container services
Day 3
- Module 10: Networking 2
  - VPC endpoints
  - VPC peering
  - Hybrid networking
  - AWS Transit Gateway
- Module 11: Serverless
  - What is serverless?
  - Amazon API Gateway
  - Amazon SQS
  - Amazon SNS
  - Amazon Kinesis
  - AWS Step Functions
  - Hands-on Lab: Build a serverless architecture
- Module 12: Edge Services
  - Edge fundamentals
  - Amazon Route 53
  - Amazon CloudFront
  - DDoS protection
  - AWS Outposts
  - Hands-On Lab: Configure an Amazon CloudFront distribution with an Amazon S3 origin
- Module 13: Backup and Recovery
  - Disaster planning
  - AWS Backup
  - Recovery strategies
  - Hands-on Lab: Capstone lab – Build an AWS Multi-Tier architecture. Participants review the concepts and services learned in class and build a solution based on a scenario. The lab environment provides partial solutions to promote analysis and reflection. Participants deploy a highly available architecture. The instructor is available for consultation.

IMPORTANT: Please bring your notebook (Windows, Linux or Mac) to our trainings. If this is not possible, please contact us in advance.

Course materials are in English, on request also in German (if available).
Course language is German, on request also in English.

Neue Termine in Planung!

Advanced Architecting on AWS Training

Written by wamrhein on 29. September 2015. Posted in AWS Training, Training.

Advanced Architecting on AWS Training

current course dates can be found at the bottom of this page … company training available on request!

Course description

In this course, each module presents a scenario with an architectural challenge to be solved. You will examine available AWS services and features as solutions to the problem. You will gain insights by participating in problem-based discussions and learning about the AWS services that you could apply to
meet the challenges. Over 3 days, the course goes beyond the basics of a cloud infrastructure and covers topics to meet a variety of needs for AWS customers. Course modules focus on managing multiple AWS accounts, hybrid connectivity and devices, networking with a focus on AWS Transit Gateway connectivity, container services, automation tools for continuous integration/continuous delivery (CI/CD), security and distributed denial of service (DDoS) protection, data lakes and data stores, edge services, migration options, and managing costs. The course concludes by presenting you with scenarios and challenging you to identify the best solutions

Course objectives

In this course, you will learn to:

Apply the AWS Well-Architected Framework.
Manage multiple AWS accounts for your organization.
Connect on-premises data centers to the AWS Cloud.
Understand financial aspects of connecting VPCs in multiple regions.
Move large amounts of data from on-premises data centers to the AWS Cloud.
Design large data stores for the AWS Cloud.
Explore different architectures for scaling a large website.
Protect infrastructures against DDoS attacks.
Secure data on AWS in an encrypted manner.
Identify ways to secure data in transit or at rest
Optimize the performance of your solutions.
Select the most appropriate AWS deployment mechanism.

Intended audience

This course is intended for:

cloud architects, solutions architects, and anyone who designs solutions for cloud infrastructures.

Prerequisites

We recommend that attendees of this course have:

Attended the Architecting on AWS course or
Achieved the AWS Certified Solutions Architect – Associate certification

Activities

This course includes:

Training with instructor
Practical exercises

This course provides activities that allow you to test new skills and apply knowledge through practical exercises.

Course duration / Price

3 days
€ 2,095.00 (excl. tax) per person (DE)
CHF 3,200.00 (excl. tax) per person (CH)

Course outline

Day 1

Review of architecting concepts for cloud best practices and the AWS Well-Architected Framework.
AWS account strategies
Advanced Network Architectures
Deployment management in AWS

Day 2

Setting up large data stores
Migrating big data stores to AWS
Big Data Architectures
Designing for large-scale applications

Day 3

Integrate reliability into your architecture
Data encryption and key management in AWS
Securing data in AWS
Improve performance

IMPORTANT: Please bring your notebook (Windows, Linux or Mac) to our trainings. If this is not possible, please contact us in advance.

Course materials are in English, on request also in German (if available).
Course language is German, on request also in English.

Security Engineering on AWS

Written by wamrhein on 29. September 2015. Posted in AWS Training, Topseller, Training.

Aws Advanced Training Partner
Aws Premium Consuting Partner

Security Engineering on AWS

Please find our upcoming course dates at the end of this page!

COURSE DESCRIPTION

Security is a concern for both customers in the cloud, and those considering cloud adoption. An increase in cyberattacks and data leaks remains top of mind for most industry personnel. The Security Engineering on AWS course addresses these concerns by helping you better understand how to interact and build with Amazon Web Services (AWS) in a secure way. In this course, you will learn about managing identities and roles, managing and provisioning accounts, and monitoring API activity for anomalies. You will also learn about how to protect data stored on AWS. The course explores how you can generate, collect, and monitor logs to help identify security incidents. Finally, you will review detecting and investigating security incidents with AWS services.

COURSE OBJECTIVES

In this course, you will learn to:

State an understanding of AWS cloud security based on the CIA triad.
Create and analyze authentication and authorizations with IAM.
Manage and provision accounts on AWS with appropriate AWS services.
Identify how to manage secrets using AWS services.
Monitor sensitive information and protect data via encryption and access controls.
Identify AWS services that address attacks from external sources.
Monitor, generate, and collect logs.
Identify indicators of security incidents.
Identify how to investigate threats and mitigate using AWS services.

INTENDED AUDIENCE

This course is intended for:

Security engineers
Security architects
Cloud architects
Cloud operators working across all global segments

PREREQUISITES

We recommend that attendees of this course have:

Completed the following courses:
- AWS Security Essentials or
- AWS Security Fundamentals and
- Architecting on AWS
Working knowledge of IT security practices and infrastructure concepts.
Familiarity with the AWS Cloud.

ACTIVITIES

This course includes:

presentations
demonstrations
group exercises
hands-on labs

COURSE DURATION / PRICE

3 days
€ 2,685.00 (excl. tax) per person (DE)
CHF 2,500.00 (excl. tax) per person (CH)

Course outline

Day 1
- Module 1: Security Overview and Review
  - Explain Security in the AWS Cloud.
  - Explain AWS Shared Responsibility Model.
  - Summarize IAM, Data Protection, and Threat Detection and Response.
  - State the different ways to interact with AWS using the console, CLI, and SDKs.
  - Describe how to use MFA for extra protection.
  - State how to protect the root user account and access keys.
- Module 2: Securing Entry Points on AWS
  - Describe how to use multi-factor authentication (MFA) for extra protection.
  - Describe how to protect the root user account and access keys.
  - Describe IAM policies, roles, policy components, and permission boundaries.
  - Explain how API requests can be logged and viewed using AWS CloudTrail and how to view and analyze access history.
  - Hands-On Lab: Using Identity and Resource Based Policies.
- Module 3: Account Management and Provisioning on AWS
  - Explain how to manage multiple AWS accounts using AWS Organizations and AWS Control Tower.
  - Explain how to implement multi-account environments with AWS Control Tower.
  - Demonstrate the ability to use identity providers and brokers to acquire access to AWS services.
  - Explain the use of AWS IAM Identity Center (successor to AWS Single Sign-On) and AWS Directory Service.
  - Demonstrate the ability to manage domain user access with Directory Service and IAM Identity Center.
  - Hands-On Lab: Managing Domain User Access with AWS Directory Service
Day 2
- Module 4: Secrets Management on AWS
  - Describe and list the features of AWS KMS, CloudHSM, AWS Certificate Manager (ACM), and AWS Secrets Manager.
  - Demonstrate how to create a multi-Region AWS KMS key.
  - Demonstrate how to encrypt a Secrets Manager secret with an AWS KMS key.
  - Demonstrate how to use an encrypted secret to connect to an Amazon Relational Database Service (Amazon RDS) database in multiple AWS Regions
  - Hands-on lab: Lab 3: Using AWS KMS to Encrypt Secrets in Secrets Manager
- Module 5: Data Security
  - Monitor data for sensitive information with Amazon Macie.
  - Describe how to protect data at rest through encryption and access controls.
  - Identify AWS services used to replicate data for protection.
  - Determine how to protect data after it has been archived.
  - Hands-on lab: Lab 4: Data Security in Amazon S3
- Module 6: Infrastructure Edge Protection
  - Describe the AWS features used to build secure infrastructure.
  - Describe the AWS services used to create resiliency during an attack.
  - Identify the AWS services used to protect workloads from external threats.
  - Compare the features of AWS Shield and AWS Shield Advanced.
  - Explain how centralized deployment for AWS Firewall Manager can enhance security.
  - Hands-on lab: Lab 5: Using AWS WAF to Mitigate Malicious Traffic
Day 3
- Module 7: Monitoring and Collecting Logs on AWS
  - Identify the value of generating and collecting logs.
  - Use Amazon Virtual Private Cloud (Amazon VPC) Flow Logs to monitor for security events.
  - Explain how to monitor for baseline deviations.
  - Describe Amazon EventBridge events.
  - Describe Amazon CloudWatch metrics and alarms.
  - List log analysis options and available techniques.
  - Identify use cases for using virtual private cloud (VPC) Traffic Mirroring.
  - Hands-on lab: Lab 6: Monitoring for and Responding to Security Incidents
- Module 8: Responding to Threats
  - Classify incident types in incident response.
  - Understand incident response workflows.
  - Discover sources of information for incident response using AWS services.
  - Understand how to prepare for incidents.
  - Detect threats using AWS services.
  - Analyze and respond to security findings.
  - Hands-on lab: Lab 7: Incident Response

IMPORTANT: Please bring your notebook (Windows, Linux or Mac) to our training. If this is not possible, please contact us in advance.

Course materials are in English, on request also in German (if available).
The course language is German, on request also in English.