Domain 1: Design Resilient Architectures

1.1 – Design a multi-tier architecture solution

• Identify key components and services
• Define high availability and fault tolerance requirements
• Choose appropriate AWS services for each tier

1.2 – Design highly available and scalable storage solutions

• Select appropriate storage services like Amazon S3, EBS, and EFS
• Configure data archiving and backup strategies
• Implement data consistency and durability

1.3 – Design high-performing architectures

• Select compute resources and sizes based on workload requirements
• Configure network and security settings for optimal performance
• Use AWS services to improve application and database performance

1.4 – Design secure applications and architectures

• Secure data in transit and at rest
• Implement identity and access management (IAM) best practices
• Apply encryption, key management, and security groups

Domain 2: Define Performant Architectures

2.1 – Choose performant storage and database solutions

• Select appropriate storage and database services
• Optimize I/O and query performance
• Implement caching and content delivery solutions

2.2 – Specify secure applications and architectures

• Implement authentication and authorization mechanisms
• Apply security best practices for data protection
• Use AWS services for DDoS protection and intrusion detection

2.3 – Design cost-optimized architectures

• Choose cost-effective compute, storage, and networking resources
• Implement cost monitoring and optimization strategies
• Leverage AWS cost management tools

Domain 3: Specify Secure Applications and Architectures

3.1 – Design secure access to AWS resources

• Configure IAM policies and roles
• Implement MFA and identity federation
• Use AWS services for authentication and authorization

3.2 – Design secure application tiers

• Implement security groups and NACLs
• Configure network segmentation and isolation
• Apply encryption and security best practices

3.3 – Select appropriate data security options

• Encrypt data in transit and at rest
• Implement encryption key management
• Apply data masking and tokenization techniques

Domain 4: Design Cost-Optimized Architectures

4.1 – Design cost-effective storage solutions

• Choose appropriate storage services and classes
• Implement data lifecycle management policies
• Optimize data transfer costs

4.2 – Design cost-effective compute solutions

• Select the right EC2 instance types and sizes
• Implement auto-scaling and elasticity
• Use Spot Instances and reserved capacity effectively

4.3 – Design cost-optimized network architectures

• Optimize data transfer costs
• Implement content delivery and caching strategies
• Use AWS Direct Connect and VPN efficiently