DOP-C02 Introduction
Amazon CloudWatch
AWS CloudTrail
AWS Config
AWS CloudFormation
Advanced CloudFormation Skills
AWS OpsWorks
AWS Logging
AWS Systems Manager
AWS Secrets Manager
Parameter Store vs. Secrets Manager
AWS Service Catalog
AWS Organizations
AWS Control Tower
Trusted Advisor
Managing Product Licenses
Amazon Managed Grafana
Amazon Managed Service for Prometheus
AWS Health
AWS Proton
AWS Resilience Hub
The course is part of this learning path
This course provides detail on the AWS Management & Governance services relevant to the AWS Certified DevOps Engineer - Professional exam.
Want more? Try a lab playground or do a Lab Challenge!
Learning Objectives
- Learn how AWS AppConfig can reduce errors in configuration changes and prevent application downtime
- Understand how the AWS Cloud Development Kit (CDK) can be used to model and provision application resources using common programming languages
- Get a high-level understanding of Amazon CloudWatch
- Learn about the features and use cases of the service
- Create your own CloudWatch dashboard to monitor the items that are important to you
- Understand how CloudWatch dashboards can be shared across accounts
- Understand the cost structure of CloudWatch dashboards and the limitations of the service
- Review how monitored metrics go into an ALARM state
- Learn about the challenges of creating CloudWatch Alarms and the benefits of using machine learning in alarm management
- Know how to create a CloudWatch Alarm using Anomaly Detection
- Learn what types of metrics are suitable for use with Anomaly Detection
- Create your own CloudWatch log subscription
- Learn how AWS CloudTrail enables auditing and governance of your AWS account
- Understand how Amazon CloudWatch Logs enables you to monitor and store your system, application, and custom log files
- Explain what AWS CloudFormation is and what it’s used for
- Determine the benefits of AWS CloudFormation
- Understand what the core components are and what they are used for
- Create a CloudFormation Stack using an existing AWS template
- Learn what VPC flow logs are and what they are used for
- Determine options for operating programmatically with AWS, including the AWS CLI, APIs, and SDKs
- Learn about the capabilities of AWS Systems Manager for managing applications and infrastructure
- Understand how AWS Secrets Manager can be used to securely encrypt application secrets
When You execute a Run Command, The targets and command document will use any run-time parameters you want to pass.
AWS Systems Manager Parameter Store provides centralized storage to manage your configuration in plain-text data such as database connections or license codes and strings or secrets such as passwords or any other application configuration data. Parameter Store is integrated with AWS Key Management Service (KMS) for you to be able to automatically encrypt values if needed.
Parameter Store improves the security of your implementation by allowing you to separate secrets and configuration data from code and benefit from integrated audit capabilities using AWS CloudTrail. Parameters can be tagged and organized into hierarchies for easy management where you can have a hierarchy for the same parameter on different tiers like Development, QA, and Production for the same resource.
You can track parameters changes by using versions. Create parameter change notifications and Create your own custom validations routines using AWS Lambda functions.
Finally, Parameter Store data is not limited to AWS Systems Manager, parameters can be referenced by other AWS services such as Amazon ECS, AWS Lambda, CloudFormation, CodeDeploy, CodePipeline, and your custom applications.
Using systems manager parameter store you create a new parameter with a parameter type and specify the corresponding value. You can then, reference parameters in your commands or application code.
Stuart has been working within the IT industry for two decades covering a huge range of topic areas and technologies, from data center and network infrastructure design, to cloud architecture and implementation.
To date, Stuart has created 150+ courses relating to Cloud reaching over 180,000 students, mostly within the AWS category and with a heavy focus on security and compliance.
Stuart is a member of the AWS Community Builders Program for his contributions towards AWS.
He is AWS certified and accredited in addition to being a published author covering topics across the AWS landscape.
In January 2016 Stuart was awarded ‘Expert of the Year Award 2015’ from Experts Exchange for his knowledge share within cloud services to the community.
Stuart enjoys writing about cloud technologies and you will find many of his articles within our blog pages.