Aula do Bruno

[DISCLAIMER] Links e materiais disponibilizados como conteúdo adicional para os estudos nos treinamentos da AWS. As informações aqui inseridas são mantidas por mim mesmo, e não expressam nenhuma informação oficial por parte da AWS; mesmo que em sua maioria sejam artigos e blog posts oficiais da Amazon Web Services.

Dicas de estudo para as certificações

• [X] Escolha sua carreira de certificações e organize o seu roteiro de aprendizado
• [X] Revise o arquivo Exam Guide do respectivo exame de certificação
• [X] Defina uma estratégia eficiente de estudos. Há algumas técnicas bem interessantes como o Retrieval, Spaced e o Elaboration
• [X] Faça um treinamento presencial oficial da AWS em aws.training
• [X] Faça laboratórios e ganhe experiência prática
• [X] Revise o arquivo de Sample Questions do respectivo exame de certificação
• [X] Revise os whitepapers e FAQs dos serviços que estão no escopo do exame de certificação
• [X] Assista os vídeos da série "This is My Architecture", com exemplos de casos reais dos clientes AWS
• [X] Faça um treinamento oficial da AWS com foco na preparação do exame; através dos cursos Exam Readiness
• [X] Acompanhe nossos eventos e webinars da comunidade AWS em LATAM, pois sempre temos conteúdo muito bom pra ajudar nos estudos
• [X] Faça um Practice Exam oficial (simulado)
• [X] Agende seu exame de certificação na PSI ou Person Vue
• [X] Adicione 30 minutos a mais em seu exame com o ESL +30 MINUTES (disponível para não-nativos de língua inglesa)
• [X] Seja um certificado AWS!
• [X] Aproveite os benefícios concedidos só a quem tem certificações AWS

Architecting on AWS

• AWS Global Cloud Infrastructure Map
• AWS Global Infrastructure Regions
• Learn how we secure AWS data centers
• Compute Abstractions on AWS: A Visual Story
• AWS Well-Architected - Learn, measure, and build using architectural best practices
• AWS Well-Architected Framework
• Financial Services Industry Lens - AWS Well-Architected Framework
• AWS Well-Architected Tool – Review Workloads Against Best Practices
• AWS Well-Architected Tool – DEMO
• Nine Ways to Reduce Your AWS Bill
• Desmistificando as 9 formas de reduzir custos na AWS
• Amazon S3 + Amazon CloudFront: A Match Made in the Cloud
• How to set up a CloudFront distribution for Amazon S3
• Overview of Managing Access on S3
• Amazon S3 Path Deprecation Plan – The Rest of the Story
• Amazon EC2 Instance Types
• Spot Instance Advisor
• Amazon EC2 Auto Scaling Lifecycle Hooks
• Running high-scale web applications on Amazon EC2 Spot Instances
• Amazon EBS Volume Types
• Recovering files from an Amazon EBS volume backup
• New – Multi-Attach for Provisioned IOPS (io1) Amazon EBS Volumes
• Can I use EBS Multi-Attach volumes to enable multiple EC2 instances to simultaneously access a standard file system?
• Working with Aurora Multi-Master Clusters
• Amazon Aurora Backtrack – Turn Back Time
• Amazon DynamoDB - Choosing Initial Throughput Settings
• Best Practices for Designing and Architecting with DynamoDB
• Best Practices for Designing and Using Partition Keys Effectively
• Building resiliency at scale at Tinder with Amazon ElastiCache
• How to work with Cluster Mode on Amazon ElastiCache for Redis
• Comparing Redis and Memcached
• Common ElastiCache Use Cases and How ElastiCache Can Help
• Introducing Amazon Elasticsearch Service as a target in AWS Database Migration Service
• Migration Complete – Amazon’s Consumer Business Just Turned off its Final Oracle Database
• Scaling Your Amazon RDS Instance Vertically and Horizontally
• Right-size Amazon RDS instances at scale based on Oracle performance metrics
• Using in-Region read replicas in Amazon RDS for SQL Server
• New – AWS Storage Gateway Hardware Appliance
• Expanded availability and streamlined ordering of the AWS Storage Gateway Hardware Appliance
• Using static IP addresses for Application Load Balancers
• New – Application Load Balancer Simplifies Deployment with Weighted Target Groups
• How to securely publish Internet applications at scale using Application Load Balancer and AWS PrivateLink
• Debugging tool for network connectivity from Amazon VPC
• Multiple Region Multi-VPC Connectivity
• Working with Direct Connect Gateways
• AWS Direct Connect Partners
• How do I provision an AWS Direct Connect connection?
• Building a Serverless Dynamic DNS System with AWS
• How do I create an IAM policy to control access to Amazon EC2 resources using tags?
• Simplify granting access to your AWS resources by using tags on AWS IAM users and roles
• Writing IAM Policies: Grant Access to User-Specific Folders in an Amazon S3 Bucket
• IAM Policies and Bucket Policies and ACLs! Oh, My! (Controlling Access to S3 Resources)
• Now Create and Manage AWS IAM Roles More Easily with the Updated IAM Console
• Guidelines for protecting your AWS account while using programmatic access
• Creating a Billing Alarm to Monitor Your Estimated AWS Charges
• How to better monitor your custom application metrics using Amazon CloudWatch Agent
• CloudWatch Search Expression Examples
• Upgrading to Amazon EventBridge from Amazon CloudWatch Events
• CloudWatch Logs Subscription Consumer + Elasticsearch + Kibana Dashboards
• Running Scripts from GitHub and Amazon S3
• Validating AWS CloudFormation Templates
• Amazon CloudFront – Support for Dynamic Content
• Amazon CloudFront Dynamic Content Delivery
• Can I use a single CloudFront web distribution to serve content from multiple origins using multiple behaviors?
• Implementation Considerations - Learn Caching Design Patterns
• Caching Content Based on Query String Parameters
• Powering Gaming Applications with Amazon DynamoDB
• Amazon DynamoDB: Gaming use cases and design patterns
• AWS Serverless Application Model
• Firecracker – Lightweight Virtualization for Serverless Computing
• Video on Demand on AWS
• Cross-Region Backups
• Chaos Monkey

Advanced Architecting on AWS

• Getting started with tag policies
• AWS Config: Checking for Compliance with New Managed Rule Options
• AWS re:Invent 2019: Advanced VPC design and new capabilities for Amazon VPC
• Route 53 - Choosing between alias and non-alias records
• Amazon VPC for On-Premises Network Engineers – Part 1
• Amazon VPC for On-Premises Network Engineers – Part 2
• How do I increase my security group limits in Amazon VPC?
• Simplify network routing and security administration with VPC Prefix Lists
• Overlay Multicast in Amazon Virtual Private Cloud
• How to run Schneider Electric’s Responder OMS using AWS Transit Gateway multicast
• Transit Gateway vs VPC peering
• Building a global network using AWS Transit Gateway Inter-Region peering
• Simplify SD-WAN connectivity with AWS Transit Gateway Connect
• Introducing Bring Your Own IP (BYOIP) for Amazon VPC
• Configurable Reverse DNS for Amazon EC2’s Elastic IP Addresses
• How can I set up Active-Passive failover with geolocation records in Route 53?
• Using redundant Site-to-Site VPN connections to provide failover
• Scaling VPN throughput using AWS Transit Gateway
• How do I create a certificate-based VPN using AWS Site-to-Site VPN?
• Improve VPN Network Performance of AWS Hybrid Cloud with Global Accelerator
• Integrating AWS Transit Gateway with AWS PrivateLink and Amazon Route 53 Resolver
• Centralized DNS management of hybrid cloud with Amazon Route 53 and AWS Transit Gateway
• How do I configure Direct Connect and VPN failover with Transit Gateway?
• How to order AWS Direct Connect using the Equinix Fabric Portal
• How can I configure VPN as a backup for my AWS Direct Connect connection?
• How do I provision a new link aggregation group (LAG) using AWS Direct Connect connections?
• What’s the difference between a hosted virtual interface (VIF) and a hosted connection?
• AWS Solution – Transit VPC
• How to integrate third-party firewall appliances into an AWS environment
• New – VPC Ingress Routing – Simplifying Integration of Third-Party Appliances
• VPC sharing: A new approach to multiple accounts and VPC management
• Using VPC Sharing for a Cost-Effective Multi-Account Microservice Architecture
• Securing VPCs Egress using IDS/IPS leveraging Transit Gateway
• Deployment models for AWS Network Firewall
• Deploy an Elastic HPC Cluster
• How to Connect Your On-Premises Active Directory to AWS Using AD Connector
• Integrando o AWS Directory Service com o AWS Console – AD Connector
• AWS AD Connector – o curioso caso de falha em localização de objetos
• How to migrate your on-premises domain to AWS Managed Microsoft AD using ADMT
• How to Switch Easily Between AWS Accounts by Using the AWS Management Console and AWS Directory Service
• How do I use the AWS CLI to perform a multipart upload of a file to Amazon S3?
• Building and Maintaining an Amazon S3 Metadata Index without Servers
• How can I check the integrity of an object uploaded to Amazon S3?
• Performance Design Patterns for Amazon S3
• S3 Select and Glacier Select – Retrieving Subsets of Objects
• AWS Snowball Device Differences
• Best Practices for the AWS Snowball Edge Device
• Enable password authentication for AWS Transfer for SFTP using AWS Secrets Manager
• Optimizing WordPress performance with Amazon EFS
• Use the Serverless Developer Portal to Catalog Your API Gateway APIs
• How to use service control policies to set permission guardrails across accounts in your AWS Organization
• Manage Software Licenses with AWS License Manager – DEMO
• Managing AWS resources across multiple accounts and Regions using AWS Systems Manager Automation
• How Moody’s uses AWS Systems Manager to patch servers across multiple cloud providers
• Centralized multi-account and multi-Region patching with AWS Systems Manager Automation
• Understanding Burst vs. Baseline Performance with Amazon RDS and GP2
• Scaling Based on Amazon SQS
• Under the Hood: AWS CodeDeploy and Auto Scaling Integration
• Elastic Beanstalk - Advanced environment customization with configuration files (.ebextensions)
• New – Amazon Connect and Amazon Lex Integration
• Integrating Amazon SES with Microsoft Exchange
• AWS Server Migration Service – Server Migration to the Cloud Made Easy
• How to upgrade your legacy Windows applications to new versions of Windows Server without refactoring
• Importing Data to an Amazon RDS MySQL or MariaDB DB Instance with Reduced Downtime
• Strategies for Migrating Oracle Databases to AWS
• Migrating Oracle databases with near-zero downtime using AWS DMS
• Validating database objects after migration using AWS SCT and AWS DMS
• Schema Conversion Tool blog series: Introducing new features in build 613
• Enable large-scale database migrations with AWS DMS and AWS Snowball
• Query any data source with Amazon Athena’s new federated query
• Harmonize, Query, and Visualize Data from Various Providers using AWS Glue, Amazon Athena, and Amazon QuickSight
• Query and Visualize AWS Cost and Usage Data Using Amazon Athena and Amazon QuickSight
• How do I ingest and visualize the AWS Cost and Usage Report (CUR) into Amazon QuickSight?
• Using AWS Cost Explorer to analyze data transfer costs
• Best practices for resizing and automatic scaling in Amazon EMR
• Monitor and Optimize Analytic Workloads on Amazon EMR with Prometheus and Grafana
• DynamoDB Streams Use Cases and Design Patterns
• My DynamoDB table is being throttled
• AWS Outposts Now Available – Order Yours Today!
• Caching Overview on AWS
• Amazon Builder's Library - Caching challenges and strategies
• How to set up an outbound VPC proxy with domain whitelisting and content filtering
• WordPress: Best Practices on AWS
• AWS Best Practices for DDoS Resiliency
• AWS Fault Injection Simulator – Use Controlled Experiments to Boost Resilience
• Deploy a dashboard for AWS WAF with minimal effort
• WAF - Preconfigured Rules & Tutorials
• How do I block common attacks with AWS WAF?
• WAF Sandwich
• AWS Centralized WAF and VPC Security Group Management
• Subscribe to AWS Public IP Address Changes via Amazon SNS
• AWS Solutions - AWS Perspective
• Create real-time clickstream sessions and run analytics with Amazon Kinesis Data Analytics, AWS Glue, and Amazon Athena

Planning and Designing Databases on AWS

• Learning Path - Databases
• Hands-On Tutorials - Move to managed databases
• Databases on AWS: The Right Tool for the Right Job
• Amazon RDS Multi-AZ Deployments
• Amazon RDS Read Replicas
• How can I distribute read requests across multiple Amazon RDS read replicas?
• Implementing a disaster recovery strategy with Amazon RDS
• Best storage practices for running production workloads on hosted databases with Amazon RDS or Amazon EC2
• Applying best practices for securing sensitive data in Amazon RDS
• Securing data in Amazon RDS using AWS KMS encryption
• Sharding with Amazon Relational Database Service
• Scaling Your Amazon RDS Instance Vertically and Horizontally
• Using AWS Cost Management products to help save costs on Amazon RDS Reserved Instances
• IAM database authentication for MySQL and PostgreSQL
• Sharing a DB snapshot
• Backing up and restoring an Amazon RDS DB instance
• Monitoring an Amazon RDS DB instance
• Enhanced Monitoring
• Using Amazon RDS event notification
• Amazon RDS database log files
• How do I enable and monitor logs for an Amazon RDS MySQL DB instance?
• Securing data in Amazon RDS using AWS KMS encryption
• Troubleshooting for Amazon RDS
• Monitoring with the Performance Insights dashboard
• Best storage practices for running production workloads on hosted databases with Amazon RDS or Amazon EC2
• Amazon DynamoDB global tables
• How to use Amazon DynamoDB global tables to power multiregion architectures
• Amazon DynamoDB auto scaling: Performance and cost optimization at any scale
• I'm using an on-demand DynamoDB table, but I'm still getting throttled. Why?
• Optimize Amazon DynamoDB scan latency through schema design
• How Amazon DynamoDB adaptive capacity accommodates uneven data access patterns (or, why what you know about DynamoDB might be outdated)
• AWS re:Invent 2018: Amazon DynamoDB Under the Hood: How We Built a Hyper-Scale Database
• Optimize Amazon DynamoDB scan latency through schema design
• Point-in-Time Recovery for DynamoDB
• On-Demand Backup and Restore for DynamoDB
• How to automate the auditing of operational best practices for your AWS account
• Troubleshooting issues in your DynamoDB Encryption Client application
• Error Handling with DynamoDB
• Caching for performance with Amazon DocumentDB and Amazon ElastiCache
• Boosting application performance and reducing costs with Amazon ElastiCache for Redis
• Amazon Elasticsearch Service Troubleshooting
• Analyze Amazon Neptune Graphs using Amazon SageMaker Jupyter Notebooks
• Visualize data in Amazon Neptune using VIS.js library
• How LifeOmic’s JupiterOne simplifies security and compliance operations with Amazon Neptune
• Integrate Power BI with Amazon Redshift for insights and analytics
• Amazon Redshift - Troubleshooting queries
• Amazon Redshift - Troubleshooting data loads
• Introducing the Aurora Storage Engine
• Working with Aurora Multi-Master Clusters
• How Autodesk Increased Database Scalability and Reduced Replication Lag with Amazon Aurora
• Troubleshooting for Aurora
• Amazon Aurora as an Alternative to Oracle RAC
• Reducing Aurora PostgreSQL storage I/O costs
• How Cloudability boosted performance, simplified tuning, and lowered costs with Amazon Aurora
• Amazon Aurora Update – Call Lambda Functions From Stored Procedures; Load Data From S3
• Amazon Aurora Update – PostgreSQL Compatibility
• Introduction to Aurora PostgreSQL cluster cache management
• Managing performance and scaling for Amazon Aurora MySQL
• Audit Amazon Aurora Database Logs for Connections, Query Patterns, and More, using Amazon Athena and Amazon QuickSight
• Best practices with Amazon Aurora PostgreSQL
• Auditing an Amazon Aurora Cluster
• Best practices for securing sensitive data in AWS data stores
• Database Migration—What Do You Need to Know Before You Start?
• Reduce database cost and improve availability when you migrate to the AWS Cloud
• How do I perform common DBA tasks for Amazon RDS DB instances?
• Part 1 – Role of the DBA When Moving to Amazon RDS: Responsibilities
• Part 2 – Role of the DBA When Moving to Amazon RDS: Automation
• How to Scale AWS Database Migration Service (DMS) replication instances
• Best practices for migrating an Oracle database to Amazon RDS PostgreSQL or Amazon Aurora PostgreSQL: Source database considerations for the Oracle and AWS DMS CDC environment
• How to solve some common challenges faced while migrating from Oracle to PostgreSQL
• Automating database migration and refreshing activities with AWS DMS
• Create AWS CloudFormation templates for AWS DMS tasks using Microsoft Excel
• Automating table mappings creation in AWS DMS
• AWS Database Migration Service resources (Migration Playbooks)

Systems Operations on AWS

• AWS Command Line Interface
• AWS CLI v2 is now generally available
• AWS Tools for PowerShell
• Using the AWS Tools for Windows PowerShell
• AWS Tools for PowerShell Cmdlet Reference
• Building a Virtual Classroom Application using the Amazon Chime SDK
• How can I execute user data to automatically create a file with every restart of my Amazon EC2 instance?
• How can I connect to my Amazon EC2 instance if I lost my SSH key pair after its initial launch?
• How do I install AWS Systems Manager Agent (SSM Agent) on an Amazon EC2 Linux instance at launch?
• Running Ansible Playbooks using EC2 Systems Manager Run Command and State Manager
• Query for the latest Amazon Linux AMI IDs using AWS Systems Manager Parameter Store
• Query for the Latest Windows AMI Using Systems Manager Parameter Store
• New – Query for AWS Regions, Endpoints, and More Using AWS Systems Manager Parameter Store
• How AWS Systems Manager Parameter Store uses AWS KMS
• The Right Way to Store Secrets using Parameter Store
• Use Parameter Store to Securely Access Secrets and Config Data in AWS CodeDeploy
• Rotating Your AWS Secrets Manager Secrets
• How to create and retrieve secrets managed in AWS Secrets Manager using AWS CloudFormation templates
• Patching your Windows EC2 instances using AWS Systems Manager Patch Manager
• How to patch Windows EC2 instances in private subnets Using AWS Systems Manager
• How Moody’s uses AWS Systems Manager to patch servers across multiple cloud providers
• Windows Server Update Services on AWS
• How do I install .NET Framework 3.5 on an EC2 Windows instance that doesn't have internet access?
• How patches are installed - AWS Systems Manager
• How do I enable the EPEL repository for my Amazon EC2 instance running CentOS, RHEL, or Amazon Linux?
• Packaging to Distribution – Using AWS Systems Manager Distributor to deploy Datadog
• Taking Advantage of Amazon EC2 Spot Instance Interruption Notices
• CPU credits and baseline utilization for burstable performance instances
• Understanding T2 Standard Instance CPU Credits
• How do I stop and start Amazon EC2 instances at regular intervals using Lambda?
• How do I stop and start my instances using the AWS Instance Scheduler?
• AWS Transit Gateway Egress VPC Demo
• Resolving DNS queries between VPCs and your network
• Securely Connect to Linux Instances Running in a Private Amazon VPC (Agent Forwarding)
• How to use Amazon AppStream 2.0 to reduce your bastion host attack surface
• New – Port Forwarding Using AWS System Manager Session Manager
• Remote Desktop Gateway on AWS - AWS Quick Starts
• Announcing Lambda Support for PowerShell Core
• A Simple Way to Export Your IAM Settings
• Reset Your AWS Root Account’s Lost MFA Device Faster by Using the AWS Management Console
• How can I reset the administrator password on an EC2 Windows instance?
• Securely Access Services Over AWS PrivateLink
• Introducing AWS Gateway Load Balancer – Easy Deployment, Scalability, and High Availability for Partner Appliances
• ELB Connection Draining – Remove Instances From Service With Care
• A subnet in use by load balancers in my VPC has insufficient IP addresses
• AWS Network Firewall – New Managed Firewall Service in VPC
• Use Cases for AWS Managed Microsoft AD
• Enabling SAML for your AWS resources
• Enabling Federation to AWS Using Windows Active Directory, ADFS, and SAML 2.0
• How to automate SAML federation to multiple AWS accounts from Microsoft Azure Active Directory
• How to Enable Your Users to Access Office 365 with AWS Managed Microsoft AD
• Enable Office 365 with AWS Managed Microsoft AD without user password synchronization
• How do I grant my Active Directory users access to the API or AWS CLI with AD FS?
• How to retrieve short-term credentials for CLI use with AWS Single Sign-on
• Automatically update instances in an Amazon ECS cluster using the AMI ID parameter
• Managing Amazon EKS Clusters with Rancher
• AWS Batch Use cases
• Build Your Own Face Recognition Service Using Amazon Rekognition
• Using Amazon RDS Proxy with AWS Lambda
• Use Amazon WorkSpaces on Your Samsung Galaxy S8/S8+ With the New Samsung DeX
• How can I use DataSync to transfer data from an Amazon EFS file system to an Amazon S3 bucket?
• AWS DataSync Demo - Easily Transfer Data to and From AWS Up to 10x Faster
• New – Amazon FSx for Windows File Server – Fast, Fully Managed, and Secure
• Working with Shadow Copies
• Deploying Multi-AZ File Systems
• Amazon FSx for Windows File Server, Capítulo 1 – Criando e configurando
• Amazon FSx for Windows File Server, Capítulo 2 – Mais funcionalidades: Shadow Copy, DFS Namespace, Data Deduplication e Quotas
• Amazon FSx for Windows File Server, Capítulo 3 – Mapeando o FSx para servidores Linux
• Amazon FSx for Windows File Server, Capítulo 4 – Migrando dados com o AWS DataSync (Cenário de Multi-Região)
• Achieving 80,000 IOPS for SQL Server on AWS EC2 and EBS
• New – EBS Direct APIs – Programmatic Access to EBS Snapshot Content
• AWS re:Invent 2018: Powering Next-Gen EC2 Instances: Deep Dive into the Nitro System
• AWS re:Inforce 2019: Security benefits of the Nitro architecture
• How Amazon Uses Explosive-Resistant Devices To Transfer Data To AWS (AWS Snowball)
• AWS OpsHub for Snow Family
• Amazon S3 performance and cost optimization
• What are the differences between data and management events in CloudTrail?
• Amazon CloudWatch Concepts
• CloudWatch Logs Agent Reference
• CloudWatch Events Tutorials
• Monitoring Trusted Advisor with Amazon CloudWatch Events and Amazon CloudWatch
• AWS Trusted Advisor Aggregator
• Monitoring Amazon GuardDuty Findings with Amazon CloudWatch Events
• How Does AWS CloudFormation Work?
• How do I resolve AWS CloudFormation template validation errors or template format errors?
• Up your AWS CloudFormation testing game using TaskCat
• A deep dive into testing with TaskCat
• Creating a Stack on the AWS CloudFormation Console
• New – Import Existing Resources into a CloudFormation Stack
• How do I prevent the resources in my AWS CloudFormation stack from getting deleted or updated?
• Template Snippets
• AWS CloudFormation Update – Public Coverage Roadmap & CDK Goodies
• AWS re:Invent 2019: Deep dive into AWS Cloud Development Kit
• AWS re:Invent 2019: Infrastructure as .NET with the AWS CDK
• Getting Started with AWS Support
• AWS Tagging Best Practices
• AWS re:Invent 2015: A Day in the Life of a Netflix Engineer
• AWS re:Invent 2016: Another Day in the Life of a Netflix Engineer
• AWS re:Invent 2017: A Day in the Life of a Netflix Engineer III
• AWS re:Invent 2018: Another Day in the Life of a Cloud Network Engineer at Netflix
• AWS re:Invent 2019: A day in the life of a Netflix engineer IV
• Conformity Monkey

DevOps Engineering on AWS

• Introduction to DevOps on AWS
• DevOps and AWS (Case Studies)
• What Team Structure is Right for DevOps to Flourish?
• What is Continuous Delivery?
• What is Continuous Integration?
• Configuration Drift: Phoenix Server vs Snowflake Server Comic
• Containers na AWS - Immersion Day
• Walkthrough: Refer to resource outputs in another AWS CloudFormation stack
• AWS CloudFormation Sample templates
• AWS CloudFormation best practices
• Integrating AWS CloudFormation Guard into CI/CD pipelines
• CloudFormation Update – CLI + Third-Party Resource Support + Registry
• Infrastructure as Code
• AWS CDK examples
• AWS CLI - Command completion
• AWS SAM resource and property reference
• Practicing Continuous Integration and Continuous Delivery on AWS
• Using Federated Identities with AWS CodeCommit
• Migrate a repository incrementally
• Working with repositories in AWS CodeCommit
• Validating AWS CodeCommit Pull Requests with AWS CodeBuild and AWS Lambda
• Amazon CodeGuru features
• Tutorial: Create a simple pipeline (CodeCommit repository)
• Test Reports with AWS CodeBuild
• AWS Elastic Beanstalk sample for CodeBuild
• Setting up a CI/CD pipeline by integrating Jenkins with AWS CodeBuild and AWS CodeDeploy
• Building a Secure Cross-Account Continuous Delivery Pipeline
• Building a CI/CD pipeline for cross-account deployment of an AWS Lambda API with the Serverless Framework
• AWS CodeBuild Local Builds
• Improve Build Performance and Save Time Using Local Caching in AWS CodeBuild
• Extending AWS CodeBuild with Custom Build Environments
• New – Building a Continuous Integration Workflow with Step Functions and AWS CodeBuild
• AWS CodePipeline product integrations
• Integrations with CodePipeline action types
• Implementing DevSecOps Using AWS CodePipeline
• Detect and react to changes in pipeline state with Amazon CloudWatch Events
• Building a Secure Cross-Account Continuous Delivery Pipeline
• Create a pipeline in CodePipeline that uses resources from another AWS account
• Amazon ECS and Load balancer types
• How do I set up dynamic port mapping for Amazon ECS?
• Building Windows containers with AWS CodePipeline and custom actions
• Continuous Deployment to Amazon ECS using AWS CodePipeline, AWS CodeBuild, Amazon ECR, and AWS CloudFormation
• AWS X-Ray console
• Debugging with Amazon CloudWatch Synthetics and AWS X-Ray
• Integrating AWS X-Ray with other AWS services
• Using ServiceLens to Monitor the Health of Your Applications
• Running AWS commands from Slack using AWS Chatbot
• Introducing AWS Chatbot: ChatOps for AWS
• Creating a Trail for an Organization
• Announcing CloudTrail Insights: Identify and Respond to Unusual API Activity
• How to create custom AWS Config rules with AWS CodeStar
• Easier way to control access to AWS regions using IAM policies
• IAM Tutorial: Enable users to manage their credentials and MFA settings
• Integrating AWS CodeCommit with Jenkins
• How to Test and Debug AWS CodeDeploy Locally Before You Ship Your Code
• AWS CodeDeploy now supports linear and canary deployments for Amazon ECS
• Overview of Deployment Options on AWS
• Run code before terminating an EC2 Auto Scaling instance
• Implementing Microservices on AWS
• Best practices for working with AWS Lambda functions
• Can I have common environment variables for a group of Lambda functions?
• Announcing improved VPC networking for AWS Lambda functions
• Improved Testing on the AWS Lambda Console
• New – Local Mocking and Testing with the Amplify CLI
• Set up mock integrations in API Gateway
• Deploying Serverless Applications Gradually
• Applying the Twelve-Factor App Methodology to Serverless Applications
• Deploying applications to Elastic Beanstalk environments
• Set up a Continuous Deployment Pipeline using AWS CodePipeline and AWS Elastic Beanstalk
• Docker basics for Amazon ECS
• Automating rollback of failed Amazon ECS deployments
• Build a Continuous Delivery Pipeline for Your Container Images with Amazon ECR as Source
• Amazon ECS Task Placement Strategies
• Private Registry Authentication for Tasks
• Implementing DevSecOps Using AWS CodePipeline
• Scanning Docker Images for Vulnerabilities using Clair, Amazon ECS, ECR, and AWS CodePipeline
• How to Bake Open Source Security into Your AWS CodeBuild Pipeline
• Scanning images with Trivy in an AWS CodePipeline
• How to Bake Open Source Security into Your AWS CodeBuild Pipeline
• Integrating AWS CloudFormation security tests with AWS Security Hub and AWS CodeBuild reports
• Using AWS CodePipeline, AWS CodeBuild, and AWS Lambda for Serverless Automated UI Testing
• Fine-tuning blue/green deployments on application load balancer
• Tutorial: Creating a service using a blue/green deployment
• Automating Blue/Green Deployments of Infrastructure and Application Code using AMIs, AWS Developer Tools, & Amazon EC2 Systems Manager
• Automate OS Image Build Pipelines with EC2 Image Builder
• Use AWS CodeDeploy to Implement Blue/Green Deployments for AWS Fargate and Amazon ECS
• Task Definition Parameters
• Example task definitions
• Build specification reference for CodeBuild
• CodeDeploy AppSpec File reference
• Advanced environment customization with configuration files (.ebextensions)
• Clone an Elastic Beanstalk environment
• New – Use CloudWatch Synthetics to Monitor Sites, API Endpoints, Web Workflows, and More
• IT Governance in a Dynamic DevOps Environment
• AWS Summit - DevOps Culture at Amazon
• AWS re:Invent 2018: Moving to DevOps the Amazon Way
• AWS Solutions - Distributed Load Testing on AWS

Security Engineering on AWS

• Shared Responsibility Model
• AWS Cloud Adoption Framework (CAF) - Security Perspective
• Navegando na conformidade com a LGPD na AWS
• NIST Cybersecurity Framework (CSF) - Aligning to the NIST CSF in the AWS Cloud
• AWS Services in Scope by Compliance Program
• PCI Compliance on AWS
• AWS Security Incident Response Guide
• AWS IP Address Ranges
• IAM Best Practices
• Limitations on IAM Entities and Objects
• IAM JSON Policy Elements Reference
• IAM Policy Elements: Variables and Tags
• IAM: Policies and Permissions
• Create fine-grained session permissions using IAM managed policies
• Permissions Boundaries for IAM Entities
• Policy evaluation logic
• AWS Global Condition Context Keys
• Creating a Condition with Multiple Keys or Values
• Using Service-Linked Roles
• AWS Services That Work with IAM
• Automate analyzing your permissions using IAM access advisor APIs
• Proving security at scale with automated reasoning
• How AWS uses automated reasoning to help you achieve security at scale (AWS Zelkova)
• IAM Access Analyzer - Por que habilitar?
• How can I grant a user Amazon S3 console access to only a certain bucket or folder?
• Announcing the Golden AMI Pipeline
• Creating a Golden AMI Pipeline Integrated with Qualys for Vulnerability Assessments
• Getting Started with Automation
• Automation use cases
• Use AWS Fargate and Prowler to send security configuration findings about AWS services to Security Hub
• How can I use user data to replace a lost SSH key pair after the initial launch of my Amazon EC2 instance?
• AWS re:Invent 2019: Security best practices for the Amazon EC2 instance metadata service
• Add defense in depth against open firewalls, reverse proxies, and SSRF vulnerabilities with enhancements to the EC2 Instance Metadata Service
• AWS re:Invent 2019: Deep dive on Amazon EBS
• Automating processes for handling and remediating AWS Abuse alerts
• I received an abuse report from AWS about my resources– what should I do?
• How do I report abuse of AWS resources?
• What to Do If You Inadvertently Expose an AWS Access Key
• How to Detect and Automatically Revoke Unintended IAM Access with Amazon CloudWatch Events
• AWS re:Invent 2018: How Nubank Automates Fine-Grained Security with IAM, AWS Lambda, & CI/CD
• AWS re:Invent 2017: Use Amazon EC2 Systems Manager to Perform Automated Resilience
• Enabling MFA Devices
• IAM Tutorial: Enable users to manage their credentials and MFA settings
• Using MFA delete
• AWS: Allows MFA-authenticated IAM users to manage their own credentials on the my security credentials page
• Using SSL/TLS to Encrypt a Connection to a DB Instance
• Best practices for securing sensitive data in AWS data stores
• Analyzing encrypted S3 objects with Amazon Macie
• Amazon Macie - User Guide
• Changing your Amazon S3 encryption from S3-Managed to AWS KMS
• Applying best practices for securing sensitive data in Amazon RDS
• Performing SQL database client-side encryption for multi-Region high availability
• Monitor Amazon Aurora Database Activities Using DataSunrise Database Security
• How to use AWS Secrets Manager to rotate credentials for all Amazon RDS database types, including Oracle
• How to use AWS Secrets Manager to securely store and rotate SSH key pairs
• Post-quantum TLS now supported in AWS KMS
• AWS re:Inforce 2019: How Encryption Works in AWS
• How to Remediate Amazon Inspector Security Findings Automatically
• Amazon Inspector agents
• GuardDuty EC2 finding types
• Amazon GuardDuty Partners
• Automated Response and Remediation with AWS Security Hub
• Enabling AWS Security Hub integration with AWS Chatbot
• AWS Security Hub - Managed insights
• How to Enable Custom Actions in AWS Security Hub
• Managed Renewal for ACM's Amazon-Issued Certificates
• Why did my ACM certificate fail automatic renewal?
• What Is Amazon Kinesis Agent for Microsoft Windows?
• Tutorial: Sending VPC Flow Logs to Splunk Using Amazon Kinesis Data Firehose
• Scale Amazon Kinesis Data Streams with AWS Application Auto Scaling
• Troubleshooting Kinesis Data Streams Consumers
• Format Options for ETL Inputs and Outputs in AWS Glue
• How to Visualize and Refine Your Network’s Security by Adding Security Group IDs to Your VPC Flow Logs
• How to Use Nubeva with Amazon VPC Traffic Mirroring to Gain Decrypted Visibility of Your Network Traffic
• New – VPC Traffic Mirroring – Capture & Inspect Network Traffic
• Securing messages published to Amazon SNS with AWS PrivateLink
• AWS Direct Connect + VPN
• How do I establish an AWS VPN over an AWS Direct Connect connection?
• How to add DNS filtering to your NAT instance with Squid
• Why is my presigned URL for an Amazon S3 bucket expiring before the expiration time that I specified?
• How to Enhance the Security of Sensitive Customer Data by Using Amazon CloudFront Field-Level Encryption
• [email protected] using cookies: Protect your Amazon CloudFront content from being downloaded by unauthenticated users
• How do I use CloudFront to serve a static website hosted on Amazon S3?
• Reduce DDoS Risks Using Amazon Route 53 and AWS Shield
• AWS Shield Threat Landscape report is now available
• AWS WAF Security Automations
• Simplify Login with Application Load Balancer Built-in Authentication
• Application Load Balancers Now Support Multiple TLS Certificates With Smart Selection Using SNI
• Controlling and managing access to a REST API in API Gateway
• Introducing mutual TLS authentication for Amazon API Gateway
• Use API Gateway Lambda authorizers
• Building ADFS Federation for your Web App using Amazon Cognito User Pools
• The Next Evolution in AWS Single Sign-On
• How to create and manage users within AWS Single Sign-On
• What's the difference between Amazon Cognito user pools and identity pools?
• How to Use New Advanced Security Features for Amazon Cognito User Pools
• Adding Advanced Security to a User Pool
• SAML Security Cheat Sheet - OWASP
• Git pre-commit validation of AWS CloudFormation templates with cfn-lint
• How to Use AWS Config to Monitor for and Respond to Amazon S3 Buckets Allowing Public Access
• AWS Config: Checking for Compliance with New Managed Rule Options
• Conformance Pack Sample Templates
• AWS Config best practices
• Using AWS Service Catalog Constraints
• Building a React Frontend for Service Catalog with AWS Amplify
• AWS Landing Zone
• AWS Terraform Landing Zone (TLZ) Accelerator
• Introducing the Cloud Development Kit for Terraform (Preview)
• AWS Control Tower
• AWS Control Tower – Set up & Govern a Multi-Account AWS Environment
• AWS Centralized Logging
• Vulnerability and Penetration Testing
• Penetration Testing in the AWS Cloud: What You Need to Know
• Standardized Architecture for PCI DSS on the AWS Cloud
• Tutorial: Blocking IP Addresses That Submit Bad Requests
• Architectures to exemplify digital signature and secure message transmission to the Brazilian Instant Payment System (PIX)
• Raising the bar on storage: How to improve your disaster recovery, ransomware prevention, and backup strategy

Arquiteturas de Referência & Tools

• AWS Quick Starts
• AWS Solutions
• AWS CloudFormation Templates
• AWS SAM - Serverless Application Repository
• AWS Samples
• AWS Cloud Design Patterns
• AWS Pricing Calculator
• AWS Simple Monthly Calculator
• The Amazon Builders' Library
• AWS Geek Cloud Diagrams & Notes
• AWS Ramp-Up Guides
• AWS Digital Training Provider Courses
• AWS re:Invent 2020 – Announcements From the News Blog
• [TOOLS] AWS Cloud Adoption Readiness Tool (CART)
• [TOOLS] Amazon ECR Public Gallery
• [TOOLS] CloudPing
• [TOOLS] AWS Policy Generator
• [TOOLS] S3 Transfer Acceleration Speed Comparison Tool
• [TOOLS] AWS Global Accelerator - Speed Comparison
• [TOOLS] Overlapping CIDRs using AWS Transit Gateway in VPC and NAT Instances
• [TOOLS] Amazon WorkSpaces - Connection Health Check
• [TOOLS] Web Identity Federation Playground
• [TOOLS] AWS Elastic Load Balancer Demos
• [TOOLS] Trusted Advisor Tools
• [TOOLS] Trusted Advisor Exposed Keys CloudWatch Event Monitor
• [TOOLS] Git-Secrets
• [TOOLS] Amazon S3 Find and Forget
• [TOOLS] AWS SSM Chaos Runner
• [TOOLS] AWS ParallelCluster - HPC for the Cloud
• [TOOLS] AWS Dev Fabric for SQL Server
• [TOOLS] Operational Management: Inventory, Patching, and Compliance
• [TOOLS] Amazon Guardduty Tester
• [TOOLS] SIEM on Amazon Elasticsearch Service
• [TOOLS] Awesome CloudFormation
• [TOOLS] AWS CloudFormation Guard
• [TOOLS] TaskCat
• [TOOLS] AWS Device Farm Sample App for Android
• [TOOLS] Amazon DynamoDB Encryption Client for Python
• [TOOLS] Registry of Open Data on AWS
• [TOOLS unofficial] The Open Guide to Amazon Web Services
• [TOOLS unofficial] JMESPath
• [TOOLS unofficial] JMESPath Terminal
• [TOOLS unofficial] AWSume: AWS Assume Made Awesome
• [TOOLS unofficial] AWS IP Ranges
• [TOOLS unofficial] Cloudcraft - Create smart AWS diagrams
• [TOOLS unofficial] Bees with Machine Guns!
• [TOOLS unofficial] The Grinder
• [TOOLS unofficial] Apache JMeter
• [TOOLS unofficial] CloudFormation Lint: CFN Nag
• [TOOLS unofficial] CloudFormation Lint: CFripper
• [TOOLS unofficial] Timber - Logging appender for AWS S3
• [TOOLS unofficial] AWS CloudFront CDN Edge Locations
• [TOOLS unofficial] Lambda Load Testing
• [TOOLS unofficial] Awesome Honeypots
• [TOOLS unofficial] Modern Honey Network
• [TOOLS unofficial] Rhino Security Labs - Pacu
• [TOOLS unofficial] Rhino Security Labs - CloudGoat
• [TOOLS unofficial] Rhino Security Labs - Cloud Container Attack
• [TOOLS unofficial] Console Recorder for AWS
• [TOOLS unofficial] Twemproxy (nutcracker)
• [TOOLS unofficial] Docker Samples
• [TOOLS unofficial] MySQL Samples
• [TOOLS unofficial] Static Demo - 2048

Workshops & Laboratórios

• [LABS] AWS Qwiklabs
• [LABS] AWS Well-Architected Labs
• [LABS] VMware Cloud on AWS
• [LABS] Break a Monolith Application into Microservices
• [Workshop] AWS Workshops
• [Workshop] AWSome AWS Workshops
• [Workshop] AWS Well-Architected Labs
• [Workshop] AWS Cloud Champion
• [Workshop] Networking Workshop - Transit Gateway and Traffic Mirroring
• [Workshop] Amazon EC2 Spot Instances Workshop
• [Workshop] Amazon CloudWatch
• [Workshop] SSM & Config
• [Workshop] Amazon FSx Workshop
• [Workshop] SQL Server Immersion Day
• [Workshop] Amazon ECS Workshop for AWS Fargate
• [Workshop] Amazon EKS Workshop
• [Workshop] Amazon Lightsail Workshop
• [Workshop] Amazon DynamoDB Labs
• [Workshop] Amazon Aurora Labs for MySQL
• [Workshop] Generate Content with [email protected]
• [Workshop] AWS EMP Workshop
• [Workshop] AWS Database Migration Workshop
• [Workshop] CloudEndure Migration Factory Workshop
• [Workshop] CloudEndure Deep Dive - Workshop
• [Workshop] Migration Immersion Day
• [Workshop] Migration and Modernization Workshop Guide
• [Workshop] Kynesis Streaming Analytics Workshop
• [Workshop] Workshop: Choose Your Own SAML Adventure
• [Workshop] AWS Multi-Account Setup
• [Workshop] Landing Zone Workshop
• [Workshop] AWS Service Catalog Tools Workshop
• [Workshop] Security Workshops - Permission Boundaries: How to Truly Delegate Permissions on AWS
• [Workshop] Security Workshops - Data Protection, Detection, Identity, Threat Detection
• [Workshop] AWS Protecting Workloads Workshops
• [Workshop] Getting Hands on with Amazon GuardDuty
• [Workshop] Scaling threat detection and response in AWS
• [Workshop] Integrating security into your container pipeline
• [Workshop] DevSecOps with Snyk
• [Workshop] Windows on AWS
• [Workshop] Running Microsoft Workloads on AWS Immersion Day
• [Workshop] AWS Cloud Development Kit (CDK) Workshop
• [Workshop] Learn Python On AWS Workshop
• [Workshop unofficial] Welcome to the flAWS challenge
• [Workshop unofficial] Welcome to the flAWS 2 challenge
• [Workshop unofficial] Play with Docker
• [Workshop unofficial] Hello Kubernetes w/ Minikube
• [SLIDES] Technical Essentials on AWS
• [SLIDES] AWS Business Essentials Day
• [MATERIAL] Advanced Architecting on AWS- Online Course Supplement
• [EBOOK] Hands-On AWS Penetration Testing with Kali Linux
• [FILES] Security Engineering on AWS - script lab 2
• [FILES] Developing on AWS - Additional Resources
• [FILES] Developing on AWS - Solutions for Labs
• [FILES] AWSome Days - Additional Resources
• [VIDEO-LABS] AWS Technical Essentials
• [VIDEO-LABS] AWS Cloud Practitioner Essentials
• [VIDEO-LABS] AWS Security Essentials
• [VIDEO-LABS] Architecting on AWS
• [VIDEO-LABS] Systems Operations on AWS
• [VIDEO-LABS] Developing on AWS
• [VIDEO-LABS] Advanced Architecting on AWS
• [VIDEO-LABS] Security Engineering on AWS
• [VIDEO-LABS] Planning and Designing Database on AWS
• [VIDEO-LABS] Running Containers on Amazon EKS
• [VIDEO-LABS] Deep Learning on AWS
• [VIDEO-LABS] Moving to AWS Serverless
• [VIDEO-LABS] IoT in Scale: IoT Solution using AWS Services

[DISCLAIMER] Links e materiais disponibilizados como conteúdo adicional para os estudos nos treinamentos da AWS. As informações aqui inseridas são mantidas por mim mesmo, e não expressam nenhuma informação oficial por parte da AWS; mesmo que em sua maioria sejam artigos e blog posts oficiais da Amazon Web Services.