2. Nội dung luyện thi AWS Certified Solutions Architect – Associate (SAA-C03)

(Mức độ trung cấp, thi thực tế, rất nhiều scenario)

A. Design Secure Architectures – 30%

IAM & Security

• IAM Core (Policies, Roles, STS, AssumeRole)

• KMS Encryption (SSE-S3, SSE-KMS, Encryption in Transit)

• Secrets Manager vs Parameter Store

• Shield, WAF, Firewall Manager

Network Security

• Security Group vs NACL

• VPC Endpoints (Gateway, Interface)

• NAT Gateway & Bastion Host

• PrivateLink

B. Design Resilient Architectures – 26%

Compute

• EC2 Instance Types (T, M, C, R, P, G)

• Spot / Reserved / On-Demand

• Auto Scaling: Plans, Predictive Scaling

• Elastic Load Balancer (ALB/NLB/CLB)

Storage & Backup

• S3: Versioning, Lifecycle, Intelligent-Tiering

• S3 Replication (CRR, SRR)

• EBS Types (gp3, io2, sc1, st1)

• EFS Standard vs Infrequent Access

• Backup & Disaster Recovery (Multi-AZ vs Multi-Region)

C. Design High-Performing Architectures – 24%

Databases

• RDS (Multi-AZ, Read Replica)

• Aurora Serverless v1/v2

• DynamoDB (GSI, LSI, Partition Key, On-demand)

• ElastiCache (Redis/Memcached)

Application Integration

• SQS (Standard vs FIFO)

• SNS

• EventBridge

• Step Functions

D. Design Cost-Optimized Architectures – 20%

• EC2 Saving Plans vs Compute Savings

• S3 Lifecycle & Tiering

• DynamoDB On-Demand vs Provisioned

• Trusted Advisor Cost Checks

• Spot Instance Best Practices

🟩 3. Tài liệu luyện thi chuẩn AWS

✔ AWS Official Exam Guide
✔ AWS Skill Builder (Free + Subscription)
✔ AWS Whitepapers (bắt buộc đọc):

• Well-Architected Framework

• Security Pillar

• Cost Optimization Pillar
  ✔ Udemy: Stephane Maarek (phổ biến nhất)
  ✔ Tutorials Dojo / Jon Bonso (đề thi sát nhất)