AWS Certified Cloud Practitioner Exam Guide Build your cloud computing knowledge and build your skills as an AWS Certified Cloud Practitioner (CLF-C01) Rajesh Daswani BIRMINGHAM—MUMBAI AWS Certified Cloud Practitioner Exam Guide Copyright © 2021 Packt Publishing All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews. Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing or its dealers and distributors, will be held liable for any damages caused or alleged to have been caused directly or indirectly by this book. Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information. Group Product Manager: Rahul Nair Publishing Product Manager: Preet Ahuja Senior Editor: Sangeeta Purkayastha Content Development Editor: Nihar Kapadia Technical Editor: Nithik Cheruvakodan Copy Editor: Safis Editing Project Coordinator: Neil Dmello Proofreader: Safis Editing Indexer: Tejal Daruwale Soni Production Designer: Shankar Kalbhor First published: December 2021 Production reference: 1181121 Published by Packt Publishing Ltd. Livery Place 35 Livery Street Birmingham B3 2PB, UK. ISBN 978-1-80107-593-0 www.packt.com To my mother, Vandana, and to the memory of my father, Devkrishin, for their sacrifices and for exemplifying the power of determination. To my beautiful wife, Divya, for being my loving partner and anchor always. And to my amazing daughter, Ryka, for showing me how simplicity is the key to creativity. – Rajesh Daswani Contributors About the author Rajesh Daswani is a senior solutions architect with over 20 years' experience in IT infrastructure services and cloud computing. His work has been focused on both AWS and Microsoft 365 platforms. He has delivered cloud computing training on AWS as a corporate trainer for several clients globally. Rajesh has helped thousands of IT professionals to appreciate real-world applications of cloud technologies and become better equipped to facilitate clients' adoption of cloud technologies. When Rajesh is not immersed in the world of cloud computing, he can be caught watching re-runs of his favorite Star Trek shows (TNG). He also likes to be known as a food connoisseur, conjuring up his own mix of fusion dishes for his family and friends. I would like to thank the team at Packt Publishing, especially Neil D'mello and Nihar Kapadia, for guidance and support in making this study guide a reality. I would also like to thank Renato Martins, for providing a technical review of this study guide. About the reviewer Renato Martins has been working in IT since 1997, having worked directly for, or consulted on behalf of, small start-ups, government agencies, and large multinationals in four countries. As a trainer, he has delivered hundreds of classes and a few dozen lectures on all topics, from development to databases, operating systems, and cloud computing in all flavors. He has been approved in more than 200 certification exams, including AWS, Microsoft, PMI, Red Hat, Sun, and IBM, among others. When not working, he loves to be with his family, enjoying museums and concerts, and likes to travel across the globe in whatever spare time he has. Passionate about the fast-paced, constantly changing landscape of technology, he is always on the lookout for the next new thing, eager to learn and share it. I'd like to thank my lovely wife, Sandra, and our incredible children, Theo and Laís, for their support, knowing I might become absent at any time as a result of diving into a big project, studying for the next exam, or delivering a class. Thanks for knowing that after, I am there to have the best moments of our lives together. Thanks for the relaxing moments, for all the laughs and cuddles. A big thank you also to my dog, Ted, who makes sure I am awake every day at 6 A.M. for a walk! Table of Contents Preface Section 1: Cloud Concepts 1 What Is Cloud Computing? What is cloud computing?   4 SaaS   12 The six advantages of cloud computing    5 Understanding cloud Exploring the basics of deployment models   13 virtualization   8 Public cloud   14 Exploring cloud computing Private cloud   14 models   11 Hybrid cloud   15 Infrastructure as a Service    11 Summary   15 Platform as a Service    11 Questions   16 2 Introduction to AWS and the Global Infrastructure What is AWS?   20 Global services   28 A quick history of AWS   20 On-premises services   29 Exploring the AWS Global Choosing the right AWS support Infrastructure   21 plan for your business   31 Regions   22 Basic support plan   31 AZs   23 Developer support plan   32 Edge Locations   25 Business support plan   32 Regional edge caches   26 Enterprise support plan   33 Regional services   27 viii Table of Contents Overview of the AWS Service Summary   37 Health Dashboard   35 Questions   38 The AWS AuP   37 3 Exploring AWS Accounts, Multi-Account Strategy, and AWS Organizations Why have a multi-account AWS AWS Free Tier accounts   52 environment?   44 Free tools   52 AWS Landing Zone   46 Always free services (limited offering)   53 AWS Control Tower   46 Free trials   53 Managing multiple accounts – AWS Exercise 3.1 – Setting up your Organizations   47 first AWS Free Tier account   54 Introducing AWS Organizations   47 Exercise 3.2 – Setting up a Consolidated billing   48 billing alarm   64 How many AWS accounts do you need?   49 Questions   72 Core AWS OUs   50 Additional OUs   50 Section 2: AWS Technologies 4 Identity and Access Management Introduction to the AWS IAM Key differences between IAM service   78 users and IAM groups   85 The AWS IAM console   78 IAM users   85 The AWS IAM services    79 IAM groups   86 The root user account and Defining permissions with IAM implementing Multi-Factor policies    86 Authentication (MFA)   81 Types of identity-based policies   89 Setting up MFA   81 Example of an IAM policy   89 Assigning temporary credentials with The importance of defining IAM IAM roles    94 password policies    84 Temporary credentials   95 Table of Contents ix Reviewing credential reports   96 Downloading the CLI tools   103 Exercise 4.1 – creating an Exercise 4.4 – accessing the IAM group   96 AWS platform using the AWS Exercise 4.2 – creating an CLI on a Windows computer   104 IAM user    97 Exercise 4.5 – creating an Exercise 4.3 – logging in to your IAM user with administrative AWS account as an IAM user   99 privileges   105 Accessing the AWS platform Summary   107 using the CLI   101 Questions   108 Accessing your account via the CLI   102 5 Amazon Simple Storage Service (S3) Technical requirements   112 Connecting your on-premises Introduction to storage storage to AWS with Amazon options on AWS   112 Storage Gateway   136 Migrating large datasets Block storage   113 to AWS with the AWS File storage   113 Snow Family   138 Object storage   114 AWS Snowball    138 Introduction to Amazon S3   115 Amazon Snowcone   139 Buckets and objects   115 Amazon Snowmobile   139 Managing your objects in a bucket   117 Exercise 5.1 – Setting up an Regional hosting – global availability   119 Amazon S3 bucket   139 Access permissions   119 Versioning   127 Exercise 5.2 – Configuring Cross-region and same-region public access to S3 buckets   143 replication   128 Exercise 5.3 – Enabling S3 encryption   130 versioning on your bucket   146 Static website hosting   131 Exercise 5.4 – Setting up static Amazon S3TA   133 website hosting   149 Learning about archiving Summary   154 solutions with Amazon S3 Questions   154 Glacier   134