我如何在三個月內考取 AWS Certified Solutions Architect – Professional (SAP-C02)？

本身工作為雲端從業者，在 2021 年有通過 AWS Certified Solutions Architect – Associate (SAA) 考試，由於今年 SAA 三年效期即將到期，以助理級考試來說，重新認證的選項有兩個，可選擇再考一次最新版本的 SAA，或是直接考專業級考試。想著與其再考一次 SAA，不如直接準備 SAP，開始了這段準備 SAP 的旅程。

考試簡介

AWS 官方考題介紹

• 75 題，含複選題和單選題總分1000分，必須要750分才能通過考試
• 考試時間：180分鐘
• 考試涵蓋範圍：
• 領域 1：針對複雜的組織設計解決方案
• 領域 2：針對新解決方案進行設計
• 領域 3：持續改進現有解決方案
• 領域 4：加快工作負載遷移和現代化

準備資源

在有限的準備時間下，以看 examtopics 考題方式快速熟悉題型和問法 (考試前已更新到411題)，不得不說，SAP 題目和答案的長度都是比長的，因此熟悉題型，再去查看相關主題的文件會是比較快的方法，資源如下：

1. Examtopics SAP 考古題
2. SAP 學習路徑介紹：https://jayendrapatil.com/aws-certified-solutions-architect-professional-sap-c02-exam-learning-path/
3. 超詳盡的目錄式服務介紹，幾乎都會附架構圖解說，看完會有整體的概念：https://github.com/Ernyoke/certified-aws-solutions-architect-professional/tree/main
4. AWS 各式官方文件

答題筆記

做考題時，我會把比較不清楚的概念整理筆記如下，在考前做最後複習：

1. 服務可用性是由 resource 可用性層級最弱環節決定，需提升資源可用性到 region-level提高可用性。Regional & global service 要了解。
2. 若是題目問選擇最少 operation overhead 的選項，則 managed service > 需要針對既有設計做改變的選項 > 需要寫 script 耗費人工的選項。
3. 組織及身分存取：
• AWS Control Tower: Provides a set of "strongly recommended guardrails" that can be enabled to implement governance and policy enforcement.
• Service control policies (SCPs): 需 AWS Organization，不授權，只拒絕。
• AWS SSO: must first set up the AWS Organizations service and have All features set to enabled.
4. 數據分析：需要即時處理的找 AWS Kinesis Data Streams，收集到大數據平台作後續分析的找 Kinesis Firehose。
5.  儲存：
• 降低成本放到 Glacier 需考慮 RTO。
• S3 Replication Time Control (S3 RTC): Replicates most objects that you upload to Amazon S3 in seconds, and 99.99 percent of those objects within 15 minutes.
• Bucket keys can reduce costs for AWS KMS requests by up to 99%.
6.  搬遷：
• AWS Application Discovery Agent: Gather information about running processes on the servers and provide detailed metrics.
• AWS Migration Evaluator: Analyze data about on-premises environment, including servers, storage, networking, and applications. It then provides a report that outlines the recommended AWS services and configurations that best match existing infrastructure and applications.
• Migrate NFS storage arrays to S3、EFS、FSx with encryption = AWS DataSync + DataSync agent。
• Migrate databases to AWS with minimal downtime= AWS Database Migration Service (DMS)。
• Replicate Amazon FSx for Windows File Server data between AWS Regions=AWS DataSync.
7. An RDS proxy: Allows you to pool and share connections to an RDS database. Applications can automatically reconnect to the database after a failover event, without the need to restart the application.
8. Compute Savings plan 支援 EC2、Fargate、Lambda，需套用到 Organization management account。
9. Security：
• To prevent users from directly accessing an Application Load Balancer: 
1. Configure CloudFront to add a custom HTTP header to requests that it sends to the Application Load Balancer. 
2. Configure the Application Load Balancer to only forward requests that contain the custom HTTP header.
• AWS WAF: 可透過 Geographic match rule statement 管理來源國家或地區的web requests
• AWS Shield Advanced: 24/7 availability, a dedicated DDoS response team, and advanced attack analytics and reporting.
10. AWS Elastic Disaster Recovery (DRS) vs AWS Data Lifecycle Manager (DLM) vs AWS Backup.
• DLM: Automate the creation, retention, and deletion of EBS snapshots.
• AWS Backup: Manage and monitor backups across the AWS services you use, including EBS volumes, from a single place.
• AWS DRS: recover all of your applications and databases that run on supported Windows and Linux operating system versions. This includes critical databases such as Oracle, MySQL, and SQL Server, and enterprise applications such as SAP
11. Connectivity：
• AWS PrivateLink: Create an endpoint service to share their internal application with other accounts securely using private IP addresses. 
• Transit Gateway=Regional, managed 巨大路由器
• AD Connector: Use it join an EC2 to On-prem AD

考試當天

1. 我預約10點考試，提早9點多到，可以先進去考試。
2. 由於考試長達 3 小時，建議以每小時完成 25 題為目標進行配速答題，不論出去上廁所、喝水，時間都會照樣計算，不過還是建議中間可以去上廁所休息一下，不然 3 小時的考試很容易考到後來注意力渙散。
3. 考完當下不像 AWS SAA 會直接顯示考試結果在螢幕上，會是說明將在 5 個工作天內將結果寄到信箱，不過實際上我 12 點多考完，晚上 6 點就收到 AWS 信件通知通過。