What's changed: Added figure aws-container-ops (ECR→ECS/EKS/Fargate→Container Insights) to container-ops section s4. The cloned base chapters inherit SOA-C02 figures; s4 was the only section lacking one, now filled.
3.5In-scope services for deployment, provisioning, and automation
A roundup of in-scope SOA-C03 services for deployment and automation—IaC, operational automation, and multi-account governance.
3.5.1In-scope services for deployment, provisioning, and automation
For deployment, provisioning, and automation, focus on IaC, operational automation, and organizational governance. IaC/images: AWS CloudFormation (build from templates), AWS Cloud Development Kit (define in a programming language), and EC2 Image Builder (produce golden AMIs). Operational automation: AWS Systems Manager (patching/config/Run Command), AWS Step Functions (workflows), Amazon EventBridge (event routing), AWS X-Ray (distributed tracing), and AWS DataSync (data transfer). Multi-account governance: AWS Organizations (group accounts), Service control policies (SCPs—guardrails), AWS Control Tower (auto landing zone), and AWS Service Catalog (distribute approved resources).
3.5.2Section summary
- IaC/automation: CloudFormation/CDK, EC2 Image Builder, Systems Manager, Step Functions, EventBridge, X-Ray, DataSync
- Governance: Organizations, SCPs, Control Tower, Service Catalog
Sign in to track progress — Log in.
Quick check
(just a quick review)Q1. Which AWS tool defines infrastructure in a programming language and synthesizes CloudFormation templates?
Q2. Which is applied to an organization/OU/account to define the maximum permissions (guardrail) allowed within it?
Keep track of your progress
The full study guide is free to read. Sign up free to practice with the question bank, track what you have read, review your mistakes, and highlight passages.