What's changed: Added figure aws-container-ops (ECR→ECS/EKS/Fargate→Container Insights) to container-ops section s4. The cloned base chapters inherit SOA-C02 figures; s4 was the only section lacking one, now filled.
3.5In-scope services for deployment, provisioning, and automation
A roundup of in-scope SOA-C03 services for deployment and automation—IaC, operational automation, and multi-account governance.
3.5.1In-scope services for deployment, provisioning, and automation
For deployment, provisioning, and automation, focus on IaC, operational automation, and organizational governance. IaC/images: AWS CloudFormation (build from templates), AWS Cloud Development Kit (define in a programming language), and EC2 Image Builder (produce golden AMIs). Operational automation: AWS Systems Manager (patching/config/Run Command), AWS Step Functions (workflows), Amazon EventBridge (event routing), AWS X-Ray (distributed tracing), and AWS DataSync (data transfer). Multi-account governance: AWS Organizations (group accounts), Service control policies (SCPs—guardrails), AWS Control Tower (auto landing zone), and AWS Service Catalog (distribute approved resources).
3.5.2Section summary
- IaC/automation: CloudFormation/CDK, EC2 Image Builder, Systems Manager, Step Functions, EventBridge, X-Ray, DataSync
- Governance: Organizations, SCPs, Control Tower, Service Catalog
Sign in to track progress — Log in.
Quick check
(just a quick review)Q1. Which AWS tool defines infrastructure in a programming language and synthesizes CloudFormation templates?
Q2. Which is applied to an organization/OU/account to define the maximum permissions (guardrail) allowed within it?