AWS Solutions Architect Associate: decisões de arquitetura

Objetivos e percurso

Vinte e uma aulas, 314 perguntas regulares e 34 cenários originais em PT-PT e inglês. Aprofunda identidade, redes, dados, eventos, resiliência e custos. Inclui uma oficina sobre Cognito, tokens, autorização de operações, PKCE, ordem de regras WAF, limites de inspeção e passagem a produção. Os exemplos de banca são fictícios. Oficinas documentais e modelos locais não representam ensaios executados na AWS. A avaliação interna reutiliza 110 decisões em 205 minutos, sem calcular nota AWS nem atribuir certificação. Faltam perguntas, mocks completos, prática AWS autorizada e revisão independente para a versão madura.

Para quem: Engenheiros de cloud, arquitetos em formação e gestores técnicos com responsabilidade por produção.

Pré-requisitos: Fundamentos AWS, redes TCP/IP e noções de bases de dados e disponibilidade.

1530 minutos de estudo estimados

• Diagnosticar permissões e caminhos de rede.
• Relacionar capacidade e recuperação com RTO e RPO.
• Selecionar dados, cache e processamento conforme o acesso.
• Avaliar custos, compromissos e retirada de recursos.
• Comprovar dependências de arranque e medir recuperação completa com custos comparáveis.
• Desenha processamento que distingue entrega, execução, reconhecimento e recuperação de mensagens.
• Relaciona políticas de acesso, filtros, falhas de entrega e capacidade de destino com o comportamento da integração.
• Distingue disponibilidade, capacidade de leitura, ligações e recuperação com RDS e Aurora.
• Calcula consumo e escolhe acessos que respeitam atualização, validade e alterações concorrentes.
• Define chaves, políticas e fronteiras de acesso sem misturar conteúdo entre utilizadores.
• Relaciona a política de cada conjunto de objetos com custo, cópias e recuperação demonstrável.
• Diagnostica o caminho de armazenamento e relaciona unidades, concorrência e persistência com o requisito.
• Compara custo por resultado, compromisso horário e tolerância à interrupção antes de escolher capacidade.
• Desenha percursos permitidos, identifica exceções e entrega evidência de isolamento e retorno ao RUN.
• Segue uma consulta entre datacenter e AWS, diagnostica conflitos de zonas e prepara a entrega operacional.
• Liga autenticação, autorização, proteção WAF e aceitação operacional num portal de fundos fictício.

Módulos

1. Identidade, confiança e permissões
2. Redes, endpoints e conectividade híbrida
3. Proteção e recuperação de dados
4. Resiliência, capacidade e recuperação
5. Armazenamento e distribuição de conteúdo
6. Bases de dados, réplicas e cache
7. Eventos, filas e processamento
8. Custos, compromissos e retirada
9. Acesso privado e arranque sem dependências escondidas
10. Recuperação: dependências, capacidade e custo
11. Filas, ordenação e falhas parciais
12. Eventos: permissões, capacidade e custos
13. Bases relacionais, ligações e recuperação
14. DynamoDB: consistência, capacidade e concorrência
15. CloudFront: cache, privacidade e origem
16. Objetos: retenção, replicação e recuperação
17. Armazenamento: IOPS, throughput e persistência
18. Computação: compromissos e retoma de batches
19. Segmentação, rotas e aceitação de conectividade
20. DNS híbrido, vistas privadas e handover
21. Identidade de utilizadores e proteção web

Continua a aprender

AWS

• AWS Certified Cloud Practitioner
• Terraform Associate
• DNS
• Suporte de produção L3

Referências e versão

SAA-C03

• SAA-C03 exam guide · 2026-10-04
• AWS Certified Solutions Architect Associate · 2026-10-02
• IAM security best practices · 2026-09-29
• IAM roles · 2026-09-29
• Policy evaluation logic · 2026-10-04
• Service control policies · 2026-10-04
• KMS key policies · 2026-09-29
• Security groups · 2026-09-29
• Network ACLs · 2026-09-29
• Internet gateway basics · 2026-10-04
• Configure an interface endpoint · 2026-10-04
• Gateway endpoints for Amazon S3 · 2026-10-04
• Encryption in AWS Direct Connect · 2026-10-04
• How VPC peering connections work · 2026-10-04
• Restrict access to an S3 origin · 2026-10-04
• S3 Object Lock · 2026-10-04
• Secrets Manager rotation · 2026-10-04
• CloudTrail data events · 2026-10-04
• S3 Versioning · 2026-09-29
• RDS point-in-time recovery · 2026-10-04
• EC2 Auto Scaling architecture benefits · 2026-09-29
• Disaster recovery options in the cloud · 2026-10-04
• Define recovery objectives · 2026-09-29
• Route 53 health checks · 2026-10-04
• Amazon EFS overview · 2026-09-29
• FSx for Windows File Server · 2026-10-04
• S3 multipart uploads · 2026-10-04
• CloudFront cache key · 2026-10-04
• S3 Lifecycle transitions · 2026-10-04
• S3 Intelligent-Tiering · 2026-10-04
• EBS General Purpose SSD · 2026-10-04
• RDS single standby · 2026-10-04
• RDS read replicas · 2026-10-04
• DynamoDB partition key design · 2026-10-04
• Aurora reader endpoint · 2026-10-04
• Caching strategies for Memcached · 2026-10-04
• RDS best practices · 2026-10-04
• SQS standard queues · 2026-09-29
• Visibility timeout · 2026-10-04
• SQS dead-letter queues · 2026-10-04
• SNS to SQS fanout · 2026-10-04
• Scaling by SQS backlog · 2026-10-04
• AWS Lambda overview · 2026-09-29
• Savings Plans overview · 2026-10-02
• Spot interruptions · 2026-09-29
• Pricing for NAT gateways · 2026-10-04
• Managing costs with AWS Budgets · 2026-10-04
• Delete an EBS volume · 2026-09-29
• SAA-C03 secure architectures domain · 2026-10-04
• SAA-C03 domain 2 · 2026-10-04
• SAA-C03 domain 3 · 2026-10-04
• SAA-C03 cost-optimized architectures · 2026-10-04
• Modify EBS volumes · 2026-10-04
• Values for simple Route 53 records · 2026-10-04
• Control access using endpoint policies · 2026-10-01
• Amazon ECR interface VPC endpoints · 2026-10-01
• Replicate Secrets Manager secrets across Regions · 2026-10-01
• Control access to multi-Region keys · 2026-10-01
• AWS PrivateLink pricing · 2026-10-01
• SQS ChangeMessageVisibility · 2026-10-02
• FIFO send deduplication · 2026-10-02
• FIFO groups and identifiers · 2026-10-02
• Lambda SQS partial batch responses · 2026-10-02
• SNS to SQS service authorization · 2026-10-02
• SQS actions and resources · 2026-10-02
• SNS subscription filter policies · 2026-10-04
• SQS short and long polling · 2026-10-02
• EventBridge target DLQs · 2026-10-02
• EventBridge delivery retries · 2026-10-02
• SQS KMS producer and consumer permissions · 2026-10-02
• RDS Multi-AZ deployment types · 2026-10-02
• Amazon RDS Proxy · 2026-10-02
• Avoiding pinning an RDS Proxy · 2026-10-02
• DynamoDB read and write operations · 2026-10-02
• DynamoDB read consistency · 2026-10-02
• Working with items and attributes · 2026-10-02
• DynamoDB time to live · 2026-10-02
• DAX consistency model · 2026-10-02
• CloudFront cache policies · 2026-10-02
• CloudFront origin request policies · 2026-10-02
• Private content with signed URLs and cookies · 2026-10-02
• Invalidate files to remove content · 2026-10-02
• What S3 replicates · 2026-10-02
• S3 Batch Replication · 2026-10-02
• Abort incomplete multipart uploads · 2026-10-02
• EBS I/O characteristics · 2026-10-02
• EBS-optimized instance limits · 2026-10-02
• EFS performance specifications · 2026-10-02
• EBS snapshots · 2026-10-02
• Instance store data persistence · 2026-10-02
• Compute Savings Plans and Reserved Instances · 2026-10-04
• Savings Plans application · 2026-10-02
• Spot interruption notices · 2026-10-02
• SQS at-least-once delivery · 2026-10-02
• VPC route priority · 2026-10-03
• How Transit Gateway works · 2026-10-03
• Resolving DNS between VPCs and networks · 2026-10-03
• Outbound Resolver forwarding · 2026-10-03
• Private hosted zone considerations · 2026-10-03
• Resolver endpoint considerations · 2026-10-03
• Cross-account policy evaluation · 2026-10-04
• Third-party account access · 2026-10-04
• Cross-account KMS key use · 2026-10-04
• IAM permissions boundaries · 2026-10-04
• IAM policy simulation · 2026-10-04
• Using temporary credentials · 2026-10-04
• S3 identity policies · 2026-10-04
• Object Lock considerations · 2026-10-04
• Managing S3 delete markers · 2026-10-04
• KMS key rotation · 2026-10-04
• KMS key deletion · 2026-10-04
• Manual key rotation · 2026-10-04
• AWS Backup restore validation · 2026-10-04
• AWS Backup restore testing · 2026-10-04
• ALB target health checks · 2026-10-04
• ALB target group attributes · 2026-10-04
• Auto Scaling health check types · 2026-10-04
• Auto Scaling health check grace period · 2026-10-04
• Default instance warmup · 2026-10-04
• Auto Scaling lifecycle hooks · 2026-10-04
• Target tracking scaling policies · 2026-10-04
• Static stability · 2026-10-04
• Configuring budget actions · 2026-10-04
• Cost allocation tags · 2026-10-04
• Backfill cost allocation tags · 2026-10-04
• EC2 instance state changes · 2026-10-04
• Stopping an RDS DB instance temporarily · 2026-10-04
• Regional and zonal Reserved Instances · 2026-10-04
• Cost Explorer advanced options · 2026-10-04
• Savings Plans utilization metrics · 2026-10-04
• Savings Plans coverage metrics · 2026-10-04
• Savings Plans types · 2026-10-04
• Security group rules · 2026-10-04
• EC2 connection tracking · 2026-10-04
• Network ACL rules · 2026-10-04
• Custom network ACLs · 2026-10-04
• VPC Flow Logs · 2026-10-04
• Flow log records · 2026-10-04
• Flow log limitations · 2026-10-04
• How Reachability Analyzer works · 2026-10-04
• Egress-only internet gateway · 2026-10-04
• NAT gateway basics · 2026-10-04
• Troubleshoot NAT gateways · 2026-10-04
• EFS mount targets · 2026-10-04
• EFS access points · 2026-10-04
• EFS access point identity · 2026-10-04
• EFS access point root · 2026-10-04
• EFS network access · 2026-10-04
• EBS Multi-Attach · 2026-10-04
• Attach an EBS volume · 2026-10-04
• Extend an EBS file system · 2026-10-04
• Create EBS snapshots · 2026-10-04
• EBS fast snapshot restore · 2026-10-04
• S3 CompleteMultipartUpload · 2026-10-04
• S3 upload integrity · 2026-10-04
• S3 data consistency model · 2026-10-04
• S3 presigned URLs · 2026-10-04
• Roles for applications on EC2 · 2026-10-04
• IAM Identity Center · 2026-10-04
• Gateway endpoints · 2026-10-04
• Make systems stateless where possible · 2026-10-04
• Best practices for EC2 Spot · 2026-10-04
• RDS storage autoscaling · 2026-10-04
• Promoting RDS read replicas · 2026-10-04
• RDS Multi-AZ DB clusters · 2026-10-04
• Query filter expressions · 2026-10-04
• Query pagination · 2026-10-04
• Global secondary indexes · 2026-10-04
• GSI back pressure · 2026-10-04
• DynamoDB Scan · 2026-10-04
• Query and scan best practices · 2026-10-04
• Caching challenges and strategies · 2026-10-04
• DeleteMessageBatch · 2026-10-04
• SendMessageBatch · 2026-10-04
• DeleteMessage · 2026-10-04
• SQS timely processing · 2026-10-04
• SQS delay queues · 2026-10-04
• SQS message timers · 2026-10-04
• Long polling setup · 2026-10-04
• SNS raw delivery · 2026-10-04
• EventBridge PutEvents · 2026-10-04
• S3 event structure · 2026-10-04
• S3 events and Lambda · 2026-10-04
• SQS event source configuration · 2026-10-04
• Lambda with SQS · 2026-10-04
• Asynchronous Lambda invocation · 2026-10-04
• Amazon Cognito user pools · 2026-10-04
• Amazon Cognito identity pools · 2026-10-04
• Verifying JSON web tokens · 2026-10-04
• Understanding the identity token · 2026-10-04
• Understanding the access token · 2026-10-04
• Application-specific settings with app clients · 2026-10-04
• The redirect and authorization endpoint · 2026-10-04
• How AWS WAF handles rule and rule group actions · 2026-10-04
• Setting rule priority · 2026-10-04
• Resources that you can protect with AWS WAF · 2026-10-04
• Aggregating rate-based rules · 2026-10-04
• Rate-based rule caveats · 2026-10-04
• Using forwarded IP addresses · 2026-10-04
• Overriding rule group actions · 2026-10-04
• Oversize web request components · 2026-10-04
• Restrict access to Application Load Balancers · 2026-10-04
• Configuring logging for a protection pack (web ACL) · 2026-10-04
• Testing and tuning your AWS WAF protections · 2026-10-04