Preparing for the AWS Database Specialty Certification — 7 Steps

A guide with a visual topic landscape map

When I passed the certification exam, a few community members of the LinkedIn Certification group asked me about my preparation, and pointed out the absence of courses from Safari Books Online, Packt Publishing or Udemy.

Here I detail recommended preparation steps, and share the technology topics landscape map that I created that helped me prepare for the exam.

Understand the Knowledge Areas

Understand the 5 areas of certification. This is Step 0.

  • Workload Specific Database Design
  • Deployment and Migration
  • Management and Operation
  • Monitoring and Troubleshooting (including Performance)
  • Database Security

Pay less attention to the weightage initially, and treat all as equally important.

RDS and Aurora are always the most frequent topics, but that is simply due to the large set of flavors and versions of those.

Databases on AWS is a very vast topic, and involves intersection of AWS Architecture knowledge with Database knowledge. While Solution Architecture Associate or Solution Architect Pro certifications are not mandatory, it is important to have an understanding of the topics.

Take the Exam Readiness Training — First Pass

The Exam Readiness: AWS Certified Database — Specialty training at the AWS Training and Certification site should be your 1st step. However, I would recommend you do this training in a fast-paced mode, and skim over the topics, during this first pass.

The idea is to map your own experience to the requirements of the certification exam. There may be some areas you have deep knowledge that match well with exam requirements, while some areas that you may not encounter daily in your work, that require some attention.

#certification #aws #database #topics #cloud

What is GEEK

Buddha Community

Preparing for the AWS Database Specialty Certification — 7 Steps

Preparing for the AWS Database Specialty Certification — 7 Steps

A guide with a visual topic landscape map

When I passed the certification exam, a few community members of the LinkedIn Certification group asked me about my preparation, and pointed out the absence of courses from Safari Books Online, Packt Publishing or Udemy.

Here I detail recommended preparation steps, and share the technology topics landscape map that I created that helped me prepare for the exam.

Understand the Knowledge Areas

Understand the 5 areas of certification. This is Step 0.

  • Workload Specific Database Design
  • Deployment and Migration
  • Management and Operation
  • Monitoring and Troubleshooting (including Performance)
  • Database Security

Pay less attention to the weightage initially, and treat all as equally important.

RDS and Aurora are always the most frequent topics, but that is simply due to the large set of flavors and versions of those.

Databases on AWS is a very vast topic, and involves intersection of AWS Architecture knowledge with Database knowledge. While Solution Architecture Associate or Solution Architect Pro certifications are not mandatory, it is important to have an understanding of the topics.

Take the Exam Readiness Training — First Pass

The Exam Readiness: AWS Certified Database — Specialty training at the AWS Training and Certification site should be your 1st step. However, I would recommend you do this training in a fast-paced mode, and skim over the topics, during this first pass.

The idea is to map your own experience to the requirements of the certification exam. There may be some areas you have deep knowledge that match well with exam requirements, while some areas that you may not encounter daily in your work, that require some attention.

#certification #aws #database #topics #cloud

Christa  Stehr

Christa Stehr

1598408880

How To Unite AWS KMS with Serverless Application Model (SAM)

The Basics

AWS KMS is a Key Management Service that let you create Cryptographic keys that you can use to encrypt and decrypt data and also other keys. You can read more about it here.

Important points about Keys

Please note that the customer master keys(CMK) generated can only be used to encrypt small amount of data like passwords, RSA key. You can use AWS KMS CMKs to generate, encrypt, and decrypt data keys. However, AWS KMS does not store, manage, or track your data keys, or perform cryptographic operations with data keys.

You must use and manage data keys outside of AWS KMS. KMS API uses AWS KMS CMK in the encryption operations and they cannot accept more than 4 KB (4096 bytes) of data. To encrypt application data, use the server-side encryption features of an AWS service, or a client-side encryption library, such as the AWS Encryption SDK or the Amazon S3 encryption client.

Scenario

We want to create signup and login forms for a website.

Passwords should be encrypted and stored in DynamoDB database.

What do we need?

  1. KMS key to encrypt and decrypt data
  2. DynamoDB table to store password.
  3. Lambda functions & APIs to process Login and Sign up forms.
  4. Sign up/ Login forms in HTML.

Lets Implement it as Serverless Application Model (SAM)!

Lets first create the Key that we will use to encrypt and decrypt password.

KmsKey:
    Type: AWS::KMS::Key
    Properties: 
      Description: CMK for encrypting and decrypting
      KeyPolicy:
        Version: '2012-10-17'
        Id: key-default-1
        Statement:
        - Sid: Enable IAM User Permissions
          Effect: Allow
          Principal:
            AWS: !Sub arn:aws:iam::${AWS::AccountId}:root
          Action: kms:*
          Resource: '*'
        - Sid: Allow administration of the key
          Effect: Allow
          Principal:
            AWS: !Sub arn:aws:iam::${AWS::AccountId}:user/${KeyAdmin}
          Action:
          - kms:Create*
          - kms:Describe*
          - kms:Enable*
          - kms:List*
          - kms:Put*
          - kms:Update*
          - kms:Revoke*
          - kms:Disable*
          - kms:Get*
          - kms:Delete*
          - kms:ScheduleKeyDeletion
          - kms:CancelKeyDeletion
          Resource: '*'
        - Sid: Allow use of the key
          Effect: Allow
          Principal:
            AWS: !Sub arn:aws:iam::${AWS::AccountId}:user/${KeyUser}
          Action:
          - kms:DescribeKey
          - kms:Encrypt
          - kms:Decrypt
          - kms:ReEncrypt*
          - kms:GenerateDataKey
          - kms:GenerateDataKeyWithoutPlaintext
          Resource: '*'

The important thing in above snippet is the KeyPolicy. KMS requires a Key Administrator and Key User. As a best practice your Key Administrator and Key User should be 2 separate user in your Organisation. We are allowing all permissions to the root users.

So if your key Administrator leaves the organisation, the root user will be able to delete this key. As you can see **KeyAdmin **can manage the key but not use it and KeyUser can only use the key. ${KeyAdmin} and **${KeyUser} **are parameters in the SAM template.

You would be asked to provide values for these parameters during SAM Deploy.

#aws #serverless #aws-sam #aws-key-management-service #aws-certification #aws-api-gateway #tutorial-for-beginners #aws-blogs

Sandhya Pati

Sandhya Pati

1571653402

AWS Training Online Course - Best AWS Certification - Intellipaat

Enroll for best AWS training course with AWS Certification online and placement support. Learn Amazon web services AWS course from certified AWS experts. Enroll Now!

#aws interview questions #aws training #aws tutorial #aws certification #amazon web services certification

AWS Certification Cost - Types of AWS Certification Exams

AWS is one of the most sought-after certifications in the market. According to research, 70 percent of the cloud market is with AWS, which means 7 out of 10 jobs that you will be applying for in the market will be based on AWS. In this blog on AWS Certification Cost and types of AWS certification exams, you will learn about different types of certifications in the market.

Having said that, with so many AWS certifications in the market, it is difficult to assess which certification you should go for or pursue. Today, this blog tries to guide you on which certifications you should opt for and more details based on your career goals. Let’s first see the things covered in this blog:

#aws #cloud computing #aws certification cost #aws certification exams

Ruth  Nabimanya

Ruth Nabimanya

1620633584

System Databases in SQL Server

Introduction

In SSMS, we many of may noticed System Databases under the Database Folder. But how many of us knows its purpose?. In this article lets discuss about the System Databases in SQL Server.

System Database

Fig. 1 System Databases

There are five system databases, these databases are created while installing SQL Server.

  • Master
  • Model
  • MSDB
  • Tempdb
  • Resource
Master
  • This database contains all the System level Information in SQL Server. The Information in form of Meta data.
  • Because of this master database, we are able to access the SQL Server (On premise SQL Server)
Model
  • This database is used as a template for new databases.
  • Whenever a new database is created, initially a copy of model database is what created as new database.
MSDB
  • This database is where a service called SQL Server Agent stores its data.
  • SQL server Agent is in charge of automation, which includes entities such as jobs, schedules, and alerts.
TempDB
  • The Tempdb is where SQL Server stores temporary data such as work tables, sort space, row versioning information and etc.
  • User can create their own version of temporary tables and those are stored in Tempdb.
  • But this database is destroyed and recreated every time when we restart the instance of SQL Server.
Resource
  • The resource database is a hidden, read only database that holds the definitions of all system objects.
  • When we query system object in a database, they appear to reside in the sys schema of the local database, but in actually their definitions reside in the resource db.

#sql server #master system database #model system database #msdb system database #sql server system databases #ssms #system database #system databases in sql server #tempdb system database