Configure Amazon S3, including storage classes, lifecycle policies, versioning, encryption, and access control

Select and implement block and file storage with EBS volumes, EFS file systems, and S3 Glacier for archival

Design multi-tier VPC architectures with public and private subnets, routing, internet gateways, and security controls

Design and deploy EC2 instances using the right instance types, AMIs, and purchasing options for performance and cost

Manage the EC2 lifecycle, including security groups, patching, monitoring, and services such as AWS Batch and ECS

Implement IAM users, groups, roles, and policies to enforce least privilege access control across AWS resources

Implement IAM best practices, including Control Tower governance, Service Control Policies, and CloudTrail for multi-account environments

Configure EC2 Auto Scaling groups and scaling policies to keep applications available and cost-efficient under variable load

Configure Route 53, network ACLs, and VPC Flow Logs to support secure, well-monitored AWS networks

Build serverless and cloud-native applications with Lambda, API Gateway, CloudFormation, and messaging and streaming services

Design and deploy relational databases with Amazon RDS and Aurora, including replication, backup, and failover

Select and implement NoSQL and data warehouse options such as DynamoDB and Redshift for high-performance applications

Identify and select additional AWS services for analytics, caching, media delivery, DevOps, backup, and cost management

Apply the five pillars of the AWS Well-Architected Framework to evaluate and improve cloud architectures

Optimize AWS architectures for operational excellence, including automation, observability, and continuous improvement