View a markdown version of this page

Content Domain 5: Operational Excellence and Automation - AWS Certified Solutions Architect - Professional
Task 5.1: Design infrastructure as code.Task 5.2: Design CI/CD and DevSecOps pipelines.Task 5.3: Design observability and monitoring solutions.Task 5.4: Design operational automation and resilient systems.

Content Domain 5: Operational Excellence and Automation

Task 5.1: Design infrastructure as code.

  • Skill 5.1.1: Implement infrastructure as code by using declarative and imperative approaches (for example, AWS CloudFormation, AWS CDK).

  • Skill 5.1.2: Design policy as code to perform proactive validation, enforcement, and drift remediation (for example, by using AWS CloudFormation Hooks, AWS CDK aspects, AWS Config rules, SCPs).

  • Skill 5.1.3: Manage secrets in infrastructure code (for example, by using AWS Secrets Manager, AWS Systems Manager Parameter Store).

  • Skill 5.1.4: Design multi-account and multi-Region infrastructure deployments (for example, by using CloudFormation StackSets).

Task 5.2: Design CI/CD and DevSecOps pipelines.

  • Skill 5.2.1: Design CI/CD solutions to orchestrate automated build and deployment pipelines (for example, by using AWS CodePipeline, AWS CodeBuild, AWS CodeDeploy, AWS CodeCommit).

  • Skill 5.2.2: Implement security scanning in pipelines to assess vulnerabilities and sign artifacts (for example, by using Amazon Inspector, Amazon ECR image scanning).

  • Skill 5.2.3: Configure multi-account and multi-Region deployment pipelines that include features such as role delegation and artifact promotion (for example, by using CodePipeline cross-account deployments).

  • Skill 5.2.4: Evaluate AI/ML applications and validate outputs (for example, by using Amazon Bedrock Evaluations).

  • Skill 5.2.5: Implement deployment strategies that provide rollback capabilities (for example, blue/green, canary, rolling deployments).

Task 5.3: Design observability and monitoring solutions.

  • Skill 5.3.1: Implement observability by collecting metrics, logs, and distributed tracing by using standardized instrumentation (for example, by using Amazon CloudWatch, AWS X-Ray, AWS Distro for OpenTelemetry).

  • Skill 5.3.2: Implement monitoring for containerized applications (for example, by using Amazon ECS, Amazon EKS with Container Insights).

  • Skill 5.3.3: Implement multi-account log aggregation with cross-account subscriptions and centralized archives (for example, by using Amazon CloudWatch Logs subscriptions, Amazon S3 archival storage tiers).

  • Skill 5.3.4: Configure alerting solutions (for example, by using CloudWatch alarms, Amazon SNS, AWS Systems Manager).

  • Skill 5.3.5: Monitor metrics for AI/ML workloads, including model performance, AI agent performance, inference latency, and model drift.

  • Skill 5.3.6: Design monitoring solutions for the user experience by using strategies such as synthetic transactions and real user monitoring (for example, by using Amazon CloudWatch Synthetics, Amazon CloudWatch RUM).

  • Skill 5.3.7: Design service-level objectives (SLOs) that have measurable indicators and alerts (for example, by using CloudWatch, CloudWatch Application Signals).

Task 5.4: Design operational automation and resilient systems.

  • Skill 5.4.1: Implement health monitoring, capacity planning, and operational responses (for example, by using CloudWatch alarms, Amazon EventBridge, AWS Systems Manager, Service Quotas).

  • Skill 5.4.2: Configure controlled remediation solutions that have safety constraints (for example, circuit breakers, rate limits, bulkhead patterns, retry patterns with exponential backoff).

  • Skill 5.4.3: Configure auto scaling policies that are based on metrics and scheduled scaling policies (for example, target tracking scaling, predictive scaling for Auto Scaling groups).

  • Skill 5.4.4: Design automated failure recovery solutions that use health checks and replacement strategies (for example, by using Auto Scaling health checks, Amazon ECS task replacement, AWS Lambda retry policies).

  • Skill 5.4.5: Configure automated runbooks and incident response procedures for operational tasks such as patching, remediation, and scaling.