How to Pass the Amazon Web Services SOA-C01 Exam: Comprehensive AWS Certified SysOps Administrator - Associate Guide and Tips

Create an EC2 instance launch configuration. Allow the business units to launch EC2 instances by specifying this launch configuration in the AWS Management Console

Develop an 1AM policy that limits the business units to provision EC2 instances only Instruct the business units to launch instances by using an AWS CtoudFormation template.

Publish a product and launch constraint role for EC2 instances by using AWS Service Catalog Allow the business units to perform actions in AWS Service Catalog only

Share an AWS CloudFormation template with the business units Instruct the business units to pass a role to AWS CloudFormation to allow the service to manage EC2 instances.

Configure an Amazon Lambda function to automatically start the instance if it is stopped

Create an Amazon Machine Image (AMI) of the instance and use the AMI to launch a new instance once the existing instance is retired

Enable termination protection on the EC2 instance

Stop and start the EC2 instance during a maintenance window outside of normal business hours

Back up the current KMS key and enable automatic key rotation.

Create a new key in AWS KMS and assign the key to Amazon EBS.

Enable automatic key rotation of the EBS volume key in AWS KMS.

Upload ne key material to the EBS volume key in AWS KMS to enable automatic key rotation for the volume.

Create an IAM EC2 role for the EC2 instances and grant the role permission to read the Systems Manager parameters

Create an IAM group for the application and grant the group permissions to read the Systems Manager parameters

Create an IAM policy for the application and grant the policy permission to read the Systems Manager parameters

Create an IAM user for the application and grant the user permission to read the Systems Manager parameters

Create a service control policy in AWS Organizations and apply it to the development account.

Create a customer managed policy in IAM and apply it to all users within the development account.

Create a job function policy in IAM and apply it to all users within the development account.

Create an IAM policy and apply it in API Gateway to restrict the development account.

Performing underlying OS updates

Provisioning of storage for database

Scheduling maintenance, patches, and other updates

Executing maintenance, patches, and other updates

AWS CloudTrail

Amazon Inspector

AWS Shield Standard

AWS WAF

The warm-up period has not expired

The instances are still in the boot process

The instances have not been attached to the Auto Scaling group

The instances are included in a different set of metrics

Use AWS Budgets to report on low utilization of EC2 instances.

Run an AWS Systems Manager script to check for low memory utilization of EC2 instances.

Run Cost Explorer to look for low utilization of EC2 instances.

Use Amazon CloudWatch metrics to identify EC2 instances with low utilization.

Write a script to download the encrypted snapshot decrypt it using the AWS KMS encryption key used to encrypt the snapshot then create a new volume in each account

date the key policy to grant permission to the AWS KMS encryption key used to encrypt the snapshot with all relevant accounts then share the snapshot with those accounts

Create an Amazon EC2 instance based on the snapshot, then save the instance's Amazon EBS volume as a snapshot and share it with the other accounts Require each account owner to create a new volume from that snapshot and encrypt it

Create a new unencrypted RDS instance from the encrypted snapshot connect to the instance using SSH/RDP, export the database contents into a file then share this file with the other accounts