Content Domain 2: Configuration Management and IaC - AWS Certification
Task Statement 2.1: Define cloud infrastructure and reusable components to provision and manage systems throughout their lifecycle.Task Statement 2.2: Deploy automation to create, onboard, and secure AWS accounts in a multi-account or multi-Region environment.Task Statement 2.3: Design and build automated solutions for complex tasks and large-scale environments.

Content Domain 2: Configuration Management and IaC

Task Statement 2.1: Define cloud infrastructure and reusable components to provision and manage systems throughout their lifecycle.

Knowledge of:

  • Infrastructure as code (IaC) options and tools for AWS

  • Change management processes for IaC-based platforms

  • Configuration management services and strategies

Skills in:

  • Composing and deploying IaC templates (for example, AWS Serverless Application Model [AWS SAM], AWS CloudFormation, AWS Cloud Development Kit [AWS CDK])

  • Applying CloudFormation stack sets across multiple accounts and AWS Regions

  • Determining optimal configuration management services (for example, AWS OpsWorks, AWS Systems Manager, AWS Config, AWS AppConfig)

  • Implementing infrastructure patterns, governance controls, and security standards into reusable IaC templates (for example, AWS Service Catalog, CloudFormation modules, AWS CDK)

Task Statement 2.2: Deploy automation to create, onboard, and secure AWS accounts in a multi-account or multi-Region environment.

Knowledge of:

  • AWS account structures, best practices, and related AWS services

Skills in:

  • Standardizing and automating account provisioning and configuration

  • Creating, consolidating, and centrally managing accounts (for example, AWS Organizations, AWS Control Tower)

  • Applying IAM solutions for multi-account and complex organization structures (for example, SCPs, assuming roles)

  • Implementing and developing governance and security controls at scale (AWS Config, AWS Control Tower, AWS Security Hub, Amazon Detective, Amazon GuardDuty, Service Catalog, SCPs)

Task Statement 2.3: Design and build automated solutions for complex tasks and large-scale environments.

Knowledge of:

  • AWS services and solutions to automate tasks and processes

  • Methods and strategies to interact with the AWS software-defined infrastructure

Skills in:

  • Automating system inventory, configuration, and patch management (for example, Systems Manager, AWS Config)

  • Developing AWS Lambda function automations for complex scenarios (for example, AWS SDKs, Lambda, AWS Step Functions)

  • Automating the configuration of software applications to the desired state (for example, OpsWorks, Systems Manager State Manager)

  • Maintaining software compliance (for example, Systems Manager)