Cert Notes/ Commute Study Notes
Roadmap
KOEN
CLF-C02 · FoundationalCloud Practitioner - Foundational
DVA-C02 · AssociateDeveloper - Associate
SAA-C03 · AssociateSolutions Architect - Associate
SOA-C02 · AssociateCloudOps Engineer - Associate
SAP-C02 · ProfessionalSolutions Architect - Professional
  • Week 1
    • 1.The Game Called the SAP Exam: Hands-On Techniques for Decomposing Scenarios
    • 2.IAM, STS, and Federation: Splitting the Word "Permission" into Six Layers
    • 3.The Anatomy of a VPC: What Route Tables Really Decide
    • 4.Four Compute Pillars in Depth: Revisiting Nitro, EBS, ELB, and Auto Scaling Through a Pro Lens
    • 5.Week 1 Integration: When IAM, VPC, and EC2 Meet in a Single Scenario
  • Week 2
    • 1.AWS Organizations: A New Unit of Thought for Multi-Account Architecture
    • 2.Service Control Policy: The Ceiling as a Thinking Tool
    • 3.Control Tower and Landing Zone: Automating Governance
    • 4.IAM Identity Center, Permission Set, Consolidated Billing: Multi-Account SSO Standard
    • 5.Week 2 Integration: When Organizations·SCP·CT·IDC Meet in One Scenario
  • Week 3
    • 1.Share TGW via RAM from network account
    • 2.Cisco Router Example (BGP route-map)
    • 3.Create Customer Gateway (on-premises router IP and ASN)
    • 4.Interface Endpoint supported service examples
    • 5.Day 5
  • Week 4
    • 1.AWS Outposts, Local Zones, Wavelength: Extending the Cloud at the Boundary
    • 2.Storage Gateway 4 Types Comparison: Extending On-Premises Storage to the Cloud
    • 3.Snow Family and Large-Scale Data Transfer: The Moment Physics Beats the Internet
    • 4.EKS Anywhere, ECS Anywhere, Hybrid Containers: Extending Orchestration Boundaries
    • 5.Week 4 Review: Comprehensive Hybrid Cloud Architecture
  • Week 5
    • 1.Multi-Region Architecture: Why Global Distribution Is Difficult
    • 2.7 Route 53 Routing Policies: DNS Determines Architecture
    • 3.CloudFront Advanced: Why CDN Is More Than Simple Caching
    • 4.Route 53 Advanced: Health Check Algorithms, DNSSEC, Geoproximity Math, Hybrid DNS Resolver
    • 5.Week 5 Review: Global Architecture Integrated Scenarios
  • Week 6
    • 1.7R Migration Strategies: Decision Language for Cloud Migration
    • 2.AWS MGN Deep Dive: Physics of Block-Level Replication, DRS Comparison, Migration Hub Orchestrator
    • 3.AWS DMS + SCT: The Science of Database Migration
    • 4.Migration Acceleration Tools: App2Container, MAP, Migration Hub
    • 5.Week 6 Review: Integrated Migration Strategy Scenarios
  • Week 7
    • 1.Container Orchestration Crossroads: The Real Criteria for Choosing ECS, EKS, Fargate
    • 2.Inside EKS — Node Groups, IRSA, Karpenter Set the Operations Standard
    • 3.Fargate Cost Anatomy — Serverless Container's Real Price Tag
    • 4.Service Mesh Anatomy — App Mesh, Service Connect, Cloud Map Divergence
    • 5.Week 7 Synthesis — Container Scenario Practice 12 Questions
  • Week 8
    • 1.Day 1
    • 2.Day 2
    • 3.EventBridge: Unified Model of Event Bus, Pipes, and Scheduler
    • 4.AppSync GraphQL and the Essence of SQS/SNS/Kinesis Messaging
    • 5.Week 8 Comprehensive — 12 Serverless & Event Architecture Scenarios
  • Week 9
    • 1.Data Lake Architecture: Internal Operations and Cost Models of S3, Glue, Athena
    • 2.Redshift Deep Dive: MPP Internal Operations, RA3 Storage Separation, Spectrum and Zero-ETL
    • 3.EMR, Glue, MWAA: Big Data Orchestration and Distributed Processing Engines
    • 4.Lake Formation, Data Governance, MSK: Fine-Grained Permissions and Real-Time Streams Under the Hood
    • 5.Week 9 Comprehensive Review: Data Architecture as One Picture
  • Week 10
    • 1.SageMaker Deep Dive: ML Lifecycle, 4 Types of Inference Endpoints, Training Cost Math
    • 2.Bedrock Deep Dive: Generative AI Architecture, RAG Internals, Vector Search Math
    • 3.Managed AI Services Deep Dive: Pre-trained AI Selection Logic and Sync/Async Patterns
    • 4.MLOps Deep Dive: Science of Drift, Feature Store, Automated Retraining Pipelines
    • 5.Week 10 Comprehensive Review: ML/AI Architecture Decision-Making + 12 Scenario Problems
  • Week 11
    • 1.Day 1
    • 2.Detection Trinity: Internal Operations of Macie·GuardDuty·Inspector and Threat Detection
    • 3.Integrated Monitoring: Security Hub·Detective·Audit Manager Roles and Responsibilities
    • 4.Edge Security: WAF·Shield·Firewall Manager and Layered DDoS Defense
    • 5.Integrated Security: Encryption·Detection·Unified Monitoring·Edge Defense in One Scenario
  • Week 12
    • 1.Savings Plans·RI Strategy — Commitment Discount Math, Application Order Internal Operations, Organization Sharing
    • 2.Day 2
    • 3.Cost Explorer·Budgets·CUR — Layers of Cost Visibility, Budget Auto-Control, FinOps Data Pipeline
    • 4.Hidden Cost Anatomy — S3 Storage Tiers, Data Transfer Fee Structure, NAT Gateway Traps
    • 5.Integrated Cost Optimization: Commitment Economics and Hidden Cost Trade-Offs
  • Week 13
    • 1.Day 1
    • 2.Operational Excellence & Security Pillars Deep Dive — GitOps Roots, Shared Responsibility Model Boundaries, Three Types of Traceability Internals
    • 3.Reliability & Performance Efficiency Pillars Deep Dive — CAP Theorem, Idempotency and Retry Mathematics, HPC Networking Physics
    • 4.Cost & Sustainability Pillars Deep Dive — Unit Economics, Regulatory Roots of Carbon Accounting, Trade-Offs Between Two Pillars
    • 5.Well-Architected Comprehensive Review: Distilling Six Pillars Into One Scenario
  • Week 14
    • 1.Four DR Strategies and RTO/RPO Mapping — History of Disaster Recovery, Physics of Sync/Async Replication, Cloud DR Economics
    • 2.Backup: AWS Backup & Cross-Region Copy — Legal Origins of WORM, Vault Lock Irreversibility, Multi-Account Backup Governance
    • 3.Resilience Hub & Fault Injection Simulator — Birth of Chaos Engineering, Stop Condition's Safety Engineering, DR Verification Automation
    • 4.RDS, Aurora, DynamoDB Global DR — Sync/Async Replication Internals, Aurora Storage Architecture, Active-Active Conflict Resolution
    • 5.Resilience and DR Comprehensive Review: Four Strategies Honoring RTO/RPO and Validation Tools
  • Week 15
    • 1.Enterprise Global ERP Migration — Multi-Account Governance History, 7R Migration Anatomy, Data Sovereignty Legal & Technical Roots
    • 2.Startup Serverless-First Architecture — Cost-Zero Scaling, No Ops Overhead, Function Composition Limits
    • 3.Financial Services Compliance & Real-Time Settlement — FINRA/SOX/PCI-DSS Audit, Active-Active Multi-Region, Zero Data Loss
    • 4.Media & Entertainment Streaming — PB-Scale Global CDN, Real-Time Analytics, Cost Efficiency
    • 5.Healthcare & Public Sector — HIPAA/GxP/FEDRAMP, Immutable Audit, Highly Regulated Compliance
  • Week 16
    • 1.Well-Architected Framework Synthesis — 6 Pillars Integrated, Trade-offs Across Domains
    • 2.Exam Strategy & Question Patterns — Recognizing Trade-offs, Ruling Out Decoys, Time Management
    • 3.Cost Optimization Deep Dive — Reserved Capacity, Commitment Discounts, Unit Economics
    • 4.Migration & Rehost Strategies — 7Rs in Practice, Time + Data Volume Trade-offs
    • 5.Final Review & Exam Simulation — Full-Stack Scenario, Trade-off Decision Under Constraints
DOP-C02 · ProfessionalDevOps Engineer - Professional
SCS-C03 · SpecialtySecurity - Specialty
MLA-C01 · AssociateMachine Learning Engineer - Associate
AIF-C01 · FoundationalAI Practitioner - Foundational
DEA-C01 · AssociateData Engineer - Associate
MLS-C01 · SpecialtyMachine Learning - Specialty
← SAP-C02/Week 7/Day 4
SAP-C02· ProWeek 7 · Day 4~33 min read

Day 4 - Service Mesh Anatomy — App Mesh, Service Connect, Cloud Map Divergence

Spin up 10 microservices, new problems begin. How does service-a know service-b's IP? When service-b suddenly returns 5xx, how fast should service-a retry? To encrypt all comms with mTLS, who issues and rotates certificates? For canary-deploying new versions to 10% traffic, where does routing split? Solving all in application code bloats it with infrastructure logic. Service mesh moves this problem to sidecar proxies outside code. SAP exams frequently ask scenarios distinguishing AWS' three options: Cloud Map, ECS Service Connect, App Mesh.

This article examines why service mesh emerged, how sidecar proxies intercept traffic, responsibility division

The rest is Pro only

Week 1 is free for everyone. Week 2 onwards — plus mock exams and unlimited review — is included in the Pro plan.

See ProLogin
PreviousFargate Cost Anatomy — Serverless Container's Real Price TagWeek 7 · Day 3Next Week 7 Synthesis — Container Scenario Practice 12 QuestionsWeek 7 · Day 5