DAY8 -Bonus

Overview Today, I’ll summarize the key points of the services that weren't covered in the hands-on sessions but appear frequently on the exam! ※You can check the exam scope from the link below. https://docs.aws.amazon.com/aws-certification/latest/examguides/sap-02-in-scope-services.html 1. AWS Organizations governance tool that allows centralized management of multiple AWS accounts. SCP imposes maximum permission restrictions (i.e., even if SCP permits an action, it cannot be performed without corresponding IAM permissions). 2. CloudTrail / AWS Config can check API call history using CloudTrail can check resource State History using AWS Config 3. KMS / Secrets Manager / ACM KMS : create/manage the encryption keys and control key usage Secrets Manager : rotate DB passwords ACM : manage certificates for ALB, CloudFront, API GW... 4. CloudFront / Global Accelerator CloudFront : Cache and distribute at the edge CDN Global Accelerator : Enter the nearest AWS edge and transport to the optima