SAA Final Review — AWS Study Handbook

Review order

Narrow a scenario to two choices using keywords.
Explain why the remaining options violate a requirement.
Identify priorities such as least operations, highest availability, or lowest cost.
Draw common three-tier, event-driven, and multi-account governance architectures.

Explain migration with the three phases and 7Rs, and distinguish Evaluator, Discovery, Migration Hub, Transform MGN, DMS, DataSync, and Transfer Family.
Distinguish AppSync, Amplify, Connect, SES, the three WorkSpaces delivery models, and IoT Core keywords.
Map the former names Application Migration Service, AppStream 2.0, and WorkSpaces Web to their current service names.
Distinguish root, IAM user, group, policy, role, and Identity Center; groups do not nest and users may join several.
Explain implicit Deny, explicit Deny, managed / inline / resource-based policies, and Principal.
Distinguish password policy, MFA, long-term access keys, and temporary credentials with a session token.
Troubleshoot visibility through account → identity → Region → permission → filter / state.

Separate HA, read scaling, caching, and backup/DR; one mechanism does not solve all four.
ELB Active, ASG InService, target Registered, and target Healthy are different states.
DNS policies select answers rather than proxy requests, and TTL delays changes.
At-least-once delivery requires idempotent consumers; retries need DLQs, observability, and poison-message handling.
Savings Plans/Regional RIs address price, Capacity Reservations address capacity, and Dedicated Hosts address isolation and host control.
Serverless reduces server operations but not quota, cold-start, state, retry, and cost design.