Course → 3 · Architect for SAA → HA, cost & security patterns
3 · Architect for SAA
Cost and security tradeoffs
15 min · Module 6
Cost: right-size, Savings Plans/RIs, Spot for fault-tolerant workloads, S3 lifecycle, turn off idle. Security: least privilege, private subnets, encryption (KMS), CloudTrail, GuardDuty, WAF on ALB/CloudFront.
Example / notes
# Cost levers: scheduling nonprod · GP3 vs io2 · S3 IA/Glacier · NAT vs endpoints
# Security: SG least ports · no 0.0.0.0/0 on SSH/RDP · SSM Session Manager · KMS CMKsPractice in Lab: /lab/
Modules in this track
- 6. HA, cost & security patterns
- 7. Migration & hybrid scenarios