Overview
This domain focuses on designing and implementing resilient, highly available, and fault-tolerant cloud solutions that can withstand failures and maintain service continuity.
Domain Weight: 15% of exam
Key Topics Covered
3.1 High Availability and Fault Tolerance
- Multi-AZ deployments and cross-region architectures
- Auto Scaling for dynamic capacity management
- Load balancing and traffic distribution
- Database high availability and replication
3.2 Disaster Recovery and Business Continuity
- Backup and recovery strategies
- Cross-region replication and failover
- RTO/RPO requirements and implementation
- Disaster recovery automation
3.3 Scalability and Performance
- Horizontal and vertical scaling patterns
- Performance optimization techniques
- Caching strategies and content delivery
- Resource right-sizing and optimization
3.4 Resilience Patterns
- Circuit breaker and retry mechanisms
- Graceful degradation and fallback strategies
- Health checks and monitoring
- Self-healing architectures
Files in this Domain
Core Resilience Services
- Auto-Scaling-General.md - Comprehensive Auto Scaling guide for EC2, ECS, and Application Auto Scaling
- ELB-General.md - Elastic Load Balancing for high availability and traffic distribution
- RDS-Multi-AZ-General.md - Database high availability, Multi-AZ, and read replicas
- RDS-BlueGreen-General.md - RDS Blue/Green deployments for minimal-downtime upgrades
- Route53-General.md - DNS routing, health checks, and global load balancing
- S3-Cross-Region-Replication.md - Data replication and disaster recovery strategies
- EKS-General.md - Kubernetes container orchestration for resilient applications
- Global-Accelerator-General.md - Anycast IPs, traffic dials, sub-minute failover
- Resilience-Hub-General.md - Resilience score, RTO/RPO assessment, CI/CD integration
- AWS-Backup-General.md - Centralized backup across AWS services
- ECS-Deployments-General.md - ECS deployment strategies
- ElastiCache-Resilience-General.md - ElastiCache resilience patterns
Key Concepts
High Availability Principles
- Redundancy - Multiple instances across AZs and regions
- Fault Isolation - Failure in one component doesn’t affect others
- Automated Recovery - Self-healing and automatic failover
- Monitoring - Continuous health monitoring and alerting
- Testing - Regular disaster recovery testing and validation
Scalability Patterns
- Horizontal Scaling - Adding more instances to handle load
- Vertical Scaling - Increasing instance size and capacity
- Auto Scaling - Dynamic scaling based on demand
- Predictive Scaling - ML-based capacity planning
- Scheduled Scaling - Time-based scaling for predictable patterns
Disaster Recovery Strategies
- Backup and Restore - Lowest cost, highest RTO/RPO
- Pilot Light - Minimal infrastructure always running
- Warm Standby - Scaled-down version always running
- Multi-Site Active/Active - Full capacity in multiple sites
Architecture Patterns
Multi-Tier Resilient Architecture
Internet Gateway
↓
Application Load Balancer (Multi-AZ)
↓
Auto Scaling Group (Multi-AZ)
↓
RDS Multi-AZ with Read Replicas
↓
S3 with Cross-Region ReplicationGlobal Resilient Architecture
Route 53 (Global DNS)
↓
CloudFront (Global CDN)
↓
Multiple Regions with:
- ALB + Auto Scaling Groups
- RDS Multi-AZ + Cross-Region Read Replicas
- S3 Cross-Region ReplicationMicroservices Resilience
API Gateway
↓
Lambda Functions (Multi-AZ)
↓
DynamoDB Global Tables
↓
EventBridge for Decoupling
↓
SQS/SNS for Async ProcessingResilience Design Principles
1. Design for Failure
- Assume components will fail
- Plan for graceful degradation
- Implement circuit breakers
- Use timeouts and retries
2. Loose Coupling
- Decouple components with queues
- Use event-driven architectures
- Implement service discovery
- Avoid tight dependencies
3. Horizontal Scaling
- Design stateless applications
- Use load balancers for distribution
- Implement auto scaling policies
- Plan for elastic capacity
4. Automation
- Automate deployment processes
- Implement self-healing mechanisms
- Use infrastructure as code
- Automate testing and validation
Monitoring and Observability
Key Metrics to Monitor
- Availability - Uptime and service availability
- Performance - Response times and throughput
- Error Rates - Application and infrastructure errors
- Capacity - Resource utilization and scaling metrics
- Business Metrics - User experience and business KPIs
Health Check Strategies
- Application Health Checks - Deep application validation
- Infrastructure Health Checks - System-level monitoring
- Dependency Health Checks - External service monitoring
- Synthetic Monitoring - Proactive user experience testing
Alerting and Response
- Tiered Alerting - Different severity levels
- Escalation Procedures - Automated escalation paths
- Runbooks - Documented response procedures
- Post-Incident Reviews - Continuous improvement
Cost Optimization for Resilience
Right-Sizing Strategies
- Instance Optimization - Choose appropriate instance types
- Reserved Capacity - Long-term cost savings
- Spot Instances - Cost-effective for fault-tolerant workloads
- Storage Optimization - Appropriate storage classes and lifecycle policies
Multi-Region Cost Considerations
- Data Transfer Costs - Cross-region replication charges
- Regional Pricing - Different costs across regions
- Reserved Instance Planning - Regional vs. AZ-specific reservations
- Disaster Recovery Costs - Balance cost vs. RTO/RPO requirements
Security in Resilient Architectures
Security Best Practices
- Defense in Depth - Multiple security layers
- Least Privilege - Minimal required permissions
- Encryption - Data at rest and in transit
- Network Segmentation - VPC and subnet isolation
- Regular Updates - Patch management and updates
Compliance Considerations
- Data Residency - Regional data requirements
- Audit Trails - Comprehensive logging and monitoring
- Backup Retention - Compliance-driven retention policies
- Access Controls - Role-based access management
Common Exam Scenarios
- Design highly available web application - Multi-AZ ALB + Auto Scaling + RDS Multi-AZ
- Implement disaster recovery for critical database - RDS Multi-AZ + Cross-region read replicas
- Create global content delivery system - CloudFront + S3 + Cross-region replication
- Design fault-tolerant microservices - API Gateway + Lambda + DynamoDB Global Tables
- Implement automated scaling for variable workloads - Auto Scaling policies + CloudWatch metrics
- Create cross-region failover for DNS - Route 53 health checks + failover routing
- Design cost-effective disaster recovery - Pilot light or warm standby architecture
- Implement self-healing infrastructure - Auto Scaling + health checks + automated replacement
- Create resilient data pipeline - Multi-AZ processing + S3 replication + SQS/SNS
- Design global database architecture - Aurora Global Database + read replicas
Study Tips
Focus Areas
- Understand RTO/RPO requirements and implementation strategies
- Know Auto Scaling policies and integration patterns
- Practice designing multi-AZ and cross-region architectures
- Understand load balancing algorithms and health checks
- Know disaster recovery patterns and cost implications
Hands-on Practice
- Set up Multi-AZ RDS with read replicas
- Configure Auto Scaling groups with different policies
- Implement Route 53 health checks and failover
- Set up S3 cross-region replication
- Practice load balancer configuration and testing
Architecture Design
- Practice drawing resilient architectures
- Understand service integration patterns
- Know when to use different AWS services
- Understand cost vs. resilience trade-offs
- Practice failure scenario analysis
Additional Resources
AWS Documentation
Best Practices
Tools and Services
Key Takeaways
Design Principles
- Plan for Failure - Assume components will fail and design accordingly
- Automate Everything - Reduce human error through automation
- Test Regularly - Validate disaster recovery procedures
- Monitor Continuously - Implement comprehensive monitoring and alerting
Implementation Strategies
- Start Simple - Begin with basic HA and add complexity as needed
- Measure Everything - Use metrics to drive resilience improvements
- Document Procedures - Maintain runbooks and response procedures
- Learn from Failures - Conduct post-incident reviews and improvements
Cost vs. Resilience Balance
- Understand Requirements - Know your RTO/RPO requirements
- Right-Size Solutions - Don’t over-engineer for requirements
- Use Appropriate Services - Choose services that match your needs
- Regular Review - Continuously optimize cost and resilience balance
Domain 3: Resilient Cloud Solutions
AWS Auto Scaling
1. Overview What is Auto Scaling? Automatically adjusts compute capacity based on demand Maintains application availability and performance Optimizes costs by scaling resources up …
read moreDomain 3: Resilient Cloud Solutions
AWS Backup
What it is: Centralized, policy-based backup orchestration across AWS services — one place to define what gets backed up, how often, how long it’s kept, and where copies go, …
read moreDomain 3: Resilient Cloud Solutions
AWS EKS (Elastic Kubernetes Service)
1. Overview What is EKS? Managed Kubernetes service for running containerized applications Provides highly available and secure Kubernetes control plane Integrates with AWS …
read moreDomain 3: Resilient Cloud Solutions
AWS Elastic Load Balancing (ELB)
1. Overview What is ELB? Distributes incoming traffic across multiple targets Provides high availability and fault tolerance Automatically scales to handle traffic demands …
read moreDomain 3: Resilient Cloud Solutions
AWS Global Accelerator
1. Overview What it is: A global networking service that routes user traffic through the AWS global network backbone to your application endpoints, improving availability and …
read moreDomain 3: Resilient Cloud Solutions
AWS RDS Multi-AZ and High Availability
Related: For zero-downtime engine upgrades and schema changes, see RDS-BlueGreen-General.md.
1. Overview What is RDS Multi-AZ? Synchronous replication to standby instance in …
read moreDomain 3: Resilient Cloud Solutions
AWS Resilience Hub
1. Overview What it is: A service that assesses, validates, and tracks the resilience of your AWS applications against defined RTO and RPO targets — giving you a resilience score …
read moreDomain 3: Resilient Cloud Solutions
AWS Route 53
1. Overview What is Route 53? Highly available and scalable DNS web service Domain registration and DNS routing service Health checking and failover capabilities Global service …
read moreDomain 3: Resilient Cloud Solutions
AWS S3 Cross-Region Replication
1. Overview What is S3 Cross-Region Replication (CRR)? Automatic, asynchronous replication of objects across AWS regions Provides disaster recovery and compliance capabilities …
read moreDomain 3: Resilient Cloud Solutions
ECS Deployments
What it is: How new container revisions reach production on ECS — the resilient-deployment core for container workloads.
Exam-testable facts:
Deployment controllers: ECS (default), …
read moreDomain 3: Resilient Cloud Solutions
ElastiCache Resilience
What it is: In-memory data store (Redis/Valkey, Memcached). The resilience story is two features people constantly confuse.
Exam-testable facts:
Redis replication group: 1 primary …
read moreDomain 3: Resilient Cloud Solutions
RDS Blue/Green Deployments
Launched: November 2022 for RDS MySQL, MariaDB, and Aurora MySQL. PostgreSQL support added later. This is a tested resilience and deployment pattern — know it alongside Multi-AZ …
read more