AWS Advanced Architecture Training Course: Design hybrid, multi-account and resilient architectures
Key information
Upcoming sessions
Would you like to schedule this training on a specific date? Contact us by email or via the contact form.
Description of the training: AWS Advanced Architecture Training Course: Design hybrid, multi-account and resilient architectures
The AWS Advanced Architecture training course picks up where a first experience as an AWS architect leaves off and takes you into real-world territory: several accounts, several regions, a permanent link to the data centre, and availability requirements that no longer tolerate approximation.
You work on what separates an architecture that functions from one that holds: account segregation under AWS Organizations, the design of reliable hybrid connectivity, disaster recovery strategies and what they actually cost, economic optimisation of an estate at scale. Every architectural decision is examined through its trade-offs — performance against cost, flexibility against governance, speed against resilience.
Over 3 days, most of the time is spent in the console and on the command line: you build, you break, you measure. The programme follows the syllabus of the AWS Certified Solutions Architect – Professional (SAP-C02) certification and prepares you for its scenarios, which are less exam questions than architect’s judgement calls.
To place this course in a pathway: our AWS Solutions Architect Training Course lays the foundations (SAA-C03), and our AWS Essential Services Training Course covers the building blocks. Cost hardening belongs to our AWS FinOps Training Course. For containerised architectures, see our AWS EKS Training Course; for data, our AWS Data Engineer Training Course; for a data centre exit, our AWS Migration Training Course. Finally, our Terraform Fundamentals Training Course industrialises the deployment of your architectures.
Good to know
Sessions are guaranteed from a single registrant (except in cases of force majeure). A preliminary discussion takes place between the participant and/or a company representative to fully take into account the participant’s profile. Assessment: quizzes, role-play and practical exercises. A certificate of completion is issued at the end of the training. This training prepares you for the AWS Certified Solutions Architect – Professional (SAP-C02) certification (exam not included). This training is part of our Cloud Computing Training Courses catalogue. Discover our other cloud training courses to master architectures, services and best practices on AWS, Azure and GCP. To get started on AWS, we recommend our AWS Cloud Practitioner Training Course as a prerequisite, which lays the foundations of the Amazon Cloud.
Objectives of the training: AWS Advanced Architecture Training Course: Design hybrid, multi-account and resilient architectures
By the end of the training, participants will be able to:
- Structure a multi-account environment with AWS Organizations, organisational units and Service Control Policies.
- Design hybrid connectivity between the information system and AWS (Direct Connect, Site-to-Site VPN, Transit Gateway).
- Select and size a disaster recovery strategy based on RTO and RPO objectives.
- Migrate existing workloads to AWS, weighing up rehost, replatform and refactor scenarios.
- Design decoupled, elastic architectures capable of absorbing load spikes.
- Steer and reduce the bill of an AWS estate at scale (right-sizing, commitments, cost governance).
- Justify architectural choices using the pillars of the AWS Well-Architected Framework.
Prerequisites of the training: AWS Advanced Architecture Training Course: Design hybrid, multi-account and resilient architectures
Solid hands-on AWS practice is essential: this training assumes that compute, storage and networking services are already familiar to you. The AWS Solutions Architect – Associate certification, or equivalent design experience on AWS, is the expected starting point.
A good command of networking (routing, BGP, VPN, DNS) and some notions of infrastructure as code will make the hybrid connectivity and automation modules considerably easier.
Because every participant is unique, a personalised discussion with our expert allows us to design a training course perfectly aligned with their objectives.
Target audience of the training: AWS Advanced Architecture Training Course: Design hybrid, multi-account and resilient architectures
- Experienced cloud architects designing multi-account or multi-region environments.
- Infrastructure and DevOps engineers responsible for connectivity between the data centre and AWS.
- Technical leads who must arbitrate between availability, cost and operational complexity.
- Consultants and pre-sales engineers preparing for the Solutions Architect – Professional certification.
Detailed programme of the training: AWS Advanced Architecture Training Course: Design hybrid, multi-account and resilient architectures
Multi-account governance and estate organisation
- Why a single account does not scale: blast radius, quotas, environment segregation. Setting up AWS Organizations: organisational units, management and member accounts. Applying guardrails through Service Control Policies. Consolidated billing. Identity federation and cross-account access with IAM Identity Center and assumable roles. Industrialising account creation with AWS Control Tower.
Hybrid connectivity and networking at scale
- Interconnecting the data centre and AWS: Site-to-Site VPN for a quick start, Direct Connect for a dedicated link, and the architectures that combine both for redundancy. VPC topologies at scale: peering, Transit Gateway, PrivateLink and service endpoints. Hybrid DNS resolution with Route 53 Resolver. BGP routing, path preference and failover. Lab: establish redundant connectivity between two VPCs and a network simulating on-premises.
Resilience, high availability and disaster recovery
- Translating business requirements into measurable objectives: RTO and RPO. The four main recovery strategies — backup and restore, pilot light, warm standby, multi-site active — and what each one really costs. Multi-AZ then multi-region design: data replication, DNS failover, consistency and latency. Centralised backup with AWS Backup. Testing the recovery plan: a plan that has never been rehearsed does not exist.
Migrating workloads to AWS
- Framing a migration: inventory, dependencies, prioritisation criteria. Migration strategies and their long-term consequences (rehost, replatform, refactor, retire, retain). Migration tooling: Application Migration Service for servers, Database Migration Service and Schema Conversion Tool for databases, DataSync and the Snow Family for bulk data. Wave-based migration, cutover and rollback. Dealing with application debt during rather than after.
Decoupled, elastic and event-driven architectures
- Decoupling to absorb load and isolate failures: Amazon SQS queues, Amazon SNS publish/subscribe, event routing with EventBridge. Orchestrating long-running workflows with Step Functions. Auto scaling and scaling policies. Containers on ECS and EKS, serverless compute with Lambda: how to choose. Idempotency, error handling and dead-letter queues.
Cost optimisation and financial governance
- Understand where the bill comes from before trying to cut it. Right-sizing and detection of idle resources. Commitment models: Savings Plans and Reserved Instances, trading savings against flexibility. Spot Instances for interruption-tolerant workloads. S3 storage classes and lifecycle policies. Establishing governance: tagging, budgets, alerts, cost allocation across teams.
Security, compliance and the Well-Architected Framework
- Cross-cutting security across a multi-account estate: encryption and key management with KMS, application secrets, centralised logging with CloudTrail and threat detection with GuardDuty. Data perimeter and resource policies. Reviewing an architecture through the pillars of the AWS Well-Architected Framework: operational excellence, security, reliability, performance, cost, sustainability. Capstone workshop: critique and correct an architecture subject to conflicting constraints.
Course highlights
- addresses AWS architecture at the level where trade-offs become genuinely hard: multi-account, hybrid, multi-region;
- follows the syllabus of the AWS Certified Solutions Architect – Professional (SAP-C02) certification and prepares you for its scenarios;
- devotes around 60% of the time to hands-on work in the console and on the command line;
- runs in a group of 1 to 3 participants, which allows work on your own architectural constraints.
FAQ
How does this differ from the AWS Solutions Architect training course?
The Solutions Architect course lays the foundations: designing a correct architecture on a single AWS account. Advanced Architecture comes next, when the constraint is no longer to make the architecture work but to make it hold at scale — multiple accounts, a permanent link to the data centre, a tested recovery plan, a controlled bill. The two complement each other and follow on naturally.
Do I need the Solutions Architect Associate certification to enrol?
It is not mandatory, but the expected level matches that certification. In practice, you should be comfortable with EC2, S3, VPC, IAM and RDS without having to rediscover them. If that is not the case, the preliminary discussion allows us to point you towards the Solutions Architect course first.
Does the course prepare for the SAP-C02 exam?
The programme follows the syllabus of the AWS Certified Solutions Architect – Professional certification and works through the scenarios that form its core. The exam itself is not included: it is taken at an authorised Pearson VUE centre or online.
Can we work on our own architecture cases?
Yes, and that is precisely the point of the 1-to-3-participant format. The preliminary discussion is used to gather your real constraints, which the trainer incorporates into the labs wherever they fit.