[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cheat-sheet---en":3,"domain-info---en":3,"topic-info----en":3,"lesson-aws-certified-cloudops-engineer-associate-deployment-provisioning-automation-operational-automation-parameter-store-for-configuration-en":4,"prev-aws-certified-cloudops-engineer-associate-deployment-provisioning-automation-operational-automation-parameter-store-for-configuration-en":22,"next-aws-certified-cloudops-engineer-associate-deployment-provisioning-automation-operational-automation-parameter-store-for-configuration-en":36},null,{"locked":5,"reason":6,"meta":7,"item":3},true,"paywall",{"title":8,"description":9,"isFree":10,"estimatedMinutes":11,"difficulty":12,"learningObjectives":13},"Parameter Store for Configuration","Centralize configuration in Parameter Store: the three parameter types and SecureString encryption, hierarchies and the IAM path trap, the standard and advanced tiers, parameter policies, versions and labels, the 40 TPS throughput ceiling that breaks scale-out events, public parameters, CloudFormation dynamic references, and where Secrets Manager takes over.",false,28,"intermediate",[14,15,16,17,18,19,20,21],"Choose between String, StringList, and SecureString, and describe exactly what SecureString encrypts","Design a parameter hierarchy within the naming constraints, and explain why an explicit IAM deny on a child path can be bypassed","Compare the standard and advanced tiers and identify which decisions are irreversible","Apply Expiration, ExpirationNotification, and NoChangeNotification policies, and avoid the overwrite trap","Predict the behavior of parameter versions and labels at their limits","Diagnose a ThrottlingException during a scale-out event and choose between reducing calls and enabling higher throughput","Reference parameters from CloudFormation with the ssm and ssm-secure dynamic reference patterns","Decide when a workload needs Secrets Manager instead of Parameter Store",{"locked":5,"reason":6,"meta":23,"item":3},{"title":24,"description":25,"isFree":10,"estimatedMinutes":26,"difficulty":27,"learningObjectives":28},"Patch and State Management","Keep a fleet patched and stop it drifting: Scan versus Install, patch baseline approval rules and their 7-day default, how patch groups pick a baseline, the compliance states and the reboot option that produces them, maintenance windows with duration and cutoff, patch policies, and State Manager associations.",32,"advanced",[29,30,31,32,33,34,35],"Distinguish a Scan operation from an Install operation and predict the compliance data each produces","Read a patch baseline's approval rules, including auto-approval delay, approve-until date, and the two rejected patches actions","Trace which patch baseline a node uses from its Patch Group tag, including the two cases that fall back to the default baseline","Map each patch compliance state to its cause, and explain how the RebootOption parameter produces InstalledPendingReboot","Configure a maintenance window with a duration, a cutoff, task priorities, and rate control, and predict what happens at cutoff","Choose between a patch policy, a maintenance window, and a State Manager association for a given patching or configuration requirement","Explain what a State Manager association enforces and why it applies itself to newly launched instances",{"locked":5,"reason":6,"meta":37,"item":3},{"title":38,"description":39,"isFree":10,"estimatedMinutes":40,"difficulty":12,"learningObjectives":41},"Event-Driven Operations Automation","Wire routine operational work to run itself: S3 Event Notifications and their delivery guarantees, direct destinations versus EventBridge, EventBridge Scheduler for time-based work, choosing where a schedule lives among four AWS mechanisms, Lambda versus an Automation runbook, and Change Calendar as a guardrail.",24,[42,43,44,45,46,47],"Configure S3 Event Notifications and account for at-least-once delivery, variable latency, and the recursion hazard","Choose between an S3 direct destination and routing S3 events through EventBridge","Select EventBridge Scheduler for time-based automation and explain what it adds over a scheduled rule","Decide where a recurring operational task should be scheduled among EventBridge Scheduler, a maintenance window, a State Manager association, and a scheduled rule","Choose between a Lambda function and a Systems Manager Automation runbook as the action behind an event","Use Change Calendar to block automation during a freeze, and describe the two calendar types"]