AWS Certified Solutions Architect Associate (SAA-C03) vorbereiten

aws sts get-caller-identity          # in welchem Konto bin ich gerade?
aws configure set region eu-central-1

# Budget mit Alarm, damit eine vergessene Ressource auffaellt
cat > budget.json <<'EOF'
{ "BudgetName": "uebung", "BudgetLimit": {"Amount": "20", "Unit": "USD"},
  "TimeUnit": "MONTHLY", "BudgetType": "COST" }
EOF
aws budgets create-budget \
  --account-id "$(aws sts get-caller-identity --query Account --output text)" \
  --budget file://budget.json \
  --notifications-with-subscribers file://alarm.json

# Was laeuft aktuell und was kostet es?
aws ce get-cost-and-usage --time-period Start=2026-07-01,End=2026-08-01 \
  --granularity MONTHLY --metrics UnblendedCost \
  --group-by Type=DIMENSION,Key=SERVICE

VPC=$(aws ec2 create-vpc --cidr-block 10.20.0.0/16 --query Vpc.VpcId --output text)
aws ec2 create-tags --resources "$VPC" --tags Key=Name,Value=uebung

PUB_A=$(aws ec2 create-subnet --vpc-id "$VPC" --cidr-block 10.20.1.0/24 \
  --availability-zone eu-central-1a --query Subnet.SubnetId --output text)
PUB_B=$(aws ec2 create-subnet --vpc-id "$VPC" --cidr-block 10.20.2.0/24 \
  --availability-zone eu-central-1b --query Subnet.SubnetId --output text)
PRIV_A=$(aws ec2 create-subnet --vpc-id "$VPC" --cidr-block 10.20.11.0/24 \
  --availability-zone eu-central-1a --query Subnet.SubnetId --output text)

IGW=$(aws ec2 create-internet-gateway --query InternetGateway.InternetGatewayId --output text)
aws ec2 attach-internet-gateway --vpc-id "$VPC" --internet-gateway-id "$IGW"

# Statt NAT Gateway: kostenloser Gateway-Endpunkt fuer S3
RTB=$(aws ec2 describe-route-tables --filters Name=vpc-id,Values="$VPC" \
  --query 'RouteTables[0].RouteTableId' --output text)
aws ec2 create-vpc-endpoint --vpc-id "$VPC" \
  --service-name com.amazonaws.eu-central-1.s3 \
  --route-table-ids "$RTB"

aws elbv2 create-load-balancer --name uebung-alb --type application \
  --subnets "$PUB_A" "$PUB_B" --security-groups "$SG"

aws autoscaling create-auto-scaling-group \
  --auto-scaling-group-name uebung-asg \
  --launch-template LaunchTemplateName=uebung-lt,Version='$Latest' \
  --min-size 2 --max-size 6 --desired-capacity 2 \
  --vpc-zone-identifier "$PUB_A,$PUB_B" \
  --health-check-type ELB --health-check-grace-period 120

# Skalierung nach Auslastung statt nach Bauchgefuehl
aws autoscaling put-scaling-policy --auto-scaling-group-name uebung-asg \
  --policy-name cpu50 --policy-type TargetTrackingScaling \
  --target-tracking-configuration file://zielwert.json

# Multi-AZ ist Verfuegbarkeit, eine Lesereplik ist Leselast
aws rds create-db-instance --db-instance-identifier uebung-db \
  --engine postgres --db-instance-class db.t4g.micro \
  --allocated-storage 20 --multi-az --no-publicly-accessible

aws s3api create-bucket --bucket uebung-archiv-2026 \
  --create-bucket-configuration LocationConstraint=eu-central-1

# Oeffentlichen Zugriff grundsaetzlich ausschliessen
aws s3api put-public-access-block --bucket uebung-archiv-2026 \
  --public-access-block-configuration \
  BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true

# Nach 30 Tagen guenstiger, nach 90 Tagen ins Archiv, nach 5 Jahren weg
cat > lebenszyklus.json <<'EOF'
{ "Rules": [ { "ID": "archivierung", "Status": "Enabled", "Filter": {"Prefix": ""},
  "Transitions": [ {"Days": 30, "StorageClass": "STANDARD_IA"},
                   {"Days": 90, "StorageClass": "GLACIER"} ],
  "Expiration": {"Days": 1825} } ] }
EOF
aws s3api put-bucket-lifecycle-configuration --bucket uebung-archiv-2026 \
  --lifecycle-configuration file://lebenszyklus.json

# Die drei ueblichen Kostentreiber gezielt suchen
aws ec2 describe-nat-gateways --filter Name=state,Values=available \
  --query 'NatGateways[].NatGatewayId'
aws ec2 describe-addresses --query 'Addresses[?AssociationId==null].PublicIp'
aws elbv2 describe-load-balancers --query 'LoadBalancers[].LoadBalancerName'

# Laufende Instanzen und Datenbanken
aws ec2 describe-instances \
  --filters Name=instance-state-name,Values=running \
  --query 'Reservations[].Instances[].InstanceId'
aws rds describe-db-instances --query 'DBInstances[].DBInstanceIdentifier'

# Kontrolle im Nachgang: was hat der Uebungsmonat gekostet?
aws ce get-cost-and-usage --time-period Start=2026-07-01,End=2026-08-01 \
  --granularity MONTHLY --metrics UnblendedCost \
  --group-by Type=DIMENSION,Key=SERVICE