背景：

我是6月1日（儿童节哈哈哈）901分通过的SAA-C01，前后准备了快2个月：

• • LinuxAcademy的SAA视频，看了1个半月（60个小时的视频再加上lab，开始速度特别慢）

• • 找了题库刷题刷了2周：总体一遍；每天一次模拟考，快速检验（30分钟左右）；

一直等到8月底份才开始准备考SAP，最后准备了1个月的样子，945分通过了SAP。

 
SAP的难点：

个人认为SAP的难度是很大的，无基础的同学最好先按照SAA的标准来补全基础。SAP的难点（与SAA的区别）在于：

• • 题干复杂包含很多信息，通常会覆盖3个以上的服务

• • 选项没有明显的错误，需要紧扣cost、availability、automation等关键字选择某一方面最优的解

• • 需要深度了解服务的最佳实践

• • 需要深度了解服务的组合场景，如 severless三件套(API GTW,Lambda,DynamoDB), 实时处理集(Kinesis xxx…)

• • 需要深度了解业务场景，如 IoT收集环境数据、图像识别、全球化网站

补全知识图谱：

先给一个知识脑图：https://www.processon.com/mindmap/5ebcf0de5653bb6f2a0bb702
可以按照这种形式组织AWS相关服务的信息，可以随着学习的过程慢慢补充，也可以一开始先梳理出来。
 

分析样题（科学刷题）：

就像我上面提到的，SAP的题目出的都挺好的（大部分），包含了很多业务场景和相关服务，甚至不少题目就是从User Case来的。
 
A large company has increased its utilization of AWS over time in an unmanaged way. As such, they have a large number of independent AWS accounts across different business units, projects, and environments. The company has created a Cloud Center of Excellence team, which is responsible for managing all aspects of the AWS Cloud, including their AWS accounts.
Which of the following should the Cloud Center of Excellence team do to BEST address their requirements in a centralized way? (Select rwo.)

• • A. Control all AWS account root user credentials. Assign AWS IAM users in the account of each user who needs to access AWS resources. Follow the policy of least privilege in assigning permissions to each user.

• • B. Tag all AWS resources with details about the business unit, project, and environment. Send all AWS Cost and Usage reports to a central Amazon S3 bucket, and use tools such as Amazon Athena and Amazon QuickSight to collect billing details by business unit.

• • C. Use the AWS Marketplace to choose and deploy a Cost Management tool. Tag all AWS resources with details about the business unit, project, and environment. Send all AWS Cost and Usage reports for the AWS accounts to this tool for analysis.

• • D. Set up AWS Organizations. Enable consolidated billing, and link all existing AWS accounts to a master billing account. Tag all AWS resources with details about the business unit, project and environment. Analyze Cost and Usage reports using tools such as Amazon Athena and Amazon QuickSight to collect billing details by business unit.

• • E. Using a master AWS account, create IAM users within the master account. Define IAM roles in the other AWS accounts, which cover each of the required functions in the account. Follow the policy of least privilege in assigning permissions to each role, then enable the IAM users to assume the roles that they need to use.

分析：

首先提取题干：large number, independent AWS accounts, different business units, a centralized way

然后对每一个选项进行分析：

B，是对的，但是需要考虑中心化管理，D更合适
C，问题不在优化成本上
E，是对的，但是考虑权限都是已经创建好的，需要聚焦的是“管理所有的服务”，A更合适
AD
 

总结：

把刷题变成学习的过程，以题目为索引，去搜索、处理、理解相关的知识链，最后贯通。

在练习SAP的题时一定不要求快，一开始最好是把每一个选项都分析出来，利弊和正误。这样既能帮助你理解题目和答案，也能不停的扩展你的事业，让你的AWS知识树贯通。当你习惯了这样的方式，锻炼起来你的思考逻辑之后，解题就会变得简单了。