• Test permissions using AWS CLI 

aws sts assume-role 

• ASG to Maintain capacity at a specified target.

• Use libraries in Lambda without needing to include them in your deployment package.

• Increase performance of S3 

Split reads across prefixes 

• Encryption at rest in DynamoDB 

Amazon DynamoDB Encryption Client 

• Optimize scan of DynamoDB 

Use parallel scan and limit parameter 

• To ensure most up-to-date data retrieved from DynamoDB for all queries 

Set  ConsistentRead parameter to true when calling Read operation (such as GetItem, Query, and Scan) 

• Cache items from DynamoDB 
• Improve read performance 

Use DynamoDB Accelerator 

• Group transaction of DynamoDB in all-or-nothing update 

TransactWriteItems 

• Group transaction of DynamoDB without all-or-nothing requirement 

BatchWriteItem 

• Selection of attributes from base table but organized by primary key that is different from base table 

Global Secondary Index 

• Alarm with period of 10 /30 seconds 
• Higher charge 

High-resolution Alarm 

• Alarm with period of any multiple of 60 seconds 

Regular CW Alarm 

• Search & filter log data coming into CW Logs. 
• Turn log data into numerical CW Metrics that can be graphed and set an alarm on. 

CW Metric Filter 

• Audit AWS API calls

• defines the deployment actions you want AWS CodeDeploy to execute.

• AppSpec file for an Amazon ECS or AWS Lambda deployment

• AppSpec file for an EC2/On-Premises deployment

• Use IAM Roles to generate temporary credentials for users 
• Synchronize data across devices without the need to create backend applications

Amazon Cognito 

• For Authorization(Access Control) 
• Enable users in your user pool to access AWS resources 

Amazon Cognito Identity Pools 

• User can access only their own data 

Use Trust policy with IAM condition key to limit access 

• Create SSL/TLS certificates 

AWS Certificate Manager