Identify and remediate deployment issues (for example, service quotas, subnet sizing, CloudFormation errors, permissions).
Identify opportunities to use managed services (for example, Amazon RDS, AWS Fargate, Amazon EFS).
Configure private connectivity (for example, Systems Manager Session Manager, VPC endpoints, VPC peering, VPN).
Implement Amazon RDS replicas and Amazon Aurora Replicas.
Assess resource usage patterns to qualify workloads for EC2 Spot Instances.
Configure a VPC (for example, subnets, route tables, network ACLs, security groups, NAT gateway, internet gateway).
Select deployment scenarios and services (for example, blue/green, rolling, canary).
Create and maintain AWS Auto Scaling plans.
Review reports or findings (for example, AWS Security Hub, Amazon GuardDuty, AWS Config, Amazon Inspector).
Configure AWS Budgets and billing alarms.
Provision resources across multiple AWS Regions and accounts (for example, AWS Resource Access Manager [AWS RAM], CloudFormation StackSets, IAM cross-account roles).
Securely store secrets by using AWS services (for example, AWS Secrets Manager, Systems Manager Parameter Store).
Use AWS Systems Manager Automation runbooks to take action based on AWS Config rules.
Identify and remediate underutilized or unused resources by using AWS services and tools (for example, Trusted Advisor, AWS Compute Optimizer, AWS Cost Explorer).
Create, manage, and troubleshoot AWS CloudFormation.