What's changed

Trigger words — Peta Besar mermaid, decision trees, core-pattern modules; Migration & Transfer, Threat detection & protection, deregistration-delay, RDS Segitiga Emas, CMK, Kinesis Video, confused-pair rows · Deep Notes §5 Security — capstone overview card; Security Hub, Firewall Manager, IAM Roles Anywhere, Artifact; IAM Access Analyzer + RAM; KMS symmetric vs asymmetric + digital signing · Deep Notes §5 IAM — ABAC vs RBAC, Permissions Boundary traps, 4-layer permission + cross-account decision mermaids; Confused Deputy + Credential Report · Deep Notes §6 Database — Timestream, MemoryDB, DocumentDB, Neptune, Keyspaces to full recipe; RDS TDE engine list (Oracle+SQL Server); at-rest/in-transit peta row · Deep Notes §9 Networking — ALB full enrichment (anatomy, Spot+ASG connection draining); Load Balancer docs + glossary; ADS/Inspector/WAF anatomy · Deep Notes §2 Compute — EC2 Hibernation 8/8; User Data + Metadata (IMDSv1/v2 SSRF); high-yield thin cards (Shield, Client VPN, Recycle Bin, DynamoDB On-Demand) · Deep Notes storage — EBS Volume Types decision-tree + kenderaan analogy; Snapshots enrichment; Pilih Storage tree on /trigger-words; Region & AZ card; Storage Gateway FBT mnemonic · Deep Notes containers — ECS/Fargate storage cross-refs (EFS/EBS/bind mount); EKS persistent storage (EBS/EFS/FSx, RWO vs RWX) · Deep Notes D2 resilience — AWS Elastic Disaster Recovery (DRS) card; DR strategy + Monolithic/Legacy lifecycle cards · Deep Notes skim-tier enrichments — MSK, Kendra, SageMaker, AppSync, AppFlow, CI/CD, Rekognition + practice question; §7 AI services update · Exam-confusion gap-fill across §5/§9/§10/§11/§14; SSM enhancements; search relevance ranking fix; SQS write-heavy perangkap · CFN helper scripts + VPC endpoint condition keys; merged duplicate Penetration Testing cards · Trigger words page — layout and responsiveness improvements

Trap-question field renamed jebakan → umpan (proper Bahasa Melayu) across awsServices data model + LearnCard · Recall scaffold on all Deep Notes cards — sebabApa, sifir, perangkap on every service card for exam-pressure recall · Deep Notes §6 Database gap-fill — compare tables + analogy mermaids (Aurora, DynamoDB, RDS, ElastiCache, etc.) · Deep Notes §9 Networking — NAT GW (shared vs dedicated, no Stop/Start, IPv6/EIGW, conn limits, pricing), VPC Endpoints/PrivateLink mermaid, SG vs NACL intra-subnet traps, VPC Packet Journey card, EC2 IP types + networking analogies · Deep Notes §8 Mgmt + S3 Access Control; Secrets Manager (custom Lambda rotation, private VPC endpoint trap) · Foundational comparison tables — EC2 Fleet types, scheduling, block/file/object storage, SQL vs NoSQL; Step Functions vs SQS/Batch/Glue · Practice scenarios: KMS multi-region, RDS Proxy + Lambda, ACM cert validation, async S3 file upload, e-commerce ALB configuration · EC2 cards — Hibernation Stop/Start trap + sizing formula; Spot standby analogy; ASG Mixed Instances perangkap · Cheat Sheet/LearnCard: D1–D4 domain pills on ServiceCard + LearnCard via domainId props · deepNotesLinkIndex searchBlob expanded — richer AI internal-link matching for IAM, NAT GW, hibernation topics · STUDY-CHECKLIST.md — detailed SAA-C03 exam requirements and AWS concept cross-references · CLAUDE.md — Mermaid syntax rules for Deep Notes authoring; NACL rule numbers clarified as priorities not codes · Glossary: ECMP, VGW, TGW, Private NAT GW, ephemeral ports, Fault tolerance terms · Mermaid label parsing for edge cases in LearnCard renderer · Trigger words page (/trigger-words) — keyword→service cheat sheet launched with domain grouping · STS card — Kaunter Pengawal / temporary-pass analogy mermaid (AssumeRole); SQS cross-account "Dua Kunci" + DLQ coverage (maxReceiveCount, Redrive) · Cross-account "Dua Kunci" pattern + Organizations account-hierarchy diagram; Control Tower + AWS Config anatomy; Principal:"*" public-access trap · Lake Formation + Data Lake vs Warehouse coverage; HA vs FT vs Scalability vs Elasticity vs Throughput concepts · Firebase↔Amplify BaaS mapping; Route 53 + SQS 4-option perangkap

Recall scaffold (sebabApa/sifir/perangkap) on §5 Security, Networking, multi-account, §9 routing/VPC, D2 resilience, SQS/SNS/Kinesis cards · §7 ML — AI services decision-tree mermaid; §8 Mgmt — Compute Optimizer FREE, Trusted Advisor 7-check/support-tier pricing · §5 Security analogies — Inspector, Macie, CloudHSM; ACM + IAM Identity Center enrichment · §6 Aurora Serverless enrichment; AWS Batch full recipe + Lambda Food Truck analogy · NACL/SG visual analogies + ephemeral ports glossary · Next 16 middleware — valid Headers instance for Supabase auth (fixes edge runtime crash on protected routes)

Deep Notes §11 App Integration, §12 Containers (ECS anatomy), §14 Cost Mgmt enrichments · CLAUDE.md + STUDY-CHECKLIST — expanded AWS pricing reference table for exam cost-optimization questions · STUDY-CHECKLIST + awsServices formatting — enhanced diagrams and section structure · OnThisPage responsive classes on Cheat Sheet TOC

Deep Notes authoring standard codified in CLAUDE.md — 6-ingredient recipe (anatomy, comparison tables, mermaid, memory aids, exam traps, sources + glossary) for every awsServices/scenarios enrichment · Analytics §10 (D4) Deep Notes enrichment — EMR node roles + Kilang Kerupuk analogy, Glue Jus Mangga anatomy, Athena cost model, Redshift cluster anatomy, OpenSearch/MSK/CUR comparisons; 15+ glossary terms added · Scenarios: long-running / async processing pattern — Lambda → SQS → Batch/Fargate/EC2 beyond 15-minute limit; matching architecture on /visual · Deep Notes: S3 bucket policy insights (sourceVpce denial trap), VPC endpoint connectivity clarifications, KMS + monitoring service mermaid diagrams · AI routes (chat, explain, hint, explain-arch): mirror user language — Malay or English prose, AWS service names and technical terms stay English · Bookmark sync: Supabase aws_study_notes schema USAGE + API exposure — silent write failures fixed; useBookmarks error logging + local→remote merge upsert

Bookmarks page (/bookmarks): full list of saved services and AI answers — export .md, clear all, synced to Supabase when signed in · Bookmark detail (/bookmarks/[id]): full saved AI answer with ChatMarkdown rendering, AWS docs link, remove action · Bookmarks panel: title links to /bookmarks; AI answer rows open detail page; Bookmarks added to mobile nav drawer · Cloudflare Pages deploy: edge runtime on /bookmarks/[id] — fixes next-on-pages build failure for dynamic bookmark routes · Practice page redesign: desktop sidebar question grid (answered/current states), wider 1280px layout, PracticeModeToggle, InlineQuizFooter + shared FloatingQuizNav · Practice question picker: FloatingBar hides on mobile while the jump-to-question modal is open — no overlap with bottom nav · FloatingBar: AskAIButton with aria-controls + static aria-expanded for Edge Tools a11y; dedicated toggle wired to AI chat dialog · VPC page (/vpc): sticky “On this page” TOC with scrollspy, nested AWS-style architecture diagram, route-table comparison blocks · OnThisPage (Cheat Sheet + Deep Notes): Notion-style vertical rail on xl screens, horizontal sticky domain pills below — scrollspy highlights active section · Deep Notes comparison tables: LearnCard renders CompareTable side-by-side blocks (e.g. Multi-AZ vs Read Replicas, NAT GW vs Instance) from awsServices data · AI internal links: generated deepNotesLinkIndex + labsLinkIndex at build time (bun run scripts/generate-ai-link-indexes.ts); pages:build runs index gen before next-on-pages · Practice quiz mode: floating bottom nav (← Prev · N/M · Next →) matches Review — answer history preserved when jumping back · Mobile nav drawer: Browse Services section restored (D1–D4 domain jump pills to Cheat Sheet sections) · FloatingBar: single bottom pill (Ask AI · Search · Bookmarks) replaces separate corner FABs; lifts above Practice action bar · Exam guide page (/exam-guide): D1–D4 weight bars, competencies, topics, scoring note — shared data/exam.ts module; linked from About page · LearnCard: Mermaid diagrams, static images, and flow diagrams rendered inline in Deep Notes cards · Scenarios page (/scenarios): domain filter pills (D1–D4), 18 SAA-C03 architecture patterns — VPC connectivity, TGW, endpoints, CloudFront+OAC, IAM, security · Visual page: structured sidebar navigation, DiagramPanel layout, 15 architectures — TGW hub, VPC Endpoints (gateway vs interface), CloudFront+OAC; canvas 460→520px · VPC page + Deep Notes: VPC Flow Logs section — ACCEPT/REJECT metadata, CloudWatch Logs / S3 / Firehose destinations, exam traps · Deep Notes D1–D3 enrichments: STS, Directory Service, KMS, Aurora vs DynamoDB comparisons, S3 storage classes, Fargate anatomy · AIChatView: message edit + resend; ChatMarkdown image fallback

RAG over glossary + labs: 197 glossary terms and 110 labs embedded into Cloudflare Vectorize (@cf/baai/bge-base-en-v1.5, 768-dim cosine index "glossary-rag") for semantic retrieval · lib/ai/rag.ts — queryRag() embeds the question and retrieves the top-K most similar entries (similarity ≥ 0.6); formatRagContext() injects them as AWS-verified grounding context · /api/ai/explain (practice AI Explain drawer) now grounds answers in semantically matched glossary definitions, not just keyword matches · /api/ai/explain-arch (Visual page sidebar) now grounds node + diagram explanations in retrieved glossary and lab content alongside live AWS docs search · scripts/sync-rag-index.ts (bun run rag:sync): offline embedding + upsert pipeline via Workers AI and Vectorize v2 REST APIs, idempotent by content hash

Labs section (/labs): new index + detail pages for personal hands-on lab notes — typed data model (slug, level, services, tasks, takeaways), anchor navigation between tasks, "What I Learned" section · Labs: seeded with IAM intro lab (users, groups, least-privilege policies) and EC2 fundamentals lab (VPC, instance launch, Apache, custom page) · Nav: Labs added to desktop nav bar and mobile drawer (🧪 icon) · SiteFooter: Labs link added site-wide ("Labs · hands-on practice notes") · AI sources: internal site pages (Labs, VPC Guide) now surface as clickable source links alongside AWS Docs and YouTube — powered by keyword-scored findInternalLinks() matcher · Internal sources wired into all AI flows: chat, explain (practice), hint (practice), and Visual page explain-arch sidebar

Visual page: always-visible AI sidebar — click any node for per-service explanation or "✦ Explain diagram" for full architecture overview; structured sections: What problem, How traffic flows, SAA-C03 Exam Relevance, Common Exam Traps, Sources · Visual page: Sources section now powered by AWS Knowledge MCP — up to 3 live docs.aws.amazon.com links fetched in parallel with AI explanation (replaced static study PDFs) · aws-knowledge.ts pickBestHit: optional chaining on h.url prevents TypeError when MCP returns hits with missing url field (was causing 500s) · ReactFlow Controls panel: dark theme override via globals.css — transparent bg, visible icons, consistent with site dark palette · AI page (/ai) now linked in nav — animated sparkle ✦ icon on desktop, "Ask AI" in mobile drawer · Free AI: ILMU (primary) → NVIDIA NIM → Gemini 2.5 Flash automatic fallback chain — if one hits rate limits, next kicks in transparently · NVIDIA NIM added as free server-side provider (nvapi- key, 40 RPM, 100+ models including Llama 3.3 70B) · OpenRouter BYOK: access 27+ free models (Llama, DeepSeek, Qwen) via single sk-or- key · AI provider toggle redesigned: Auto (free fallback) + OpenRouter/Ollama as BYOK — no manual free provider selection needed · AI chat: viewport-height layout, example prompt chips, Chat / Explain question mode toggle, trash icon to clear history · SSR hydration mismatch on AI provider — localStorage now read in useEffect, not useState initializer · ILMU, Gemini, NVIDIA use server-side keys (no user config); Claude/Anthropic BYOK hidden from UI (backend still functional)

Global PWA MVP: manifest.webmanifest + icon-192/512 PNG on whole site (installable from any page); /pwa stays hidden design lab for mockups · AI leave warnings (beforeunload / Back / in-app links) only on /ai and /practice — not site-wide

AI study page (/ai): Chat + Explain question modes — Groq (server), Claude & ILMU (BYOK); not linked in main nav (direct URL only) · AI session persistence: chat + practice hints in sessionStorage (survives refresh, cleared when browser/tab session ends) · Native leave warnings when AI session has data: beforeunload (close/refresh), confirm on Back, confirm on in-app link navigation · Practice: “Understand this question” pre-answer hint — what the question asks, keywords, how to tackle; AWS docs via Knowledge MCP + study notes; no YouTube · API routes: /api/ai/chat (YouTube search links on chat only), /api/ai/explain, /api/ai/hint — shared provider routing (Groq / Anthropic / ILMU) · AWS Knowledge MCP: real docs.aws.amazon.com URLs resolved server-side from docsSearchPhrase (no hallucinated doc links) · ILMU BYOK: api.ilmu.ai Anthropic-compatible messages API (nemo-super) alongside Claude sk-ant- keys · Ollama Cloud BYOK: ollama.com/api/chat with Bearer API key (default model gpt-oss:120b) on /ai, practice hints, and explain routes · wrangler.jsonc: GROQ_API_KEY and AI_GATEWAY_BASE_URL binding placeholders — secrets via .dev.vars locally or wrangler secret in production · lib/ai: providers, complete-json, aws-knowledge, client-headers; AWSDocsLink / QuestionHintPanel / PracticeQuestionHint components · Practice hints: bullet-point concise copy, amber keyword highlights, session cache per questionId (instant replay + Regenerate) · Practice hints: Deep Notes link to /learn#section (matched from awsServices index — e.g. EC2 User Data → Compute section)

Glossary page (/glossary): new standalone page — search + 14 category filters, 2-col responsive grid · About page: Glossary card added to link grid (Portfolio / GitHub / Changelog / Glossary) · Glossary: synced TS ↔ D1 — added 51 new terms from SQL (DR strategies, IAM policies, Lambda, Fargate, load balancers, S3 features, DynamoDB DAX/TTL) + generated glossary-batch3.sql (64 rows) for D1 update · Reserved Instances definition corrected: Standard RIs up to 72% off, Convertible RIs up to 66% — verified via AWS docs MCP · glossaryCategories: added IAM & Policies, Load Balancers, S3 Features categories; expanded Compute, Networking, Architecture with new terms · 404 page (/not-found.tsx): gradient 404, ambient glow blobs, quick-nav cards to all sections · Custom scrollbar: slim 6px global scrollbar replacing browser default — applied via globals.css · GlossaryTerm tooltip: switched to position:fixed to escape overflow:hidden table containers; atomic TooltipState prevents position race · Visual page ArchNode: removed left-side accent bar that the user flagged · Scenarios page: added new architecture patterns — expanded beyond S3+CloudFront to cover additional AWS solution flows; refined scenario details and metadata layout for better clarity

wzs4–wzs9 (API GW, Lambda, App Integration, Database, ML, Analytics): 35 questions seeded to remote D1 — all answers verified via AWS docs MCP · Screenshots for wzs4 (5), wzs5 (4), wzs6 (7), wzs7 (10), wzs8 (4), wzs9 (5) added to public/questions/ · Practice page: new "By Set" filter — All / Practice Tests / Section Tests / Final Test · API route: new ?set= filter param (pt / section / final) with SQLite LIKE conditions · Glossary: 35+ new terms — VPC Link, API throttling, API caching, Lambda authorizer, Usage Plan, SQS Long Polling, Visibility Timeout, SQS FIFO, Dead Letter Queue, SNS fan-out, Step Functions, RDS Multi-AZ, Aurora Serverless, DynamoDB PITR, DynamoDB Auto Scaling, AWS DMS, CloudFormation DeletionPolicy, Secrets Manager, Aurora Replicas, Comprehend, Lex, Textract, Kendra, Rekognition, Polly, MSK, OpenSearch, Data Exchange, Kinesis Data Streams, Glue · awsServices notes: SQS Long Polling + Visibility Timeout + FIFO + SNS→SQS→Lambda tips; MSK no-SSH + ESM + Serverless tips; new Kendra, Data Exchange cards; AI/ML card updated with Comprehend/Textract/Lex differentiators · Scenarios page (/scenarios): architecture pattern study page — flow diagram, anatomy breakdown, exam traps, tips, official docs links · First scenario: S3 + CloudFront static website hosting — OAC vs OAI, ACM us-east-1 requirement, signed URLs/cookies, geo restriction, caching, Lambda@Edge vs CF Functions — verified via AWS docs MCP · data/scenarios.ts: extensible scenario data schema (flow nodes, anatomy, nuances, tips, sources)

wzs3 (EFS Section Test): 5 questions seeded to remote D1 — answers verified via AWS docs MCP · wzs2 (Storage Section Test): 5 questions seeded to remote D1 — answers verified via AWS docs MCP · wzs1 (VPC Section Test): 10 questions seeded to remote D1 — answers verified via AWS docs MCP · PT6 (wz6): 65 Core Practice Test 6 questions seeded to remote D1 — answers verified via AWS docs MCP · Screenshots for wz6 (65), wzs1 (10), wzs2 (5), wzs3 (5) added to public/questions/ · Glossary: 14 new terms — delete marker, noncurrent versions, secondary VPC CIDR, SNI, OAC, OAI, edge-to-edge routing, transitive peering, instance store, EBS-backed, Elastic Volumes, EBS snapshot, AWS Backup, EFS performance/throughput modes, EFS mount helper · awsServices notes: CloudFront OAC + Lambda@Edge, ALB SNI, API Gateway, AppFlow, SageMaker, VPC Peering edge-to-edge, EBS storage types, EFS performance/throughput modes + encryption in transit + cross-VPC tips, AWS Backup · Official AWS docs reference URLs added to all wzs1, wzs2, wzs3 questions

PT4 (wz4): 65 Core Practice Test 4 questions seeded to remote D1 · PT5 (wz5): 65 Core Practice Test 5 questions seeded to remote D1 — answers verified via AWS docs MCP · Screenshots for wz4 and wz5 (130 images) added to public/questions/ · Glossary: 15 new terms — awsvpc, ENI, EBK, PBK, ABAC, NotPrincipal, CORS, Anycast, PoP, DRA, Standby state, cooldown period, InService, bridge, host · awsServices notes: CloudHSM backup (EBK/PBK), FSx Lustre DRA + S3 integration, QuickSight ML forecasting, Client VPN, Step Functions Distributed Map, X-Ray Insights, Glue Crawler, Polly StartSpeechSynthesisTask, Global Accelerator static IPs

Changelog page at /changelog — type filters, collapsible releases, relative dates · Timeline sidebar with scroll spy, progress rail, and jump-to-date · Desktop layout: scrollable changelog panel beside pinned timeline · Changelog link on About page and footer · changelog:draft script — draft new entries from git log · Changelog data and types moved to data/changelog.ts · Changelog entries use native details/summary for accessibility

Quiz import script for Core practice questions · Extended .gitignore for generated files and workspace config

Screenshot support for practice questions · AWS reference URL verification script · Seed script for screenshot metadata

Question filtering by source in API and practice page · Reset quiz state after fetching new questions · Glossary batch 2 — disaster recovery, compute, IAM terms · MCP server config for AWS documentation · Service tips and keywords added to awsServices · FilterSource: renamed 'custom' → 'others' for clarity

Glossary schema and initial seed data · Dependabot cooldown period (3 days) for update management · CI: added bun audit step for dependency security checks · Upgraded GitHub Actions to checkout@v5 · More AWS service tips and descriptions

About page with GitHub and portfolio links · OG image previews for Meta platforms (IG, Threads, WhatsApp) · Canonical URL set to aws.amrhnshh.com · Switched to static OG/Twitter PNG images · Renamed project to aws-saa-study · Cloudflare Pages integration and deployment config · Layout and spacing improvements across all pages

Bookmark feature — save and persist AWS service cards

SiteFooter component added across all pages · Extra common networking patterns section

VPC page: RFC 1918 private ranges, prefix-bit breakdown, network/host division · Glossary: octet tooltip wired into GlossaryText component · Removed 2 duplicate practice questions · ESLint 10 compat — pinned react version in config · Regenerated bun.lock to fix CI frozen-lockfile failure