AWS Tutorials
AWS Tutorials Roadmap
Section 1: AWS Cloud Essentials and Fundamentals
-
Introduction to Cloud Computing:
- What is Cloud Computing?
- Benefits of Cloud Computing (Cost Savings, Scalability, Elasticity, Reliability, Global Presence).
- Types of Cloud Computing (IaaS, PaaS, SaaS).
- Deployment Models (Public Cloud, Private Cloud, Hybrid Cloud).
-
Introduction to Amazon Web Services (AWS):
- What is AWS?
- History and Global Infrastructure (Regions, Availability Zones, Edge Locations).
- Key Services Overview (Compute, Storage, Database, Networking, Security, etc.).
- AWS Management Console, CLI, and SDKs.
-
AWS Global Infrastructure:
- Understanding Regions and Availability Zones (AZs).
- Why use multiple AZs?
- Understanding Edge Locations and their role (CloudFront, Route 53).
-
AWS Shared Responsibility Model:
- Understanding what AWS is responsible for ("Security of the Cloud").
- Understanding what the customer is responsible for ("Security in the Cloud").
-
AWS Pricing and Billing:
- Understanding different pricing models (On-Demand, Reserved Instances, Spot Instances, Savings Plans).
- Using the AWS Pricing Calculator.
- Understanding AWS Free Tier.
- Introduction to AWS Cost Management tools (Cost Explorer, Budgets).
-
Setting up an AWS Account:
- Creating an AWS account.
- Understanding the Root user.
- Initial security best practices (MFA for Root user).
Section 2: Core AWS Services - Compute
-
Amazon Elastic Compute Cloud (EC2):
- What is EC2?
- Understanding EC2 Instance Types and Families.
- Amazon Machine Images (AMIs).
- Launching and managing EC2 Instances.
- Connecting to EC2 Instances (SSH, RDP, Session Manager).
- EC2 Pricing (On-Demand, Reserved Instances, Spot Instances).
- Understanding EC2 Security Groups.
- Understanding EC2 Key Pairs.
- Elastic Network Interfaces (ENIs).
-
Amazon Elastic Block Store (EBS):
- What is EBS?
- EBS Volume Types (gp2/gp3, io1/io2, st1, sc1).
- Creating and attaching EBS Volumes to EC2 Instances.
- EBS Snapshots (creating, restoring, copying).
- EBS Encryption.
-
Load Balancing (Elastic Load Balancing - ELB):
- What is ELB?
- Types of Load Balancers (Application Load Balancer - ALB, Network Load Balancer - NLB, Gateway Load Balancer - GWLB, Classic Load Balancer - CLB - legacy).
- Configuring and using ALBs and NLBs.
- Health Checks.
- Listeners and Target Groups.
-
Auto Scaling (EC2 Auto Scaling):
- What is Auto Scaling?
- Understanding Launch Configurations and Launch Templates.
- Creating Auto Scaling Groups (ASGs).
- Scaling Policies (Simple, Step, Target Tracking, Scheduled).
- Health Checks and Instance Replacement.
-
Containers on AWS:
- Introduction to Containers (Docker).
- Amazon Elastic Container Service (ECS).
- Amazon Elastic Kubernetes Service (EKS).
- AWS Fargate (Serverless containers).
- Amazon Elastic Container Registry (ECR).
-
Serverless Compute (AWS Lambda):
- What is Serverless?
- What is AWS Lambda?
- Writing and deploying Lambda functions.
- Lambda Triggers and Integrations (API Gateway, S3, DynamoDB, etc.).
- Lambda Pricing.
Section 3: Core AWS Services - Storage
-
Amazon Simple Storage Service (S3):
- What is S3?
- S3 Buckets and Objects.
- S3 Storage Classes (Standard, Intelligent-Tiering, Standard-IA, One Zone-IA, Glacier, Glacier Deep Archive, Outposts).
- S3 Versioning.
- S3 Encryption (SSE-S3, SSE-KMS, SSE-C, Client-Side).
- S3 Access Control (Bucket Policies, ACLs).
- S3 Static Website Hosting.
- S3 Lifecycle Policies.
- S3 Cross-Region Replication (CRR).
- S3 Pre-Signed URLs.
-
Amazon Elastic File System (EFS):
- What is EFS?
- Use cases for EFS (shared file system for EC2).
- Creating and mounting EFS file systems.
- EFS Performance Modes and Throughput Modes.
-
Amazon FSx:
- What is Amazon FSx?
- Understanding FSx for Lustre, Windows File Server, NetApp ONTAP, OpenZFS.
- Use cases for different FSx file systems.
-
Amazon S3 Glacier and Glacier Deep Archive:
- Understanding these archival storage classes.
- Retrieval options and costs.
-
AWS Storage Gateway:
- What is Storage Gateway?
- Gateway Types (File Gateway, Volume Gateway, Tape Gateway).
- Connecting on-premises storage to AWS.
Section 4: Core AWS Services - Databases
-
Amazon Relational Database Service (RDS):
- What is RDS?
- Supported Database Engines (Aurora, PostgreSQL, MySQL, MariaDB, Oracle, SQL Server).
- Launching and managing RDS Instances.
- RDS Multi-AZ Deployments (High Availability).
- RDS Read Replicas (Read Scaling).
- RDS Security Groups.
- RDS Snapshots and Backups.
-
Amazon DynamoDB:
- What is DynamoDB? (NoSQL Database).
- Understanding Tables, Items, and Attributes.
- Primary Keys (Partition Key, Sort Key).
- Provisioned Throughput vs. On-Demand Capacity.
- Global Tables.
- Streams.
-
Amazon Redshift:
- What is Redshift? (Data Warehouse).
- Understanding Clusters and Nodes.
- Use cases for Redshift.
-
Amazon ElastiCache:
- What is ElastiCache? (In-memory caching service).
- Supported Engines (Redis, Memcached).
- Use cases for caching.
-
Amazon Aurora:
- Understanding Aurora (AWS-proprietary relational database).
- Aurora features (High performance, scalability).
- Aurora Serverless.
-
Other Database Services (Brief Overview):
- Neptune (Graph Database).
- Quantum Ledger Database (QLDB).
- DocumentDB (MongoDB compatible).
- Keyspaces (Cassandra compatible).
Section 5: Core AWS Services - Networking and Content Delivery
-
Amazon Virtual Private Cloud (VPC):
- What is a VPC?
- Understanding VPCs, Subnets (Public and Private).
- Internet Gateways (IGW).
- NAT Gateways and NAT Instances.
- Route Tables.
- Network Access Control Lists (NACLs).
- Security Groups.
- VPC Peering.
- VPC Endpoints (Gateway and Interface).
- Flow Logs.
-
Amazon Route 53:
- What is Route 53? (DNS Web Service).
- Understanding Domain Registration.
- Hosted Zones (Public and Private).
- DNS Record Types (A, CNAME, MX, AAAA, TXT, etc.).
- Routing Policies (Simple, Weighted, Latency, Geolocation, Geoproximity, Failover, Multivalue Answer).
- Health Checks.
-
Amazon CloudFront:
- What is CloudFront? (Content Delivery Network - CDN).
- Understanding Distributions (Web and RTMP).
- Origins (S3, EC2, Custom).
- Caching behavior.
- Geo-restriction.
- Integration with WAF and Shield.
-
AWS Direct Connect:
- What is Direct Connect?
- Establishing a dedicated network connection from on-premises to AWS.
- Use cases.
-
AWS Transit Gateway:
- What is Transit Gateway?
- Connecting multiple VPCs and on-premises networks.
- Simplifying network architecture.
Section 6: AWS Security, Identity, and Compliance
-
AWS Identity and Access Management (IAM):
- What is IAM?
- Understanding Users, Groups, Roles, and Policies.
- IAM Policies (JSON format).
- IAM Best Practices (Least Privilege, MFA, Access Keys).
- IAM Roles for EC2 and other services.
- Identity Federation.
-
AWS Multi-Factor Authentication (MFA):
- Understanding different MFA types.
- Enabling MFA for Root and IAM users.
-
AWS Key Management Service (KMS):
- What is KMS?
- Creating and managing Customer Master Keys (CMKs).
- Integrating KMS with other AWS services (S3, EBS, RDS, etc.).
- Understanding encryption concepts.
-
AWS Secrets Manager and Parameter Store:
- Storing and rotating secrets (passwords, API keys).
- Storing configuration data and secrets.
-
AWS Web Application Firewall (WAF):
- What is WAF?
- Protecting web applications from common web exploits.
- Creating rules (IP addresses, HTTP headers, query strings, etc.).
- Integration with CloudFront, ALB, API Gateway.
-
AWS Shield:
- What is Shield? (DDoS protection service).
- Shield Standard vs. Shield Advanced.
-
AWS GuardDuty:
- What is GuardDuty? (Threat detection service).
- Monitoring for malicious activity and unauthorized behavior.
-
AWS Security Hub:
- What is Security Hub?
- Centralizing security alerts and findings from various AWS services.
-
AWS Config:
- What is Config?
- Assessing, auditing, and evaluating the configurations of your AWS resources.
- Compliance checking.
-
AWS CloudTrail:
- What is CloudTrail?
- Logging AWS API calls and events.
- Security analysis, resource change tracking, and compliance auditing.
Section 7: Management, Monitoring, and Operations
-
Amazon CloudWatch:
- What is CloudWatch?
- Monitoring AWS resources and applications.
- CloudWatch Metrics (collecting and viewing).
- CloudWatch Alarms (setting thresholds and receiving notifications).
- CloudWatch Logs (collecting and analyzing log files).
- CloudWatch Events / EventBridge (responding to AWS events).
-
AWS Systems Manager:
- What is Systems Manager?
- Managing EC2 Instances and on-premises servers.
- Session Manager (secure shell access).
- Run Command (executing commands remotely).
- Patch Manager.
- Parameter Store (storing configuration data).
-
AWS Trusted Advisor:
- What is Trusted Advisor?
- Providing recommendations on Cost Optimization, Performance, Security, Fault Tolerance, and Service Limits.
-
AWS Health Dashboard:
- Monitoring the health of your AWS services and resources.
-
AWS CloudFormation:
- What is Infrastructure as Code (IaC)?
- What is CloudFormation?
- Writing CloudFormation templates (YAML or JSON).
- Creating, updating, and deleting stacks.
- Understanding Change Sets.
- StackSets (deploying stacks across multiple accounts and regions).
-
AWS Service Catalog:
- What is Service Catalog?
- Creating and managing catalogs of IT services approved for use on AWS.
Section 8: Developer Tools and Application Integration
-
AWS CodeCommit:
- What is CodeCommit? (Managed Git repository service).
- Storing and managing source code.
-
AWS CodeBuild:
- What is CodeBuild? (Managed build service).
- Compiling source code, running tests, and producing build artifacts.
-
AWS CodeDeploy:
- What is CodeDeploy? (Managed deployment service).
- Automating application deployments to EC2, Fargate, Lambda, and on-premises servers.
-
AWS CodePipeline:
- What is CodePipeline? (Managed continuous delivery service).
- Automating release pipelines (build, test, deploy).
- Integrating with CodeCommit, CodeBuild, CodeDeploy, and third-party tools.
-
AWS CodeStar:
- What is CodeStar?
- Quickly setting up a continuous delivery toolchain for applications on AWS.
-
Amazon API Gateway:
- What is API Gateway?
- Creating, publishing, maintaining, monitoring, and securing REST, HTTP, and WebSocket APIs.
- Integrating with Lambda, EC2, and other AWS services.
-
Amazon Simple Queue Service (SQS):
- What is SQS? (Managed message queuing service).
- Decoupling application components.
- Standard Queues vs. FIFO Queues.
-
Amazon Simple Notification Service (SNS):
- What is SNS? (Managed messaging service).
- Publish-subscribe messaging.
- Sending notifications to various endpoints (email, SMS, Lambda, SQS, HTTP).
-
AWS Step Functions:
- What is Step Functions?
- Coordinating multiple AWS services into serverless workflows.
Section 9: Big Data, Analytics, and Machine Learning (Introduction)
-
Amazon EMR:
- What is EMR? (Managed Hadoop framework).
- Processing large amounts of data using open-source tools.
-
Amazon Athena:
- What is Athena? (Interactive query service).
- Querying data directly in S3 using standard SQL.
-
Amazon QuickSight:
- What is QuickSight? (Business intelligence service).
- Creating visualizations and dashboards.
-
Amazon Kinesis:
- What is Kinesis? (Collecting, processing, and analyzing real-time streaming data).
- Kinesis Data Streams, Kinesis Data Firehose, Kinesis Data Analytics.
-
Amazon SageMaker:
- What is SageMaker? (Fully managed machine learning service).
- Building, training, and deploying machine learning models.
Section 10: Other Important AWS Services and Concepts
-
AWS Directory Service:
- Managed Microsoft AD, Simple AD, AD Connector.
- Integrating with existing on-premises directories.
-
AWS Organizations:
- Consolidating multiple AWS accounts.
- Centralized billing and management.
- Service Control Policies (SCPs).
-
AWS Resource Groups & Tagging:
- Organizing AWS resources.
- Using tags for management, cost allocation, and automation.
-
AWS Budgets:
- Setting custom budgets to track your costs.
- Receiving alerts when costs exceed thresholds.
-
AWS Systems Manager Parameter Store (revisited):
- Storing configuration data and secrets.
- Integration with other AWS services.
-
AWS Well-Architected Framework (Introduction):
- Understanding the pillars (Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization).
- Designing and operating reliable, secure, efficient, and cost-effective systems in the cloud.
Section 11: Advanced Topics and Specializations
-
Networking Deep Dive:
- Advanced VPC configurations.
- Direct Connect Gateway.
- AWS Global Accelerator.
-
Security Deep Dive:
- Identity Federation scenarios.
- AWS Certificate Manager (ACM).
- AWS Systems Manager Secrets Manager (more depth).
- Security Automation with AWS Services.
-
High Availability and Disaster Recovery:
- Designing for HA across AZs and Regions.
- DR strategies (Pilot Light, Warm Standby, Multi-Site Active/Active).
- AWS Backup.
-
Performance Optimization:
- EC2 instance selection.
- EBS and EFS performance tuning.
- Database performance tuning.
- Caching strategies.
-
Cost Optimization Strategies:
- Leveraging Reserved Instances and Savings Plans.
- Using Spot Instances.
- Right-sizing resources.
- Using Cost Explorer and Budgets effectively.
-
DevOps on AWS:
- Integrating AWS Developer Tools (CodeCommit, CodeBuild, CodeDeploy, CodePipeline).
- Using Infrastructure as Code (CloudFormation, CDK, Terraform).
- Monitoring and Logging for DevOps.
-
Machine Learning and AI Services:
- More in-depth on SageMaker.
- Other AI services (Rekognition, Comprehend, Translate, etc.).
-
Data Analytics Deep Dive:
- Working with Data Lakes on S3.
- Using Glue, EMR, Redshift, Athena, QuickSight.
-
Serverless Architecture:
- Designing applications using Lambda, API Gateway, SQS, SNS, DynamoDB, Step Functions.
- Serverless deployment frameworks (SAM, Serverless Framework).
-
Container Orchestration (ECS/EKS Deep Dive):
- Managing container clusters.
- Networking and storage for containers.
- CI/CD for containers.
Section 12: Practice, Certification, and Continuous Learning
-
Hands-on Practice:
- Use the AWS Free Tier to experiment.
- Build small projects using the services you learn.
- Utilize AWS Workshops and Labs.
-
AWS Certifications:
- Understanding the different certification paths (Foundational, Associate, Professional, Specialty).
- Preparing for the AWS Certified Cloud Practitioner (Foundational).
- Preparing for Associate level certifications (Solutions Architect, SysOps Administrator, Developer).
-
Stay Updated:
- Follow the AWS Blog and Announcements.
- Attend AWS re:Invent and other AWS events (virtually or in person).
- Explore new services and features as they are released.
-
Community and Resources:
- AWS Documentation (the ultimate source of truth).
- AWS Training and Certification resources.
- Online communities and forums.
- Third-party training providers.