Learn AWS for DevOps: IAM, EC2, VPC, S3, RDS, Lambda, ECS, CloudWatch, and CodePipeline — hands-on tutorials with quizzes and real-world examples for every topic.
85 lessons in this tutorial
Learn what AWS is, why it became the leading cloud platform, and how DevOps teams use its services to build, deploy, and operate systems faster.
Understand AWS Regions, Availability Zones, and Edge Locations so you can choose the right geography for latency, compliance, and high availability.
See the core setup steps for a new AWS environment, including account creation, secure access patterns, and the first tools DevOps engineers use every day.
Create a secure AWS account foundation by enabling MFA on the root user, setting a billing alarm, and establishing safer daily access patterns.
Get comfortable with the AWS Management Console by learning the services menu, search bar, region switcher, and recent history navigation.
Install and configure AWS CLI v2 on macOS, Linux, or Windows, then verify credentials and use profiles for multiple AWS accounts.
Understand AWS Identity and Access Management, including users, groups, roles, policies, and least-privilege design for secure cloud operations.
Create IAM users, organize them into groups, and decide when console access or programmatic access is appropriate.
Learn when to use IAM roles, how policy JSON works, and why managed policies are usually better than many inline exceptions.
Apply practical IAM security habits such as MFA, access key rotation, role-based access, and regular permission review with AWS analyzers.
Learn how Amazon EC2 provides virtual machines in the cloud and how AMIs, instance types, storage, and pricing models affect deployments.
Launch an EC2 instance step by step by choosing an AMI, instance type, networking, security group, and key pair, then connect over SSH.
Understand EC2 instance family names and choose between general purpose, compute-optimized, memory-optimized, and specialized hardware.
Use EC2 security groups as stateful firewalls by defining inbound and outbound rules based on ports, CIDR ranges, and other security groups.
Understand EC2 key pairs, how to create and use them with SSH, and what recovery options exist if a private key is lost.
Learn how Amazon VPC creates isolated networking in AWS and how subnets, route tables, internet gateways, and NAT gateways shape connectivity.
Learn CIDR basics, understand public and private subnets, and see how AWS subnets map to Availability Zones inside a VPC.
Understand how VPC route tables direct traffic, when to add an internet gateway route, and how subnet associations control connectivity.
Use a NAT Gateway to let private subnets reach the internet for updates and APIs while keeping them unreachable from inbound internet traffic.
Understand Amazon S3 object storage, including buckets, objects, keys, and storage classes used for backups, artifacts, and static content.
Create S3 buckets, follow naming rules, upload objects through the console or CLI, and understand bucket URLs and Region placement.
Control S3 access safely with Block Public Access, bucket policies, IAM policies, ACL guidance, and pre-signed URLs for temporary sharing.
Enable S3 versioning to protect objects from accidental overwrites and deletes, then combine it with lifecycle rules for cost control.
Explore Amazon RDS managed relational databases, supported engines, and the difference between Multi-AZ deployments and read replicas.
Create an RDS instance by choosing the engine, instance class, storage, subnet group, and network placement that match your application.
Secure Amazon RDS with private subnet placement, tight security groups, encryption, and managed secret rotation for database credentials.
Learn how AWS Lambda runs event-driven code without server management and how cold starts, limits, and pricing affect serverless design.
Write and test your first AWS Lambda function, then tune handlers, events, environment variables, memory, and timeout settings.
Compare Amazon ECS and Amazon EKS, understand clusters, task definitions, and when Fargate or EC2 launch types make sense for containers.
Define ECS tasks, deploy container images from ECR, and run services with desired counts, load balancers, and auto scaling.
Learn how Amazon CloudWatch collects metrics, logs, alarms, and dashboards, and how it differs from CloudTrail in AWS observability.
Work with default EC2 metrics, create a CPU alarm, understand log groups and streams, and use metric filters for operational insight.
See how AWS CodePipeline coordinates CI/CD stages with CodeCommit, CodeBuild, CodeDeploy, and other services for automated delivery.
Use AWS CodeBuild as a managed build service with buildspec phases, environment variables, caching, and CodePipeline integration.
Learn practical AWS cost optimization techniques with Cost Explorer, Budgets, Trusted Advisor, Savings Plans, and workload right-sizing.
Learn how Elastic Load Balancing spreads traffic across healthy targets and how to choose ALB, NLB, or legacy CLB for AWS workloads.
Understand how an Application Load Balancer handles HTTP and HTTPS routing with listener rules for modern AWS applications.
Learn when to use a Network Load Balancer for TCP or UDP traffic, static IP needs, and very low latency AWS services.
Learn how EC2 Auto Scaling maintains desired capacity, launches replacement instances, and grows infrastructure with demand.
Understand how to configure Auto Scaling Groups with min, max, desired capacity, health check grace periods, and instance refresh.
Learn how target tracking, step scaling, simple scaling, and scheduled actions control EC2 fleet growth in AWS.
Learn how Amazon CloudFront caches content at edge locations and accelerates access to S3, ALB, EC2, and custom origins.
Understand how to create CloudFront distributions with the right origin settings, cache behaviours, access restrictions, and price class.
Learn how to use ACM certificates, custom domains, HTTPS redirects, and minimum TLS settings with CloudFront.
Learn how Amazon Route 53 provides DNS, domain registration, health checks, and alias records for AWS applications.
Understand common Route 53 record types, how to create them in the console, and how to test DNS responses with dig and nslookup.
Learn when to use simple, weighted, latency, failover, geolocation, and geoproximity routing policies in Route 53.
Learn how DynamoDB delivers serverless NoSQL storage with single-digit millisecond latency and flexible scaling patterns.
Understand DynamoDB table design, primary keys, GSIs, LSIs, TTL, and point-in-time recovery for resilient NoSQL workloads.
Learn how DynamoDB GetItem, PutItem, UpdateItem, DeleteItem, Query, Scan, and Streams support efficient application workflows.
Learn how ElastiCache uses Redis or Memcached to add in-memory performance for sessions, leaderboards, and rate limiting.
Learn how Amazon SQS decouples producers and consumers with fully managed queues, visibility timeouts, and dead-letter handling.
Understand how SQS dead-letter queues isolate failing messages, how maxReceiveCount works, and how to replay messages safely.
Learn how Amazon SNS publishes events to multiple subscribers using topics, fan-out patterns, and subscription filtering.
Learn how Amazon EventBridge uses event buses, rules, targets, and schedules to build event-driven AWS automation.
Learn how AWS Step Functions orchestrates serverless workflows with state machines, retries, branching, and parallel execution.
Learn how API Gateway provides a managed front door for REST, HTTP, and WebSocket APIs with throttling and staged deployments.
Understand how to create REST APIs in API Gateway with resources, methods, mappings, usage plans, and CORS settings.
Learn how API Gateway integrates with Lambda using proxy or custom integrations, authorizers, and CRUD-style serverless APIs.
Learn how Amazon ECR stores Docker images securely with repository scanning, lifecycle policies, and AWS CLI based authentication.
Learn how Amazon EKS runs managed Kubernetes on AWS with a managed control plane, worker nodes, and IAM Roles for Service Accounts.
Understand how to create an EKS cluster with eksctl, satisfy VPC and subnet requirements, and configure kubeconfig access.
Learn how EKS managed node groups, self-managed nodes, and Fargate profiles handle pod capacity and cluster upgrades.
Learn how AWS CloudFormation defines infrastructure declaratively with stacks, templates, and change sets for repeatable deployments.
Understand how to create, update, troubleshoot, roll back, and organize CloudFormation stacks with nested stacks and StackSets.
Learn the structure of CloudFormation templates, intrinsic functions, parameters, conditions, and resource definitions with YAML examples.
Learn when Elastic Beanstalk is a good fit for application deployment and how environments, versions, and .ebextensions work.
Learn how AWS KMS manages encryption keys, supports envelope encryption, and integrates with storage and secrets services.
Learn how AWS Secrets Manager stores, rotates, and retrieves credentials and API keys securely for applications and automation.
Learn how AWS WAF filters web traffic and how Shield Standard and Shield Advanced help protect applications from DDoS events.
Learn how CloudTrail records AWS API activity, separates management and data events, and supports audit and investigation workflows.
Learn how AWS Config tracks resource configuration history and compliance with managed or custom rules and remediation actions.
Learn how AWS Systems Manager centralizes operational tasks such as shell access, parameter storage, patching, and remote command execution.
Learn how Session Manager provides SSH-free shell access to EC2 instances with IAM controls and CloudTrail auditability.
Learn how Parameter Store manages configuration values and SecureString secrets for EC2, Lambda, and build systems.
Learn how AWS Organizations manages multiple AWS accounts with OUs, consolidated billing, and central policy controls.
Understand how Service Control Policies create account guardrails in AWS Organizations and restrict what IAM can ever allow.
Learn how Amazon EFS provides a managed NFS file system for Linux workloads and how it differs from EBS and S3.
Understand EBS volume types, snapshots, encryption, and online resizing practices for dependable EC2 block storage.
Learn how AWS Kinesis handles real-time streaming data with Data Streams, Firehose, and Analytics style services.
Learn how Athena queries data stored in Amazon S3 using serverless SQL and why partitioning reduces cost for large datasets.
Learn how CodeDeploy automates deployments to EC2, Lambda, and ECS with AppSpec files, hooks, and blue or green strategies.
Learn how AWS CodeCommit hosts Git repositories with IAM based access, HTTPS or SSH cloning, and push event notifications.
Learn how AWS CDK defines infrastructure with familiar programming languages and synthesizes stacks for deployment to CloudFormation.
Learn how AWS SAM builds, tests, and deploys serverless applications with a CloudFormation extension and local tooling.