AWS Tutorial
Build on Amazon Web Services: IAM, EC2, S3, RDS, Lambda, networking, containers and cost control.
- Topics
- 30
- Full lessons
- 30
- Est. hours
- ~5
- Interview Qs
- 27
Overview
Amazon Web Services (AWS) is a cloud platform with services for compute, storage, databases, networking and much more.
The track focuses on the services application developers use most, with security (IAM) and cost awareness throughout.
What you will learn
- Secure accounts with IAM and least privilege
- Run apps on EC2, Lambda and ECS
- Store data in S3, RDS and DynamoDB
- Deliver with CloudFront, CodePipeline and CloudFormation
Prerequisites
None — this track starts from the very beginning.
Learning path
The recommended sequence, from beginner to advanced. Each stage builds on the one before.
- 1Foundations · 3 topics · BeginnerIntroduction to AWS · AWS Global Infrastructure · IAM
- 2Compute & Storage · 6 topics · Beginner → IntermediateEC2 · S3 · RDS · DynamoDB · Lambda · API Gateway
- 3Networking · 6 topics · IntermediateVPC · Security Groups · Route 53 · CloudFront · Elastic Load Balancing · Auto Scaling
- 4Operations · 2 topics · IntermediateCloudWatch · AWS Secrets Manager
- 5Containers & CI/CD · 7 topics · Intermediate → AdvancedECS · ECR · EKS Fundamentals · CodePipeline · CodeBuild · CloudFormation · Serverless Applications
- 6Production · 6 topics · AdvancedCost Optimization · IAM Security Best Practices · Deploying React Applications · Deploying Node.js APIs · Deploying ASP.NET Core Applications · Practical Cloud Projects
Complete topic list
30 topicsFoundations
3 topics- Introduction to AWSBeginner5m
- AWS Global InfrastructureBeginner5m
- IAMBeginner5m
Compute & Storage
6 topicsNetworking
6 topics- VPCIntermediate5m
- Security GroupsIntermediate5m
- Route 53Intermediate5m
- CloudFrontIntermediate5m
- Elastic Load BalancingIntermediate5m
- Auto ScalingIntermediate5m
Operations
2 topics- CloudWatchIntermediate5m
- AWS Secrets ManagerIntermediate5m
Containers & CI/CD
7 topics- ECSIntermediate5m
- ECRIntermediate5m
- EKS FundamentalsIntermediate5m
- CodePipelineIntermediate5m
- CodeBuildAdvanced5m
- CloudFormationAdvanced5m
- Serverless ApplicationsAdvanced5m
Production
6 topics- Cost OptimizationAdvanced5m
- IAM Security Best PracticesAdvanced5m
- Deploying React ApplicationsAdvanced5m
- Deploying Node.js APIsAdvanced5m
- Deploying ASP.NET Core ApplicationsAdvanced5m
- Practical Cloud ProjectsAdvanced5m
Code example
A taste of the track, from Introduction to AWS.
aws configure sso # sign in through IAM Identity Center (temporary credentials)
aws sts get-caller-identity --profile dev
aws s3 ls --profile dev
aws configure set region ap-south-1 --profile dev # Mumbai
{
"UserId": "AROAXXXXXXXXXXXX:asha",
"Account": "123456789012",
"Arn": "arn:aws:sts::123456789012:assumed-role/AWSReservedSSO_Developer_abc/asha"
}Practice exercises
Create a monthly cost budget of USD 10 that emails you at 80% of actual spend.
Name the Region code for Mumbai and explain why you would deploy across two of its AZs.
Write a policy statement that allows only reading items from the DynamoDB table Orders (GetItem and Query).
Stop and then start the instance i-0abc123def456.
Enable versioning on shop-assets-123 with the CLI.
Restore shop-db to a new instance from the latest restorable time.
Show all 30 exercises
Create the Orders table with on-demand capacity using the CLI.
Increase the hello function’s memory to 512 MB and timeout to 10 seconds.
Add a route GET /products/{id} to an existing HTTP API integration.
Create a VPC with CIDR 10.0.0.0/16 and a subnet 10.0.1.0/24 in ap-south-1a.
Remove a rule that allows SSH (22) from 0.0.0.0/0 on sg-app.
Which record type would you add to verify domain ownership for an email provider?
Why is the S3 bucket behind CloudFront kept private?
Add an HTTP listener on port 80 that redirects to HTTPS.
Start an instance refresh on asg-web after updating the launch template.
Write a Logs Insights query that counts errors per 5 minutes.
Write the IAM statement that lets the app read only prod/shop/db.
Create a service running 2 tasks of shop-api on Fargate in two private subnets.
Write a lifecycle policy rule that expires untagged images older than 14 days.
Delete the learning cluster to stop charges.
What file must the build stage output for the standard ECS deploy action?
Add an npm token from Secrets Manager secret ci/npm (key token) as NPM_TOKEN.
Protect AssetsBucket from being deleted when the stack is deleted.
Add a DELETE /notes/{id} route to NotesFunction.
Which pricing option suits a nightly batch job that can be retried if interrupted?
Write the trust policy condition that allows only GitHub repo techiebabaji/site (main branch) to assume a role via OIDC.
Write a CloudFront Function (viewer request) that rewrites paths without a file extension to /index.html.
Write the .dockerignore for this project.
Deploy a published ASP.NET Core app to Elastic Beanstalk with the EB CLI.
List the AWS services used in Project 2 and the job each one does.
Common interview questions
- What is the principle of least privilege in IAM?
- What is EC2?
- What is S3?
- Security groups vs network ACLs?
- What is AWS, and what are its core service categories?
- Regions vs Availability Zones vs edge locations?
- IAM users vs groups vs roles vs policies?
- What is an Amazon Machine Image (AMI)?
- What are S3 storage classes?
- How would you host a React SPA on AWS?
- RDS vs DynamoDB?
- What is AWS Lambda and its limitations?
- What is a VPC and what are public vs private subnets?
- What is Amazon RDS and what does it manage for you?
- How do you design a DynamoDB table?
- What does API Gateway do?
- How does Route 53 route traffic?
- What is CloudFront?
- What is CloudWatch?
- How do apps read secrets on AWS?
- How do Elastic Load Balancing and Auto Scaling work together?
- What is CloudFormation?
- How do you optimise AWS costs?
- ECS on Fargate vs EC2 launch type vs EKS?
- How would you build a CI/CD pipeline on AWS?
- What is a serverless architecture on AWS?
- How do you deploy an ASP.NET Core app on AWS?