DevOps.Academy
CoursesCurriculumPricing

    Loading…

    ↑ ↓ move · ↵ open · Ctrl K anywhere

    ◔My learningSign in
    Join the waitlist
    DevOps.Academy

    Free, hands-on DevOps lessons. Made with care in India.

    Learn

    All coursesLinux roadmapCurriculumMy learning

    Academy

    PricingCertificates

    Legal

    PrivacyTermsContact

    devops.rajeev.pro

    course 07 · intermediate

    AWS for DevOps

    The AWS services DevOps engineers touch every week, in the order you need them.

    Start lesson 1 →See the roadmap ↓Take the course quiz
    Level
    Intermediate
    Roadmap
    17 stages · 264 topics
    Lessons
    1 of 17 ready
    Done by you
    0/17 stages
    Before this
    Linux & Bash
    Course quiz
    101 questions →
    Certificate
    Preview →
    before you start

    The AWS for DevOps roadmap

    Everything this course covers, in the order you'll learn it. Open a stage to see why it matters and jump to its lesson.

    lesson ready coming soon done by you
    • What cloud computing is
    • Service models
      • IaaS
      • PaaS
      • SaaS
    • Deployment models
      • Public cloud
      • Private cloud
      • Hybrid cloud
    • Global infrastructure
      • Regions
      • Availability Zones
      • Edge locations
      • Local Zones
    • Shared responsibility model
    01Cloud basics+start here

    The vocabulary every AWS conversation assumes, and how to work with AWS safely from day one.

    Lesson 1: Cloud basics: what you're actually renting →
    • Well-Architected Framework
      • Operational excellence
      • Security
      • Reliability
      • Performance efficiency
      • Cost optimization
      • Sustainability
    • Ways to use AWS
      • Console
      • AWS CLI
      • CloudShell
      • SDKs
    • Account safety
      • Root user and MFA
      • Free Tier
      • Billing alerts
    • Users and groups
      • Users
      • Groups
      • Access keys and rotation
    • Policies
      • Identity-based
      • Resource-based
      • Policy JSON: Effect, Action, Resource, Condition
      • AWS managed vs customer managed vs inline
    • Roles
      • Instance profiles
      • Assuming roles with STS
      • Cross-account access
      • OIDC for CI/CD (GitHub Actions)
    02IAM+

    Get permissions right first. Almost every AWS incident story starts here.

    Lesson 2: IAM: who can do what · coming soon
    • Least privilege
      • IAM Access Analyzer
      • Permission boundaries
    • MFA everywhere
    • IAM Identity Center (SSO)
    • Multi-account
      • AWS Organizations
      • Service control policies (SCPs)
    • Instance types
      • Families: general, compute, memory, storage
      • Burstable instances and CPU credits
      • Graviton (Arm)
    • AMIs
    • Connecting
      • Key pairs and SSH
      • Session Manager (no open ports)
    • Security groups
    03EC2+

    Virtual servers. Still the base of most AWS setups, and where most cloud skills start.

    Lesson 3: EC2: your first server in the cloud · coming soon
    • Storage
      • EBS root volumes
      • Instance store
    • Elastic IPs
    • User data scripts
    • Instance metadata (IMDSv2)
    • Purchasing options
      • On-Demand
      • Spot
      • Savings Plans
      • Reserved Instances
    • CIDR blocks
    • Subnets
      • Public subnets
      • Private subnets
    • Route tables
    • Internet gateway
    • NAT gateway
    04VPC+

    Your private network in AWS. Most connectivity bugs live here.

    Lesson 4: VPC: your own private network · coming soon
    • Firewalls
      • Security groups (stateful)
      • Network ACLs (stateless)
    • VPC endpoints
      • Gateway endpoints (S3, DynamoDB)
      • Interface endpoints (PrivateLink)
    • Connecting VPCs
      • VPC peering
      • Transit Gateway
    • VPC Flow Logs
    • Launch templates
    • Auto Scaling groups
      • Min, max and desired capacity
      • Health checks and replacement
      • Multi-AZ spread
    • Scaling policies
      • Target tracking
      • Step scaling
      • Scheduled scaling
    05Scaling & load balancing+

    Handle traffic spikes and replace failed servers on their own.

    Lesson 5: Scaling and load balancing · coming soon
    • Elastic Load Balancing
      • Application Load Balancer (ALB)
      • Network Load Balancer (NLB)
      • Target groups
      • Listeners and rules
    • TLS certificates with ACM
    • Buckets and objects
    • Storage classes
      • Standard
      • Standard-IA
      • Intelligent-Tiering
      • Glacier
    • Lifecycle rules
    • Versioning
    06S3+

    Storage for backups, artifacts, logs and static sites.

    Lesson 6: S3: storage for everything · coming soon
    • Access control
      • Bucket policies
      • Block Public Access
      • Presigned URLs
    • Encryption
      • SSE-S3
      • SSE-KMS
    • Static website hosting
    • Replication
    • EBS
      • Volume types: gp3, io2, st1, sc1
      • Snapshots
      • Encryption
    07Storage types+

    Pick the right disk for the job, and know what survives a stop.

    Lesson 7: EBS, EFS and instance store · coming soon
    • EFS (shared file system)
    • Instance store (temporary)
    • AWS Backup
    • Hosted zones
      • Public
      • Private
    • Records
      • A and AAAA
      • CNAME
      • Alias records
    08Route 53+

    DNS for your domains, with health checks and failover.

    Lesson 8: Route 53: DNS for your apps · coming soon
    • Routing policies
      • Simple
      • Weighted
      • Latency
      • Failover
      • Geolocation
    • Health checks
    • Domain registration
    • Distributions
      • Origins
      • Behaviors
    • Cache policies
    • Invalidations
    09CloudFront+

    Put a fast, cached edge in front of your app.

    Lesson 9: CloudFront: a fast edge in front of your app · coming soon
    • HTTPS with ACM (us-east-1)
    • Origin Access Control for S3
    • Edge code
      • CloudFront Functions
      • Lambda@Edge
    • RDS
      • DB instances
      • Storage: gp3 and Provisioned IOPS
      • Multi-AZ
      • Read replicas
      • Backups and snapshots
      • Parameter groups
    • Aurora
    10Databases+

    Managed databases so you don't run backups by hand.

    Lesson 10: Managed databases: RDS, DynamoDB, ElastiCache · coming soon
    • DynamoDB
      • Tables, items and attributes
      • Primary keys and indexes
      • Capacity modes: on-demand and provisioned
      • Streams
      • Backup and restore
      • DynamoDB Local
    • ElastiCache
      • Redis / Valkey
      • Memcached
    • ECR
      • Repositories
      • Lifecycle policies
      • Image scanning
    • ECS
      • Clusters
      • Task definitions
      • Services
      • Fargate
      • EC2 launch type
    11Containers+

    Run the images from the Docker course on AWS.

    Lesson 11: Containers on AWS: ECR, ECS and EKS · coming soon
    • EKS
      • Managed node groups
      • Fargate profiles
      • EKS Pod Identity / IRSA
    • App Runner
    • Creating and invoking functions
    • Triggers
      • API Gateway
      • S3 events
      • SQS
      • EventBridge schedules
    • Versions and aliases
    • Layers
    12Lambda+

    Run code without servers, for glue jobs and events.

    Lesson 12: Lambda: code without servers · coming soon
    • Container image functions
    • Limits
      • Cold starts
      • Timeout and memory
      • Concurrency
    • API Gateway
      • HTTP APIs
      • REST APIs
    • CloudWatch Metrics
      • Namespaces and dimensions
      • Custom metrics
    • CloudWatch Logs
      • Log groups and retention
      • Logs Insights
    13Monitoring & auditing+

    Metrics, logs, alarms and an audit trail for everything above.

    Lesson 13: Monitoring and auditing: CloudWatch, CloudTrail and Config · coming soon
    • Alarms
      • Thresholds
      • Notifications with SNS
    • Dashboards
    • EventBridge rules
    • CloudTrail
    • AWS Config
    • SQS
      • Standard vs FIFO
      • Visibility timeout
      • Dead-letter queues
    • SNS
      • Topics and subscriptions
      • Fan-out to SQS
    14Messaging+

    Send email and decouple services with queues and topics.

    Lesson 14: Messaging: SES, SNS and SQS · coming soon
    • SES
      • Identity verification and DKIM
      • Sandbox and sending limits
      • Bounces and complaints
    • EventBridge event bus
    • KMS
      • Customer managed keys
      • Key policies
    • Secrets Manager
    • SSM Parameter Store
    15Security & secrets+

    Keep secrets out of code and spot trouble before it spreads.

    Lesson 15: Security and secrets: KMS, Secrets Manager and threat detection · coming soon
    • Threat detection
      • GuardDuty
      • Security Hub
    • Edge protection
      • AWS WAF
      • AWS Shield
    • CloudFormation
      • Stacks and templates
      • Change sets
      • Drift detection
    • AWS CDK
    16Automation & IaC+

    Stop clicking in the console: script, template and automate your account.

    Lesson 16: Automation and IaC: CloudFormation, CDK and Systems Manager · coming soon
    • Systems Manager
      • Run Command
      • Session Manager
      • Patch Manager
    • AWS CI/CD services
      • CodeBuild
      • CodePipeline
      • CodeDeploy
    • Billing and the Free Tier
    • Budgets and alerts
      • Zero-spend budget
      • Forecast alerts
    • Cost Explorer
    17Cost basics+

    Know what you're spending before the bill arrives.

    Lesson 17: Cost basics and the course project · coming soon
    • Cost allocation
      • Tags
      • Cost categories
    • Saving money
      • Right-sizing with Compute Optimizer
      • Savings Plans and Spot
      • Trusted Advisor
    Course complete · ready for the next one

    Stage order follows the community roadmap at roadmap.sh/aws, trimmed to what DevOps work needs.