AWS for Cloud & DevOps Engineers¶
Duration: 12–16 weeks · Difficulty: Beginner → Advanced · Labs: create → prove → break/fix → destroy
Learn AWS the way operators use it: start from a clear problem, build a simple mental model, then practise with a real sandbox lab (create → prove → break/fix where useful → destroy). Suitable if you are new to AWS or revising for Cloud and DevOps interviews.
How to use this course
Work modules in order. Finish each lab with evidence files, practise Interview Questions aloud, and use standalone triage labs after Modules 3–4.
Cost hygiene
Prefer Free Tier. Never leave NAT Gateways, ALBs, or RDS running overnight. Create a budget alarm in Module 1 before you launch compute.
Learning roadmap¶
- Foundations (Modules 1–2) — global infrastructure, cost guardrails, Identity and Access Management (IAM) / Security Token Service (STS)
- Network & compute (Modules 3–4) — Virtual Private Cloud (VPC) paths, EC2 / Auto Scaling / load balancing
- Data & apps (Modules 5–8) — storage, databases, containers, serverless
- Operate & secure (Modules 9–10) — observability and security services
- Deliver & govern (Modules 11–15) — Infrastructure as Code (IaC), CI/CD, FinOps, disaster recovery, landing zones
- Triage mastery (Module 16) — decision tree under pressure
Checkpoint after Module 4
Complete IAM and VPC Reachability Triage before continuing — it locks Modules 1–4 together.
Prerequisites¶
- Linux · Networking · Git
- Docker (required for Module 7 ECR lab)
- Kubernetes and Terraform recommended for Modules 7 and 11+
Modules¶
| Module | Focus | Lab proof | Start here |
|---|---|---|---|
| 1 | Fundamentals | STS identity + Budgets alarm | Global infrastructure |
| 2 | IAM | AssumeRole deny/allow | Identity & access |
| 3 | Networking | Public VPC + S3 endpoint + route break/fix | VPC networking |
| 4 | Compute | EC2 nginx + SG break/fix + curl | EC2 · ASG · LB |
| 5 | Storage | S3 versioning/encryption/policy deny | S3 · EBS · EFS |
| 6 | Databases | DynamoDB put/query/PITR | RDS · DynamoDB |
| 7 | Containers | ECR push + task definition artefact | ECS · EKS · ECR |
| 8 | Serverless | Lambda Function URL break/fix | Lambda & events |
| 9 | Monitoring | Custom metric alarm ALARM→OK | Observability |
| 10 | Security | KMS + encrypted S3 proof | Security services |
| 11 | IaC | CloudFormation stack create/delete | Terraform · CFN · CDK |
| 12 | CI/CD | CodeBuild SUCCEEDED | Pipelines on AWS |
| 13 | Cost | USD 5 Budget | Cost optimisation |
| 14 | Reliability | EBS snapshot DR drill | HA & DR |
| 15 | Production | Landing-zone artefacts + org/boundary | Landing zones |
| 16 | Troubleshooting | Full STS + SG triage loop | Troubleshoot AWS |
Related¶
- Networking · Linux · Docker
- Kubernetes · Terraform
- Azure · GCP
- Cloud Engineer path