Amazon Web Services (AWS) Certified - 5 Certifications!

Explore AWS AI fundamentals, from AI, ML, and deep learning to generative AI, inferencing, and foundation models, and learn how SageMaker and Bedrock deploy them.

Learn to use AWS Comprehend via the command line in Cloud Shell, performing synchronous, real-time analysis of sample text to detect entities, sentiment, key phrases, and syntax.

Run the AWS translate CLI to translate an English document to Spanish, extract the translated_text from the resulting JSON, and note the synchronous, small-file limits for this lab.

Use the command line to synthesize Spanish text into an mp3 with AWS Polly in the Joanna voice. Then download and verify the output file from the cloud shell session.

Explore the AWS AI stack from machine learning frameworks to foundation models, and examine SageMaker, Bedrock, Comprehend, Translate, Rekognition, Transcribe, and EC2 for scalable AI workloads.

Explore AWS AI use cases across computer vision, NLP, IDP, and fraud detection, and see how generative AI, Bedrock, and SageMaker Jumpstart enable rapid application development.

Identify business objectives and translate them into machine learning problems, guiding data processing, model development, deployment, monitoring, and MLOps with SageMaker and Data Wrangler.

Learn to set up an Amazon SageMaker domain and canvas workspace, import a CSV dataset, launch SageMaker Studio, and manage billing by logging out and deleting resources.

Analyze and improve data quality using SageMaker Data Wrangler in canvas, import a CSV dataset, build a regression report on satisfaction score, and explore data quality insights.

Fix and prepare data with SageMaker Data Wrangler and canvas, removing duplicates and non-predictive features, and addressing target leakage, missing values, and outliers. Then perform data quality analyses.

Apply feature engineering in SageMaker Data Wrangler with custom formulas and spark SQL. Create engagement score, value segment, age group, one-hot encoding, and PCA-based features; drop the satisfaction score.

Build and train a machine learning model in SageMaker Studio Canvas using a tabular e-commerce dataset via Data Wrangler, evaluate with precision, recall, F1, and AUC-ROC, and generate predictions.

Explore the generative AI development lifecycle from defining business use cases to prompt engineering, retrieval augmented generation, and fine tuning, then responsible deployment and evaluation.

Implement responsible AI practices by balancing fairness, explainability, transparency, and privacy across design and data lifecycle. Use guardrails and governance tools like SageMaker and Bedrock to ensure safety and compliance.

Apply defense in depth for AI on AWS, securing data, identity, networks, and applications with encryption and continuous monitoring, while establishing governance and compliance.

Learn how vector embeddings power semantic search and how to store them in vector databases. Implement Rag with AWS services like OpenSearch and Bedrock.

Explore evaluating and optimizing AI models using classification and regression metrics, confusion matrices, and human-in-the-loop assessments. Leverage AWS Bedrock and SageMaker for deployment, monitoring, and scalable inference.

Launch an Amazon Linux ec2 instance, install node.js and express, enable ip forwarding from port 80 to 8080 with a security group, then create and copy a custom ami.

Learn to use elastic block storage with EC2 by attaching and mounting an EBS volume, creating a snapshot, and launching a new instance from that snapshot, with delete-on-termination considerations.

Explore how to build, store, and deploy Docker containers with ECS, using ECR, task definitions, and deployments on EC2 or Fargate, managed by clusters and services.

Demonstrates creating an ECS cluster on AWS Fargate, defining a task definition and sample container, configuring WSVPC networking, and deploying a one-task service verified by a public IP.

Explore S3 access control lists and bucket policies in this hands-on demonstration, showing how to create, edit, and apply fine-grained JSON bucket policies with policy generator, ARNs, and ACL differences.

Explore advanced Amazon RDS concepts, including backups, failover, replication, performance tuning, and Aurora advantages, with hands-on coverage of RDS Custom, parameter groups, and read replicas.

Learn to migrate an Oracle database to Amazon Aurora using the AWS Database Migration Service, configuring security groups and RDS endpoints, setting up a replication instance, and mapping targeted tables.

Explore Amazon DynamoDB's features, including tables, items, primary keys, and secondary indexes, and compare queries vs scans. Learn about DynamoDB streams, DAX, TTL, and provisioned throughput for performance.

master vpc networking basics, including subnetting, route tables, and network access control lists, plus internet gateway routing and public ip concepts across default vpcs.

Protect your AWS infrastructure from DDoS and other attacks with Shield, WAF, and Firewall Manager. Implement fine-grained rules, CloudFront protection, and conduct penetration testing with proper permissions.

Explore how AWS CloudFront speeds content with a global network of edge locations, origin servers, and distributions that cache or invalidate content, including static and dynamic strategies.

Learn to use CloudFormer to generate a CloudFormation template from existing resources and deploy a stack creating a DynamoDB table, with the template stored in S3.

Design and deploy AWS VPC architectures with CloudFormation Designer, translating visual diagrams into YAML or JSON templates, including CIDR blocks and subnets, then deploy as stacks.

Design and deploy a public subnet in a VPC with CloudFormation Designer by attaching an internet gateway, configuring a route to 0.0.0.0/0, and updating the stack.

Design and deploy a WordPress web server in a VPC by creating a security group, configuring ingress rules, and using CloudFormation Designer to launch EC2 in a public subnet.

Explore AWS OpsWorks, a configuration management platform using stacks, layers, and Chef recipes to manage infrastructure as code, deploying apps to EC2 resources with scalable auto scaling.

Launch and deploy a node.js Express app on an OpsWorks stack, using a Chef recipe and infrastructure as code to define layers, instances, and GitHub-hosted deployment.

Build a CI/CD pipeline with AWS CodePipeline to deploy a Node.js app to an Elastic Beanstalk environment, integrating GitHub for automatic updates and production deployment.

Build a CI/CD pipeline by connecting GitHub to CodePipeline and deploying to Elastic Beanstalk via webhooks. Verify deployments and clean up resources to avoid costs.

Explore how AWS Simple Queue Service (SQS) decouples processing with standard and FIFO queues, manages message lifecycles, visibility timeouts, long and short polling, and dead-letter, delay, and timer features.

Explore Amazon SNS and its transport protocols, including http/https, email, json, sqs, sms, and mobile push notifications, and learn how publishers publish to topics and subscribers receive messages via endpoints.

Discover how the AWS API gateway provides a secure, serverless front door to data via lambda. Route 53 and CloudFront enable fast, low-latency dynamic apps.

Deploy a REST API with AWS API Gateway, import the example API, and test endpoints for pets and pet IDs with Postman. Authenticate via IAM roles and fetch JSON data.

Explore AWS big data services for storage, processing, and real-time analytics, including Redshift, EMR, Elasticsearch, QuickSight, machine learning, and Kinesis, plus Snowball and migration tools.

Explore AWS serverless platforms, from compute and storage to databases, APIs, and analytics, and learn how to leverage Lambda, API Gateway, Lambda@Edge, Fargate, DynamoDB, and AppSync for scalable, resilient apps.

Configure an SQS queue to subscribe to an SNS topic, publish messages to that topic with the Node.js SDK, and process and delete messages from the queue.

Program DynamoDB with Python using the AWS SDK (Boto3): create a test table with an Id key and a product category–price index, load items from S3 JSON, and query.

Launch and connect to an AWS ElastiCache Redis cluster from Cloud9, configure security groups and subnet groups, then write and read data using redis-py with expire and hmset.

Learn essentials of encryption on AWS, including symmetric and asymmetric methods, key management with AWS KMS and CloudHSM, Secrets Manager, envelope encryption, and data encryption at rest and in transit.

Learn to create a KMS encryption key in the IAM management console and apply it to S3 bucket default encryption to secure uploads and automatic decryption on download.

Create a Cognito user pool, configure sign-in with username and email, set attributes and verification, and set up an app client and domain, then explore federated identities and Cognito sync.

Discover how to implement AWS Cognito sign-up with the AWS JavaScript SDK, configure user and identity pools, handle attributes including a custom LinkedIn field, and manage email verification.

Learn to configure an authenticated cognito identity pool with s3 access and cognito sync, create a sync database by listing records, obtain a sync token, and update user-specific records.

Learn to upload a JSON object to S3 using the AWS JavaScript SDK with Cognito credentials, configuring bucket keys and identity IDs, and build a minimal SDK for faster load.

Clean up resources by deleting identity pool, user pool domain, user pool, and S3 bucket, then optimize the AWS JavaScript SDK with Webpack to include only Cognito and S3.

Build a serverless JavaScript application hosted on S3 and fronted by CloudFront, using Login with Amazon to obtain federated temporary credentials for DynamoDB read and write.

Explore how AWS Lambda runs, deploys, and scales serverless functions, covering runtimes, deployment packages, environments, event sources, VPC access, layers, versions, aliases, and monitoring.

Create and test a Node.js lambda function in the AWS lambda console, edit with your own code, and verify the invocation by inspecting CloudWatch logs.

Create and test a Python lambda function from the lambda management console, sending a JSON event and returning a response, with Cloudwatch logs for verification.

Design and implement a Node.js based order workflow using AWS Lambda functions and AWS Step Functions to orchestrate receive order, check stock, order stock, deliver order, and build customer.

Create a NodeJS lambda function and a browser-based app that signs in with IAM credentials and uses the AWS SDK to invoke the function and return results.

Build a nodejs app with AWS SAM, wire a Lambda to S3 events, and deploy using SAM build and SAM deploy, linking a source bucket to a -resized destination bucket.

Extend continuous integration and delivery on AWS by building with npm, testing with mocha in CodeBuild, and deploying artifacts to Elastic Beanstalk via CodePipeline.

Learn to monitor a nodejs app with the AWS X-Ray SDK integrated in Elastic Beanstalk, using the X-Ray daemon on EC2, with IAM permissions and sampling rules for trace data.

Create a nodejs server on EC2 Linux by configuring IAM users, roles, security groups, and a bash bootstrap; install NodeJS, AWS SDK, deploy via SFTP, and create an AMI.

Explore CloudWatch metrics and logs, including container insights, dashboards, alarms, synthetics, and CloudWatch Logs Insights, while learning to secure, analyze, and archive data with cross-account and VPC endpoint security.

Explore CloudWatch monitoring for EC2, enabling detail monitoring, viewing CPU utilization, creating dashboards with metric graphs and Markdown text widgets, and configuring CloudWatch events and rules with regional considerations.

Explore how AWS Route 53 manages public and private hosted zones, routing policies, health checks, and traffic flow to optimize latency and availability for global domains.

Explore AWS backup and recovery options across EC2, databases, S3, EFS, and storage gateway; compare full and incremental backups, RPO, RTO, and using AWS Backup for centralized, policy-driven protection.

Explore how EC2 auto scaling and the AWS application auto scaling service enable horizontal scaling, health checks, and fault tolerance across EC2, ECS, DynamoDB, Aurora, and Lambda with scalable policies.

Build a three-tier, advanced VPC architecture with public and private subnets, security groups, VPC flow logs, elastic load balancer, and multi-AZ Aurora.

Configure security groups in an advanced vpc to control inbound and outbound traffic between elb, web servers, database, nat, and bastion, using http and https and internal sg references.

Deploy a multi-AZ Aurora serverless cluster across two private subnets with a single endpoint, in a DB subnet group spanning us-east-1a and us-east-1b, accessible via a bastion.

Explore advanced VPC security by configuring stateless network access control lists with inbound and outbound rules, rule ordering, and explicit deny rules to protect subnets and resources.

Delete the auto scaling group, terminate remaining instances, remove the nat eni and elastic ip, then delete the application load balancer, Cloud9 environment, Aurora serverless cluster, and VPC flow logs.

Explore application load balancers (ALB) in AWS, including path-based routing, target groups, and routing to IPs, microservices, and containers with HTTP, HTTPS, HTTP/2, and WebSockets.

Launch two EC2 instances for WordPress and Magento, then set up an application load balancer with two target groups and path-based routing for store to Magento and default to WordPress.

Learn how network load balancers operate at layer four, forwarding packets to VPC targets via TCP and web sockets, with CLI setup using AWS elbv2 and target groups.

Implement a network load balancer with an auto scaling group of EC2 instances using a TCP target group on port 80, with CPU-based scaling and health checks.

Learn how AWS ElastiCache Redis enables in-memory caching to reduce database load, and manage session state, and follow a hands-on lab to create a Redis cluster and configure security groups.

Master AWS encryption concepts, including symmetric and asymmetric schemes, KMS and CloudHSM key management, envelope encryption, and secrets manager for data at rest and in transit.

Create a KMS encryption key in the IAM console and use it to enable AWS KMS encryption for an S3 bucket, showing transparent data protection and key deletion scheduling.

Create and test a node.js lambda function in the lambda console, wiring a handler to receive an event with key one, key two, key three, and verify output in CloudWatch.

Create and test a Python AWS Lambda function using the AWS Lambda console, send a JSON event, and view CloudWatch logs to verify a returned, structured response.

Explore five well-architected pillars—security, reliability, performance, cost optimization, and operational excellence—through scalable, automated, data-driven architecture design and reference architectures.

Explore AWS Direct Connect, a dedicated link between on-premises networks and AWS. Create a connection in management console, download the letter of authorization, and configure public or private virtual interfaces.

Learn to design serverless architectures on AWS using SAM, Lambda, and API gateway to build RESTful web and mobile backends, with Step Functions, Lambda@Edge, and VPC access via private subnets.

Enable ec2 detail monitoring, view CloudWatch metrics across regions, build a cpu utilization dashboard with markdown text widgets, and create CloudWatch events to trigger actions.

Explore how AWS Route 53 delivers public and private hosted zones, diverse routing policies (latency, geolocation, geo proximity, weighted, multi-value), health checks, and traffic flow for resilient, low-latency routing.

Explore AWS backup and recovery concepts, including rpo and rto, and outline backup plans across EC2, RDS, DynamoDB, S3, and Storage Gateway using AWS Backup.

Learn how EC2 auto scaling and the AWS application auto scaling service extend elasticity to databases, Lambda, and more, using launch templates, health checks, and scaling policies.

Configure security groups in the backspace lab VPC to manage traffic between the ELB, web servers, database, NAT, and Bastion, using inbound and outbound HTTP/HTTPS rules.

Create IAM role with a VPC flow logs trust relationship, attach CloudWatch policy, and configure a VPC flow log to send EC2 traffic data to CloudWatch log group.

Learn to manage elastic network interfaces in a VPC, attach and detach ENIs to EC2 instances, preserve ENIs on termination, and migrate a NAT ENI to a new instance.

Learn to create and configure multi-AZ subnets in AWS VPC, including a public subnet with internet gateway, a private NAT subnet, and a locked-down private subnet, with route table associations.

Launch an internet-facing application load balancer across public subnets and AZs, routing traffic to a private auto scaling group using a Bitnami LAMP AMI with HTTP 80 and health checks.

Deploy a multi-az Aurora serverless cluster across two private subnets in a VPC with a DB subnet group, presenting a single endpoint and pausing compute when idle to save costs.

Launch a Cloud9 bastion host in the public subnet to securely access an RDS Aurora cluster in the private subnet, configure security groups, use sftp and the MySQL shell.

Explore how to harden a VPC using network access control lists, including inbound and outbound rules, stateless behavior, rule evaluation order, and practical examples for public and private subnets.

Explore elastic load balancer concepts, including the ELB classic type, SSL termination, AWS Certificate Manager certificates, health checks, cross-zone load balancing, sticky sessions, and monitoring.

Explore the network load balancer, its layer 4 tcp and web sockets handling, millions of requests per second for vpc instances, and how to launch it with aws elbv2 cli.

Learn to deploy a network load balancer in front of an auto scaling group of EC2 instances, using a TCP target group with health checks and CPU-based scaling policies.

Learn how AWS CloudTrail records API calls, detects inside attacks, and integrates with CloudWatch, SNS, S3 events, and Lambda for security, compliance, and troubleshooting.

Master encryption on AWS by distinguishing symmetric and asymmetric methods, using KMS, CloudHSM, Secrets Manager, and AWS encryption SDK, and applying envelope encryption for data at rest and in transit.

Master AWS Cognito’s user pools and federated identities, with sync data across devices, social logins, SAML, and OAuth. Use STS tokens to securely access AWS resources and build serverless apps.

Create and test a node js lambda function in the lambda console, edit it with your code, invoke with a test event, and review cloudwatch logs to verify the response.

Create and test a Python Lambda function in the Lambda management console using a basic execution role, handling a JSON event with keys one, two, and three.

Learn to diagnose and resolve EC2 launch failures, status checks, termination and connection issues across Linux and Windows, using describe-instances, CloudWatch, system logs, and VPC settings.

Learn hands-on EC2 troubleshooting for SysOps, including system and instance status checks, system logs and console screenshots, plus CloudWatch alarms and recovery actions to manage instances.

Identify and resolve common RDS connectivity and outage issues for SQL Server and MySQL read replicas, including replica lag, security group rules, connection strings, credentials, and maintenance window considerations.

Monitor EC2 and ELB with CloudWatch metrics, enabling detailed monitoring, custom metrics, and alarms that auto stop, terminate, or reboot. Leverage ELB access logs, request tracing, and CloudTrail for visibility.

Demonstrate EC2 monitoring by creating an IAM role and a custom policy to publish custom metrics to CloudWatch, including memory utilization updates via cron.

Explore the RDS monitoring options, including enhanced monitoring with real-time OS metrics, RDS events, downloading database log files, and Amazon Performance Insights, accessible via CloudWatch, SNS, CLI, API, or SDK.

Mastering RDS monitoring through CloudWatch metrics and enhanced monitoring, viewing logs and events, and exploring performance insights in Aurora PostGre SQL, including master and replica load by user.