AWS Certified DevOps Engineer Professional - Hands-On + Exam

Explore a high-level overview of AWS services across compute, storage, database, networking, analytics, containers, and AI, with examples like EC2, S3, RDS, DynamoDB, Lambda, and Kinesis.

Explore an overview of AWS services in part two, covering blockchain, business applications, developer tools, front end web and mobile services, IoT, game tech, and governance.

Explore AWS security, identity, and compliance services, including firewall manager, IAM, KMS, network firewall, resource access manager, secrets manager, Security Hub, Shield, IAM Identity Center, and WAF capture.

Analyze data directly on Amazon S3 with Amazon Athena using standard SQL in a serverless, pay-per-query model, and manage tables via the AWS Glue Data Catalog.

Set up an S3 bucket for Athena query results and configure the Athena settings. Create a database and an external table for CloudFront logs, then run browser analytics.

Discover Amazon EMR, a managed cluster platform for big data using Hadoop and Spark, covering clusters, steps, lifecycle, failure handling, and AWS integrations with S3 and CloudWatch.

Deploy a single-node EMR cluster, upload input data to S3, and run a Spark job. Monitor progress, view results in parquet output, and clean up IAM roles and resources.

Learn how Amazon Kinesis Data Firehose delivers real-time streaming data to destinations like S3, Redshift, OpenSearch, and Splunk, with optional data transformation using Lambda.

Explore Amazon Kinesis Data Streams, a real-time data pipeline that ingests from producers to real-time consumers via shards, with Kinesis Client Library for fault-tolerant processing.

Set up a Kinesis data stream and two Lambda functions to generate and process sensor data, storing results in a DynamoDB table, then test and clean up resources.

Master amazon opensearch service, a fully managed search and analytics engine built on Apache Lucene for real-time log analytics and observability. Explore domains, storage tiers, anomaly detection, and key integrations.

Build and demo an Amazon OpenSearch service domain, ingest sample log data, create index patterns and visualizations, perform basic searches, test the setup, and clean up resources.

Explore Amazon QuickSight, a cloud-based BI service that connects diverse data sources, builds interactive dashboards, and leverages ML insights and row-level security for scalable, secure analytics.

Learn to set up Amazon QuickSight, connect data sources, create visualizations (pie, line, and bar charts), and publish interactive dashboards for sharing insights across devices.

Learn how Amazon AppFlow securely transfers data between SaaS apps and AWS services using connections, flows, data mapping, filters, validations, and triggers.

Explore Amazon EventBridge, a serverless event bus for decoupled architectures. Learn about event flow, buses, rules and targets, pipes, scheduler, and schema registry to build scalable integrations.

Perform a hands-on demo where stopping an EC2 instance triggers an Amazon EventBridge rule that sends an email via an SNS topic, illustrating an event-driven workflow and resource cleanup.

Explore how AWS App Runner deploys web services from source code or container images with automatic CI/CD, auto scaling, and robust security in the AWS cloud.

Explore Amazon EC2, virtual machines in the AWS cloud, covering instances, Amazon machine images, instance types, and purchasing options: on demand, savings plans, reserved, spot, dedicated host, and dedicated instances.

Launch an EC2 instance in North Virginia region using Amazon Linux 2023, set up a key pair and security group, and connect via SSH or EC2 Instance Connect.

Master Amazon EC2 auto scaling by configuring auto scaling groups with launch templates, health checks, and elastic load balancing across multiple availability zones to handle variable demand.

Demonstrate building an Amazon EC2 Auto Scaling setup with a launch template and auto scaling group, apply target tracking scaling, stress test CPU, and perform cleanup.

Explore how EC2 Image Builder automates the pipeline for creating, testing, and distributing secure, up-to-date server images, including recipes, infrastructure configuration, operating system support, and compliance with Amazon Inspector.

Use Elastic Beanstalk to deploy and manage apps on AWS without deep infrastructure knowledge, automatically provisioning resources, load balancing, and scaling for web and worker environments.

Explore Elastic Beanstalk with a hands-on demo that deploys a pre-built web environment for node.js, java, python, or php, handling ec2, load balancers, networking, and security groups.

Explore the AWS serverless application repository, publish and deploy serverless apps using SAM, manage private/public sharing, IAM roles, policies, and nested capabilities, with pre-deployment checks.

Convert dotnet and Java apps into containerized deployments with AWS App2Container, which inventories, analyzes runtime dependencies, and generates Dockerfiles and deployment templates for AWS container services.

Learn how the AWS Copilot CLI lets developers build, release, and operate production-ready containerized apps on ECS and Fargate, provisioning applications, environments, services, and CI/CD pipelines.

Discover Amazon elastic container registry, a fully managed private registry for Docker and OCI images. Learn its core components and features, including lifecycle policies, image scanning, and cross-region replication.

Engage in a hands-on Amazon ECR demo: create a private repository, push a Docker image via Cloud Shell, and delete the image and repository.

Harness Amazon Elastic Container Service to orchestrate and scale Docker workloads on AWS, using task definitions, services, capacity providers, and deployment options like rolling updates and Code Deploy.

Launch and configure an Amazon ECS cluster with AWS Fargate, define a web app task using an Apache container, create a service, verify deployment via the service URL, and cleanup.

Explore how Amazon Elastic Kubernetes Service (EKS) provides a fully managed Kubernetes platform on AWS, covering architecture, deployment options, node types, EBS CSI driver, VPC requirements, and logging and monitoring.

Learn to set up Amazon Elastic Kubernetes Service with a hands-on demo, create an EKS cluster and node group, deploy nginx, and expose it via a load balancer.

Explore Amazon EKS distro, a self-managed Kubernetes distribution that bundles Kubernetes, etcd, and networking and storage plugins, with extended security patches and OS support for on-premises, cloud, or bare-metal deployments.

Discover how AWS Fargate delivers on-demand, right-sized, serverless container compute with automatic scaling for ECS, EKS, and AWS Batch workloads.

Explore Red Hat OpenShift service on AWS (Rosa), comparing hosted control plane and classic topologies, and review Rosa CLI, OC, Knative, and related tooling.

Explore Amazon Aurora, a fully managed, MySQL and PostgreSQL compatible database with high performance storage, multi-AZ resilience, up to 128 Tebibytes, and features like blue-green deployments and global databases.

Deploy an Amazon Aurora MySQL cluster, launch an EC2 instance with a PHP app, connect to Aurora, test high availability and backtrack features, and clean up resources.

Explore amazon aurora serverless v2 and its on-demand auto scaling with acus, independent writer and reader scaling, and pay-per-use capacity within defined min and max ranges.

Explore AWS DMS for migrating and replicating databases with DMS Fleet Advisor, schema conversion, source and target endpoints, and secure, continuous replication.

Explore Amazon DocumentDB with MongoDB compatibility, detailing clusters, replica sets, three endpoint types (cluster, reader, and instance endpoints), automated backups, encryption, and VPC isolation for scalable reads.

Demonstrates building an Amazon DocumentDB cluster with MongoDB compatibility, connecting from EC2, and performing CRUD operations, queries, and indexing on a product catalog, then cleaning up resources.

Amazon DynamoDB is a fully managed, serverless NoSQL database delivering millisecond performance. Master primary, partition, and secondary keys; explore capacity modes, streams, time to live, transactions, DAX, and global tables.

Create a DynamoDB table with a composite key and read/write capacity with auto scaling, then use a global secondary index on album title to read and update items before deleting.

Explore Amazon ElastiCache, with serverless and custom cluster deployments, supporting Memcached and Redis, to accelerate database queries, manage sessions, and deliver real-time analytics with scalable, cost-efficient caching.

Explore a hands-on demo of Aurora serverless MySQL and ElastiCache serverless (Valky) with IAM authentication, VPC networking, and a Lambda cache-aside pattern using Glide client.

Explore Memorydb for Redis as a durable in-memory primary database with microsecond reads, single-digit millisecond writes, multi-AZ replication across shards and clusters, and Redis compatibility.

Explore memorydb for redis hands-on by provisioning a VPC, subnet group, and parameter group, deploying a multi-az memorydb cluster, and using CLI and Python to perform redis operations and cleanup.

Amazon RDS, a managed relational database service, covers backups, Multi-AZ failover, read replicas, RDS proxy, blue-green deployments, security, and cross-region disaster recovery for DevOps.

This hands-on demo guides you through launching an EC2 instance, provisioning a PostgreSQL RDS database, connecting via SSH, and creating a database, table, and a sample record.

Explore Amazon Redshift in provisioned and serverless modes, comparing architecture, capacity, and management. Learn about security, encryption, snapshots, data sharing, workgroups, namespaces, and AWS integrations.

Join a hands-on Amazon Redshift demo: create a cluster, load sales data from S3 with copy, connect via the Query Editor, run queries, and clean up resources.

Explore the AWS CLI from installation and configuration to service commands, output formats, pagination, and credential precedence, enabling automated resource management via shell scripts.

Demonstrates installing and configuring the AWS CLI on Windows, Linux, and Mac, validating setup, creating and deleting S3 buckets in different regions, and securely managing access keys.

Explore how the AWS CDK enables defining and provisioning cloud infrastructure with familiar languages like TypeScript, Python, Java, Go, C#, and JavaScript. Learn about constructs, stacks, app architecture, and the CDK toolkit CLI, plus how CDK interfaces with CloudFormation through synthesis and deployment.

Explore AWS Cloud Shell, a web-based, pre-authenticated shell with AWS CLI, Python, and Node.js on Amazon Linux 2, with one GB of persistent storage and no extra cost.

Demonstrates hands-on AWS Cloud Shell use with pre-installed tools like AWS CLI, Python, Node.js, Docker, and kubectl. Shows S3 bucket operations, versioning, and file synchronization with persistent sessions.

Learn how AWS CodeArtifact securely stores and shares private software packages across domains and repositories, integrates with npm, maven, nuget, pip, and connects to code build.

Set up AWS CodeArtifact by creating a domain and repositories, publish a Node.js package, configure npm and pip to use CodeArtifact, test installations, and clean up resources.

Explore AWS CodeBuild, a fully managed continuous integration service that builds, tests, and deploys artifacts using buildspec.yml, customizable environments, and scalable on-demand compute, with VPC, Lambda, and CodePipeline integration.

Demonstrate end-to-end DevOps with AWS CodeBuild by creating an ECR repo, linking a GitHub project, and building, pushing a Docker image, and cleaning up resources.

Explore AWS CodeDeploy, automating app deployments to EC2, on premises, Lambda, and ECS, with in-place and blue-green deployments and traffic shifting via canary, linear, or all at once.

Learn to implement end-to-end code deployment with AWS CodeDeploy by creating IAM roles, launching EC2 instances, deploying an application from S3, and validating deployment status.

Explore CodeGuru reviewer, a program analysis and machine learning service that detects defects in Java and Python and provides actionable pull request recommendations.

Demonstrates how to set up a GitHub repository, connect it to Amazon CodeGuru, run static analysis with CodeGuru reviewer, and perform profiling to identify CPU, memory, and latency issues.

Apply AWS CodePipeline to automate the release process from source to deploy. Understand pipelines, stages, actions, artifacts, triggers, and executions to implement end-to-end continuous delivery and continuous integration.

Explore building an AWS CodePipeline that deploys from GitHub to S3, with static website hosting, test continuous deployment, and clean up resources.

Explore AWS Code Catalyst, an all-in-one platform for planning, coding, building, testing, and deploying within spaces and projects, using blueprints, workflows, dev environments, and source repositories.

Explore the AWS fault injection service (AWS FIS), a fully managed chaos engineering tool for running fault injection experiments with templates, actions, targets, and stop conditions.

Explore AWS tools and SDKs, shared config and credentials, profiles, environment variables, and authentication options for local and AWS environments, with a Boto3 example.

Explore how AWS X-Ray instruments applications to generate traces, segments, and subsegments, producing a service graph and map for end-to-end performance insight and debugging distributed applications.

Set up AWS X-Ray IAM roles, deploy AWS Lambda functions with X-Ray tracing, configure API Gateway and DynamoDB, and analyze traces using the X-Ray service map.

Explore AWS auto scaling using scaling plans to manage scalable resources beyond EC2, including Aurora, DynamoDB, ECS, and more, with dynamic and predictive scaling for performance and cost optimization.

Learn AWS CloudFormation's declarative infrastructure as code, covering templates, stacks, dependency management, intrinsic functions, and features like stack sets, custom resources, drift detection, plus CDK, SAM, and CodePipeline integration.

Run a hands-on CloudFormation demo to create a stack from a YAML template, provision an EC2 with a security group and Apache, test, then update and clean up.

Discover how AWS CloudTrail records API activity for governance, compliance, and auditing, using event history, trails, insights, and CloudTrail Lake for analysis.

Discover how AWS CloudTrail records API activity for governance and auditing, covering event history, trails, event types, insights, global service events, and CloudTrail Lake.

Set up CloudTrail by creating an S3 bucket for CloudTrail logs, configuring a CloudTrail trail, and enabling CloudWatch logs integration; generate sample activity, analyze CloudTrail logs, and clean up resources.

Discover how Amazon CloudWatch ingests, stores, and evaluates metrics, logs, and events, and how dashboards, alarms, CloudWatch Logs Insights, and the Unified CloudWatch Agent enable monitoring across EC2 and Lambda.

Perform a hands-on CloudWatch demo that provisions an EC2 instance, creates a CPU utilization alarm linked to an SNS email notification, and tests alerting with CPU stress.

Explore Amazon CloudWatch Logs, including the CloudWatch Logs Insights query language, field indexes, live tail, and EC2 monitoring, plus CloudTrail alarms, data masking, retention, archiving, and Route 53 logging.

Discover how AWS compute optimizer analyzes EC2 instances, EBS volumes, Lambda, and ECS Fargate using utilization metrics to generate recommendations that optimize resources and reduce costs across regions and accounts.

Explore AWS config, a managed service for resource inventory, configuration history, and security governance. Learn rule evaluation, modes, conformance packs, aggregators, and remediation across multiple accounts and regions.

Perform a hands-on AWS Config demo to enable versioning, encrypted volumes, and restricted SSH rules, create non-compliant resources, trigger evaluations, and review findings in the AWS Config dashboard.

Delete AWS config rules one by one with confirm prompts, then empty and permanently delete the AWS config S3 bucket to complete the cleanup.

Explore how AWS Control Tower quickly sets up and governs a multi-account landing zone with guardrails, accounts, IAM Identity Center, and account factory, using StackSets and CloudFormation.

Discover how AWS Health provides real-time health status and alerts for your resources and services, with the Health Dashboard, event types, and organizational view, plus API, CLI, and EventBridge automation.

Master AWS License Manager to centrally track and enforce licenses across AWS and on premises, manage entitlements, and prevent non-compliance while supporting vendor audits.

Explore Amazon managed Grafana to query, correlate, and visualize metrics, logs, and traces using Grafana workspaces and enterprise plugins with SAML-based authentication and IAM Identity Center integration.

Create and manage a Prometheus workspace, ingest metrics via collectors or remote write, query with Promql, and configure recording and alerting rules.

Learn how AWS Organizations centralizes management of multiple accounts from a single root and organizational units, using SCPs and policy types for governance and consolidated billing.

Create an AWS organization with development and production OUs, add accounts, and attach service control and tag policies; test policy enforcement and tag compliance across EC2 and S3 resources.

Discover how AWS Proton automates infrastructure as code for serverless and container apps, enabling platform teams to manage versioned environment and service templates with integrated CI CD pipelines.

Enhance application resilience with AWS Resilience Hub by assessing posture and applying Well-Architected recommendations. Run fault injection simulations to validate recovery within ci/cd pipelines.

Discover how AWS service catalog standardizes and governs IT services, enabling self-service provisioning of products and portfolios with CloudFormation templates, HashiCorp Terraform support, versioning, and constraints.

Create an end-to-end AWS Service Catalog deployment by building IAM roles, a development portfolio, a CloudFormation product, and launch constraints; test provisioning as an end user and clean up resources.

Discover AWS Systems Manager, a unified operations service that centrally manages EC2, on-prem, and edge devices with patching, state management, automation, maintenance windows, Parameter Store, and SSM documents.

Create an EC2 instance profile for Systems Manager, launch an instance, and run commands to explore run command, Parameter Store, Inventory, State Manager, Fleet Manager, and Automation.

Explore AWS Trusted Advisor, a real-time guidance service that analyzes your environment across cost optimization, performance, security, fault tolerance, and service limits to optimize resources.

Walk through the AWS Trusted Advisor dashboard, intentionally creating security group, EBS snapshot, and S3 bucket permission violations, then remediate and verify all violations are cleared.

Explore Amazon API Gateway, its core concepts, architectures, and the differences between REST, HTTP, and WebSocket APIs, including endpoint types, integrations, and VPC link options.

Compare authorization methods for REST and HTTP APIs, Lambda authorizers, resource policies, WAF, caching, deployments, custom domains, private APIs, and monitoring, with API Gateway versus ALB, function URLs, and AppSync.

Build a lambda function and API gateway with /hello resource and a get method using lambda proxy integration. Enable cross-origin requests, deploy, test in the browser, and clean up.

Explore how AWS client VPN securely connects remote workforces to AWS and on‑prem resources via OpenVPN, with endpoints, routing, authentication options, and split-tunnel traffic.

Amazon CloudFront accelerates content with global edge locations, cache hit and miss flows, origin shield, flexible origin types, plus cache behaviors and TTL control.

Compare Amazon CloudFront functions and Lambda at edge for edge computing, outlining runtime, triggers, and use cases: URL rewrites, header manipulation, JWT validation, OAuth, image resizing, and database lookups.

Demonstrates creating an S3 bucket, uploading an html file, configuring a CloudFront distribution with origin access control and bucket policy, testing the distribution, exploring behaviors, and cleaning up resources.

Explore elastic load balancing across EC2 targets with application, network, gateway, and classic load balancers. Understand health checks, listeners, availability zones, and cross-zone load balancing.

Launch a VPC with two public subnets and EC2 instances running a web server. Configure an application load balancer with a target group to distribute traffic and test the setup.

Learn how AWS PrivateLink privately connects your VPC to AWS services and resources via endpoint services and VPC endpoints, enabling private, DNS-resolved traffic within the AWS backbone.

Route 53 provides highly available DNS routing to AWS or external resources, with health checks and policies like geolocation, latency, and weighted routing, plus alias records and hosted zones.

This hands-on Amazon Route 53 demo shows building a private hosted zone in a VPC, launching an EC2 instance, and configuring A and CNAME records to test DNS resolution.

Explore how aws site-to-site vpn establishes secure, two-tunnel ipsec connections between on-premises networks and vpcs or transit gateways, with configuration details, pricing, and optional accelerated performance via aws global accelerator.

Discover how AWS transit gateway acts as a central hub to connect multiple VPCs, SD-WAN, VPNs, and Direct Connect, with route tables, associations, and BGP-based propagation.

Explore hands-on Amazon VPC concepts by creating a custom VPC and a default VPC, launching EC2 instances, and testing connectivity between public IPs while private IPs remain isolated.