AWS Developer: Deploy, Build & Optimize Applications on AWS

Amazon EC2 foundations cover AMI types, instance options, VPC, security groups, and the difference between public IP and elastic IP, plus deploying and connecting to EC2 instances.

Explore how EC2 instances, AMIs, and instance types provide configurable compute capacity—RAM, CPU, and storage—so you can launch virtual servers with Linux or Windows, scripts and software.

Explore the AWS management console to launch EC2 instances, and compare quickstart versus customized AMIs and instance types, highlighting private AMIs for production deployments.

Explore how to use the AWS marketplace to deploy AMIs, such as the Juniper V SX firewall, and understand software and EC2 pricing.

Master how AWS regions and availability zones isolate data centers, enabling high availability and fault tolerance by deploying resources across multiple zones with services like load balancer and auto scaling.

Learn EC2 pricing models, free tier, on-demand, reserved instances, dedicated hosts, and spot instances, billing by hours or seconds, with flexible capacity for testing and production workloads.

Learn how Amazon EC2 pricing uses reserved instances, capacity reservation, savings plans, and dedicated hosts to reduce costs for steady-state workloads, with per-second billing for Amazon Linux and Ubuntu.

Learn AWS IP addressing concepts, including private and public IP addresses, internal and external DNS hostnames, NAT with network address translation, elastic IP, and IPv6 blocks in VPC subnets.

Explore Amazon EBS, learn how EBS volumes act as persistent block storage that attach to instances, survive instance lifecycles, and support snapshots for data migration and disaster recovery.

Security groups act as virtual firewalls for instances, enforcing inbound and outbound rules; the lecture covers internet http/https access and branch office ssh/rdp restrictions.

Learn how security groups act as virtual firewalls to control inbound and outbound traffic. Create from scratch, set Mumbai region, and define inbound rules.

Launch and connect to AWS cloud instances from Mac and Windows using PuTTY and remote desktop to access Linux and Windows environments in a hands-on session.

Launch a new Amazon EC2 Linux instance by selecting Mumbai region, an AMI, and the instance type, then configure VPC, subnets, and public IP for a hands-on deployment.

Connect from macOS to an Amazon Linux EC2 instance via terminal, set key permissions, SSH with -i as ec2-user, and run updates with sudo yum update -y.

Learn to connect a Windows PC to an Amazon Linux EC2 instance using PuTTY and PuTTYgen, converting PEM to PPK and logging in as ec2-user via SSH.

Launch a Windows Server 2019 base EC2 instance, pick a free tier eligible t2.micro AMI, configure storage and tags, and enable RDP on port 3389 using your existing key pair.

Connect to an Amazon EC2 Windows instance from a Windows 10 PC using the remote desktop file, decrypt the administrator password with your private key, and sign in.

Learn how elastic IP addresses provide a static public IP in aws to mask instance failures by remapping the address to healthy instances, avoiding ip changes after restarts.

Configure security groups for the load balancer and backend instances to manage inbound and outbound HTTP traffic on listener and health-check ports, enabling secure communication with registered targets.

Learn to create and configure security groups as virtual firewalls for AWS ELBs and EC2 instances, defining inbound and outbound rules to secure front-end load balancers and back-end targets.

Learn how to generate and validate an SSL certificate with AWS ACM, perform DNS validation, and install the certificate on a load balancer to terminate TLS and secure front-end traffic.

Deploy and test a classic load balancer with two healthy instances, verify health checks, and observe in-service status across zones; finally link the domain via Route 53 for DNS routing.

Deploy a network load balancer with ultra high performance, static elastic IP addresses, and UDP support; configure target groups, health checks, routing, and domain integration for scalable, low-latency traffic.

Understand stickiness in classic load balancers, binding a user session to a single backend instance via cookies. Configure a cookie expiration, such as 60 seconds, to maintain session affinity.

Enable cross-zone load balancing to distribute traffic evenly across all instances and availability zones. This reduces the need to match instance counts by zone and improves resilience when instances fail.

Learn how connection draining helps a classic load balancer preserve in-flight requests when an instance is unhealthy, by delaying removal from 1 to 3600 seconds with a default of 300.

Test our auto scaling deployment to verify fault tolerance and high visibility by simulating instance termination, automatic replacement, and seamless recovery through health checks.

Set up a scalable AWS app with a load balancer, separate security groups for the load balancer and instances, and a launch template for an auto scaling group.

Create a classic load balancer by selecting classic, naming it, enabling multi-AZ with multiple subnets, attaching the security group, setting the path to /, then review and create.

Create a launch template from scratch and include a user data script to install a web app on each instance in an auto group behind a load balancer.

Test the load balancer by using the DNS name to verify traffic routes to healthy instances across availability zones. Witness auto scaling launches new instances when an instance becomes unhealthy.

Configure a target tracking policy to keep a metric near a target value, automatically scaling cpu utilization or requests per target with an auto scaling group and load balancer.

Configure an auto scaling group using a launch template, apply a target tracking policy at 40% CPU, and deploy two instances across all subnets for high availability.

Spike cpu usage on two instances to test a target tracking scaling policy, triggering an alarm and auto-scaling the group to keep cpu near 40 percent.

Explore identity and access management within AWS by defining authentication and authorization through users, groups, roles, and policies, and implementing password policies and multifactor authentication.

Learn how to create IAM users with programmatic and console access, assign permissions via policies, set passwords, and securely share or download credentials for enterprise access.

Learn how IAM users sign in via account credentials or a customized sign-in link, apply policies for permissions, and manage access while separating duties from the root account.

Explore IAM groups, a collection of IAM users that simplifies permission management by assigning policies to groups (admins, developers, testers), ensuring faster, more accurate access for multiple users.

Create groups to manage IAM user access, attach policies such as could commit full access, code deploy, and Lambda full access to developers, then add users to the group.

Explore how to create and attach IAM policies to users, groups, and roles, defining read and list permissions for an S3 bucket and enforcing access controls with custom policies.

Learn how to enable multi-factor authentication using virtual MFA devices and authenticator apps, such as Google Authenticator, to secure AWS accounts with 6-digit codes refreshed every 30 seconds.

Explore Amazon S3, an object-based storage service that enables uploading and retrieving any amount of data from anywhere, using buckets, objects, versioning, storage classes, and lifecycle management.

Learn how to create and configure an Amazon S3 bucket, choose a region, enforce DNS-compliant unique names, manage public access, upload objects, and explore cross-region setups.

Learn how versioning in an Amazon S3 bucket preserves multiple object versions, enabling recovery from deletions or overwrites, and how lifecycle management helps control storage costs.

Learn to deploy a static website on an Amazon S3 bucket using serverless hosting, configuring index and error documents, uploading HTML pages, and enabling public read access.

Learn how transfer acceleration speeds up uploads to Amazon S3 by leveraging CloudFront edge locations, enabling up to 300 percent faster, secure transfers with global data, while noting per-GB charges.

Upload objects to Amazon S3 buckets and change their storage class. Manage standard, standard-infrequent-access, and one-zone-infrequent-access storage classes with on-demand changes.

Master object lifecycle management with S3 lifecycle configuration to automatically transition objects across storage classes and expire older versions, boosting cost efficiency.

Enable cross region replication to automatically copy content between S3 buckets across regions, with versioning required on both buckets, enabling disaster recovery and data migration.

Explore Amazon RDS on AWS, a managed relational database service that lets you set up, operate, and scale databases with automated backups, patching, failover, and flexible cpu, iops, and storage.

Scale performance with read replicas across availability zones or regions to offload reads from the primary, using asynchronous replication and optional synchronous replication for immediate consistency.

Learn encryption at rest with CMS and a key management service, data in transit with SSL, secure snapshots, private subnets, IAM database authentication, and strong access policies for databases.

Learn to create a MySQL database instance on AWS RDS from scratch, choosing standard create, engine options, storage, security groups, backups, and automatic upgrades for a free-tier setup.

Deploy an Aurora MySQL cluster with standard creation, configure capacity, backups, monitoring, and security, choose single-master replication with one writer and multiple readers, and review endpoints.

Master the domain name system (DNS): translate domain names to IPs, route traffic to AWS resources such as instances and load balancers, and leverage DNS health checks and failover.

Learn how to manage DNS with Route 53, register or transfer domains, create hosted zones, configure name servers, and use health checks for DNS failover across regions.

Learn how to implement AWS Route 53 simple routing policy to direct domain traffic to a single resource, using Mumbai and California examples with load balancers and instances.

Apply a weighted routing policy to split traffic between regions, creating two record sets with 50 percent weights for Mumbai and California load balancers.

Route 53 uses latency routing to send end users to the region with the lowest latency, by configuring two record sets for Mumbai and California to serve content faster.

Configure a health-check driven failover routing policy in Route 53, with a primary Mumbai ELB and a secondary California ELB, enabling automatic DNS failover.

Apply geolocation routing to route end users to Mumbai and California elastic load balancers based on location, creating Asia and North America record sets.

Configure multivalue answer routing to return multiple IP addresses for DNS responses, check health of each source, and improve availability and load balancing; not a substitute for a load balancer.