Complete AWS ECS Bootcamp (Beginner friendly)

Learn how DevOps merges software development and IT operations to shorten the systems development lifecycle and enable continuous delivery with high software quality in cloud environments.

Define cloud computing as on-demand, pay-as-you-go compute, storage, and IT resources. Compare IaaS, PaaS, and SaaS, with notes on FaaS and CaaS and where they fit.

Assess the cloud move by weighing capex versus opex, the economies of scale, and elastic capacity across global regions, while considering compliance, speed, and the risk of vendor lock-in.

Signup for AWS by creating an Amazon account with email and password, enter country and region, provide billing details, verify identity by phone, and use the basic free plan.

Understand AWS regions and availability zones, delivering high availability and fault tolerance with multiple data centers, encrypted inter-zone traffic, and data residency in Europe Frankfurt EU central 1.

explore how aws services replace monolithic setups by providing ec2-like compute, vpc networking, managed databases, and load balancers, all programmable with cloud formation or terraform and billed by usage.

Select a region near you, create a key pair, launch an amazon linux 2 ec2 t2 micro with a public IP, and connect via ssh.

Recap launching an EC2 instance, selecting an AMI and instance type, and configuring a security group to allow port 22 access within a VPC and internet gateway context.

Understand the AWS security responsibility model and distinguish AWS infrastructure security from your IAM and MFA duties. Explore VPC isolation, root user versus IAM users, and deny-by-default policies for EC2s.

Create a dedicated IAM user for daily access with programmatic and console login rights, placed in an admins group for administrator access that keeps you separate from the root account.

Learn how IAM centralizes security around policies, identities, and resources, defining allow and deny permissions with Amazon Resource Names. Apply fine-grained inline policies to users, groups, or roles.

Install the AWS CLI, create an IAM access key, and run aws configure to save your key, secret, and region. Verify with aws --version and locate credentials at home/.aws/credentials.

Learn how amazon ec2 provides elastic computing with scalable instances that accelerate deployment and cut upfront costs. Explore instance types and ami options, on-demand and spot pricing, and user data.

Launch an EC2 instance using the user data script to update packages, install Apache, and create a phpinfo page in /var/www/html, then configure inbound rules for port 80 and 22.

Review how to launch an EC2 instance using user-data to run a startup script, set permissions, and verify the output while noting the security group firewall impact.

Understand how AWS user data runs startup scripts as root, typically on first launch, with options to run on every restart and to auto-accept package installs.

Explore how metadata provides instance details from within an EC2 instance, including how to query the local 169.254.169.254 address to retrieve the IP address and other running information.

connect to the ec2 instance, query the metadata service 169.254.169.254 to fetch the instance id and public ip, and write a web page showing the instance id before termination.

Recap the lab steps for running an EC2 instance and querying metadata with a BHP script that outputs the instance details to the browser.

Explore horizontal versus vertical scaling and elasticity in acquiring resources as you need them, and how scaling out adds instances behind a load balancer to meet demand.

Learn to auto scale EC2 instances with auto scaling group and application load balancer, using a launch template, target group, and a 50% utilization policy for round robin load balancing.

Build an auto scaling group with a launch template, register instances to a target group, and route traffic through an application load balancer.

Study auto scaling groups with EC2 instances and set minimum, maximum, and desired capacity. Learn manual and predictive scaling to adapt to load variations and keep utilization steady.

Understand launch templates for EC2 instances, including versioned configurations, multiple versions with different launch parameters and security groups from development to production.

Explore how load balancers distribute traffic across multiple targets, such as EC2 instances, containers, and IP addresses, with health checks and SSL termination for fault-tolerant apps.

Compare classic, application, and network load balancers; learn why application load balancer provides layer 7 routing with path and query string routing, health checks, and target groups for high availability.

Explore cloud storage fundamentals by surveying key storage services—S3 (object storage), EBS (persistent block storage), instance store (temporary storage), and EFS (network file system)—in this introductory module.

Learn how AWS S3 stores data as buckets and objects, enable versioning and encryption, manage access with ACLs and IAM, and host static websites and assets.

Create an S3 bucket in the eu central region, enable versioning and encryption, and set up static website hosting with a public read policy to serve a public site.

Learn how AWS S3 access works by comparing IAM policies, bucket policies, and ACLs, and apply deny-first rules to attach permissions to users, roles, and buckets.

Learn to manage S3 via the AWS CLI by provisioning an IAM role on an EC2 instance, granting bucket permissions, and deleting a complete bucket with versioned objects.

Recap the lab: set a role with an inline policy for a bucket, launch an instance, access via cli or console, and note S3 pricing for the first 50 tb.

Discover AWS EBS, elastic block storage, a persistent, encrypted disk that outlives instances, with snapshots, KMS encryption, and multi-volume support within the same availability zone.

Explore amazon elastic file system, a scalable, fully managed shared filesystem for ec2 instances with automatic storage scaling and encryption, usable across regions and on-prem via vpn.

Learn to create an elastic file system, attach mount targets to two EC2 instances, configure security groups, mount the EFS via user data, and verify shared access across instances.

We created an Amazon elastic file system, set up mount points and security groups in our VPC, and enabled communication by inbound rules for the specific port.

Explore AWS networking essentials, including VPCs, subnets, route tables, internet gateways, NAT gateways, elastic IPs, and VPN endpoints for on-premises connectivity, accessible via console or command line interface.

Explore how classless inter-domain routing (cidr) replaces classful routing with variable length subnet masking (vlsm) and prefix-suffix notation to allocate ip addresses efficiently.

Master the virtual private cloud by understanding logically isolated networks, VPCs per region, public and private subnets, and routing through internet gateways.

Manually create a new VPC in the console with CIDR block 10.0.0.0/16, public subnets, and preconfigured route tables, noting IPv6 is not used and DNS hostnames are disabled by default.

Explore how VPC subnet placement ties subnets to availability zones, uses CIDR blocks within VPC range, and shows you how to set up public and private subnets in the lab.

Create a vpc with one private and two public subnets across two availability zones to support a load balancer, using /24 blocks like 10.0.1.0/24 and 10.0.2.0/24.

Learn how route tables and internet gateways provide internet access to subnets by configuring a main and custom route tables, enabling bidirectional traffic and network address translation for public addresses.

Learn to enable internet access for subnets by creating an internet gateway on the VPC, adding a public route to 0.0.0.0/0, and attaching the public subnet (NAT gateways offer egress-only).

Learn how NAT gateways and egress-only internet gateways connect private subnets to the internet in AWS ECS networking, including cost factors, placement, and use cases.

Learn to provide internet access for private subnets using a NAT gateway or self-hosted NAT, update route tables, allocate elastic IPs, and enable auto public IPs in public subnets.

Explore how bastion hosts in a public subnet provide secure access to private instances by routing through the bastion via an internet gateway, without direct internet access to private instances.

Learn how to set up a bastion host to securely access private EC2 instances by launching a public-subnet instance, enabling SSH access, and testing connectivity.

Understand security groups as stateful virtual firewalls at the instance level, with default inbound deny, outbound allow, up to five per instance, and enable load balancer traffic to private instances.

Launch a private subnet EC2 instance and expose it behind an application load balancer in public subnets, with proper security group rules and a target group configuration.

Explore how teams collaborate using Git for code repositories and version control, with local and remote repositories, and learn essential commands to initialize, clone, commit, push, and pull.

Create a new CodeCommit repository in the AWS management console, connect via three methods, clone it locally, edit files, commit changes, and push to the remote repository with git.

Review how to create a CodeCommit repository, clone locally, stage, commit, and push changes, and prepare for deploying repository files with instances and auto scaling.

Assign an IAM role to an EC2 instance to grant CodeCommit access, install the CodeCommit credential helper, and auto clone the repository during launch via user data.

Recap: create an identity and access management role with read access to CodeCommit and attach it to an ec2 instance for passwordless repo calls and clone repo via user data.

Explore how Docker and containers streamline development by running apps on the host operating system with isolated libraries and configurations, reducing virtual machine overhead and enabling microservices.

Learn how images are read-only, layered templates and how containers add writable layers, then master essential docker run flags for interactive development, port mapping, and host volume mounting.

Start a php docker container with apache, bind-mount your project directory, map host port 880 to container port 80, and run with one main process from Docker Hub.

Explore how to run a PHP Apache container from a Docker image, bind mount host directories, map ports, and use Docker Compose for orchestrating multiple containers with persistent volumes.

Discover how to build a custom Docker image with a Dockerfile, starting from scratch, and push it to registries like Docker Hub or ACR, while mastering repositories and tags.

Build a docker image from a template, run it locally to test, then log in to the elastic container registry and push the image to an ECR repository.

Upload an image to a private container registry by creating an ACR repository and pushing. Learn stateless containers, tagging, and storage concepts for local development.

Learn to orchestrate containers with docker-compose by defining services, volumes, and networks, and connect an app to a database using environment variables.

Learn to use Docker Compose to orchestrate an app container and a database image, configure credentials with environment variables, and persist data via volumes for a local development setup.

Explore the elastic container service (ECS) overview, including the Fargate and EC2 launch types, and understand how managed orchestration provisions containers, performs health checks, and enables scaling and service discovery.

Explore how an ECS task definition acts as a version-controlled blueprint for running containers, specifying image sources, CPU and memory, environment variables, port mappings, and CloudWatch logging.

Explore Fargate, ECS launch type for running containers without infrastructure. Define a task definition with memory, CPU, IAM roles, and image, then deploy via ECS service with elastic network interfaces.

Define a task definition and launch a two-task Fargate service running an Apache container from Docker Hub, exposing port 80 with a security group and VPC subnets.

Created a task definition with an Apache container image and allocated CPU and memory, started a Fargate cluster, deployed a service, viewed logs, and accessed websites by IP addresses.

Learn to run a one-off ECS Fargate task that creates an S3 bucket from inside a container, using an IAM task role with S3 full access.

Lab recap: initialize a container task, grant IAM permissions inside the container, and create an S3 bucket from within the running task, followed by cleanup.

Discover how AWS Fargate handles storage and scaling. Operate with ephemeral 10 GB storage and shared storage, with elastic filesystem integration, automatic scaling, and a load balancer for high availability.

Scale a Fargate service behind an application load balancer by configuring an ip-based target group, a health check path, and a cpu utilization policy to run 1–10 tasks.

Learn how to scale a Fargate service behind an application load balancer in a VPC, using target groups, elastic network interfaces, and automatic scaling for high availability.

Explore the EC2 launch type in AWS ECS, where users manage EC2 instances while the control plane stays AWS-managed, with capacity providers and container auto scaling for an application-first deployment.

Explore ECS EC2 network modes: none, bridge, host, and awsvpc, and understand how ENI, VPC, security groups, and local host behavior shape container connectivity.

Beginner-friendly EC2 lab introduces launching an easy-to-launch ECS cluster, deploying a service with two tasks on two instances, and exposing it behind a load balancer.

Create an ECS EC2 cluster, provision three instances in a VPC, set up a load balancer and security groups, and deploy an Apache container across two tasks with health checks.

Create an ECS EC2 cluster with a load balancer, launch EC2 instances, install ECS and Docker agents, set port mapping, register in a target group, and perform cleanup.

Learn deployment types on ecs, including rolling and bluegreen strategies. Understand how healthy percent govern updates and the three bluegreen variants—Chenery, linnear, and all at once—with canary-style increments.

Explore how ECS task placement strategies—spread across availability zones and instances, balanced bin pack, bin pack, and one task per host—maximize high availability and resource utilization within a cluster.

explore how ecs ec2 capacity providers connect task scaling with auto scaling groups, enabling automatic scale-out and scale-in based on resource availability, with cloudwatch alarms guiding the process.

Create an empty ECS cluster, attach a capacity provider to an auto scaling group, and launch EC2 instances. Configure a load balanced service with autoscaling and CloudWatch alarms.

Create an empty ECS cluster, configure a launch template with zero instances, set the maximum to 10, add a capacity provider, deploy a service, and observe automatic scaling via CloudWatch.