AWS Essentials: Cloud, AWS IAM, & Amazon S3 for Beginners

Explore AWS Local Zones, physical data centers that extend an AWS region to deliver closer compute and storage for low latency and data residency needs.

Discover AWS Outposts, a managed solution that brings AWS infrastructure to your data center via on-premises racks or single servers for hybrid use. These resources stay connected for remote configuration.

Discover AWS wavelength zones at the edge of 5G networks, enabling apps to run within provider networks with ultra-low latency. Use cases include game streaming and IoT image/video recognition.

Understand the shared responsibility model: aws secures the cloud, while you secure data, apps, and configurations, with duties varying by service such as ec2 and dynamodb.

Learn how AWS IAM secures access via authentication and authorization, apply the principle of least privilege, manage identities, policies, and roles, and use temporary credentials for safe S3 access.

Learn about IAM identities: the root user, IAM users, and groups, how permissions attach via policies, long-term credentials, and the benefits of managing users through groups.

Explore IAM roles, which use temporary credentials to access AWS services, learn how to assume roles, attach policies, and enable service access for Lambda, EC2, and cross-account scenarios.

Protect the AWS root user with a strong password and MFA, use an administrator IAM user for daily tasks, and monitor root sign-ins with CloudWatch, CloudTrail, and SNS.

Identity-based IAM policies, including inline and managed types, and the distinction between AWS-managed and customer-managed policies, while applying the principle of least privilege.

Learn how identity-based policies are structured as json documents, with syntax version and statements. See how allow and deny rules on actions and resources work, including wildcards and group inheritance.

Create an admin user in identity and access management, add them to an administrators group, and attach the AdministratorAccess policy that grants all actions except billing, and enable multi-factor authentication.

Learn to set an IAM password policy in the AWS console, enforcing an 8-character minimum with all four character types, optional expiration, and password reuse prevention for IAM users only.

Create IAM users and assign them to groups with AWS managed policies to grant S3 access; test full and read-only permissions by creating and listing buckets.

Attach policies directly to IAM users to grant broader permissions beyond group inheritance, using AmazonS3FullAccess, testing with bucket creation, and safely removing directly attached policies.

Create a precise inline policy for the accountants group to allow list and create bucket actions on S3, while denying delete, using the visual editor and JSON, tested with Lucy.

Reuse a customer-managed policy across users and groups by creating a developers group and adding Ada. Test S3 and EC2 permissions, including bucket creation and deletion restrictions.

Explore how resource-based policies attach permissions directly to AWS resources, define principals, and control cross-account access across services like S3.

Explore access control lists for s3 buckets and objects. Learn how they grant access to other aws accounts via xml documents and why bucket policies are now preferred.

Create and manage programmatic access keys for IAM users in IAM console, using access key ID and secret access key to sign AWS CLI and API requests, while rotating keys.

Learn to use the AWS CLI to manage AWS services from a terminal, automate tasks, and configure programmatic access, with IAM roles or CloudShell for secure, browser-based use.

Install aws cli across Linux, macOS, and Windows using the official guides. Learn two Linux options (command-line installer or snap), macOS GUI installer, and verify with aws --version.

Configure the AWS CLI with IAM programmatic access keys, then set a default region and an output format. Verify access by listing S3 buckets.

Learn to manage files and folders in S3 by uploading into folders, understanding that folders are prefixes, and moving objects between fruits and vegetables folders.

Learn to delete single objects or folders in S3, confirm irreversible deletions by typing permanently delete, and empty buckets by deleting all objects and folders before confirming.

Learn how to delete an Amazon S3 object with versioning enabled by hiding versions, deleting the latest via a delete marker, and restoring from deletion or previous versions.