AWS Essentials - Hands-on Learning

Learn how identity and access management lets you create users and groups, grant permissions, and enable federated users, with MFA for the root account and fine-grained, time- and IP-based access.

Learn the fundamentals of AWS identity and access management, including users, groups, roles, policies, password policies, and multi-factor authentication, plus console and API access and identity federation.

Learn how to create an AWS developer account, understand the free tier limits for EC2 and S3, and follow the step-by-step signup, verification, and signing into the console.

Demonstrates aws iam fundamentals by creating groups and users, attaching policies and roles, and enabling ec2 to access s3, with practical login and permission testing.

Set up billing alerts, monitor the billing dashboard, close the account when unused, and enable MFA on the AWS root account with Google Authenticator.

Explore how AWS global infrastructure uses regions and availability zones to deliver highly available, fault-tolerant, low-latency, scalable data access across 18 regions and 55 availability zones.

Explore AWS simple storage service (S3), durable, object-based storage for data, using buckets, keys, and storage classes like standard, standard IA, one zone IA, and glacier for backup, archiving, and hosting.

Explore how to create and configure an S3 bucket, including choosing a region, setting private permissions, and using billing tags, while understanding that S3 stores flat files as objects.

Clarify how S3 bucket permissions keep objects private by default, with the owner retaining access. Apply resource-based policies on the bucket or use IAM policies to grant access to objects.

Upload files to an S3 bucket, set public and private permissions, access files via their URL, and learn to delete objects and buckets.

Learn how to enable and suspend Amazon S3 versioning, view version IDs, upload and recover previous file versions, and permanently delete specific versions to safeguard data.

Explore elastic compute cloud (EC2) in AWS, launching secure resizable compute instances, selecting on demand, reserved, and spot payments, plus tenancy types for diverse workloads.

Launch an EC2 instance using a suitable AMI and a free-tier t2 micro; configure storage, networking, a default VPC, a security group, and download the key pair for SSH.

Connect to the EC2 instance, update the system, and mount the extra storage. Install httpd, start the server, create a welcome file, and enable http access via the security group.

Explore elastic load balancer in AWS, distributing traffic across targets for high availability and performance. Compare application, network, and classic load balancers for TLS termination, static IPs, and HTTP/TCP traffic.

Learn to deploy two EC2 web servers behind an application load balancer, configure target groups, health checks, and routing (round robin, weighted, latency-based) for resilient web traffic.

discover amazon route 53, an available dns service that translates domain names to ip addresses, supports ipv4 and ipv6, and covers dns concepts and routing policies like simple and weighted.

Explore AWS database options, from self-managed EC2 deployments to fully managed RDS, and learn to create, connect to, and query a MySQL database with backups and security considerations.

Explore DynamoDB, a fully managed, serverless database that automatically scales, offers key-value and document models, continuous backups, encryption, IAM integration, and global/local secondary indexes for scalable, millisecond responsiveness.

Understand AWS essentials by examining Lambda, API gateway, SQS, SNS, and Kinesis, learn how API gateway exposes endpoints, caching with TTL, and reliable messaging with SQS and SNS.

Demonstrate SNS–SQS integration, Lambda with DynamoDB, and a Lambda–SQS workflow that outputs to DynamoDB, while covering IAM roles and permissions for these integrations.

Explore how SNS topics fan out messages to destinations like email, SMS, Lambda, and SQS for decoupled workflows, from e-commerce orders to alerts and data processing.

Explore AWS Lambda, a serverless platform that lets you upload code while AWS handles scaling, fault tolerance, high availability, and pay-per-use pricing for microservices.

Amazon Kinesis ingests, processes, and analyzes real-time streaming data to deliver timely insights and enable rapid responses via Kinesis Streams, Kinesis Firehose, Kinesis Analytics, and Kinesis Video Streams.

Explore how AWS lambda enables serverless processing of user reviews, integrating with DynamoDB via IAM roles, creating a DynamoDB table, configuring environment variables, and testing the function end-to-end.

Attach the CloudWatch logs policy to the Lambda role, observe logs in CloudWatch, and see how SQS triggers the Lambda to update DynamoDB reviews.

Discover Amazon virtual private cloud (VPC) fundamentals, including public and private subnets, internet gateway, NAT and bastion, route tables, VPC endpoints, and VPC peering for secure AWS networking.

Create a VPC with public and private subnets, set up an internet gateway, NAT gateway, route tables, and security groups, then launch EC2 instances to see subnet interactions.

Create and configure a custom VPC with public and private subnets, launch EC2 instances, set up security groups and key pairs for SSH access, and illustrate NAT gateway basics.

Practice AWS components using the provided scripts to create S3 buckets, EC2 instances, and VPC networks, and subscribe to the AWS newsletter for updates and certification preparation.