AWS Technical Essentials - Build Real World Projects

Understand how the root user defines ownership of your AWS account and avoid CLI use. Enable MFA, use IAM with least privilege, and note root manages billing.

Learn to create an IAM role for cross-account access, issuing temporary credentials via STS and enforcing least privilege for a production account using a trusted development account.

Explore block, file, and object storage on AWS, focusing on use cases for databases, shared file access, and unstructured data. Learn key trade-offs in performance, scalability, and durability.

Create an amazon s3 bucket, apply a bucket policy for get, put, and list, and manage access via iam users and cli with s3 managed keys.

Learn how to configure cross-account Amazon S3 replication from a source bucket to a destination bucket, including versioning, IAM role, and bucket policy, via the AWS Management Console.

Explore IPv4 addresses and subnetting to build and isolate multiple networks within a larger network, understanding network and host portions and slash 24 notation.

Design and size a custom AWS VPC for a real-world web app, detailing IP planning, CIDR blocks, subnets across availability zones, and multi-region, multi-account environments.

Build a complete end-to-end custom VPC for the richer roast web app in the London region, manually configuring subnets, route tables, NAT gateways, and security groups.

Explore AWS security groups in a VPC, a stateful firewall with implicit deny and inbound allow rules, plus self-referencing and group-to-group access for auto scaling web fleets.

Set up three security groups in a VPC—load balancer, web app, database—and configure inbound rules to route traffic on port 80 to the web app and 3306 to the database.

Explore Amazon EC2 and on-demand scalable compute capacity to deploy virtual machines in the cloud, using auto scaling, security, networking, and managed storage options.

Identify how to select an EC2 instance type by matching compute, memory, storage, and network needs with general purpose, compute optimized, memory optimized, and accelerated computing categories.

Launch an EC2 instance in a public subnet using an AMI, key pair, IP addressing, security groups, EBS volumes, IAM role, and bastion host access.

Explore AWS EC2 pricing options, including on-demand, reserved, spot, and dedicated hosts, and learn how savings plans reduce compute and storage costs.

Explore how elastic block store volumes attach to EC2 instances in the same availability zone, manage multi attach volumes, and use snapshots for regional disaster recovery.

Compare provisioned iops ebs volumes, including io1 and io2 block express, their sizes, iops, and throughput; note the io2 block express upgrade and bootable support on nitro systems.

Learn to create, attach, and mount EBS volumes on Linux in a VPC, format with ext4, and use snapshots—including cross-region copy—to manage data across Windows and Linux environments.

Learn how AWS elastic load balancing distributes traffic to healthy targets across availability zones using application, network, and gateway load balancers, with health checks and path-based and host-based routing.

Deploy an internet-facing application load balancer in the AWS management console to distribute traffic in round-robin across two EC2 web servers in two availability zones, using health.html checks.

Discover how AWS auto scaling automatically adjusts capacity to meet demand. Explore EC2 auto scaling, application auto scaling, CloudWatch monitoring, health checks, and minimum, desired, maximum capacity.

Discover AWS serverless services that automate compute, data, and integration tasks, with automatic scaling and pay-as-you-go models, including Lambda, API Gateway, S3, and DynamoDB.

Explore AWS Lambda, a serverless, event-driven compute service that runs code without provisioning servers, scales automatically, supports multiple languages, and triggers from HTTP, S3, and more.

Explore provisioning an Amazon RDS database, including engine choices, instance class and size, storage options, and the DB subnet group within a VPC for high availability with Multi-AZ.

Explore how Amazon CloudWatch monitors resources, collects metrics, and triggers alarms to automate actions, visualize dashboards, and integrate with SNS, CloudTrail, and autoscaling.

Explore AWS Trusted Advisor to analyze your environment and improve security posture, performance, fault tolerance, and cost optimization, with simple traffic-light checks and plan-based access.

See how CloudTrail records all API calls and events in AWS by walking through a Control Tower trail, viewing event history, and analyzing a terminated EC2 instance.

Conduct high availability and failover tests by simulating an unhealthy ec2 instance, triggering auto scaling to replace it, and promoting standby rds in a multi-az setup with dns updates.

Create a London region vpc with 10.0.0.0/16, six subnets, and an internet gateway; deploy a nat gateway and set up public and main route tables with http and mysql rules.

Configure auto scaling with a launch template and an auto scaling group to deploy EC2 instances behind a load balancer, connect to the RDS database, and update db.php in S3.

Test and explore a three-tier AWS web app behind a load balancer, submit and retrieve vegan recipes via a web interface, and perform end-to-end CRUD against the backend database.

Demonstrate a multi-az failover test for an RDS MySQL database using reboot with failover in the AWS console, confirming a successful master failover and continued application operation.

Learn to clean up a multi-tier AWS project by terminating resources like autoscaling groups, load balancers, RDS multi-AZ, NAT gateways, VPC components, and S3 buckets to avoid extra costs.