AWS For Everyone

Ashish introduces himself and the AWS for everyone training, emphasizing a classroom style, simple analogies, the why behind the technology, and a mix of whiteboard demos and slides.

Learn how block, file, and object storage differ, with real-world analogies, and see how AWS offers EBS, instance store, EFS, FSx, S3, and Glacier for scalable storage.

Explore Amazon S3 basics by understanding buckets and objects, the global namespace, and how regional buckets store data with 11 nines durability and high availability.

Apply an S3 bucket policy in JSON to grant read access, using a policy generator and ARN, then enable static website hosting with index.html and the S3 website endpoint.

Explore the four core aws pricing dimensions—processing, storage, data transfer, and service-specific factors—and see how they apply to amazon s3, including requests, data retrieval, region nuances, and the pricing calculator.

Explore Amazon S3 storage classes, like standard, infrequent access, glacier, and intelligent tiering, and learn how to choose by access frequency and cost.

Configure S3 lifecycle policies to automatically transition objects across storage classes from S3 standard to IA to Glacier to Glacier Deep Archive, and expire them at the bucket level.

Enable bucket versioning to retain multiple object versions with version IDs and delete markers, managed by lifecycle policies. Use replication for cross-region or cross-account copies and transfer acceleration for uploads.

Explore Amazon S3 Glacier, a storage service for cold data and archiving, using vaults and archives with instant, flexible, or deep archive retrieval options, via CLI or lifecycle policies.

Explore cloud compute and virtualization, including physical versus virtual servers, nitro, and EC2 instances. Learn about Amazon machine images, instance types, arm graviton, and region and availability zones.

Launch a Linux Amazon EC2 instance, configure a key pair, security group, and httpd web server, then use user data to automate setup and monitor status checks.

Explore block storage options for Amazon EC2, including instance store and Elastic Block Store, learn how volumes, availability zones, and snapshots provide persistent, attachable storage.

Take a point-in-time copy of an EBS volume with snapshots to enable disaster recovery, cross-region and cross-account replication, and image creation (AMI); manage, share, and automate snapshots with lifecycle policies.

Explore Amazon EC2 pricing options—on-demand, reserved instances, savings plans, and spot instances—to see how billing changes with each option and when to use spot for non-critical, stateless workloads.

Explore how physical networks map to AWS networking concepts, including subnets, elastic network interfaces, routing tables, security groups, network ACLs, internet gateway, and a VPC.

Explore how Amazon VPC creates a region scoped, isolated network with a default VPC, CIDR blocks, subnets, and security groups across availability zones for EC2.

Learn how the main route table navigates traffic in a VPC, including local routes, the default route 0.0.0.0/0, and subnet associations, plus internet access via internet gateway and NAT gateway.

Explore how security groups and network ACLs protect AWS workloads with IP-level controls, applying instance-level and subnet-level filtering and detailing stateful vs stateless behavior.

Explore private, public, and elastic IP addresses for EC2 in a VPC, including DHCP-based allocation, auto-assign settings, and elastic IPs for stable, re-attachable addressing.

Explore site-to-site vpn and direct connect to link AWS VPC with on-prem networks, compare private vs public connectivity, and cover use cases, setup, costs, and high availability.

Discover how VPC endpoints enable private connectivity to AWS services, using gateway endpoints for S3 and DynamoDB and interface endpoints for others via Privatelink, with ENIs and route tables.

Learn how VPC peering enables private, cross-region and cross-account connectivity between VPCs with non overlapping IP address ranges, using the AWS global network and routing tables.

Explain the AWS shared responsibility model, highlighting what AWS protects versus what customers must secure, including encryption, patches, IAM, data, and how responsibilities differ across EC2, RDS, and S3.

Master AWS IAM basics by exploring authentication and authorization, identities, and policies, and learn how requests flow through endpoints, CloudTrail, and console, CLI, or SDK.

Learn AWS IAM by creating users and groups, attaching policies, and defining permissions for S3 and EC2, with best practices like MFA and least privilege.

Explore policies in identity and access management, including managed, customer managed, and inline policies, and distinguish resource policies along with versioning and policy attachment to users, groups, roles, and resources.

Explore how policy evaluation logic resolves conflicts by evaluating applicable policies as one, starting with deny, then explicit denies, explicit allows, and finally implicit denial in IAM and resource policies.

Learn how AWS IAM roles work: create roles, define trust policies, allow users to assume roles, attach developer permissions, and use STS to obtain temporary credentials for role switching.

Explore how identity providers authenticate users and enable federation with AWS IAM, using OpenID or SAML (Active Directory, Shibboleth, Okta), to issue temporary credentials via STS.

Learn AWS identity and access management basics—create users, groups, roles, and JSON policies. See how policies attach to users, groups, or roles, and how resource policies and federation enable access.

Compare relational and non-relational databases, exploring SQL and no SQL, data storage patterns from tables to documents, dynamic schemas, and scaling strategies in the cloud.

Learn how Amazon RDS enables managed relational databases, automating patches, backups, and high availability; choose from MySQL, PostgreSQL, MariaDB, Oracle, SQL Server, Aurora, and deploy with multi-AZ and read replicas.

Discover aws rds multi-az for high availability with a standby and synchronous replication, and read replicas for scalable reads with asynchronous replication. Explore endpoints, backups, maintenance windows, and cross-region snapshots.

Discover Amazon Aurora, a cloud-native, MySQL and PostgreSQL-compatible database that separates storage and compute for scalable, durable, auto-failover workloads, with cluster and reader endpoints.

Explore how Amazon DynamoDB achieves scalability and durability with partitioned non-relational tables, items, and attributes, including how writes are replicated across copies and how eventual and strong reads work.

Learn how DynamoDB uses a partition key and a sort key to create a composite primary key, enabling unique item identification, robust data modeling, and efficient table queries.

Learn how DynamoDB secondary indexes—global and local—enable efficient queries, with guidance on keys, projections, throughput, and read consistency for effective data modeling.

Explore DynamoDB capacity mode and learn how read capacity units and write capacity units drive performance and cost, with on demand and provisioned options, auto scaling, and throttling considerations.

Explore how AWS CloudWatch monitors performance, utilization, health, and security by collecting metrics, logs, and events from AWS and on-premises resources, including EventBridge for events.

Learn to collect and publish custom metrics from EC2 and on-prem servers using the unified CloudWatch agent, configured via wizard and IAM roles for CloudWatch.

Explore how CloudWatch alarms monitor metrics against thresholds, trigger actions via sns or endpoints, and manage alarm states and composite alarms.

Learn how CloudWatch logs centralize logs from EC2, CloudTrail, and on-prem systems, using a unified agent to stream to log groups and streams, create filters, alarms, and retention.

Explore how AWS CloudTrail records all API activity as an event history - management, data, and insight events - and how trails deliver logs to S3 for analysis.

Understand the difference between scalability and elasticity, and how AWS implements both with regions, edge locations, and automated scaling for scalable architectures.

Discover how AWS elastic load balancing distributes requests across multiple resources to achieve high availability, health check, TLS termination, and security with application and network load balancers.

Build a VPC with public and private subnets across two availability zones, deploy web servers behind an internet-facing application load balancer and target group, with health checks and round-robin routing.

Explore network load balancer basics, including its connection-based routing, elastic IP and PrivateLink options, and how it forwards traffic to targets like ALB and EC2 for fast, reliable delivery.

Discover gateway load balancer, a layer-3 gateway and layer-4 load balancer that uses Geneve encapsulation to route traffic through third-party appliances via a VPC endpoint service.

Explore aws auto scaling concepts across three offerings—ec2 auto scaling, aws auto scaling, and application auto scaling—and how scaling plans automate multi-resource adjustments for web, app, and database components.

Learn how Amazon EC2 auto scaling uses an auto scaling group with minimum, maximum, and desired capacity, plus a launch template, to adjust instances with CloudWatch alarms and scaling policies.

Explore how to set up an EC2 auto scaling group with a launch template and an application load balancer, including target groups, min/max/desired capacity, and a CPU-based target-tracking policy.

Explore AWS auto scaling policies from manual and scheduled actions to dynamic and predictive scaling, with simple, step, and target tracking policies, illustrated by the Netflix example.

Explore how caching in AWS boosts performance and reduces latency, adds an extra security layer with services like WAF and AWS Shield, and cuts costs using CloudFront and ElastiCache.

Explore how Amazon CloudFront uses global edge locations and regional caches to deliver content from origins (S3, EC2, or on-prem) via distributions, with caching policies, time-to-live, and lambda at edge.

Explore Amazon CloudFront in action, delivering a static site from an S3 origin via a distribution with origin access control and bucket policy, plus edge caching and first miss.

Explore database caching basics, including in-memory storage, cache endpoints, and the inline versus side cache patterns using Redis or Memcached.

Explore how Amazon ElastiCache provides a fully managed, scalable in-memory caching service with Memcached and Redis engines, offering encryption, network isolation, replication, backups, and on-prem options.

Explore caching strategies for AWS ElastiCache, including lazy loading and right through, to optimize reads and writes with cache misses, TTL eviction, and data freshness.

Learn how DynamoDB accelerator (Dax) serves as an inline cache to speed reads to microseconds, with read-through, write-through, write-back, and write-around options, deployed as a Dex cluster inside a VPC.