Explore the AWS well-architected framework and its six pillars—operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability—plus design principles, governance, and the cloud transformation journey from envision to scale.

Explore AWS services across compute, storage, database, networking, analytics, and AI/ML, with examples like EC2, S3, DynamoDB, RDS, Lambda, and OpenSearch.

Explore AWS Codecommit basics, its secure version control, and how it integrates with Codebuild, CodeDeploy, and Codepipeline to enable continuous delivery across AWS services.

Learn how cross zone load balancing distributes client requests across all enabled availability zones to improve efficiency and utilization, and contrast with single-zone traffic when disabled.

Explore how Amazon Route 53 provides scalable DNS, domain registration, health checks, and advanced routing policies—geolocation, latency, weighted, and alias records for AWS resources.

Master AWS identity and access management to centralize authentication and authorization with users, groups, roles, and fine-grained policies. Apply least privilege, MFA, and root user best practices across accounts.

Explore key components of AWS client VPN, including client VPN endpoint, target networks, routes, authorization rules, and authentication options like Active Directory, certificate-based mutual authentication, and single sign-on with SAML.

Define and evaluate recording and alerting rules in Amazon Managed Service for Prometheus, using PromQL expressions, YAML files, namespaces, and rule groups to precompute data and trigger alerts via Alertmanager.

Explore managing data resources in AWS analytics clusters, from S3 data storage and Athena setup to EMR cluster roles, lifecycle, and query workflows.

Explore Amazon Kendra's ML-powered enterprise search, including data sources, indexing, and query types; learn how Amazon Lex powers conversational bots and Amazon Polly for speech synthesis, plus personalization workflows.

Explore Amazon Transcribe streaming and batch transcription, including real-time speech-to-text, speaker diarization, language customization, privacy features, and call analytics for building speech-to-text apps.

Learn to manage IT services with AWS service catalog, enabling standardized, governed provisioning of approved products and portfolios, with end-user self-service and versioned, constrained deployments via CloudFormation and Terraform.

Explore AWS KMS keys and data keys, customer managed, AWS managed, and AWS own keys. Understand symmetric and asymmetric keys, data keys, and signatures with RSA and elliptic curve keys.

Understand Amazon elastic file system types: regional vs one zone, storage classes (standard, infrequent access, archive), and performance and throughput modes; learn to mount via NFS with EC2 and on-premises.

Master AWS budgets to track cost and usage, set budget types, alerts, and reports, and integrate with Cost Explorer. Use IAM policies and automation to enforce spending limits across accounts.

Explore AWS identity and access management by creating users and groups, attaching policies, assigning roles, and implementing access controls for EC2 and S3 resources.

Explore AWS Directory Service options—AWS managed Microsoft AD, AD Connector, and Simple AD—and how they manage users, groups, and access via on-premises and cloud integrations.

Explore Amazon RDS relational database service, a managed database platform that supports Aurora, MySQL, PostgreSQL, MariaDB, Oracle, and Microsoft SQL Server, with automated provisioning, patching, backups, and scaling.

Learn how AWS site-to-site VPN works, including two IPsec tunnels, a virtual private gateway or transit gateway, a customer gateway, tunnel configurations, and accelerated VPN with AWS Global Accelerator.

Learn to use AWS Migration Hub to discover, migrate, and track applications with strategy recommendations, Refactor Spaces, Orchestrator, and edge solutions like Snowcone.

Explore AWS Shield and AWS WAF to protect web applications from DDoS and application-layer attacks, using Web ACL, rule groups, and managed rules across CloudFront, Route 53, and EC2.

Demonstrates using AWS Trusted Advisor to identify and remediate security, storage, and bucket access violations, then applies the well-architected tool's lenses and templates to evaluate workloads.

Learn how backup policies standardize and deploy cross-account data protection within AWS organizations, including creating backup plans, inheritance rules, and policy management across accounts.

Demonstrates creating an Elastic Container Registry repository, pushing Docker images to ECR, and using ECS with Fargate or EC2, including task definitions and services.

Discover and map your on-premises infrastructure with AWS Application Discovery Service, using agentless and agent-based collectors, VMware and database discovery, and Migration Hub integration to plan migrations and estimate costs.

Explore how AWS Elastic Beanstalk simplifies deploying web apps by handling EC2, load balancers, and networking, and learn how AWS Fargate enables serverless container deployments with ECS and EKS.

Provision a public ssl tls certificate with aws certificate manager, validate ownership via dns provider, attach to an application load balancer for https on ec2, then test and clean up.

Create a VPC with two public subnets and launch two EC2 instances. Configure an application load balancer with a target group and test traffic distribution.

Learn AWS exam strategy by breaking questions into background, objective, and constraints. Use elimination, focus on AWS native options, time management, and review flags to maximize your score.

Explore resource based policies and cross-account sharing with AWS RAM, detailing how to share resources, define principals, and apply permissions across accounts.

Enable secure secret storage and automatic rotation with AWS Secrets Manager, managing database and application credentials, OAuth tokens, API keys, cross-region replication, cross-account access, and parameter store integration.

Identify how transit gateway routes are evaluated in order from static routes to propagated and peering routes. Explain how attachments such as VPN, Direct Connect, and VPC influence routing decisions.

Explore subnet CIDR blocks within a virtual private cloud and availability zones, including IPv4 and IPv6 CIDRs, subnet types, routing, and security controls such as security groups and network ACLs.

Explore Amazon AppFlow for secure data transfer and mapping between SaaS apps and AWS services, and learn AWS AppSync with GraphQL, resolvers, and data sources.

Analyze data directly on S3 with Amazon Athena using standard SQL for ad hoc queries in a serverless, pay-per-use model; explore tables, databases, and the Glue Data Catalog.

Demonstrates an end-to-end AWS Lambda and REST API workflow: create a Lambda, configure API Gateway, enable CORS, deploy, test from a browser, then clean up.

Learn to design REST APIs with Amazon API Gateway, including REST, HTTP, and WebSocket APIs, integrating with Lambda and DynamoDB, while emphasizing security and performance.

Explore AWS cost management with Cost Explorer: analyze cost trends, daily and monthly unblended costs, amortized and net amortized costs, forecasts, anomaly detection, access control, and preconfigured reports.

Explore AWS Glue, a serverless data integration service that discovers, cleans, and transforms data, builds ETL pipelines with Glue Studio, and centralizes metadata in the data catalog for scalable analytics.

Explore Amazon CloudWatch to collect metrics and logs, build real-time dashboards, set alarms, and analyze performance with metrics insights and anomaly detection across AWS resources.

Learn how AWS cost and usage reports deliver detailed cost data to an S3 bucket, configurable by hourly to monthly granularity, and queryable with Athena.

Learn how Amazon Code Catalyst unifies planning, coding, and deployment across spaces, projects, blueprints, and workflows while integrating AWS resources, VPC connections, and roles.

Discover the architecture of Amazon MSK, a fully managed Apache Kafka service, including craft mode vs Zookeeper, tiered storage, serverless options, and MSK Connect integrations for streaming data.

Explore how Amazon EC2 auto scaling uses launch templates, health checks, and load balancing to adjust capacity across multiple availability zones with on-demand and spot instances.

Master AWS codebuild, codepipeline, and codecommit to design end-to-end software pipelines with build specs, deployment strategies (in place, blue-green, canary), and VPC-enabled environments.

Upload your application to Elastic Beanstalk, and let the service automatically provision environments with EC2, load balancer, and auto scaling, while you manage versions and configurations.

Explore AWS IoT Greengrass core components, enabling local data processing and ML inference at the edge with Lambda, Docker, and pre-built components.

Explore managing SQS messages, covering standard and FIFO queues, message attributes, visibility timeouts, delays, dead letter queues, polling, temporary queues, timers, EventBridge pipes, and large payload handling with extended clients.

Master AWS auto scaling concepts, including scaling plans, dynamic scaling, and predictive scaling. Understand how scheduling policies, job queues, and compute environments drive resource allocation.

Compare Amazon MQ with SQS and SNS, covering broker types, high availability, cross-region replication, and SNS topics, FIFO versus standard, filtering, and fan-out to SQS, Lambda, and Firehose.

Master AWS CloudFormation to provision resources from JSON or YAML templates, use changesets and stack sets for multi-account and multi-region deployments, and automate workflows with CodePipeline and Git Sync.

Explore creating and configuring an Amazon Redshift cluster, connecting via query editor, loading sample data from S3 with the copy command, and running basic queries to analyze performance.

Explore AWS Lambda, a serverless, event-driven computing platform that auto-scales on demand, with pay-per-use pricing, IAM security, multi-language support, and real-time data processing for web, mobile, IoT, and backend services.

Explore Amazon Rekognition capabilities, including labels, text detection, unsafe content, face liveness and custom labels, alongside SageMaker autopilot and Jumpstart for rapid ML development.

Explore AWS data pipeline fundamentals, including moving and transforming data, its scheduling and execution, and migration options to AWS Glue, AWS Step Functions, and Amazon managed workflows for Apache Airflow.

Explore ElastiCache serverless and custom clusters to deploy a highly available, auto-scaling cache with no provisioning, via VPC endpoints, a DNS endpoint, and a proxy layer, supporting Memcached and Redis.

Explore Amazon OpenSearch service, including ingestion, serverless options, security, and integration with AWS services. Learn to deploy, ingest data, visualize logs, query dashboards, and manage OpenSearch domains.

Explore hands-on with Amazon SQS standard and FIFO queues, sending and receiving messages, and learn AWS Step Functions workflows—standard vs express, service integrations, error handling, and human-in-the-loop patterns.

Explore AWS App Runner basics, including service, source type, runtime, deployment, custom domains, and observability, then compare compute, EC2, and SageMaker savings plans to optimize cloud costs.

Explore how Aurora serverless v2 scales with Aurora capacity units (acres) within defined minimum and maximum bounds, with independent writer and reader scaling and cross-region options.

Discover how AWS Control Tower creates a secure multi-account landing zone with guardrails, an account factory, IAM Identity Center, shared accounts, and centralized governance across organizations and regions.

Discover how Amazon EventBridge enables real-time, serverless event-driven architectures by routing data from AWS services, SaaS, and custom apps to Lambda and other targets, using event patterns and rules.

Explore AWS CodeArtifact concepts and workflows, including domains, repositories, packages, upstream relationships, and integrating with npm, Maven, and pip, with practical setup and security.

Explore cross-region backups in Amazon RDS, including automated backups, cross-region replication, and read replicas, while connecting EC2 to PostgreSQL and securing data with KMS.

Explore a hands-on demo of Amazon Kinesis data streams, creating a demo stream, deploying Lambda functions to generate and process data, and storing results in DynamoDB, with cleanup.

Explore global database strategies with Amazon Aurora, including cross-region replication, blue-green deployments, and serverless options, plus EKS Distro and ECS Anywhere for hybrid Kubernetes.

Learn how AWS Lake Formation centrally manages data lakes on S3, uses the Glue Data Catalog, and enables fine-grained, cross-account access across Athena, Redshift Spectrum, and more.

Explore private repositories with Amazon ECR, including registry structure, repositories, authorization tokens, and features like lifecycle policies, image scanning, and cross-region replication.

Explore how Amazon QuickSight provides cloud-based business intelligence, connects data from AWS, third-party sources, and dashboards, fueled by Spice and ML insights, with row-level security for scalable analytics.

Explain Amazon Elastic Kubernetes Service (EKS) architecture, deployment options, and node types, including Fargate and self-managed; cover EBS CSI driver storage, VPC requirements, and basic logging and monitoring.