The AWS Course - Under Updation 2026

Explore the AWS management console's services tab, discovering databases, compute, and analytics options, and learn to use favorites to pin VPC as a quick access shortcut.

Explore the AWS management console's build a solution feature to quickly understand core cloud concepts. Work through scenarios on virtual machines, serverless, microservices, domain registration, and deploying code to AWS.

Navigate the AWS management console search bar to find IAM services, view the IAM features tab, and access official blog link, official documentation link, and on-demand webinars.

Explore the triple A framework for authentication, authorization, and auditing, including policy enforcement and monitoring of access duration and events.

Compare AWS managed policies with customer managed policies to control IAM permissions, noting AWS managed policies cannot be changed while customer policies offer flexible control and require only necessary permissions.

Explain how an IAM user interacts with AWS via console and programmatic access, using a username and password for the console or access keys, and never share them.

Learn to log in to the AWS management console as an IAM user by entering the account alias, username, and a secure password. Verify the login with the account ID.

Log in as an IAM user to access the S3 console and view buckets, then learn that other services require separate permissions set by an administrator or root user.

Explore AWS root user security credentials, including MFA status and access keys, and learn why you should never create root access keys, preferring an IAM user with separate keys.

Enable multi-factor authentication for your IAM user by configuring a virtual MFA device with Google Authenticator, scanning the QR code, and using MFA codes at login.

Identify the main policy types in IAM, including identity-based and resource-based policies. Learn about permission boundaries, session policies, access control policies, and service control policies within organizations.

Explore three methods to create IAM policies: the JSON tab with policy validation and syntax checks, the visual editor for beginners, and importing AWS managed or customer managed policies.

Explore inline policies in AWS IAM through a hands-on scenario: create an inline user, attach customer managed policies, apply least privilege, and understand 1-to-1 policy relationships and deletion effects.

Understand how a permissions boundary acts as an upper limit for authorization, blocking S3 access. To access EC2, attach EC2 permissions via IAM policies; remove boundary to grant S3 access.

Learn how IAM roles act as identities with permissions, attached to users, applications, services, or EC2 to delegate access and enable authentication via SAML 2.0 or OpenID Connect.

Disable and manage STS endpoints via account settings to deactivate or activate regional endpoints, such as Tokyo, to restrict access for compliance reasons.

Explore IAM concepts by learning user types, groups, policies, and roles, and enable MFA as a best practice. Practice hands-on scenarios to use access analyzer, credentials report, and password policies.

Explore an AWS IAM use case: create a user with console and programmatic access to S3 and RDS in us-east-1, MFA, password policy, and a developers group for EC2 access.

Configure the AWS CLI with a new IAM user for programmatic access, set us-east-1 as the default region, and verify by listing buckets while keeping credentials secret.

Learn to partition networks into private and public subnets by route to internet, assign public and private IPs, and implement internet gateway or NAT gateway in a VPC.

Extend your VPC to enable local zones for ultra-low-latency compute and storage near industry centers, and enable wavelength zones in 5G networks for edge computing in Northern Virginia.

Learn to design a highly available VPC with a public and private subnet using the VPC wizard, including route tables, NAT gateway, and internet gateway.

Learn to delete a VPC by removing dependencies like the NAT gateway, releasing the elastic IP, and then deleting the VPC with its subnets, gateways, and network access control list.

Create a public and private subnet in the VPC, assign CIDR blocks in ap-southeast-1, and enable auto-assign public IPv4 for the public subnet.

Learn to configure a NAT gateway in a public subnet with an elastic IP, route private subnets to the internet (0.0.0.0/0), and monitor with Cloud Watch.

Explore AWS VPC DHCP option sets that allocate private IPs and DNS names by default, and learn how to bring your own DNS servers and domain names.

Understand how VPC peering enables private connectivity between two VPCs over the AWS backbone. Explore how VPC endpoints allow private access from a private subnet to S3, without public internet.

Explore two types of VPC endpoints—gateway and interface—and learn how they route private traffic to services like S3 and DynamoDB over Amazon's backbone, with a VPC endpoint policy and routes.

Create a VPC endpoint for your VPC and attach it to the private subnet’s route table. Learn gateway vs. interface endpoints and keep traffic private to S3 without internet gateways.

Discover how AWS VPC network access analyzer reveals egress and ingress paths from network interfaces to the internet gateway using predefined and custom scopes.

Demonstrate transit gateway route evaluation order, prioritizing static routes, then managed prefix lists and propagated routes, across VPCs, VPN attachments, Direct Connect, and Transit Gateway Connect.

Explore site-to-site VPN architectures in AWS, from a VPC with a virtual private gateway and a customer gateway, to VPN connections, transit gateway options, and high availability with Direct Connect.

Walks through creating a site-to-site VPN in AWS, including customer gateway and virtual private gateway setup, routing options, encryption settings, and downloading the device configuration.

Explore how an AWS network firewall sits at the VPC edge, inspects traffic through a firewall subnet, and uses stateful rules to allow ssh while blocking google and facebook.

Analyze a public–private VPC setup with a web server and private database, enable VPC flow logs, and route traffic via a centralized transit gateway and firewall.

Discover how EC2 builds a virtual machine by selecting an Amazon machine image, choosing an instance type, configuring VPC and subnet, storage and security groups, and using key pairs.

Explore EC2 pricing models, including on-demand, reserved, dedicated instances, dedicated hosts, spot instances, and spot fleets, with notes on tenancy, control, and use-case trade-offs.

Learn the AWS reserved instances pricing model, selecting Linux or Windows, standard or convertible offerings, a 1-year t3.micro RI paid upfront, and the reserved instance marketplace.

Explore the EC2 spot pricing model and its history across availability zones and instance types like C3 large, highlighting potential savings versus on-demand in Northern Virginia.

Learn to use the spot placement score in AWS EC2 to gauge spot request feasibility, set target capacity, and compare regions and availability zones for better spot pricing.

Explore how spot requests and spot fleets optimize EC2 capacity, including target capacity, interruption behavior, and capacity rebalance, with cost discounts and use cases for peak workloads and Kubernetes workers.

Explore EC2 instance types on the new dashboard, filter by virtual CPUs and price, view instance metadata like hypervisor and EBS, and launch prefilled Linux or Windows instances with templates.

Launch an ubuntu-based EC2 instance, attach a security group in the default VPC, log in via ssh with the key pair, and run apt-get updates.

Launch and connect to a Windows EC2 instance using RDP. Configure a security group to allow RDP from your IP and decrypt the administrator password to log in.

connect to a windows ec2 instance using the microsoft remote desktop by decrypting the administrator password with your private key via the instance ip address.

Explore the EC2 instance lifecycle from pending to running and manage states by stopping, starting, rebooting, hibernating (where supported), and terminating. View and control these states in the instances dashboard.

Learn how to use a bash user-data script on EC2 Amazon Linux AMI to install httpd, start the service, and serve a hello world page, with security group considerations.

Explore EBS volume types for EC2, including general purpose and provisioned IOPS SSDs. Identify use cases from transactional workloads to archiving, and grasp IOPS, throughput, and multi attach.

Learn to select the right EBS volume type for your workload to balance cost and performance, covering gp3, io2, multi-attach, IOPS, throughput, and encryption.

Learn how to enable VPC flow logs at the network interface level and route traffic data to destinations such as S3, CloudWatch Logs, or Kinesis, with windows and IAM permissions.

Compare application and network load balancers (layer seven vs layer four), learn health checks and SSL offloading, and understand path-based routing to EC2 instances, microservices, and Lambda behind target groups.

Prepare two EC2 instances in a public subnet behind an application load balancer, register them in a target group, and configure port 80 health checks.

Create an application load balancer, attach two EC2 instances to a target group via a listener, and review health checks to balance HTTP traffic using the load balancer's DNS name.

Learn how an application load balancer routes requests to healthy EC2 instances in a target group using round robin and health checks, with CloudWatch metrics and web application firewall protection.

Delete the load balancer infrastructure by removing the target group and terminating the EC2 instances. Learn how auto scaling groups maintain the desired state and adopt launch templates.

Connects two EC2 instances, installs amazon fs utils, and mounts an elastic file system with the fs mount helper using tls in transit, enabling shared access to index.html.

Explore Amazon Lightsail, a serverless compute service that launches easy instances with OS or app images, supports containers, databases, storage, load balancing, CDN, DNS records, and snapshots, with SSH access.

Learn to manage a Lightsail instance, connect via browser or SSH, configure static IPs and security rules, create snapshots, and deploy containers, databases, and domains.

Create an Elastic Beanstalk application with a sample Java app and OpenJDK version. Explore presets, deployment options, load balancer, auto scaling, security groups, VPC, and databases.

Explore blue-green deployment with Elastic Beanstalk, managing two environments behind an application load balancer, swapping versions, and automating deployments via the Elastic Beanstalk cli.

Explore Colima as a lightweight, Docker-compatible runtime for macOS and Linux. Install Colima with brew to run Docker commands against containerd, Kubernetes support, and configurable RAM, disk, and port forwarding.

Explore advanced private registry configurations in AWS's ACR, including pull-through cache, cross-region and cross-account replication, and basic to enhanced image scanning for secure, private image management.

Explore configuring AWS App Runner in a lab, choosing container registry or GitHub source, enabling automatic deployments, health checks, observability, and infrastructure managed by App Runner for scalable containers.

Learn how AWS Lambda delivers serverless compute via Firecracker micro VMs, achieving 125 ms cold starts and automatic, event-driven scaling with triggers from S3, API Gateway, and other services.

Discover how S3 object lock enforces retention and legal holds, use transfer acceleration for faster uploads, and set up object events to notifications or Lambda, with cost tagging.

Enable and configure AWS CloudTrail to track user activity and API usage, create trails with advanced options, set up S3 storage, log validation, and tags, with optional organization-wide scope.

Learn how CloudTrail stores logs in an S3 bucket with account, region, year, month, and date prefixes and digest files. Preview the log validation command to verify log integrity.

Initialize an AWS Organizations multi-account setup, invite accounts, and organize them into organizational units. Apply service control and tag policies, use trusted access, and manage resources across accounts.

Explore how AWS Config rules detect non-compliant security groups for restricted SSH, view resource timelines, and inspect configuration changes for governance and compliance.

Explore AWS support plans from free tier to enterprise, highlighting trusted advisor checks, support API access, dedicated technical account management, and SLAs for critical incidents.

Explore the trusted advisor dashboard to review security and performance checks, including root MFA, unrestricted ports, security groups, and exportable checks via an Excel sheet for team sharing.

Associate the IAM role with your EC2 instance to enable Systems Manager management, agent installation, and Amazon Inspector package vulnerability scanning and updates.

Discover how Inspector uses the SSM Agent on Amazon Linux, Amazon Linux 2, Mac OS, Ubuntu 16.04–20.04, and Windows Server AMIs—and how an EC2 instance joins Systems Manager for assessments.

Explore Amazon Macie's ability to discover and protect sensitive data in S3 at scale, with continuous or scheduled evaluations, encryption status, custom data type definitions, and multi-account integration.

Learn how Amazon Macie analyzes S3 bucket objects to detect sensitive data, triggering workflows via EventBridge or Lambda, and publishing findings to Security Hub with long-term discovery results.

Explore Amazon Macie settings walkthrough, detailing service permissions, delegated administrator, findings publication to Security Hub, 15-minute updates, suspend vs disable, and custom data identifiers using regex.

Explore AWS KMS, create and manage symmetric and asymmetric keys, set key policies and grants, and integrate with S3 while understanding region, rotation, and compliance basics.

Learn how AWS CloudFormation describes and provisions resources with infrastructure as code, using YAML or JSON templates, stacks, and change sets across regions and accounts.

Discover how Amazon RDS simplifies setting up, operating, and scaling relational databases in the cloud, with MySQL, PostgreSQL, MariaDB, and Aurora engines, automated backups, encryption, multi-AZ availability, and read replicas.