The AWS Course - Under Updation 2026

Explore the AWS management console's services tab, discovering databases, compute, and analytics options, and learn to use favorites to pin VPC as a quick access shortcut.

Navigate the AWS management console efficiently by using the all services tab to access multiple AWS services and the recently visited services list to quickly return to your recent work.

Explore the AWS management console's build a solution feature to quickly understand core cloud concepts. Work through scenarios on virtual machines, serverless, microservices, domain registration, and deploying code to AWS.

Navigate the AWS management console search bar to find IAM services, view the IAM features tab, and access official blog link, official documentation link, and on-demand webinars.

Explore the triple A framework for authentication, authorization, and auditing, including policy enforcement and monitoring of access duration and events.

Explore types of users in AWS, detailing the root user and IAM user, how the root handles account tasks, and how IAM policies grant, modify, or revoke permissions.

learn how to set up and change your account alias using the iam service, update the sign-in url and console, and save changes.

Compare AWS managed policies with customer managed policies to control IAM permissions, noting AWS managed policies cannot be changed while customer policies offer flexible control and require only necessary permissions.

Explain how an IAM user interacts with AWS via console and programmatic access, using a username and password for the console or access keys, and never share them.

Create an iam user in the aws management console with programmatic and console access, a custom password with reset, attach s3 full access, and download the credentials csv.

Learn to log in to the AWS management console as an IAM user by entering the account alias, username, and a secure password. Verify the login with the account ID.

Log in as an IAM user to access the S3 console and view buckets, then learn that other services require separate permissions set by an administrator or root user.

Grant IAM user permissions by attaching policies in the AWS management console, including EC2 full access, and verify access from the IAM user's perspective after using root to assign permissions.

Explore AWS root user security credentials, including MFA status and access keys, and learn why you should never create root access keys, preferring an IAM user with separate keys.

Explore iam user security credentials in amazon web services, including console passwords, mfa devices, and access keys, with hands-on steps to create, deactivate, and delete keys, and avoid root credentials.

Learn how AWS MFA strengthens security with virtual and hardware MFA devices, SMS MFA for IAM users, and U2F security keys under the FIDO Alliance.

Enable multi-factor authentication for your IAM user by configuring a virtual MFA device with Google Authenticator, scanning the QR code, and using MFA codes at login.

Learn how IAM user groups collect users and attach policies to a group so all members inherit permissions. Note groups cannot be nested and you can add new users.

Create an IAM user group in the AWS console by navigating to Access Management, selecting user groups, naming the group, and creating it with no users or permissions yet.

Explore the remaining features of iam user groups, including adding and removing users, editing group names and arns, managing permissions, and reviewing inline policies, access advisor, and simulator.

Create an access analyzer at account or organization level, then set archive rules to auto-archive findings, and view findings by finding ID, resource, and access level.

Identify the main policy types in IAM, including identity-based and resource-based policies. Learn about permission boundaries, session policies, access control policies, and service control policies within organizations.

Explore three methods to create IAM policies: the JSON tab with policy validation and syntax checks, the visual editor for beginners, and importing AWS managed or customer managed policies.

Learn how IAM creates a new version for policy changes, stores up to five versions for customer managed policies, and enables rollback by setting a previous version as default.

Inline policies embed directly into a single user, group, or role and delete with that identity. Prefer managed policies unless you require a strict 1-to-1 relationship.

Explore inline policies in AWS IAM through a hands-on scenario: create an inline user, attach customer managed policies, apply least privilege, and understand 1-to-1 policy relationships and deletion effects.

Set up the permissions boundary for an AWS IAM user, attach an existing policy like EC2, and enable the boundary to control access to S3 and EC2.

Understand how a permissions boundary acts as an upper limit for authorization, blocking S3 access. To access EC2, attach EC2 permissions via IAM policies; remove boundary to grant S3 access.

Explore creating and managing custom IAM policies with the visual editor and JSON, apply read only S3 permissions, and attach policies to users or groups.

Learn how IAM roles act as identities with permissions, attached to users, applications, services, or EC2 to delegate access and enable authentication via SAML 2.0 or OpenID Connect.

Create an AWS IAM role for a service such as Amazon S3, attach permissions like EC2 read-only, and follow best practices to grant only the necessary access.

Explore trust relationships in AWS by examining an EC2 IAM role, learning how trusted entities identify who is assuming the role and cross-account access.

Disable and manage STS endpoints via account settings to deactivate or activate regional endpoints, such as Tokyo, to restrict access for compliance reasons.

Explore IAM concepts by learning user types, groups, policies, and roles, and enable MFA as a best practice. Practice hands-on scenarios to use access analyzer, credentials report, and password policies.

Create users and groups, attach policies to groups, assign roles to services; enable multi-factor authentication, rotate passwords, prevent reuse, apply least privileges, restrict resets to administrators, and generate credentials report.

Explore an AWS IAM use case: create a user with console and programmatic access to S3 and RDS in us-east-1, MFA, password policy, and a developers group for EC2 access.

Open the command prompt, verify the AWS CLI installation on Windows, and ensure the latest version is installed by checking the version output.

Configure the AWS CLI with a new IAM user for programmatic access, set us-east-1 as the default region, and verify by listing buckets while keeping credentials secret.

Identify how private and public ip addresses uniquely identify resources within a network and how packets traverse the osi layers from physical to application.

Learn to partition networks into private and public subnets by route to internet, assign public and private IPs, and implement internet gateway or NAT gateway in a VPC.

Explore the default VPC in each region, including subnets, route tables, and the Internet gateway. Learn how availability zones, ACLs, and security groups enable quick, developer-friendly resource launches.

Extend your VPC to enable local zones for ultra-low-latency compute and storage near industry centers, and enable wavelength zones in 5G networks for edge computing in Northern Virginia.

Learn how to enable AWS local zones and wavelength zones, map subnets to them, and deploy workloads at the edge for lower latency using the AWS console.

Learn to design a highly available VPC with a public and private subnet using the VPC wizard, including route tables, NAT gateway, and internet gateway.

Walk through creating a VPC with public and private subnets using the VPC wizard, attach an Elastic IP to the NAT gateway, and enable DNS hostnames and DNS resolution.

Explore the resources created by the VPC wizard for a public and private subnet architecture, including DNS hostname, DNS resolution, auto-assign public IPv4, route tables, internet gateway, and NAT gateway.

Learn to delete a VPC by removing dependencies like the NAT gateway, releasing the elastic IP, and then deleting the VPC with its subnets, gateways, and network access control list.

Create a public and private subnet in the VPC, assign CIDR blocks in ap-southeast-1, and enable auto-assign public IPv4 for the public subnet.

Create an internet gateway and attach it to your VPC to enable internet access for the public subnet, then prepare for route tables in the next video.

Learn to configure a NAT gateway in a public subnet with an elastic IP, route private subnets to the internet (0.0.0.0/0), and monitor with Cloud Watch.

Configure separate network access control lists for public and private subnets; NACLs are stateless filters with inbound and outbound rules prioritized by number, typically denying unused traffic.

Explore AWS VPC DHCP option sets that allocate private IPs and DNS names by default, and learn how to bring your own DNS servers and domain names.

Configure VPC flow logs at the VPC, subnet, or network interface level to monitor all traffic, and send logs to a CloudWatch log group with an IAM role.

Understand how VPC peering enables private connectivity between two VPCs over the AWS backbone. Explore how VPC endpoints allow private access from a private subnet to S3, without public internet.

Explore VPC peering theory, emphasizing non overlapping addresses, non transitive peering, and private traffic between peered VPCs. Learn the three setup steps and compare Transit Gateway for larger scale.

Explore two types of VPC endpoints—gateway and interface—and learn how they route private traffic to services like S3 and DynamoDB over Amazon's backbone, with a VPC endpoint policy and routes.

Create a VPC endpoint for your VPC and attach it to the private subnet’s route table. Learn gateway vs. interface endpoints and keep traffic private to S3 without internet gateways.

Learn to create and accept a VPC peering connection between two VPCs, update routes for bidirectional traffic, and remove the peering and NAT gateway when finished.

Explore the EC2 global view in the VPC console, a centralized dashboard showing all regions’ instances, subnets, security groups, and volumes, with global search and CSV export.

Discover how AWS VPC network access analyzer reveals egress and ingress paths from network interfaces to the internet gateway using predefined and custom scopes.

Explore the transit gateway as a hub to interconnect VPCs and on-prem networks, using attachments and route tables to enable private, encrypted traffic and route propagation instead of VPC peering.

Demonstrate transit gateway route evaluation order, prioritizing static routes, then managed prefix lists and propagated routes, across VPCs, VPN attachments, Direct Connect, and Transit Gateway Connect.

Explore various transit gateway architectures, including centralized, isolated, and shared services, plus transit gateway peering and internet access scenarios for VPCs and on-premises.

Create the transit gateway in a shared services account, share it across accounts with RAM, attach VPCs, and centrally manage the transit gateway route table.

Explore the basics of site-to-site VPNs connecting a VPC in AWS to on-premises networks, including BGP concepts (internal and external), autonomous systems, route tables, and resiliency and monitoring.

Explain how a site-to-site vpn encrypts traffic between a vpc and on-premises networks via a virtual private gateway or transit gateway. Discuss tunnels, redundancy, and authentication options like pre-shared keys.

Explore site-to-site VPN architectures in AWS, from a VPC with a virtual private gateway and a customer gateway, to VPN connections, transit gateway options, and high availability with Direct Connect.

Explore redundancy and resiliency for site-to-site VPN with two customer gateway devices and two tunnels to the same virtual private gateway, plus monitoring via CloudWatch and health dashboard alerts.

Explore a site-to-site VPN architecture between the AWS VPC 10.1.0.0/16 and the on-prem network 10.2.0.0/16, including a virtual private gateway, a Libreswan customer gateway, static routes, and dual-tunnel resiliency.

Walks through creating a site-to-site VPN in AWS, including customer gateway and virtual private gateway setup, routing options, encryption settings, and downloading the device configuration.

Explore how to configure a site-to-site VPN on AWS, generate and share configuration files for Libreswan or Openswan, and set up IPsec and pre-shared keys for on premise network.

Explore AWS Direct Connect, a fiber link from on-premises to AWS that enables private and public virtual interfaces to access VPC resources and public services, bypassing internet providers.

Explore how an AWS network firewall sits at the VPC edge, inspects traffic through a firewall subnet, and uses stateful rules to allow ssh while blocking google and facebook.

Compare Nat instances with Nat gateway, highlighting security groups, IPv6 support, scalability, automatic failover, and multi-az deployment. Note exam focus on Nat instance characteristics and monitoring via Vpc flow logs.

Analyze a public–private VPC setup with a web server and private database, enable VPC flow logs, and route traffic via a centralized transit gateway and firewall.

Discover how EC2 builds a virtual machine by selecting an Amazon machine image, choosing an instance type, configuring VPC and subnet, storage and security groups, and using key pairs.

Explore EC2 pricing models, including on-demand, reserved, dedicated instances, dedicated hosts, spot instances, and spot fleets, with notes on tenancy, control, and use-case trade-offs.

Discover the three reserved EC2 types—standard, convertible, and capacity reservations (scheduled)—with 1- or 3-year terms, upfront payment options, and the reserve instance marketplace.

Explore the EC2 spot pricing model, including spot blueprints, pricing history, and spot placement score, and learn how spot fleets with on-demand or reserved instances reduce costs.

Explore the new EC2 dashboard, launch an instance with the orange button, and review service health, migration options, pricing, and left navigation menus for EC2 configurations.

Learn the AWS reserved instances pricing model, selecting Linux or Windows, standard or convertible offerings, a 1-year t3.micro RI paid upfront, and the reserved instance marketplace.

Explore the EC2 spot pricing model and its history across availability zones and instance types like C3 large, highlighting potential savings versus on-demand in Northern Virginia.

Learn to use the spot placement score in AWS EC2 to gauge spot request feasibility, set target capacity, and compare regions and availability zones for better spot pricing.

Explore how spot requests and spot fleets optimize EC2 capacity, including target capacity, interruption behavior, and capacity rebalance, with cost discounts and use cases for peak workloads and Kubernetes workers.

Explore the dedicated hosts pricing model in EC2, enabling granular control for regulatory needs by hosting multiple instances on one dedicated host, with auto placement and varying instance types.

Explore EC2 instance types on the new dashboard, filter by virtual CPUs and price, view instance metadata like hypervisor and EBS, and launch prefilled Linux or Windows instances with templates.

Explore EC2 instance metadata, including networking details, security groups, public and private IPs, elastic IPs, storage, and system and instance status checks, and access metadata via 169.254.169.254.

Learn to log in to an EC2 instance via ssh, access metadata at 169.254.169.254, and understand dynamic versus elastic IPs with scripting to capture metadata for S3 storage.

Launch an ubuntu-based EC2 instance, attach a security group in the default VPC, log in via ssh with the key pair, and run apt-get updates.

Launch and connect to a Windows EC2 instance using RDP. Configure a security group to allow RDP from your IP and decrypt the administrator password to log in.

connect to a windows ec2 instance using the microsoft remote desktop by decrypting the administrator password with your private key via the instance ip address.

Explore the EC2 instance lifecycle from pending to running and manage states by stopping, starting, rebooting, hibernating (where supported), and terminating. View and control these states in the instances dashboard.

Explore four EC2 instance settings—termination protection, stop protection, shutdown behavior, and auto recovery—and preview attaching an IAM role for secure access without keys.

Learn how to use a bash user-data script on EC2 Amazon Linux AMI to install httpd, start the service, and serve a hello world page, with security group considerations.

Explore the AWS AMI catalog to launch instances from quick start, my AMI, marketplace, and community images, with filters for cost and architecture.

Explore EC2 AMI options, including copying AMIs across regions with encryption, managing permissions and deprecation, and choosing EBS vs instance store volumes, plus an introduction to EC2 image builder.

Learn how to launch an EC2 instance from a custom AMI, configure security groups, and verify a hello world web page starts automatically with the lightweight HTTP server.

Explore EBS volume types for EC2, including general purpose and provisioned IOPS SSDs. Identify use cases from transactional workloads to archiving, and grasp IOPS, throughput, and multi attach.

Learn to select the right EBS volume type for your workload to balance cost and performance, covering gp3, io2, multi-attach, IOPS, throughput, and encryption.

Create and manage EBS snapshots to capture point-in-time data and enable volume-to-snapshot and snapshot-to-volume workflows. Explore snapshot sharing, encryption during copy, fast snapshot restore, archiving, recycle bin retention, and tagging.

Learn how to enable VPC flow logs at the network interface level and route traffic data to destinations such as S3, CloudWatch Logs, or Kinesis, with windows and IAM permissions.

Compare application and network load balancers (layer seven vs layer four), learn health checks and SSL offloading, and understand path-based routing to EC2 instances, microservices, and Lambda behind target groups.

Prepare two EC2 instances in a public subnet behind an application load balancer, register them in a target group, and configure port 80 health checks.

Create an application load balancer, attach two EC2 instances to a target group via a listener, and review health checks to balance HTTP traffic using the load balancer's DNS name.

Learn how an application load balancer routes requests to healthy EC2 instances in a target group using round robin and health checks, with CloudWatch metrics and web application firewall protection.

Delete the load balancer infrastructure by removing the target group and terminating the EC2 instances. Learn how auto scaling groups maintain the desired state and adopt launch templates.

Explore how an auto scaling group uses launch templates, load balancers, and utilization thresholds to scale instances up or down, and how warm pools and instance refresh enable rolling updates.

Explore EC2 lifecycle hooks in an auto scaling group and warm pools, detailing launch and terminate waits, default outcomes like abandon or continue, and state transitions to in-service.

Connects two EC2 instances, installs amazon fs utils, and mounts an elastic file system with the fs mount helper using tls in transit, enabling shared access to index.html.

Explore Amazon Lightsail, a serverless compute service that launches easy instances with OS or app images, supports containers, databases, storage, load balancing, CDN, DNS records, and snapshots, with SSH access.

Learn to manage a Lightsail instance, connect via browser or SSH, configure static IPs and security rules, create snapshots, and deploy containers, databases, and domains.

Create an Elastic Beanstalk application with a sample Java app and OpenJDK version. Explore presets, deployment options, load balancer, auto scaling, security groups, VPC, and databases.

Understand how Elastic Beanstalk uses cloud formation to provision resources behind the scenes, including Elastic IP, launch templates, security groups, and auto scaling, delivering a healthy environment and application URL.

Explore Elastic Beanstalk deployment strategies, including all at once, immutable, rolling, rolling with additional batch, and blue-green, by creating and switching traffic between environments.

Explore blue-green deployment with Elastic Beanstalk, managing two environments behind an application load balancer, swapping versions, and automating deployments via the Elastic Beanstalk cli.

Download docker desktop for Windows, Mac, or Linux and explore the docker hub login, images, and containers. Understand the client–server model and the personal pricing limits.

Explore Colima as a lightweight, Docker-compatible runtime for macOS and Linux. Install Colima with brew to run Docker commands against containerd, Kubernetes support, and configurable RAM, disk, and port forwarding.

Discover how Docker Hub acts as a registry of images, repositories, and tags, including public and private images, and learn core commands like docker pull, run, stop, and rmi.

Explore Amazon elastic container registry, a managed container registry for storing, managing, and deploying Docker images, and learn to containerize apps, push images, and apply versioning, tag immutability, and encryption.

Explore elastic container registry repository settings, including private versus public repositories, tag immutability, image scanning, and lifecycle policies, then learn to view push commands and push docker images.

Enable lifecycle policies in elastic container registry to auto-delete untagged images after 30 days and manage repository permissions to share images with other accounts.

Explore advanced private registry configurations in AWS's ACR, including pull-through cache, cross-region and cross-account replication, and basic to enhanced image scanning for secure, private image management.

Bootstraps a Springboard application with Spring.io, containerizes it via a Dockerfile, authenticates to Elastic Container Registry, and pushes the image to a private repository using Java 17 and Maven.

Explore configuring AWS App Runner in a lab, choosing container registry or GitHub source, enabling automatic deployments, health checks, observability, and infrastructure managed by App Runner for scalable containers.

Learn how AWS Lambda delivers serverless compute via Firecracker micro VMs, achieving 125 ms cold starts and automatic, event-driven scaling with triggers from S3, API Gateway, and other services.

Explore Amazon CloudFront, a global content delivery network with 200 points of presence, caching content near users and integrating with S3, Lambda@Edge, Shield, and WAF for secure, low-latency delivery.

Explore how CloudFront uses origin access identity and signed URLs or cookies to secure content and control access. Learn caching implications of query strings and parameter consistency.

Explore S3 basics as an object-based storage with 11 nines durability, regional buckets, and storage classes, plus lifecycle policies, cross-region replication, and granular access via ACL, bucket policies, and IAM.

Discover how S3 object lock enforces retention and legal holds, use transfer acceleration for faster uploads, and set up object events to notifications or Lambda, with cost tagging.

Explore S3 lifecycle transitions moving objects across storage classes like standard, one zone, intelligent-tiering, glacier, and glacier deep archive, with forward-only rules and expiration caveats.

Explore Amazon CloudWatch, the AWS monitoring service, for metrics, logs, events, dashboards, alarms, Logs Insights, and Synthetics across regions.

CloudTrail tracks API and management activity, logging unusual events, and stores logs in CloudWatch log groups and S3 buckets with optional KMS encryption.

Enable and configure AWS CloudTrail to track user activity and API usage, create trails with advanced options, set up S3 storage, log validation, and tags, with optional organization-wide scope.

Learn how to enable AWS CloudTrail to deliver logs to CloudWatch Logs, create an IAM role for CloudTrail access, and verify cross-region log delivery.

Explore AWS CloudTrail event history with 90 days of management events, using filters by user or resource, and download data as CSV or JSON for Athena on S3.

Learn how CloudTrail stores logs in an S3 bucket with account, region, year, month, and date prefixes and digest files. Preview the log validation command to verify log integrity.

Explore how to validate CloudTrail logs with the validate-logs command, verify integrity via digest files, and enable CloudTrail and insights events across regions for security monitoring.

Learn how AWS Organizations enables centralized governance and consolidated billing for a multi-account strategy, with organizational units, service control policies, and cross-account resource sharing for compliance and security.

Initialize an AWS Organizations multi-account setup, invite accounts, and organize them into organizational units. Apply service control and tag policies, use trusted access, and manage resources across accounts.

Explore resource inventory in AWS Config, filter by category and compliance status, and view resource timelines and configuration changes.

Explore how AWS Config rules detect non-compliant security groups for restricted SSH, view resource timelines, and inspect configuration changes for governance and compliance.

Explore conformance packs in AWS config, a collection of config rules and remediation actions deployed as a single unit, with sample templates for IAM, S3, and more.

Aggregate config data across multiple accounts and regions with aggregators in AWS control tower. Authorize accounts to send data to a central audit account and deploy conformance packs and rules.

Explore AWS support plans from free tier to enterprise, highlighting trusted advisor checks, support API access, dedicated technical account management, and SLAs for critical incidents.

Explore the trusted advisor dashboard to review security and performance checks, including root MFA, unrestricted ports, security groups, and exportable checks via an Excel sheet for team sharing.

Explore how Amazon Inspector uses the systems manager agent for host-based and network-based assessments, adds container image scanning, and uses an IAM role to discover EC2 and ECR.

Enable enhanced scanning with Amazon Inspector for Elastic Container Registry to assess operating system and package vulnerabilities in Docker images across repositories, with adjustable frequency and on push options.

Assign your EC2 instance to Systems Manager host management using quick setup, enabling the pre-installed agent, daily scans, inventory collection, and optional CloudWatch agent.

Associate the IAM role with your EC2 instance to enable Systems Manager management, agent installation, and Amazon Inspector package vulnerability scanning and updates.

Discover how Inspector uses the SSM Agent on Amazon Linux, Amazon Linux 2, Mac OS, Ubuntu 16.04–20.04, and Windows Server AMIs—and how an EC2 instance joins Systems Manager for assessments.

Explore the Amazon Inspector console to manage EC2 and ECR scans, verify instance discovery and scanning status, and view repositories and Docker images for security assessments.

Explore how Amazon Inspector scans EC2 instances and ECR images using the Systems Manager agent, review roles and permissions, and enable Inspector across organization accounts with pricing and a free-trial.

Explore Amazon Macie's ability to discover and protect sensitive data in S3 at scale, with continuous or scheduled evaluations, encryption status, custom data type definitions, and multi-account integration.

Learn how Amazon Macie analyzes S3 bucket objects to detect sensitive data, triggering workflows via EventBridge or Lambda, and publishing findings to Security Hub with long-term discovery results.

Explore Amazon Macie settings walkthrough, detailing service permissions, delegated administrator, findings publication to Security Hub, 15-minute updates, suspend vs disable, and custom data identifiers using regex.

Explore how Amazon Macie finds sensitive data and credentials in S3 buckets, filter results by bucket and type, trigger Security Hub alerts, and support remediation for PCI DSS and GDPR.

Explore AWS Shield and WAF to protect web apps from DDoS and application attacks, compare Shield Standard and Shield Advanced, and configure WAF rules with IP whitelists and blacklists.

Explore AWS KMS, create and manage symmetric and asymmetric keys, set key policies and grants, and integrate with S3 while understanding region, rotation, and compliance basics.

Learn how AWS CloudFormation describes and provisions resources with infrastructure as code, using YAML or JSON templates, stacks, and change sets across regions and accounts.

Learn to install and start Docker on a CentOS 7 instance, configure the Docker repository, install Docker CE, Docker CLI, and container.io, enable startup, and verify with Docker commands.

Discover how Amazon RDS simplifies setting up, operating, and scaling relational databases in the cloud, with MySQL, PostgreSQL, MariaDB, and Aurora engines, automated backups, encryption, multi-AZ availability, and read replicas.

Explore Amazon elastic cache as a fully managed in-memory data store, compare Memcached and Redis, and learn use cases like real-time, low-latency caching, and session stores.