The AWS Course - Under Updation 2026

Explore the AWS management console's services tab, discovering databases, compute, and analytics options, and learn to use favorites to pin VPC as a quick access shortcut.

Navigate the AWS management console to explore Cloud Shell, notifications, support, regions, and account tabs, switch regions, provision resources, view event logs, and review the billing dashboard.

Navigate the AWS management console efficiently by using the all services tab to access multiple AWS services and the recently visited services list to quickly return to your recent work.

Explore the AWS management console's build a solution feature to quickly understand core cloud concepts. Work through scenarios on virtual machines, serverless, microservices, domain registration, and deploying code to AWS.

Navigate the AWS console, choose fundamentals or learning paths for solution architect and developer associate tracks, explore dive deeper resources, and use the AWS management console on iOS or Android.

Navigate the AWS management console search bar to find IAM services, view the IAM features tab, and access official blog link, official documentation link, and on-demand webinars.

Explore the AWS management console features, including Explore, free training, and AWS cloud practitioner essentials course for certification prep. Provide feedback via the submit feedback option and the support feature.

Explore the triple A framework for authentication, authorization, and auditing, including policy enforcement and monitoring of access duration and events.

Explore types of users in AWS, detailing the root user and IAM user, how the root handles account tasks, and how IAM policies grant, modify, or revoke permissions.

learn how to set up and change your account alias using the iam service, update the sign-in url and console, and save changes.

Compare AWS managed policies with customer managed policies to control IAM permissions, noting AWS managed policies cannot be changed while customer policies offer flexible control and require only necessary permissions.

Log in to the AWS management console using root user credentials, navigating from aws.amazon.com and completing security verification. Note that root login isn’t best practice; future videos cover safer alternatives.

Explain how an IAM user interacts with AWS via console and programmatic access, using a username and password for the console or access keys, and never share them.

Create an iam user in the aws management console with programmatic and console access, a custom password with reset, attach s3 full access, and download the credentials csv.

Learn to log in to the AWS management console as an IAM user by entering the account alias, username, and a secure password. Verify the login with the account ID.

Log in as an IAM user to access the S3 console and view buckets, then learn that other services require separate permissions set by an administrator or root user.

Grant IAM user permissions by attaching policies in the AWS management console, including EC2 full access, and verify access from the IAM user's perspective after using root to assign permissions.

In this hands-on IAM lecture, the learner verifies that an IAM user with Amazon EC2 full access can view and use the AWS management console for EC2, illustrating least privilege.

Explore AWS root user security credentials, including MFA status and access keys, and learn why you should never create root access keys, preferring an IAM user with separate keys.

Explore iam user security credentials in amazon web services, including console passwords, mfa devices, and access keys, with hands-on steps to create, deactivate, and delete keys, and avoid root credentials.

Learn how AWS MFA strengthens security with virtual and hardware MFA devices, SMS MFA for IAM users, and U2F security keys under the FIDO Alliance.

Enable multi-factor authentication for your IAM user by configuring a virtual MFA device with Google Authenticator, scanning the QR code, and using MFA codes at login.

Explore credentials report in AWS IAM to audit user credentials and status (passwords, access keys, MFA), generated via console, SDK, CLI, or API, and delivered as csv for compliance.

Generate and review the AWS credentials report to audit user access, MFA status, and access keys, then examine the CSV for creation dates, password events, and last rotations and uses.

Learn how IAM user groups collect users and attach policies to a group so all members inherit permissions. Note groups cannot be nested and you can add new users.

Create an IAM user group in the AWS console by navigating to Access Management, selecting user groups, naming the group, and creating it with no users or permissions yet.

Learn how to add users to an IAM user group and attach permissions at the group level, enabling inherited access to policies like Amazon EC2 full access.

Explore the remaining features of iam user groups, including adding and removing users, editing group names and arns, managing permissions, and reviewing inline policies, access advisor, and simulator.

Enable access analyzer to identify unintended access across your AWS account. Analyze policies for resources like S3 and IAM roles in your zone of trust, and surface findings for action.

Create an access analyzer at account or organization level, then set archive rules to auto-archive findings, and view findings by finding ID, resource, and access level.

Create and attach IAM policies to AWS identities and resources to control access, with policies stored as JSON documents that define permissions and determine allow or deny.

Identify the main policy types in IAM, including identity-based and resource-based policies. Learn about permission boundaries, session policies, access control policies, and service control policies within organizations.

Explore three methods to create IAM policies: the JSON tab with policy validation and syntax checks, the visual editor for beginners, and importing AWS managed or customer managed policies.

Learn how IAM creates a new version for policy changes, stores up to five versions for customer managed policies, and enables rollback by setting a previous version as default.

Inline policies embed directly into a single user, group, or role and delete with that identity. Prefer managed policies unless you require a strict 1-to-1 relationship.

Explore inline policies in AWS IAM through a hands-on scenario: create an inline user, attach customer managed policies, apply least privilege, and understand 1-to-1 policy relationships and deletion effects.

Define permissions boundaries to cap maximum permissions for IAM users and roles, ensuring actions fit identity-based policies and the boundary, with implicit deny.

Set up the permissions boundary for an AWS IAM user, attach an existing policy like EC2, and enable the boundary to control access to S3 and EC2.

Understand how a permissions boundary acts as an upper limit for authorization, blocking S3 access. To access EC2, attach EC2 permissions via IAM policies; remove boundary to grant S3 access.

Explore creating and managing custom IAM policies with the visual editor and JSON, apply read only S3 permissions, and attach policies to users or groups.

Learn how IAM roles act as identities with permissions, attached to users, applications, services, or EC2 to delegate access and enable authentication via SAML 2.0 or OpenID Connect.

Create an AWS IAM role for a service such as Amazon S3, attach permissions like EC2 read-only, and follow best practices to grant only the necessary access.

Explore trust relationships in AWS by examining an EC2 IAM role, learning how trusted entities identify who is assuming the role and cross-account access.

Learn to enforce secure AWS IAM password policies with custom and default options, covering minimum and maximum length, character types, rotation, expiration, and reuse prevention.

View and edit password policy under account settings; set 8–50 characters with mixed case, numbers, and non alphanumeric characters, enable rotation, and prevent reuse of the last five passwords.

Disable and manage STS endpoints via account settings to deactivate or activate regional endpoints, such as Tokyo, to restrict access for compliance reasons.

Explore IAM concepts by learning user types, groups, policies, and roles, and enable MFA as a best practice. Practice hands-on scenarios to use access analyzer, credentials report, and password policies.

Create users and groups, attach policies to groups, assign roles to services; enable multi-factor authentication, rotate passwords, prevent reuse, apply least privileges, restrict resets to administrators, and generate credentials report.

Explore an AWS IAM use case: create a user with console and programmatic access to S3 and RDS in us-east-1, MFA, password policy, and a developers group for EC2 access.

Learn to install and verify the aws cli on windows, including downloading the installer, running the setup, accepting the license, and confirming installation via the command prompt.

Open the command prompt, verify the AWS CLI installation on Windows, and ensure the latest version is installed by checking the version output.

Learn to install the AWS CLI on macOS using Homebrew, understand Homebrew as a package manager, and verify the installation and basic brew usage.

Learn how to install the aws cli on macOS using curl, compare brew and manual installation, verify the version, and follow official documentation for cross-platform steps.

Configure the AWS CLI with a new IAM user for programmatic access, set us-east-1 as the default region, and verify by listing buckets while keeping credentials secret.

Master VPC concepts by exploring IP addressing and public and private subnets. Connect on premise networks via site-to-site VPN or transit gateway while enabling flow logs to S3 and CloudWatch.

Explore how a virtual private cloud offers a highly available, isolated network with subnets, route tables, internet gateway, DNS resolution, elastic IPs, NAT gateway, security groups, NACLs, and VPC endpoints.

Identify how private and public ip addresses uniquely identify resources within a network and how packets traverse the osi layers from physical to application.

Subnetting divides a large network into smaller subnets, such as 10.0.0.0/16 into /24s, to allocate hosts efficiently. AWS reserves five addresses per subnet, reducing usable hosts to 251.

Learn to partition networks into private and public subnets by route to internet, assign public and private IPs, and implement internet gateway or NAT gateway in a VPC.

Explore the default VPC in each region, including subnets, route tables, and the Internet gateway. Learn how availability zones, ACLs, and security groups enable quick, developer-friendly resource launches.

Extend your VPC to enable local zones for ultra-low-latency compute and storage near industry centers, and enable wavelength zones in 5G networks for edge computing in Northern Virginia.

Learn how to enable AWS local zones and wavelength zones, map subnets to them, and deploy workloads at the edge for lower latency using the AWS console.

Learn to design a highly available VPC with a public and private subnet using the VPC wizard, including route tables, NAT gateway, and internet gateway.

Walk through creating a VPC with public and private subnets using the VPC wizard, attach an Elastic IP to the NAT gateway, and enable DNS hostnames and DNS resolution.

Explore the resources created by the VPC wizard for a public and private subnet architecture, including DNS hostname, DNS resolution, auto-assign public IPv4, route tables, internet gateway, and NAT gateway.

Learn to delete a VPC by removing dependencies like the NAT gateway, releasing the elastic IP, and then deleting the VPC with its subnets, gateways, and network access control list.

Adopt an organizational VPC subnet tier strategy with public, private web, private services, and private data subnets across multiple availability zones for high availability and granular access control.

Learn to build an AWS VPC the hard way, without the wizard, creating a custom VPC in the Singapore region with public and private subnets, DHCP and DNS.

Create a public and private subnet in the VPC, assign CIDR blocks in ap-southeast-1, and enable auto-assign public IPv4 for the public subnet.

Create an internet gateway and attach it to your VPC to enable internet access for the public subnet, then prepare for route tables in the next video.

Create and associate route tables in your vpc, linking the private subnet to the main route table and the public subnet to a custom route table for internet gateway access.

Configure a NAT gateway in a public subnet to enable internet access for private subnet, allocate elastic IP, and understand the difference between public and private NAT gateways in VPC.

Learn to configure a NAT gateway in a public subnet with an elastic IP, route private subnets to the internet (0.0.0.0/0), and monitor with Cloud Watch.

Configure separate network access control lists for public and private subnets; NACLs are stateless filters with inbound and outbound rules prioritized by number, typically denying unused traffic.

Security groups in a VPC act as stateful firewalls, default deny, permitting inbound traffic and auto-allowing outbound. They attach to resource network interfaces, e.g., http 80 open, ssh 22 restricted.

Explore AWS VPC DHCP option sets that allocate private IPs and DNS names by default, and learn how to bring your own DNS servers and domain names.

Manage large IP address sets as a single entity with VPC prefix lists and reference them in security groups to streamline SSH access and VPN ranges.

Configure VPC flow logs at the VPC, subnet, or network interface level to monitor all traffic, and send logs to a CloudWatch log group with an IAM role.

Configure VPC flow logs to deliver network traffic data to an S3 bucket by creating the bucket, applying a resource-based policy, and storing logs under logs/account-id with one-minute aggregation.

Understand how VPC peering enables private connectivity between two VPCs over the AWS backbone. Explore how VPC endpoints allow private access from a private subnet to S3, without public internet.

Explore VPC peering theory, emphasizing non overlapping addresses, non transitive peering, and private traffic between peered VPCs. Learn the three setup steps and compare Transit Gateway for larger scale.

Explore two types of VPC endpoints—gateway and interface—and learn how they route private traffic to services like S3 and DynamoDB over Amazon's backbone, with a VPC endpoint policy and routes.

Create a VPC endpoint for your VPC and attach it to the private subnet’s route table. Learn gateway vs. interface endpoints and keep traffic private to S3 without internet gateways.

Learn to set up VPC peering between two AWS VPCs from a network perspective, using the VPC wizard to create public and public-private subnets, NAT gateway with an elastic IP.

Learn to create and accept a VPC peering connection between two VPCs, update routes for bidirectional traffic, and remove the peering and NAT gateway when finished.

Adopt tiered VPC subnet strategy with public and private subnets, route tables, and network access control lists to keep traffic isolated; use VPC peering or transit gateway for private connectivity.

Explore the EC2 global view in the VPC console, a centralized dashboard showing all regions’ instances, subnets, security groups, and volumes, with global search and CSV export.

Discover how AWS VPC network access analyzer reveals egress and ingress paths from network interfaces to the internet gateway using predefined and custom scopes.

Explore the transit gateway as a hub to interconnect VPCs and on-prem networks, using attachments and route tables to enable private, encrypted traffic and route propagation instead of VPC peering.

Demonstrate transit gateway route evaluation order, prioritizing static routes, then managed prefix lists and propagated routes, across VPCs, VPN attachments, Direct Connect, and Transit Gateway Connect.

Explore various transit gateway architectures, including centralized, isolated, and shared services, plus transit gateway peering and internet access scenarios for VPCs and on-premises.

Create the transit gateway in a shared services account, share it across accounts with RAM, attach VPCs, and centrally manage the transit gateway route table.

Learn to connect two VPCs with a transit gateway, configure attachments and route tables, and verify connectivity using the network reachability analyzer.

Test VPC reachability with the network reachability analyzer, which supports VPC peering and shows paths from internet gateway to EC2 instances, highlighting the limitation of no transit gateway intermediate.

Explore the basics of site-to-site VPNs connecting a VPC in AWS to on-premises networks, including BGP concepts (internal and external), autonomous systems, route tables, and resiliency and monitoring.

Explain how a site-to-site vpn encrypts traffic between a vpc and on-premises networks via a virtual private gateway or transit gateway. Discuss tunnels, redundancy, and authentication options like pre-shared keys.

Explore site-to-site vpn routing options, comparing static and dynamic (bgp) routing, highlighting static routes' priority over propagated routes and how failover redirects traffic to the backup tunnel.

Explore site-to-site VPN architectures in AWS, from a VPC with a virtual private gateway and a customer gateway, to VPN connections, transit gateway options, and high availability with Direct Connect.

Explore redundancy and resiliency for site-to-site VPN with two customer gateway devices and two tunnels to the same virtual private gateway, plus monitoring via CloudWatch and health dashboard alerts.

Explore a site-to-site VPN architecture between the AWS VPC 10.1.0.0/16 and the on-prem network 10.2.0.0/16, including a virtual private gateway, a Libreswan customer gateway, static routes, and dual-tunnel resiliency.

Walks through creating a site-to-site VPN in AWS, including customer gateway and virtual private gateway setup, routing options, encryption settings, and downloading the device configuration.

Explore how to configure a site-to-site VPN on AWS, generate and share configuration files for Libreswan or Openswan, and set up IPsec and pre-shared keys for on premise network.

Explore AWS Direct Connect, a fiber link from on-premises to AWS that enables private and public virtual interfaces to access VPC resources and public services, bypassing internet providers.

Protect your VPC edge with the AWS network firewall, a stateful perimeter that acts as an IPS/IDS using Suricata rules, inspecting traffic and exporting logs to S3, Kinesis, or CloudWatch.

Explore how AWS network firewall architecture inspects all internet traffic entering and leaving a VPC, using public, private, and firewall subnets, interface endpoints, and gateway load balancers.

Explore how an AWS network firewall sits at the VPC edge, inspects traffic through a firewall subnet, and uses stateful rules to allow ssh while blocking google and facebook.

Compare Nat instances with Nat gateway, highlighting security groups, IPv6 support, scalability, automatic failover, and multi-az deployment. Note exam focus on Nat instance characteristics and monitoring via Vpc flow logs.

Explore secure, automatable aws vpc templates from securecloud, customizing public/private subnets, nat gateways, endpoints, and security groups, then deploy via cloudformation or terraform for compliant, scalable networks.

Analyze a public–private VPC setup with a web server and private database, enable VPC flow logs, and route traffic via a centralized transit gateway and firewall.

Explore cloud service models: infrastructure as a service, platform as a service, and software as a service, and how EC2 provides virtual machines while the provider manages underlying hardware.

Discover how EC2 builds a virtual machine by selecting an Amazon machine image, choosing an instance type, configuring VPC and subnet, storage and security groups, and using key pairs.

Explore EC2 pricing models, including on-demand, reserved, dedicated instances, dedicated hosts, spot instances, and spot fleets, with notes on tenancy, control, and use-case trade-offs.

Discover the three reserved EC2 types—standard, convertible, and capacity reservations (scheduled)—with 1- or 3-year terms, upfront payment options, and the reserve instance marketplace.

Explore the EC2 spot pricing model, including spot blueprints, pricing history, and spot placement score, and learn how spot fleets with on-demand or reserved instances reduce costs.

Explore the new EC2 dashboard, launch an instance with the orange button, and review service health, migration options, pricing, and left navigation menus for EC2 configurations.

Learn the AWS reserved instances pricing model, selecting Linux or Windows, standard or convertible offerings, a 1-year t3.micro RI paid upfront, and the reserved instance marketplace.

Secure immediate EC2 capacity with capacity reservations in a chosen availability zone, without long-term commitments, billed at on-demand prices, and end the reservation on your chosen date.

Explore spot blueprints to auto create infrastructure using CloudFormation or Terraform templates for EC2 spot instances, auto scaling groups, Kubernetes worker nodes, batch jobs, and Elastic MapReduce.

Explore the EC2 spot pricing model and its history across availability zones and instance types like C3 large, highlighting potential savings versus on-demand in Northern Virginia.

Learn to use the spot placement score in AWS EC2 to gauge spot request feasibility, set target capacity, and compare regions and availability zones for better spot pricing.

Explore how spot requests and spot fleets optimize EC2 capacity, including target capacity, interruption behavior, and capacity rebalance, with cost discounts and use cases for peak workloads and Kubernetes workers.

Learn AWS EC2 and VPC limits, including total vCPUs across instance families, how to request limit increases via support tickets, and the regional VPC cap of five.

Explore the dedicated hosts pricing model in EC2, enabling granular control for regulatory needs by hosting multiple instances on one dedicated host, with auto placement and varying instance types.

Learn to purchase scheduled reserved instances in AWS EC2, set start time, duration (minimum 4 hours), and recurring daily, weekly, or monthly, choosing instance type, platform, and availability zones.

Explore EC2 instance types on the new dashboard, filter by virtual CPUs and price, view instance metadata like hypervisor and EBS, and launch prefilled Linux or Windows instances with templates.

Launch on-demand EC2 instances across amazon linux ami, ubuntu, centos, and windows, then configure region, instance type, key pair, and security group for secure login.

Explore EC2 instance metadata, including networking details, security groups, public and private IPs, elastic IPs, storage, and system and instance status checks, and access metadata via 169.254.169.254.

Learn to log in to an EC2 instance via ssh, access metadata at 169.254.169.254, and understand dynamic versus elastic IPs with scripting to capture metadata for S3 storage.

Launch an ubuntu-based EC2 instance, attach a security group in the default VPC, log in via ssh with the key pair, and run apt-get updates.

Launch and connect to a Windows EC2 instance using RDP. Configure a security group to allow RDP from your IP and decrypt the administrator password to log in.

connect to a windows ec2 instance using the microsoft remote desktop by decrypting the administrator password with your private key via the instance ip address.

Explore the EC2 instance lifecycle from pending to running and manage states by stopping, starting, rebooting, hibernating (where supported), and terminating. View and control these states in the instances dashboard.

Explore four EC2 instance settings—termination protection, stop protection, shutdown behavior, and auto recovery—and preview attaching an IAM role for secure access without keys.

Learn how to securely grant EC2 instances access to S3 using IAM roles, attach a role with a read-only policy to EC2, and avoid hard-coded credentials.

Learn how to use a bash user-data script on EC2 Amazon Linux AMI to install httpd, start the service, and serve a hello world page, with security group considerations.

Explore the AWS AMI catalog to launch instances from quick start, my AMI, marketplace, and community images, with filters for cost and architecture.

Learn to create an EC2 army (AMI) from a running instance, then launch many instances from that image for consistent app deployment, using no-reboot snapshots and tagging.

Explore EC2 AMI options, including copying AMIs across regions with encryption, managing permissions and deprecation, and choosing EBS vs instance store volumes, plus an introduction to EC2 image builder.

Learn how to launch an EC2 instance from a custom AMI, configure security groups, and verify a hello world web page starts automatically with the lightweight HTTP server.

Explore EBS volume types for EC2, including general purpose and provisioned IOPS SSDs. Identify use cases from transactional workloads to archiving, and grasp IOPS, throughput, and multi attach.

Learn to select the right EBS volume type for your workload to balance cost and performance, covering gp3, io2, multi-attach, IOPS, throughput, and encryption.

Create and manage EBS snapshots to capture point-in-time data and enable volume-to-snapshot and snapshot-to-volume workflows. Explore snapshot sharing, encryption during copy, fast snapshot restore, archiving, recycle bin retention, and tagging.

Automate EBS snapshot management with Data Lifecycle Manager by creating EBS snapshot policy targeting Ubuntu tagged instances, scheduling 2-hour intervals and retaining six snapshots with cross-region copy and cross-account sharing.

Learn to create an ebs-backed ami lifecycle policy using data lifecycle manager, targeting tags, running every 2 hours with retention and optional cross-region copy and encryption.

Learn EC2 placement groups—cluster, spread, and partition—to improve performance and fault tolerance by distributing instances across racks and zones, and discover how to create and assign groups in the EC2 dashboard.

Learn how to enable VPC flow logs at the network interface level and route traffic data to destinations such as S3, CloudWatch Logs, or Kinesis, with windows and IAM permissions.

Compare application and network load balancers (layer seven vs layer four), learn health checks and SSL offloading, and understand path-based routing to EC2 instances, microservices, and Lambda behind target groups.

Prepare two EC2 instances in a public subnet behind an application load balancer, register them in a target group, and configure port 80 health checks.

Create an application load balancer, attach two EC2 instances to a target group via a listener, and review health checks to balance HTTP traffic using the load balancer's DNS name.

Learn how an application load balancer routes requests to healthy EC2 instances in a target group using round robin and health checks, with CloudWatch metrics and web application firewall protection.

Delete the load balancer infrastructure by removing the target group and terminating the EC2 instances. Learn how auto scaling groups maintain the desired state and adopt launch templates.

Learn how auto scaling maintains desired capacity by scaling out based on metrics, while using launch templates to define flexible instance configurations with versioning and mixed pricing models.

Create an auto scaling group from a launch template, attach a new application load balancer with a target group in the default VPC, and configure a CPU-based dynamic scaling policy.

Explore how an auto scaling group uses launch templates, load balancers, and utilization thresholds to scale instances up or down, and how warm pools and instance refresh enable rolling updates.

Explore EC2 lifecycle hooks in an auto scaling group and warm pools, detailing launch and terminate waits, default outcomes like abandon or continue, and state transitions to in-service.

Explore auto scaling lifecycle hooks for pending wait and terminating wait statuses, triggering event bridge rules that invoke Lambda notifications, system manager automation, and backups to S3 with Athena.

Learn how EC2 auto scaling uses dynamic, step, predictive, and scheduled policies with metrics like CPU utilization to pre-launch instances and forecast demand, including warming up and notifications.

Explore Amazon Elastic File System, a serverless shared storage for Linux and Windows with standard and infrequent access, multi-AZ mount targets, performance and throughput modes, and access points.

Launch two EC2 instances in the Mumbai region, configure security groups for EFS access, and create an encrypted EFS with backups, lifecycle management, and access points.

Connects two EC2 instances, installs amazon fs utils, and mounts an elastic file system with the fs mount helper using tls in transit, enabling shared access to index.html.

Explore Amazon Lightsail, a serverless compute service that launches easy instances with OS or app images, supports containers, databases, storage, load balancing, CDN, DNS records, and snapshots, with SSH access.

Learn to manage a Lightsail instance, connect via browser or SSH, configure static IPs and security rules, create snapshots, and deploy containers, databases, and domains.

Elastic Beanstalk is an orchestration service that provisions environments, handles auto scaling and load balancing, and monitors your application after upload, enabling blue-green deployments with cloud watch and x ray.

Create an Elastic Beanstalk application with a sample Java app and OpenJDK version. Explore presets, deployment options, load balancer, auto scaling, security groups, VPC, and databases.

Understand how Elastic Beanstalk uses cloud formation to provision resources behind the scenes, including Elastic IP, launch templates, security groups, and auto scaling, delivering a healthy environment and application URL.

Explore Elastic Beanstalk deployment strategies, including all at once, immutable, rolling, rolling with additional batch, and blue-green, by creating and switching traffic between environments.

Explore blue-green deployment with Elastic Beanstalk, managing two environments behind an application load balancer, swapping versions, and automating deployments via the Elastic Beanstalk cli.

Explore virtualization versus containerization, learn how containers offer lightweight OS-level virtualization, and master Docker concepts—images, writable layers, registries, and basic commands for running and managing containers.

Download docker desktop for Windows, Mac, or Linux and explore the docker hub login, images, and containers. Understand the client–server model and the personal pricing limits.

Explore Colima as a lightweight, Docker-compatible runtime for macOS and Linux. Install Colima with brew to run Docker commands against containerd, Kubernetes support, and configurable RAM, disk, and port forwarding.

Discover how Docker Hub acts as a registry of images, repositories, and tags, including public and private images, and learn core commands like docker pull, run, stop, and rmi.

Explore Amazon elastic container registry, a managed container registry for storing, managing, and deploying Docker images, and learn to containerize apps, push images, and apply versioning, tag immutability, and encryption.

Explore elastic container registry repository settings, including private versus public repositories, tag immutability, image scanning, and lifecycle policies, then learn to view push commands and push docker images.

Enable lifecycle policies in elastic container registry to auto-delete untagged images after 30 days and manage repository permissions to share images with other accounts.

Explore advanced private registry configurations in AWS's ACR, including pull-through cache, cross-region and cross-account replication, and basic to enhanced image scanning for secure, private image management.

Bootstraps a Springboard application with Spring.io, containerizes it via a Dockerfile, authenticates to Elastic Container Registry, and pushes the image to a private repository using Java 17 and Maven.

Build the springboard jar with mvn install, copy it into a docker image, and run it with java -jar; then tag and build a demo:latest image from gcr base images.

Build a Docker image from a springboard app, create a private ACR repository, configure IAM credentials, log in to ACR, tag the image as demo latest, and push to ACR.

Explore how AWS App Runner deploys containerized web apps and APIs at scale, building from source or Docker images, with automatic builds and production HTTPS endpoints.

Explore configuring AWS App Runner in a lab, choosing container registry or GitHub source, enabling automatic deployments, health checks, observability, and infrastructure managed by App Runner for scalable containers.

Learn how AWS Lambda delivers serverless compute via Firecracker micro VMs, achieving 125 ms cold starts and automatic, event-driven scaling with triggers from S3, API Gateway, and other services.

Route 53, AWS's DNS service, maps domain names to IPs and links internet users to AWS resources via hosted zones, alias records, and diverse routing policies.

Explore Amazon CloudFront, a global content delivery network with 200 points of presence, caching content near users and integrating with S3, Lambda@Edge, Shield, and WAF for secure, low-latency delivery.

Explore how CloudFront uses origin access identity and signed URLs or cookies to secure content and control access. Learn caching implications of query strings and parameter consistency.

Explore S3 basics as an object-based storage with 11 nines durability, regional buckets, and storage classes, plus lifecycle policies, cross-region replication, and granular access via ACL, bucket policies, and IAM.

Explore S3 properties, including versioning, server access logging, static website hosting, object level logging with CloudTrail, encryption, and object lock. Learn how to enable these features and use cases.

Discover how S3 object lock enforces retention and legal holds, use transfer acceleration for faster uploads, and set up object events to notifications or Lambda, with cost tagging.

Explore S3 lifecycle transitions moving objects across storage classes like standard, one zone, intelligent-tiering, glacier, and glacier deep archive, with forward-only rules and expiration caveats.

Explore Amazon CloudWatch, the AWS monitoring service, for metrics, logs, events, dashboards, alarms, Logs Insights, and Synthetics across regions.

Learn how AWS CloudTrail records API activity across regions and organizations, creating trails for management, data, and insights events with a 90-day history.

CloudTrail tracks API and management activity, logging unusual events, and stores logs in CloudWatch log groups and S3 buckets with optional KMS encryption.

Enable and configure AWS CloudTrail to track user activity and API usage, create trails with advanced options, set up S3 storage, log validation, and tags, with optional organization-wide scope.

Explore AWS CloudTrail by configuring management and data events, focus on S3 activity logging, and create a trail that delivers logs to an S3 bucket.

Learn how to enable AWS CloudTrail to deliver logs to CloudWatch Logs, create an IAM role for CloudTrail access, and verify cross-region log delivery.

Explore AWS CloudTrail event history with 90 days of management events, using filters by user or resource, and download data as CSV or JSON for Athena on S3.

Explore how CloudTrail logs flow into CloudWatch log groups and streams, showing user identity, event source, and targets, with options to stream to Elasticsearch, Kinesis Data Firehose, or S3.

Learn how CloudTrail stores logs in an S3 bucket with account, region, year, month, and date prefixes and digest files. Preview the log validation command to verify log integrity.

Learn to validate CloudTrail logs with the AWS CLI, detecting modifications or deletions to log or digest files, using mandatory trail and start time arguments.

Explore how to validate CloudTrail logs with the validate-logs command, verify integrity via digest files, and enable CloudTrail and insights events across regions for security monitoring.

Learn how AWS Organizations enables centralized governance and consolidated billing for a multi-account strategy, with organizational units, service control policies, and cross-account resource sharing for compliance and security.

Initialize an AWS Organizations multi-account setup, invite accounts, and organize them into organizational units. Apply service control and tag policies, use trusted access, and manage resources across accounts.

Discover how AWS Config detects misconfigurations across resources, applies managed and custom rules with AWS Lambda, and enables remediation, configuration timelines, and cross-account aggregation for governance.

Explore AWS Config configurations, including IAM service roles with read access, SNS notifications, CloudWatch remediation, conformance packs, and lambda-based rules for expiry, rotation of access keys, and log encryption checks.

Enable the config service to track resource inventory and changes, turn on recording, and retain data for seven years in an s3 bucket.

Explore resource inventory in AWS Config, filter by category and compliance status, and view resource timelines and configuration changes.

Apply AWS config rules to monitor security group compliance using managed and custom lambda rules, such as the restricted 0.0.0.0/0 rule, triggered on configuration changes.

Explore how AWS Config rules detect non-compliant security groups for restricted SSH, view resource timelines, and inspect configuration changes for governance and compliance.

Explore conformance packs in AWS config, a collection of config rules and remediation actions deployed as a single unit, with sample templates for IAM, S3, and more.

Aggregate config data across multiple accounts and regions with aggregators in AWS control tower. Authorize accounts to send data to a central audit account and deploy conformance packs and rules.

Explore advanced queries in AWS config to inventory resources, count EC2 instances with sql-like syntax, filter to a single region or aggregate across accounts and regions, with export options.

Stop recording in AWS Config by deleting the rule and disabling recording in settings, then save to avoid costs while understanding that AWS Config tracks configuration changes.

Explore AWS support plans from free tier to enterprise, highlighting trusted advisor checks, support API access, dedicated technical account management, and SLAs for critical incidents.

Compare AWS support plans from developer to enterprise, highlighting 24/7 cloud support engineers, SLA times, consultative architectural guidance, self-paced labs, and trusted advisor checks.

Explore AWS trusted advisor for security and governance insights, covering identity and access management and five categories: cost optimization, fault tolerance, performance, security, and service limits.

Explore the trusted advisor dashboard to review security and performance checks, including root MFA, unrestricted ports, security groups, and exportable checks via an Excel sheet for team sharing.

Explore how Amazon Inspector uses the systems manager agent for host-based and network-based assessments, adds container image scanning, and uses an IAM role to discover EC2 and ECR.

Enable enhanced scanning with Amazon Inspector for Elastic Container Registry to assess operating system and package vulnerabilities in Docker images across repositories, with adjustable frequency and on push options.

Launch an EC2 instance with the Amazon Linux 2 AMI and the Systems Manager agent to enable Amazon Inspector host-based scanning, and review security groups for open ports.

Assign your EC2 instance to Systems Manager host management using quick setup, enabling the pre-installed agent, daily scans, inventory collection, and optional CloudWatch agent.

Associate the IAM role with your EC2 instance to enable Systems Manager management, agent installation, and Amazon Inspector package vulnerability scanning and updates.

Discover how Inspector uses the SSM Agent on Amazon Linux, Amazon Linux 2, Mac OS, Ubuntu 16.04–20.04, and Windows Server AMIs—and how an EC2 instance joins Systems Manager for assessments.

Explore the Amazon Inspector console to manage EC2 and ECR scans, verify instance discovery and scanning status, and view repositories and Docker images for security assessments.

Explore how Amazon Inspector scans EC2 instances and ECR images using the Systems Manager agent, review roles and permissions, and enable Inspector across organization accounts with pricing and a free-trial.

Enable enhanced scanning with Amazon Inspector for Elastic Container Registry repositories, set registry-level continuous scanning on push, and identify OS and programming language vulnerabilities.

Explore Amazon Inspector findings, filter results by vulnerability, instance, container image, or repository, and manage suppression rules, exports to json, csv, or s3 with kms encryption.

Explore Amazon Macie's ability to discover and protect sensitive data in S3 at scale, with continuous or scheduled evaluations, encryption status, custom data type definitions, and multi-account integration.

Learn how Amazon Macie analyzes S3 bucket objects to detect sensitive data, triggering workflows via EventBridge or Lambda, and publishing findings to Security Hub with long-term discovery results.

See how Amazon Macie scans S3 buckets for PII and sensitive data in a Northern Virginia region, demonstrated by uploading a CSV file with access keys and reviewing findings.

Explore the Amazon Macie dashboard, enable Macie, and review findings across 13 S3 buckets in the Northern Virginia region, including a sensitive data finding and encryption and public access insights.

Explore Amazon Macie settings walkthrough, detailing service permissions, delegated administrator, findings publication to Security Hub, 15-minute updates, suspend vs disable, and custom data identifiers using regex.

Create an Amazon Macie job to scan selected S3 buckets for sensitive and personally identifiable information, review classifications, adjust data identifier options, and review findings.

Explore how Amazon Macie finds sensitive data and credentials in S3 buckets, filter results by bucket and type, trigger Security Hub alerts, and support remediation for PCI DSS and GDPR.

Explore AWS Shield and WAF to protect web apps from DDoS and application attacks, compare Shield Standard and Shield Advanced, and configure WAF rules with IP whitelists and blacklists.

Explore AWS KMS, create and manage symmetric and asymmetric keys, set key policies and grants, and integrate with S3 while understanding region, rotation, and compliance basics.

Learn how AWS CloudFormation describes and provisions resources with infrastructure as code, using YAML or JSON templates, stacks, and change sets across regions and accounts.

Learn to install and start Docker on a CentOS 7 instance, configure the Docker repository, install Docker CE, Docker CLI, and container.io, enable startup, and verify with Docker commands.

Discover containerization and deploy microservices to the cloud using Docker, ECS, ECR, and ALB, with path-based routing, independent services, and scalable orchestration.

Discover how Amazon RDS simplifies setting up, operating, and scaling relational databases in the cloud, with MySQL, PostgreSQL, MariaDB, and Aurora engines, automated backups, encryption, multi-AZ availability, and read replicas.

Explore DynamoDB, a serverless, non-relational key-value and document database that scales horizontally, supports partition and sort keys, and integrates global tables and dax caching for microsecond latency.

Explore Amazon Aurora, a MySQL and PostgreSQL compatible cloud relational database with high performance, auto scaling, and serverless options, featuring global databases, read replicas, point-in-time recovery, and performance insights.

Explore Amazon Redshift, a fully managed, petabyte-scale data warehouse with columnar storage and elastic scaling. Query data in S3 with Redshift Spectrum and connect with BI tools.

Explore Amazon elastic cache as a fully managed in-memory data store, compare Memcached and Redis, and learn use cases like real-time, low-latency caching, and session stores.