AWS Fundamentals

What you will be able to do

• You will be able to explain the AWS global infrastructure of regions, availability zones, and edge locations, and choose a region for a given workload.
• You will be able to navigate the AWS Management Console and install, configure, and use the AWS CLI to run the same actions from a terminal.
• You will be able to apply the shared responsibility model to decide what AWS secures and what you are responsible for securing.
• You will be able to create IAM users, groups, and roles with least-privilege policies and enforce multi-factor authentication on the root account.
• You will be able to launch, connect to, and manage EC2 instances, including AMIs, instance types, key pairs, and security groups.
• You will be able to create and secure S3 buckets, choose an appropriate storage class, and enable versioning and public-access blocking.
• You will be able to build a VPC with public and private subnets, route tables, and an internet gateway, and control traffic with security groups and network ACLs.
• You will be able to provision a managed RDS database and connect an EC2 instance to it inside your own VPC.

What is inside

4 modules, 8 lessons. Each module ends in a graded quiz and most carry an assignment.

1. 01

   Cloud Foundations and How You Drive AWS

   This module gives you the mental model and the account you need before launching anything on AWS. You will learn what the cloud model is, map the AWS global infrastructure of Regions, Availability Zones, and edge locations, and use the shared responsibility model to see exactly which security tasks are yours. Then you will set up your account safely and learn the two ways every engineer drives AWS: the Management Console for exploring and the AWS CLI for repeatable, scriptable work.

   2 lessons · 5 quiz questions

2. 02

   Identity and Access with IAM

   Identity and Access Management (IAM) decides who can do what in your AWS account, so it comes before you build anything real. This module covers the root account, IAM users, groups, and roles, the JSON policies that grant permission, and the two habits that keep an account safe: least privilege and multi-factor authentication.

   2 lessons · 5 quiz questions · assignment

3. 03

   Compute and Storage: EC2 and S3

   EC2 and S3 are the two AWS services you will touch on almost every project: virtual servers and durable object storage. In this module you launch, connect to, and secure an EC2 instance, then create an S3 bucket, choose the right storage class, and lock down public access. You do each task twice, first in the AWS Management Console and then with the AWS CLI, so you understand the click-path and can also script it later. By the end you can stand up a secure instance and a private, well-organized bucket with confidence.

   2 lessons · 5 quiz questions

4. 04

   Networking and Databases: VPC and RDS

   Real applications need a network to run in and a database to store their data. In this module you design a Virtual Private Cloud with public and private subnets across two Availability Zones, wire up route tables, an internet gateway, and a NAT gateway, then provision a managed Amazon RDS database inside the private tier. You finish by connecting an EC2 web server to RDS with security groups, building a small but complete slice of production architecture where the shop is reachable and the data is not.

   2 lessons · 5 quiz questions · assignment