AWS for Developers
A complete AWS path for developers: global infrastructure, IAM and least privilege, VPC networking, EC2 and Auto Scaling, load balancers and Route 53, S3, CloudFront, ECS on Fargate, RDS, Aurora and DynamoDB, Lambda and API Gateway, SQS/SNS/EventBridge, Cognito, Secrets Manager and KMS, CloudWatch observability, CI/CD with IaC, data pipelines and interview questions, then deeper topics: IAM policy evaluation and cross-account access, VPC endpoints and Transit Gateway, DynamoDB modeling and RDS scaling, event-driven patterns and Step Functions, multi-account governance and security operations, disaster recovery, ECS and EKS at scale, and cost optimization with the Well-Architected Framework.
26 lessons · about 3 hours
Start the first lesson →
AWS Foundations
Core services every developer uses to build, deploy and secure applications.
- 01AWS: Start Here A plain-English map of AWS: what cloud means, where services run, and the first services a developer meets.
- 02IAM: Who Can Do What Learn AWS permissions in plain language: people sign in, roles provide temporary access, and policies allow only needed actions.
- 03VPC Networking Without the Confusion Understand a VPC as your private AWS network: subnets, routes, security groups, internet access, and private apps.
- 04EC2, Storage and Auto Scaling Run virtual servers on AWS, attach durable disks, and add or remove server copies when demand changes.
- 05Domains, Load Balancers and HTTPS Follow a browser request from a domain name to healthy app copies, with AWS-managed HTTPS certificates.
- 06S3: Store Files Safely Use S3 for uploads, images, backups, and static files without making buckets public by accident.
- 07CloudFront: Faster Websites and Safer File Delivery Put CloudFront in front of a static site or S3 files so visitors use nearby cached copies while your origin stays private.
- 08Run Containers on AWS with ECR and ECS Build a container, store it in ECR, and run it on ECS Fargate without managing servers.
- 09AWS Databases: Choose the Right One Choose SQL, key-value, or cache storage by the problem you need to solve, then protect it with backups and private networking.
- 10Serverless: Lambda and API Gateway Run small event-driven code without managing servers, expose it through an HTTP API, and handle retries safely.
- 11AWS Messaging: Queues, Topics and Events Use SQS to hold work, SNS to fan out notifications, and EventBridge to route events without tightly coupling services.
- 12AWS Security Building Blocks Add user sign-in with Cognito, keep credentials out of code, and understand the simple role of KMS encryption keys.
- 13CloudWatch: Know What Your App Is Doing Use logs, metrics, alarms, and audit records to discover a problem before users have to report it.
- 14Safe AWS Deployments with IaC and CI/CD Keep infrastructure in version control, review changes before applying them, and deploy applications through repeatable automated steps.
- 15AWS Data Pipelines in Plain Language Move raw data into S3, clean it, catalogue it, and query it without learning every analytics service at once.
Advanced AWS
Policy evaluation, hybrid networking, data modeling, governance, resilience, containers at scale and cost.
- 17IAM Deep Dive: Policy Evaluation, STS and Cross-Account Access Understand how AWS decides allow or deny, and use roles, conditions, boundaries and tags to grant precise access.
- 18VPC Endpoints, Transit Gateway and Hybrid Networking Keep traffic private, cut NAT costs, connect many VPCs, link to on-premises networks, and troubleshoot with flow logs.
- 19DynamoDB Modeling, RDS Scaling and Data Resilience Design DynamoDB tables around access patterns, then scale and protect relational databases with replicas, proxies and Multi-AZ.
- 20Event-Driven Patterns, Step Functions and Reliable Lambdas Build resilient serverless workflows with retries, dead-letter queues, idempotency, fan-out and orchestration.
- 21Multi-Account Strategy, Governance and Security Operations Organize accounts with Organizations and Control Tower, enforce guardrails with SCPs, and detect threats with CloudTrail, Config and GuardDuty.
- 22Resilience, Disaster Recovery and Multi-Region Design Define RTO and RPO, choose a DR strategy, and design for failure across AZs and regions.
- 23Containers at Scale: ECS Deep Dive and EKS Deploy ECS safely, scale it properly, compare it with EKS, and apply the production patterns for each.
- 24Cost Optimization and the Well-Architected Framework Measure spend, pick the right pricing model, remove waste, and review architectures against the six Well-Architected pillars.
Interview Prep
Short, correct answers to common AWS interview questions.
Practical Project
Hands-on labs: S3 uploads with CloudFront delivery, and a containerized app end to end on EKS with ECR, Pod Identity, RDS, ingress and CI/CD.
- 25Practical Project: Deploy a Real CRM App on EKS Take a containerized CRM (DemoCRM) from source code to a secure AWS deployment: ECR images, an EKS cluster, Pod Identity for Secrets Manager, private RDS, ingress, CI/CD, troubleshooting and a production checklist.
- 26Practical Lab: S3 File Upload and CloudFront Delivery with NestJS Build a private S3 bucket, put CloudFront in front of it with Origin Access Control, create a least-privilege IAM identity, upload files from a NestJS API, serve them through a CDN URL, add presigned browser uploads and private signed downloads, then test, troubleshoot and clean up.