Search

Lessons (40)

• IAM Deep Dive: Policy Evaluation, STS and Cross-Account Access

  Understand how AWS decides allow or deny, and use roles, conditions, boundaries and tags to grant precise access …

• AWS Security Building Blocks

  … An access token is used for authorized API access. A refresh token can obtain new tokens according to …

• IAM: Who Can Do What

  … IAM restricts AWS access; application authorization restricts business access. Deliberate denied-path exercise Using a dedicated learning role …

• Design System Operations

  … clear APIs, accessible behavior, tokens, examples, versioning and a path for migration. mermaid flowchart LR T[Tokens] -- P …

• Practical Lab: S3 File Upload and CloudFront Delivery with NestJS

  Build a private S3 bucket, put CloudFront in front of it with Origin Access Control, create a least …

• Multi-Account Strategy, Governance and Security Operations

  … GuardDuty, Security Hub and Access Analyzer administration. - Network : Transit Gateway, shared egress and inspection. - Workload accounts : per team …

• Practical Project: Deploy a Real CRM App on EKS

  … Give people access to the cluster Generating a kubeconfig does not authorize an IAM identity inside Kubernetes. Access …

• CloudFront: Faster Websites and Safer File Delivery

  … Use Origin Access Control so CloudFront can read the bucket but the public internet cannot. 4. Add an …

• Atomic Design & Component Libraries

  … the same button behavior, spacing, accessibility, and visual language appear wherever users meet a button. 💡 A design system …

• Providers and Your First AWS Resources

  … Never paste access keys into provider blocks. bash export AWS PROFILE=learning aws sso login --profile learning aws …

• State, Remote Backends, and Locking

  … Team projects need shared storage, controlled access, and a supported locking mechanism. mermaid flowchart LR A[Developer or …

• AWS Interview Questions: Clear Answers

  … I treat AccessDenied as a clue to add one narrow permission, not a reason to add admin access …

• Embeddings, Semantic Search, and RAG

  … 4. Retrieve: search with the user query, apply access controls, and select relevant passages. 5. Generate: tell the …

• API Contracts, Gateways and Security

  … A valid token does not grant access to every ID. 3. For mutations, define idempotency scope and reject …

• AWS Databases: Choose the Right One

  … You design from the access pattern first: “get order by order ID” or “list a customer’s orders …

• Secrets, Ephemeral Values, and Least Privilege

  … A runner with access to production state may learn secrets even if its cloud resource permissions are limited …

• RBAC and Cluster Security

  … rbac.authorization.k8s.io Check access without guessing: bash kubectl auth can-i delete pods -n prod --as …

• AI Evaluation, Safety, and Security

  … Treat it as untrusted data, constrain tool access, and verify actions in code. - Sensitive data: minimize what is …

• VPC Endpoints, Transit Gateway and Hybrid Networking

  … Successful access from a developer laptop does not prove private subnet access. Transit Gateway: routing is not automatic …

• VPC Networking Without the Confusion

  … State why an S3 endpoint can solve private S3 access but cannot provide access to an arbitrary payment …

• Authentication, Authorization & API Security

  … Never put secrets in a JWT. js import jwt from "jsonwebtoken"; const accessToken = jwt.sign({ sub: user.id …

• Database Internals, Replication and Scaling

  … Choose storage behavior by access pattern: B-trees support ordered lookups; LSM designs trade efficient buffered writes against …

• Frontend Security

  … https://app.shop.com<br/ Access-Control-Allow-Credentials: true App- API: GET /orders (with cookie) API-- App …

• DynamoDB Modeling, RDS Scaling and Data Resilience

  Design DynamoDB tables around access patterns, then scale and protect relational databases with replicas, proxies and Multi-AZ …

• Drift, Troubleshooting, and Disaster Recovery

  … Network, registry access, lock file, platform Restore access; use an approved mirror if required Access denied Active identity …

• Developer Learning Plan and Document-Assistant Capstone

  … Enforce access permissions before retrieval and again when loading sources; a prompt is not an access-control mechanism …

• Run Containers on AWS with ECR and ECS

  … Private task subnets need outbound access to ECR and related dependencies, through NAT or appropriate VPC endpoints. An …

• Structural Patterns: How to Connect Objects

  … lazy loading, caching, access control, logging, validation. js const user = { name: "Ana", role: "user", balance: 100 }; // JavaScript has …

• EC2, Storage and Auto Scaling

  … If it fails, inspect instance status checks and /var/log/cloud-init-output.log through an authorized access …

• AWS: Start Here

  … With a managed database, AWS handles more infrastructure work, but you still choose network access, credentials, backup settings …

• Cost Optimization and the Well-Architected Framework

  … List hourly infrastructure, processed data, cross-AZ transfer, and necessary third-party access. Endpoints may remove some NAT …

• Environments, Workspaces, and Multiple Accounts

  … A naming suffix alone does not isolate access. text infra/ modules/private-storage/ environments/ dev/ main.tf backend …

• S3: Store Files Safely

  … Let your app access the bucket using its IAM role. Give only the paths and actions it needs …

• Design a Logging and Monitoring Platform

  … Control high-cardinality fields, retention and access. Query bounded time ranges and separate ingest capacity from interactive search …

• Design a File Storage Service

  … A contractor’s access is revoked midway through a download workflow. What must be true Support resumable uploads …

• Which Pattern Do I Need?

  … Proxy controls access to the same behaviour. Adapter vs Facade Adapter makes one interface fit another. Facade simplifies …

• Containers at Scale: ECS Deep Dive and EKS

  … For user access to the cluster, use EKS access entries and map IAM principals to Kubernetes RBAC. Networking …

• CloudWatch: Know What Your App Is Doing

  … Never log passwords, access tokens, or full customer secrets. Alarms should point to user impact Good first alarms …

• Transactions, Indexes & Concurrency

  … transactions protect invariants while indexes speed access and locks coordinate writers](/img/database-interviews/transactions.svg) Q8: What …

• Linked Lists

  … Seriously. Key takeaways - Linked lists trade O(1) index access for O(1) insert/delete at known positions …