Search

Lessons (28)

• Run Containers on AWS with ECR and ECS

  Build a container, store it in ECR, and run it on ECS Fargate without managing servers. The simple …

• Containers at Scale: ECS Deep Dive and EKS

  Deploy ECS safely, scale it properly, compare it with EKS, and apply the production patterns for each. ECS …

• EC2, Storage and Auto Scaling

  Run virtual servers on AWS, attach durable disks, and add or remove server copies when demand changes. EC2 …

• Practical Project: Deploy a Real CRM App on EKS

  … aws-actions/amazon-ecr-login@v2 - name: Build and push env: IMAGE: ${{ steps.ecr.outputs.registry }}/${{ env.REPOSITORY …

• Kafka vs RabbitMQ & the Kafka Ecosystem

  … RabbitMQ (or SQS, BullMQ) for task queues and Kafka as the event backbone. The Kafka ecosystem mermaid flowchart …

• AWS: Start Here

  … ECS, EC2, or Lambda] A -- D[RDS or DynamoDB] A -- S[S3 files] Need AWS service to learn …

• Cost Optimization and the Well-Architected Framework

  … unused EC2, unattached EBS volumes, old snapshots, idle load balancers, dev environments running overnight. 2. NAT gateway data …

• IAM: Who Can Do What

  … Apps should use a role attached to the service, such as an ECS task role or EC2 instance …

• VPC Endpoints, Transit Gateway and Hybrid Networking

  … ECR image pulls can also require ECR API and registry connectivity; an S3 endpoint alone does not establish …

• AWS Interview Questions: Clear Answers

  … I keep the bucket private and use IAM roles or short-lived presigned URLs. ECS or Lambda? Lambda …

• React vs Vue vs Angular

  … Choose based on team, project size and ecosystem.

• Multi-Account Strategy, Governance and Security Operations

  … sensitive data in S3 Inspector Vulnerability scanning for EC2, ECR images and Lambda IAM Access Analyzer External and …

• Backend Languages: Node.js, Go, Python & Rust

  … written in Go) Verbose error handling, a smaller ecosystem than JS/Python Python async (asyncio) or threads/processes …

• Microkernel (Plugin) Architecture

  … change can break every plug-in in the ecosystem Version it (semver) and check compatibility on load Old …

• Resilience, Disaster Recovery and Multi-Region Design

  … everything as code (CloudFormation, CDK, Terraform) and container images replicated with ECR cross-region replication ; AMIs copied to …

• IAM Deep Dive: Policy Evaluation, STS and Cross-Account Access

  … and the resource: json { "Effect": "Allow", "Action": ["ec2:StartInstances", "ec2:StopInstances"], "Resource": " ", "Condition": { "StringEquals": { "aws:ResourceTag/team": "${aws …

• Safe AWS Deployments with IaC and CI/CD

  … Tag it with the source revision and publish it to ECR. 3. Deploy that image digest to dev …

• CloudWatch: Know What Your App Is Doing

  … In ECS, configure a log driver such as awslogs ; writing stdout alone does not configure CloudWatch delivery. On …

• AWS Security Building Blocks

  … A customer JWT should not become an administrator credential, and an ECS task role should not decide which …

• Terraform: Start Here

  … An application team might use Terraform to provision an ECS cluster and database, then use a separate deployment …

• Design a Social Media Feed

  … A celebrity with 50 million followers changes the economics: writing 50 million inbox rows for one post is …

• Design an E-Commerce Checkout

  … are owned and idempotent](/img/system-design-l6/ecommerce-checkout.svg) Catalog, search and recommendations can be cached …

• Practical Lab: S3 File Upload and CloudFront Delivery with NestJS

  … the API runs Identity to attach --- --- ECS or Fargate Task role EC2 Instance profile (role) EKS Pod Identity …

• Docker & Containers

  … IMG -- docker push REG[("☁️ Registry<br/ Docker Hub, ECR, GHCR")] REG -- docker pull Server[Production server] - Dockerfile: a …

• Authentication, Authorization & API Security

  … boarding pass: "What are you allowed to do?" Economy passengers can't enter the business lounge. ![Authentication proves …

• Atomic Design & Component Libraries

  … and permissions /orders/123 Yes For example, an ecommerce product page might be composed like this: text ProductPage …

• Domains, Load Balancers and HTTPS

  … For EC2 routing, the target type depends on how the app is deployed. Pick it to match the …

• VPC Networking Without the Confusion

  … For an EC2 instance to communicate directly through an internet gateway over IPv4, it needs a public IPv4 …