Search
Lessons (40)
- S3: Store Files Safely
Use S3 for uploads, images, backups, and static files without making buckets public by accident. What S3 is …
- Practical Lab: S3 File Upload and CloudFront Delivery with NestJS
Build a private S3 bucket, put CloudFront in front of it with Origin Access Control, create a least …
- Providers and Your First AWS Resources
Configure AWS safely and provision a private, versioned S3 bucket with explicit resource settings. Before running this lab …
- IAM: Who Can Do What
… For example, arn:aws:s3:::academy-shop-uploads/receipts/123.pdf identifies one S3 object. Two policies answer …
- Imports, Moved Blocks, and Safe Refactoring
… Generated configuration is a starting point. Rename without replacement If aws s3 bucket.assets becomes aws s3 bucket …
- CloudFront: Faster Websites and Safer File Delivery
Put CloudFront in front of a static site or S3 files so visitors use nearby cached copies while …
- State, Remote Backends, and Locking
Share state through S3, enable native locking, migrate safely, and protect recovery data. Why state exists A resource …
- VPC Endpoints, Transit Gateway and Hybrid Networking
… ECR image pulls can also require ECR API and registry connectivity; an S3 endpoint alone does not establish …
- AWS Data Pipelines in Plain Language
Move raw data into S3, clean it, catalogue it, and query it without learning every analytics service at …
- Serverless Architecture
… S3Event) = { for (const record of event.Records) { const image = await s3.getObject(record.s3.bucket.name, record.s3 …
- Multi-Account Strategy, Governance and Security Operations
… Use an organization trail to a locked S3 bucket with log file validation AWS Config Resource configuration history …
- AWS Interview Questions: Clear Answers
… The task security group allows only the ALB's app-port traffic. Why is listing an S3 bucket …
- IAM Deep Dive: Policy Evaluation, STS and Cross-Account Access
… Temporary credentials with session expiry App- S3: GetObject using temporary keys A role has two policies: - Trust policy …
- Terraform: Start Here
… Term Meaning Example --- --- --- Resource Something Terraform manages An S3 bucket Data source A read of existing information An …
- AWS: Start Here
… ECS, EC2, or Lambda] A -- D[RDS or DynamoDB] A -- S[S3 files] Need AWS service to learn …
- Production Capstone and Interview Practice
… bucket id" { value = aws s3 bucket.assets.id } output "bucket arn" { value = aws s3 bucket.assets.arn } Document …
- Run Containers on AWS with ECR and ECS
… It does not grant the eventual application S3 or database permissions. Build for the architecture configured in the …
- Cost Optimization and the Well-Architected Framework
… add S3 and DynamoDB gateway endpoints; use interface endpoints for heavy services; keep traffic within an AZ. 3 …
- VPC Networking Without the Confusion
… An S3 gateway endpoint can instead provide access to S3 through VPC routing without requiring a NAT path …
- Resilience, Disaster Recovery and Multi-Region Design
… the hard part: Data store Cross-region feature --- --- S3 Cross-Region Replication (needs versioning; replicates new objects) DynamoDB …
- Safe AWS Deployments with IaC and CI/CD
… AWS::S3::Bucket Properties: PublicAccessBlockConfiguration: BlockPublicAcls: true BlockPublicPolicy: true IgnorePublicAcls: true RestrictPublicBuckets: true VersioningConfiguration: Status: Enabled BucketEncryption: ServerSideEncryptionConfiguration …
- EC2, Storage and Auto Scaling
… Keep user uploads in S3 and shared session data in an appropriate external store. Otherwise a user's …
- Scaling, Load Balancing & Rate Limiting
… Keep sessions in Redis or in tokens, files in object storage (S3), and state in the database. Scaling …
- Linked Lists
… next only"] s1[A] -- s2[B] -- s3[C] -- sn[null] end subgraph Doubly["Doubly linked: next and prev …
- Two Pointers & Sliding Window
… lt; 10 → L++"] s2 -- s3["L=3, R=8 → 11 gt; 10 → R--"] s3 -- s4["L=3, R …
- Kafka vs RabbitMQ & the Kafka Ecosystem
… databases (Debezium CDC), S3, MQTT, Salesforce. - Sink connectors push data out : Elasticsearch, S3, Snowflake, BigQuery, MongoDB, Postgres. json …
- Configuration, Secrets and Storage
… web uploads and files, object storage such as S3 is often simpler than a mounted disk. It keeps …
- Choosing an Architecture
… clear boundaries"] S2 -- S3["🔌 Stage 3<br/ hexagonal core<br/ where logic is rich"] S3 -- S4["🏙️ Stage …
- Environments, Workspaces, and Multiple Accounts
… alias = "secondary" region = "us-west-2" } resource "aws s3 bucket" "secondary" { provider = aws.secondary bucket prefix = "academy-secondary …
- Testing, Preconditions, and Policy Checks
… the plan boundary An organization might reject public S3 buckets, unapproved regions, missing owner tags, or production database …
- Storage, Search and Location Queries
… Example --- --- --- Store a 2 GB video Object storage S3-like bucket, uploaded with a presigned URL. Find "spicy …
- Binary Search
… 56)<br/ 56 gt; 23 → go left"] s2 -- s3["lo=5, hi=6 → mid=5 (23)<br/ found …
- Arrays & Strings
… 4, 1]<br/ L=1, R=3 → swap"] -- s3["[5, 4, 3, 2, 1]<br/ L=2, R …
- Choosing a Programming Language
… JavaScript"] S3[source] -- I3[interpreter] -- hot code -- J3[JIT compiler] -- CPU3[CPU] end - Ahead-of-time languages catch …
- Deploying & Operating Microservices
… v1 v1 v1"] -- s2["v2 v1 v1 v1"] -- s3["v2 v2 v1 v1"] -- s4["v2 v2 v2 v1 …
- Resilience Patterns
… S2[20 slots] -- R2["Recommendations 🐢<br/ max 20"] S3[60 slots] -- C2["Checkout ✅ fine"] end js import pLimit …
- DynamoDB Modeling, RDS Scaling and Data Resilience
… Avoid it in application paths. - Items are limited to 400 KB ; store large blobs in S3 and keep …
- Practical Project: Deploy a Real CRM App on EKS
… choose the right hosting Frontend type Best home Why --- --- --- Static export (SPA, next export ) S3 + CloudFront Cheapest, global …
- Vertical Slice Architecture & the Modular Monolith
… order history"] direction TB b1[endpoint] -- b2["one SQL query"] -- b3[(db)] end subgraph S3["Slice: update price …
- AWS Security Building Blocks
… Usually you ask a service such as S3, RDS, or Secrets Manager to encrypt with a KMS key …