Search

Lessons (13)

• VPC Endpoints, Transit Gateway and Hybrid Networking

  Keep traffic private, cut NAT costs, connect many VPCs, link to on-premises networks, and troubleshoot with flow …

• Dependencies, Data Sources, and Resource Lifecycle

  … Terraform creates the VPC before the subnet and destroys the subnet before the VPC. Independent resources can run …

• VPC Networking Without the Confusion

  Understand a VPC as your private AWS network: subnets, routes, security groups, internet access, and private apps. The …

• Containers at Scale: ECS Deep Dive and EKS

  … ip ). - Enforce NetworkPolicies with VPC CNI network policy support or Cilium, and attach security groups for pods when …

• Practical Project: Deploy a Real CRM App on EKS

  … IAM, VPC, ECR, EKS, RDS, Secrets Manager, load balancing and CI/CD. By the end you should be …

• HCL, Resource Addresses, and Project Layout

  … var.environment , and a resource attribute as aws vpc.main.id . Values and expressions Form Example Meaning --- --- --- String …

• Terraform: Start Here

  … source A read of existing information An existing VPC Provider Plugin that talks to an API hashicorp/aws …

• Drift, Troubleshooting, and Disaster Recovery

  … not an automatic rollback Suppose Terraform creates a VPC and subnet, then fails to create another resource because …

• Cluster Networking, DNS and NetworkPolicies

  … A CNI plugin (Calico, Cilium, AWS VPC CNI, Flannel) implements these rules. The plugin you choose decides performance …

• Internals, Upgrades, Resilience and Interview Questions

  … containerd, CRI-O CNI Pod networking Cilium, Calico, VPC CNI CSI Storage EBS CSI, EFS CSI, Ceph Upgrading …

• Multi-Account Strategy, Governance and Security Operations

  … with auto-remediation GuardDuty Threat detection from CloudTrail, VPC Flow Logs, DNS and S3, EKS and malware scanning …

• Cost Optimization and the Well-Architected Framework

  … container service using NAT with one using selected VPC endpoints. List hourly infrastructure, processed data, cross-AZ transfer …

• Run Containers on AWS with ECR and ECS

  … Private task subnets need outbound access to ECR and related dependencies, through NAT or appropriate VPC endpoints. An …