#AWS
136 posts
AWS Advanced #2: ECR — Image Registry
Amazon ECR private / public, IAM auth, docker push / pull, image scanning, lifecycle policies, multi-architecture (linux/amd64 + arm64) — where the images that ECS and Lambda will pull actually live.
AWS Advanced #1: ECS and Fargate — Container Deployment
ECS and where it fits (vs EKS), the four pieces (Cluster / Service / Task / Task Definition), EC2 launch type vs Fargate, hooking up ALB / VPC, and your first container deployment — how to put a container on AWS, end to end.
AWS Intermediate #7: CloudFront for static site delivery
AWS's global CDN, CloudFront. The Origin / Behavior / Cache Policy flow, the S3 + CloudFront static-hosting pattern, how OAC fronts S3 safely, and the operational side of invalidations.
AWS Intermediate #6: ALB / NLB and ACM (HTTPS)
AWS's managed load balancers — the differences between ALB, NLB, and GWLB; the Listener / Target Group / Health Check flow; and the operational pattern of issuing a cert with ACM and turning on HTTPS in one go.
AWS Intermediate #5: Route 53 — domains and DNS
AWS's managed DNS, Route 53. Domain registration and Hosted Zones, the difference between A / AAAA / CNAME / Alias records, and Simple / Failover / Latency / Geolocation routing policies.
AWS Intermediate #4: RDS — managed DB, backups, parameter groups
AWS's managed relational database, RDS. Comparison vs DB-on-EC2, automated backups and snapshots and PITR, Multi-AZ, parameter / option groups, and how to handle minor vs major upgrades operationally.
AWS Intermediate #3: S3 — static hosting and presigned URLs
AWS's oldest object storage, S3. The shape of a bucket and the global uniqueness of names, policies and Public Access Block, static site hosting, presigned URLs, and how to lower cost with storage classes.
AWS Intermediate #2: EC2 Operations — security group, key pair, SSM
The daily tools of EC2 operations — designing Security Group rules, how NACLs sit differently, the limits of key pairs and SSM Session Manager, plus baking your AMI to harden the instance skeleton.
AWS Intermediate #1: EC2 and VPC Basics
The oldest building blocks in the cloud — EC2 and VPC. Instance types and AMIs and EBS, plus how VPC, subnets, route tables, IGW, and NAT all weave into one picture. We lay out the first skeleton of operational infrastructure.
AWS Basics #7: CloudWatch Intro — Logs and Metrics
CloudWatch Logs / Metrics / Alarms / Dashboards, log groups and retention, Metric Filters, and the basics of Logs Insights queries — the eyes of every production system.
AWS Basics #6: Security Basics — MFA, Key Rotation, Least Privilege
Enforcing MFA on root and IAM users, automating access-key rotation, auditing permissions with IAM Access Analyzer, least-privilege patterns, and the incidents you actually see in production.
AWS Basics #5: CloudShell and IAM Identity Center (SSO)
CloudShell — the in-browser terminal — and IAM Identity Center (SSO), the standard login for multi-account, all the way through to the aws cli sso login flow.