#AWS
136 posts
AWS CLI and SDK Setup
Installing aws cli v2 and aws configure, profiles and credentials files, the purpose of SDKs like boto3 / aws-sdk-js, and the order the credential chain flows in — the setup for working with AWS outside the console.
CI/CD — GitHub Actions + ECR + ECS
Access-key-free GitHub Actions with OIDC, ECR push, automatic Task Definition updates, ECS Service rolling deployment, deployment circuit breaker and auto-rollback, all the way to CodeDeploy blue/green. A deployment flow that finishes in a single git push.
CloudShell and IAM Identity Center (SSO)
The in-browser terminal CloudShell, plus the IAM Identity Center (SSO) setup that has become the standard for multi-account login, and the aws cli sso login flow.
CloudWatch Intro — Logs / Metrics
The structure of CloudWatch Logs / Metrics / Alarms / Dashboards, log groups and retention, Metric Filters, and the basics of Logs Insights queries — the observability tool that becomes the eye of all operations.
Cost Management — Billing Alerts, Cost Explorer, Free Tier
The limits of the free tier, setting up AWS Budgets and billing alerts, how to slice the invoice with Cost Explorer, and the tag strategy that's the prerequisite for cost analysis. The guardrails that prevent first-invoice shock.
Cost Optimization and Dashboards
Cost Explorer analysis, Savings Plans / Spot / Graviton, Right Sizing, tag enforcement and cost classification, and the FinOps area. Patterns that actually cut a production system's cost, wrapping up Part 4, 'From the console to code.'
Deploying a Fullstack App on AWS — ECS Fargate Capstone
A capstone exercise weaving all the services from Chapters 1 ~ 31 into one. It deploys modern-react's Next.js app and modern-python's FastAPI app on one account with ECS Fargate + RDS + S3 + CloudFront + ALB + Secrets Manager + Terraform, and lays out the step-by-step Terraform code, the 13-step PR flow, a minimal-cost setup at about $10/month, and a comparison with the EKS deployment in the Kubernetes book.
Deploying a static site with CloudFront
AWS's global CDN, CloudFront. The flow of Origin / Behavior / Cache Policy, the S3 + CloudFront static hosting pattern, how to safely shield S3 with OAC, and the operational flow of invalidation.
Disaster Recovery & Backup — Backups · Cross-region DR · RTO/RPO
Designing how to bring data and services back when one AZ or one region collapses. Set RTO/RPO first, then learn to put backups in place with Terraform via RDS PITR · S3 versioning and Cross-Region Replication · AWS Backup, and round out the cross-region DR patterns Pilot Light · Warm Standby · Multi-Site with Route 53 failover.
EC2 and VPC Basics
The cloud's oldest compute and network, EC2 and VPC. How instance types, AMIs, and EBS, plus VPC / subnets / route tables / IGW / NAT all weave into one picture — laying the first skeleton of your operational infrastructure.
EC2 Operations — security group, key pair, SSM
The everyday tools of EC2 operations. Security Group rule design, the difference from NACLs, the limits of key pairs and SSM Session Manager, IMDSv2, and how to harden an instance's skeleton with an AMI.
ECR — the Image Registry
Where you store the container images that ECS and Lambda will pull. We cover the private / public difference in Amazon ECR, IAM authentication, docker push / pull, image scanning, tag strategy, lifecycle policies, multi-architecture (linux/amd64 + arm64), VPC Endpoints, and cross-account access.