Design, Build, Secure, Automate, and Operate Production-Grade Workloads on Amazon Web Services
Introduction: The Cloud Is Not a Place, It Is a Discipline
Chapter 1: Cloud Foundations — Why AWS, How AWS Works
- What Is Cloud Computing? IaaS, PaaS, and SaaS Compared
- Why AWS Leads the Market
- The Global Infrastructure: Regions, Availability Zones, and Edge Locations
- The Shared Responsibility Model
- Core AWS Concepts: Accounts, APIs, SDKs, and the CLI
- The Well-Architected Framework
Chapter 2: Identity and Access Management — Security by Design
- IAM Hierarchy: Users, Groups, Roles, and Policies
- Policy Language: JSON Documents, Conditions, and Effects
- Federation and Workforce Identity: IAM Identity Center
- IAM Roles for AWS Services
- Least Privilege in Practice
- MFA, Password Policies, and Access Key Management
- Organizations, SCPs, and Multi-Account Strategy
Chapter 3: Networking and Connectivity — VPC Deep Dive
- VPC Architecture: CIDR Blocks, Subnets, and Route Tables
- Internet Gateways, NAT Gateways, and Outbound Connectivity
- VPC Endpoints: Interface and Gateway Types
- Security Groups vs. Network ACLs
- Peering, Transit Gateway, VPN, and Direct Connect
- Route 53: DNS Management and Routing Policies
Chapter 4: Compute — EC2, Lambda, Containers, and Beyond
- EC2 Instance Families and Selection
- Purchasing Options: On-Demand, Reserved, Spot, and Savings Plans
- Auto Scaling and Capacity Planning
- Lambda: Serverless Compute Patterns
- Container Orchestration: ECS vs. EKS
- Choosing the Right Compute for Your Workload
Chapter 5: Storage — The AWS Storage Hierarchy
- Object Storage: S3 Classes and Lifecycle Management
- Block Storage: EBS Types and Performance
- File Storage: EFS and FSx
- Bridging On-Premises and Cloud: Storage Gateway
- Security, Encryption, and Access Control
Chapter 6: Databases — Relational, NoSQL, Warehousing, and Caching
- RDS and Aurora: Architecture and Selection
- DynamoDB: Capacity Modes and Patterns
- Redshift: Data Warehousing and Spectrum
- ElastiCache: In-Memory Caching
- Migration Strategies with DMS and SCT
Chapter 7: DevOps and Automation — CI/CD, IaC, and GitOps
- Infrastructure as Code: CloudFormation, CDK, and Terraform
- AWS CDK Deep Dive
- CodePipeline, CodeBuild, and CodeDeploy
- Deployment Strategies: Blue/Green, Canary, and Rolling
- Testing Infrastructure with Guard and cfn-lint
Chapter 8: Serverless Architecture Patterns
- Event-Driven Architecture Principles
- API Gateway: REST, HTTP, and WebSocket APIs
- Lambda Function Design and Optimization
- Step Functions: State Machines and Workflows
- The Messaging Backbone: SNS, SQS, and EventBridge
- Streaming with Kinesis
Chapter 9: AI, ML, and Generative AI on AWS
- SageMaker: Training, Hosting, and Pipelines
- Bedrock: Foundation Models and RAG Patterns
- Applied AI Services: Rekognition, Transcribe, Translate
- Building AI Applications: Architecture Patterns
- Cost and Performance Considerations
Chapter 10: Monitoring, Logging, and Observability
- CloudWatch: Metrics, Logs, Dashboards, and Alarms
- X-Ray: Distributed Tracing with OpenTelemetry
- Container Insights for ECS and EKS
- Log Management Strategies
- Alerting Best Practices and Runbooks
Chapter 11: Cost Optimization and Financial Operations
- Pricing Models Explained
- Right-Sizing Compute and Storage
- Savings Plans, Reserved Instances, and Spot
- Storage Tiering and Data Transfer Costs
- Tagging, Allocation, and FinOps Practices
Chapter 12: Governance, Compliance, and Multi-Account Strategy
- AWS Organizations: Management Accounts and OUs
- Control Tower: Landing Zones and Guardrails
- AWS Config: Rules and Conformance Packs
- Security Hub, GuardDuty, Macie, and Inspector
- Compliance Frameworks and Data Residency
Chapter 13: Real-World Deployment Strategies and Case Studies
- Three-Tier Web Application Architecture
- E-Commerce Platform: High Availability and Scaling
- Data Pipeline Architecture
- Migration Strategies: Lift-and-Shift to Refactor
- Disaster Recovery Patterns
Chapter 14: Troubleshooting and Operational Excellence
- Systematic Troubleshooting Methodology
- Networking Troubleshooting
- Compute Troubleshooting
- Storage Troubleshooting
- Database Troubleshooting
- IAM and Access Debugging
Chapter 15: Certification Paths and Career Growth
- AWS Certification Landscape
- Solutions Architect Path
- DevOps Engineer Path
- Specialty Certifications
- Building a Lab Environment for Practice
- Real-World Experience vs. Certification
- Continuing Education and Staying Current
