AWS Cloud Engineering

Roadmaps, modules, concepts, articles, and practical resources for AWS Cloud Engineering - all aggregated in one place.

Browse Concepts

The foundational building blocks. Dive deep into theory and technical concepts to explore detailed subtopics, terminologies, and glossaries mapped inside each concept.

AWS Compute and Auto Scaling

Master EC2, Lambda, Load Balancers, and Auto Scaling Groups — the compute foundation every production AWS architecture is built on.

6 topicsExplore

AWS DevOps, Cost, and Machine Learning

Master CloudWatch, CloudTrail, CloudFormation, Cost Explorer, SageMaker, and AWS Batch — operating, automating, and optimising production AWS infrastructure.

7 topicsExplore

AWS Messaging, Analytics, and Containers

Master SQS, SNS, Kinesis, Athena, Redshift, ECS, EKS, and Fargate — decoupling services, processing data at scale, and running containers on AWS.

7 topicsExplore

AWS Networking and Security

Master VPC, Route 53, CloudFront, IAM, KMS, WAF, and GuardDuty — the networking and security layer that protects every AWS workload in production.

7 topicsExplore

AWS Storage and Databases

Master S3, RDS, Aurora, DynamoDB, ElastiCache, FSx, and Storage Gateway — choosing and operating the right storage for every production workload.

8 topicsExplore

Browse Topics

Detailed subtopics, terminologies, and technical guides. Dive straight into specific lessons and workflows mapped inside each concept.

All Topics

API Gateway, Step Functions, and Cognito - Serverless Application Layer

Build secure serverless APIs with API Gateway, orchestrate multi-step workflows with Step Functions, and manage user authentication with Cognito User Pools.

Explore

AWS Batch, Outposts, and Hybrid Compute - Running Jobs and Extending AWS

Run large-scale batch jobs with AWS Batch, extend AWS infrastructure to your data center with Outposts, and integrate SaaS data with AppFlow.

Explore

AWS Cost Explorer, Savings Plans, and Cost Optimisation

Analyse and reduce AWS spend with Cost Explorer, Savings Plans, Reserved Instances, Cost Anomaly Detection, and smart networking cost decisions.

Explore

AWS Database Selection Guide - Choosing the Right Database

Choose the right AWS database for every use case — RDS, Aurora, DynamoDB, DocumentDB, Neptune, ElastiCache, Redshift, Timestream, and OpenSearch compared.

Explore

AWS Disaster Recovery - Backup Restore, Pilot Light, Warm Standby, Multi-Site

Design and implement the four AWS disaster recovery strategies based on RPO and RTO requirements, from simple S3 backups to active-active multi-site.

Explore

AWS Lambda - Serverless Functions, Triggers, and Production Patterns

Deploy Lambda functions with correct memory, concurrency controls, VPC access, RDS Proxy integration, and cold start optimisation for production use.

Explore

AWS Load Balancers - ALB, NLB, GWLB and When to Use Each

Configure Application, Network, and Gateway Load Balancers with health checks, SSL termination, sticky sessions, and Auto Scaling Group integration.

Explore

AWS Machine Learning Services - AI Without Building Models

Add AI capabilities to applications using AWS pre-built ML services — Rekognition, Transcribe, Polly, Translate, Comprehend, Lex, Kendra, Textract, and SageMaker.

Explore

Glossary

Plain-language definitions for the terminology used across this hub. Useful when a module or article assumes a term you have not met yet.

All Terms

Learning Modules

Hands-on, topic-by-topic modules that walk you through real tools and workflows. Each module breaks down a complex concept into structured lessons you can complete at your own pace.

All Modules

BEGINNER26 Topics

Standalone

AWS - Amazon Web Services

A complete, practical reference for DevOps engineers. Covers all 20 core AWS services with architecture, flows, real-world usage, CLI commands, and comparisons.

Start

BEGINNER14 Topics

Standalone

Terraform : From First Plan to Production

Learn Terraform from zero: HCL, providers, state, variables, modules, loops and CI/CD, then build Docker and AWS infrastructure in hands-on labs.

Start

BEGINNER

DevOps Roadmap

Cloud Platforms (Pick One First)

A complete, practical reference for DevOps engineers. Covers all 20 core AWS services with architecture, flows, real-world usage, CLI commands, and comparisons.

Start

ADVANCED11 Topics

Standalone

S3 to FSx for OpenZFS

Automate file transfer from Amazon S3 to FSx for OpenZFS so that every file uploaded to a specific S3 path automatically appears on FSx - no manual commands needed after setup.

Start

Hands-on Projects

Build and ship something real. Each project is a full, self-contained brief - architecture, tooling and the trade-offs behind them - that you can work through end to end and keep as portfolio evidence.

All Projects

ADVANCED4 Topics

Standalone

Deploy a Production EKS Cluster with Terraform

Provision a production-ready Amazon EKS cluster using Terraform with VPC networking, IAM roles, node groups, and autoscaling.

View project

INTERMEDIATE4 Topics

Standalone

Build End-to-End CI/CD with Jenkins, SonarQube, and Docker

Build a complete CI/CD pipeline on AWS EC2 using Jenkins, SonarQube for code quality, Docker, and ECR for container delivery.

View project

ADVANCED10 Topics

Standalone

AWS 3-Tier on EC2 with Terraform and CI/CD

Build a 3-tier AWS stack with Terraform modules: VPC, ALB, EC2 Auto Scaling, and Multi-AZ RDS, deployed by a GitHub Actions pipeline.

View project

ADVANCED4 Topics

Standalone

Build a Production Secrets Management System with HashiCorp Vault and Kubernetes

Deploy HashiCorp Vault on Kubernetes, configure dynamic secrets, Vault Agent injection, and AWS KMS auto-unseal for zero hardcoded credentials.

View project

Learning Roadmaps

Step-by-step career blueprints that show you exactly what to learn and in what order. Follow a roadmap from absolute beginner to confident, job-ready engineer without the guesswork.

12 Steps

DevOps Roadmap

Free, beginner-friendly DevOps roadmap: Linux, Git, Docker, Kubernetes, GitHub Actions, Terraform, and AWS - structured steps to production-ready skills.

Start Pathway

Articles

In-depth technical guides, architecture breakdowns, and best practices written by engineers who have used these tools in real production environments - not just tutorials, but actual engineering insight.

All Articles

AWS Direct Connect vs Site-to-Site VPN Failover

Direct Connect vs VPN isn't really either/or for production — it's a primary-plus-failover pattern. Here's how to design it, and when either/or is right.

Lambda vs Fargate vs EC2 Spot: The Cost Crossover

Lambda vs Fargate vs EC2 Spot, at the crossover where Lambda stops being cheaper — 2026 pricing, invocation thresholds, and interruption math.

Secrets Manager vs Parameter Store vs Vault

AWS Secrets Manager, Parameter Store, and HashiCorp Vault compared for 2026 - cost math, rotation, multi-cloud fit, and the Vault-to-OpenBao fork.

AWS VPC Security: Hardening Every Layer

Most cloud security incidents start with a misconfigured VPC. Here's how to harden every layer — subnets, Security Groups, NACLs, and IAM — for production.

Practical Resources

A curated collection of official documentation, open-source repositories, video references, and productivity tools - everything hand-picked so you always have the right resource at the right moment.

DOCUMENTATION

OWASP ZAP GitHub Actions Integration

Official OWASP ZAP documentation for GitHub Actions integration — baseline scans, full scans, API scans, and custom rules configuration for automated DAST in CI/CD pipelines.

Open

DOCUMENTATION

Semgrep Rules and Custom Patterns Documentation

Official Semgrep documentation for writing custom security rules, using the rule registry, and integrating Semgrep into CI/CD pipelines with SARIF output for GitHub Security tab.

Open

VIDEO

DevSecOps CI/CD Pipeline — Complete Security Integration Tutorial

Complete DevSecOps pipeline tutorial covering Semgrep SAST, OWASP ZAP DAST, Trivy container scanning, and Checkov IaC scanning integrated into GitHub Actions with deployment blocking.

Open

Ready to test yourself?

Validate your technical understanding and check your scores, or explore the full platform learning roadmap.

Take the Quiz

Full Roadmap