Menu
Explore
Explore hands-on topics grouped by their parent concept. Filter by hub to find exactly what you need.
Master Linux environment variables, PATH management, dotfile configuration, shell startup file ordering, and direnv for consistent production and development environments.
Configure production Linux firewalls using iptables and ufw — implement default-deny rules, protect SSH, handle Docker port exposure, and persist rules across reboots.
Master SSH key pair generation, ~/.ssh/config setup, bastion host access, port forwarding, and production sshd hardening for secure Linux server management.
Apply a production security hardening baseline to Linux servers covering SSH, users, packages, kernel parameters, fail2ban, and automated compliance scanning with lynis.
Understand the Unix permission model and manage file permissions and ownership on production Linux servers using chmod, chown, and ACLs.
Master Linux filesystem hierarchy, absolute and relative paths, and the navigation commands used on every production server.
Manage software installation, updates, and removal across Debian and RedHat Linux distributions using apt, yum, and dnf in production environments.
Manage Linux users, groups, and sudo access to enforce least-privilege access control on production servers shared across engineering teams.
Master Linux process inspection and control using ps, top, htop, kill, and signals to diagnose and manage production server workloads.
Master systemd for production service management — start, stop, enable services, write unit files for Node.js apps, and diagnose failures with journalctl.
Diagnose CPU, memory, disk I/O, and network bottlenecks on production Linux servers using vmstat, iostat, free, iotop, ss, and dstat.
Process and transform text on Linux servers using grep, awk, sed, cut, sort, uniq, and jq — the tools for parsing logs, extracting fields, and analysing JSON in production.
Schedule reliable automated tasks on Linux servers using cron and systemd timers with proper logging, error handling, and production-grade automation patterns.
Write production-grade shell scripts for DevOps — deployment pipelines, health checks, retry logic, Slack notifications, and CI/CD automation patterns used at scale.
Use Linux networking tools to configure interfaces, diagnose connectivity failures, inspect DNS, capture packets, and test HTTP in production environments.
Write reliable Bash scripts from scratch — variables, quoting, conditionals, loops, functions, and production error handling with set -euo pipefail and trap.
Build reliable automated testing gates in CI — unit tests with coverage enforcement, integration tests with real dependencies, and E2E smoke tests post-deployment.
Implement blue-green and canary deployment strategies inside CI/CD pipelines — automating traffic switching, monitoring gates, and rollback triggers.
Build a complete production CI/CD pipeline in GitHub Actions — Docker build, testing, image scanning, ECR push, and Kubernetes deployment in one workflow.
Use the four DORA metrics to measure deployment frequency, lead time, change failure rate, and MTTR in production.
Design production-grade multi-stage pipelines with gate checks, artifact promotion, parallel job execution, and environment-specific deployment steps.
Build environment promotion pipelines that automatically deploy to dev and staging, then require manual approval for production — with proper config management.
Configure GitLab CI/CD pipelines with .gitlab-ci.yml — covering runners, environments, artifacts, cache, rules, and deployment to Kubernetes clusters.
Implement GitOps using ArgoCD so Git is the single source of truth and the cluster always matches the repo state.
Write production-grade declarative Jenkinsfiles with multi-stage pipelines, parallel execution, shared libraries, Docker agent builds, and credential management.
Secure CI/CD pipelines with OIDC authentication, proper secret management, and least-privilege runner permissions in production.
Implement fast rollback strategies for failed deployments — kubectl rollout undo, ArgoCD sync to prior revision, and automated metric-based rollback triggers.
Learn what CI/CD actually means, how pipelines are structured into stages and jobs, and why automated delivery reduces release risk at production scale.
Diagnose and fix common Docker container failures using logs, exec, inspect, and stats — the same debugging workflow used in production environments.
Build a complete Docker CI/CD pipeline: multi-stage builds, vulnerability scanning with Trivy, push to ECR, and zero-downtime deploy using GitHub Actions.
Define and run multi-container applications with Docker Compose — covering the compose file schema, service configuration, and essential CLI commands.
Configure service health checks and correct startup ordering in Docker Compose so apps never start before their dependencies are ready.
Apply production-grade Compose patterns: restart policies, CPU/memory limits, environment separation, and config management for real deployments.
Build a complete local development stack with Docker Compose — API, PostgreSQL, Redis, and RabbitMQ — with hot reloading and clean config.
Use Docker Compose inside GitHub Actions to run integration tests against real databases, caches, and queues before every merge.
Understand Docker's embedded DNS server, how containers resolve each other by name inside user-defined networks, and how this maps to Kubernetes CoreDNS.
Scan Docker images for CVEs and vulnerabilities using Trivy and Snyk, integrate scanning into CI/CD pipelines, and enforce policies that block unsafe images.
Implement a production image tagging strategy using semantic versions and git SHAs, and manage images across Docker Hub, ECR, and private registries.
Master Docker's four network drivers and understand when to use each for local development, single-host production, and multi-host cluster deployments.
Configure Docker log drivers, set rotation limits to protect disk space, and ship container logs to centralised systems like Loki or CloudWatch.
Configure CPU and memory limits on Docker containers using cgroups to prevent resource exhaustion and ensure stable multi-container host performance.
Keep credentials out of Docker images and Compose files using Docker Secrets, BuildKit secret mounts, and environment variable best practices.
Manage persistent data in Docker using named volumes, bind mounts, and tmpfs — and learn exactly which one to use for production vs development.
Use multi-stage Dockerfiles to produce minimal production images by separating build dependencies from runtime artifacts, reducing image size by up to 90%.
Reduce Docker image sizes from gigabytes to megabytes using layer squashing, minimal base images, cache mounts, and build output analysis.
Harden Docker containers for production by running as non-root, dropping Linux capabilities, and using read-only filesystems to reduce the attack surface.
Master the complete Docker container lifecycle — creating, running, stopping, restarting, and removing containers with confidence in production.
Learn how the Docker daemon, CLI client, containerd runtime, and runc work together to create and manage containers on a Linux host.
Write lean, secure, and cache-efficient Dockerfiles for production using layer ordering, .dockerignore, non-root users, and minimal base images.
Configure NGINX Ingress Controllers on Kubernetes to route production HTTP and HTTPS traffic with SSL termination, path routing, and rate limiting.
Learn how to correctly set CPU and memory requests and limits on Kubernetes pods to prevent OOMKills, CPU throttling, and noisy neighbour problems in production.
Configure PersistentVolumes, PersistentVolumeClaims, and StorageClasses in Kubernetes to provide durable storage for stateful workloads in production.
A Pod Disruption Budget (PDB) is a policy that tells Kubernetes the minimum number of pods that must stay running during voluntary disruptions — node drains, cluster upgrades, and rolling deployments. Without one, a node drain can terminate all pods of a service simultaneously, causing a complete outage.
Diagnose and fix Kubernetes pod networking failures, DNS resolution issues, and CNI plugin misconfigurations using kubectl, netshoot, and network policy debugging tools.
Learn how to deploy new application versions to Kubernetes with zero downtime using rolling updates, blue-green switching, and canary traffic splitting.
Secure Kubernetes pods using Pod Security Standards, securityContext settings, and runtime controls that prevent privilege escalation and container breakout attacks.
Configure liveness, readiness, and startup probes in Kubernetes to eliminate downtime during rolling deployments and protect production traffic from unhealthy pods.
Implement Kubernetes RBAC with Roles, ClusterRoles, and ServiceAccounts to enforce least-privilege access across multi-team production clusters.
Kubernetes Jobs and CronJobs run tasks that are meant to complete - not run forever like a web server. A Job runs a pod once and exits cleanly. A CronJob runs it on a schedule. Every database migration, report generation, and data pipeline at Swiggy or Razorpay that needs Kubernetes-level reliability uses one of these two.
By default, every pod in a Kubernetes cluster can talk to every other pod — regardless of namespace, team, or sensitivity. Network Policies are Kubernetes firewall rules that restrict this. They define which pods are allowed to send traffic to which other pods, and which external IPs can reach your services. Without them, a compromised frontend pod can directly connect to your production database.
Securely manage Kubernetes Secrets and ConfigMaps in production using HashiCorp Vault, secret injection, encryption at rest, and RBAC access controls.
A Kubernetes pod can run more than one container. Two patterns govern how these containers are used: Init Containers run sequentially before your app starts — used for setup tasks and dependency checks. Sidecars run alongside your app for the entire pod lifetime — used for logging, proxying, and metrics collection. Understanding both patterns eliminates entire categories of startup bugs and observability gaps.
Set up a complete Kubernetes monitoring stack with Prometheus for metrics collection, Grafana for dashboards, and Alertmanager for notifications to Slack and PagerDuty.
Deploy and manage stateful database workloads on Kubernetes using StatefulSets with stable network identities, ordered scaling, and persistent storage.
Configure Kubernetes HPA to automatically scale pod replicas based on CPU, memory, and custom metrics to handle traffic spikes without manual intervention.
Learn how Istio and Linkerd add mTLS, canary releases, circuit breaking, and observability without changing app code.
Diagnose and fix ImagePullBackOff and ErrImagePull errors in Kubernetes caused by registry authentication failures, incorrect image names, and network restrictions.
Master standard practices for Troubleshooting Kubernetes Pod OOMKilled and CrashLoopBackOff Errors.
Master all Kubernetes Service types — ClusterIP for internal traffic, NodePort for node-level access, and LoadBalancer for production external exposure with real examples.
Set up Atlantis to automate Terraform plan and apply through GitHub pull requests, giving every team member a safe, auditable way to change infrastructure.
Import AWS resources created manually or outside Terraform into your state file so Terraform can manage them going forward without recreating them.
Provision a production-ready AWS infrastructure stack with Terraform — VPC, subnets, security groups, EC2 instances, S3 buckets, and RDS databases.
Automate Terraform with GitHub Actions — running terraform plan on pull requests and terraform apply on merge, with OIDC authentication and PR comments.
Use Terraform data sources to read existing cloud resources — fetching AMI IDs, VPC details, and secrets without importing them into your state file.
Detect and fix infrastructure drift — when someone changes a resource in the AWS console and your Terraform state no longer matches reality.
Master Terraform HCL syntax — writing reusable variables, capturing outputs, using locals for calculations, and writing expressions and conditionals.
Use the Terraform Registry to find battle-tested community modules for AWS, GCP, and Azure — and learn how to publish and version your own private modules.
Configure Terraform remote state on AWS S3 with DynamoDB locking so your whole team can safely run Terraform without overwriting each other's changes.
Understand Terraform state — what the tfstate file contains, why it is the source of truth for your infrastructure, and how to inspect and manage it safely.
Write your first Terraform configuration from scratch — installing Terraform, configuring the AWS provider, and provisioning real infrastructure.
Organise Terraform code for large teams — directory-per-environment patterns, Terraform workspaces, and Terragrunt for DRY multi-environment infrastructure.
Write your first Terraform module from scratch — the right directory structure, input variables, outputs, and the patterns platform teams use at scale.
Build secure serverless APIs with API Gateway, orchestrate multi-step workflows with Step Functions, and manage user authentication with Cognito User Pools.
Run large-scale batch jobs with AWS Batch, extend AWS infrastructure to your data center with Outposts, and integrate SaaS data with AppFlow.
Analyse and reduce AWS spend with Cost Explorer, Savings Plans, Reserved Instances, Cost Anomaly Detection, and smart networking cost decisions.
Choose the right AWS database for every use case — RDS, Aurora, DynamoDB, DocumentDB, Neptune, ElastiCache, Redshift, Timestream, and OpenSearch compared.
Design and implement the four AWS disaster recovery strategies based on RPO and RTO requirements, from simple S3 backups to active-active multi-site.
Deploy Lambda functions with correct memory, concurrency controls, VPC access, RDS Proxy integration, and cold start optimisation for production use.
Configure Application, Network, and Gateway Load Balancers with health checks, SSL termination, sticky sessions, and Auto Scaling Group integration.
Add AI capabilities to applications using AWS pre-built ML services — Rekognition, Transcribe, Polly, Translate, Comprehend, Lex, Kendra, Textract, and SageMaker.
Implement layered AWS security with KMS encryption, secret rotation, WAF rules, DDoS protection, and intelligent threat detection with GuardDuty.
Design DynamoDB tables with the right primary key, capacity mode, and access patterns, and use Streams, Global Tables, DAX, and TTL for production workloads.
Mount Amazon EFS as a shared file system across multiple EC2 instances and ECS Fargate tasks with automatic scaling, lifecycle tiers, and multi-AZ availability.
Run managed RabbitMQ and ActiveMQ with Amazon MQ, build streaming pipelines with Amazon MSK, and process streams in real time with Amazon Managed Flink.
Configure RDS Multi-AZ, Read Replicas, Aurora Global, and automated backups for production relational database workloads with zero-downtime operations.
Configure Route 53 hosted zones, routing policies, health checks, and hybrid DNS endpoints to control global traffic routing and automatic failover.
Master S3 bucket policies, versioning, replication, storage classes, lifecycle rules, encryption, and performance optimisation for production workloads.
Design and build a production VPC with public and private subnets, Internet Gateway, NAT Gateway, Security Groups, and VPC Flow Logs from scratch.
Query raw S3 data with Athena using SQL, convert CSV to Parquet with Glue ETL, and build a governed data lake with Lake Formation for cost-optimised analytics.
Configure Auto Scaling Groups with Launch Templates, scaling policies, and CloudWatch alarms to automatically adjust EC2 fleet size based on real demand.
Define AWS infrastructure as code with CloudFormation templates, manage servers without SSH using SSM Session Manager, and automate patching with Patch Manager.
Distribute content globally with CloudFront edge caching and route latency-sensitive traffic through AWS private network using Global Accelerator.
Monitor AWS infrastructure with CloudWatch metrics and alarms, audit every API call with CloudTrail, and enforce compliance rules with AWS Config.
Choose the right EBS volume type for IOPS, throughput, and cost, manage snapshots with Recycle Bin and Fast Snapshot Restore, and understand when Instance Store beats EBS.
Store, scan, and manage Docker container images in ECR with lifecycle policies, cross-account access, vulnerability scanning, and pull-through cache.
Deploy containerised applications on ECS with Fargate, configure Task Definitions, IAM roles, Auto Scaling, and integrate with ALB for production traffic.
Run production Kubernetes workloads on EKS with Managed Node Groups, Fargate profiles, EBS/EFS storage, and AWS-native IAM integration via IRSA.
Implement ElastiCache Redis with Lazy Loading, Write-Through, and Session Store patterns to eliminate database bottlenecks and serve repeated reads in microseconds.
Build event-driven architectures with EventBridge rules, custom event buses, Schema Registry, and EventBridge Pipes to connect AWS services without glue code.
Choose the right specialised storage with FSx for Windows and Lustre, bridge on-premises storage with Storage Gateway, and transfer large datasets with Snowball.
Implement AWS IAM with users, groups, roles, and JSON policies following least privilege principles — and audit with Credentials Report and Access Advisor.
Manage multi-account AWS environments with Organizations, SCPs, IAM Identity Center SSO, Permission Boundaries, and cross-account role assumptions.
Build a modern analytics stack with Redshift for data warehousing, EMR for big data processing, and QuickSight for interactive BI dashboards.
Send transactional email with SES, run multi-channel marketing campaigns with Pinpoint, and understand when each communication service is the right tool.
Decouple services with SQS queues, fan-out messages with SNS, and process real-time streaming data with Kinesis Data Streams and Firehose.
Launch and configure EC2 instances with the right AMI, instance type, User Data, Security Groups, and IAM role for production workloads on AWS.
Connect multiple VPCs and on-premises networks using Transit Gateway, Direct Connect, Site-to-Site VPN, and Traffic Mirroring for production hybrid architectures.
Learn to deploy Azure Bastion so VMs never need RDP or SSH exposed to the internet, while still allowing secure browser-based access.
Learn to configure Azure Monitor alert rules and Action Groups so the right people are notified before a problem becomes an outage.
Learn to choose between Standard HDD, Standard SSD, Premium SSD, and Ultra Disk based on what a workload actually needs.
Learn when a single container on Azure Container Instances is enough, and when the orchestration complexity of AKS is actually justified.
Learn the real difference between Layer 4 Load Balancer and Layer 7 Application Gateway, and how to choose correctly for a given workload.
Learn how to choose between Virtual Machines, App Service, and AKS based on control needs, traffic patterns, and operational overhead.
Learn the real trade-offs between VPN Gateway and ExpressRoute for connecting on-premises networks to Azure, and how they work together.
Learn the real difference between DNS-level Traffic Manager and application-layer Front Door for routing traffic across regions.
Learn to choose between Hot, Cool, and Archive access tiers in Azure Blob Storage to avoid overpaying for rarely-accessed data.
Learn to configure Azure Backup with a Recovery Services Vault, and why testing an actual restore matters more than a completed backup job.
Learn to create an Azure Files share and mount it as a network drive accessible from multiple VMs simultaneously via SMB.
Learn how Azure RBAC combines a principal, a role, and a scope to control exactly who can do what to which resources.
Learn to choose between LRS, ZRS, and GRS storage replication options based on the actual disaster recovery requirement.
Learn to configure a Virtual Machine Scale Set that automatically adds and removes VM instances based on real CPU load.
Learn to build a container image, push it to Azure Container Registry, and deploy it to an AKS cluster exposed through a load balancer.
Learn to use App Service Deployment Slots to test a new release on a live URL before swapping it into production with zero downtime.
Learn to plan VNet and subnet CIDR ranges that won't need to be rebuilt later, and understand how subnets isolate application tiers.
Learn to configure Conditional Access policies that require MFA based on real risk signals like location, rather than for every single login.
Learn how Azure Policy automatically enforces and audits resource rules across a subscription, and how it differs from RBAC.
Learn to read Microsoft Defender for Cloud's Secure Score, prioritize its recommendations, and fix a real misconfiguration to raise the score.
Learn to store secrets in Azure Key Vault and retrieve them using Managed Identity so application code never contains a hardcoded credential.
Learn the basic KQL syntax needed to search, filter, and summarize logs in a Log Analytics Workspace to actually find an incident's root cause.
Learn to cut real VM spend using auto-shutdown for dev VMs and Spot Instances for fault-tolerant batch workloads.
Learn to configure Network Security Group rules that allow only intended traffic, and understand the danger of exposing management ports.
Learn to generate scoped, time-limited Shared Access Signature tokens instead of sharing full Storage Account keys with external parties.
Learn to set budget alerts and track spending in Azure Cost Management before an unexpected bill arrives, not after.
Learn how ARM templates define Azure infrastructure declaratively in JSON, so deployments are consistent, reviewable, and repeatable.
Learn how Management Groups, Subscriptions, Resource Groups, and Resources fit together to organize any Azure environment correctly.
Learn to automate repetitive Azure tasks with the CLI and Cloud Shell instead of clicking through the Portal one resource at a time.
Learn the difference between System-Assigned and User-Assigned Managed Identities, and how they eliminate hardcoded credentials entirely.
Learn to create a notification channel and an alert policy that actually notifies someone, and understand why an alert with no channel fails silently.
Learn to set up a Shared VPC so a central team owns network design while individual product teams still deploy their own resources autonomously.
Learn to match a workload's actual data shape and scale needs to Cloud SQL, Firestore, Spanner, Bigtable, or BigQuery correctly.
Learn when Cloud VPN's encrypted tunnel to on-premises is the right tool versus VPC Network Peering's direct connection between two VPCs.
Learn how to choose the right GCP compute service based on control needs, container orchestration complexity, and traffic patterns.
Learn when a regional Persistent Disk's higher cost is justified by needing to survive a single zone failure, versus a zonal disk's lower cost.
Learn to distinguish GCP's global external, regional external, and internal load balancer types based on traffic type and reach needed.
Learn to choose between Standard, Nearline, Coldline, and Archive storage classes based on real access patterns and minimum duration costs.
Learn to configure Persistent Disk snapshots and Cloud SQL automated backups, and why a completed backup job proves nothing without a test restore.
Learn to automate storage class transitions and object deletion with Lifecycle rules so aging data stops costing full price automatically.
Learn how GCP firewall rules apply via network tags or service accounts rather than subnet attachment, and why tags are easy to forget.
Learn the difference between basic, predefined, and custom IAM roles, and when each is the right choice for a given access need.
Learn to build a Managed Instance Group from an Instance Template with autoscaling based on real CPU load, GCP's equivalent of an ASG.
Learn to deploy a container to Cloud Run, configure traffic splitting for gradual rollouts, and set scaling parameters correctly.
Learn the real trade-offs between GKE Autopilot's fully managed nodes and Standard mode's direct node pool control.
Learn why GCP VPCs are global by default and how to design custom-mode VPCs with regional subnets instead of the risky default auto-mode VPC.
Learn to use Organization Policy constraints to enforce rules like blocking external IPs automatically across every project in a folder.
Learn to configure Cloud NAT so VMs with no external IP can still reach the internet for updates, without ever being reachable from it.
Learn to review Security Command Center findings, prioritize them by severity, and fix a real misconfiguration to see the finding resolve.
Learn to create a repository, build and push container images, and clean up old versions automatically with Artifact Registry.
Learn to migrate an existing MySQL or PostgreSQL database into Cloud SQL with minimal downtime using Database Migration Service.
Learn to configure Cloud Armor security policies with rate limiting and WAF rules to block common attacks before they reach your backend.
Learn Cloud Logging's query filter syntax to actually find an incident's root cause, and how to route logs to BigQuery for long-term analysis.
Learn to cut real Compute Engine spend using Spot VMs for fault-tolerant batch work and custom machine types sized to actual workload needs.
Learn the difference between Admin Activity, Data Access, and System Event audit logs, and how to query them during a security investigation.
Learn to load data into BigQuery and run SQL queries against massive datasets, and understand its cost model based on data scanned.
Learn to link a project to a Billing Account and configure budget alerts that warn you before spend crosses a threshold, not after.
Learn how Organizations, Folders, Projects, and Resources fit together, and why the Project ID decision cannot be undone later.
Learn to use Service Account impersonation and VM attachment instead of downloading long-lived key files that can leak.
Learn to automate repetitive GCP tasks with gcloud and Cloud Shell instead of clicking through the Console one resource at a time.