IAM users vs groups vs rolesCopyCopyCopyCopy

Policies: managed vs inline, JSON basicsCopyCopyCopyCopy

MFA, password policies, access keys best practicesCopyCopyCopyCopy

STS + temporary credentials (why roles matter)CopyCopyCopyCopy

Hands-on: Create role-based access, least-privilege policy mini-taskCopyCopyCopyCopy

VPC, CIDR, subnets (public/private)CopyCopyCopyCopy

Route tables, Internet Gateway, NAT GatewayCopyCopyCopyCopy

DHCP options, VPC basics for architecture diagramsCopyCopyCopyCopy

Hands-on: Build a VPC with 2 public + 2 private subnetsCopyCopyCopyCopy

VPC endpoints (Gateway vs Interface)CopyCopyCopyCopy

Peering vs Transit Gateway (use-cases)CopyCopyCopyCopy

VPN vs Direct Connect (when to choose what)CopyCopyCopyCopy

Hands-on: Private S3 access using VPC Endpoint + policy controlsCopyCopyCopyCopy

EC2 instance families and sizing approachCopyCopyCopyCopy

AMI, EBS types, snapshots, encryptionCopyCopyCopyCopy

Placement groups, Elastic IP, user dataCopyCopyCopyCopy

Pricing models: On-Demand, Reserved, SpotCopyCopyCopyCopy

Hands-on: Launch hardened EC2, attach EBS, snapshot & restoreCopyCopyCopyCopy

ALB vs NLB vs Gateway LB (when to use each)CopyCopyCopyCopy

Auto Scaling Groups policies (target tracking, scheduled)CopyCopyCopyCopy

Multi-AZ design patterns for appsCopyCopyCopyCopy

Hands-on: ALB + ASG setup with health checks and scaling rulesCopyCopyCopyCopy

Buckets, objects, versioning, encryptionCopyCopyCopyCopy

S3 storage classes + lifecycle rulesCopyCopyCopyCopy

Replication: SRR/CRR (real scenarios)CopyCopyCopyCopy

S3 access control: policies, ACLs (when needed)CopyCopyCopyCopy

Hands-on: Lifecycle + encryption + replication demo designCopyCopyCopyCopy

EFS vs EBS vs S3 (decision framework)CopyCopyCopyCopy

FSx for Windows/Lustre (where it fits)CopyCopyCopyCopy

Storage Gateway (file/volume/tape basics)CopyCopyCopyCopy

Hands-on: Choose storage for 3 real apps (case study worksheet)CopyCopyCopyCopy

RDS engines, backups, snapshots, maintenanceCopyCopyCopyCopy

Multi-AZ vs Read Replicas (common confusion cleared)CopyCopyCopyCopy

Aurora basics: writer/reader, failoverCopyCopyCopyCopy

Hands-on: Create RDS, enable backups, test read replica conceptCopyCopyCopyCopy

Partitions, keys, indexes (GSI/LSI)CopyCopyCopyCopy

Capacity modes: on-demand vs provisionedCopyCopyCopyCopy

DynamoDB Streams basicsCopyCopyCopyCopy

Hands-on: Design table for session/store/catalog type use-casesCopyCopyCopyCopy

When caching solves the problem (and when it doesn’t)CopyCopyCopyCopy

Redis vs Memcached (practical difference)CopyCopyCopyCopy

DynamoDB Accelerator (DAX) basicsCopyCopyCopyCopy

Hands-on: Identify bottlenecks and propose cache architectureCopyCopyCopyCopy

Route 53 routing: simple, weighted, latency, failover, geoCopyCopyCopyCopy

Health checks and DR planningCopyCopyCopyCopy

CloudFront caching, origins, OAI/OAC overviewCopyCopyCopyCopy

Hands-on: DR routing design + basic CloudFront architecture mapCopyCopyCopyCopy

Metrics vs logs vs traces (what exam expects)CopyCopyCopyCopy

CloudWatch alarms, dashboards, log insights basicsCopyCopyCopyCopy

CloudTrail for auditingCopyCopyCopyCopy

AWS Config for compliance and driftCopyCopyCopyCopy

Hands-on: Alarm setup + audit trail scenario walkthroughCopyCopyCopyCopy

Lambda basics (where it fits in architecture)CopyCopyCopyCopy

Step Functions intro (workflow use-case)CopyCopyCopyCopy

Hands-on: Event-driven architecture design for order processingCopyCopyCopyCopy

CloudFormation fundamentals (templates, stacks, change sets)CopyCopyCopyCopy

Systems Manager basics (patching, run command)CopyCopyCopyCopy

AWS Well-Architected Framework pillars (what to apply where)CopyCopyCopyCopy

Exam strategy + mock tests + case studiesCopyCopyCopyCopy

Hands-on: Solve 3 architecture case studies + timed practice setCopyCopyCopyCopy