AWS Foundation

Download Cloud Foundation Curriculum

If you are interested in joining the session, please contact us at 

Course Overview

Cloud Computing Overview: Introduction to Cloud Computing
Service Models: IaaS, PaaS, SaaS, FaaS
Deployment Models: Public, Private and Hybrid Clouds

Basic Requirements and Setup: EC2 instance setup, Putty, WinSCP
Technologies Introduction: A brief introduction and relevance of technologies used in the course

Cloud Computing

Definition: Regions, Availability Zones
Service Models & Comparison: IaaS, PaaS, SaaS, FaaS

Characteristics: On-demand, Multi Tenancy, Elastic Capacity, Pay per use
Deployment Models: Private, Public & Hybrid Clouds

AWS Services - 101

Global Infrastructure: Regions, Availability Zones, Edge Locations
AWS Foundation Services: Compute, Network, Storage, Security

AWS Platform Services:Databases, Analytics, App Services, Management Tools, Dev Tools, Mobile, IoT
AWS CLI Lab: Use CLI to run basic commands to list resources

AWS Compute - EC2

EC2 Introduction
Instance Purchasing Options: Instances Types, CPU Credits On-Demand, Reserved Instances, Spot Instances
Instance Types: Overview if Instance Families and Instance Types

AMI: AMI and baking
Instance Metadata:
 What is Instance Metadata and where it can be used
User Data: Bootstraping instance with UserData
EC2 Lab: Create EC2 Instance from CLI and log into the instance from Terminal


AWS Storage Portfolio: S3, EBS, EFS
EC2 Data Storage Options: Instance Storage, EBS
EBS Volume Types: SSD, HDD
EBS Encryption

Benefits of EBS: Data Availability, Persistence, Encryption, Snapshots
EBS Snapshots: Overview, Encryption, Copying, Use Cases
EBS Optimization: EBS Optimized Instances

EC2 - Security Groups

Introduction: 500/50/5 Rule
Security Group Rules: Rules Definition and association
Exam - 01: EC2, EBS & Security Groups

Default & Custom Security Groups: Default Security Group Rules and Implications
Security Groups Lab: VPC - Default Route Table, Internet Gateway

AWS Networking

AWS Global Infrastructure - Recap: Regions, Availability Zones
CIDR Notation: CIDR and how it can be used to represent IP ranges
AWS VPC: Introduction to VPC
VPC Subnets & Availability Zones: How Subnets and AZs are related to VPCs
VPC Subnets & Routing: Routing Traffic between Networking Components
VPC & Subnet Sizing: Using CIDR to size VPCs and Subnets
Subnet Routing & Security: Network ACLs
Default VPC & Subnet Characteristics: Details of VPCs and Subnets provisioned by default in an AWS account

VPC - IP Addressing: Public & Private IPV4 addresses , Network Interfaces, DNS Hostnames
VPC Security: Security Groups, NACLs, Flow Logs
VPC NAT Gateway
Networking Components Relationships: Summary of how AWS Networking Components are related to each other
VPC Peering: Route traffic between VPCs using Peering
Exam -02: Everything VPC

Cloud Formation

CloudFormation Concepts: Templates, Stacks & Change Sets
Templates: Examples
How Does AWS CloudFormation Work?
Cloud Formation Lab
Exam - 03: CloudFormation Exam

Updating a Stack with Change Sets
Template Anatomy: Parameters, Mappings, Resources, Outputs
PseudoParameters & Intrinsic Functions
CloudFormation Lab


AWS Storage Maturity: EFS, S3, Glacier, EBS, EC2
S3 Intro: Introduction and Use-cases
S3 Fundamental Entities: Buckets, Objects, Keys
S3 Data Consistency Model: Overview of the Consistency Model and examples
S3 Design: Relevant Details of S3 design and how it yields the Availability and Durability guarantees
Buckets: Details of Buckets, configuration options
Objects: Details of Objects, configuration options
Object Versioning: Advantages and examples

Managing Access: Access Permissions, Resource-based Policies, User policies, IAM Policies, Bucket Policies
Access Control Guidelines
Cross-Region Replication: Introduction , Requirements, Versioning & Replication, Delete Operation, What Is Not Replicated
Lifecycle Management: Transition & Expiration actions, Transitioning Objects, Supported Transitions, Transitioning to the GLACIER Storage Class, Retrieval Options from Glacier, Set Lifecycle Configuration Using CLI, Moving Objects between S3 storage classes
S3 Lab: Fundamental S3 Operations, Versioning, Replication
Exam - 04: S3 Exam


Shared Responsibility Model
Identities: Users, Groups, Roles, Delegation, Federation, Policy, Principal
Access Management: IAM Permissions, Policies, Version, Id, Statement, Sid, Effect, Principal, NotPrincipal, Action, NotAction, Resource, NotResource, Condition
IAM Policy Variables: The anatomy of a policy with variables, Information Available in All Requests
IAM Lab 

Condition: Condition Operators, String Condition Operators, Numeric Condition Operators, Date Condition Operators, Boolean Condition Operators, IP Address Condition Operators, Amazon Resource Name (ARN) Condition Operators, ...IfExists Condition Operators
Examples: Personal "Home Directory" in Amazon S3, “limited” IAM administrator, Specific EC2 Instance to Run Certain AWS Commands
Exam - 05

AWS - EC2 Elastic Load Balancer

Network Layers: Brief Introduction to 7 Network Layers
AWS ELB Introduction: Characteristics - Elastic, Secure, Integrated, Cost Effective
ELB Architecture
Types of ELB: Application Load Balancers and Classic Load Balancers
Classic vs App Load Balancer: Compare & Contrast
Multiple Apps - Classic vs App ELB: How Load Balancing across multiple apps can be supported with ELB and ALB

Application Load Balancer: Detailed introduction to features of AppLoadBalancer
 protocol and port for incoming connections
Target Groups: Logical grouping of targets
Targets: EC2 Instance, microservice, container-based application
Rules: link between listeners and target groups, path pattern format
Application Load Balancer: Detailed introduction to features of AppLoadBalancer
Exam - 06: EC2, EBS, Security Groups and ELB

EC2 - Auto Scaling

Types of Scaling: Vertical Scaling (Scale Up), Horizontal Scaling (Scale Out)
IT Usage Patterns: Common IT Work load patterns - On & Off, Fast Growth, Variable Peaks, Predictable Peaks
IT Usage Patterns (with Auto Scaling): How the Usage Patterns change with AutoScaling
Auto Scaling Fundamentals: Minimum Size, Maximum Size, Desired Capacity
Benefits of Auto Scaling: Fault Tolerance, Availability, Cost Management
Auto Scaling Groups: Introduction to ASGs
Launch Configurations: Why Launch Configurations are needed, Parameters of LCs
Scaling Plan: When and How to Scale
Cloud Watch: Introduction to CloudWatch Monitoring, CloudWatch Alarms
ASG Lab 

Auto Scaling + Cloud Watch: Auto Scaling Lifecycle with CloudWatch and CloudWatch Alarms
Auto Scaling Lifecycle: Scale Out, InService, Scale In
Auto Scaling Limits
Manual Scaling: Examples with CLI
Attach & Detach EC2 Instances to ASG
Scheduled Scaling: response to predictable load changes.
Dynamic Scaling: combination of alarms and policies for Dynamic Scaling. Scaling Adjustment Types, Scaling Policy Types
Auto Scaling - Cooldown: Evaluation Period, ScaleOut, Cooldown
Exam - 06: EC2 ASG

Dynamo DB

SQL vs NoSQL: Compare & Contrast
Consistency Model: ACID vs BASE
Database Categories: Aggregate Stores, Key-Value Stores, Column Family Stores, Document Stores
DynamoDB Introduction: Overview of DynamoDB
DynamoDB Core Components: Tables, Items, Attributes
Primary Key: Partition Key, Sort Key
Secondary Indexes: Global Secondary Index, Local Secondary Index
DynamoDB Streams: Realtime events in DynamoDB tables
DynamoDB API: Control Plane, Data Plane, DynamoDB Streams
Control Plane: CreateTable, DescribeTable, ListTables, UpdateTable, DeleteTable
Data Plane: CRUD Operations, PutItem, BatchWriteItem, GetItem, BatchGetItem, Query, Scan, UpdateItem, DeleteItem, BatchWriteItem

DynamoDB Streams: ListStreams, DescribeStream, GetShardIterator, GetRecords
Examples & Use-cases: Reading an Item, Writing an Item, Batch Operations, Atomic Counters
Data Types: Scalar Types, Document Types, Set Types
Read Consistency: Eventually Consistent and Strongly Consistent reads
Throughput Capacity: Read Capacity Units (RCU) and Write Capacity Units (WCU)
Managing Throughput: DynamoDB Auto Scaling, Provisioned Throughput, Reserved Capacity
Partitions and Data Distribution: Partitions, SSDs, Data Replication, Data Distribution - Partition Key, Data Distribution - Partition Key and Sort Key, Partition Behavior
DynamoDB Lab
Exam - 07: DynamoDB

Application Services - SNS, SQS, Kinesis, API Gateway, Route 53

SQS - Simple Queue Service: Amazon SQS Intro, Visibility Time Out, SQS Long Polling
API Actions: Related to Visibility Timeout
Amazon SQS - Use cases
SQS Queue Types: Standard Queue, FIFO Queue
Main Features of Amazon SQS: Redundant Infrastructure, Multiple Producers & Consumers, Configurable Settings, Variable Message Size, Access Control, Delay Queues, Compliance
Message Lifecycle
SNS - Simple Notification Service: SNS Intro
Pub/Sub Messaging
SNS Mobile Notifications
SNS Scenarios: Fanout, Application and System Alerts, Push Email and Text Messaging, Mobile Push Notifications
SNS Benefits
API Gateway Intro & Benefits: API Gateway Intro
App Services Lab

Streaming Data: Introduction to Streaming Data
Core Kinesis Services: 
Kinesis Streams, Kinesis Firehose, Kinesis Analytics
Kinesis Streams:
 Stream, Shards, Data Records, Retention Period, Partition Keys, Sequence Numbers, Kinesis Client Library, Producers, Consumers
Kinesis Firehose: Delivery Stream, Record, Data Producer, Buffer Size and Buffer Interval
Kinesis Firehose Data Flow: S3 Destinations, Redshift Destinations, ES destinations
Kinesis Analytics: Usecases, How It Works, Input, Application Code, Output
Kinesis Usecases: Streaming Data, Real-time with SQL, Real-time Apps with Stream Processing Framework, Batch to Real-time Analytics, Real-time Applications, Analyze IoT Device Data
Route 53 & Features: Traffic Flow, Latency Based Routing, Private DNS, DNS Failover, Health Checks and Monitoring, Domain Registration, Amazon ELB Integration
How Does DNS Route Traffic
Route 53 Health Checks
Exam - 08: App Services Lab

RDS - Relational Database Service

Amazon RDS: Introduction to RDS
Key Features: Lower Administrative Burden, Performance, Scalability, Availability and Durability, Security, Manageability, Cost-effectiveness
Exam - 09: RDS

RDS Components: DB Instances, Regions and Availability Zones, Security Groups, DB Parameter Groups, DB Option Groups
Amazon RDS Charges: Instance class, Running time, Storage, I/O requests per month, Backup storage


Serverless Introduction: An introduction to Serverless Paradigm and Options
Lambda: AWS Lambda and Deployment
Step Functions: Step Functions and Workflow

AWS SAM: SAM for serveless vs CloudFormation
Severless Framework: Serverless Framework and Usage
Use Cases: Mutliple use cases and patterns