A comprehensive, hands-on guide to Amazon Web Services (AWS) fundamentals covering core services, security, and best practices. This repository contains detailed documentation, practical examples, and real-world scenarios to help you master AWS from beginner to intermediate level.
-
01. IAM - Identity & Access Management
- User management, roles, policies, and permissions
- Multi-factor authentication (MFA) setup
- Best practices for secure access control
-
02. S3 - Simple Storage Service
- Bucket creation, object storage, and lifecycle policies
- Static website hosting and CDN integration
- Security configurations and access controls
-
03. EC2 - Elastic Compute Cloud
- Virtual server deployment and management
- SSH access, key pairs, and remote connections
- Instance lifecycle and cost optimization
-
- Choosing the right instance for your workload
- Performance characteristics and use cases
- Cost comparison and optimization strategies
-
- Network-level security and firewall rules
- Inbound/outbound traffic configuration
- Common security patterns and troubleshooting
-
- Essential port configurations for web services
- SSH, HTTP, HTTPS, and custom application ports
- Security considerations and best practices
-
- Persistent storage for EC2 instances
- Volume types, performance, and encryption
- Backup and disaster recovery strategies
-
- Data protection through versioning
- Automated backup strategies
- Point-in-time recovery procedures
-
09. AMI - Amazon Machine Images
- Creating custom server images
- Image sharing and marketplace usage
- Version control for infrastructure
- 10. Cleanup Scripts
- Automated resource cleanup procedures
- Security hardening before AMI creation
- Cost optimization through proper resource management
-
π IAM Fundamentals
- Create your first IAM user
- Set up MFA for enhanced security
- Understand the principle of least privilege
-
πΎ S3 Basics
- Create and configure your first bucket
- Upload files and set permissions
- Enable versioning and lifecycle policies
-
βοΈ EC2 Essentials
- Launch your first EC2 instance
- Connect via SSH and configure basic services
- Understand instance states and billing
-
π‘οΈ Security Configuration
- Configure security groups and NACLs
- Set up proper port access
- Implement security best practices
-
πΏ EBS and Storage
- Attach additional storage to instances
- Create and restore from snapshots
- Implement backup strategies
-
πΈ AMI Management
- Create custom AMIs from configured instances
- Share AMIs across accounts
- Version control your infrastructure
- π§ Automation and Cleanup
- Implement automated cleanup procedures
- Create deployment scripts
- Monitor and optimize costs
- Basic Linux/Unix commands (ls, cd, chmod, ssh)
- Networking fundamentals (IP addresses, ports, protocols)
- Basic understanding of virtualization concepts
- Command line comfort (Terminal/PowerShell)
- AWS Free Tier Account - Sign up here
- AWS CLI - Installation guide
- SSH Client (PuTTY for Windows, built-in for Mac/Linux)
- Text Editor (VS Code, Sublime, or similar)
- Create AWS account and verify email
- Set up billing alerts (recommended: $10 threshold)
- Install AWS CLI and configure credentials
- Create your first IAM user (don't use root account)
- Enable MFA on root and IAM accounts
Each guide follows a consistent format:
- π― Purpose - Clear objectives and use cases
- π§ Key Concepts - Essential terminology and theory
- π οΈ Hands-on Labs - Step-by-step practical exercises
β οΈ Common Pitfalls - Mistakes to avoid- π‘ Best Practices - Industry-standard recommendations
- π Troubleshooting - Common issues and solutions
- π Cost Optimization - Tips to minimize expenses
- Read the theory - Understand concepts before implementation
- Follow labs step-by-step - Hands-on practice is essential
- Experiment safely - Use Free Tier resources for testing
- Document your progress - Keep notes of configurations
- Clean up resources - Avoid unexpected charges
By completing this guide, you will be able to:
- β Implement proper IAM policies and user management
- β Configure multi-factor authentication
- β Apply principle of least privilege
- β Secure AWS resources using best practices
- β Design and implement S3 storage solutions
- β Configure EBS volumes for optimal performance
- β Create and manage snapshots for backup/recovery
- β Implement data lifecycle and retention policies
- β Deploy and manage EC2 instances effectively
- β Configure security groups and network access
- β Choose appropriate instance types for workloads
- β Implement auto-scaling and load balancing concepts
- β Create and manage AMIs for consistent deployments
- β Implement automated cleanup and maintenance scripts
- β Monitor resource usage and optimize costs
- β Troubleshoot common AWS issues
- Personal Website Hosting - Deploy a static website using S3 and CloudFront
- Secure File Storage - Create encrypted S3 buckets with proper access controls
- Web Server Setup - Launch and configure a basic web server on EC2
- Multi-tier Application - Deploy a web app with separate database server
- Backup Strategy Implementation - Automated EBS snapshots and S3 lifecycle
- Custom AMI Pipeline - Create standardized server images for deployment
- High Availability Setup - Multi-AZ deployment with load balancing
- Disaster Recovery Plan - Cross-region backup and recovery procedures
- Cost Optimization Audit - Analyze and optimize existing AWS resources
- AWS Free Tier - Start with free resources
- AWS Well-Architected Framework - Best practices
- AWS CLI Reference - Command line tools
- AWS Pricing Calculator - Cost estimation
- AWS Training and Certification - Official courses
- AWS Whitepapers - In-depth technical guides
- AWS Architecture Center - Reference architectures
- AWS Blog - Latest updates and tutorials
- AWS Forums - Community discussions
- AWS re:Post - Q&A platform
- AWS Reddit Community - Informal discussions
- Stack Overflow AWS Tag - Technical questions
- Never share AWS credentials in code or public repositories
- Always use IAM users instead of root account for daily operations
- Enable MFA on all accounts with console access
- Regularly rotate access keys and review permissions
- Monitor billing to detect unauthorized usage
- Set up billing alerts before starting any labs
- Use Free Tier resources whenever possible
- Clean up resources immediately after completing exercises
- Understand pricing models before launching paid services
- Monitor usage through AWS Cost Explorer
- EC2: 750 hours/month of t2.micro instances
- S3: 5GB storage, 20,000 GET requests, 2,000 PUT requests
- EBS: 30GB of General Purpose SSD storage
- Data Transfer: 15GB outbound per month
Connection Problems
- SSH key permissions (chmod 400 keyfile.pem)
- Security group configuration
- Instance state verification
Permission Errors
- IAM policy attachments
- Resource-based policies
- Cross-account access issues
Billing Surprises
- Data transfer charges
- EBS snapshot storage
- Elastic IP addresses
- Check AWS Service Health - status.aws.amazon.com
- Review CloudTrail logs - Audit API calls and changes
- Use AWS Support - Basic support included with all accounts
- Community forums - Often fastest for common issues
- [1] IAM: Created users, roles, and policies
- [2] S3: Configured buckets with proper security
- [3] EC2: Launched and managed instances
- [4] Security Groups: Configured network access
- [5] EBS: Attached storage and created snapshots
- [6] AMI: Created custom images
- [7] Cleanup: Implemented automation scripts
- [8] Project: Completed at least one end-to-end project
After completing this guide, consider:
- AWS Solutions Architect Associate certification
- Advanced services: RDS, Lambda, CloudFormation
- DevOps practices: CI/CD with AWS CodePipeline
- Monitoring: CloudWatch and AWS X-Ray
- Networking: VPC, Route 53, and Load Balancers
- Create an issue in this repository
- Include detailed steps to reproduce
- Specify which guide section needs correction
- Fork this repository
- Add improvements or new content
- Submit a pull request with clear description
- β Star this repository for updates
- π Watch for new content releases
- π Pull latest changes regularly
π Ready to start your AWS journey? Begin with 01. IAM - Identity & Access Management!
Last updated: October 2025 | AWS Free Tier compatible