Learn AWS Engineering Mastery

Deep mental model of AWS Well-Architected and Shared Responsibility as production engineering governance, not checklist compliance.

Global Infrastructure, Regions, AZ, and Failure Domains

Deep guide to AWS global infrastructure, Regions, Availability Zones, Local Zones, Wavelength Zones, edge locations, and failure domain reasoning.

Account Strategy, Organizations, and Landing Zone

24 min

Account strategy, AWS Organizations, landing zones, organizational units, account vending, guardrails, and governance baseline for production-grade AWS environments.

IAM Deep Dive: Identity, Permissions, and Boundaries

Deep dive into AWS IAM identity, permissions, roles, trust policies, resource policies, STS, permission boundaries, SCPs, ABAC, cross-account access, PassRole, and least-privilege engineering.

Networking Foundations: VPC, Subnets, Routing, and Endpoints

Deep dive into AWS VPC networking foundations: VPCs, CIDR planning, subnets, route tables, internet gateways, NAT gateways, security groups, NACLs, VPC endpoints, DNS, and failure-domain-aware network design.

Network Edge, DNS, Ingress, and Egress Control

29 min

Deep dive into AWS network edge architecture: Route 53, CloudFront, load balancers, API ingress, TLS, WAF, Shield, DNS failover, ingress patterns, egress control, and edge operational failure modes.

Hybrid Networking: Transit Gateway, VPN, and Direct Connect

29 min

Hybrid networking architecture with Transit Gateway, Site-to-Site VPN, Direct Connect, DNS resolver, segmentation, inspection, route domains, and enterprise connectivity failure modeling.

Compute Foundations: EC2, AMI, ASG, and Load Balancing

28 min

Production compute foundations with EC2, AMI strategy, launch templates, Auto Scaling Groups, lifecycle hooks, mixed instances, load balancing, health checks, deployment safety, cost, and failure modeling.

Container Platform Engineering with ECR, ECS, and Fargate

23 min

Container platform engineering with Amazon ECR, Amazon ECS, and AWS Fargate for production-grade services, batch workers, event consumers, and internal platform golden paths.

EKS Production Architecture and Day-2 Operations

23 min

Production Amazon EKS architecture and day-2 operations: cluster boundaries, node strategy, networking, identity, add-ons, autoscaling, upgrades, observability, security, reliability, and platform operating model.

Serverless Compute: Lambda Execution Model and Limits

Serverless compute deep dive: AWS Lambda execution model, lifecycle, concurrency, cold start, event sources, retries, idempotency, limits, security, cost, observability, and production engineering judgment.

API Architecture: API Gateway, AppSync, Auth, and Throttling

API architecture on AWS with API Gateway, AppSync, Cognito, IAM/JWT/Lambda authorizers, throttling, usage plans, request validation, schema boundaries, private APIs, real-time APIs, and production failure models.

Event-Driven Integration: SQS, SNS, EventBridge, and Step Functions

Event-driven integration on AWS using SQS, SNS, EventBridge, and Step Functions with production-grade semantics, failure handling, idempotency, observability, and architectural trade-offs.

Storage Architecture: S3, EBS, EFS, FSx, and Backup

Production storage architecture on AWS covering S3, EBS, EFS, FSx, AWS Backup, lifecycle, replication, retention, restore, and operational failure modes.

Relational Data on AWS: RDS, Aurora, and Connection Scaling

Relational data engineering on AWS using Amazon RDS, Amazon Aurora, Multi-AZ, replicas, failover, RDS Proxy, connection scaling, backup, restore, migration, observability, and production ownership boundaries.

DynamoDB Data Modeling, Partitions, and Global Tables

DynamoDB data modeling from first principles, including access patterns, partition keys, sort keys, GSIs, LSIs, single-table design, hot partitions, throughput, streams, TTL, transactions, global tables, correctness, observability, and production failure modes.

Cache, Search, Streaming, and Realtime Data

19 min

Cache, search, streaming, and realtime data architecture on AWS: ElastiCache, OpenSearch, Kinesis, MSK, low-latency read paths, replayable streams, backpressure, indexing, and production failure modes.

Data Lake, Analytics, and Governance on AWS

Data lake, analytics, and governance architecture on AWS: S3 lake foundation, Glue Data Catalog, Athena, Redshift, Lake Formation, table formats, partitioning, access control, lineage, quality, and regulatory defensibility.

Infrastructure as Code: CloudFormation, CDK, and Terraform

21 min

Infrastructure as Code mental model for AWS production systems using CloudFormation, CDK, and Terraform, including state, drift, module design, policy-as-code, and safe promotion.

CI/CD, Release Safety, and Progressive Delivery

19 min

CI/CD, release safety, progressive delivery, deployment gates, rollback, artifact integrity, and production release governance on AWS.

Observability: CloudWatch, X-Ray, OpenTelemetry, and SLO

Observability engineering on AWS using CloudWatch, X-Ray, OpenTelemetry, correlation IDs, metrics, logs, traces, alarms, dashboards, and SLO-driven operations.

Operations, Incident Management, SSM, and Runbooks

15 min

AWS operations engineering using Systems Manager, Session Manager, Run Command, Automation runbooks, OpsCenter, Incident Manager, patching, production access, and incident response.

Reliability Engineering: HA, Failover, Chaos, and RTO/RPO

21 min

AWS reliability engineering for high availability, failover, graceful degradation, disaster recovery, chaos engineering, RTO, RPO, and production resilience.

Security Engineering: KMS, Secrets, WAF, GuardDuty, and Security Hub

AWS security engineering with KMS, envelope encryption, Secrets Manager, WAF, Shield, GuardDuty, Security Hub, detective controls, threat modeling, and incident containment.

Compliance, Auditability, Config, CloudTrail, and Policy-as-Code

29 min

AWS compliance, auditability, evidence engineering, CloudTrail, AWS Config, Audit Manager, policy-as-code, control mapping, exception governance, and regulatory defensibility.

Cost Engineering: FinOps, Unit Economics, and Sustainability

AWS cost engineering, FinOps operating model, unit economics, tagging, Cost Explorer, CUR 2.0, Budgets, Cost Anomaly Detection, Savings Plans, rightsizing, and sustainability.

Performance Efficiency: Capacity, Scaling, and Latency

Performance efficiency engineering on AWS through capacity modeling, scaling feedback loops, latency budgeting, quota-aware design, load testing, caching, placement, and workload profiling.

Multi-Region Architecture: DR, Data Replication, and Traffic Control

Multi-region architecture on AWS through disaster recovery strategy, RTO/RPO contracts, Route 53 and ARC traffic control, data replication, failover, failback, consistency, and operational drills.

Modernization, Migration, and Strangler Architecture

Modernization and migration on AWS through portfolio assessment, 7R strategies, migration waves, strangler architecture, data migration, cutover, and risk-controlled transformation.

Enterprise SaaS, Multitenancy, and Cell-Based Architecture

Enterprise SaaS and multi-tenant architecture on AWS through tenant isolation, pooled/siloed/bridge models, tenant lifecycle, entitlement, metering, noisy-neighbor control, and cell-based architecture.

Platform Engineering, Golden Paths, and Internal Developer Platforms

30 min

Platform engineering on AWS through golden paths, internal developer platforms, service catalogs, account and environment factories, reusable IaC, guardrails, self-service workflows, and platform operating models.

AWS for AI/ML and Bedrock Production Platforms