Learn AWS Containers and Serverless
// Compute placement mental model untuk memilih ECS, EKS, Fargate, Lambda, App Runner, Batch, Step Functions, dan pola hybrid berdasarkan runtime contract, ownership, failure semantics, scaling, state, latency, dan cost.
This overview is designed to help you choose the right entry point quickly. Follow the full track from lesson one, continue from your last checkpoint, or jump straight into a phase that matches what you need right now.
Curriculum Map
Navigate by phase, then choose the lesson that matches your current depth.
Compute Placement Mental Model
27 minCompute placement mental model untuk memilih ECS, EKS, Fargate, Lambda, App Runner, Batch, Step Functions, dan pola hybrid berdasarkan runtime contract, ownership, failure semantics, scaling, state, latency, dan cost.
Workload Taxonomy
24 minTaxonomy workload untuk memetakan request/response API, async worker, scheduled job, stream consumer, batch job, durable workflow, long-running service, dan tenant-isolated service ke AWS Containers and Serverless.
Control Plane vs Data Plane
26 minMemahami control plane dan data plane sebagai cara membaca ECS, EKS, Lambda, EventBridge, Step Functions, dan platform compute modern secara production-grade.
Runtime Contracts and Failure Boundaries
23 minMembongkar runtime contract, lifecycle, timeout, retry, shutdown, idempotency, dan failure boundary untuk container dan serverless production workload di AWS.
Reference Architecture Map
17 minReference architecture map for production-grade AWS container and serverless systems, connecting APIs, workers, events, workflows, registries, CI/CD, observability, and governance into one deployable mental model.
OCI Image as Deployment Artifact
15 minDeep production-focused explanation of OCI images as immutable deployment artifacts for AWS ECS, EKS, Fargate, Lambda container images, ECR, promotion pipelines, rollback, security, and release traceability.
Production Dockerfile for Java Services
22 minProduction-grade Dockerfile design for Java services on AWS ECS, EKS, Fargate, App Runner, and Lambda container images, covering build stages, base image selection, JVM runtime tuning, non-root execution, image size, vulnerability surface, and operational failure modes.
Container Entrypoint and Process Model
19 minDeep production-focused explanation of container entrypoint, PID 1, Java process lifecycle, signal handling, graceful shutdown, readiness, liveness, startup probes, process supervision, and AWS ECS/EKS/Fargate/App Runner operational behavior.
ECR Repository Design
18 minECR repository design for production-grade container platforms: naming, tag strategy, digest pinning, lifecycle policy, scanning, replication, pull-through cache, access model, and failure modes.
Container Supply Chain Security
17 minContainer supply chain security for AWS production platforms: source-to-runtime trust, SBOM, signing, attestation, scanner policy, promotion gates, base-image governance, and incident response.
Runtime Configuration and Secret Injection
23 minRuntime configuration and secret injection untuk ECS, EKS, Lambda, App Runner, Step Functions, dan event-driven workloads: config taxonomy, secret delivery, rotation, reload strategy, IAM boundary, AppConfig, dan production failure modes.
Local Development and Cloud Parity
18 minLocal development and cloud parity untuk AWS containers dan serverless: fast feedback loop, emulation boundaries, Testcontainers, SAM local, LocalStack, ephemeral AWS environments, contract testing, failure simulation, dan production confidence model.
ECS Mental Model
18 minMental model production-grade untuk memahami Amazon ECS sebagai desired-state scheduler, bukan sekadar tempat menjalankan Docker container.
Task Definition as Runtime Contract
17 minCara membaca dan mendesain Amazon ECS task definition sebagai kontrak runtime yang mengikat image, resource, IAM, network, logs, secrets, health, dan lifecycle aplikasi.
Fargate Runtime Model
16 minDeep production mental model for AWS Fargate as a serverless container runtime: lifecycle, isolation, sizing, storage, networking, cost surface, and failure modes.
ECS Networking for Services
15 minProduction-grade ECS networking for services: awsvpc mode, task ENI, security groups, private subnets, NAT, VPC endpoints, load balancers, DNS, image pull, logs, and failure modes.
Load Balancing ECS Services
15 minProduction-grade load balancing for ECS services: ALB vs NLB, target groups, listener rules, target health, deregistration delay, graceful draining, TLS, sticky sessions, scaling signals, and debugging unhealthy targets.
Service Discovery and East-West Traffic
13 minProduction-grade service discovery and east-west traffic for ECS: Cloud Map, DNS behavior, Service Connect, internal load balancers, client-side resilience, retries, timeouts, and failure propagation.
ECS Service Scheduler and Desired State
20 minDeep dive into Amazon ECS service scheduler, desired state, task lifecycle, health replacement, deployment steady state, placement semantics, and failure debugging for production ECS/Fargate services.
ECS Deployment Strategies
16 minProduction-grade guide to Amazon ECS deployment strategies: rolling deployments, deployment circuit breaker, CloudWatch alarm rollback, blue/green deployments, traffic shifting, canary validation, rollback design, and failure modelling.
ECS Autoscaling and Capacity
18 minProduction-grade guide to Amazon ECS service autoscaling and capacity: scaling signals, target tracking, step scaling, scheduled scaling, predictive scaling, queue-driven scaling, cooldowns, deployment interaction, observability, and failure modelling.
Capacity Providers and Spot
14 minProduction-grade guide to ECS capacity providers and Spot: Fargate, Fargate Spot, EC2 Auto Scaling group capacity providers, managed scaling, managed termination, capacity provider strategy, interruption handling, cost optimization, and resilience trade-offs.
ECS on EC2: When Fargate Is Not Enough
19 minDeep dive ECS on EC2 sebagai pilihan ketika Fargate tidak cukup: host control, GPU, daemon workload, placement, bin packing, cluster autoscaling, managed termination, dan operational runbook.
ECS Security Hardening
18 minProduction security hardening untuk Amazon ECS: IAM task role, execution role, network isolation, secrets, metadata endpoint, image governance, runtime controls, Fargate/EC2 differences, dan audit-ready checklist.
ECS Observability and Debugging
17 minObservability dan debugging produksi untuk Amazon ECS: logs, metrics, traces, Container Insights, ECS Exec, task stop reason, deployment events, correlation ID, dan incident debugging flow.
ECS Worker and Job Patterns
18 minPola worker dan job di Amazon ECS: queue workers, scheduled tasks, one-off tasks, Step Functions orchestration, backpressure, idempotency, retries, DLQ, scaling, dan operational runbook.
ECS Production Runbook
18 minRunbook produksi Amazon ECS untuk insiden deployment, task gagal start, image pull failure, unhealthy target, memory kill, capacity shortage, networking, secret injection, worker backlog, dan debugging end-to-end.
ECS Lab: API + Worker Platform
12 minLab end-to-end membangun platform ECS/Fargate production-like berisi Java API, async worker, ECR, ALB, SQS, DLQ, autoscaling, deployment rollback, observability, dan failure drills.
EKS Mental Model
21 minMental model production-grade untuk Amazon EKS: Kubernetes control plane, data plane, node, pod, deployment, service, add-on, IAM, networking, storage, scaling, dan operational ownership.
EKS Cluster Architecture
19 minDesain arsitektur cluster Amazon EKS production: topology multi-AZ, control plane, data plane, endpoint access, VPC/subnet, add-ons, version strategy, node architecture, security group, dan operational guardrails.
EKS Access Management
12 minAccess management production-grade di Amazon EKS: IAM authentication, EKS access entries, access policies, Kubernetes RBAC, break-glass admin, auditability, human access, CI/CD access, dan migration dari aws-auth ConfigMap.
Workload Identity on EKS
11 minWorkload identity production-grade di Amazon EKS: IRSA, EKS Pod Identity, Kubernetes service account, IAM trust policy, SDK credential chain, least privilege, multi-tenant boundary, migration, dan failure modes.
EKS VPC CNI and Pod Networking
15 minAmazon EKS pod networking production-grade: Amazon VPC CNI, pod IP allocation, ENI limits, prefix delegation, subnet pressure, security groups for pods, custom networking, IPv6, network policy, DNS, and runbooks.
Ingress, Load Balancing, and Gateway on EKS
15 minIngress, load balancing, and Gateway patterns on Amazon EKS: AWS Load Balancer Controller, ALB, NLB, target type instance vs ip, subnet tagging, TLS, health checks, Gateway API, WAF, and production runbooks.
EKS Compute Options
21 minEKS compute options for production platforms: managed node groups, self-managed nodes, EKS Fargate, Bottlerocket, Graviton, GPU, Spot, node pools, scheduling contracts, cost, reliability, and operational trade-offs.
EKS Auto Mode
19 minEKS Auto Mode in production: automated data plane, managed NodePools and NodeClasses, scheduling intent, scaling, consolidation, disruption, migration, guardrails, and failure modes.
Karpenter for Production Clusters
17 minKarpenter for production EKS clusters: scheduling-driven provisioning, NodePools, EC2NodeClass, NodeClaims, consolidation, disruption budgets, Spot strategy, instance diversification, platform guardrails, and failure modes.
Pod Scheduling and Availability
15 minPod scheduling and availability for production EKS: resource requests, limits, QoS, probes, topology spread, affinity, taints, tolerations, PodDisruptionBudget, graceful termination, rollout safety, and failure runbooks.
EKS Autoscaling Patterns
18 minEKS autoscaling patterns for production clusters: HPA, VPA, KEDA, Cluster Autoscaler, Karpenter, EKS Auto Mode, queue-driven scaling, scale-to-zero trade-offs, metrics, stabilization, and failure runbooks.
EKS Configuration and Secrets
15 minEKS configuration and secrets for production workloads: ConfigMaps, Secrets, environment variables, mounted files, External Secrets Operator, Secrets Store CSI Driver, AWS Secrets Manager, Parameter Store, rotation, reload, GitOps, and failure modes.
EKS Storage for Stateful Workloads
24 minDeep dive EKS storage for stateful workloads: PV, PVC, StorageClass, StatefulSet, EBS, EFS, FSx, snapshots, backup, migration, and failure modes.
Service Mesh and Traffic Control
24 minDeep dive EKS service mesh and traffic control: Istio, Linkerd, VPC Lattice, Gateway API, App Mesh deprecation, mTLS, retries, canary, circuit breaking, and failure modes.
EKS GitOps and Release Management
16 minProduction-grade GitOps and release management for EKS: repository topology, reconciliation, Argo CD, Flux, Helm, Kustomize, promotion, rollback, drift, secrets, progressive delivery, and failure runbooks.
EKS Policy and Multi-Tenancy
15 minProduction-grade EKS policy and multi-tenancy: namespace isolation, RBAC, quotas, Pod Security Standards, Kyverno, Gatekeeper, admission control, tenant onboarding, exceptions, and blast-radius design.
EKS Observability Platform
20 minProduction-grade EKS observability platform: metrics, logs, traces, events, audit signals, ADOT, CloudWatch Container Insights, Prometheus, cardinality control, alerting, dashboards, runbooks, and telemetry cost governance.
EKS Upgrades and Day-2 Operations
16 minProduction-grade EKS upgrades and day-2 operations: Kubernetes version lifecycle, control plane upgrades, add-ons, managed node groups, Karpenter nodes, Fargate workloads, API deprecation scanning, compatibility testing, node rotation, rollback boundaries, and operational cadence.
EKS Failure Modes and Runbooks
24 minProduction-grade EKS failure modes and runbooks: Pending pods, CrashLoopBackOff, ImagePullBackOff, NodeNotReady, CoreDNS failure, VPC CNI/IP exhaustion, ingress 502/503/504, webhook outage, Karpenter provisioning failure, bad rollout, and incident evidence discipline.
EKS Lab: Platform Cluster
13 minHands-on EKS lab for building a production platform cluster baseline: cluster architecture, add-ons, workload identity, Karpenter, ingress, GitOps, policy, observability, tenancy, deployment workflow, and failure drills.
Lambda Mental Model
17 minProduction-grade AWS Lambda mental model: function as runtime sandbox, invocation modes, execution environment reuse, concurrency, event source boundaries, timeout, retry, idempotency, cold starts, state boundary, cost surface, and when not to use Lambda.
Lambda Execution Lifecycle
15 minDeep dive into the AWS Lambda execution lifecycle: Init, Invoke, freeze/reuse, Shutdown, suppressed init, reset after failure, runtime and extension coordination, Java static initialization, connection reuse, background work hazards, and lifecycle-aware handler design.
Handler Design and Idempotency
14 minProduction Lambda handler design and idempotency: event validation, timeout budget, retry classification, duplicate delivery, conditional writes, idempotency records, partial batch response, side-effect boundaries, Java implementation patterns, and operational runbooks.
Lambda Packaging Options
16 minLambda packaging options in production: ZIP archives, layers, custom runtimes, container images, ECR, image digest pinning, Java build artifacts, Lambda Runtime Interface Client, package size limits, cold start trade-offs, CI/CD, security scanning, and artifact governance.
Java on Lambda
16 minProduction Java on AWS Lambda: JVM lifecycle, cold starts, static initialization, SnapStart, CRaC hooks, SDK client reuse, connection pooling, memory and CPU tuning, dependency minimization, framework trade-offs, packaging, observability, and failure modes.