A free, self-paced textbook in 8 chapters. Read a chapter, then drill it with the 120 companion flashcards using spaced repetition.
The AWS shared responsibility model defines the division of security responsibilities between AWS and the customer. AWS is responsible for the security OF the cloud, covering physi...
Identity in AWS is managed primarily through IAM, which supports two principal identity types. An IAM user is a permanent identity with long-lived credentials, while an IAM role is...
The foundational compute service is EC2, whose instance types are grouped by workload into families such as General Purpose (M, T), Compute Optimized (C), Memory Optimized (R, X),...
AWS Lambda is the serverless compute layer at the heart of many event-driven workloads. Each invocation runs inside an execution context, a runtime environment that hosts the funct...
Amazon S3 is the object storage workhorse of AWS. It provides strong read-after-write consistency for all GET, PUT, LIST, and DELETE operations, so applications no longer need to h...
Every AWS workload runs inside an Amazon VPC, a logically isolated virtual network with a CIDR-defined IP range, subnets, route tables, gateways, and security rules you control. A...
For managed NoSQL, DynamoDB offers single-digit millisecond performance with built-in security, backup, and multi-region replication. Its primary keys come in two flavors: a partit...
For operations and auditing, AWS CloudTrail records every API call in the account, including identity, time, source IP, and request and response details, and stores the events in S...