Full-Stack & Cloud Architecture AWS Master: Well-Architected, Serverless & Security
AWS 6 Pillars, 3-tier VPC networking, ECS Fargate, Lambda, Aurora, DynamoDB, IAM evaluation logic, KMS encryption, and SQS messaging.
Curriculum Roadmap & Learning Path
5 StagesPart 1: Intro, Architecture & Well-Architected Framework (1 - 5)
5 QuestionsWhat is Cloud Computing, and how is the AWS Global Infrastructure structured (Regions, Availability Zones, and Edge Locations)?
Give a candid walkthrough of your hands-on experience designing, provisioning, and deploying production workloads on AWS, and how you apply the Well-Architected Framework.
Describe a severe production outage or bottleneck you resolved on AWS.
How do you decide between deploying an application on EC2, ECS (Fargate), EKS, or serverless Lambda?
How do you approach AWS cost monitoring and FinOps optimization?
Part 2: Networking, VPC & Traffic Routing (6 - 20)
15 QuestionsDesign a secure VPC for a 3-tier web application (Web, App, Database).
How many IP addresses does AWS reserve in each subnet CIDR block?
Security Groups (stateful) vs Network ACLs (stateless).
Internet Gateway vs NAT Gateway vs NAT Instance.
VPC Peering vs AWS Transit Gateway vs PrivateLink.
ALB vs NLB vs GWLB.
ALB target health checks and Connection Draining (Deregistration Delay).
Elastic IP (EIP) vs Standard Public IP.
VPC Flow Logs analysis.
VPC Endpoints: Gateway vs Interface Endpoints.
Amazon Route 53 Routing Policies.
Route 53 Alias Record vs CNAME Record.
Site-to-Site VPN vs AWS Direct Connect (DX).
AWS Global Accelerator vs CloudFront.
Egress-Only Internet Gateway.
Part 3: Compute, Containers & Serverless (21 - 35)
15 QuestionsEC2 Instance Families & Graviton.
EC2 Pricing Models comparison.
EC2 Placement Groups: Cluster vs Spread vs Partition.
EBS-backed vs Instance Store-backed instances.
EC2 Auto Scaling Policies.
AWS Lambda Execution Model & Firecracker.
Lambda Cold Starts & Mitigation Strategies.
Lambda Hard Resource Limits.
Lambda Event Source Mapping (ESM).
Lambda in VPC without cold start penalty (Hyperplane ENIs).
ECS vs EKS: Operational trade-offs.
AWS Fargate trade-offs.
Amazon ECR container security.
AWS App Runner.
AWS Step Functions: Standard vs Express Workflows.
Part 4: Storage, Content Delivery & Databases (36 - 50)
15 QuestionsS3 vs EBS vs EFS.
S3 Storage Classes and Lifecycle Rules.
How S3 achieves 99.999999999% (11 9s) durability.
S3 Security Mechanisms.
S3 Multipart Upload.
S3 Versioning, Object Lock, and MFA Delete.
CloudFront Edge Locations & Regional Edge Caches.
CloudFront Signed URLs vs Signed Cookies.
CloudFront Functions vs Lambda@Edge.
Amazon RDS: Multi-AZ vs Read Replicas.
Amazon Aurora Architecture.
Aurora Serverless v2.
DynamoDB Single-Table Design.
DynamoDB GSI vs LSI.
DynamoDB Streams.
Part 5: Security, IAM, Messaging & Enterprise Deployments (51 - 65)
15 QuestionsAWS Shared Responsibility Model.
IAM User vs Group vs Role vs Policy.
IAM Policy Evaluation Logic.
IAM Instance Profiles.
AWS Organizations & Service Control Policies (SCPs).
AWS KMS Envelope Encryption.
Secrets Manager vs SSM Parameter Store.
Amazon SQS vs Amazon SNS.
SQS Standard vs FIFO Queues.
SQS Dead-Letter Queue (DLQ).
Amazon EventBridge.
CloudWatch vs CloudTrail.
Zero-Downtime Deployments on AWS.
CloudFormation vs AWS CDK vs Terraform.
Disaster Recovery Strategies: Cost vs RTO/RPO.