COURSE / REAL PRACTICE
Cloud infrastructure fundamentals
Map a tiny API onto compute, network, identity and storage; validate an explained local infrastructure plan before provisioning.
Read the explanation and diagrams, then work through the practice. Your browser profile supplies your saved progress.
What you’ll work toward
Produce an explained tiny-API plan with two-zone compute, private application/database tiers, scoped workload identity, secret references, backups, monitoring, cost drivers and teardown. Validate local fixtures without a cloud account; inspect an explicitly optional AWS networking lab.
Read an explanation, inspect the diagrams and work through the available checks, debugging exercises and builds. Feedback and prerequisite links guide the next step.
Before you start
This course builds on these skills:
Individual lessons can add prerequisites. Your lesson progress shows your actual readiness.
A look inside the first lesson
Map application needs to service categories
workloads=[("api","stateless HTTP"),("notes","relational records"),("exports","object blobs")]
for name,need in workloads:
print(name, "needs", need)
print("process-local files are not a recovery plan")Your lesson sequence
Follow the same units and lessons in either view. Prerequisite links and your practice progress stay with each lesson.
Place the application and its traffic
- LESSON 01.01
Map application needs to service categories
Choose compute, relational storage and object storage from explicit state/access requirements.
Open lesson - LESSON 01.02
Place replicas and explain failure domains
Model region and zone losses without claiming that duplicate processes guarantee service availability.
Open lesson - LESSON 01.03
Separate routes from allowed network flows
Check TCP ingress sources and ports while keeping routing, IPv4/IPv6 and stateful return traffic distinct.
Open lesson
Identity, configuration and operations
- LESSON 02.01
Give each workload a narrow identity
Evaluate exact principal/action/resource grants with explicit deny precedence in a documented teaching subset.
Open lesson - LESSON 02.02
Separate configuration from secret values
Validate nonsecret runtime values and secret/role references without fetching credentials.
Open lesson - LESSON 02.03
Plan recovery, monitoring, costs and teardown
Compare backup interval with RPO, restore budget with RTO and account for monitoring, retained costs and teardown.
Open lesson