Module · DevOps Engineer

AWS

Identity, storage and compute — the AWS primitives behind everything.

5 topics6 interactive tasks

Tool Deep-Dive Available

View full architecture diagrams, CLI cheatsheets, and production gotchas.

Open Amazon Web Services (AWS) Hub ↗

TOPIC 01

Identity & Access

Who are you on AWS, and what are you allowed to do?

What you'll practice

Verify Your AWS Identity — guided · beginner

A command you'll meet

aws sts get-caller-identity

Open any task below to get the full step-by-step walkthrough — every command is explained, and the lab validator checks what you actually built.

Hands-On Tasks in This Topic (1)

beginner

Guided Task

Verify Your AWS Identity

Before touching any AWS service, always confirm who the CLI is acting as. Misconfigured credentials are the #1 cause of 'why can't I access anything'.

Environment: aws-cli (lab profile)Launch Lab ⚡

TOPIC 02

S3 — Object Storage

Buckets, objects and naming rules.

What you'll practice

Create a Bucket and Upload an Object — practice · beginner

A command you'll meet

aws s3 mb s3://learner-demo-bucket

Open any task below to get the full step-by-step walkthrough — every command is explained, and the lab validator checks what you actually built.

Hands-On Tasks in This Topic (1)

beginner

Practice Task

Create a Bucket and Upload an Object

S3 is the storage everything else leans on: backups, static sites, Terraform state, ML datasets. Create a bucket, upload a file into it and list what's inside.

Environment: aws-cli (lab profile)Launch Lab ⚡

TOPIC 03

EC2 — Virtual Machines

Launch, describe and terminate instances.

What you'll practice

Launch an EC2 Instance — guided · beginner

A command you'll meet

aws ec2 run-instances --image-id ami-0abcdef1234567890

Open any task below to get the full step-by-step walkthrough — every command is explained, and the lab validator checks what you actually built.

Hands-On Tasks in This Topic (1)

beginner

Guided Task

Launch an EC2 Instance

EC2 is AWS's virtual machine service. Launch an instance from an AMI, confirm it's running, then terminate it — the full lifecycle in one task.

Environment: aws-cli (lab profile)Launch Lab ⚡

TOPIC 04

Object Uploads

Put real files into S3 — build artifacts, reports and backups.

What you'll practice

Upload a Build Artifact — practice · beginner

A command you'll meet

aws s3 cp ~/build-report.txt s3://learner-build-artifacts/build-report.txt

Open any task below to get the full step-by-step walkthrough — every command is explained, and the lab validator checks what you actually built.

Hands-On Tasks in This Topic (1)

beginner

Practice Task

Upload a Build Artifact

Every CI run produces things worth keeping — test reports, build logs, binaries. Write a build report to disk, create a bucket for artifacts and upload the file with aws s3 cp.

Environment: aws-cli (lab profile)Launch Lab ⚡

TOPIC 05

IAM & Least Privilege

Give every identity exactly the permissions it needs - and rotate the keys it holds.

What you'll practice

Write a Least-Privilege IAM Policy — practice · intermediate
Document a Key Rotation Runbook — challenge · advanced

A command you'll meet

aws sts get-caller-identity

Every request you make is a request somebody signed. Open the task below for the full walkthrough.

Hands-On Tasks in This Topic (2)

intermediate

Practice Task

Write a Least-Privilege IAM Policy

AdministratorAccess is not a starting point. Write a policy that grants exactly two S3 read actions on one bucket and nothing else.

Environment: ubuntu:24.04Launch Lab ⚡

advanced

Challenge

Document a Key Rotation Runbook

Keys outlive the people who created them. Write the script that creates a replacement key, deploys it and revokes the old one - in that order.

Environment: ubuntu:24.04Launch Lab ⚡