AWS
Amazon Web Services (AWS) is the world most popular, powerful and distributed IaaS and PaaS cloud platform with enterprise capabilities.
Start here
- AWS with Terraform: The Essential Guide (21 parts)
Tutorials (71)
- Docker & Rancher Desktop Tutorials
Push Docker Images from Rancher Desktop to Amazon ECR
Create an Amazon ECR repository with Terraform, log in with the AWS CLI and push images built in Rancher Desktop with docker or nerdctl, for ECS and EKS.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: Terraform CI/CD (21)
Automate Terraform and OpenTofu on AWS with GitHub Actions: checks on every pull request, plan comments, approved applies and OIDC without keys.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: Terraform Tools (20)
The essential tools for Terraform and OpenTofu: fmt, validate, TFLint, Trivy, Checkov, terraform-docs, Infracost and pre-commit hooks.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: Terraform Backends (19)
Store the Terraform or OpenTofu state in an encrypted, versioned S3 bucket with native state locking, and migrate the local state to it.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: Terraform Modules (18)
Refactor the AWS network of the tutorial into a reusable Terraform module with variables and outputs, without recreating any resource.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS Load Balancers (16)
Use Terraform to create an Application Load Balancer with a target group, listeners and HTTPS in front of an Auto Scaling group on AWS.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS Auto Scaling (15)
Use the Terraform aws_launch_template and aws_autoscaling_group resources to run a self-healing, scalable group of EC2 instances on AWS.
- Terraform & OpenTofu Tutorials
AWS VPC Peering and Transit Gateway with Terraform
Connect AWS VPCs with Terraform or OpenTofu using VPC peering for simple cases or a Transit Gateway for many networks, with routes and a comparison of costs.
- AWS Tutorials
Build an AWS AMI with Packer and Use It in Terraform
Install Packer, build a custom Ubuntu AMI with a shell provisioner, tag it and look it up in Terraform to launch EC2 instances that boot ready to serve.
- Terraform & OpenTofu Tutorials
Terraform lifecycle: prevent_destroy, create_before_destroy, ignore_changes
How to use the Terraform and OpenTofu lifecycle block: prevent_destroy, create_before_destroy, ignore_changes, replace_triggered_by and conditions.
- Terraform & OpenTofu Tutorials
Terraform import, moved and removed Blocks: Refactor Without Destroying
How to import existing AWS resources into Terraform or OpenTofu, rename them with moved blocks and stop managing them with removed blocks, without downtime.
- AWS Tutorials
jq Cheat Sheet: Process AWS CLI and kubectl JSON Output
Install jq and learn the filters you need for AWS CLI and kubectl JSON: select fields, filter arrays, build new objects, group, count and use shell variables.
- Terraform & OpenTofu Tutorials
Terraform -replace, taint and -target: Recreate or Limit Resources Safely
How to force Terraform and OpenTofu to recreate a resource with -replace (the replacement for taint), when to use -target and how to avoid its risks.
- Terraform & OpenTofu Tutorials
AWS IAM Roles and Policies with Terraform and OpenTofu
How to create IAM roles, policies, instance profiles and assume-role trust relationships with Terraform or OpenTofu, following least privilege, with AWS examples.
- AWS Tutorials
Test Terraform Locally with LocalStack: S3, SQS and DynamoDB Without an AWS Account
Run LocalStack in Docker, point the AWS CLI and the Terraform AWS provider to it and create S3, SQS and DynamoDB resources locally for free, fast tests.
- Terraform & OpenTofu Tutorials
Terraform and OpenTofu with GitHub Actions and AWS OIDC (No Access Keys)
Run Terraform or OpenTofu plan on pull requests and apply on merge with GitHub Actions, authenticating to AWS with OIDC and short-lived credentials.
- Terraform & OpenTofu Tutorials
AWS S3 Buckets with Terraform and OpenTofu: Secure Configuration
Create secure AWS S3 buckets with Terraform or OpenTofu: public access block, encryption with KMS, versioning, lifecycle rules and bucket policies.
- Terraform & OpenTofu Tutorials
terraform-aws-modules: Create a VPC and EKS Cluster with the Official Community Modules
How to use the popular terraform-aws-modules (vpc, iam, s3-bucket, eks) from the Terraform and OpenTofu registry: versions, inputs, outputs and a VPC plus EKS example.
- Terraform & OpenTofu Tutorials
Terraform Multi-Region and Multi-Account AWS with Provider Aliases
How to deploy to several AWS regions and accounts from one Terraform or OpenTofu configuration using provider aliases, assume_role, modules and for_each on providers.
- Terraform & OpenTofu Tutorials
AWS Lambda and API Gateway with Terraform: Serverless HTTP API
Deploy a serverless HTTP API with an AWS Lambda function, IAM role, CloudWatch logs and API Gateway HTTP API using Terraform or OpenTofu.
- Terraform & OpenTofu Tutorials
AWS SQS and SNS with Terraform: Queues, Topics and Dead-Letter Queues
Create AWS SQS queues with dead-letter queues, SNS topics and subscriptions with Terraform or OpenTofu, including encryption and the access policy for fan-out.
- Terraform & OpenTofu Tutorials
Common Terraform and OpenTofu Errors and How to Fix Them
Fix the most common Terraform errors: state lock, provider version, cycle, invalid count, already exists, access denied, credentials and failed apply on AWS.
- Terraform & OpenTofu Tutorials
AWS VPC Endpoints and PrivateLink with Terraform: Private Access to AWS Services
Create gateway and interface VPC endpoints with Terraform or OpenTofu to reach S3, DynamoDB and other AWS services privately and reduce NAT gateway costs.
- Terraform & OpenTofu Tutorials
Automate AWS with EventBridge Scheduler and Lambda: Stop and Start EC2 on a Schedule (Terraform)
Automate AWS tasks with Terraform: schedule a Lambda function with EventBridge Scheduler to stop and start tagged EC2 instances and save costs outside working hours.
- Terraform & OpenTofu Tutorials
AWS Organizations and Multi-Account Setup with Terraform
Design and create a multi-account AWS landing zone with Terraform or OpenTofu: AWS Organizations, OUs, accounts, service control policies and cross-account roles.
- Terraform & OpenTofu Tutorials
Terraform depends_on and Resource Dependencies Explained
How Terraform builds its dependency graph, the difference between implicit and explicit dependencies, when to use depends_on, and how to fix dependency cycles.
- Terraform & OpenTofu Tutorials
AWS KMS and Secrets Manager with Terraform: Encrypt and Store Secrets
Create KMS keys with rotation and policies, and store and read secrets in AWS Secrets Manager and SSM Parameter Store with Terraform or OpenTofu, safely.
- Terraform & OpenTofu Tutorials
AWS Security Monitoring with Terraform: CloudTrail, GuardDuty, Config and Security Hub
Enable AWS security services with Terraform or OpenTofu: an organization CloudTrail, GuardDuty, AWS Config and Security Hub, with encrypted log storage.
- Terraform & OpenTofu Tutorials
AWS CloudWatch Alarms, Logs and Dashboards with Terraform
Monitor AWS with Terraform or OpenTofu: log groups with retention, metric filters, CloudWatch alarms that notify through SNS, and a dashboard.
- Terraform & OpenTofu Tutorials
Static Website on AWS with S3, CloudFront and ACM using Terraform
Host a static website on AWS with a private S3 bucket, CloudFront with Origin Access Control, an ACM certificate and Route 53, using Terraform or OpenTofu.
- Terraform & OpenTofu Tutorials
Terraform Provisioners and EC2 user_data: When to Use Each (and Alternatives)
How Terraform provisioners (local-exec, remote-exec, file) work, why they are a last resort, and how to use EC2 user_data, cloud-init and Ansible instead.
- Terraform & OpenTofu Tutorials
AWS DynamoDB Tables with Terraform: Keys, Indexes, TTL and Autoscaling
Create AWS DynamoDB tables with Terraform or OpenTofu: partition and sort keys, global secondary indexes, on-demand or provisioned capacity, TTL, backups and encryption.
- AWS Tutorials
AWS Three-Tier Web Architecture: Reference Design with Terraform
A reference architecture for a highly available three-tier web application on AWS: VPC, ALB, EC2 auto scaling and RDS, with the Terraform modules to build each layer.
- Terraform & OpenTofu Tutorials
AWS Systems Manager Session Manager with Terraform: SSH Without Open Ports
Connect to EC2 instances without SSH keys, bastion hosts or open port 22 using AWS Systems Manager Session Manager, configured with Terraform or OpenTofu.
- Terraform & OpenTofu Tutorials
Terraform and OpenTofu Interview Questions and Answers (with AWS Examples)
The most common Terraform and OpenTofu interview questions for DevOps and cloud roles, with short answers on state, modules, lifecycle, secrets, AWS and CI/CD.
- Terraform & OpenTofu Tutorials
Terraform for_each vs count: Which One to Use and Why
Learn the difference between the Terraform and OpenTofu count and for_each meta-arguments, with AWS examples, and why for_each avoids destroying resources.
- Terraform & OpenTofu Tutorials
Terragrunt with OpenTofu: Keep Your Configuration DRY
What Terragrunt is and how to use it with OpenTofu or Terraform to avoid repeating backend and provider code across environments, with a complete AWS example.
- Terraform & OpenTofu Tutorials
Terraform Data Sources and terraform_remote_state with AWS Examples
How to read existing infrastructure with Terraform data sources and share values between configurations with terraform_remote_state or SSM Parameter Store.
- Terraform & OpenTofu Tutorials
Terraform Dynamic Blocks: Generate Nested Blocks from Variables
How to use dynamic blocks in Terraform and OpenTofu to generate repeated nested blocks such as security group rules, with for_each, iterator and AWS examples.
- Terraform & OpenTofu Tutorials
Terraform vs CloudFormation vs CDK vs Pulumi: Which IaC Tool for AWS?
Compare Terraform/OpenTofu, AWS CloudFormation, AWS CDK and Pulumi for AWS infrastructure: language, state, multi-cloud, drift, learning curve and when to choose each.
- AWS Tutorials
AWS CLI Cheat Sheet: Profiles, SSO, S3, EC2, IAM and Useful Queries
A quick reference for the AWS CLI: profiles and SSO, plus the most used commands for S3, EC2, IAM, Lambda and logs, with --query and --output examples.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS Route 53 (DNS) (14)
Using the Terraform aws_route53_delegation_set, aws_route53_zone, and aws_route53_record resource blocks to configure DNS in AWS.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS RDS Instances (13)
Using the Terraform aws_db_instance resource block to configure, launch, and secure RDS instances.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS EC2 Instances (12)
How to use the Terraform aws_instance resource block to configure, launch, and secure EC2 instances.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS AMIs (11)
How to use the Terraform aws_ami data source to find the AMI (root volume template with an operating system) used to launch EC2 instances.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS Key Pairs (10)
How to configure and use the Terraform aws_key_pair resource to upload an SSH public key to AWS and use it for public key authentication on EC2 instances.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS Security Groups (9)
How to configure and use the Terraform aws_security_group and aws_security_group_rule resources to create AWS security groups and secure the infrastructure.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS Routing Tables (8)
How to configure and use the Terraform aws_route_table, aws_route, and aws_main_route_table_association resource blocks to create and manage AWS Routing Tables.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS NAT Gateway (7)
How to configure and use the Terraform aws_nat_gateway and aws_eip resources to create NAT Gateways and Elastic IPs for the private subnets of a VPC.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS Internet Gateway (6)
How to configure and use the Terraform aws_internet_gateway resource block to create an AWS Internet Gateway that gives a VPC access to the Internet.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS Subnets (5)
How to configure and use the Terraform aws_subnet resource block to create and manage AWS Subnets inside a VPC.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS VPC (4)
How to configure and use the Terraform aws_vpc resource block to create and manage an AWS VPC (Virtual Private Cloud), step by step.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: Terraform AWS Provider (3)
How the Terraform and OpenTofu AWS provider authenticates to AWS, where to store the state and which provider source to use, before creating resources.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: AWS Basics (2)
AWS is the world’s leading cloud platform, used by startups and large enterprises.
- Terraform & OpenTofu Tutorials
AWS with Terraform Tutorial: Terraform Basics (1)
How to start building AWS infrastructure with Terraform: Terraform is an Infrastructure as Code (IaC) tool used to provision and manage infrastructure.
- AWS Tutorials
How to use Terraform, AWS, and Ansible Together
How to use Terraform to create AWS infrastructure with tags, and Ansible with its dynamic inventory plugin to configure the servers, linked by the tags.
- Terraform & OpenTofu Tutorials
Generating and using AWS Key Pairs with Terraform or OpenTofu
Generation of an Ed25519 Key Pair for SSH Authentication on AWS Linux Machines and Uploading of Key Pairs with Terraform.
- Terraform & OpenTofu Tutorials
Terraform AWS EKS Cluster Deployment & Application Publishing through ALB
This how-to demonstrates how to use Terraform to create an AWS EKS cluster and deploy an application along with a Load Balancer on top.
- AWS Tutorials
How to Install AWS CLI V2
How to install the AWS CLI (Command Line Interface) to interact with Amazon Web Services through the command line.
- Terraform & OpenTofu Tutorials
Terraform AWS ECS Fargate Cluster Deployment & Docker Container Publishing
How-to use Terraform or OpenTofu to create an AWS ECS (Elastic Container Service) running in Fargate and deploy a Docker container.
- Terraform & OpenTofu Tutorials
How to Create AWS IAM users with Terraform & OpenTofu
Programmatically creating AWS users using IaC tools like Terraform & OpenTofu
- Terraform & OpenTofu Tutorials
Using a PGP Key Pair
Generation of a Pretty Good Privacy (PGP) Key Pair for automated AWS IAM user access key creation with Terraform.
- Terraform & OpenTofu Tutorials
How to disable AWS instance destroy with Terraform?
Techniques to prevent infrastructure destroy in Terraform by protecting selected instances and resources from being accidentally destroyed.
- Terraform & OpenTofu Tutorials
How to programmatically use your public Internet IP address in Terraform?
Obtain your public IP address and use it in Terraform to create AWS Security Rules.
- Terraform & OpenTofu Tutorials
Creating AWS RDS Database with Terraform (4/5)
Tutorial and source code explaining how to create and manage MariaDB (or MySQL) RDS database with Terraform in AWS.
- Terraform & OpenTofu Tutorials
AWS Route 53, AMI Lookup and EC2 Creation with Terraform (3/5)
Tutorial and source code explaining how to manage AWS Route 53 DNS Service, create and register EC2 instances and find an AMI with Terraform.
- AWS Tutorials
Creating AWS EC2 Instances and Security Rules with Terraform (5/5)
Tutorial and source code explaining how to manage AWS EC2 Instances and Security with Terraform.
- Terraform & OpenTofu Tutorials
AWS VPC Subnets, Routing Tables and Internet Access using Terraform (2/5)
Tutorial and source code explaining how to create and manage AWS networking with Terraform.
- AWS Tutorials
AWS VPC, Route 53, RDS MariaDB, EC2 using Ansible and Terraform (1/5)
Tutorial and source code explaining how to provision and configure a VPC, Route 53, RDS MariaDB, Instances and security groups using Ansible and Terraform…
- AWS Tutorials
Create an AWS IAM User for Demos
How to create AWS IAM users for programmatic access to the AWS Cloud API, to be used with Terraform / OpenTofu and Ansible demos.
- AWS Tutorials
Create an AWS Account for Demos
In order to run the examples presented in IT Wonder Lab you will need accounts in different cloud providers.
Best practices (9)
- Terraform & OpenTofu Tutorials
Estimate AWS Costs in Terraform Pull Requests with Infracost
How to see the monthly cost of Terraform and OpenTofu changes before applying them with Infracost, and how to keep AWS demo costs under control.
- AWS Best Practices
AWS Cost Optimization and FinOps: A Practical Checklist
How to reduce AWS costs: budgets, tagging, right-sizing, Savings Plans, NAT gateway and data transfer savings, storage lifecycle and automation with Terraform.
- Terraform & OpenTofu Tutorials
Terraform Secrets Management: Keep Passwords Out of Code and State
How to handle secrets in Terraform and OpenTofu: sensitive variables, AWS Secrets Manager, SSM, generated passwords, ephemeral values and state encryption.
- Terraform & OpenTofu Tutorials
Terraform Security Scanning with tflint, Checkov and Trivy
Find misconfigurations in Terraform and OpenTofu code before deploying: tflint for errors, Checkov and Trivy for AWS security issues, with CI examples.
- Terraform Best Practices
Terraform and OpenTofu Best Practices for AWS and the Cloud
A practical checklist of Terraform and OpenTofu best practices: state, modules, versions, security, CI/CD, naming, testing and cost control.
- Terraform Best Practices
How to Share Infrastructure in Multiple Terraform Projects?
Sharing infrastructure across multiple Terraform projects using Data Sources helps maintain consistency, reduce redundancy, and promote collaboration.
- AWS Best Practices
AWS Security Groups’ Best Practices
Best practices for AWS security groups, the virtual firewalls of EC2, RDS and other resources: naming, groups as sources, least privilege and rule descriptions.
- Terraform Best Practices
AWS and Terraform Naming Best Practices
Terraform and AWS resource naming should follow a company standard. Each company has different requirements and the standard should be adjusted.
- AWS Best Practices
AWS Tagging Best Practices
Effective infrastructure resource tagging can greatly improve management, IaC, monitoring and cost visibility in AWS.
Glossary and related tools (63)
AWS Management and Governance
AWS Organizations
AWS Organizations lets you manage many AWS accounts centrally: organizational units, consolidated billing and service control policies to set guardrails.
AWS Databases
AWS Aurora
Amazon Aurora is a MySQL and PostgreSQL-compatible relational database built for the cloud, with storage replicated across three Availability Zones.
AWS Security, Identity and Compliance
AWS WAF
AWS WAF is a web application firewall that filters HTTP requests with rules and managed rule groups to block SQL injection, XSS, bots and abusive traffic.
AWS Databases
AWS ElastiCache
Amazon ElastiCache is a managed in-memory data store and cache compatible with Valkey, Redis OSS and Memcached, for microsecond latency.
Infrastructure as Code
AWS CloudFormation
AWS CloudFormation is the native infrastructure as code service of AWS: describe resources in JSON or YAML templates and it manages them as stacks.
AWS Management and Governance
AWS Systems Manager
AWS Systems Manager (SSM) manages servers at scale: Session Manager shell access without SSH, Parameter Store, Patch Manager, Run Command and Automation.
AWS Networking and Content Delivery
AWS API Gateway
Amazon API Gateway is a managed service to create, publish, secure and monitor REST, HTTP and WebSocket APIs in front of Lambda functions and other backends.
AWS Application Integration
AWS SQS
Amazon Simple Queue Service (SQS) is a managed message queue that decouples the components of an application, with standard and FIFO queues.
AWS Application Integration
AWS SNS
Amazon Simple Notification Service (SNS) is a managed publish/subscribe service that sends messages to email, SMS, HTTP endpoints, SQS and Lambda.
AWS Management and Governance
AWS CloudTrail
AWS CloudTrail records the API calls and account activity in AWS, so you can audit who did what, when and from where, and investigate security incidents.
AWS Management and Governance
AWS CloudWatch
Amazon CloudWatch collects metrics, logs and events from AWS resources and applications, and offers dashboards, alarms and automated actions.
AWS Containers
AWS ECR
Amazon Elastic Container Registry (ECR) is a managed registry to store, scan and share Docker and OCI container images with ECS, EKS and Lambda.
AWS Containers
AWS EKS
Amazon Elastic Kubernetes Service (EKS) runs a managed, highly available Kubernetes control plane on AWS and integrates it with VPC, IAM and load balancers.
AWS Storage
AWS EFS
Amazon Elastic File System (EFS) is a managed, elastic NFS file system that many Linux EC2 instances, containers and Lambda functions can share.
AWS Databases
AWS DynamoDB
Amazon DynamoDB is a fully managed, serverless NoSQL key-value and document database with single-digit millisecond latency at any scale.
AWS Compute
AWS Lambda
AWS Lambda runs your code in response to events without servers to manage, and you pay only for the time the code runs. It is the core of AWS serverless.
AWS Security, Identity and Compliance
AWS Certificate Manager (ACM)
AWS Certificate Manager (ACM) issues, stores and automatically renews free public TLS certificates for load balancers, CloudFront and API Gateway.
AWS Security, Identity and Compliance
AWS Secrets Manager
AWS Secrets Manager stores, retrieves and automatically rotates database credentials, API keys and other secrets, encrypted with AWS KMS.
AWS Security, Identity and Compliance
AWS KMS
AWS Key Management Service (KMS) creates and controls the cryptographic keys that encrypt data in S3, EBS, RDS, Secrets Manager and many other AWS services.
AWS Networking and Content Delivery
AWS Regions and Availability Zones
AWS Regions are separate geographic areas, each made of several isolated Availability Zones. Choose them for latency, compliance, price and resilience.
AWS Networking and Content Delivery
AWS Elastic IP
An Elastic IP address is a static public IPv4 address that belongs to your AWS account and can be moved between instances or NAT Gateways.
AWS Networking and Content Delivery
AWS Route Tables
A route table contains the rules that decide where the network traffic of a VPC subnet is sent: the local network, an Internet Gateway, a NAT Gateway and more.
AWS Networking and Content Delivery
AWS Network ACLs
A network access control list (NACL) is a stateless firewall that allows or denies traffic at the subnet level of an AWS VPC, using numbered rules.
AWS Networking and Content Delivery
AWS Security Groups
A security group is a stateful virtual firewall that controls the inbound and outbound traffic of AWS resources such as EC2 instances and databases.
AWS Compute
AWS Auto Scaling
Amazon EC2 Auto Scaling keeps the right number of EC2 instances running, replaces unhealthy ones and adds or removes capacity as the load changes.
AWS Networking and Content Delivery
AWS Elastic Load Balancing (ELB)
Elastic Load Balancing (ELB) distributes incoming traffic across healthy targets in several Availability Zones: Application, Network and Gateway load balancers.
Infrastructure as Code
Packer
Packer is a HashiCorp tool that builds identical machine images, such as AWS AMIs and Docker images, from a single configuration file.
- Operating Systems and Virtualization
jq
jq is a command line JSON processor that filters, transforms and formats the output of APIs and CLIs such as the AWS CLI and kubectl.
- Cloud Platforms
AWS
AWS (Amazon Web Services) is the largest public cloud, managed as code with Terraform and OpenTofu through the aws provider and the AWS CLI.
Data and Storage
MySQL
MySQL is a widely used open source relational database, available as a managed engine in Amazon RDS and Aurora.
CI/CD and GitOps
LocalStack
LocalStack is a local emulator of AWS services that runs in a container, so you can test Terraform and applications without an AWS account.
AWS Application Integration
AWS Kinesis
Amazon Kinesis collects, processes and analyzes real-time streaming data: Data Streams, Data Firehose and Managed Service for Apache Flink.
AWS Application Integration
AWS Step Functions
AWS Step Functions is a serverless workflow service that coordinates Lambda functions and AWS services using state machines.
AWS Application Integration
AWS EventBridge
Amazon EventBridge is a serverless event bus that routes events from AWS services, SaaS applications and your own code to targets using rules.
Data and Storage
MariaDB
MariaDB is an open source relational database forked from MySQL, offered as a managed engine in Amazon RDS.
AWS Databases
AWS Redshift
Amazon Redshift is a managed, columnar data warehouse for large-scale SQL analytics, available as provisioned clusters or serverless.
AWS Analytics and AI
AWS Athena
Amazon Athena runs SQL queries directly on data stored in Amazon S3, without servers, and charges per amount of data scanned.
AWS Networking and Content Delivery
AWS Transit Gateway
AWS Transit Gateway is a regional network hub that connects VPCs, VPN connections and Direct Connect with transitive routing.
AWS Management and Governance
AWS Config
AWS Config records the configuration of AWS resources over time and evaluates them against rules for compliance and auditing.
AWS Security, Identity and Compliance
AWS Security Hub
AWS Security Hub aggregates security findings from AWS services and partners and checks accounts against standards such as CIS and AWS Foundational Best Practices.
AWS Networking and Content Delivery
AWS PrivateLink
AWS PrivateLink provides private connectivity between VPCs and AWS services or your own services using interface endpoints, without Internet access.
AWS Security, Identity and Compliance
AWS Cognito
Amazon Cognito provides user sign-up, sign-in and access control for web and mobile apps, with user pools and identity pools.
AWS Security, Identity and Compliance
AWS GuardDuty
Amazon GuardDuty is a managed threat detection service that analyzes CloudTrail, VPC flow and DNS logs to find compromised resources and attacks.
AWS Management and Governance
AWS Control Tower
AWS Control Tower sets up and governs a secure multi-account AWS environment (landing zone) with guardrails, account factory and centralized logging.
AWS Security, Identity and Compliance
AWS IAM Identity Center
AWS IAM Identity Center (formerly AWS SSO) gives people single sign-on access to multiple AWS accounts and applications with permission sets.
AWS Analytics and AI
AWS Bedrock
Amazon Bedrock is a managed service to build generative AI applications with foundation models from several providers through a single API.
AWS Analytics and AI
AWS Glue
AWS Glue is a serverless data integration service with a data catalog, crawlers and ETL jobs to prepare data for analytics.
Security
Public Key Authentication
A public key is a cryptographic key that is part of a key pair used for public key cryptography.
Configuration and Automation
Cloud-init
Cloud-init is a multi-distribution package that handles the early initialization of cloud instances.
AWS Networking and Content Delivery
AWS NAT Gateway
An AWS NAT Gateway is a managed service that allows instances in a private subnet to connect to the Internet while keeping them secure.
AWS Security, Identity and Compliance
AWS IAM
AWS Identity and Access Management (IAM) is a web service provided by Amazon Web Services (AWS) that enables users to securely control access to AWS…
AWS Networking and Content Delivery
Amazon CloudFront
Amazon CloudFront is a content delivery network (CDN) service provided by AWS.
AWS Networking and Content Delivery
AWS Route 53
Amazon Route 53 is a scalable and highly available Domain Name System (DNS) web service provided by Amazon Web Services (AWS).
AWS Databases
AWS RDS
AWS RDS is a fully managed service provided by Amazon Web Services (AWS) that simplifies the setup, operation, and scaling of relational databases in the cloud.
AWS Storage
AWS EBS
Block storage for persistent data for EC2 instances. Instance storage for the operating system uses EBS volumes.
AWS Networking and Content Delivery
AWS Internet Gateway
An AWS Internet Gateway is a component that facilitates communication between instances within an Amazon Virtual Private Cloud (VPC) and the Internet
AWS Containers
AWS Fargate
AWS Fargate is a serverless compute engine for containers that runs ECS and EKS workloads without managing servers or clusters of instances.
AWS Containers
AWS ECS
Amazon ECS is a fully managed container orchestration service to deploy, manage and scale Docker containers on EC2 instances or AWS Fargate.
AWS Networking and Content Delivery
AWS Subnets
AWS Subnets are segmented sections within an Amazon Virtual Private Cloud (VPC).
AWS Networking and Content Delivery
AWS VPC
An AWS VPC (Virtual Private Cloud) is a virtual network dedicated to an AWS account.
AWS Storage
AWS S3
Amazon S3 is a highly scalable and durable object storage service for data storage, backup, content distribution, archiving and cloud-native applications.
AWS Compute
AWS EC2
Amazon Elastic Compute Cloud (EC2) is a web service offered by Amazon Web Services (AWS) that provides resizable and scalable compute capacity in the cloud.
AWS Compute
AWS AMI
AWS AMI, or Amazon Machine Image, is a pre-configured virtual machine image used to create and launch Amazon Elastic Compute Cloud (EC2) instances