AWS Cloud Engineer: Free Skill Evaluation

What Is Cloud Computing? Traditional Data Center vs Cloud Cloud Benefits Cloud Risks IaaS PaaS SaaS Serverless Public cloud Private cloud Hybrid Multi-cloud concepts Region Availability Zone Edge location Local infrastructure concepts Filesystem Directories Files Permissions Users Groups Linux Commands Read Write Execute Chmod Chown Ps Top Kill System processes Service management Service Start Stop Restart Enable Status System logs Application logs Journal Troubleshooting Ping Curl Wget Nslookup/dig concepts Ss/netstat concepts Traceroute concepts Variables Conditions Loops Commands Scripts OSI / TCP-IP Awareness IPv4 Private IP Public IP CIDR Subnetting Public Subnet A Public Subnet B Private App A Private App B Private DB A Private DB B Destination Next hop Route table SSH HTTP HTTPS PostgreSQL MySQL A AAAA CNAME Alias concepts TTL Inbound Outbound Stateful Stateless Nat AWS account Root user MFA Billing Support Account recovery User Group Role Policy Iam Policies Allow & Deny Least Privilege EC2 Lambda Applications Cross-account access Iam Identity Center Mfa Rotation Storage Risks Avoiding static credentials Read-only access to one S3 bucket Delete Installation Profiles Authentication JSON output Filtering concepts Cloudshell Cli Automation Instance AMI Instance family CPU Memory Networking General purpose Compute optimized Memory optimized Storage optimized Accelerated computing concepts On-Demand Spot Reserved Instance concepts Savings Plans concepts Instance type Key pair Subnet Security group User Data Ec2 Metadata Security Amis Elastic Ip Block storage Volume types Attachment Persistence Snapshots Backup Restore Encryption Lifecycle concepts Efs Ebs Vs Efs Vs S3 Bucket Object Key Object storage Frequently accessed Infrequent access Archival tiers Intelligent tiering concepts S3 Versioning S3 Lifecycle Bucket policy IAM Public access block Presigned URLs Same-region concepts Cross-region concepts Private bucket Lifecycle Versioning Presigned access Logging concepts VPC Routes Public Subnet Private Subnet Internet Gateway Nat Gateway Route Tables Security Groups Network Acls Security Group Vs Nacl Vpc Peering Transit Gateway Vpc Endpoints Aws Privatelink Load Balancing Target Groups Health Checks Tls Termination Launch template Auto Scaling Group Min Desired Max Request count Custom metric concepts Monitoring Health checks Scaling Hosted zone Records Routing concepts Simple Weighted Latency concepts Failover Geolocation awareness S3 Load balancer API Cache Behavior Invalidation Origin Access Aws Certificate Manager Managed databases DB engines Availability Backups MariaDB SQL Server Oracle awareness Multi-Az Read Replicas Rds Backups Rds Snapshots Security groups Secrets Managed relational architecture Availability concepts Table Item Partition key Sort key Access patterns GSI LSI concepts On-demand Provisioned concepts Ttl RDS Aurora DynamoDB Redis/Valkey-style caching concepts Memcached concepts Event Function Runtime Handler Timeout Environment variables EventBridge Queue Lambda Concurrency Cold Starts Serverless Security API endpoints Routing Authorization Throttling Lambda integration Producer Consumer Visibility timeout Retention Retries Dead-Letter Queues Fifo Queues Amazon Sns Event bus Events Rules Targets Scheduled events Event-Driven Architecture Failures Branching Image Container Dockerfile Registry Multi-Stage Builds Minimal images Non-root concepts Secret handling Scanning Amazon Ecr Cluster Task definition Task Aws Fargate Control plane concepts Node Pod Deployment Configmaps & Secrets Startup Readiness Liveness Resource Requests/Limits Kubernetes Scaling Managed control plane Worker/node concepts EKS networking awareness IAM integration Load balancer concepts Logs Upgrades Node health Workload health Session Manager Run Command Parameter Store concepts Patch Manager concepts Automation concepts Metrics Alarms Dashboards CPUUtilization Latency Errors Custom Metrics Log Groups Log Insights Cloudwatch Alarms Cloudtrail Principal Action Time Source Aws Config Config Rules Traces Spans Context Distributed Observability Identity Network Data Detection Response Encryption keys Data encryption Rotation concepts Database passwords API credentials Git User data Parameter Store At Rest In Transit Aws Waf Aws Shield Amazon Guardduty Security Hub Inspector Public bucket Open SSH Wildcard IAM policy Plaintext secret Unencrypted database Organization Accounts Organizational units Multi-Account Strategy Service Control Policies Control Tower Awareness Centralized Logging Infrastructure As Code Foundation Provider Resource Data source Variable Output Terraform Workflow State Remote state State security Locking concepts Terraform Modules Dev Test Staging Production Private keys Sensitive state publicly Public/private subnets NAT ALB EC2/ASG CloudWatch Template Parameters Resources Outputs Stacks Change Sets Terraform Vs Cloudformation Aws Cdk Awareness Repository Branch Commit Pull request Code review Security Cost Blast radius Naming Tagging Ci/Cd Foundation Github Actions Aws Codebuild Codepipeline Deployment Approval Application Infrastructure Database changes Functions JSON API calls List EC2 Stop instances Analyze tags Find unencrypted resources Untagged EC2 Unencrypted volume Public S3 configuration Open security group Event-Driven Operations Restore testing Aws Backup Rpo & Rto Backup & Restore Pilot Light Warm Standby Multi-Site / Active-Active concepts RPO RTO Complexity Eliminate single points of failure Automate recovery Test recovery Scale horizontally where appropriate Multi-Region Awareness Failure Injection Concepts Operational Excellence Reliability Performance Efficiency Cost Optimization Sustainability Security risks Reliability gaps Performance issues Cost waste Operational weaknesses Service pricing concepts Data transfer costs Compute costs Storage costs Cost Explorer Aws Budgets Right-Sizing Savings Plans Reserved Capacity Concepts Storage Cost Optimization Performance Idle EC2 Unattached volumes NAT usage Data transfer Overprovisioned DB Logs retention Throughput Saturation Concurrency Compute Database Disk Cache Auto Scaling Strategy CloudFront ElastiCache Application-level caching concepts Alert response Deployments Incidents Maintenance Incident Management SEV-1 SEV-2 Impact Timeline Root cause Contributing factors Mitigation Corrective action Prevention Certificate renewal Alerts Escalation Handover Communication Fatigue-aware alert design Instance state Route SG NACL OS firewall Target health Port Endpoint Credentials Database state IAM policy Explicit deny Encryption permissions Organization policy Downstream API VPC networking Initialization Health Secret Configuration New services Logging Identify Contain Audit Remediate Prevent Cloud Security Incident Assess Mobilize Migrate Optimize Rehost Replatform Refactor Retain Retire Repurchase/replace concepts Database Migration Awareness Storage Migration VPN Direct Connect awareness DNS Site-To-Site Vpn Direct Connect Reusable infrastructure Golden templates Self-service provisioning Automation Governance Devsecops Policy As Code Awareness Observability SLI SLO SLA Error Budget Awareness Amazon Bedrock awareness Private connectivity concepts KMS Quotas Cost controls Data access Network isolation Auditing