DevOps · Cloud · Security

Hands-on guides to cloud, networking and server security

Step-by-step tutorials in plain language, from real setups: launching a server on AWS, running your own VPN, hardening a Linux server.

Learning series

Ordered articles that teach a whole topic from the start, one part at a time.

Series · 29 of 29 parts published

Learn AWS from Scratch

An ordered series that walks you through Amazon Web Services: nine sections, from the fundamentals and permissions to servers, networking, storage, modern applications and security. Each part builds on the one before.

Latest articles

All articles
  1. Cost and Good Architecture

    The series finale. Where your money goes on the network, the tools that watch your bill, the Well-Architected Framework, building everything from a template with CloudFormation, Systems Manager, and where to go after this series, with a hands-on.

    Part 29 · Learn AWS from Scratch AWS Operations 10 min read

  2. Disaster Recovery and Migration

    What RPO and RTO mean, the four disaster recovery strategies and their cost, central backups with AWS Backup, moving databases with DMS and servers with AWS Transform MGN, and a hands-on where you delete data and bring it back.

    Part 28 · Learn AWS from Scratch AWS Operations 8 min read

  3. Encryption, Secrets and Threat Protection

    How KMS protects your keys, where to keep passwords with Parameter Store and Secrets Manager, free certificates from ACM, stopping attacks with WAF and Shield, and detecting threats with GuardDuty, Inspector and Macie, with a hands-on.

    Part 27 · Learn AWS from Scratch AWS Security 10 min read

  4. Advanced Identity: Organizations and Identity Center

    Managing many accounts with Organizations and SCPs, conditions in IAM policies, roles versus resource policies, permissions boundaries and how AWS makes a decision, single sign-on with Identity Center, and a hands-on simulating policies.

    Part 26 · Learn AWS from Scratch AWS IAM Security 9 min read

  5. Monitoring and Auditing: CloudWatch, CloudTrail and Config

    How do you know your application is healthy, who changed what, and whether your settings are still as they should be? Metrics, logs and alarms in CloudWatch, EventBridge, CloudTrail and Config, with a hands-on alarm that emails you.

    Part 25 · Learn AWS from Scratch AWS Operations 8 min read

Topics

Every article is filed under its topics, so you can get to what you need quickly.

  • AWS

    Amazon Web Services: servers, networking and access.

    30 articles
  • EC2

    Launching and managing virtual servers on AWS.

    6 articles
  • Security

    Hardening servers: firewalls, SSH and permissions.

    5 articles
  • Databases

    Managed databases, caching and choosing the right one for your data.

    4 articles
  • Linux

    Commands and configuration for Linux servers.

    4 articles
  • Networking

    DNS, content delivery, private networks and connecting them.

    4 articles
  • Operations

    Monitoring, disaster recovery, cost and running what you have built.

    3 articles
  • S3

    Object storage: buckets, storage classes, encryption and safe sharing.

    3 articles
  • IAM

    Managing users, groups and permissions on AWS.

    2 articles
  • Messaging

    Queues, notifications and streams that keep services apart.

    2 articles
  • High availability

    Load balancing, auto scaling and building fault-tolerant applications.

    2 articles
  • Serverless

    Running code and data without managing servers, paying for use.

    2 articles
  • Storage

    Disks, file systems and backups on AWS.

    2 articles
  • VPN

    Private, encrypted networks you control yourself.

    2 articles
  • AI

    Ready-made services for images, speech and text, and generative models on your data.

    1 article
  • Cloud computing

    Core cloud concepts: regions, availability and shared responsibility.

    1 article
  • Containers

    Packaging applications in containers and running them with ECS, Fargate and EKS.

    1 article
  • Data analytics

    Querying S3, data warehouses, dashboards and streams.

    1 article
  • WireGuard

    Setting up WireGuard and connecting devices to it.

    1 article

About the author

I'm Sultan Ayidh, a developer focused on infrastructure and security. I write up what I actually learn and run, in a way anyone can follow.

Visit my website