AWS & DevOps SYLLABUS

Main Topics:

• Introduction to Cloud Computing
• Basic of Networking
• Basic of Linux Admin
• AWS – Solution Architect Associate
  • VPC (Virtual Private Cloud)
  • Network Security
  • EC2 Cloud Compute Services
  • Elastic Block Store
  • VPN, Route 53 & End Points
  • Storage & Content Delivery
  • Identify Access Management
  • Monitoring
  • Auto Scaling & Elastic LoadBalancer
  • Databases
  • Multiple AWS Services and Managing the Resources’ Lifecycle
  • Migration
  • Serverless Functions
  • Elastic Beanstalk
  • CloudFormation

DevOps Tools:

• Git/GitHub
• Jenkins / Maven
• Docker
• Ansible
• Terraform
• Kubernetes
• Prometheus/Grafana

AWS DevOps Services:

• AWS Code Build
• Code Pipeline
• Code Commit
• Code Deploy
• Lambda Functions

Objectives of the Topics:

Introduction to Cloud Computing

• Understand the basic concepts and characteristics of cloud computing.
• Identify the different cloud service models (IaaS, PaaS, SaaS).
• Explain the benefits and challenges of cloud adoption.
• Gain an overview of public, private, and hybrid cloud models.

Basics of Networking

• Grasp fundamental networking concepts, including IP addressing, subnets, and routing.
• Understand the function of network components such as routers, switches, and firewalls.
• Learn basic network configurations and how they support cloud infrastructures.
• Comprehend essential networking protocols and their roles in data transfer.

Basics of Linux Administration

• Develop foundational skills in Linux command-line interface (CLI) navigation.
• Perform essential administrative tasks such as file management, user permissions, and process control.
• Understand how to install and manage software packages on a Linux system.
• Configure basic network settings and manage services on Linux servers.

AWS – Solution Architect Associate

• Understand AWS Fundamentals
• Architect Scalable and Resilient Solutions
• Cost Optimization
• Security and Compliance
• Implementation and Deployment
• Data Management and Storage
• Monitoring and Optimization
• Application Integration
• Exam Preparation

DevOps Tools

• End-to-End Pipeline Automation
• Cross-Platform Expertise
• Scalability and Efficiency
• Team Collaboration and Best Practices
• Monitoring and Feedback

AWS DevOps Services

• Understand the concepts and principles of DevOps and how they align with cloud development.
• Learn how to set up and configure AWS DevOps projects.
• Manage version control using Git and GitHub integrated with AWS DevOps.
• Build and deploy CI/CD pipelines using AWS Pipelines.
• Implement infrastructure as code (IaC) with tools like Terraform and CloudFormation templates.
• Monitor and maintain CI/CD processes to ensure efficient and secure software delivery.

Course Flow in Detailed

Introduction to Cloud Computing

• What is cloud computing?
• History of cloud
• Different vendors for Cloud
• Cloud main objectives
• IaaS overview
• PaaS overview
• SaaS overview
• Why AWS Cloud
• Features of AWS cloud

Basic of Networking

• What is Networking
• IP address Basic
• Classess of IP
• Subnetting
• Public / Private IP
• Natting/Patting
• IP V6 Implementation

Basic of Linux Admin

• Introduction to UNIX & LINUX
• Installation of Linux
• Access the command line
• Manage files from the command line
• Advanced File Permissions
• Disk Partitioning and Mounting File System

AWS – (Solution Architect Associate)

1. Design Secure Architectures

1.1 Secure Access to AWS Resources

• AWS Identity and Access Management (IAM): Users, Groups, Roles, Policies
• Multi-Factor Authentication (MFA) and Best Practices
• AWS Organizations and Service Control Policies (SCPs)
• AWS Directory Services: AD Integration and Entra ID Support
• Securing APIs with Amazon API Gateway

1.2 Application Security

• AWS Web Application Firewall (WAF) and AWS Shield
• Security Groups and Network Access Control Lists (NACLs)
• Data encryption at rest and in transit (KMS, S3 Encryption)
• Secrets Management with AWS Secrets Manager and Parameter Store

1.3 Secure Network Architectures

• Virtual Private Cloud (VPC) Basics: Subnets, Route Tables, Gateways
• Implementing Bastion Hosts and NAT Gateways
• VPC Peering and Transit Gateway
• VPN and AWS Direct Connect for Hybrid Cloud

2. Design Resilient Architectures

2.1 Highly Available and Fault-Tolerant Architectures

• Multi-AZ Deployments for EC2 and RDS
• Elastic Load Balancing (ELB) and Auto Scaling
• Global Architectures with Route 53 and AWS Global Accelerator
• S3 Replication and Cross-Region Solutions

2.2 Highly Available and Fault-Tolerant Architectures

• Disaster Recovery Strategies: Pilot Light, Warm Standby, Multi-Site
• AWS Backup Service and Lifecycle Management
• S3 Versioning and Glacier Deep Archive for Cold Storage
• DynamoDB Global Tables for Multi-Region Replication

2.3 Application and Data Decoupling

• Asynchronous Processing with Amazon SQS and SNS
• Application Integration with AWS Step Functions
• Event-driven architectures using AWS Lambda

3. Design High-Performing Architectures

3.1 Compute Optimization

• EC2 Instance Types and Right Sizing
• Lambda for Serverless Compute
• Containerized Applications with ECS and EKS
• Elastic Beanstalk for Application Deployment

3.2 Compute Optimization

• S3 Storage Classes (Standard, IA, One Zone-IA, Glacier)
• EBS Volumes: General Purpose, Provisioned IOPS, Throughput Optimized
• Amazon FSx for File Storage
• Amazon EFS for Scalable File Storage

3.3 Database Optimization

• Amazon RDS: Multi-AZ and Read Replicas
• DynamoDB: Indexing, Streams, and Transactions
• Amazon Aurora and Global Databases
• ElastiCache for Caching Strategies

4. Design Cost-Optimized Architectures

4.1 Cost Management Tools

• AWS Cost Explorer and Budgets
• Reserved Instances, Savings Plans, and Spot Instances
• S3 Storage Class Analysis and Lifecycle Policies
• AWS Trusted Advisor for Cost Optimization

4.2 Design for Cost Optimization

• Right Sizing Compute Resources
• Serverless Architectures for Reduced Overhead
• Data Transfer Cost Minimization Strategies
• Content Delivery with Amazon CloudFront

Cloud Formation

1. Management Tools

1. Basic Concepts of CloudFormation
2. Practice Assignment: Cloud Formation

2. Deployment and Provisioning

1. CloudFormation: Terminology
2. CloudFormation: Structure of the template
3. CloudFormation: Working with Stacks
4. CloudFormation: Ref functions
5. CloudFormation: Parameters
6. CloudFormation: Init and User Data
7. CloudFormation: Creating Base templates
8. CloudFormation: Troubleshooting templates

5. AWS – Project Work

• Deploying a Multi-tier website using AWS EC2, Autoscaling & LoadBalancing with High Availability
• Deploy a Multi-tier website using CloudFormation Template
• A Capstone Project

6. DevOps Tools

1. Version Control with Git

Learning Objectives: Upon completing this module, you should be able to install GIT and work with remote repositories and perform management of files for small as well as large projects, execute branching and merging operation and will learn about various GIT commands in Git cheat sheet.

Topics:

• What is version control?
• What is Git?
• Why Git for your organization?
• Installing Git
• Working with Remote Repositories (GITHUB)
• Branching and Merging in Git
• Git-Merge-Conflicts-Rebase
• Rebase-Gitignore-stash
• Git stash & reset & revert
• Git workflows, Handling Detached head and undo
• Git tag, Recap, Best practice
• Git cherry pick and Git hooks

Hands On/Demo:

• GIT Installation, Version Control, branching and merging of code.
• Pulling and Pushing repositories from remote server (GITHUB)
• GITHUB – Branching and merging
• How to save the data in work dir for temp time and retrieve it
• Manage user access with approve workflow on GitHub during the push and pull request
• Git Hook Use Case: Enforcing Code Style Before Commit
• Git Cherry-Pick Use Case: Hotfix Across Multiple Branches

2. Terraform – IAAC

Topics:

• Understand infrastructure as code (IaC) concepts
• Understand Terraform’s purpose (vs other IaC)
• Terraform basics
• Use the Terraform CLI
• When to use terraform fmt to format code
• When to use terraform taint to taint Terraform resources
• When to use terraform import to import existing infrastructure into your Terraform state
• Terraform workflow
• Variables – input, output and locals
• Implement and maintain state
• Provisioners, 3 types with example
• Backend, state files, Terraform cloud
• Terraform Registry
• Best Practices
• Advance Topics
• Terraform for multi-cloud deployments.
  • Debugging and troubleshooting Terraform.

Real-World Projects:

• Hands-on projects — deploying a web application, setting up a CI/CD pipeline, or managing infrastructure across multiple environments

3. Containerization with Docker

Topics:

• Shipping Transportation Challenges
• Introducing Docker
• Understanding images and containers
• Running Hello World in Docker
• Introduction to Container
• Container Life Cycle
• Sharing and Copying
• Base Image
• Docker File
• Working with containers
• Publishing Image on Docker Hub

Hands On:

• LAB: Create and Implement docker images and containers
• LAB: Publish image on the docker hub
• LAB: Dockerfile implementation
• LAB: WAR file in tomcat Container
• LS – Jenkins – Docker – Pipeline
• LS – Jenkins – DockerCompose – Pipeline

Use Case:

Create Shell script to:

• Git clone the java code.
• Build the package for java code using maven.
• Build docker image with copying the *.WAR file to the image.
• Create container for the above image with port mapping.

4. Containerization with Docker: Ecosystem and Networking

Topics:

• Introduction to Docker Ecosystem
• Docker Compose
• Docker Swarm
• Managing Containers
• Running Containers
• Introduction to Docker Networking
• Network Types
• Docker Container Networking

Hands On:

• LAB: Use Docker Compose to create a WordPress site
• LAB: Start Containers on a Cluster with Docker Swarm
• LAB: Manage Containers locally using Kitematic UI, Managing Container through Docker UI
• LAB: Docker Compose — Python Script + REDIS
• LAB: Docker Swarm setup using terraform code and deploying docker-compose in the cluster

5. Containerization using Kubernetes

Topics:

• Introduction to Kubernetes and Minikube (Tool)
• Installing Kubernetes
• Container Orchestration / Container Management using Kubernetes
• Managing Workloads in Kubernetes (ReplicaSets and Deployments)
• Overview of Services
• Volume Management, Storage Classes
• Auto-scaling
• Load-Balancing using Ingress
• Deploying and scaling an application using Minikube locally
• Configuration maps
• Secrets mgmt.
• Statefulsets
• Setup Kubernetes Cluster – 3 node

Hands On:

• Lab: Set up Minikube
• Lab: Install Kubernetes using kubeadm or Minikube
• Lab: Deploy a simple application Nginx
• Lab: Scaling and deployment of Docker Application using Kubernetes
• Lab: Expose an application using Kubernetes services
• Lab: Persistent storage using Kubernetes Volumes
• Lab: Ingress controller setup and usage
• Lab: Full application deployment (Python + Redis + Nginx)
• Lab: Stateful application deployment with StatefulSets
• Lab: Using terraform setup the Kubernetes Cluster – 3 node

Use Case:

Deploy a full application stack using Minikube that includes:

• A web front-end
• A back-end API
• A database service (MongoDB) using StatefulSets
• Use ConfigMaps and Secrets for configuration management
• Expose services using Ingress with load balancing
• Implement auto-scaling and persistent storage for the database

6. Continuous Integration using Jenkins

Learning Objectives: Upon completing this module, you should be able to understand the importance of Continuous Integration, learn about Jenkins and Maven by building and deploying codes using Jenkins and Maven, also perform automation tests and build Delivery Pipelines.

Topics:

• What is CI
• Why CI is Required
• Introduction to Jenkins (With Architecture)
• Introduction to Maven
• Jenkins Management
  • Global Configuration
  • Plugins
  • Roles Based Authentication
• Test Automation (with Maven)
• Securing Jenkins
• Notification System
• Building Delivery Pipeline
• Master and Slave concepts
• Build Setup

Hands On:

• Build the master and Slave nodes and run the Jobs on the Slave
• Build and automation of Test using Jenkins and Maven and deploy in the container
• Build the complete pipeline by invoking top level Maven project
• Jenkins with GITHUB integration as a pipeline script
• Configure Jenkins with basic configuration and roles and responsibility for the users

7. Configuration Management with Ansible

Learning Objectives: Upon completing this module, you should be able to install Ansible on your machine, write Ansible Playbooks, execute ad-hoc commands using Ansible and differentiate Ansible and Puppet.

Topics:

• Introduction to Ansible
• Ansible Installation
• Configuring Ansible Roles
• Write Playbooks
• Executing adhoc command
• Implementing Ansible
• Implement Ansible Tower
• Hands On/Demo:
• Installing Ansible
• Configuring Ansible Role
• Write Playbooks
• Execute Ad-Hoc commands

8. Continuous Monitoring with Nagios

Topics:

• Introduction to Continuous Monitoring
• Introduction to Nagios
• Installing Nagios
• Understanding Nagios Configuration Files
  • nagios.cfg: The main configuration file.
  • objects/hosts.cfg: Configuration for hosts.
  • services.cfg: Configuration for services.
  • contacts.cfg: Notification settings.
• Nagios Plugins (NRPE) and Objects
• Nagios Commands and Notification
• How to customize plugins
• Setup advanced notifications and escalations
• Setup SNMP monitoring
• View Performance data visualization
• Configure and manage distributed monitoring

Hands On:

• LAB: Install and configure Nagios Core on a Linux server (with web interface)
• LAB: Add a Linux host and basic service monitoring (e.g., ping, HTTP, disk space)
• LAB: Set up email notification
• LAB: Set up and configure NRPE to monitor remote Linux/Windows hosts
• LAB: Set up advanced notification rules and escalation policies
• LAB: Integrate Nagios with tools like Grafana, or Slack

9. Continuous Monitoring with Prometheus

Topics:

• Introduction to Prometheus
• Prometheus Architecture
• Monitoring with Prometheus
• Scraping Metrics with Prometheus
• Prometheus YAML Configs and Node Exporter

Hands On:

• LAB: Learn how to set up Prometheus for monitoring applications and infrastructure.
• LAB: Learn how to set up Prometheus for monitoring applications and infrastructure.
• LAB: Understand Prometheus configuration files and set up Node Exporter for system monitoring.

10. Observability with Grafana

Topics:

• Introduction to Visualization with Grafana
• Installing Grafana on a Linux Server
• Grafana User Interface Overview
• Creating Grafana Dashboards
• Grafana with Docker

Hands On:

• LAB: Set up Grafana on a Linux server to start visualizing metrics.
• LAB: Learn how to set up Prometheus for monitoring applications and infrastructure.
• LAB: Deploy Grafana using Docker for a containerized setup.

7. AWS DevOps — Expert Level

1. SDLC Automation

1.1 Automate Code Pipelines

• Implementing CI/CD with AWS CodePipeline, CodeCommit, CodeBuild, and CodeDeploy
• Automating testing phases with CodeBuild and AWS CodeArtifact
• Integrating third-party tools like Jenkins, GitHub Actions, or GitLab
• Blue/Green and Canary Deployments

1.2 Manage Build and Deployment Systems

• Containerized application deployment with ECS, EKS, and Fargate
• Automating serverless deployments with AWS SAM and AWS Lambda
• Managing application packages with CodeArtifact and Elastic Beanstalk
• Automated rollback strategies in CI/CD pipelines

2. Configuration Management and Infrastructure as Code

2.1 Infrastructure as Code (IaC)

• Using AWS CloudFormation: Nested Stacks, Drift Detection, and StackSets
• Terraform: Writing HCL, state management, and provisioning AWS resources
• AWS CDK (Cloud Development Kit) for IaC with programming languages

2.2 Configuration Management

• Automating infrastructure configuration with AWS Systems Manager
• Using Ansible, Chef, or Puppet with AWS for configuration management
• Parameter Store and Secrets Manager for secure configuration

2.3 Hybrid and Multi-Region Deployments

• Automating infrastructure configuration with AWS Systems Manager
• Using Ansible, Chef, or Puppet with AWS for configuration management
• Parameter Store and Secrets Manager for secure configuration

3. Monitoring and Logging

3.1 Centralized Monitoring and Alerts

• Implementing monitoring with Amazon CloudWatch (Metrics, Alarms, Logs, and Dashboards)
• Setting up CloudWatch Agent on EC2 instances for custom metrics
• Using AWS X-Ray for distributed tracing

3.2 Centralized Logging

• Aggregating logs with AWS CloudTrail and Amazon S3
• Implementing centralized log analysis with Amazon OpenSearch (formerly Elasticsearch)
• Integrating third-party monitoring tools like Prometheus, Grafana, or Splunk

3.3 Event-Driven Automation

• Automating responses with AWS Lambda and EventBridge
• Configuring proactive alerts using SNS and CloudWatch

4. Policies and Standards Automation

4.1 Governance and Security

• Implementing AWS Organizations for account management
• Enforcing guardrails using AWS Config and Service Control Policies (SCPs)
• Setting up and managing compliance audits with AWS Audit Manager

4.2 Governance and Security

• Securing pipelines with IAM roles, policies, and encryption
• Automating security checks using AWS Inspector and AWS Security Hub
• Scanning containers with Amazon ECR and third-party tools

5. Incident and Event Response

5.1 Disaster Recovery and Fault Tolerance

• Implementing RTO/RPO strategies with AWS Backup and S3
• Designing for high availability and disaster recovery using Route 53 and Global Accelerator
• Automated incident resolution with AWS Systems Manager (Runbooks)

5.2 Proactive Issue Mitigation

• Automating remediation using AWS Lambda
• Setting up EventBridge to manage operational events
• Auto-healing infrastructure with Auto Scaling and ECS

6. High Availability, Fault Tolerance, and Scalability

6.1 Disaster Recovery and Fault Tolerance

• Designing fault-tolerant architectures with Elastic Load Balancing and Auto Scaling
• Multi-region and multi-AZ architectures for resiliency
• Serverless design patterns with Lambda and Step Functions

6.2 Scalability Techniques

• Optimizing performance with AWS Global Accelerator and CloudFront
• Implementing scaling policies in Auto Scaling groups
• Scaling containerized workloads with Kubernetes (EKS) and ECS

7. Continuous Security and Compliance

7.1 Security in CI/CD

• Automating security testing using AWS CodePipeline integrations
• Performing static and dynamic code analysis with third-party tools
• Integrating security into IaC workflows (e.g., Terraform, CloudFormation)

7.2 Audit and Compliance Management

• Using AWS Config for compliance auditing
• Setting up automated compliance scans with AWS Trusted Advisor
• Understanding AWS Well-Architected Framework for operational excellence