Official docs outline
18 sections- IAM: Identity and Access Management
Users, roles, groups, policies (identity-based, resource-based, trust policies), least privilege, STS assume-role, permission boundaries, and cross-account access.
- VPC Networking
Virtual private clouds, subnets, route tables, internet and NAT gateways, security groups, network ACLs, VPC endpoints, peering, and Transit Gateway.
- EC2
Virtual machine instances, AMIs, instance types, EBS volumes, key pairs, Auto Scaling groups, user data, and purchasing options such as spot and reserved.
- S3
Object storage buckets and keys, storage classes, versioning, lifecycle rules, bucket policies, presigned URLs, encryption, and event notifications.
- Elastic Load Balancing
Application, network, and gateway load balancers, listeners, target groups, health checks, and TLS termination.
- Lambda
Serverless functions, event sources and triggers, execution environment, cold starts, concurrency, layers, versions and aliases, and execution roles.
- API Gateway
REST, HTTP, and WebSocket APIs, routes and integrations, stages, authorizers, throttling, and usage plans.
- ECS and Fargate
Container orchestration with clusters, task definitions, services, Fargate serverless compute, task roles, service discovery, and deployments.
- RDS
Managed relational databases, Multi-AZ, read replicas, backups and snapshots, parameter groups, Aurora, and encryption.
- DynamoDB
NoSQL tables, partition and sort keys, secondary indexes, capacity modes, single-table design, streams, TTL, and transactions.
- SQS
Message queues, standard vs FIFO, visibility timeout, dead-letter queues, long polling, and at-least-once delivery.
- SNS
Pub/sub topics, subscriptions, fan-out to SQS and Lambda, message filtering, and delivery retries.
- EventBridge
Event buses, rules and event patterns, targets, schedules, pipes, schema registry, and event-driven architecture.
- Step Functions
State machines in Amazon States Language, task/choice/parallel/map states, error handling and retries, and standard vs express workflows.
- CloudWatch
Metrics, alarms, logs and Logs Insights, dashboards, log groups, and observability of AWS resources.
- Secrets Manager
Storing and retrieving secrets, automatic rotation, KMS encryption, resource policies, and secret versioning.
- CloudFormation and CDK
Infrastructure as code with templates, stacks, change sets, drift detection, nested stacks, and the AWS CDK constructs that synthesize to CloudFormation.
- Well-Architected Framework
The pillars of operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability, with design principles and trade-offs.
Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.