Just wrapped up 37 important AWS hands-on tasks that every DevOps Engineer and Cloud Engineer should complete or at least understand. It took me 4 months to finish all of them. From networking, security, storage, databases, and monitoring to CI/CD, containers, serverless, and Kubernetes—every single task helped me build a deeper understanding of how AWS services work together in real-world environments. The biggest takeaway wasn’t learning individual services; it was understanding how to design, secure, automate, monitor, and troubleshoot complete cloud solutions. Every task was worth the effort, and the depth of knowledge gained is something no course or certification alone can provide. Now it’s time to go even deeper. 🚀 ✅ Built custom VPCs with Public/Private Subnets, Route Tables & Internet Gateways ✅ Configured VPC Peering and updated Route Tables for cross-VPC communication ✅ Connected multiple VPCs using Transit Gateway (TGW) ✅ Deployed NAT Gateways with Elastic IPs for secure outbound internet access from private subnets ✅ Created VPC Gateway & Interface Endpoints for private access to S3 and SSM ✅ Enabled VPC Flow Logs and stored network traffic logs in S3 ✅ Implemented Security Groups (stateful) and NACLs (stateless) for network security ✅ Automated AMI creation using HashiCorp Packer ✅ Created EC2 Launch Templates with bootstrap User Data scripts ✅ Deployed ALBs & NLBs with path-based routing and cross-zone load balancing ✅ Configured Auto Scaling Groups with CloudWatch-driven dynamic scaling ✅ Implemented Route 53 routing policies: • Failover • Latency-Based • Weighted • Geolocation ✅ Provisioned, formatted, and mounted EBS volumes on Linux EC2 instances ✅ Deployed EFS for shared storage across multiple EC2 instances ✅ Configured FSx Windows File Server integrated with Active Directory ✅ Hosted static websites on S3 with CloudFront CDN and ACM SSL certificates ✅ Mounted S3 buckets as local Linux directories using s3fs-fuse ✅ Implemented S3 Access Points with fine-grained IAM and Bucket Policies ✅ Created Lifecycle Policies to move old data to Glacier Deep Archive ✅ Deployed Multi-AZ RDS MySQL and loaded sample datasets ✅ Built Serverless APIs using Lambda, API Gateway, and DynamoDB ✅ Launched Redshift clusters, queried S3 datasets, and visualized insights with QuickSight ✅ Created IAM Users, Groups, Custom Policies & Permission Boundaries ✅ Implemented Cross-Account Access using IAM Roles and STS ✅ Integrated AWS Managed Microsoft AD with IAM Identity Center (SSO) ✅ Provisioned Amazon WorkSpaces VDI environments ✅ Configured AWS WAF Web ACLs and IP-based/Geo-based filtering ✅ Managed EC2 instances using Systems Manager Run Command & Parameter Store ✅ Installed CloudWatch Agent and configured custom monitoring & SNS alerts ✅ Automated remediation and snapshot scheduling with EventBridge & Lambda ✅ Tracked configuration changes using AWS Config ✅ Built end-to-end CI/CD pipelines with: Cloud9 → CodeCommit → CodeBuild → CodeDeploy → CodePipeline ✅ Performed Rolling & Canary Deployments using Elastic Beanstalk ✅ Containerized applications with Docker, pushed images to ECR, and deployed on ECS EC2 ✅ Deployed serverless containers using ECS Fargate ✅ Hosted React applications with AWS Amplify CI/CD ✅ Built Amazon EKS clusters and deployed multi-tier microservices applications #AWS #DevOps #CloudComputing #CloudEngineer #AWSSAA #Kubernetes #Docker #EKS #ECS #Terraform #LearningInPublic

Did super well at @NYTConnections today! (But to be a pedant, CodeCommit didn't stay deprecated.)

AWS — MASTER TREE AWS │ ├── 01. Cloud Foundations │ ├── What is Cloud Computing? │ ├── AWS Global Infrastructure │ ├── Regions │ ├── Availability Zones │ ├── Edge Locations │ └── Shared Responsibility Model │ ├── 02. Compute Services │ ├── EC2 │ ├── Lambda │ ├── ECS │ ├── EKS │ ├── Elastic Beanstalk │ └── Auto Scaling │ ├── 03. Storage Services │ ├── S3 │ ├── EBS │ ├── EFS │ ├── Glacier │ ├── Storage Classes │ └── Backup & Recovery │ ├── 04. Networking │ ├── VPC │ ├── Subnets │ ├── Route Tables │ ├── Internet Gateway │ ├── NAT Gateway │ └── Load Balancers │ ├── 05. Databases │ ├── RDS │ ├── Aurora │ ├── DynamoDB │ ├── ElastiCache │ ├── Redshift │ └── Database Migration Service │ ├── 06. Security & Identity │ ├── IAM │ ├── IAM Roles │ ├── Cognito │ ├── KMS │ ├── Secrets Manager │ └── Security Groups │ ├── 07. DevOps & Automation │ ├── CodeCommit │ ├── CodeBuild │ ├── CodeDeploy │ ├── CodePipeline │ ├── CloudFormation │ └── Systems Manager │ ├── 08. Monitoring & Observability │ ├── CloudWatch │ ├── CloudTrail │ ├── X-Ray │ ├── Config │ ├── Trusted Advisor │ └── Cost Explorer │ ├── 09. Data & AI Services │ ├── Athena │ ├── Glue │ ├── EMR │ ├── SageMaker │ ├── Bedrock │ └── OpenSearch │ ├── 10. Serverless Architecture │ ├── Lambda │ ├── API Gateway │ ├── DynamoDB │ ├── EventBridge │ ├── Step Functions │ └── SQS │ └── 11. Future of AWS ├── Generative AI ├── Agentic Workflows ├── Multi-Cloud ├── Edge Computing └── AI-Native Infrastructure Most people learn AWS services. Top cloud engineers learn how services work together. Follow: Ophir-Cloud Academy for more resources like this. _______________________________________________________________ 𝐃𝐞𝐯𝐎𝐩𝐬 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠, 𝐂𝐨𝐡𝐨𝐫𝐭 𝟓. If you're serious about becoming a world-class DevOps engineer in 2026, this is your path. ophircloud.com 𝐉𝐨𝐢𝐧 𝐭𝐨𝐝𝐚𝐲 👉docs.google.com/forms/d/1iqq…

AWS — MASTER TREE ☁️ AWS │ ├── 01. Cloud Foundations │ ├── What is Cloud Computing? │ ├── AWS Global Infrastructure │ ├── Regions │ ├── Availability Zones │ ├── Edge Locations │ └── Shared Responsibility Model │ ├── 02. Compute Services │ ├── EC2 │ ├── Lambda │ ├── ECS │ ├── EKS │ ├── Elastic Beanstalk │ └── Auto Scaling │ ├── 03. Storage Services │ ├── S3 │ ├── EBS │ ├── EFS │ ├── Glacier │ ├── Storage Classes │ └── Backup & Recovery │ ├── 04. Networking │ ├── VPC │ ├── Subnets │ ├── Route Tables │ ├── Internet Gateway │ ├── NAT Gateway │ └── Load Balancers │ ├── 05. Databases │ ├── RDS │ ├── Aurora │ ├── DynamoDB │ ├── ElastiCache │ ├── Redshift │ └── Database Migration Service │ ├── 06. Security & Identity │ ├── IAM │ ├── IAM Roles │ ├── Cognito │ ├── KMS │ ├── Secrets Manager │ └── Security Groups │ ├── 07. DevOps & Automation │ ├── CodeCommit │ ├── CodeBuild │ ├── CodeDeploy │ ├── CodePipeline │ ├── CloudFormation │ └── Systems Manager │ ├── 08. Monitoring & Observability │ ├── CloudWatch │ ├── CloudTrail │ ├── X-Ray │ ├── Config │ ├── Trusted Advisor │ └── Cost Explorer │ ├── 09. Data & AI Services │ ├── Athena │ ├── Glue │ ├── EMR │ ├── SageMaker │ ├── Bedrock │ └── OpenSearch │ ├── 10. Serverless Architecture │ ├── Lambda │ ├── API Gateway │ ├── DynamoDB │ ├── EventBridge │ ├── Step Functions │ └── SQS │ └── 11. Future of AWS ├── Generative AI ├── Agentic Workflows ├── Multi-Cloud ├── Edge Computing └── AI-Native Infrastructure Most people learn AWS services. Top cloud engineers learn how services work together. ☁️🚀

AWS — MASTER TREE ☁️ AWS │ ├── 01. Cloud Foundations │ ├── What is Cloud Computing? │ ├── AWS Global Infrastructure │ ├── Regions │ ├── Availability Zones │ ├── Edge Locations │ └── Shared Responsibility Model │ ├── 02. Compute Services │ ├── EC2 │ ├── Lambda │ ├── ECS │ ├── EKS │ ├── Elastic Beanstalk │ └── Auto Scaling │ ├── 03. Storage Services │ ├── S3 │ ├── EBS │ ├── EFS │ ├── Glacier │ ├── Storage Classes │ └── Backup & Recovery │ ├── 04. Networking │ ├── VPC │ ├── Subnets │ ├── Route Tables │ ├── Internet Gateway │ ├── NAT Gateway │ └── Load Balancers │ ├── 05. Databases │ ├── RDS │ ├── Aurora │ ├── DynamoDB │ ├── ElastiCache │ ├── Redshift │ └── Database Migration Service │ ├── 06. Security & Identity │ ├── IAM │ ├── IAM Roles │ ├── Cognito │ ├── KMS │ ├── Secrets Manager │ └── Security Groups │ ├── 07. DevOps & Automation │ ├── CodeCommit │ ├── CodeBuild │ ├── CodeDeploy │ ├── CodePipeline │ ├── CloudFormation │ └── Systems Manager │ ├── 08. Monitoring & Observability │ ├── CloudWatch │ ├── CloudTrail │ ├── X-Ray │ ├── Config │ ├── Trusted Advisor │ └── Cost Explorer │ ├── 09. Data & AI Services │ ├── Athena │ ├── Glue │ ├── EMR │ ├── SageMaker │ ├── Bedrock │ └── OpenSearch │ ├── 10. Serverless Architecture │ ├── Lambda │ ├── API Gateway │ ├── DynamoDB │ ├── EventBridge │ ├── Step Functions │ └── SQS │ └── 11. Future of AWS ├── Generative AI ├── Agentic Workflows ├── Multi-Cloud ├── Edge Computing └── AI-Native Infrastructure Most people learn AWS services. Top cloud engineers learn how services work together. ☁️🚀

I wonder if Jeff B *knew* something when aws walked back on winding down codecommit and resumed its offering...

ラーメン屋で有名な(?)長嶋さんのLTです！ CodeCommitリポジトリに対してKiroでコードレビューは、ぜひやってみたいです！ #jawsug_kyoto

#jawsug #jawsug_kyoto CodeCommitでInspectorとか使えないけど、 KiroのHeadlessモード使って、CodeCommitからCodeBuildからLambdaでKiroを動かしてスキャン

久々にCodeCommit触ったらこれでハマった docs.aws.amazon.com/ja_jp/co… #jawsug_kyoto #jawsug

ほぉ〜、蘇りサービスCodeCommit！ #jawsug_tokyo

5/21にJAWS-UG新潟プチキャッチアップ2026#20開催。気になる記事。DynamoDB API互換のOSSアダプタExtendDB登場。他、CodeCommit、生成AIを使った不具合調査、生成AIのセキュリティ設定、DevOps Agent、Security Agent、Kiro Web等お話し。 #jawsug #jawsug_niigata

#jawsug_niigata JAWS-UG 新潟 プチキャッチアップ 2026 #20 DynamoDB ExtendDB DynamoDBとの違い CodeCommitの復活 AWS DevOps Agent AWS Security Agent

やっぱりCodeCommitが最強のGitサービスってことやな！

CodeCommitからGitLabに移行する時にプッシュ先間違えて本番ブランチに直接コミットしてしまったわ、2025年12月の移行作業で慌ててたのが原因、リモート設定の確認とブランチ保護ルールは移行前に必須だった

GitHub、codecommitはサービス、GitLabやGiteaはGitHubに似た物をローカルに作れるソフトウェアです。

gitは変更履歴を管理する仕組み github、gitlab、codecommitは リモートリポジトリとかissueとか gitの仕組みを管理、拡張する？ 間違ってたら恥ずかしい🫣

AWSワールドなら便利です！EC2ならcodecommitでもいい気はします…

Do you really understand what @Linus__Torvalds created ? Most developers think “GitHub” is Git. But here’s the interesting part 👇 Git is the actual engine. GitHub is just a platform built on top of it. Which means when you run: git add . git commit git push those commands are NOT GitHub commands. They’re Git commands. And that’s exactly why the same commands work on: • GitHub • GitLab • Bitbucket • Azure DevOps • AWS CodeCommit • Gitea • thousands of internal enterprise platforms Because all of them use the Git engine underneath. Most “Git platforms” are basically: → Git server → Auth system → Repo permissions → Pull requests → UI/dashboard → CI/CD → Collaboration layer The actual version control logic still comes from Git. There ARE some non-Git version control systems too: • Subversion (SVN) • Mercurial • Fossil • Perforce Helix Core These have their own engines & commands. But Git became the industry standard. And the craziest part? You can literally build your OWN GitHub. Because Git itself is open source. If you can build: • authentication • repository management • a web UI • collaboration features …you can create your own Git hosting platform on top of the Git engine. That’s why so many developer startups exist today 👀

CodeCommit復活の事例をAppRunner民とAppMesh民が頼りにしている... #jawsug #jawsug_ct