AWS ANS-C01: Network Firewall and Centralized Inspection
AWS Network Firewall can protect one VPC directly or become part of a centralized inspection architecture that filters traffic across many VPCs and…
Read article03 / THE LATESTFresh thinking
From the editorial desk.
New technical explainers, certification perspectives and practical ideas.
AWS ANS-C01: IPv6 Architecture in AWS VPCs
IPv6 in Amazon VPC is not simply “more addresses.” It changes how workloads are numbered, how internet egress is controlled, how IPv4-only dependencies…
Read articleAWS ANS-C01: Hybrid Connectivity Troubleshooting
Hybrid AWS outages are difficult because the failure can sit in several administrative domains at once: an on-premises router, a Direct Connect virtual…
Read articleAWS ANS-C01: BGP Design for AWS Direct Connect
AWS Direct Connect gives an organization a dedicated path into AWS, but Border Gateway Protocol determines whether that path behaves the way the…
Read articleAWS ANS-C01: Application Networking with VPC Lattice
Amazon VPC Lattice moves an important networking problem above the subnet-and-route-table layer: how clients discover and reach application services across VPCs and accounts…
Read articleAWS DOP-C02: Operational Automation with Systems Manager
AWS Systems Manager is most useful when it becomes the operating layer for a fleet rather than a collection of one-off console tools.…
Read articleAWS DOP-C02: CloudFormation for Reliable Infrastructure as Code
AWS CloudFormation turns infrastructure definitions into managed stacks, but reliable infrastructure as code requires more than storing a template in version control. Teams…
Read articleAWS DOP-C02: Event-Driven Operations with EventBridge
Amazon EventBridge is often described as a serverless event bus, but its operational value comes from turning changes in AWS systems and applications…
Read articleAWS DOP-C02: CloudWatch Observability for Distributed Applications
Distributed applications fail in ways that single-server monitoring cannot explain. A user request may cross a load balancer, container service, Lambda function, queue,…
Read articleAWS DOP-C02: Deployment Strategies with CodeDeploy
AWS CodeDeploy automates application deployment across Amazon EC2 and on-premises instances, AWS Lambda, and Amazon ECS, but the important architectural decision is not…
Read articleAWS DOP-C02: CI/CD with CodePipeline and CodeBuild
AWS CodePipeline and AWS CodeBuild solve different parts of continuous delivery. CodePipeline models the release workflow as stages and actions, while CodeBuild provides…
Read articleAWS SAA-C03: Well-Architected Tradeoffs in Real Systems
The AWS Well-Architected Framework is most useful when it is treated as a way to reason about tradeoffs, not as a checklist that…
Read articleAWS SAA-C03: SQS, SNS, and EventBridge Architecture Patterns
Amazon SQS, Amazon SNS, and Amazon EventBridge are all used to move work between systems, but they solve different integration problems. SQS stores…
Read articleAWS SAA-C03: S3 Storage Classes and Lifecycle Design
Amazon S3 storage classes are not simply a list from fastest to cheapest. Each class encodes assumptions about access frequency, retrieval speed, resilience…
Read articleAWS SAA-C03: Securing S3 with Block Public Access and Bucket Policies
Amazon S3 security is not a single bucket-policy problem. Access can be influenced by identity policies, bucket policies, access points, object ownership, encryption…
Read article