AWS Solution Architect Full Course 2026 [FREE] | AWS Solution Architect Tutorial 2026 | Simplilearn
Chapters19
Overview of cloud concepts, AWS core services and infrastructure, and a preview of the AI systems course and career opportunities. The chapter frames AWS fundamentals, services, security, CLI usage, EC2 basics, S3 security, and a plug for an AI-focused program.
A thorough, practical tour of AWS fundamentals for 2026: EC2, S3, IAM, VPC, CloudFront, ELB, autoscaling, and core security concepts with hands-on lab demos.
Summary
Simplilearn’s lengthy AWS fundamentals session walks you through the big-picture cloud picture and then drills into the core rolling gears of AWS. The host walks through why AWS dominates the market, and then nails down practical services such as EC2 (including instance types, EBS vs instance store, hibernation, and placement groups), S3 (storage classes, lifecycle rules, versioning, cross-region replication, and data access patterns), and IAM (users, roles, STS, and cloud-trail monitoring). You’ll see how VPCs are structured (regions, availability zones, subnets, route tables, NAT gateways, and NAT vs internet gateways), plus how to wire them to public internet access or private resources. The course also covers networking primitives like load balancers (Application/Network/Classic), autoscaling groups, and how CloudFront accelerates global content delivery via edge locations. Throughout, the instructor stitches theory to practice with lab-style walkthroughs: creating AMIs, launching EC2s, configuring security groups, setting up S3 buckets with versioning, and simulating cross-region and cross-account connectivity. If you’re prepping for the AWS Solutions Architect 2026 path, this session builds a solid foundation for real-world cloud architecture and certification readiness. The pace is dense, but the content is actionable, with frequent reminders about cost-models, security best practices, and practical tradeoffs between services. Expect a thorough, hands-on orientation that you can translate directly into exam prep and on-the-job design decisions.
Key Takeaways
- EC2’s pay-as-you-go model lets you launch instances in minutes and scale automatically with autoscaling groups based on CPU thresholds (for example, CPU > 70% for 5 minutes triggers an extra instance).
- S3 offers multiple storage classes (Standard, IA, One Zone-IA, Glacier, Deep Archive) with lifecycle rules to move data automatically across tiers for cost savings.
- IAM provides granular access control with users, groups, roles, and STS, enabling secure cross-account access without sharing credentials.
- VPC fundamentals include regions, availability zones, subnets (public and private), route tables, and NAT gateways to enable controlled internet access for private resources.
- CloudFront accelerates content delivery by caching at edge locations (700+ globally) and fetches from origin servers only when needed, reducing latency.
- ELB types (Application, Network, Classic) distribute traffic to multiple EC2 instances, with health checks and dynamic routing to maintain high availability.
- Hibernation for EC2 is possible but imposes constraints (encrypted EBS required, 60-day max inactivity before termination, and data on instance store is non-persistent).
Who Is This For?
Essential viewing for aspiring AWS Solution Architects and cloud engineers starting 2026 prep. Great for beginners who want a solid grounding in core services and for practitioners who need a practical lab-driven refresher on networking, security, and cost-aware design.
Notable Quotes
"Security groups are the virtual firewall at EC2 level."
—Intro to security perimeter controls in AWS and how SGs shape allowed traffic.
"The maximum range of IP addresses in a single VPC is 65,536."
—Crucial network capacity detail for planning VPCs and subnets.
"S3 is object storage and unlimited storage."
—Clarifies S3’s role and scalability for backups, logs, and archives.
"These database services are fully managed."
—Emphasizes AWS database services’ maintenance and operations—patching, updates, etc.
"Security groups are virtual firewall at EC2 level."
—Core security concept repeated to anchor how traffic is allowed/denied.
Questions This Video Answers
- How does AWS VPC peering differ from a Transit Gateway and when should I use each?
- What’s the practical difference between S3 Standard, IA, One Zone-IA, Glacier, and Deep Archive, and how do lifecycle rules automate this?
- How do I decide between using an Internet Gateway vs a NAT Gateway with private subnets in a VPC?
- What are the trade-offs between Application Load Balancer, Network Load Balancer, and Classic Load Balancer for a given workload?
- How does IAM role-based access and temporary credentials (STS) improve security in cross-account AWS deployments?
Full Transcript
[music] What if you could build applications, store unlimited data, scale systems globally, and secure everything without ever buying a single physical server? That is exactly what today's session is all about. Hello everyone and welcome back to this AWS fundamentals session. In this course, we are not just learning cloud concepts. We are understanding how modern organizations use cloud computing to build scalable, secure and cost-effective solutions. In the earlier sessions, we explored the fundamentals of cloud computing and how it differs from traditional IT infrastructure. We understood why businesses are moving to the cloud, the benefits of scalability, elasticity, and pay as you go pricing and how AWS has become the leading cloud platform in the industry today.
We also learned about AWS global infrastructure including regions availability zones and data centers and why selecting the right region is important for performance aability and compliance. Moving forward we covered core AWS services such as compute storage databases networking and security. We explored Amazon S3 for object storage classes life cycle policies and cross region replication. We also discussed database services like RDS, Django DB and Aurora. Understanding when to use relational and NoSQL databases. On the security side, we learned about AM users group rules and policies and how AWS identity and access management helps control permission securely.
We also introduced the AWS CLI for managing services through commands and automation. Then we moved into Amazon EC2 where we understood instances like storage options such as EBS and instance store pricing models such as on demand reserved spot and dedicated instances along with advanced concepts like placement groups metadata and hibernation. In addition, we covered elastic load balances, autoscaling groups, and how they helped achieve high availability, fault tolerance, and dynamic scaling based on application demand. Finally, we went deeper into S3 security and encryption. Exploring SSE, S3, SSE, KMS, and SSC C along with bucket policies, ACL and access control mechanism to secure data effectively.
By the end of the session, you will have a strong understanding of AWS core services and infrastructure, security, and scalability concepts that form the foundation for real world cloud architecture and AWS certification preparation. So before we get started, if you want to build a successful career in the future of AI, this is the perfect opportunity for you. The applied agentic AI system design and impact program by Microsoft and simply learn is a 10-week live program designed to help professionals master the next generation of intelligent AI systems. This course covers in demand topics like multi-agent systems, rag, MCP, planning systems, workflow automation and agentic frameworks giving you both technical knowledge and practical expertise with 40 plus demos, 10 plus guided practices, seven hands-on projects and one capstone.
You will build real world AI applications. You will also gain hands-on experience with top industry tools like Langchen, Crew AI, Autogen, Nitan and Langraph. Along with that, a joint certification from Microsoft and Simply Learn. The program provides monitoring live interactive sessions and career support. If you want to learn how to build AI systems that can think, plan, and act automatically, this is your chance to step into the AI native future. Hurry up and enroll now. The link given in the description box below and in the pinned comments. Before we move ahead, here is a quick quiz question for you.
And the question is which AWS service is primarily used for object storage and your options are option A EC2 option B RDS option C S3 and option DAM. Comment your answers below. Cloud computing is nothing but ondemand delivering IT resources over the internet. Right? So what kind of the what kind of a resources now power storage what you're doing in onremises environment that same thing you're going to use in cloud environment and that too user is going to not manage that user is going to access the resources like uh virtual servers virtual servers or a storage networking thing.
So user is not responsible to manage. Someone is there behalf of you they are managing just being a client or a user you are going to utilize the resources. Now let me take one simple example for cloud concept. Everyone is familiar with the electricity board right electricity board just being a user you are consuming the electricity in your houses or offices and what you are consuming based on that you are going to pay for it. You are going to pay for it. You are not going to maintain your infrastructure of this electricity board. You are not maintaining the infrastructure of electricity board.
Someone is there behalf of you. Someone is there to manage this. But just you are using the service of that electricity board. So like that cloud computing also you are using the service but someone is there to manage that. Right? So now folks do you have any idea what benefits I'll get if I'm using cloud computing? Any idea what the benefits I'll get if I'm using cloud computing cost optimization yes costs saving correct no upfront cost for resources very good Shivendra Singh very good Tanoagarwal no upfront cost scalability very good scalability is also one of the benefit and shall add one more so folks no need to think about the capacity also.
No need to think about the capacity, right? And the very important pay as you go model. Pay as you go model. How much you're using based on that you are going to pay for it and no need to think about the capacity. Automatically it will scale up and scale down when it is required. Many services are available ready to use. Yes. Yes. Dynamic hosting as per the requirement. Yes. less time to start an application. Exactly. So these are the some important benefits for cloud computing. Now, now the companies that provide these services are called cloud providers.
So folks, as per my knowledge, I know one of the cloud provider AWS. Do you know any other cloud providers in the market? GCP. Very good. Azure. Very good. GCP is a product of Google. Azure is a product of Microsoft, IBM, Oracle, Alibaba. Very good. These all are the cloud providers in the market. Now these services are accessible to the user over the internet. So always how you are using this cloud computing services by using the internet connectivity. So cloud provider ensure the large scale management of these services. So now this cloud provider they can deal with the large like a tier one company they can provide a solution for beginners that to what do you call startup even a cloud providers they provide a solution to individuals also right now what is AWS AWS stand for Amazon web services it's a leading cloud provider which offers over 200 100 ondemand cloud services.
These services are extended to individuals, companies, government based on a pay-per-use model. So now folks in AWS it provides more than 200 services that to for companies, individuals, government as peruse model. Now what like what are the features I'll get in AWS? Why should I go for AWS? What is the reason behind that? The first one is reliability. Folks, even if you have a huge amount of a data or a low amount of a data, always the performance will be consistent. Even when you have the huge amount of a data low amount of a data always the performance will be consistent and that to accurate also that to accurate also now scalability no need to think about the capacity because because when I'm getting a high traffic for my application automatically the resources will be increased when I'm getting a low traffic automatically the resources will be decreased that is the power of scalability in AWS environment now Security folks let us consider this is my AWS environment now and here we have different different level let us consider this is level one this is level two and this is level three now I'm providing some security group at level one I'm providing some knackl at like level two I'm providing some VPC flow log at level three so now if I want to make sure that my AWS environment should be secure at that time I'm providing a different level of a security within the environment cost effectiveness as you know that pay as you go model how much you are consuming based on that you are going to pay for it now what about the market trend folks if you talk about the market trend so average salary of AWS professional is like 1 lakh $60,000 right and there is a huge demand of AWS professional that to 60% of a cloud computing jobs which require the AWS related skill see even in the market you See there are lot of opportunities are available.
Lot of opportunities are available. There is only one condition. A person should be skillful. Person should be skillful. If you are obtaining a solution architect course, solution architect certification. That means once you complete this course, you are able to you are able to decide which particular service should be used in which situation, which option should be used in which situation. So being a solution architect, you know that. So once you'll get the grip on these services, once you'll get the grip on these knowledge, so 100% 100% you'll be hired in the market. Right now what are the skills we are going to cover in this particular certification?
Virtual private cloud, storage services, AWS secure security and IM identity and access management and finally container services. So now why should I go for this AWS solution architect course? What is the reason? Now now everyone heard all the organizations are migrating from onremises to cloud environment. Not only AWS I'm talking about the cloud environment right? So in every organization solution architect is required. See mighty you people like uh in the organization some of the people have the knowledge. Sir, I know that I know about the storage service. I know about the database service. I know about the comput service.
So, I can design the solution. No, that is not possible. If he's not if that person, he or she is not certified architect, then it's not possible. So, I know that I know that sir RDS. So, I'll design the RDS architecture. I don't have any that. See until and unless if you don't have that much of a depth knowledge about the designing the new car because being a solution architect you should know that in which situation you are going to use bus table class in which situation you are going to use standard class in which situation you are going to use general purpose.
So that you should understand there is one more uh option in memory in memory type that is also one of the strategy. So being a solution architect you should know that when should I use which particular option right might be you have the knowledge but do you think I can provide the optimized result? No. So the task of solution architect is providing a optimal solution that to secure high performance cost optimized architecture right and no doubt being a solution architect you are going to meet the requirements of current current and future business needs right what they are expecting today and even what they are expecting in future by considering that requirements you are going to design the architecture And see solution architect is not responsible to only review the new infrastructure new solutions.
Even being a solution architect let us consider the organization is already migrated to AWS. Now you can review that and provide the solution what I can like how I can improve the architecture. For example, I'm using in one of the EC2 instance T2.micro but you are working with a huge amount of a load. So I can suggest being a solution architect instead of t2.micro I can use t4.large to handle that much of a traffic this kind of a task this kind of a loopholes can be identified by only solution architects. Now learning part folks here in this course we have 10 modules you can say that modules or lessons both are fine.
So first course introduction core concepts compute and related features storage services VPC networking and content delivery then database security and IM serverless and application services monitoring and automation and finally container services. Now folks uh how you will define the infrastructure term just I'm talking about the infrastructure how you will define this as per your knowledge what is infrastructure creating any resources in AWS setup of services storage something that enables us to do some work hardware network DB setting up the resources platform with the operating system related software setup computer storage network how the things are accessible to us computer networking enabled resource system application hardware and networking software and hardware components.
Okay. Machine to define network and security platform on which ready to run the application infrastructure setup and they know environment to run the application. Okay. See uh I really appreciate I really appreciate all the participants those who are given the answers. Perfect. Almost all the answers are right. I really appreciate your efforts folks. Thank you so much for your valuable input. Almost all the answers are right. So now by considering yes still I'm getting all hardware and software inputting the networking setting of the computed database. Okay that's superb. So folks by considering your inputs let me explain in a single line and that to even easily everyone can understand right.
So folks can I say that infrastructure is nothing but can I say that a combination of Are you with me? Can I say that infrastructure is nothing but combination of hardware and software components. Right? So infrastructure is always the combination of software and hardware components. So now in AWS infrastructure if I talk the region is first point region. So what is region? Region is nothing but a geographical area where your AWS services are available. Again I'm repeating folks region is Right? So this is one region. Now do you know folks how many regions we have in AWS?
Any guesses? Any idea how many regions we have in AWS? Any idea how many regions we have? More than 20. No. No, no, no, no, no, no, no. Yes, Prashant. Exactly. Very good, Prashan. Total we have 37. Oh, oh, oh. Yes. Yeah. Uh, more than 20. Prashan. 37. It's 38. 38. Prashant like recently AWS has updated one more region AWS is recently updated one more region now it's 38 right so earlier yeah let me take first total folks 38 regions we have right I think recently within 2 to 3 days prashan this is updated 2 to 3 days or within a 1 week this is updated now it's 38 right now in AWS infrastructure we have 38 Eight regions and do you know folks how many availability sorry not availability zones how many regions we have in India any idea three no two one in Mumbai there are two regions are available the first one is Mumbai the first one is Mumbai and the second one is Hyderabad one is Hyderabad So let me tell you folks total 38 regions around the world and in India if you talk Mumbai and Hyderabad are the two regions right.
So as you know that regions are nothing but a geographical area in AWS a geographical area where AWS services are available. Now one more definition region is nothing but collection of two or more availability zones. or more availability zones. So folks, why it is two or more? What is the reason? Why not one or more? Why it is two or more? Why not one or more? for disaster for failure move to another. Exactly. See, see if one goes down, if one fails like disaster occur for this, so second and third, third is ready to provide the service.
So in simple terms for high availability for high availability always we have two or more availability zone in the reason fall tolerance correct for always we have two or more availability zone in a reason why to handle the disaster for fall tolerance for make sure that your data is highly available. Right? So folks if I talk about the availability zones now what is availability zones? Availability zones are nothing but collection of one or more data centers. Again I'm repeating folks what is availability zone. Now availability zones are nothing but uh what is that? Availability zones is nothing but collection of one or more data centers.
Right? Then what is data center now? What is data center now? Collection of thousands of servers. Are you with me folks? Are you with me? Now you can see first what is region? Region is nothing but a geographical area where you have the AWS services, right? And what is availability zone? Availability zones more data centers. Then what is data center? Data center is nothing but collection of thousands of servers right now. How many number of availability zones we have? Folks let me tell you earlier before September 1st before September 1st it was 117. Now if I talk about the infrastructure 120 availability zones we have let me tell you folks before September 1st like uh it's almost 6 days completed 37 regions along with 117 a now it's 38 regions 120 availability zone so recently launched region name is news the recently launched region name is news right so right now 120 availability zone, 38 regions.
And let me tell you folks, minimum two or more availability zones are always available, right? And maximum six availability zone in North Virginia. We have maximum six availability zones. We have a north Virginia right now. So I have one question folks. Do you know what is the distance between these two availability zones? What is the distance between these two availability zone? Any idea? 100 kilometers or more? That's superb. Exactly correct. So folks, it's a 60 mi. 60 m or 100 kilometer or more. So I have one more question folks. Why they are keeping 100 kilometer or more?
Why they are not keeping me within a 5 km or 10 km? Why? What is the reason? to avoid any natural disaster. Very good. Pre disaster recovery. Okay. Exactly. Shendra. See. Exactly. Very good. See if one of the availability zone affects if you keep within a 5 kilometers even that affect to the second also then there is no use then there is no use to maintaining the aes within the range. So that is the reason AWS has decided to keep this different availability zone 60 m or more than 100 kilometers always they maintain the distance right to avoid the disaster.
Correct. Exactly. Right. So folks, this is all about the basics of AWS. I hope it's clear to everyone. Can I get the quick information? I hope everyone clear with this a basics of AWS infrastructure. That's superb. Thank you everyone. Thank you so much for your quick responses. Thank you so much. Now in the next slide, you are going to see what I discussed just now here. Okay. AWS infrastructure as you know that it's a global cloud infrastructure that offers the unmatched security broadriach and reliability as a cloud platform it like it features over 200 services supported by data centers worldwide.
Now what is region? We talking about the region right? Region is correspondent to geographical area housing the multiple availability zones. Each availability zone comprises one or more separate data centers as I discussed in the first slide itself. Availability zones are nothing but the collection of a data center each equipped with the sufficient power network setup reliable connection within the distinct zones right that is the reason they are maintaining the distance between the two availability zone to maintain these data centers. Now what benefits I'll get if I'm using this particular AWS infrastructure what I'll get here.
So folks if I talk about the benefits of AWS in that the first one is scalability. So now folks, scalability is one of the major advantage of AWS infrastructure right AWS will provide a ability to quickly increase or decrease the resources to your application as their requirement as their need and even it enables your organization to manage the cost effectively while managing like while managing and maintaining the performance and efficiency performance as well as the efficiency. So now folks this particular feature is beneficial for the organization they experience a variable workload. Sometime the traffic is high sometime the traffic is low.
In that situation scalability will support more right now reliability. So folks when it come AWS has a strong track record strong track record that to if I talk about the architecture the architecture itself designed in a way that to deal with the disruptions and even it ensure the high availability and continuous functionality. What exactly it means? It mean that AWS can provide uh uninterrupted services even in the event of network failure or any natural disaster right now security folks in security you can say that it delivers the high level security through its firewall. So folks let me know what is firewall from your side.
What you uh what you have the knowledge about the firewalls. Do you know any do you know about the firewalls? If you are aware about this let me know the answer. Protective layer to pro protect the application server. Network security restricting incoming outgoing traffic. Very good. Reju to control the inbound and outbound traffic. Very good frame set of rules using network. Yes, Praep something control the access from the external sources similar to NS. Okay. So folks let me explain about the firewall. See uh I want to clarify one thing also as I got the input more than 90 90% participants are fresher right.
So that is the reason I'm explaining some of the new terms as I clearly specified I'm going to start from scratch that to basics to intermediate to expertise as per your input only I'm explaining the terms which are new to you people right. So why I'm explaining this? Don't think that sir is explaining two basic basic terms. Sir is explaining firewall also encryption is also sir is going with these two basic terms. There is a reason behind that what I got the input that is the reason I taken the input. More than 90% of the participants are fresher that is the reason I am explaining this basic terms also.
Right? So those who are already aware about that don't think that sir is taking too much basics. It's required to remaining 90%. That is the reason. Okay. Yeah. Uh what is firewall? Okay. In simple terms, what I got the input from you people, can I say that firewalls are nothing but filters? Are you with me? Can I say that firewalls are nothing but filters? Then I'll add which filters your incoming and outgoing traffic. Are See, I'm using simple terms. Even those who are from nontechnical background also they can easily understand right. What is firewalls? Firewalls are nothing but the filters which filters your incoming and outgoing traffic.
Right? Now the next term encryption. Any idea about encryption folks? Encryption. Any idea? SSL is one of the method one of the type of encryption. But what is encryption? Protection of data. Agree. Pranit. To change the data to unreadable format. Acceptable. Convert a data to non-readable format. Perfect. See if I talk about the technical definition for the encryption. Encryption is a process where I'm going to convert from plain text to cipher text. Converting from plain text to cipher text. It's a technical definition, right? Sir, I'm not understanding what is plain text and cipher text. Let me take a layer two, a level layer two definition.
Now, encryption is nothing but converting from encoding or doing the encoding and decoding. Sir, this is also not clear. Let me take one more definition. Uh level three definition. Folks, encryption is a process from readable form to non-readable form. Readable form to non-readable form. First converting plain text to cipher text encoding to decoding or sir these two also not yet then readable form to non-readable form this is third definition right so there are different uh definition finally the goal is same but I'm using more simple terms to understand clearly unreadable and not understandable text yeah readable and non-readable that is also fine Right?
Same thing readable or non-readable form. Now IM capabilities. So folks identity and access management by using the IM where you can decide who can access what that you are going to design by using IM services. Fine. Now next is performance efficiency. So let me tell you folks performance efficiency is one of the key attribute of AWS. Now it has the ability to run your services efficiently in a cloud platform. So now it can scale according to need of your traffic. So what it means? What it means? It can handle a high volume of a traffic without disining a performance and even it ensures the smoother operation and user can get a best experience.
Right? We will see IM is nothing but identity and access management. It provides a access control to AWS resources that we'll see after 1 hour again I'll revisit. Okay. Now flexibility. So AWS allows the selection of your preferred operating system, programming language and databases. So now AWS has given this authority to you people. So you can select your operating system. If you want a Windows operating system, you can go for it. Mac, Ubuntu, then uh Fedora. Which operating system do you want? You can select that. Then programming language you can go for.NET, Java, you can go for .NET, Java, Python, Ruby, Rails and even uh more more what do you call uh different runtime engines are available for us right now.
Cost optimization folks. Cost optimization is all about a pay as you go model. How much you are consuming it. Here cost optimization pay as you go model. How much you're consuming based on that you are going to pay for it. Right? Now here you can see in AWS infrastructure we are increasing the agility and decreasing the complexity and risk. Right? Accelerate time to market. So folks now you can see that right now in the market there is a trend everyone everyone only they are talking about the only one technology. What is that? Everyone is talking about only one technology in the market right now.
A IML a IML a IML right artificial intelligence and machine learning right NLP natural language processing. So now AWS is providing a solution to all kind of workloads and even what we are talking about the a IML artificial intelligence machine learning right. So now AWS has also provided some machine learning services artificial intelligence services like we have sea maker bedrock these are the services what we are using. So as for the market what market is expecting and that to what clients are expecting AWS is providing a solution to them right now they are talking about the A IML now they are talking talking about the NLP natural language processing right now they are talking about the different different kind of a things so as per the market trends and as per the client's request even AWS is providing a solution every day AWS is updating so what I got the what I got the information just now every AWS is updating itself like last week when I was taking the session it was 37 117 availability zone now September 1st AWS was released a new region called newsand right along with the three availability zone total 120.
Now let me tell you folks the upcoming region Saudi Arabia KSA and the Germany I think yeah KSA Saudi Arabia and I think one Germany they are planning within 2026 they are going to like they are going to launch the new two regions so every day AWS is updating the infrastructure even we don't know that's the reason sometime sometime in some of the trainings where it come for the counting like count values for example there is a concept called point of presence edge locations There are 700 plus I use the term because AWS is updating every day.
I know that this specific value is 740 but every day update is like every day updates are going on. That is the reason I clearly specify 700 plus might be it is 40 might be it is 50 might be it is 60 that is the reason that is the reason AWS is providing a solution to all the customers not only restricted to particular domain as per your requirements. Now everyone is talking about the AI ML we have the services called bedrock sega maker right so even they are providing a solution in the AWS environment now increase innovation folks when someone is managing your infrastructure when someone is managing your infrastructure behalf of you then you will get the sufficient time to think something innovative like what your client is given the requirement based on that you are satisfying the condition as per your client but what I can add something new where I can uh make my client happy.
So these are these are the features these are the features what I added from my end. So you will get some sufficient time to think something innovative things because your infrastructure will be managed by someone else and now being a developer you can think hey I can add this one I can do this one. So as per the client requirement if I add this so it will be very much helpful. So you will get a sufficient then scale seamlessly. What it means folks as I clearly see specified in the benefits no need to think about the capacity when you are expecting high traffic automatically it will be increased when you are getting low traffic automatically it will be decreased now how we are reducing the complexity and risk first optimizing cost as you know that pay as you go model how much we are consuming based on that we are going to pay for it then minimizing security vulnerabilities by providing by providing a security at different different different layer.
For example, this is at EC2 layer. Those who are aware about the terms they can understand. So right now no need to worry about these terms. So I'm giving now I'll give the security at EC2 level. I'll give the security at subnet level. I'll give the security at VPC level. So there are different different layers we have right. So just for your understanding purpose just you can take layer one uh level one, level two, level three. So you can give a security at different layers where you can minimize the vulnerabilities. And folks the final reducing manage reduce management complexity.
How you have to answer how we are reducing management complexity? How we are reducing management complexity? How AWS to manage resources. AWS is managing the many things on on our behalf. No infrastructure management maintenance. What about the other participants? To improve or enhance the process and services hardware and hardware complexity and failure is reduced. How? No infrastructure issue to be handled by the management. Exactly. Exactly. So folks as I clearly specified in the first slide itself there is no user direct involvement. There is no user direct involvement. Someone is there to manage your infrastructure behalf of you.
So because of that reason you are going to reduce the management complexity. The management headach will be totally taken by AWS. So no need to worry about that one. No need to worry about that one. So AWS will take care about that. Okay, that is nothing but reducing a management complexity. Okay folks, so this this part is about uh some AWS overview. Let's move on to the next topic called core services. So folks uh before starting this point let me have a quick reminder to you people folks in the day like att day the life of cloud architect in that they are specified four core services.
How many of you remember attain the life of cloud architect? In that slide they have specified four services compute network database and the final one is compute database storage. Exactly. networking right so these are the important services in AWS infrastructure right in that core services you can say that the core services of a AWS so now folks let me tell you one thing in this core services in this particular topic I'm going to discuss only introduction only introduction why I'm specifying not only in this session in every session I'll get the multiple inputs. Let us consider let us consider if I'm discussing about the storage here I have S3 EFS EBS sir what is the difference between EFS and EBS what is the difference between S3 and EBS sir what is the difference between S3 and EFS so there are different stoages we have that is the reason I'm not saying that uh like you are going to ask but it happens in every session every session what exactly it Many participants are excited to get the every detail within this single session.
Let me tell you folks, compute is module number three, DB is module number five, sorry, six, storage is module number four and networking is module number five. This is six, 3, 4, 5, 6. Right? So let me tell you folks, compute, database, storage, networking. This is third module six and storage fourth networking is fixed. Let's move on to the first yeah services uh core services. So here we have the variety of services like compute, storage, database, developer tools, IoT and even analytics, security, networking, management, mobile, enterprise application. right now folks uh Arun whether I have explained what is storage and what is database.
Arun whether I have explained what is storage and database. Are you with me Aron? Then let me complete that then we can discuss the differences. If you don't know what is database, what is storage, then how I can discuss the differences. Let me take first then we can go for differences. Okay. Now folks, first we have compute. So what exactly the meaning of compute here? Anyone compute? Compute means what? How you will define computer? Calculation, number of processes, CPU time, processing and running logic. Perfect. Okay. Simple term. Can I say that compute is all about processing?
Can I consider comput is all about processing? Right? So compute service which offer the secure and resizable computing capacity in the cloud simplifying the web scale computing for developers. So folks here AWS has provided a secure and resizable computing capacity that means resizable how much you want as for your requirement you can do the compute task you can process your data right so this is very much helpful for the developers right so folks in AWS environment we are using the term called instance instance some people we call it as VM virtual machine instance is fine virtual machine is fine.
These all are the compute resources. Instance, virtual machine, servers, everything is a compute resources. Now let us consider this is my onremises server. Okay? And this is my EC2. This is my EC2 folks. This is my onremises server and this is my EC2. Let me give one scenario to you people. Now you all 52 participants are my network engineers, right? and I don't know anything. I'm your client. I want to design one server. I want to design one server. I want to design one web server. Let us consider I want to design one web server.
So how you will take up this task being a 52 network engineers. Let me know folks how you are going to take up this task. I'm your client. So how you will start your work? My requirement is I want to design one web server. So it's up to you how you will take up this task. Let me know. when you go for any of the project which is the first task. Very good. Which is the first task? Are you going to ask which operating system do you want? What is the first task? When you go for any of the tasks, everyone is directly going for the estimation.
See the first thing is requirement. First thing is requirement. What you are expecting. What your client is expecting. First you have to understand then you can select oh yes hardware whatever you want. Okay. Let me consider requirement first. Then next, what is the next step? Yeah. How many for how many user you want? Which operating system you want? Like what are the things uh like what are the oper which operating system? Okay. Can I call this entire configuration part? Can I consider this entire configuration part? Hello everyone. First is okay. Requirement then configuration. Okay. Fine.
Right. Okay. Then how much time you want? All my network engineers please give my product as soon as possible. How much time you want? Yeah. that only deadline means how much time you want. So you have to tell right you all are my networking years how much time you want to design this sur do you think is it possible to complete within one day do you think is it possible okay usually agree with you Krishna based on the requirement let us consider let us consider this is my server you so usually How much time you want?
One week. Agree. Adita, I agree with you. Let's take one week. Okay. One week. Okay. Let us consider my server is ready for 500 people. Okay. For 500 users. Now, suddenly there is a huge hike in the traffic. Suddenly I'm getting thousand as a users. So what will happen to this particular web server? What it what exactly happens to the server? So the server will crash or slow down or low latency. Correct? Overloaded. So what is the solution? What is the solution? need to add increase the server you have to add the resources. So when you are using load balancer Aditya and other participant those who are given the answer when you are using load balancer when you have multiple system are you with me folks?
Folks when we are using load balancer when you have multiple system if it is a single machine then how you can use the load balancer. So what is the solution? What is the solution? scaling. How exactly Joti? But how? How? How? How? So can I say that CPU increased? Can I say that additional configuration? Adding additional configurations. I see whether it is a CPU, RAM, anything, right? Adding some additional configuration. Then again there is a upfront cost that means you have to invest again. That means you have to invest again here. Right? But if I take the EC2 launch the instance, select the operating system, select the security, right?
Then create instance and here you can launch the instance. Right? This is my EC2. So my EC2 is ready within 2 minutes. And folks, when I'm getting the high amount of a traffic, automatically the resources are increased. When I'm getting low traffic, automatically the resources are decreased. Right. So this is totally pay as you go model. How much you are consuming? You're going to pay for this elastic compute cloud. This is one of the compute service. A compute service. Harsha elastic compute cloud. It's a one of the popular compute service right one of the popular compute service.
That's why we are using the term instances virtual machine for EC2 only. Clear hush. Okay. So now just you create an instance you'll here you'll provide the operating system softwares EBS security everything. Now EC2 is ready. Right. When I'm getting a huge traffic automatically the resources are increased. Automatically the resources are increased. When I'm getting low traffic automatically the resources are decreased. So which one is the best fit? Which one is best fit? It depends on the situation that we'll see the different scenario in next sessions. So which one is better folks? Which one is better?
EC2 you can launch a EC2 within one or two minutes of a time and only pay as you go model. How much you're consuming based on that you're going to pay for it right now. Exactly. So what are the key features? It empowers user to control their computing resources. A complete control with a user. They operate under pay as you go model. How much you're consuming based on that you're going to pay for it. It allows the user to the reboot new server instances within a minute. You can launch your servers within one or two minutes of a time.
Right? They enable quick scaling to meet the changing computing requirements with quick and easy configuration of the service. To meet the quick change of a traffic there is a concept called autoscaling group right where multiple EC2 instances are available with the single group. So as per the demand it deals with the traffic, right? That we'll see in future classes. No need to worry. So what are the different comput services we have? You can see EC2 elastic comput cloud, ECR elastic container registry, ECS elastic comput service, elastic kubernet service, light sale serverless application repository, lambda, fargate and even batch elastic bins.
So these all are the AWS compute services right now. Yes, Gopina correct. Okay. So folks, these are the computer related services. Okay. let me take the next type called storage services. So folks now a storage service I hope you explain the context when and where to use in the compute service in the module discussion correct you are absolutely correct and that to every feature every feature every feature in which situation what feature should be used everything that is the reason I clearly specified it's a introduction I know that every participants every participants all are very excited to get the information in a single day.
I'm talking about a general in general right in every session not only this session like if I talk about more than 100 sessions this is the same scenario so that is the reason I'll clearly specify see even if I I'm also the particip I'm not saying that it's wrong even if I'm also the participants I'm also very excited agree with you but let me take one by one right Okay, now let me take to the next service called storage services. So folks, uh what is storage? As for your knowledge, what is storage in simple terms?
Capacity. Okay. Can I say that it's a place where I'm going to store the data? [clears throat] It's a place where I'm going to store the data. Where you can store data means any kind of a data. any kind of a data right now. So this storage offers a secure reliable scalable storage solution for a data in AWS cloud and that will provide the high efficiency, availability, durability and performance. So let me tell you folks there are different types of there are different types of and that two popular storage types we have. The first one is object storage.
Then second one is file storage and the third one is block storage. Right? So there is a popular service in object storage called S3 where you are going to create some buckets. Right? S3 is a popular object level storage. Right? So here you can store any kind of a data and that to unlimited where you can store images, video, uh audio, photo, anything any type of a data you can store here and that too it's a unlimited storage folks this is unlimited storage right so what is the main use case here especially we are using for backup purpose log storing purpose where I can store unlimited data Right.
So this object this S3 is integrated with many other AWS services where you can store and retrieve the huge amount of a data. Right? Now if I talk about the simple a single use case that only I'm discussing use case. If I want to take the backup of any data I can go for S3. If I want to take the backup of any data I can go for S3. If I want to store some log details, a continuous log details which are generated from a different services, you can go for S3. If I want to store some IoT devices data where it generates continuously at that time, I can go with S3 for the point Jesh right now file storage.
So folks, file storage here there is a popular service called EFS, elastic file system which is scalable shared file storage. So now let me tell you folks what is EFS. See this is EFS. This is EFS and these all are EC2 instances right. So now now EFS is shared file storage that can be accessed concurrently from multiple EC2 instances. Again I'm repeating this EFS can shared with the multiple EC2 instances. Right? So now because of this reason this is well suited for the applications which required a shared storage. Right? If you are familiar let me take where I'm using for example I'm using in content management system right are you people familiar with the content management system CMS CMS S okay a mixed answer okay let me take another example are you people I think this one everyone is familiar are you people familiar with the development testing environment development testing production Right?
Let me take the example of development. Right? Let us consider here developer one, developer two, developer three, developer four are working for the same software. But this first developer is working on first module. He is working on second module and he's working on third and he's working on four. And finally the data will be stored in this shared file system. Are you with me folks? This is the example for EFS. Are you with me folks? how this EFS can be used in development environment. Right? Now block storage. Block storage here the popular service is called EBS elastic block storage.
Right folks it's a persistent block level storage value. It's a persistent storage. This is my EC2. Just a minute. This is my EBS. Okay. So folks, EBS elastic block storage is a persistent block level storage. So now you can attach this EBS volume to EC2 instance. Again I'm repeating folks this EBS volume you can attach to EC2 instance. Now this EBS is suitable for the application for example database data inensive application or let us consider let us consider if I want to install the operating system at that time. If I want to install the operating system for this compute instance so at that time I'll install in EBS value.
Why? Because here I'll get the low latency low latency high IO operations input output operations. So that is the reason I'm going to install my operating system in EBS. Now you can ask sir why we can't use with EFS. See here we are not in this we are not attaching with EC2 but here we are attaching this elastic block storage once I create the EBS I'm going to attach with this EC2 that is the reason it provide the low latency high IO performance so your installation of operating system database or what you call some of the low latency applications at that time you can go with the EBS yeah what is block all the data let us consider this is my storage so in EBS all the data will be stored in terms of blocks.
All the data will be stored in terms of block and no need to modify the entire document. If it is a one document ZM, no need to modify entire document. If it is a particular part is there, then you have to modify only that block. AWS will take care about that one. Okay. Okay folks. Right now when when I'm using this EBS, EBS, what are the use cases? Let us consider if I want to install my databases or if I want to install my operating system at that time I'll go with [cough] excuse me so at that time I'll go with EBS elastic blog storage long form of EFS is elastic file system EBS is elastic blog storage right so now it allows the user to store access and analyze the data to reduce the cost increase the agility and accelerate Innovations, right?
So, it can be broadly categorized into object storage, file storage, blog storage and even backup and data migration. These are also types but backup if you want to it's like optional if you want to take a backups whenever you want you can take a backup into the backup services and data migration if you want to migrate from on premises to AWS at that time you can use the data migration services also right now so what are the major services in storage yes EFS elastic file system fsx for windows luster elastic block storage then backup snow family transfer family then data sync storage gateway so these are the services which are related to storage now okay now next is database so what is database folks what is database any kind of a data any kind of a data there is no restriction you any kind of a data images Images audio video packaging.
Okay. Yes. What is database? Place where store the data. Then what is the difference between database and storage? Now kan as per your answer where you are going to store a data. But in storage also you are doing the same thing. Then what is the difference? See my question is someone has given the answer in storage here also we are storing the data. Do you think in database we are storing the data? agree with you storing the data but apart from that okay uh someone has taken the Question sir, what is the difference between database and storage?
He's with me now. He's with me now. I think Arun, right? Database may be used to maintain the regular business. Yeah, Arun. [clears throat] Now let me give the definition for a database. Database is nothing but collection of related data. Right? So now it offer the comprehensive selection of purpose to build the database suit for various application. So AWS has provided a solution for the different requirements. As for your requirement, you can select your databases, right? And as for the Aron question, sir, what is the difference between storage and database? Some people are given the answer.
Some people are partially it can be like uh considerable. How is storage pricing calculated based on the amount of data file we store? Yes sir. Yes sir. based on how much amount of a data and it depends on the storage that too for S3 it is different for EFS it is different for EBS is also different based on that you are going to pay for it harsh okay so what is the difference between storage and database right see storage is nothing but Arun in general let me tell you storage is raw place storage is raw place to keep your data storage is raw place where you are going to keep your data like files, object blocks but database organized storage management system with quering capability.
Are you with me Arun? Organized the storage management system along with the quering capability. Right? So here the nature of databases you can store structured, semistructured, semiruct uh what do you call structured, unstructured, semiructured data, right? You can use the schema, you can define the queries, right? You can define the relationship among the objects that is database. Now storage is all about just you have to keep the data safe and retrievable. So here we don't provide any query, relationships, indexes, nothing clearer. I hope you got the clear picture. Okay. Tendress storage is like a blank paper in like ABD.
Uh databases like counting one and 100 return only 10 columns. Okay. Considerable you can say that right. So now yeah that is the reason I taken a time. Let me explain what is flow then database then we can do the differences. So that is the reason usually once I'll complete the part then only I'll take up your questions right okay so now but to retrieve a data from storage we also need to query it no but you are not doing any queries like a database zenm you are not are you doing any query by using SQL in a storage in a file storage or in object level storage are you doing any queries Zenm are you using any queries to retrieve the data?
No. But if you want to retrieve the data from any of the database at that time you have to use queries. Okay. So now folks these database services are fully managed. Fully managed. So when the term comes fully managed everything will be taken care by AWS. Even updating, patching, provisioning everything will be taken care by AWS. No need to worry about this databases fully managed in the sense updating patching provisioning everything will be taken care by only AWS right and this is scalable and highly efficient also now database services some features so here it provides the different databases like key value database inmemory database graph database time series database ledger database there are different types of databases are available Now they support a multi-reion that means more than one region in all the 38 regions multim master replication that means in all the 38 regions you can perform readrite operation that is the replication and even which offers the control over the data.
Now complete control will be user is managed. User will be taken care by the entire complete infrastructure of a databases. Right? And what are the services are available? RDS, red shift, ledger is also one of the type of database, right? Dynamob, Elastic Cache, QLDB, Neptune, Keyspace, Document DB, right? So these are the different database services which are available in AWS environment right. So now folks uh before moving to the networking services yeah that only I'm discussing h so it's up to you shall I take this is the last service of core services. So now folks what is networking networking?
Let's take the input from you people. What is networking? Connection of resources. Connection between the source and destination. Okay. Any other answers? connection between the multiple sources and destination. Okay. Can I say that folks? Can I say that networking is the concept where I'm going to establish the connection between two devices two or more devices to share the resources. Again I'm repeating networking is the concept where I'm going to establish the connection between two or more devices to share the resources. Are you with me? Are you with me folks? A simple definition which establish a connection resources.
Right? So now it offers a broad set of networking services that provide the essential security features and robust network solutions in that these services isolate the resources. There is a service called VPC virtual private cloud which isolate the resources. Let us consider this is Gopina Gopinat VPC. This is Santo VPC. This is Deepti VPC and this is current VPC. Now see no one without Gopinat permission no one can enter to this VPC without Santo permission no one can enter to this VPC without DIY permission no one can enter to this VPC without current VP uh current permission no one enter can to this VPC that is the reason we are calling it as a isolated area VPC is nothing but it's a isolated area no one can enter without owner permission if you deploy all the every services will be deployed in the VPC only.
So being a owner of that VPC, you are going to decide who can enter, who can not enter. Right? Then encrypting data. So in AWS folks, AWS supports uh AES 256 algorithm, advanced encryption standard 256 algorithm to encrypt your data. And there is a one more service called KMS key management service. It's a centralized repository which maintains a cryptographic keys for encryption as well as decryption. Right now AWS provide the private connection to AWS global network. So what kind of a private connections like which connections we are going to call it as a private connection is this VPC establishment between the regions.
If you want you can do that but two if you want you can do that. There is a concept called VPC pairing. If you want to do the relationship you can if you want to make a relation like if you want to pair the two VPCs that is possible. Now if I want to provide the private connectivity which connections you are going to call it as a private connection folks can I consider VPN? Can I consider VPN as a private connections? Can I consider direct connections? Direct connections. Then we have side to side connections. VPN and direct connect side to side all are the examples of all are the examples of a private connections.
Exactly. Exactly. Now what are the feature? It offer the highest network availability with very few time hours due to networking issues and it provide the global coverage of how many regions? How many region folks? 38 and how many availability zones 120 that's super it provide the coverage of 38 regions along with 120 availability zone now these are the services in a networking VPC gateway cloudfront cloud 53 mesh cloud map then we have direct connect and VPN connections so these all are the networking services which are available for us. So there is a page called AWS infrastructure where you can see all the regions.
all the regions. If you see here, if you see here, just a minute, let me Yes, now you can see these are the available regions. US region, North Virginia and here, Europe, Span, Zurich, London, Europe. So these dark circles are already available regions and these are upcoming regions. Now you can see Europe upcoming region. Uh yeah let me show you Kingdom of Saudi Arabia upcoming region and here if I talk about the India there are two regions. First one is Mumbai and the second one is Hyderabad. Okay. So folks I am sharing this link with you people.
So global you can see the information everything even 38 like regions 120 availability zone 700 plus quant presence 43 local zones and wavelength zones. So local zones are nothing but uh singledigit which provide the singledigit latency to the customer. So local zones are not available in all the availability zones only selected local zones are available in every region. We don't have a local zone and wavelength zones are specially designed for 5G purpose. Wavelength zones are specially designed for 5G purpose. Right? So now folks, let's move on to the next topic called account setup. So now folks, if you want to access the AWS services, first thing is required account.
First thing is required account. So now folks, can anyone help me out? How to access the Gmail account? I don't know anything. Let me know how to access the Gmail account in internet. Type gmail.com. Okay. Go to gmail.com. First create account. Go to Gmail portal. Okay. Next. I'm in Gmail. What should I do next? Using credentials. Directly [clears throat] credentials. Jesh. Okay, let me take uh gynes.com gnesh.com sorry detgmail.com and I'll put the password. Are you able to login? No. First we have to register. For that first username, first name, middle name, last name, recovery password, right?
Mobile number, everything, personal details you will fill. Then you will get the username and password. Username and password, right? Now sign up process is only one time then you have to login then you have to login by using the username and password you are able to login. So like that in AWS also there are two types of account we have. First is root account and the second one is IM account. IM user account. Let me tell you folks by default root account have the access to all the AWS services. By default root account have the access to all the AWS resources.
Now IM user have the access only what you specify the policy. For example S3 that means you can work with only S3. If you attach IM policy then this person can work with only IM. If you specify RDS that means this person can specify only RDS only RDS service. Right? So here you will get a complete control a more granular permissions you can assign here if it is required right. So now how to create a root account? Same procedure like our Gmail first name, middle name, last name, password recovery, mobile number, alternate email ID, everything.
The only difference is here you have to put debit or credit card details. You have to put debit or credit card details. Now AWS will take a token amount. debit one token amount from your account. So once your account is verified successfully after 24 hours again that token amount will be credited to your account. Right? So folks now if you go to the AWS console you can create a root account. So within the root account you are going to create a IM users. Within the root account we are going to create a multiple IM users.
Right now might be you have the question sir whether we have to create a root account now. No, don't go for it. If you ask my suggestion, don't go for creating root account in the AWS console. Why? Let me tell you the reason. See, just now you have started the journey of AWS. So, simply learn is provided a lab to you people where you can practice any number of a time. There is no restriction. So, first practice here. Practice here. Once you are perfect then I'll suggest you to go for creating a root account in the AWS console.
See in the simply learn environment if you because just you are a beginner if you leave one of the service like let us consider you have left one of the service active for 24 hours you don't need to pay because it's a personal environment automatically the resources will be deleted but but if you do in the same root account you have to pay for that 24 hours. So to avoid the unnecessary bill payment that is the reason I'm saying don't go for it right now once you are done like once you are done you are perfect after 1 month please go ahead please go ahead once you complete one month sir I have a grip on the as console then please go ahead so what why I'm giving the suggestion to avoid the unnecessary charges you have started the RDS sir I want to learn RDS okay but if your RDS is active for 24 hours you have to pay for it.
So that is the reason first practicing simply an environment after that you can go for personal account it's my suggestion no sir I want to work on that only then it's up to you so my concern is to avoid the unnecessary charges only one concern no sir I want to create work in this then please go ahead okay so one thing I want to specify here folks even AWS is also given a clear clear clear input about this don't Use your root accounts for day-to-day activity. Don't use a root account for day-to-day activity. Why? If something went wrong, if the credentials are compromised, then you are gone.
So that is the reason for a day-to-day work create IM users provide the more granular permissions they can work on that and don't share the credentials with others. That is the reason right now how we are like how we are going to perform this creating account AWS console just type www.awws console then here click on create account then continue whether it is personal or business account provide the personal or company information accept the agreement and create account and continue. So here [clears throat] it ask for billing information verified provide the pin number uh mobile number then by default one basic support plan will be available it's like a customer care right basic plan will be available now if you want some advanced plan you have to pay for that advanced plan you have to pay for that right there are different plans we have so based on that you have to pay for that once everything done your account will be activated your account will be activated Right.
So folks, if you create a account in AWS console, the account what you create is called free tier account. Free tier account is valid for 12 months. Right? And within this 12 months, you have some services with this free credits like EC2 instance 750 hours. S3 bucket 5GB. After 5GB, 750 hours, you have to pay the extra amount what you have. This is free account. There are three types of account we The first one is 12 month free tier. Always free. There is no restriction. But even we don't get any services here for a free like what we are getting in 750 hours five 5GB in free tier.
Right now the next one is short-term [snorts] trials. So let us consider Praep is one of the developer. Praep is one of the developer for one organization called ABC. Right now AWS is released a new service called Bedrock. Bedrock Pratip is very interested to see this service bedrock. Now he'll request to AWS. Hey team, can you give me a credentials of this bedrock service? I want to work on the can you give me access to the bedrock service, not a credentials. Can you give me a uh access to the bedrock service? I'm a developer. I want to know and understand this service.
Okay. AWS will give a response to the Praep. Hey Praep, you can use this bedrock service for 7 days. They'll provide access to bedrock service for 7 days. Right? So understand the service and let me know if you face any difficulty. So we are calling it as a short-term track. So for one week bedrock service will be provided to the customer pra let's move on to the AWS management console our lab environment. So now here once your lab is successfully loaded you can see sign in link username and password. So let me tell you folks always in every session every time the signin link username password will be changed.
Every time it will change right and let me tell you this particular labs are active for 5 hours now I was started when I was like at sharp 8:30 itself right 8:30 or 9. So these labs are active for five hours right. So now once the five hours completed you can start the lab again after 1 minute. Let us consider you are done with the five hours. After 1 minute you can launch one more time the labs with the new credentials with new signin link username and password. Right? So what it means when it completes a five hours of a time all the resources what you have created everything will be vanished.
All the resources what you have created everything will be vanished all will be deleted right. So once you start again it start the new fresh session right that is the reason you can practice any number of a time there is no restriction. So here AWS solution architect associate with services are required. These are enabled for you people and we all are IM users. Being a trainer I am also one of the IM user. We all are IM users. Right now let me copy this signin link. Paste it into the new tab. No no no. You can't the services.
what you are using it's not possible to store that. Okay. Now let me take username and then password. So folks I hope everyone got the idea what I did just now. I copied the sign-in link into the new tab and then copied the username at username section and pasted the pasted this particular password username section password section and then click on sign in and once you enter to your AWS console the first thing is you have to check in which region you are working right now you can go for north Virginia let me tell you the reason why we are selecting North Virginia regions folks The reason is this is pre-cooked environment for you people only North Virginia region is enabled again I'm repeating sir I am located in Punea so let me use Mumbai region sir you can use in personal account but this is this is pre-cooked environment where only north Virginia region is enabled sir I'll use Oregon or Mumbai Osaka or Singapore Sydney Tokyo no you can't use only North Virginia region is enabled.
So once you enter to your AWS console first make sure that whether you are working in north Virginia or not first you have to check folks again I'm repeating the first task once you enter to AWS console you have to check whether you are working whether you are working in north Virginia or not then you can proceed okay now here you can see all these services signin page is still loading okay why why jes Have you copied the sign in link? Jes, you got the credentials. Username, password. I hope you got the credentials. You got the credentials.
Okay. Just copy and paste it. Just copy and paste it. It will take time. Sometime it will take time. It sometime it will take time. No need to worry. See, just copy the URL and paste it in the new tab. Once a page uploads, you can put down your username, password, then login. Okay, no need to worry. No Only [clears throat] North Virginia because this is pre-cooked environment. There are lot of regions are available. Every region have the different costing. So for it's a practice purpose. So that is the reason you can work in only North Virginia.
Okay. Now folks I request other participants Arun and other participants leave that part let please concentrate on this demonstration now okay so it will load don't worry it will load so leave it now okay so please uh yeah Jesi then yeah Gagandep everyone please concentrate here yeah Ashutan it will take time. It will take time like one or two minutes of a time. Once it loads you can try one more time. Okay. So now folks here you can see in this AWS console. Okay. So now here you are able to see all the AWS services.
All the AWS services. Now let us consider compute. So here EC2, image builder, elastic bins, global view, lambda, light sale all the services are available. Now let me take SQL, RDS, the document DB, Dynamo DB, elastic caching, key spaces, memory DB, then networking, gateway, app mesh, cloud map, cloudfront, data transfer, direct connect, global accelerator, right? Then then then okay networking storage backup EFS disaster recovery FSX recycle bin S3 glacier and even more. So these all are services what we we are going to use in AWS environment. Okay. So now Jesh uh Gandhi please leave it for timing please for 2 to 3 minutes leave that part.
I'll I'll come to that and I'll resolve. Don't worry just allow me 2 to 3 minutes. Let me complete this demonstration then I'll help you to how to resolve that one. Okay, please allow 2 to 3 minutes. Let me complete this now. Uh yeah, uh Jesh and Gagandhi, please concentrate here on the demonstration otherwise you'll miss this. Okay. So now here you can see search option. If I want to serve this specific service called ES3, just type that service name and here you have to here you are able to see the services. If you want to bookmark this, just click on this.
Now the service is available. If you want to remove from the bookmark list, you can remove this. Okay. Now after search here we have cloudshell. Cloud shell. Cloud shell is nothing but a built-in command line interface. Built-in command line interface. If I want to interact with the AWS services by using CLI at that time I'll go with cloud shell. Okay. Now next notification help support then settings. This is for regions, right? And now let me show you here. You can see excuse me. So folks, here you can see even I am also IM user. We are saying cloud shell is nothing but built-in command line interface.
If you by using AWS console sorry cloud shell at that time you can go for cloud shell again I'm repeating if you want to interact with the AWS services by using commands then built-in cloud built-in command line interface is available that is cloud shell okay now here you can see I am also an IM user IM user right so here you will get the account details for this account then organizations if you want to go for multi- account environment then there is option called organization service kota that means every services has some limit for example uh IM users within the single root account you can create up to 5,000 IM users so like that for every service we have some kota that is limit okay then billing and cost management so let me show you so let me show you billing and cost management folks a very important part Let me tell you billing is one of the crucial service in every organization.
Billing is a very crucial service in a every organization. That is the reason no one will get a billing access. Only the what do you call a respective person who is working on the billing they'll get the access. Again I'm repeating folks billing is one of the service a crucial service. No one is having a access for that right because because it's related to financial part only the respective person who is working on that he'll get the access. So now you can see but let me uh explain what are the fields are available in the billing.
Now you can see cost summary month to date cost year and last month details like a current month forecasted cost for a current month then last month total cost and folks let me tell you here you'll get the detailed breakdown for that particular month how many services are active in which region when it was started when it was end and how much it was charged everything you'll get a detailed information everything you'll get the detailed information right now if you See here there are different uh tabs are available. Let me take which are very important bills.
If you click on bills you are able to see like if I want to view the bill of last 6 month, one year, two year, you have to select the year and particular month then a bill will be generated for that particular month. Then payments. Let us consider you want to do the AWS account like AWS account. You have to pay. Now you have the account called 1 123 and you want to pay for this. So you can add the payment method here like credit card, debit card and UPI payment. Using the Google pay, phone pay also you can pay your AWS bills.
Then credits. So folks, credits are nothing but which is provided by AWS like for a free tier account 750 hours for EC2 and 5GB for S3. So how much it is remaining everything you'll get the details in a credit option and whenever you're using any of the services you will get the purchase order for every services you will get the purchase order and the very like uh this is also very important for the optimization of a cost cost explorer folks when you click on cost explorer you will get the detailed information if you want to optimize the cost then cost explorer is a tool where you can go for it where you'll get the detailed information right so this is for total cost average monthly cost service count how many services you are using and here it's like a dashboard it's like a dashboard a systematic graphical representation will be provided which if you select any of the particular month service here a detailed graph will be provided for which service how much it is utilized in which duration everything you'll get the detailed information and here cost and usage breakdown and even you can download this as a CSV file, Excel file.
Now when uh which service, in which region, when it was started, when it was end and what are the charges even you can download the Excel sheet? You can download the Excel sheet that is also possible, right? So this is all about the cost explorer folks and this is all about the billing part. So why we want billing? So billing is the tool where you are going to pay your AWS bills right. So where you can organize and report your cost and usage by using uh AWS cost explorer then you can manage the consolidated billing for the member of AWS organization.
So let me tell you folks there is a service called AWS organization where you can manage a multi- account environment. Here you can manage a consolidated billing consolidated billing right let us consider this is ABC account within the ABC account here we have a different different employees right and you will get a consolidated billing within the ABC so these are the accounts and these are the charges folks I'm not sure but uh there is a one telecommunication industry which provides one plan one family I think it's a right only one bill will be provided Ed for entire family.
Adel, right? So ALE one bill will be provided for all the family. So like that here also for ABC organization I can do the consolidated billing where every users every users along with the cost you can see here. So as I discussed just now all the tabs these are the features just now what I discussed in the console managing AWS account where you can view the bills you can manage the payments Google pay cards everything you can manage the purchasing orders then you can manage the cost by using the cost categories then you can manage the payment profile right then a consulting like consulting billing organization let us consider this is ABC and here are the employees the first employee is called Jesh, then Batu, then Santosh, then Kiran, right?
Then Bun, then Shivendra, then Rupesh, right? So like this in an organization there are multiple employees we have and every account is charged and you will get the consolidated bill for that. Fine. Now, okay. So now folks there is something called AWS support. By default as I discussed a basic plan will be available. If you want some advanced plan for that you have to pay for it. So can I say that this support is support is like customer care service AWS account one means one root user. Account one means first uh root account. Shendra first account is like a root account.
After that all the IM users, all the IM users, right? Yeah. Can I say that customer care? Do you think the support people are like a customer care people? Are you sure? Do you think this? Yes, it's a technical support folks. It's a technical support. How we can say that? A customer care people. How we can say that customer care these people are technical people that too they are well qualified well trained who is going to provide a solution to you people right so no doubt folks these people are providing a solution to customer 24 by7 right so now AWS supports provide the variety of plans to access the tools right and even expertise to support the success and operation health of AWS resources.
So always 24 by7 access to the customer service. Let me tell you folks if customer is not ready customer is not ready to accept the answer. They'll provide some documentation. This is the reason we have the document. This is the right answer. Documentation technical paper and even support forms. Support forms. Right now here we can see there are different plans. We have developer business uh business enterprise on ramp enterprise and these are the uh like uh scenario like what are the practice check advisor advisory best practices to check like technical support then case severity then program case management then proactive programs and self-services self uh like AWS managed services training pricing so pricing is also different in every model right so there are different pricing also So now folks see some people are using like Riojo is using 499 geoplan Praep is using 999 geo plan right then Santosh is using,50 g plan and Karan is going to use 2,000 plan see it's up to you on which requirement.
So as per your requirement you are going to select a plan. So I can't say that hey Raj why you are using 499. I can't say that hey why sep you are using 2,000 plan hey karan why you are using 999 plan like that like that folks this support plan is also it's up to you which plan do you want sir I don't want plan while you are discussing okay fine go with the default plan no need to worry so here the different plans are given based on your workload so now folks how you are going to understand how you are going to understand like if If I consider our go mobiles.
So folks once you complete 50% of a data you will get the notification. Once you complete 90% of a data you will get a notification. Are you with me? I'm talking about the geo telecommunication. Once you complete 50% of a data you will get the notification. Once you complete 90% of a data you will get the notification. You are completed this much of a data. Now here in AWS also you can set let us consider this is my EC2 this is my EC2 a compute service what I'm putting the threshold value if my EC2 crosses $200 then it should be notified to the Kiran kiran is a user right so once my EC2 crosses $200 I'm going to set the alert the EC2 CPU utilization this now when it is crosses a user will be informed by using email.
Are you with me folks? What is that billing alert? Right? So now you can see here AWS billing alerts which allows user to monitor the charges on their bills. So now user can set up a alert to receive email notification when the estimated charges reaches to the specific threshold value. Once it crosses the $200, your EC2 instance, right? So through email, it will be informed to Kiran. Hey Kiran, your EC2 is successfully crosses $200. Take some proper action. You can specify the action. If you want to do the automation once it crosses the $200, whether my EC2 should be stopped or terminated, you can do that one also.
Right? So but here just I'm putting the threshold value $200. So Kiran have to take the action on right Kiran have to take the action on that. So how to set this billing alerts? So just now I completed go to AWS billing console here and once you'll get the billing dashboard. So at the left side here we have the billing preferences. So click on receiving billing alerts and save the preferences. Once you add this email id you'll get the notification. Right. So this is all about the billing alerts. So now yeah Prem are you going to share these slides?
We can go through the contents once again and especially for support plans too. Prem this is already available in the material section. Everything is available Prem in the material section. Okay. Yes. So now folks a simple question how you will define delegate? What exactly the delegate term? How you will Waiting for your responses. Subashi is Shane. Waiting for your responses. Giving same rights to other in your absence of on their console. Rupur only in absence only in absence to perform certain action for someone else's behalf. Acceptable to delegate the access to another person. Perfect. Okay.
Who could work on behalf of you on demand? Correct. Person chosen to take the decisions not decision to take task role based access like a proxy someone. Okay. Let me take one simple example folks. Now the class is a live session is going on. So I'm a trainer I'm taking this right. So what I'll do now I'll inform to vishatan. Okay. So being a trainer I'm busy in taking the session. I'm continuously busy in taking the session. What I'll do now? I'll delegate my authority to Vishwanatan. Hey Vishwanatan can you take uh attendance for today's session?
I'm busy. I am busy in taking the session. Can you take the attendance? So Vishwanat is ready sir. Sure I'll take the attendance. So what I did just now I delegated my authority to vishatan. Hello everyone. What I did now? I delegated my authority to Vishwanatan. Now Vishwanatan is the right person to take a attendance. Right? Suddenly Shane will come into the picture. Suddenly Shane will come into the picture. I'll take the attendance. Do you think Shane is the right person to take the attendance now in this scenario? to take the like Shane is the right person to take the attendance?
No. Because I have not delegated the authority to Shane. I have given the authority to only Vishwanatan. Right? So Shane is the not Shane is not a right person to take the attendance because he don't have the authority. Only Vishwanatan can they take the attendance because I have delegated the authority. Right? So like this folks now delegate access to the billing console. So now you know that AWS account owners can delegate access to specific IM user that need to access or manage the AWS billing and cost management data for AWS accounts. So now as I discussed billing is one of the crucial service right.
So now everyone don't have that billing So now you are going to delegate this billing access to IM user. Let us consider this is your ABC organization right. So now here we have okay let me take admin admin okay Pri is admin Prii is admin now okay so now folks in this company we have 100 people do you think this 100 employee work can be performed by only one employee that is Priy is it possible this 100 employee work can be completed by only one employee is it possible No, that is the reason we have delegation.
Even every user have the responsibility, right? No. So that is the reason here we have Vishwanatan. Okay. Then we have next is Jesh. Jes. Okay. Next we have Kiran. Okay fine. So now Pri is administrator. Pri is administrator. Now being a administrative account or let us consider she's having access of root account and now she's delegating authority to others. Vishwanat can perform S3. Gidesh can perform KMS. Nupur can perform EC2 task and Kiran can perform billing path billing task. So here we are attaching some policies like we are giving the authority to Vishuanatan. Priy can access all the as services because it's a root account.
Now Vishuanatan can access S3. Vishuat can't access KMS or EC2 or billing only S3. Same thing Jesh can't access S3, EC2 or billing. Right? So even Kiran is also can't access S3, KMS or ECQ. Kiran is responsible for only billing. So the domain what they are provided to these employee they can work on only that place. So now Kiran is responsible to access only billing information. So how to how…
Transcript truncated. Watch the full video for the complete content.
More from Simplilearn
Related Videos


The Cloud Security Career Nobody Talks About That Pays $200K
00:19:12

These Hidden Careers will make you $400k a year (2026 Edition)
00:09:01

9 Cloud Jobs Paying $60/hr to $400K (2026 Salary Report)
00:13:34

Why Enterprise AI Fails — And the Skill That Makes You Unfireable
00:31:38

Get daily recaps from
Simplilearn
AI-powered summaries delivered to your inbox. Save hours every week while staying fully informed.



![AWS Solution Architect Full Course 2026 [FREE] | AWS Solution Architect Tutorial 2026 | Simplilearn thumbnail](https://rewiz.app/images?url=https://i.ytimg.com/vi/i-QQuQNYgNE/maxresdefault.jpg)