DevOps & Cloud
DevOps and Platform Engineering on AWS
Build the platform other teams deploy onto - landing zone, identity, VPC design, IaC strategy, ECS vs EKS, pipeline topology, progressive delivery, policy as code, DR and cost governance.
DevOps and Platform Engineering on AWS
This is the course for the team that everyone else deploys through. Not "how do I run my service" - how do you build the thing forty engineers use without it becoming the bottleneck.
Foundations, then tooling, then runtime, then delivery, then operations. Each module constrains the next:
- Organisational foundations - the multi-account landing zone, identity architecture for an engineering organisation, and the VPC design you will not regret in two years
- Infrastructure as code strategy - CloudFormation vs CDK vs Terraform, picking one and living with the consequences, plus a golden image pipeline
- The container platform - ECS vs EKS at organisational scale, and the operational reality of running Kubernetes on AWS
- Delivery - repository and pipeline topology for multi-account deployment, progressive delivery, and environments that do not drift
- Platform operations - policy as code and preventive guardrails, the golden signals, disaster recovery with real RTO and RPO numbers, and cost governance that works without a spreadsheet
The account topology you choose in module 1 determines the network, the pipeline targets, and how you attribute cost in module 5. That coupling is the point - platform decisions are not independent, and this course treats them as a system.
Module 1 is free to preview. The full course is a one-time purchase with lifetime access.
What you will learn
- Design a multi-account landing zone and the identity model that goes with it
- Lay out a VPC you will still be happy with after two years of growth
- Choose one IaC tool deliberately and understand what you gave up
- Decide between ECS and EKS from organisational scale, not from preference
- Run Kubernetes on AWS with the operational costs named up front
- Build multi-account pipelines, progressive delivery, and environments that stay in sync
- Enforce guardrails preventively with policy as code instead of catching things in review
- Plan disaster recovery against real RTO and RPO targets, and govern cost at platform level
Prerequisites
- Comfortable with AWS fundamentals - IAM, VPC, EC2 and one compute service
- You have deployed something to AWS before, ideally with some infrastructure as code
- Useful to have felt the pain of a shared account or a manual deployment
Course outline
Module 1: Organisational Foundations
Organisational Foundations - 3 topics.
- The multi-account landing zone - designing the account topology 9 min read
- Identity architecture for an engineering organisation 8 min read
- Network architecture - the VPC design you will not regret 9 min read
Module 2: Infrastructure as Code Strategy
Infrastructure as Code Strategy - 2 topics.
- CloudFormation vs CDK vs Terraform - picking one and living with it 9 min read Pro lesson
- Building a golden image pipeline 9 min read Pro lesson
Module 3: The Container Platform
The Container Platform - 2 topics.
- ECS vs EKS at organisational scale 9 min read Pro lesson
- Kubernetes on AWS - the operational reality of EKS 9 min read Pro lesson
Module 4: Delivery
Delivery - 3 topics.
- Repository and pipeline topology for multi-account deployment 9 min read Pro lesson
- Progressive delivery and safe deployment 9 min read Pro lesson
- Environment strategy - dev, staging, prod without drift 9 min read Pro lesson
Module 5: Platform Operations
Platform Operations - 4 topics.
- Policy as code and preventive guardrails 8 min read Pro lesson
- Platform observability and the golden signals 8 min read Pro lesson
- Disaster recovery - RTO, RPO, and the four DR strategies 9 min read Pro lesson
- Platform cost governance 9 min read Pro lesson