Category Terraform-AWS-Labs

CI/CD Pipeline: CodePipeline + CodeBuild + CodeDeploy to ECS ☁ AWS 🔥 Advanced CodePipeline CodeBuild CodeDeploy ECS Blue/Green IAM Roles Scenario Your team currently deploys the containerised API by running docker build and terraform apply manually from a developer’s laptop.…

Event-Driven Processing: EventBridge Rules + Lambda + SQS DLQ ☁ AWS 🔥 Advanced EventBridge Lambda Dead-Letter Queue Event Patterns Retry Policy Scenario Your order management system publishes events to EventBridge whenever an order is placed, updated, or cancelled. Three different…

IAM Role, Policy Document, and Instance Profile ☁ AWS ⭐ Beginner IAM Roles Policy Documents Instance Profile Scenario Your EC2 instances need to read objects from a specific S3 bucket and send messages to an SQS queue, but you do…

RDS MySQL Instance with Parameter Group and Random Password ☁ AWS ⭐ Beginner RDS MySQL Parameter Groups Sensitive Variables random_password Scenario The development team needs a MySQL database for their application. It should be placed in a private subnet, use…

Lambda Function with IAM Execution Role ☁ AWS ⭐ Beginner Lambda IAM archive_file CloudWatch Logs Scenario Your team wants to run a small Python function that logs a greeting message whenever it is invoked. Rather than uploading a zip file…

SQS Queue with Dead Letter Queue and Access Policy ☁ AWS ⭐ Beginner SQS Dead Letter Queue Queue Policy Message Retention Scenario Your application publishes job requests to an SQS queue and a worker process consumes them. Sometimes a message…

SNS Topic with Email and SQS Subscriptions ☁ AWS ⭐ Beginner SNS Subscriptions Fan-Out Pattern Topic Policy Scenario Your application needs to send notifications when a critical event occurs — for example, when a deployment succeeds or fails. You want…

Three-Tier VPC: Public, Private App, and Private Data Subnets with Flow Logs ☁ AWS 🔥 Advanced VPC Flow Logs VPC Endpoints NACL Multi-AZ Scenario Your security team has audited your AWS environment and identified the following gaps: the VPC has…

Serverless CRUD API: API Gateway + Lambda + DynamoDB with IAM Auth ☁ AWS 🔥 Advanced Serverless API Gateway Lambda DynamoDB IAM Authorization for_each Scenario You are building a serverless items catalog API. The API must support full CRUD operations…

Production ECS Fargate Service: ALB, Auto Scaling, and Secrets Manager ☁ AWS 🔥 Advanced ECS Fargate ALB Application Auto Scaling Secrets Manager Target Tracking Scenario Your containerised web API needs to run in a production-grade configuration: traffic must enter through…