Category Terraform-AWS-Labs

S3 Bucket with Versioning, Encryption and Lifecycle Rules ☁ AWS ⭐ Beginner S3 Versioning Server-Side Encryption Lifecycle Rules Scenario Your company stores customer-uploaded documents in S3. The security team requires that all objects be encrypted at rest and that older…

Custom VPC with Public and Private Subnets ☁ AWS ⭐ Beginner VPC Subnets Internet Gateway Route Tables Scenario Your team is moving away from the default AWS VPC, which exposes all subnets to the internet by default. You need to…

SSM Parameter Store: Standard and SecureString Parameters ☁ AWS ⭐ Beginner SSM Parameter Store SecureString KMS Encryption Data Sources Scenario Your application across multiple services needs to share configuration values — database hostnames, feature flags, and API keys. You want…

Terraform count: Creating Multiple Resources from One Block ☁ AWS ⭐ Beginner count count.index Splat Expressions Conditional Resources Scenario Your company runs three environments: dev, staging, and prod. Each environment needs an identically-configured S3 bucket for application logs. Rather than…

Resilient Queue Processing: SQS + Lambda with Concurrency Controls and DLQ ☁ AWS 🔥 Advanced SQS Lambda Event Source Mapping Reserved Concurrency DLQ Visibility Timeout Scenario Your payment processing service writes messages to an SQS queue. A Lambda function processes…

Step Functions: Saga Pattern for Distributed Order Transactions ☁ AWS 🔥 Advanced Step Functions Saga Pattern Error Handling Compensating Transactions X-Ray Tracing Scenario Your e-commerce order workflow involves three microservices: Inventory (reserves stock), Payment (charges the customer), and Fulfilment (ships…

Launching Your First EC2 Instance with a Security Group ☁ AWS ⭐ Beginner EC2 Security Groups Provider Config Outputs Scenario You have just joined a small startup as their first cloud engineer. The team needs a simple web server running…

CloudFront Distribution with S3 Origin and Origin Access Control ☁ AWS ⭐ Beginner CloudFront S3 Origin OAC Cache Behaviour HTTPS Only Scenario Your team has built a React single-page application and wants to host it as a static site served…

NAT Gateway and Elastic IP for Private Subnet Egress ☁ AWS ⭐ Beginner NAT Gateway Elastic IP Private Route Table Outbound Internet Scenario Your private subnet has no internet access. EC2 instances and ECS tasks in private subnets need to…

Real-Time Data Pipeline: Kinesis Streams + Firehose + Lambda + S3 ☁ AWS 🔥 Advanced Kinesis Data Streams Kinesis Firehose Lambda Data Transformation S3 Buffering Partitioning Scenario Your IoT devices emit sensor readings at 50,000 events You need a pipeline…