AWS Solutions Architect Learning Plan

Here’s a hands-on learning plan with practical exercises for each key topic. Since you have a week, you’ll complete one major hands-on activity per day in about 3 hours.


πŸš€ Hands-On AWS Learning Plan (1 Week, 3 Hours/Day)

Each day includes:
βœ… Key concepts
βœ… Step-by-step hands-on labs
βœ… Estimated time required


πŸ“Œ Day 1: Compute & Storage Basics (EC2, S3, VPC)

⏳ Time Required: ~3 hours

πŸ”Ή Key Concepts

  • EC2: Instances, security groups, key pairs
  • S3: Buckets, storage classes, versioning
  • VPC: Subnets, CIDR, Internet Gateway, Route Tables

πŸ›  Hands-On Lab

βœ… Launch an EC2 instance & configure access

  • Go to EC2 β†’ Launch Instance
  • Choose Amazon Linux 2023
  • Use t2.micro (Free Tier)
  • Create a new key pair and download it
  • Configure Security Group: Allow SSH (port 22)
  • Connect to your EC2 instance via SSH βœ… Create an S3 Bucket & Upload a File
  • Go to S3 β†’ Create Bucket (Name: my-bucket-12345)
  • Upload a file & enable versioning
  • Set a Bucket Policy to make the file public
  • Access the file via the S3 URL βœ… Create a Simple VPC
  • Go to VPC β†’ Create VPC (IPv4 CIDR: 10.0.0.0/16)
  • Create a Public Subnet (10.0.1.0/24)
  • Attach an Internet Gateway and update the Route Table
  • Launch an EC2 instance inside the VPC

πŸ“Œ Day 2: Security & Identity Management (IAM, Security Groups, Encryption)

⏳ Time Required: ~3 hours

πŸ”Ή Key Concepts

  • IAM: Users, groups, policies, roles
  • Security Groups vs. NACLs
  • AWS KMS: Encryption of data

πŸ›  Hands-On Lab

βœ… Create an IAM User with Limited Permissions

  • Go to IAM β†’ Users β†’ Create User
  • Grant only S3 Read-Only Access using a policy
  • Generate Access Key ID & Secret
  • Use AWS CLI (aws s3 ls) to verify permissions βœ… Test Security Groups vs. NACLs
  • Create an EC2 instance
  • Modify the Security Group to allow only your IP
  • Modify NACL to block access on port 22 and test SSH βœ… Enable Encryption for S3
  • Go to S3 β†’ Select your bucket
  • Enable Default Encryption (AWS KMS)
  • Upload a new file & check if it’s encrypted

πŸ“Œ Day 3: Scaling & Load Balancing (Auto Scaling, ELB)

⏳ Time Required: ~3 hours

πŸ”Ή Key Concepts

  • Auto Scaling: Scale EC2 instances dynamically
  • Elastic Load Balancer (ELB): Distributes traffic

πŸ›  Hands-On Lab

βœ… Deploy an Auto-Scaling Group with ELB

  • Launch an EC2 instance, install Apache (sudo yum install httpd)
  • Create an Amazon Machine Image (AMI)
  • Set up an Auto Scaling Group (Min: 1, Max: 3)
  • Create an Application Load Balancer (ALB)
  • Attach the ASG to the ALB and test scaling

πŸ“Œ Day 4: Databases & Serverless (RDS, DynamoDB, Lambda, Fargate)

⏳ Time Required: ~3 hours

πŸ”Ή Key Concepts

  • RDS: Managed relational databases
  • DynamoDB: Serverless NoSQL database
  • Lambda: Serverless compute
  • Fargate: Serverless container service

πŸ›  Hands-On Lab

βœ… Launch an RDS MySQL Database

  • Go to RDS β†’ Create Database
  • Choose MySQL (Free Tier eligible)
  • Enable Multi-AZ and Public Access
  • Connect using MySQL CLI:

sh

mysql -h your-rds-endpoint -u admin -p βœ… Create a DynamoDB Table

  • Go to DynamoDB β†’ Create Table (Name: Users, Partition Key: UserID)
  • Insert an item using the AWS Console βœ… Deploy a Lambda Function
  • Go to Lambda β†’ Create Function (Runtime: Python)
  • Add this Hello World code:

python

def lambda_handler(event, context): return "Hello from AWS Lambda!"

  • Test execution

πŸ“Œ Day 5: Networking & DNS (Route 53, CloudFront)

⏳ Time Required: ~3 hours

πŸ”Ή Key Concepts

  • Route 53: DNS, domain registration
  • CloudFront: Content Delivery Network (CDN)

πŸ›  Hands-On Lab

βœ… Set Up a Custom Domain with Route 53

  • Buy/Register a domain in Route 53
  • Create a Hosted Zone and configure a record
  • Associate it with an EC2 instance or S3 website βœ… Deploy CloudFront for an S3 Website
  • Upload a website to S3
  • Enable Static Website Hosting
  • Create a CloudFront distribution for the S3 bucket
  • Test your global access

πŸ“Œ Day 6: Monitoring & Cost Optimization (CloudWatch, Cost Explorer)

⏳ Time Required: ~3 hours

πŸ”Ή Key Concepts

  • CloudWatch: Metrics, logs, alarms
  • AWS Cost Explorer: Analyze and optimize costs

πŸ›  Hands-On Lab

βœ… Monitor EC2 with CloudWatch

  • Go to CloudWatch β†’ Create Alarm
  • Set an alarm for CPU Utilization > 80%
  • Create an SNS topic for email alerts βœ… Analyze Your AWS Bill
  • Go to Cost Explorer
  • Enable Cost Anomaly Detection
  • Set up a Budget Alert

πŸ“Œ Day 7: Final Project – Deploy a Full AWS Web App

⏳ Time Required: ~3 hours

πŸ”Ή Project Overview

You will deploy a 3-tier web app:

  • Frontend: HTML hosted on S3 + CloudFront
  • Backend: Python Flask API on EC2
  • Database: RDS MySQL βœ… Steps:
  • Set up S3 for frontend
  • Deploy Flask API on EC2 (Install Python, Flask)
  • Connect API to RDS MySQL
  • Secure with IAM roles & security groups
  • Optimize performance using CloudFront

🎯 Summary: What You’ll Achieve in 1 Week

βœ”οΈ Hands-on experience with AWS core services
βœ”οΈ Practical projects demonstrating real-world architectures
βœ”οΈ Knowledge of security, networking, serverless, and cost optimizationWould you like more detailed steps for any specific lab? πŸš€