Cloud Engineer Course

Lesson 1 • Cloud Service Models Explained

Contrasts IaaS, PaaS, and SaaS responsibility boundaries. Enables accurate model selection for given business scenarios.

Lesson 2 • Cloud Deployment Models

Covers public, private, hybrid, and multi-cloud architectures. Connects deployment choice to cost, compliance, and control trade-offs.

Lesson 3 • Core Cloud Architecture Principles

Introduces regions, availability zones, edge locations, and global infrastructure. Grounds later networking and reliability chapters in physical topology.

Lesson 4 • What Is Cloud Computing

Defines cloud computing, its history, and core characteristics. Establishes shared vocabulary used throughout the course.

Lesson 1 • Managed Database Services

Introduces relational, NoSQL, and in-memory managed database options. Connects database choice to application consistency and scalability needs.

Lesson 2 • Cloud Storage Types and Use Cases

Distinguishes block, object, file, and archive storage tiers. Guides appropriate storage selection for performance and cost.

Lesson 3 • Virtual Machines and Compute Options

Covers VM instance types, sizing, and lifecycle management. Directly enables hands-on provisioning in subsequent labs.

Lesson 4 • Load Balancing and Auto Scaling

Explains load balancer types and auto-scaling policies for compute fleets. Builds the elasticity skills required for resilient application design.

Lesson 1 • Network Security Controls

Covers security groups, network ACLs, and firewall rule hierarchies. Directly supports the security chapter by establishing network-layer defenses.

Lesson 2 • Virtual Private Cloud Design

Covers VPC creation, CIDR planning, and subnet segmentation. Establishes the network foundation for all subsequent infrastructure deployments.

Lesson 3 • Hybrid and Cross-Region Connectivity

Introduces VPN, dedicated interconnect, and VPC peering options. Prepares engineers to extend on-premises networks into the cloud.

Lesson 4 • Routing and Traffic Control

Explains route tables, internet gateways, and NAT configuration. Enables controlled ingress and egress for cloud resources.

Lesson 1 • Secrets and Key Management

Explains key management services, secret rotation, and envelope encryption. Protects sensitive credentials and data keys used by cloud applications.

Lesson 2 • Identity and Access Management

Covers users, groups, roles, and policy structures for cloud IAM. Establishes the access control model applied in every subsequent chapter.

Lesson 3 • Data Encryption at Rest and in Transit

Covers server-side encryption, TLS configuration, and certificate management. Ensures data confidentiality across storage and network layers.

Lesson 4 • Compliance Frameworks and Controls

Maps cloud controls to common regulatory and industry compliance frameworks. Prepares engineers to support audit evidence collection.

Lesson 1 • Policy as Code and Guardrails

Covers automated policy enforcement and compliance gates within IaC pipelines. Prevents non-compliant resources from being provisioned.

Lesson 2 • Infrastructure as Code Principles

Defines declarative vs. imperative IaC, idempotency, and state management. Establishes the mental model for all automation work in this chapter.

Lesson 3 • State Management and Remote Backends

Explains remote state storage, locking, and workspace isolation. Prevents state conflicts in team-based infrastructure workflows.

Lesson 4 • Writing and Structuring IaC Templates

Covers template syntax, modules, variables, and outputs for reusable IaC. Enables engineers to build maintainable, parameterized infrastructure code.

Lesson 1 • Workload Deployment and Scheduling

Explains rolling updates, canary deployments, resource requests, and scheduling constraints. Enables reliable, zero-downtime application releases.

Lesson 2 • Managed Kubernetes Cluster Operations

Covers provisioning, upgrading, and scaling managed Kubernetes clusters. Connects cluster lifecycle management to cloud provider tooling.

Lesson 3 • Persistent Storage and Networking in Kubernetes

Covers persistent volumes, storage classes, ingress controllers, and network policies. Completes the production readiness of containerized applications.

Lesson 4 • Container Fundamentals with Docker

Covers image building, layering, registries, and container runtime basics. Provides the container knowledge required for Kubernetes sections.

Lesson 1 • Centralized Logging and Log Analysis

Explains log aggregation, structured logging, and query-based analysis. Enables rapid root-cause identification during incidents.

Lesson 2 • Metrics Collection and Dashboards

Covers metric types, collection agents, and dashboard design for cloud workloads. Provides the visibility foundation for all reliability practices.

Lesson 3 • Distributed Tracing and Profiling

Introduces trace context propagation, span analysis, and continuous profiling. Pinpoints latency bottlenecks across microservice call chains.

Lesson 4 • Alerting and On-Call Management

Covers alert threshold design, escalation policies, and runbook integration. Reduces mean time to response for production incidents.

Lesson 1 • Cloud Migration and Modernization Strategy

Introduces the 6R migration strategies and modernization roadmap planning. Equips engineers to guide workload migration from on-premises to cloud.

Lesson 2 • Resilience and Disaster Recovery Design

Covers RTO, RPO, multi-region failover, and chaos engineering principles. Enables engineers to design systems that survive component and regional failures.

Lesson 3 • Microservices and Event-Driven Architecture

Covers service decomposition, messaging patterns, and event streaming design. Prepares engineers to build loosely coupled, scalable cloud-native systems.

Lesson 4 • Well-Architected Framework Pillars

Applies the five pillars of cloud architecture to real design decisions. Provides a structured lens for evaluating any cloud solution.