Skip to content
Pressentify
Home
Learn
Handbooks
32 print-ready volumes across 6 handbooks
7 volumes
System Design
2 volumes
AWS Production
4 volumes
Python
6 volumes
FastAPI
7 volumes
AI Full-Stack
6 volumes
Django
Topics
14 courses, beginner to production
Python
PostgreSQL
System Design
Django
MongoDB
AWS
AI Full-Stack
Data Structures & Algorithms
JavaScript
React
Docker
FastAPI
Next.js
MySQL
Cheatsheets
8 one-page quick references
Python
PostgreSQL
System Design
Django
MongoDB
AWS
AI Full-Stack
Data Structures & Algorithms
DSA Lab
12 animated lessons, synced to running code
Binary Search
Two Pointers
Maximum Subarray (Kadane’s)
Move Zeroes
Minimum Size Subarray Sum
Roadmap
Study planner
Job hunt
AI Interview
Blog
Sign in
Get started
Cheatsheets
/
AWS
AWS cheat sheets
65 sheets · 65 sections
Quick reference
Full course
01
AWS Fundamentals
1 sheet
AWS Fundamentals
AWS as managed infrastructure and platform services
Account, Region, AZ, edge location, and the other core vocabulary
The shared responsibility model
How AWS pricing dimensions generally work
Reading AWS documentation, quotas, and pricing pages
02
AWS Accounts and Organizations
1 sheet
AWS Accounts and Organizations
Why production should not live in one undifferentiated account
AWS Organizations, OUs, and service control policies
Environment separation: dev, staging, prod, security, shared services
Cross-account IAM roles
Account vending, guardrails, and organization-wide governance
03
AWS Regions, Availability Zones, and Resilience
1 sheet
AWS Regions, Availability Zones, and Resilience
Region vs Availability Zone vs edge location
Multi-AZ as the normal production baseline
Regional vs global services — the architectural implications
RPO, RTO, and the resilience vocabulary
Designing so one failure does not become a full outage
04
IAM — Master This
1 sheet
IAM — Master This
IAM vocabulary: identities, policies, resources, actions
Identity-based, resource-based, trust, boundary, and session policies
Users vs roles, role assumption, and federation
Least privilege, explicit deny, and policy evaluation logic
ARNs, conditions, wildcards, and troubleshooting access
IAM Access Analyzer and ongoing permission review
05
AWS Authentication and Federation
1 sheet
AWS Authentication and Federation
IAM Identity Center and federated access
SAML and OIDC federation
Role assumption and short-lived credentials
The SDK/CLI credential provider chain
MFA, root protection, and workload identity
06
AWS CLI, SDKs, and APIs
1 sheet
AWS CLI, SDKs, and APIs
AWS CLI basics: profiles, regions, and JMESPath queries
SDK clients: retries, paginators, and waiters
Inspecting APIs, quotas, and error messages
Automation first for repeatable tasks
07
AWS Networking — Core Model
1 sheet
AWS Networking — Core Model
A VPC is your own isolated virtual network
VPC vocabulary: the pieces that make up a network
What makes a subnet public vs private
Designing non-overlapping CIDR ranges
08
Subnets, Routing, and Gateways
1 sheet
Subnets, Routing, and Gateways
Subnet CIDR planning and IP allocation
Route-table associations and egress paths
Inbound reachability vs outbound-only access
VPC endpoints: gateway vs interface
NAT gateway cost and architecture tradeoffs
09
Security Groups and Network ACLs
1 sheet
Security Groups and Network ACLs
Security groups: stateful, instance-level firewalls
Network ACLs: stateless, subnet-level rules
Choosing security groups, NACLs, or inspection
Designing layered network controls
Ephemeral ports and why statefulness matters
10
DNS and Network Connectivity
1 sheet
DNS and Network Connectivity
Route 53 vocabulary: zones, records, and TTL
Public vs private hosted zones
Route 53 routing policies
Route 53 Resolver and private DNS
VPC peering, Transit Gateway, VPN, and Direct Connect
11
Load Balancing
1 sheet
Load Balancing
Application Load Balancer vs Network Load Balancer
Listeners, rules, and target groups
Why statelessness makes scaling behind a load balancer easy
Cross-zone balancing and health-check failures
Designing internet → load balancer → private targets
12
EC2 — Compute Fundamentals
1 sheet
EC2 — Compute Fundamentals
EC2 vocabulary: instances, AMIs, and instance types
EC2 purchasing options and their tradeoffs
Vertical vs horizontal scaling
Placement groups and tenancy
Diagnosing instance resource problems
13
EC2 Storage and Lifecycle
1 sheet
EC2 Storage and Lifecycle
EBS volume types and snapshots
Instance store vs EBS
AMIs, image pipelines, and immutable infrastructure
Why hand-tuned servers cause configuration drift
14
Auto Scaling
1 sheet
Auto Scaling
Auto Scaling Group vocabulary
Target tracking, step, and scheduled scaling
Auto Scaling and load balancer integration
Designing for instance replacement, not permanence
15
ECS — Containerized Applications
1 sheet
ECS — Containerized Applications
ECS Core Vocabulary
ECS on EC2 vs Fargate
Task Role vs Execution Role
ECS Rolling Deployments
When to Choose ECS
16
EKS and Kubernetes — Working Knowledge
1 sheet
EKS and Kubernetes — Working Knowledge
What EKS Manages vs What You Manage
Kubernetes Vocabulary and IAM Integration
When EKS Is Justified
The Operational Cost of Kubernetes
17
Lambda — Serverless Compute
1 sheet
Lambda — Serverless Compute
Lambda Core Vocabulary
Synchronous, Asynchronous, and Event Source Mappings
Cold Starts, Reserved and Provisioned Concurrency
Retries and Idempotency
When Lambda Is a Strong Fit
18
API Gateway and API Front Doors
1 sheet
API Gateway and API Front Doors
REST APIs vs HTTP APIs
API Gateway + Lambda vs Private Backend Patterns
Timeout, Payload, and Rate Limits
When ALB Fits Better Than API Gateway
19
S3 — Object Storage
1 sheet
S3 — Object Storage
S3 Core Vocabulary
Consistency, Durability, and Availability
Multipart Upload and Large-File Patterns
Public Access Risks and Block Public Access
Common S3 Workload Patterns
20
S3 Security and Data Lifecycle
1 sheet
S3 Security and Data Lifecycle
Identity-Based vs Resource-Based S3 Access
S3 Encryption Options
Versioning, Object Lock, and Lifecycle Transitions
Replication and Cross-Account Sharing
Least Privilege and Avoiding Public Buckets
21
CloudFront and Edge Delivery
1 sheet
CloudFront and Edge Delivery
CloudFront Core Vocabulary
CloudFront + S3 vs CloudFront + ALB Patterns
Cache Keys, TTL, and Invalidation
22
Databases — RDS
1 sheet
Databases — RDS
RDS Core Vocabulary
Multi-AZ vs Read Replicas
Connections, Pooling, and Database Monitoring
Designing for Failover and Maintenance
23
Aurora — Working Knowledge
1 sheet
Aurora — Working Knowledge
Aurora Architecture and Endpoints
Aurora PostgreSQL/MySQL Compatibility
When Aurora Fits Over Standard RDS
24
DynamoDB
1 sheet
DynamoDB
DynamoDB Core Vocabulary
Single-Table Design vs Relational Modeling
Hot Partitions and Adaptive Capacity
Transactional APIs and Optimistic Concurrency
25
ElastiCache / Managed Caching
1 sheet
ElastiCache / Managed Caching
Redis vs Memcached Use Cases
Cache-Aside, Write-Through, TTL, and Invalidation
Cache Stampede Prevention and Distributed Locks
Session Storage, Rate Limiting, Counters, and Pub/Sub
Cache Availability and Failover Implications
A Cache Is Not the System of Record
26
Messaging — SQS
1 sheet
Messaging — SQS
SQS Queues, Visibility Timeout, Long Polling, Standard vs FIFO
Dead-Letter Queues, Redrive, Retries, and Idempotent Consumers
At-Least-Once Delivery and Duplicate Message Handling
Sizing and Extending Visibility Timeout
Worker Architectures with Backpressure and Bounded Concurrency
27
SNS and Event Fan-Out
1 sheet
SNS and Event Fan-Out
SNS Topics, Subscriptions, Filtering, and Fan-Out
SNS + SQS Fan-Out for Decoupling
Pub/Sub vs Direct Synchronous Calls
28
EventBridge and Event-Driven Architecture
1 sheet
EventBridge and Event-Driven Architecture
Event buses, rules, targets, and patterns
Domain events vs commands
Designing loosely coupled event-driven services
29
Kinesis and Streaming Concepts
1 sheet
Kinesis and Streaming Concepts
Kinesis Core Vocabulary: Shards, Partition Keys, Ordering, Retention, Replay
Consumers, Throughput Scaling, and Backpressure
When Streaming Fits vs SQS or EventBridge
Real-Time Analytics and Event Ingestion Architectures
30
Step Functions — Workflow Orchestration
1 sheet
Step Functions — Workflow Orchestration
State Machines, Tasks, and Executions
Retries, Catch, Parallel, Map, Timeouts, and Callbacks
Step Functions vs. Orchestration Crammed Into One Lambda
32
KMS and Encryption
1 sheet
KMS and Encryption
Envelope Encryption, KMS Keys, Policies, Grants, and Rotation
Encryption at Rest vs. Encryption in Transit
Why KMS Authorization Needs Both IAM and a Key Policy
34
CloudTrail and Auditability
1 sheet
CloudTrail and Auditability
CloudTrail Event Types and Trails
Centralizing and Protecting Audit Logs
Answering "Who Changed What" with CloudTrail
35
AWS Config and Governance
1 sheet
AWS Config and Governance
Configuration Recorder, Items, and History
Config Rules, Conformance Packs, and Remediation
AWS Config vs CloudTrail
36
WAF and Edge Security
1 sheet
WAF and Edge Security
Web ACLs, Rules, and Rule Groups
IP Sets, Rate-Based Rules, Bot Control, and Logging
DDoS Protection and the Role of Shield
37
Monitoring — CloudWatch
1 sheet
Monitoring — CloudWatch
Metrics, Dimensions, and Statistics
Log Groups, Metric Filters, and Logs Insights
Alarms, Dashboards, and Event-Driven Actions
Metrics vs Logs vs Traces vs Alarms
Designing Observability Around the Right Signals
38
Distributed Tracing and X-Ray / OpenTelemetry
1 sheet
Distributed Tracing and X-Ray / OpenTelemetry
Trace IDs, Segments, and Propagation
Sampling, Annotations, and Service Maps
X-Ray and OpenTelemetry
Attributing Latency Across Tiers
39
Logging Architecture
1 sheet
Logging Architecture
Centralized Logging, Not Instance Files
AWS Log Sources, Structure, and Retention Cost
Protecting Logs and the Data In Them
40
Infrastructure as Code
1 sheet
Infrastructure as Code
Reproducible and Reviewable Infrastructure
CloudFormation Fundamentals
AWS CDK Concepts
Terraform Concepts
Choosing One IaC Tool, Deeply
41
CI/CD on AWS
1 sheet
CI/CD on AWS
Pipeline Stages, Artifacts, and Rollback
CodeBuild, CodePipeline, CodeDeploy — and the Alternatives
Rolling, Blue/Green, Canary, Immutable, Feature-Flagged
Database Migrations as Part of the Deployment
42
ECR and Container Supply Chain
1 sheet
ECR and Container Supply Chain
ECR Repositories, Tags, and Authentication
Lifecycle Policies and Promotion Between Environments
Provenance, Minimal Base Images, Scanning, and Non-Root
43
ECS Deployment Architecture
1 sheet
ECS Deployment Architecture
Service → Task Definition → Task → Target Group → Load Balancer
Deployment Health, Circuit Breakers, and Rollback
Deploying a Web Service with a Managed Database and Redis
44
Serverless Architecture
1 sheet
Serverless Architecture
Composition Patterns: API Gateway, DynamoDB, S3, EventBridge, SQS
Cold Starts, Limits, Concurrency, Retries, and Idempotency
When Not to Force Serverless
45
AWS Networking at Senior Level
1 sheet
AWS Networking at Senior Level
The Full Connectivity Surface
Hub-and-Spoke and Non-Overlapping Address Space
Multi-AZ Subnet Architecture, Route by Route
Troubleshooting in Order: DNS → Route → SG → NACL → Listener
46
High Availability and Reliability
1 sheet
High Availability and Reliability
Redundancy, Health Checks, and Automated Replacement
Timeouts, Bounded Retries, Circuit Breakers, and Degradation
Service Quotas as Reliability Constraints
Well-Architected Reliability Principles
47
Disaster Recovery
1 sheet
Disaster Recovery
The Four DR Strategies
RPO and RTO
Designing and Testing Recovery Procedures
Multi-AZ vs Multi-Region Recovery
48
Performance and Scalability
1 sheet
Performance and Scalability
The Scaling Toolbox
Measure the Bottleneck Before Scaling
Throughput, Latency, Concurrency, and Tail Latency
Load Testing and Validating Scaling Assumptions
49
Cost Optimization
1 sheet
Cost Optimization
AWS Pricing Dimensions
Cost Tools, Tags, and Commitments
Architecture Choices Dominate Cost
50
Sustainability
1 sheet
Sustainability
Sustainability as an Architectural Concern
Efficiency Levers That Reduce Impact
Sustainability as a Trade-off Among the Pillars
51
AWS Well-Architected Framework
1 sheet
AWS Well-Architected Framework
The Six Pillars
Reviewing Across All Six Pillars
Explicit Trade-offs, Documented Risks, and Revisiting
52
Operational Excellence
1 sheet
Operational Excellence
Runbooks, Playbooks, Incidents, and Postmortems
Automating Repeatable Operational Work
Operational Readiness and Change Management
53
IAM and Multi-Account Security Architecture
1 sheet
IAM and Multi-Account Security Architecture
Identity Boundaries Across Accounts
Guardrails, Central Security, and Break-Glass
SCPs Constrain — They Never Grant
54
Data Protection and Backup Strategy
1 sheet
Data Protection and Backup Strategy
Backups, Retention, Immutability, and Recovery Testing
Classifying Data by Sensitivity and Availability
Lifecycle Policies for Hot, Warm, Cold, and Archival Data
55
Cloud Architecture Patterns
1 sheet
Cloud Architecture Patterns
Three-Tier Web Application
Serverless API
Event-Driven Platform
Data Ingestion Pipeline
File Processing Pipeline
56
AWS for Django / Python Backends
1 sheet
AWS for Django / Python Backends
Mapping a Django or FastAPI Backend to AWS
Static Files, Media, Jobs, Migrations, and Health Checks
Web and Workers Scale on Different Signals
57
AWS for Full-Stack / React Applications
1 sheet
AWS for Full-Stack / React Applications
Static Output or Server Rendering
DNS, TLS, Caching, CORS, and Environments
The Full Request Path, End to End
58
AWS Disaster and Failure Testing
1 sheet
AWS Disaster and Failure Testing
Testing More Than the Happy Path
The Failure Drill Catalogue
Fault Injection with a Controlled Blast Radius
59
Production Debugging on AWS
1 sheet
Production Debugging on AWS
The Fixed Investigation Order
The Eleven Investigations You Will Actually Run
Correlation IDs and Request IDs
60
AWS Service Quotas and Limits
1 sheet
AWS Service Quotas and Limits
Every Service Has Quotas
Monitoring Utilization and Requesting Increases Early
Limits Are Architecture Inputs
61
AWS Governance and Tagging
1 sheet
AWS Governance and Tagging
A Tagging Schema That Holds
What Tags Are Actually Used For
Naming, Boundaries and Guardrails Come First
62
Infrastructure and Configuration Drift
1 sheet
Infrastructure and Configuration Drift
Desired State and Actual State
CloudFormation Drift Detection and Review Workflows
Immutable and Reproducible Over Console-Only Changes
Documenting the Break-Glass Path
63
API Reliability and Idempotency on AWS
1 sheet
API Reliability and Idempotency on AWS
What Idempotency Actually Means
The Mechanisms, and Which One to Reach For
Never Assume Exactly-Once
64
AWS Senior-Level System Design
1 sheet
AWS Senior-Level System Design
Designing a System on AWS, Worked Through
Nine System Shapes, and What Each One Is Really About
The Sixteen Dimensions a Design Has to Cover
65
AWS Architecture Review Checklist
1 sheet
AWS Architecture Review Checklist
The Security Pass — Six Questions, Six Pieces of Evidence
The Reliability Pass — Name the Failure, Then Find the Control
The Performance Pass — Find the Bottleneck Before Judging the Design
The Cost Pass — Read the Bill by Driver, Not by Total
The Operations Pass — Could Someone Else Run This at 3 a.m.?
The Sustainability Pass — Provisioned Capacity Nobody Is Using
66
AWS Interview-Level Questions
1 sheet
AWS Interview-Level Questions
Foundations and Identity — Four Questions Every Interview Opens With
Networking and Traffic — Four Questions With One Precise Answer Each
Compute — Choosing a Model, and the Two Lambda Questions
Data Stores — Four Comparisons, Four Different Axes
Messaging — Three Services, Two Queue Types, One Idempotent Consumer
The Seven "How Would You…" Questions
68
Practical AWS Projects
1 sheet
Practical AWS Projects
Project 1 — A Production Django API
Project 2 — A Serverless API
Project 3 — A File-Processing System
Project 4 — A Multi-Tenant SaaS Platform
Project 5 — A Highly Available Platform, Built From Code
01
AWS Fundamentals
1 sheet
AWS Fundamentals
AWS as managed infrastructure and platform services
Account, Region, AZ, edge location, and the other core vocabulary
The shared responsibility model
How AWS pricing dimensions generally work
Reading AWS documentation, quotas, and pricing pages
04
IAM — Master This
1 sheet
IAM — Master This
IAM vocabulary: identities, policies, resources, actions
Identity-based, resource-based, trust, boundary, and session policies
Users vs roles, role assumption, and federation
Least privilege, explicit deny, and policy evaluation logic
ARNs, conditions, wildcards, and troubleshooting access
IAM Access Analyzer and ongoing permission review
09
Security Groups and Network ACLs
1 sheet
Security Groups and Network ACLs
Security groups: stateful, instance-level firewalls
Network ACLs: stateless, subnet-level rules
Choosing security groups, NACLs, or inspection
Designing layered network controls
Ephemeral ports and why statefulness matters
12
EC2 — Compute Fundamentals
1 sheet
EC2 — Compute Fundamentals
EC2 vocabulary: instances, AMIs, and instance types
EC2 purchasing options and their tradeoffs
Vertical vs horizontal scaling
Placement groups and tenancy
Diagnosing instance resource problems
15
ECS — Containerized Applications
1 sheet
ECS — Containerized Applications
ECS Core Vocabulary
ECS on EC2 vs Fargate
Task Role vs Execution Role
ECS Rolling Deployments
When to Choose ECS
18
API Gateway and API Front Doors
1 sheet
API Gateway and API Front Doors
REST APIs vs HTTP APIs
API Gateway + Lambda vs Private Backend Patterns
Timeout, Payload, and Rate Limits
When ALB Fits Better Than API Gateway
21
CloudFront and Edge Delivery
1 sheet
CloudFront and Edge Delivery
CloudFront Core Vocabulary
CloudFront + S3 vs CloudFront + ALB Patterns
Cache Keys, TTL, and Invalidation
23
Aurora — Working Knowledge
1 sheet
Aurora — Working Knowledge
Aurora Architecture and Endpoints
Aurora PostgreSQL/MySQL Compatibility
When Aurora Fits Over Standard RDS
26
Messaging — SQS
1 sheet
Messaging — SQS
SQS Queues, Visibility Timeout, Long Polling, Standard vs FIFO
Dead-Letter Queues, Redrive, Retries, and Idempotent Consumers
At-Least-Once Delivery and Duplicate Message Handling
Sizing and Extending Visibility Timeout
Worker Architectures with Backpressure and Bounded Concurrency
28
EventBridge and Event-Driven Architecture
1 sheet
EventBridge and Event-Driven Architecture
Event buses, rules, targets, and patterns
Domain events vs commands
Designing loosely coupled event-driven services
32
KMS and Encryption
1 sheet
KMS and Encryption
Envelope Encryption, KMS Keys, Policies, Grants, and Rotation
Encryption at Rest vs. Encryption in Transit
Why KMS Authorization Needs Both IAM and a Key Policy
36
WAF and Edge Security
1 sheet
WAF and Edge Security
Web ACLs, Rules, and Rule Groups
IP Sets, Rate-Based Rules, Bot Control, and Logging
DDoS Protection and the Role of Shield
39
Logging Architecture
1 sheet
Logging Architecture
Centralized Logging, Not Instance Files
AWS Log Sources, Structure, and Retention Cost
Protecting Logs and the Data In Them
42
ECR and Container Supply Chain
1 sheet
ECR and Container Supply Chain
ECR Repositories, Tags, and Authentication
Lifecycle Policies and Promotion Between Environments
Provenance, Minimal Base Images, Scanning, and Non-Root
45
AWS Networking at Senior Level
1 sheet
AWS Networking at Senior Level
The Full Connectivity Surface
Hub-and-Spoke and Non-Overlapping Address Space
Multi-AZ Subnet Architecture, Route by Route
Troubleshooting in Order: DNS → Route → SG → NACL → Listener
48
Performance and Scalability
1 sheet
Performance and Scalability
The Scaling Toolbox
Measure the Bottleneck Before Scaling
Throughput, Latency, Concurrency, and Tail Latency
Load Testing and Validating Scaling Assumptions
51
AWS Well-Architected Framework
1 sheet
AWS Well-Architected Framework
The Six Pillars
Reviewing Across All Six Pillars
Explicit Trade-offs, Documented Risks, and Revisiting
54
Data Protection and Backup Strategy
1 sheet
Data Protection and Backup Strategy
Backups, Retention, Immutability, and Recovery Testing
Classifying Data by Sensitivity and Availability
Lifecycle Policies for Hot, Warm, Cold, and Archival Data
57
AWS for Full-Stack / React Applications
1 sheet
AWS for Full-Stack / React Applications
Static Output or Server Rendering
DNS, TLS, Caching, CORS, and Environments
The Full Request Path, End to End
60
AWS Service Quotas and Limits
1 sheet
AWS Service Quotas and Limits
Every Service Has Quotas
Monitoring Utilization and Requesting Increases Early
Limits Are Architecture Inputs
63
API Reliability and Idempotency on AWS
1 sheet
API Reliability and Idempotency on AWS
What Idempotency Actually Means
The Mechanisms, and Which One to Reach For
Never Assume Exactly-Once
66
AWS Interview-Level Questions
1 sheet
AWS Interview-Level Questions
Foundations and Identity — Four Questions Every Interview Opens With
Networking and Traffic — Four Questions With One Precise Answer Each
Compute — Choosing a Model, and the Two Lambda Questions
Data Stores — Four Comparisons, Four Different Axes
Messaging — Three Services, Two Queue Types, One Idempotent Consumer
The Seven "How Would You…" Questions
02
AWS Accounts and Organizations
1 sheet
AWS Accounts and Organizations
Why production should not live in one undifferentiated account
AWS Organizations, OUs, and service control policies
Environment separation: dev, staging, prod, security, shared services
Cross-account IAM roles
Account vending, guardrails, and organization-wide governance
05
AWS Authentication and Federation
1 sheet
AWS Authentication and Federation
IAM Identity Center and federated access
SAML and OIDC federation
Role assumption and short-lived credentials
The SDK/CLI credential provider chain
MFA, root protection, and workload identity
08
Subnets, Routing, and Gateways
1 sheet
Subnets, Routing, and Gateways
Subnet CIDR planning and IP allocation
Route-table associations and egress paths
Inbound reachability vs outbound-only access
VPC endpoints: gateway vs interface
NAT gateway cost and architecture tradeoffs
11
Load Balancing
1 sheet
Load Balancing
Application Load Balancer vs Network Load Balancer
Listeners, rules, and target groups
Why statelessness makes scaling behind a load balancer easy
Cross-zone balancing and health-check failures
Designing internet → load balancer → private targets
14
Auto Scaling
1 sheet
Auto Scaling
Auto Scaling Group vocabulary
Target tracking, step, and scheduled scaling
Auto Scaling and load balancer integration
Designing for instance replacement, not permanence
17
Lambda — Serverless Compute
1 sheet
Lambda — Serverless Compute
Lambda Core Vocabulary
Synchronous, Asynchronous, and Event Source Mappings
Cold Starts, Reserved and Provisioned Concurrency
Retries and Idempotency
When Lambda Is a Strong Fit
20
S3 Security and Data Lifecycle
1 sheet
S3 Security and Data Lifecycle
Identity-Based vs Resource-Based S3 Access
S3 Encryption Options
Versioning, Object Lock, and Lifecycle Transitions
Replication and Cross-Account Sharing
Least Privilege and Avoiding Public Buckets
24
DynamoDB
1 sheet
DynamoDB
DynamoDB Core Vocabulary
Single-Table Design vs Relational Modeling
Hot Partitions and Adaptive Capacity
Transactional APIs and Optimistic Concurrency
27
SNS and Event Fan-Out
1 sheet
SNS and Event Fan-Out
SNS Topics, Subscriptions, Filtering, and Fan-Out
SNS + SQS Fan-Out for Decoupling
Pub/Sub vs Direct Synchronous Calls
29
Kinesis and Streaming Concepts
1 sheet
Kinesis and Streaming Concepts
Kinesis Core Vocabulary: Shards, Partition Keys, Ordering, Retention, Replay
Consumers, Throughput Scaling, and Backpressure
When Streaming Fits vs SQS or EventBridge
Real-Time Analytics and Event Ingestion Architectures
35
AWS Config and Governance
1 sheet
AWS Config and Governance
Configuration Recorder, Items, and History
Config Rules, Conformance Packs, and Remediation
AWS Config vs CloudTrail
38
Distributed Tracing and X-Ray / OpenTelemetry
1 sheet
Distributed Tracing and X-Ray / OpenTelemetry
Trace IDs, Segments, and Propagation
Sampling, Annotations, and Service Maps
X-Ray and OpenTelemetry
Attributing Latency Across Tiers
40
Infrastructure as Code
1 sheet
Infrastructure as Code
Reproducible and Reviewable Infrastructure
CloudFormation Fundamentals
AWS CDK Concepts
Terraform Concepts
Choosing One IaC Tool, Deeply
44
Serverless Architecture
1 sheet
Serverless Architecture
Composition Patterns: API Gateway, DynamoDB, S3, EventBridge, SQS
Cold Starts, Limits, Concurrency, Retries, and Idempotency
When Not to Force Serverless
47
Disaster Recovery
1 sheet
Disaster Recovery
The Four DR Strategies
RPO and RTO
Designing and Testing Recovery Procedures
Multi-AZ vs Multi-Region Recovery
50
Sustainability
1 sheet
Sustainability
Sustainability as an Architectural Concern
Efficiency Levers That Reduce Impact
Sustainability as a Trade-off Among the Pillars
53
IAM and Multi-Account Security Architecture
1 sheet
IAM and Multi-Account Security Architecture
Identity Boundaries Across Accounts
Guardrails, Central Security, and Break-Glass
SCPs Constrain — They Never Grant
56
AWS for Django / Python Backends
1 sheet
AWS for Django / Python Backends
Mapping a Django or FastAPI Backend to AWS
Static Files, Media, Jobs, Migrations, and Health Checks
Web and Workers Scale on Different Signals
58
AWS Disaster and Failure Testing
1 sheet
AWS Disaster and Failure Testing
Testing More Than the Happy Path
The Failure Drill Catalogue
Fault Injection with a Controlled Blast Radius
61
AWS Governance and Tagging
1 sheet
AWS Governance and Tagging
A Tagging Schema That Holds
What Tags Are Actually Used For
Naming, Boundaries and Guardrails Come First
64
AWS Senior-Level System Design
1 sheet
AWS Senior-Level System Design
Designing a System on AWS, Worked Through
Nine System Shapes, and What Each One Is Really About
The Sixteen Dimensions a Design Has to Cover
68
Practical AWS Projects
1 sheet
Practical AWS Projects
Project 1 — A Production Django API
Project 2 — A Serverless API
Project 3 — A File-Processing System
Project 4 — A Multi-Tenant SaaS Platform
Project 5 — A Highly Available Platform, Built From Code
03
AWS Regions, Availability Zones, and Resilience
1 sheet
AWS Regions, Availability Zones, and Resilience
Region vs Availability Zone vs edge location
Multi-AZ as the normal production baseline
Regional vs global services — the architectural implications
RPO, RTO, and the resilience vocabulary
Designing so one failure does not become a full outage
06
AWS CLI, SDKs, and APIs
1 sheet
AWS CLI, SDKs, and APIs
AWS CLI basics: profiles, regions, and JMESPath queries
SDK clients: retries, paginators, and waiters
Inspecting APIs, quotas, and error messages
Automation first for repeatable tasks
07
AWS Networking — Core Model
1 sheet
AWS Networking — Core Model
A VPC is your own isolated virtual network
VPC vocabulary: the pieces that make up a network
What makes a subnet public vs private
Designing non-overlapping CIDR ranges
10
DNS and Network Connectivity
1 sheet
DNS and Network Connectivity
Route 53 vocabulary: zones, records, and TTL
Public vs private hosted zones
Route 53 routing policies
Route 53 Resolver and private DNS
VPC peering, Transit Gateway, VPN, and Direct Connect
13
EC2 Storage and Lifecycle
1 sheet
EC2 Storage and Lifecycle
EBS volume types and snapshots
Instance store vs EBS
AMIs, image pipelines, and immutable infrastructure
Why hand-tuned servers cause configuration drift
16
EKS and Kubernetes — Working Knowledge
1 sheet
EKS and Kubernetes — Working Knowledge
What EKS Manages vs What You Manage
Kubernetes Vocabulary and IAM Integration
When EKS Is Justified
The Operational Cost of Kubernetes
19
S3 — Object Storage
1 sheet
S3 — Object Storage
S3 Core Vocabulary
Consistency, Durability, and Availability
Multipart Upload and Large-File Patterns
Public Access Risks and Block Public Access
Common S3 Workload Patterns
22
Databases — RDS
1 sheet
Databases — RDS
RDS Core Vocabulary
Multi-AZ vs Read Replicas
Connections, Pooling, and Database Monitoring
Designing for Failover and Maintenance
25
ElastiCache / Managed Caching
1 sheet
ElastiCache / Managed Caching
Redis vs Memcached Use Cases
Cache-Aside, Write-Through, TTL, and Invalidation
Cache Stampede Prevention and Distributed Locks
Session Storage, Rate Limiting, Counters, and Pub/Sub
Cache Availability and Failover Implications
A Cache Is Not the System of Record
30
Step Functions — Workflow Orchestration
1 sheet
Step Functions — Workflow Orchestration
State Machines, Tasks, and Executions
Retries, Catch, Parallel, Map, Timeouts, and Callbacks
Step Functions vs. Orchestration Crammed Into One Lambda
34
CloudTrail and Auditability
1 sheet
CloudTrail and Auditability
CloudTrail Event Types and Trails
Centralizing and Protecting Audit Logs
Answering "Who Changed What" with CloudTrail
37
Monitoring — CloudWatch
1 sheet
Monitoring — CloudWatch
Metrics, Dimensions, and Statistics
Log Groups, Metric Filters, and Logs Insights
Alarms, Dashboards, and Event-Driven Actions
Metrics vs Logs vs Traces vs Alarms
Designing Observability Around the Right Signals
41
CI/CD on AWS
1 sheet
CI/CD on AWS
Pipeline Stages, Artifacts, and Rollback
CodeBuild, CodePipeline, CodeDeploy — and the Alternatives
Rolling, Blue/Green, Canary, Immutable, Feature-Flagged
Database Migrations as Part of the Deployment
43
ECS Deployment Architecture
1 sheet
ECS Deployment Architecture
Service → Task Definition → Task → Target Group → Load Balancer
Deployment Health, Circuit Breakers, and Rollback
Deploying a Web Service with a Managed Database and Redis
46
High Availability and Reliability
1 sheet
High Availability and Reliability
Redundancy, Health Checks, and Automated Replacement
Timeouts, Bounded Retries, Circuit Breakers, and Degradation
Service Quotas as Reliability Constraints
Well-Architected Reliability Principles
49
Cost Optimization
1 sheet
Cost Optimization
AWS Pricing Dimensions
Cost Tools, Tags, and Commitments
Architecture Choices Dominate Cost
52
Operational Excellence
1 sheet
Operational Excellence
Runbooks, Playbooks, Incidents, and Postmortems
Automating Repeatable Operational Work
Operational Readiness and Change Management
55
Cloud Architecture Patterns
1 sheet
Cloud Architecture Patterns
Three-Tier Web Application
Serverless API
Event-Driven Platform
Data Ingestion Pipeline
File Processing Pipeline
59
Production Debugging on AWS
1 sheet
Production Debugging on AWS
The Fixed Investigation Order
The Eleven Investigations You Will Actually Run
Correlation IDs and Request IDs
62
Infrastructure and Configuration Drift
1 sheet
Infrastructure and Configuration Drift
Desired State and Actual State
CloudFormation Drift Detection and Review Workflows
Immutable and Reproducible Over Console-Only Changes
Documenting the Break-Glass Path
65
AWS Architecture Review Checklist
1 sheet
AWS Architecture Review Checklist
The Security Pass — Six Questions, Six Pieces of Evidence
The Reliability Pass — Name the Failure, Then Find the Control
The Performance Pass — Find the Bottleneck Before Judging the Design
The Cost Pass — Read the Bill by Driver, Not by Total
The Operations Pass — Could Someone Else Run This at 3 a.m.?
The Sustainability Pass — Provisioned Capacity Nobody Is Using
