AWS Tutorial For Beginners | AWS Full Course 2026 | AWS Cloud Computing For Beginners | Simplilearn

Key Takeaways

Imagine building an entire AWS architecture. EC2 instances, VPCs, subnets, load balancers, security groups, all created perfectly in minutes without clicking anything on the console. Now that's exactly the level of confidence and automation you start developing when you understand AWS the right way. In this session, we are going to take a practical end-to-end journey through some of the most important services every AWS solution architect must know. We will begin with the basics, understanding core structure and learning how IM controls access in a secure and scalable way. Then we'll move into the real engine of AWS compute. You will learn how EC2 works, how storage options differ and how to choose the right instance, purchasing model or storage type based on cost, performance and business needs. And from there on we will step into automation exploring autoscaling, life cycle management, scaling policies, cloudatch alarms and everything that keeps your application running smoothly even when traffic spikes without warning. And once understand how to design architecture that scale themselves, we will go a level deeper. Infrastructure as code cloud for will show you how entire environments can be deployed, updated and rolled by automatically with reusable templates. The same way real companies build production ready systems. Throughout the session, you will see some real examples to walkroughs, troubleshooting techniques, and practical explanations that connect every concept to real world AWS architecture. So whether you're new to cloud computing or preparing for the AWS solution architect role, this one continuous session will help you move from understanding individual services to understanding how they all work together to build reliable, scalable, secure systems. Now before we move on, here's a quick information. If you are interested in growing your career in cloud computing, do not forget to check out Simply's Cloud Architect Master Program. A complete learning path designed to help you master AWS, Azure, and Google Cloud all in one place. This program will give you access to official AWS author learning content, a Microsoft Azure exam voucher, live interactive classes, hands-on cloud labs, and certification aligned training for both Azure and AWS. You will learn 40 plus in- demand cloud skills, work with 25 plus essential services, and earn official certificates from Microsoft as you progress. And with job focused projects, real world cloud deployments and expert trainers guiding you throughout the journey. This four month online program prepares you how to design, build and manage scalable cloud solutions confidently. So guys, what are you waiting for? Hurry up and enroll can find the course link below. Also, here's a quick quiz question for you. The question is, which AWS feature automatically increases or decreases EC2 instances based on demand? Your options are cloud trail, autoscaling, cloud shell or IM. Let me know your answers in the comment section below. So guys without any further ado let's get started. >> Very good morning all. I welcome you to simply learn words number one boot camp and even I welcome you to AWS certified solution architect associate course. Myself Mambni I'll be your trainer for this AWS solution architect associate course. So total I have 10.5 years of experience in teaching and training. Right now I have a three certification AWS certified solution architect associate level professional level and AWS isops administrator. Three certification in AWS. Introduction to AWS. So before that what is cloud computing folks? Cloud computing is an ondemand remote availability of resources such as computing user management. Even if I take one more simple definition, cloud computing is nothing but ondemand delivering IT resources over the internet. So what kind of a resources now power storage what you're doing in onremises environment? That same thing you're going to use in cloud environment and that too user is going to not manage that user is going to access the resources like virtual servers or a storage networking thing. So user is not responsible to manage someone is there behalf of you they are managing just being a client or a user you are going to utilize the resources. Now let me take one simple example for cloud concept. Everyone is familiar with the electricity board right? Electricity board just being a user you are consuming the electricity in your houses or offices and what you are consuming based on that you are going to pay for it. You are not going to maintain your infrastructure of this electricity board behalf of you someone is there to manage this but just you are using the service of that electricity board. So like that cloud computing also you are using the service but someone is there to manage that. So now folks, do you have any idea what benefits I'll get if I'm using cloud computing? Cost optimization, costsaving, no upfront cost for resources. Scalability is also one of the benefit. No need to think about the capacity also. And the very important pay as you go model and no need to think about the capacity automatically scale up and scale down when it is required. Many services are available ready to use. Dynamic hosting as per the requirement less time to start an application. So these are the some important benefits for cloud computing. Now the companies that provide these services are called cloud providers. So folks as per my knowledge I know one of the cloud provider AWS. Do you know any other cloud providers in the market GCP Azure GCP is a product of Google. Azure is a product of Microsoft, IBM, Oracle, Alibaba. These all are cloud providers in the market. Now these services are accessible to the user over the internet. So always how you are using this cloud computing services by using the internet connectivity. So cloud provider ensure the large scale management of these services. So now this cloud provider they can deal with the large like a tier one company they can provide a solution for a beginners that to what you call startup even a cloud providers they provide a solution to individuals also. Now what is AWS? AWS stand for Amazon Web Services. It's a leading cloud provider which offers over 200 ondemand cloud services. These services are extended to individuals companies government based on a pay-per-use model. So now folks in AWS it provides more than 200 services. Now what are the features I'll get in AWS? Why should I go for AWS? What is the reason behind that? The first one is reliability folks. Even if you have a huge amount of a data or a low amount of a data, always the performance will be consistent and that to accurate also. Now scalability no need to think about the capacity because when I'm getting high traffic application automatically the resources will be increased. When I'm getting a low traffic automatically the resources will be decreased. That is the power of scalability in AWS environment. Now security let us consider this is my AWS environment now and here we have different different level let us consider this is level one this is level two and this is level three now I'm providing some security group at level one I'm providing some knackle at level two I'm providing some VPC flow log at level three so now if I want to make sure that my AWS environment should be secure at that time I'm providing a different level of a security within the environment cost effectiveness as you know that pay as you go model how much you are consuming based on that you are going to pay for it now what about the market trend if you talk about the market trend so average salary of AWS professional is like 1 lakh $60,000 and there is a huge demand of AWS professional that to 60% of a cloud computing jobs which require the AWS related skill even in the market you can see there are lot of opportunities are available lot of opportunities are available there is only one condition a person should be skillful If you're obtaining a solution architect course, solution architect certification, that means once you complete this course, you are able to decide which particular service should be used in which situation, which option should be used in which situation. So being a solution architect, you know that. So once you'll get the grip on these services 100% you'll be hired in the market. Now what are the skills we are going to cover in this particular certification? virtual private cloud, storage services, AWS security and IM identity and access management and finally container services. So now why should I go for this AWS solution architect course? All the organizations are migrating from onremises to cloud environment. Not only AWS, I'm talking about the cloud environment. So in every organization solution architect is required in the organization. Some of the people have the knowledge s I know that I know about the storage service. I know about the database service. I know about the comput service. So I can design the solution. No that is not possible. If that person he or she is not certified architect then it's not possible. See until and unless if you don't have that much of a depth knowledge about the designing the new car because being a selection architect you should know that in which situation you are going to use bus table class in which situation you are going to use standard class in which situation you are going to use general purpose. So that you should understand there is one more uh option in memory that is also one of the strategy. So being a solution architect you should know that when should I use which particular option might be you have the knowledge but do you think I can provide the optimized result? No. So the task of solution architect is providing optimal solution that to secure high performance cost optimized architecture and no doubt being a solution architect you are going to meet the requirements of current and future business needs. what they are expecting today and even what they are expecting in future. By considering that requirements, you are going to design the architecture and solution architect is not responsible to only review the new infrastructure, new solutions. Even being a solution architect, let us consider the organization is already migrated to AWS. Now you can review that and provide the solution like how I can improve the architecture. For example, I'm using one of the EC2 instance T2.micro. But you are working with a huge amount of a load. So I can suggest being a solution architect instead of T2.micro, I can use T4.large to handle that much of a traffic. This kind of a task can be identified by only solution architects. Now let's move on to the AWS overview. So folks, in every module you will get this scenario a day in the life of cloud architect. So now you are a cloud architect in an organization and have been asked to implement a solution in the AWS cloud. As a beginner in AWS focusing on core services such as computing, storage, database and networking services and even more. So now you must set up an AWS account and use the AWS CLI command line interface to interact with the AWS services and resources. Additionally, learn how to securely regulate access to AWS resources using AWS identity and access management service. To achieve this, you will learn a few concepts in this lesson that will help you to find the solution for given scenario. Now, what are the learning objectives? By the end of this lesson, you will be able to set up AWS setup and AWS account enabling access to the and utilization of AWS services. Configuring billing alerts to monitor AWS charges for F cost control and budget management. Then delegate access using IM roles to enhance the security and permission management. Then finally set up and work with AWS CLI for efficient interaction with AWS services. These are the learning objectives or even you can call it as a outcome. Once you complete the lessons, you are able to answer the questions based on these topics. Now how you will define the infrastructure term? Infrastructure is nothing but a combination of software and hardware components. So now in AWS infrastructure if I talk the region is first point. So what is region? Region is nothing but a geographical area where your AWS services are available. So this is one region. Now do you know how many regions we have in AWS? H it's 38 like recently AWS is updated one more region. And do you know how many regions we have in India? There are two regions are available. The first one is Mumbai and the second one is Hyderabad. So as you know that regions are nothing but a geographical area where AWS services are available. Now one more definition region is nothing but collection of two or more availability zones. Why it is two or more? What is the reason? Why not one or more? See if one goes down if one fails like disaster occur for this. So second and third third is ready to provide the service. So in simple terms for high availability third for fall tolerance for make sure that your data is highly available. So if I talk about the availability zones now what is availability zones? Availability zones are nothing but collection of one or more data centers. Then what is data center now? Collection of thousands of servers. How many number of availability zones we have? Earlier before September 1st it was 117. Now if I talk about the infrastructure 120 availability zones we have so recently launched region name is Newsland. And let me tell you folks minimum two or more availability zones are always available and maximum six availability zone in North Virginia we have. So what is the distance between these two availability zones? It's 60 mi or 100 kilometer or more. So why they are keeping 100 kilometer or more to avoid any natural disaster? See if one of the availability zone affects if you keep within a 5 kilometers even that affect to the second also then there is no use to maintaining the aes within the range. So that is the reason AWS has decided to keep this different availability zone 60 m or more than 100 kilometers always they maintain the distance. Now in the next slide you are going to see what I discussed just now. Here AWS infrastructure as you know that it's a global cloud infrastructure that offers the unmatched security broadreach and reliability as a cloud platform. It features over 200 services supported by data centers worldwide. Now what is region? Region is correspondent to geographical area housing the multiple availability zones. Each availability zone comprises one or more separate data centers as I discussed in the first slide itself. Availability zones are nothing but the collection of a data center each equipped with the sufficient power network setup reliable connection within the distinct zones right that is the reason they are maintaining the distance between the two availability zone to maintain these data centers. Now what benefits I'll get if I'm using this particular AWS infrastructure? AWS will provide a ability to quickly increase or decrease the resources to your application as their requirement as their need and even it enables your organization to manage the cost effectively while managing and maintaining the performance and efficiency. This particular feature is beneficial for the organization. They experience a variable workload. Sometime the traffic is high, sometime the traffic is low. In that situation, scalability will support more. Now reliability AWS has a strong track record that to if I talk about the architecture the architecture itself designed in a way that to deal with the disruptions and even it ensure the high availability and continuous functionality. What exactly it means? It mean that AWS can provide uh uninterrupted services even in the event of network failover or any natural disaster. Now security in security you can say that it delivers the high level security through its firewall. Firewalls are nothing but filters which filters your incoming and outgoing traffic. The next encryption if I talk about the technical definition for the encryption. Encryption is a process where I'm going to convert from plain text to cipher text. Now encryption is nothing but or doing the encoding and decoding. Encryption is a process from readable form to non-readable form. Readable form to non-readable form. So there are different uh definition finally the goal is same but I'm using more simple terms to understand clearly. Now IM capabilities. So folks identity and access management by using the IM where you can decide who can access what that you are going to decide by using IM services. Now next is performance efficiency. So let me tell you performance efficiency is one of the key attribute of AWS. It has the ability to run your services efficiently in a cloud platform. It can scale according to the need of your traffic. It can handle a high volume of a traffic without dislining a performance and even it ensures the smoother operation and user can get a best experience. Now flexibility. So AWS allows the selection of your preferred operating system, programming language and databases. So now AWS has given this authority to you people. So you can select your operating system. If you want a Windows operating system, you can go for it. Mac, Ubuntu, then Fedora. Which operating system do you want? You can select that. Then programming language you can go for.NET, Java, Python, Ruby, Rails, and even uh more more different runtime engines are available for us. Now cost optimization. Cost optimization is all about a pay as you go model. How much you are consuming based on that you are going to pay for it. Now here you can see in AWS infrastructure we are increasing the agility and decreasing the complexity and risk accelerate time to market. Now you can see that right now in the market there is a trend everyone is talking about only one technology in the market right now a IML artificial intelligence and machine learning NLP natural language processing. So now AWS has also provided some machine learning services, artificial intelligence services like we have sea maker, bedrock these are the services what we are using. So as for the market what market is expecting and that to what clients are expecting AWS is providing a solution to them. Now they are talking about the a IML now they are talking talking about the NLP natural language processing now they are talking about the different different kind of a things. So as per the market trends and as per the client's requests even AWS is providing a solution every day AWS is updating what I got the information just now every day AWS is updating itself like last week it was 37 117 availability zone now September 1st AWS was released a new region called Newsland along with the three availability zone total 120. Now let me tell you folks the upcoming regions Saudi Arabia KSA and the Germany KSA uh Saudi Arabia they are planning within 2026 they are going to launch the new two regions. So every day AWS is updating the infrastructure AWS is providing a solution to all the customers not only restricted to particular domain as per your requirements. Now everyone is talking about the AI ML we have the services called bedrock sega maker. So even they are providing a solution in the AWS environment. Now increase innovation. When someone is managing your infrastructure behalf of you then you will get the sufficient time to think something innovative like what your client is given the requirement based on that you are satisfying the condition as per your client but what I can add something new where I can uh make my client happy. So these are these are the features what I added from my end. So you will get some sufficient time to think something innovative things because your infrastructure will be managed by someone else and now being a developer you can think then scale seamlessly. What it means as I clearly specified in the benefits no need to think about the capacity when you are expecting high traffic automatically it will be increased. When you are getting low traffic automatically it will be decreased. Now how we are reducing the complexity and risk. First optimizing cost as you know that pay as you go model how much we are consuming based on that we are going to pay for it. Then minimizing security vulnerabilities by providing a security at different different layer. For example, this is at EC2 layer. Now I'll give the security at EC2 level. I'll give the security at subnet level. I'll give the security at VPC level. So there are different different layers we have. Right? So just for your understanding purpose just you can take uh level one, level two, level three. So you can give a security at different layers where you can minimize the vulnerabilities. The final reduce management complexity. How we are reducing management complexity? As I clearly specified in the first slide itself, there is no user direct involvement. Someone is there to manage your infrastructure behalf of you. So because of that reason you are going to reduce the management complexity. the management headach will be totally taken by AWS. Let's move on to the next topic called core services. So here we have the variety of services like compute, storage, database, developer tools, IoT and even analytics, security, networking, management, mobile, enterprise application. First we have compute. So what exactly the meaning of compute here? So compute service which offer the secure and resizable computing capacity in the cloud simplifying the web scale computing for developers. So folks here AWS has provided a secure and resizable computing capacity that means resizable how much you want as per your requirement you can do the compute task you can process your data. So this is very much helpful for the developers. Folks in AWS environment we are using the term called instance. Some people we call it as VM virtual machine. Instance virtual machine servers everything is a computer services. Now let us consider this is my onremises server. Okay. And this is my EC2. Let me give one scenario to you people. Now you all 52 participants are my network engineers. Right? And I don't know anything. I'm your client. I want to design one server. So how you will take up this task? I'm your client. When you go for any of the project which is the first task see the first thing is requirement what your client is expecting. First you have to understand then you can select oh yes hardware whatever you want. Okay let me consider requirement first. Then next what is the next step? How many for how many user you want? Which operating system you want? like what are the things uh like what are the oper which operating system okay can I call this entire configuration part first is okay requirement then configuration then how much time you want let's take one okay let us consider my server is ready for 500 people now suddenly there is a huge hike in the traffic suddenly I'm getting thousand as a users so what will happen to this particular web server so the server will crash or slow down or a low latency. So what is the solution? If I take the EC2, launch the instance, select the operating system, select the security, then create instance. And here you can launch the instance. This is my EC2. So my EC2 is ready within 2 minutes. And folks, when I'm getting the high amount of a traffic, automatically the resources are increased. When I'm getting a low traffic, automatically the resources are decreased. So this is totally pay as you go model. How much you are consuming? You're going to pay for this elastic compute cloud. This is one of the compute service. So now just you create an instance here you'll provide the operating system softwares EBS security everything. Now EC2 is ready right? When I'm getting a huge traffic automatically the resources are increased. When I'm getting low traffic automatically the resources are decreased. So which one is the best fit? So what are the key features? It empowers user to control their computing resources. They operate under pay as you go model. How much you're consuming based on that you're going to pay for it. It allows the user to reboot new server instances within a minute. You can launch your servers within one or two minutes of a time. They enable quick scaling to meet the changing computing requirements with quick and easy configuration of the service. To meet the quick change of a traffic there is a concept called autoscaling group where multiple EC2 instances are available with the single group. So as per the demand it deals with the traffic. So what are the different comput services we have? You can see EC2 elastic compute cloud, ECR elastic container registry, ECS elastic comput service, elastic kubernetes service, light sale serverless application repository, lambda, fargate and even batch elastic bins. So these all are the AWS compute services now. Okay. So folks, these are the compute related services. Now let me take to the next service called storage services. So folks uh what is storage? Can I say that it's a place where I'm going to store the data? So this storage offers a secure reliable scalable storage solution for data in AWS cloud and that will provide the high efficiency, availability, durability and performance. So let me tell you folks there are different types of and that two popular storage types we have. The first one is object storage. Then second one is file storage and the third one is block storage. So there is a popular service in object storage called S3 where you are going to create some buckets. S3 is a popular object level storage. So here you can store any kind of a data and that to unlimited where you can store images, video, uh audio, photo anything and that to a unlimited storage. So what is the main use case here we are using for backup purpose, log storing purpose where I can store unlimited data. So this S3 is integrated with many other AWS services where you can store and retrieve the huge amount of a data. Now if I talk about the simple a single use case now file storage. So folks file storage here there is a popular service called EFS elastic file system which is scalable shared file storage. So now let me tell you folks what is EFS? This is EFS and these all are EC2 instances. So now now EFS is shared file storage that can be access concurrently from multiple EC2 instances. Because of this reason this is well suited for the applications which required a shared storage. If you are familiar let me take where I'm using. For example, I'm using in content management system. Let me take the example of development. Right? Let us consider here developer one, developer two, developer three, developer four are working for the same software but this first developer is working on first module, he is working on second module and he's working on third and he's working on four. And finally the data will be stored in this shared file system. This is the example for EFS. Now block storage. Block storage here the popular service is called EBS elastic block storage. Right folks, it's a persistent block level storage value. So now you can attach this EBS volume to EC2 instance. This EBS is suitable for the application for example database data intensive application or let us consider if I want to install the operating system. So at that time I'll install in EBS value. Why? Because here I'll get the low latency high IO operations input output operations. So that is the reason I'm going to install my operating system in EBS. Now you can ask I we can't use with EFS. See in this we are not attaching with EC2 but here we are attaching this elastic block storage. Once I create the EBS I'm going to attach with this EC2. That is the reason it provide the low latency high IO performance. So your installation of operating system database or what you call some of the low latency applications at that time you can go with the EBS. What is block? All the data let us consider this is my storage. So in ABS all the data will be stored in terms of blocks and no need to modify the entire document. If it is a particular part is there then you have to modify only that block. AWS will take care about that. Now when I'm using this EVS what are the use cases? Let us consider if I want to install my databases or if I want to install my operating system at that time I'll go with EVS elastic blob storage. It allows the user to store, access and analyze the data to reduce the cost, increase the agility and accelerate the innovations. Right? So it can be broadly categorized into object storage, file storage, blog storage and even backup and data migration. These are also types but whenever you want you can take a backup into the backup services and data migration. If you want to migrate from on-romises to AWS at that time you can use the data migration services also. Now, so what are the major services in storage? ES3, EFS, elastic file system, FSX for Windows, Luster, Elastic Block Storage, then backup, snow family, transfer family, then data sync, storage gateway. So these are the services which are related to storage. Now next is database. Any kind of a data, images, audio, video, photos, anything. Yes. What is database? place where store the data then what is the difference between database and storage. Now now let me give the definition for a database. Database is nothing but collection of related data. It offer the comprehensive selection of purpose to build the database suit for various application. So AWS has provided a solution for the different requirements. As per your requirement you can select your databases. Okay. So what is the difference between storage and database? Storage is nothing but roless to keep your data where you are going to keep your data like files object blocks but database organized storage management system with quering capability. So here the nature of databases you can store structured unstructured semuctured data right you can use the schema you can define the queries right you can define the relationship among the objects that is database now storage is all about just you have to keep the data safe and retrievable so here we don't provide any query relationships indexes nothing so now folks this database services are fully managed so when the term comes fully managed everything will be taken care by AWS Even updating, patching, provisioning everything will be taken care by AWS. No need to worry about this databases fully managed in the sense updating, patching, provisioning everything will be taken care by only AWS and this is scalable and highly efficient also. Now database services some features. So here it provide the different databases like key value database, in-memory database, graph database, time series database, ledger database. There are different types of databases are available. They support a multi-reion that means more than one region in all the 38 regions. Multi master replication that means in all the 38 regions you can perform read write operation that is the replication and even which offers the control over the data. Now complete control will be user is managed. User will be taken care by the entire complete infrastructure of a databases. And what are the services are available? RDS, Red Shift, Ledger is also one of the type of database. Dynamob, Elastic Cach, QLDB, Neptune, Keyspace, Document DB. So these are the different database services which are available in AWS environment. What is networking? Networking is the concept where I am going to establish the connection between two or more devices to share the resources. So now it offers a broad set of networking services that provide the essential security features and robust network solutions. In that these services isolate the resources. There is a service called a VPC virtual private cloud which isolate the resources. Let us consider this is Gopinat VPC. This is Santo VPC. This is Deepti VPC and this is current VPC. Now see no one without Gopinat permission no one can enter to this VPC without Santosh permission no one can enter to this VPC without DIY permission no one can enter to this VPC without current permission no one enter can to this VPC that is the reason we are calling it as a isolated area VPC is nothing but it's a isolated area no one can enter without owner permission every services will be deployed in the VPC only so being the owner of that VPC, you are going to decide who can enter, who can not enter. Then encrypting data. So in AWS, AWS supports advanced encryption standard 256 algorithm to encrypt your data. And there is a one more service called KMS key management service. It's a centralized repository which maintains a cryptographic keys for encryption as well as decryption. Now AWS provide the private connection to AWS global network. So what kind of a private connections like which connections we are going to call it as a private connection is this VPC establishment between the regions. If you want you can do that but two if you want you can do that there is a concept called VPC pairing like if you want to pair the two VPCs that is possible. Now if I want to provide the private connectivity which connections you are going to call it as a private connection can I consider a VPN? Can I consider direct connections? direct connections then we have side to side connections VPN and direct connect side to side all are the examples of a private connections now what are the feature it offer the highest network availability with very few time hours due to networking issues and it provide the global coverage of how many regions 38 and how many availability zones 120 now these are the services in a networking VPC gateway CloudFront, Proud 53, Mesh, Cloud Map, then we have direct connect and VPN connections. So these all are the networking services which are available for us. So there is a page called AWS infrastructure where you can see all the regions, all the regions. If you see here, these are the available regions. US region, North Virginia and here Europe, Span, Zurich, London, Europe. So these dark circles are already available regions and these are upcoming regions. Now you can see the Europe upcoming region, Kingdom of Saudi Arabia, upcoming region. And here if I talk about the India, there are two regions. First one is Mumbai and the second one is Hyderabad. Okay. 38 like regions 120 availability zones 700 plus point of presence 43 local zones and wavelength zones. So local zones are nothing but uh singledigit which provide the single digit latency to the customer. So local zones are not available in all the availability zones only selected local zones are available in every region. We don't have a local zone and wavelength zones are specially designed for 5G purpose. Let's move on to the next topic called account setup. So now folks, if you want to access the AWS services, first thing is required account. How to access the Gmail account? First we have to register for that first username, first name, middle name, last name, recovery password, mobile number, everything, personal details you will fill. Then you will get the username and password. Now sign up process is only one time. Then you have to login. So like that in AWS also there are two types of account we have. First is root account and the second one is IM user account. By default root account have the access to all the AWS services. Now IM user have the access only what you specify the policy. For example S3 that means you can work with only S3. If you attach IM policy then this person can work with only IM. If you specify RDS that means this person can specify only RDS. So here you will get a complete control a more granular permissions you can assign here if it is required. How to create a root account? Same procedure like our Gmail first name, middle name, last name, password recovery, mobile number, alternate email ID, everything. The only difference is here you have to put debit or credit card details. Now AWS will debit one token amount from your account. So once your account is verified successfully after 24 hours again that token amount will be credited to your account. If you go to the AWS console you can create a root account. So within the root account you are going to create a IM users. AWS is also given clear input. Don't use your root accounts for day-to-day activity. Why? If something went wrong if the credentials are compromised then you are gone. So that is the reason for a day-to-day work create IM users provide the more granular permissions they can work on that and don't share the credentials with others. Now like how we are going to perform this creating account AWS console just type www.awws console then here click on create account then continue whether it is personal or business account provide the personal or company information accept the agreement and create account and continue. So here it ask for billing information verified provide the pin number uh mobile number then by default one basic support plan will be available it's like a customer care now if you want some advanced plan you have to pay for that once everything done your account will be activated if you create a account in AWS console the account what you create is called free tier account free tier account is valid for 12 months and within this 12 months you have some services with this free credits like EC2 instance 750 hours S3 bucket 5GB after 5GB 750 hours you have to pay the extra amount what you have this is free account there are three types of account we have the first one is 12 month free tier always free there is no restriction but even we don't get any services here for a free like what we are getting in 750 5GB in free tier right now the next one is short-term trials so let us consider Praep is one of the developer for one organization called ABC. Now AWS is released a new service called bedrock. Praep is very interested to see this service bedrock. Now he'll request to AWS. Can you give me a access to the bedrock service? I'm a developer. I want to know and understand this service. Okay. AWS will give a response. You can use this bedrock service for 7 days. So understand the service and let me know if you face any difficulty. So we are calling it as a short-term track. So for one week bedrock service will be provided to the customer. Now let's move on to the AWS management console our lab environment. So now here once your lab is successfully loaded you can see signin link username and password. Let me tell you the one important thing. So once you enter to your AWS console you can see some access denied option and all right. So no need to worry because here in this console only the services which are related to AWS solution architect associate these services are enabled you can't access the other services apart from what we have for our courses right and once you enter to your AWS console the first thing is you have to check in which region you are working right now you can go for North Virginia. Let me tell you the reason why we are selecting North Virginia region folks. The reason is this is pre-cooked environment for you people. Only North Virginia region is enabled. Here you can see in this AWS console all the AWS services. Now let us consider compute. So here EC2, image builder, elastic beantock, global view, lambda, light sale all the services are available. Now let me take database SQL RDS the document DB dynamob elastic caching key spaces memory DB then networking gateway app mesh cloud map cloud front data transfer direct connect global accelerator then then then okay networking storage backup EFS disaster recovery FSX recycle bin S3 glacier and even more so these all are services what we we are going to use in AWS environment. So now here you can see search option. If I want to search this specific service called ES3 just type that service name and here you have to here you are able to see the services. If you want to bookmark this just click on this. Now the service is available. If you want to remove from the bookmark list you can remove this. Okay. Now after search here we have cloud shell. Cloud shell is nothing but built-in command line interface. If I want to interact with the AWS services by using CLI at that time I'll go with cloud shell. Okay. Now next notification help support then settings this is for regions and now here you can see so here you will get the account details for this account. Then organization if you want to go for multi- account environment then there is option called organization service kota that means every services has some limit for example uh IM users within the single root account you can create up to 5,000 IM users so like that for every service we have some kota that is limit okay then billing and cost management so let me show you a very important part let me tell you billing is one of the crucial service in every organization that is the reason no one will get a billing access only the respective person who is working on the billing they'll get the access but let me explain what are the fields are available in the billing now you can see cost summary month to date cost year and last month details like a current month here you'll get the detailed breakdown for that particular month how many services are active in which region when it was started when it was end and how much it was charged. Everything you will get a detailed information. Now if you see here there are different tabs are available. Let me take which are very important bills. If you click on bills you are able to see like if I want to view the bill of last 6 month, one year, two year you have to select the year and particular month then a bill will be generated for that particular month. Then payments. Let us consider you want to do the AWS account like AWS account. You have to pay. Now you have the account called 1 123 and you want to pay for this. So you can add the payment method here like credit card, debit card and UPI payment. Using the Google pay, phone pay also you can pay your AWS bills. Then credits. So folks, credits are nothing but which is provided by AWS like for a free tier account 750 hours for EC2 and 5GB for S3. So how much it is remaining everything you'll get the details in a credit option and whenever you are using any of the services you will get the purchase order cost explorer when you click on cost explorer you will get the detailed information. If you want to optimize the cost then cost explorer is a tool where you can go for it. So this is for total cost, average monthly cost, service count, how many services you are using. And here it's like a dashboard. It's like a dashboard. A systematic graphical representation will be provided which if you select any of the particular month service here a detailed graph will be provided for which service, how much it is utilized, in which duration everything you'll get the detailed information. And here cost and usage breakdown. And even you can download this as a CSV file, excel file. Now when uh which service in which region when it was started, when it was end and what are the charges even you can download the excel sheet. So this is all about the cost explorer folks and this is all about the billing part. So why we want billing? So billing is the tool where you are going to pay your AWS bills. So where you can organize and report your cost and usage by using AWS cost explorer. Then you can manage the consolidated billing for the member of AWS organization. There is a service called AWS organization where you can manage a multi- account environment. Here you can manage a consolidated billing. Let us consider this is ABC account. Here we have a different different employees and you will get a consolidated billing within the ABC. So these are the accounts and these are the charges. I'm not sure but uh there is a one telecommunication industry which provides one plan one family I think it's a right only one bill will be provided for entire family. So like that here also for ABC organization I can do the consolidated billing where every users every users along with the cost you can see here. So as I discussed just now all the tabs these are the features which just now what I discussed in the console managing AWS account where you can view the bills you can manage the payments Google pay cards everything you can manage the purchasing orders then you can manage the cost by using the cost categories then you can manage the payment profile then a consulting like consulting billing organization let us consider this is ABC and here are the employees in an organization there are multiple employees we And every account is charged and you will get the consolidated bill for that. Now there is something called AWS support. Do you think this support people are like a customer care people? It's a technical support. These people are technical people that too they are well qualified well trained who is going to provide a solution to you people. So now AWS supports provide the variety of plans to access the tools right and even expertise to support the success and operational health of AWS resources. So always 24 by7 access to the customer service if customer is not ready to accept the answer they'll provide some documentation documentation technical paper and even support forms. Now here we can see there are different plans we have developer business enterprise on ramp enterprise and these are the uh scenario like what are the advisory best practices to check like technical support then case severity then programistic case management then proactive programs and self-services self uh like AWS managed services training pricing so pricing is also different in every model so here the different plans are given based on your workload how you are going to understand like if I consider our go mobiles once you complete 50% of a data you will get the notification once you complete 90% of a data you will get a notification you have completed this much of a data now here in AWS also you can set let us consider this is my EC2 this is my EC2 a compute service putting the threshold value if my EC2 crosses $200 $ then it should be notified to the kiran. Kiran is a user. So once my EC2 crosses $200 I'm going to set the alert the EC2 CPU utilization this. Now when it is crosses a user will be informed by using email. So now you can see here AWS billing alerts which allows user to monitor the charges on their bills. So now user can set up a alert to receive email notification when the estimated charges reaches to the specific threshold value. Once it crosses the $200 your EC2 instance. So through email it will be informed to Kiran. Hey Kiran your EC2 is successfully crosses $200. Take some proper action. You can specify the action. If you want to do the automation once it crosses the $200 whether my EC2 should be stopped or terminated you can do that one also. So how to set this billing alerts go to AWS billing console here and once you'll get the billing dashboard. So at the left side here we have the billing preferences. So click on receiving billing alerts and save the preferences. Once you add this email id you'll get the notification. So this is all about the billing alerts. So now how you will define delegate? Let me take one simple example. Now the class is a live session is going on. So I'm a trainer. I'm taking this session. Right? So what I'll do now? I'll inform to vishan. Okay. So being a trainer I'm busy in taking the session. I'm continuously busy in taking the session. What I'll do now? I'll delegate my authority to Vishwanatan. Hey Vishwanatan, can you take uh attendance for today's session? I'm busy. Can you take the attendance? So Vishwanat is ready. Sir, sure, I'll take the attendance. So what I did just now, I delegated my authority to Vishwanatan. Suddenly Shen will come into the picture. I'll take the attendance. Do you think Shane is the right person to take the attendance now in this scenario? No. Because I have not delegated the authority to Shane. I have given the authority to only visatan. Now delegate access to the billing console. So now you know that AWS account owners can delegate access to specific IM user that need to access or manage the AWS billing and cost management data for AWS accounts. So now as I discussed billing is one of the crucial service right. So now everyone don't have that billing access. So now you are going to delegate this billing access to IM user. Let us consider this is your ABC organization. Here we have admin Prii is admin. So now folks in this company we have 100 people. Do you think this 100 employee work can be performed by only one employee that is Priy? Is it possible? No. That is the reason we have delegation. Even every user have the responsibility. So that is the reason here we have Vishwanatan. Then we have Jnesh. Then we have Nur. Okay. Next we have Kiran. So now Prrii is administrator. Now being a administrative account or let us consider she's having access of root account. And now she's delegating authority to others. Vishwanat can perform S3. Gidesh can perform KMS. Nupor can perform EC2 task and Kiran can perform billing task. So here we are attaching some policies like we are giving the authority to Vishuanatan. Prii can access all the AWS services because it's a root account. Now Vishuanatan can access S3. Vishuanat can't access KMS or EC2 or billing only S3. Same thing Jesh can't access S3, EC2 or billing. Right? So even Kiran can't access S3, KMS or EC2. Kiran is responsible for only B. So domain what they are provided to these employee they can work on only that place. How to delegate the authority to