Guides
Grouped by subject and numbered in reading order. New to AWS operations? Start at the top.
- Start here
- 01Getting startedAWS Tools for PowerShell, signing in with IAM Identity Center, working across accounts and regions, and AWS Config queries.
- Foundations
- 02Account structure and accessAWS Organizations, OUs and guardrail policies, IAM Identity Center, IAM roles, and protecting the root user.
- 03Tagging and governanceA tag strategy finance can use, and tag policies, SCPs and AWS Config to enforce it.
- Security
- 04Security groups and network ACLsHow security groups and NACLs decide, referencing groups instead of IP addresses, risky rules, and checking what's allowed.
- 05Firewalls, endpoints and admin accessOutbound control, Network Firewall, WAF and Shield, VPC endpoints, S3 Block Public Access, and Session Manager instead of SSH and RDP.
- 06Security baseline: identity, detection and encryptionRoot and IAM hygiene, IMDSv2, CloudTrail, GuardDuty, Security Hub, KMS, Secrets Manager and the logs you need.
- Operations
- 07EC2 instancesInstance types, EBS volumes, availability, patching with Systems Manager, monitoring agents and saving money on EC2.
- 08Backup and recoveryAWS Backup, protecting backups from ransomware, restores, restore testing and disaster recovery.
- 09Monitoring and alertsCloudWatch building blocks, Logs Insights queries worth keeping, and alarms people act on.
- Cost
- 10Cost hygieneCost Explorer, budgets, the monthly clean-up checklist, Savings Plans and Spot.