Real-world Scenarios

VPC and subnetsLoad balancerRDS and security groups

Deploy a 3-tier app on AWS

Web app, app server, and database using EC2, ALB, and RDS.

IAM rolesPolicy conditionsPermission boundaries

Harden IAM for a web application

Least privilege, roles for EC2/ECS, and policy boundaries.

Azure FunctionsAPIMKey Vault for secrets

Serverless API on Azure

HTTP-triggered Function App and API Management.

Azure

Cloud FunctionsAPI GatewaySecret Manager

Serverless API on Google Cloud

Cloud Functions and API Gateway for HTTP APIs.

Google Cloud

Service accountsIAM rolesResource manager

IAM and service accounts on GCP

Service accounts, roles, and resource hierarchy.

Google Cloud

Advanced

Secure a 3-tier architecture

Network segmentation, encryption, and identity at each tier.

NSGs / security groupsTLS and encryptionManaged identity / IAM

Multi

VM sizingNetworking and storageBackup and monitoring

Lift-and-shift a VM to the cloud

Migrate an on-prem VM to EC2, Azure VM, or Compute Engine.

Multi

S3 bucket policyStatic website hostingPublic read access

Host a static website on S3

Create an S3 bucket, enable static hosting, and optionally use CloudFront.

Storage accountContainers and blobsAccess tiers and SAS

Upload and serve files with Azure Blob Storage

Create a storage account, container, and upload blobs; configure access tier.

Azure

Buckets and objectsIAM and uniform accessLifecycle rules

Store objects in Google Cloud Storage

Create a bucket, upload objects, set lifecycle rules and uniform access.

Google Cloud

Lambda handlerRuntime and envAPI Gateway integration

Your first AWS Lambda function

Create a Lambda, trigger it on HTTP (API Gateway) or a test event.

VPC and CIDRPublic vs private subnetsRoute tables and IGW

Create a VPC with public and private subnets (AWS)

VPC, subnets, internet gateway, and route tables for a simple two-tier setup.

Tagging strategyCost allocation tagsBilling filters

Tag resources for cost allocation

Apply tags (project, env, owner) so you can filter and report on cost by tag.

Multi

Advanced

Design a 3-tier app across 5 AWS accounts

Architect a production-ready 3-tier web application using AWS multi-account best practices: separate accounts for security, logging, shared services, non-prod, and production workloads.

Multi-account strategy and AWS OrganizationsCentralized logging and security governanceEnvironment separation (dev/stage/prod)