Topic: Cloud Computing (AWS)
AWS has 200+ services, but you only need 20 to land a cloud job. This roadmap cuts the noise.
This advanced roadmap takes developers, sysadmins, and DevOps professionals from AWS fundamentals to professional-level cloud mastery. You'll build real architectures, automate with IaC, secure workloads, optimize costs, and prepare for certifications, emerging job-ready in 3–6 months for associate roles and 6–12 months for professional roles.
- Time to complete
- 6–12 months (3–6 months to associate-level job readiness)
Before you start
- Basic networking knowledge (TCP/IP, DNS, HTTP, subnets)
- Linux command-line familiarity (bash, file permissions, package managers)
- Programming experience in at least one language (Python, JavaScript, or similar)
- Understanding of version control with Git
The roadmap
AWS Foundations & Core Services
Weeks 1–4
Build a mental model of AWS global infrastructure and master the core services that 80% of workloads use: IAM, EC2, S3, and VPC basics. Set up your account with security best practices from day one.
Key concepts: AWS global infrastructure: regions, availability zones, edge locations, IAM: users, groups, roles, policies, and least-privilege principles, EC2: instance types, AMIs, key pairs, security groups, and user data, S3: buckets, storage classes, versioning, lifecycle policies, and bucket policies, VPC fundamentals: subnets, route tables, internet gateways, and NAT, AWS CLI and SDK setup with credential management, Shared responsibility model and account security (MFA, root account hygiene)
Resources: AWS Skill Builder digital courses, AWS Certified Cloud Practitioner official study guide, Hands-on labs (AWS Well-Architected Labs, A Cloud Guru, or Tutorials Dojo), AWS documentation and whitepapers (Overview of Amazon Web Services)
Milestone: Launch a secure EC2 instance in a custom VPC, host a static website on S3, and create IAM roles with least-privilege policies.
Networking, Storage & Databases
Weeks 5–8
Deepen your VPC design skills and expand into managed storage and database services. Learn to connect on-premises networks, choose the right database, and design for high availability.
Key concepts: Advanced VPC: peering, transit gateways, VPN, and Direct Connect, Route 53: DNS, routing policies, and health checks, EBS, EFS, and FSx: choosing the right storage for workloads, RDS and Aurora: engines, Multi-AZ, read replicas, backups, and parameter groups, DynamoDB: tables, partitions, indexes, and capacity modes, ElastiCache: Redis and Memcached for caching strategies, High availability patterns: multi-AZ vs. multi-region
Resources: AWS Certified Solutions Architect – Associate official study guide, AWS Well-Architected Framework (Reliability and Performance Efficiency pillars), Hands-on labs for VPC peering and RDS Multi-AZ, AWS re:Invent sessions on networking and databases (YouTube)
Milestone: Design and deploy a multi-AZ web application with RDS, Route 53 failover, and a VPC peering connection.
Security, Identity & Compliance
Weeks 9–12
Move beyond basic IAM to advanced security controls: encryption, key management, threat detection, and compliance automation. Learn to secure data at rest and in transit across services.
Key concepts: KMS: customer managed keys, key policies, and envelope encryption, Secrets Manager and Systems Manager Parameter Store, AWS WAF, Shield, and Firewall Manager, GuardDuty, Security Hub, and Inspector for threat detection, CloudTrail, Config, and Organizations for governance, S3 encryption options (SSE-S3, SSE-KMS, SSE-C) and bucket policies, Identity federation: IAM Identity Center (SSO) and Cognito
Resources: AWS Certified Security – Specialty official study guide, AWS Security Best Practices whitepaper, Hands-on labs for KMS encryption and GuardDuty, AWS Security Blog and re:Inforce sessions
Milestone: Implement end-to-end encryption for an application using KMS, enable GuardDuty and Security Hub, and automate compliance checks with AWS Config.
Infrastructure as Code & Automation
Weeks 13–16
Stop clicking in the console. Learn to define, provision, and manage AWS infrastructure using CloudFormation and Terraform, and automate deployments with CI/CD pipelines.
Key concepts: CloudFormation: templates, stacks, change sets, and nested stacks, Terraform: providers, resources, state management, and modules, AWS CDK for programmatic infrastructure, CI/CD with CodePipeline, CodeBuild, and CodeDeploy, GitOps and infrastructure testing (e.g., Terratest, cfn-lint), Parameter Store and Secrets Manager integration in IaC, Drift detection and stack policies
Resources: Terraform Up & Running (book), AWS CloudFormation user guide and templates, HashiCorp Learn Terraform AWS tutorials, AWS DevOps Engineer – Professional official study guide
Milestone: Deploy a three-tier application entirely via Terraform modules and set up a CI/CD pipeline that runs tests and deploys on merge.
Serverless, Containers & Modern Compute
Weeks 17–20
Explore event-driven and containerized architectures. Build serverless APIs with Lambda and API Gateway, orchestrate containers with ECS/EKS, and choose the right compute for each workload.
Key concepts: Lambda: triggers, layers, concurrency, and cold starts, API Gateway: REST vs. HTTP APIs, authorizers, and throttling, Step Functions for workflow orchestration, ECS and Fargate: task definitions, services, and scaling, EKS: Kubernetes on AWS, node groups, and Fargate profiles, EventBridge and SQS/SNS for event-driven patterns, Container image management with ECR
Resources: AWS Serverless Application Model (SAM) documentation, AWS Certified Developer – Associate official study guide, Kubernetes documentation and EKS workshops, Hands-on labs for Lambda and ECS Fargate
Milestone: Build a serverless REST API with Lambda and API Gateway, and deploy a containerized microservice on ECS Fargate with autoscaling.
Monitoring, Cost Optimization & Well-Architected Design
Weeks 21–24
Learn to observe, optimize, and architect resilient systems. Master CloudWatch, cost management tools, and the Well-Architected Framework to design production-grade architectures.
Key concepts: CloudWatch: metrics, logs, alarms, dashboards, and Logs Insights, AWS X-Ray for distributed tracing, Cost Explorer, Budgets, and Savings Plans/Reserved Instances, S3 lifecycle policies and right-sizing for cost, Well-Architected Framework: six pillars and review process, Disaster recovery strategies: backup/restore, pilot light, warm standby, multi-site, Auto Scaling and load balancing patterns
Resources: AWS Well-Architected Framework whitepaper, AWS Cost Optimization Hub and Cost Management blogs, AWS Certified Solutions Architect – Professional official study guide, Hands-on labs for CloudWatch dashboards and cost budgets
Milestone: Perform a Well-Architected review on a deployed application, implement cost-saving measures, and set up a monitoring dashboard with alarms.
Professional Certification & Portfolio Capstone
Weeks 25–32
Solidify your expertise by preparing for a professional-level certification and building a capstone project that demonstrates end-to-end architecture, automation, security, and cost awareness.
Key concepts: Exam blueprint deep-dive (Solutions Architect Professional or DevOps Engineer Professional), Advanced architecture patterns: multi-account, landing zones, and Control Tower, Migration strategies (6 Rs) and hybrid cloud, Cost allocation and chargeback with tags and Cost Categories, Incident response and operational excellence, Portfolio storytelling: documenting architecture decisions and trade-offs
Resources: Official AWS certification practice exams (Tutorials Dojo, Whizlabs), AWS Well-Architected Labs (advanced), AWS re:Invent deep-dive sessions, Capstone project templates and peer review communities
Milestone: Pass a professional-level AWS certification and publish a capstone project on GitHub with architecture diagrams, IaC, and a cost/security analysis.
Where it can take you
| Role | Demand | Salary range |
|---|---|---|
| Cloud Engineer | Very High | $95K–$130K |
| Solutions Architect | Very High | $120K–$160K |
| DevOps Engineer | Very High | $110K–$150K |
| Cloud Consultant | High | $100K–$140K |
Tips that make the difference
- Build in a sandbox account with AWS Free Tier and set billing alarms immediately, cost surprises kill momentum.
- Don't chase every service. Master the core 20 (EC2, S3, IAM, VPC, RDS, Lambda, CloudWatch, etc.) and learn others on demand.
- Learn infrastructure as code early; it's the single biggest differentiator between console-clickers and hireable engineers.
- Document every project with architecture diagrams and a README explaining trade-offs, your portfolio is your interview.
- Use the Well-Architected Framework as a checklist for every design decision, not just for certification exams.
- Join AWS community forums and study groups; explaining concepts to others cements your own understanding.
Frequently asked questions
- Do I need to learn every AWS service to get a job?
- No. Employers care that you can design, deploy, and secure workloads using core services. Master 15–20 services deeply and learn others as needed.
- Which certification should I start with?
- Start with AWS Certified Cloud Practitioner if you're new to cloud, then move to Solutions Architect – Associate. Professional certifications come after hands-on experience.
- How can I avoid huge AWS bills while learning?
- Use Free Tier eligible resources, set billing alarms, tear down resources after labs, and use AWS Budgets to alert you. Many labs can be done for under $10/month.
- Is Terraform or CloudFormation more important?
- Both are valuable. CloudFormation is AWS-native and essential for certification; Terraform is multi-cloud and widely used in industry. Learn both, starting with the one your target job uses.
- How long until I'm job-ready?
- With consistent effort (10–15 hours/week), 3–6 months gets you to associate-level job readiness. Professional-level roles typically require 6–12 months of hands-on practice.
- Do I need coding skills for cloud roles?
- Yes, at least scripting in Python or Bash for automation. For DevOps and serverless roles, stronger coding skills in Python, Go, or JavaScript are essential.
Ready to Master AWS in 2026?
Start your mastery-based cloud journey on Edirae, hands-on labs, expert feedback, and a roadmap tailored to your pace.
Start learning free