AWS (for Linux Learners) — Provision. Automate. Operate.
From your first EC2 login to monitored, policy-driven infrastructure—these topic-wise assignments help Linux users practice the AWS skills that matter. Each set includes 20 Basic, 20 Intermediate, and 10 Advanced hands-on questions so learners can build real confidence, fast.
Why practice with these assignments?
- Go beyond theory—launch EC2, attach EBS/EFS, secure with IAM/VPC, and verify with CLI & logs.
- Build reliable storage workflows across EBS (block), EFS (shared POSIX), and S3 (object) with backups and snapshots.
- Learn event-driven automation with Lambda triggered by S3, schedules, and logs.
- Operate like a pro with CloudWatch metrics/alarms, CloudTrail auditing, and CloudFormation IaC.
How it works
- Open any assignment and solve in order: Basic → Intermediate → Advanced.
- Use the AWS Console and AWS CLI on Linux; keep a running notes file of commands and outputs.
- Verify each task (instance reachability, storage persistence, policy effect, alarm triggers, function logs).
- Save a short “what I learned” note per task—syntax, reasoning, and gotchas.
What you’ll achieve
- Compute fluency: launch/connect EC2, harden Security Groups, use Elastic IPs, snapshots & AMIs.
- Storage mastery: format/mount EBS, share files with EFS, version/encrypt/replicate S3.
- Networking & identity: create VPC subnets, NAT/IGW, peering; manage IAM users/roles/policies; store secrets safely.
- Automation & serverless: build/trigger Lambda functions, layers, and observability with X-Ray & DLQ.
- Operations at scale: dashboards & alarms in CloudWatch, auditing with CloudTrail, reproducible stacks via CloudFormation.
Browse the Assignments
Assignment 1 — AWS EC2 for Linux Learners
Launch, connect (EC2 Connect/SSH), Security Groups, Elastic IPs, EBS attach/mount, snapshots, AMIs, Auto Recovery, and hardening best practices.
Assignment 2 — AWS S3 for Linux Learners
Buckets via Console/CLI, versioning & encryption, lifecycle, access logs, CRR, static website hosting, CORS, and Linux sync/backups.
Assignment 3 — AWS Lambda for Linux Learners
Functions (Python/Node), environment variables, roles/logs, S3/EventBridge triggers, layers, SAM/CLI deploys, X-Ray, and cost hygiene.
Assignment 4 — VPC, IAM & Secrets
VPC with subnets, route tables, IGW/NAT, VPC peering, IAM users/groups/roles/policies/MFA, and SSM Parameter Store & Secrets Manager.
Assignment 5 — AWS EFS (Elastic File System)
Create and mount EFS, multi-AZ sharing, access points & POSIX IDs, lifecycle to Infrequent Access, throughput modes, and cron-based Linux backups.
Assignment 6 — AWS EBS (Elastic Block Store)
Volumes (gp3/gp2/io1/st1/sc1), attach/format/mount, resize & filesystem expansion, encryption/KMS, snapshots (cross-region/account), RAID0, and performance tuning.
Assignment 7 — CloudWatch, CloudTrail & CloudFormation
Metrics, alarms, dashboards, agents & logs, trail setup with Athena queries, and EC2/S3 stacks with parameters, outputs, and rollbacks.
Tips for success
- Tag everything (Name, env, owner)—it simplifies search, cost allocation, and policies.
- Prefer IAM roles over access keys; store app secrets in Secrets Manager/SSM.
- Prove persistence: stop/start EC2 and verify EBS/EFS/S3 data durability.
- Instrument early: add CloudWatch dashboards/alarms and test them.
- Encrypt by default (S3 SSE, EBS/EFS, KMS) and document keys/permissions.
Ready to build real confidence in AWS for Linux? Pick a set below and start solving!
FAQs
Q1. I’m new—where should I start?
Begin with EC2 (launch/connect/secure), then attach EBS and practice snapshots. Move to S3 for object storage and versioning. After that, tackle VPC/IAM, EFS, Lambda, and finally CloudWatch/Trail/Formation for operations and Infrastructure as Code.
Q2. What Linux tools do I need on my workstation?
Install the AWS CLI, SSH client, and basic GNU tools (curl, jq, zip, tar). Most tasks are written with these utilities in mind.
Q3. How do I choose between EBS, EFS, and S3?
Use EBS for block devices attached to a single instance, EFS for shared POSIX file systems across instances, and S3 for durable object storage, static sites, and lifecycle/CRR. You’ll compare all three hands-on.
Q4. How do I keep my EC2 instances secure?
Lock down Security Groups, restrict SSH, use IAM roles (not keys), patch regularly, and enable CloudWatch/CloudTrail for visibility.
Q5. Where should I store app secrets?
Use SSM Parameter Store (SecureString) or Secrets Manager. Retrieve from EC2 or Lambda with properly scoped IAM roles.
Q6. What’s the best way to automate infra builds?
Model resources in CloudFormation and parameterize stacks. Use Lambda or CLI for glue tasks and CloudWatch for alarms.
Q7. How do I prove S3 versioning and restore work?
Enable Versioning, upload multiple versions, delete one, and restore the prior version. Practice lifecycle policies to Glacier or Infrequent Access.
Q8. How can I practice network isolation?
Create a VPC with public and private subnets, configure NAT for egress, and set up VPC peering. Validate access with ping, curl, and route tables.
Q9. How do I observe and troubleshoot?
Use CloudWatch dashboards, alarms, and agents. Check CloudTrail events with Athena queries, and ship logs to S3. Test alarms by inducing load or error conditions.
Q10. How much time should I allocate per assignment?
Plan 30–60 minutes per difficulty band (Basic/Intermediate/Advanced). VPC/IAM/Secrets and CloudFormation & monitoring assignments typically take longer—opt for correctness and repeatability.