Intro

# ===== The model =====
# - Regions worldwide (ap-southeast-2 = Sydney, us-east-1 = N. Virginia, ...)
# - Each region has multiple Availability Zones (isolated data centres)
# - Pay-as-you-go pricing on most services
# - Identity via IAM users + roles + policies

# ===== The core service categories =====
# Compute:    EC2, Lambda, ECS/Fargate, EKS
# Storage:    S3 (object), EBS (block), EFS (file)
# Database:   RDS (Postgres, MySQL, ...), DynamoDB, Aurora
# Network:    VPC, ELB, Route 53, CloudFront, API Gateway
# Messaging:  SQS, SNS, EventBridge
# Observ.:    CloudWatch, X-Ray
# Security:   IAM, KMS, Secrets Manager, GuardDuty, WAF

# ===== Hello, S3 (CLI) =====
aws configure        # interactive setup of credentials + region
aws s3 mb s3://my-bucket-1234
echo 'hi' > hi.txt
aws s3 cp hi.txt s3://my-bucket-1234/
aws s3 ls s3://my-bucket-1234/

# ===== Hello, Lambda =====
# - One function = one route, run on demand
# - Pay per request + per ms
# - Scales to zero
# Recommended: deploy via SAM / CDK / Terraform, not the console.

# ===== When AWS wins =====
# - You need many services that talk to each other
# - Global reach + many regions
# - Enterprise compliance (HIPAA, PCI, ISO via AWS Artifact)
# - Mature ecosystem (third-party tools assume AWS)

# ===== When AWS hurts =====
# - Cost surprises if you do not tag + alert
# - Console clickops drifts from IaC if uncontrolled
# - Steep learning curve; pick a small set of services to start

# ===== Tools landscape =====
# aws-cli     official CLI
# CDK         IaC in TS / Python / Java / .NET
# Terraform   multi-cloud IaC
# SAM         Lambda-focused
# Serverless  Lambda-focused (third-party)

# ===== Patterns to internalise =====
# - IaC from day one — even toy projects
# - One IAM role per workload, least privilege
# - Tag every resource (project, env, owner)
# - Budget alarms + Cost Anomaly Detection on every account

# ===== Pitfalls =====
# - Root account in daily use
# - Public S3 buckets (enable BLOCK PUBLIC ACCESS at account level)
# - NAT Gateway egress costs surprising you (use VPC endpoints)
# - Forgetting MFA on the root + IAM admin users

# AWS = cloud infrastructure on tap.
# Compute, storage, network, databases, AI, all by API.