Skip to content

Systems Engineering Track

AWS Architecture for Backend Engineers

Size an address space against a workload rather than a habit, walk an IAM decision to the layer that made it, place a service on the compute spectrum with its constraint named, and multiply a request path's availability instead of quoting one component's.

Advanced · production systems
About 200 min reading
38 authored sections

Before you start: TCP/IP basics, one service you have deployed, and the earlier systems courses or equivalent production experience.

Plan for 5–7 hours of hands-on work in addition to reading. This is an initial estimate; setup and extensions vary.

Open before purchase

A useful preview, not a teaser

Read these complete sections to judge the technical depth, teaching style, and architecture standard before buying.

Preview 1

Course Contract: What You Will Be Able to Operate

Sixth in the sequence: the parts of AWS that change a design, approached as a backend engineer rather than a certification candidate.

Preview 2

Regions, Zones, and What Multi-AZ Actually Buys

Two words that sound like marketing and are actually a failure-domain definition.

Preview 3

The Address Space You Cannot Take Back

The break. A decision made in an account's first hour, priced two years later.

Start the free preview

Complete curriculum

38 sections · 4 parts + cloud studio

Course orientation

  1. Course ContractFree
  2. Start Here If You Are NewCourse Pass
  3. The System So FarCourse Pass

Part 1 · The Network Boundary

  1. Regions and ZonesFree
  2. The Address SpaceFree
  3. Public Is a Route TableCourse Pass
  4. The NAT Gateway BillCourse Pass
  5. Security Groups and NACLsCourse Pass
  6. Traffic That Should Not LeaveCourse Pass
  7. Peering, TGW and PrivateLinkCourse Pass
  8. DNS as a Failover LeverCourse Pass
  9. The Health Check That LiedCourse Pass

Part 2 · Identity Is the Perimeter

  1. The Evaluation OrderCourse Pass
  2. The Policy That Read PayrollCourse Pass
  3. Roles, Not KeysCourse Pass
  4. Cross-Account AccessCourse Pass
  5. SCPs and BoundariesCourse Pass
  6. Secrets and the Env VarCourse Pass

Part 3 · Choosing Compute

  1. The Real AxisCourse Pass
  2. The Lambda Execution ModelCourse Pass
  3. Cold Starts and PoolsCourse Pass
  4. Block, File and Object StorageCourse Pass
  5. Scaling on the Wrong SignalCourse Pass
  6. The Deploy That Dropped RequestsCourse Pass

Part 4 · What Availability Costs

  1. Nines MultiplyCourse Pass
  2. What Redundancy Cannot FixCourse Pass
  3. Multi-AZ vs Multi-RegionCourse Pass
  4. Accounts as Blast RadiusCourse Pass
  5. The Review QuestionsCourse Pass

Cloud Studio

  1. Lab 1 · Policy EvaluationCourse Pass
  2. Lab 2 · Address ExhaustionCourse Pass
  3. Lab 3 · The Arithmetic of NinesCourse Pass
  4. Challenge · Least PrivilegeCourse Pass

Architect’s Desk

  1. ADR-006 · Provider EgressCourse Pass
  2. When Not to Go Multi-RegionCourse Pass
  3. Review This VPCCourse Pass
  4. AssessmentCourse Pass
  5. ReferencesCourse Pass