Cloud Engineer
Master cloud engineering across AWS, Azure, and GCP — networking, compute, storage, databases, IAM, security, containers, serverless, IaC, CI/CD, monitoring, cost optimization, HA/DR, migration, and architecture patterns. 20 phases from cloud foundations to certification prep.
Your Progress
Complete all 20 phases to master this track
Master cloud engineering across AWS, Azure, and GCP — 20 phases covering networking, compute, storage, databases, IAM, security, containers, serverless, IaC, CI/CD, monitoring, cost optimization, HA/DR, migration, and architecture patterns.
Phase 1: Cloud Foundations
Understand cloud computing fundamentals, service models, deployment models, and the global infrastructure of major cloud providers.
Cloud Computing Overview
Understand what cloud computing is, its advantages over traditional infrastructure, and the key concepts of on-demand self-service, broad network access, and resource pooling.
Cloud Service Models
Compare IaaS, PaaS, and SaaS models. Understand when to use each, shared responsibility boundaries, and real-world examples across AWS, Azure, and GCP.
Cloud Deployment Models
Compare public, private, hybrid, and multi-cloud deployment models. Understand tradeoffs in cost, control, compliance, and operational complexity.
Global Infrastructure
Explore cloud provider regions, availability zones, edge locations, and how geographic distribution impacts latency, compliance, and fault tolerance.
Cloud Console and CLI
Navigate cloud management consoles, install and configure CLI tools, and execute basic management commands for provisioning and monitoring resources.
Phase 2: Networking & DNS
Master cloud networking fundamentals including VPCs, subnets, security groups, DNS, and content delivery networks.
Virtual Private Cloud
Design and deploy VPCs with public and private subnets, route tables, internet gateways, and NAT gateways for secure network isolation.
Security Groups and NACLs
Implement stateful and stateless network filtering with security groups and network ACLs to control inbound and outbound traffic.
DNS and Route 53
Configure DNS records, routing policies, health checks, and domain registration for reliable name resolution and traffic management.
Content Delivery Networks
Deploy CloudFront distributions, configure cache behaviors, origin settings, and edge functions for low-latency content delivery.
Load Balancers
Configure Application Load Balancers, Network Load Balancers, and Gateway Load Balancers for high-availability traffic distribution.
Phase 3: Compute Services
Master cloud compute services including virtual machines, auto-scaling, containers, and managed compute platforms.
EC2 Instances
Launch and configure EC2 instances, select instance types, manage key pairs, and understand pricing models including on-demand, reserved, and spot.
Auto Scaling Groups
Configure auto-scaling policies, launch templates, target tracking, and scheduled scaling to match capacity with demand.
ECS and EKS
Deploy containerized workloads with Amazon ECS and EKS. Compare Fargate vs EC2 launch types, configure task definitions, and manage clusters.
Lambda and Serverless Compute
Build event-driven functions with AWS Lambda. Configure triggers, concurrency, layers, and integrate with API Gateway and other services.
Phase 4: Storage Services
Master cloud storage solutions including block, object, and file storage with lifecycle management and security.
S3 Object Storage
Create and manage S3 buckets, configure storage classes, versioning, lifecycle rules, and cross-region replication for durable object storage.
EBS Block Storage
Provision and manage EBS volumes, select volume types (gp3, io2, st1), create snapshots, and configure encryption for block-level storage.
EFS and FSx File Storage
Deploy elastic file systems for shared access across EC2 instances. Compare EFS, FSx for Windows, and FSx for Lustre use cases.
Storage Lifecycle and Tiering
Optimize storage costs with lifecycle policies, intelligent tiering, and archival strategies for infrequently accessed data.
Phase 5: Database Services
Master cloud database services including relational, NoSQL, caching, and data warehousing solutions.
RDS Relational Databases
Deploy and manage Amazon RDS instances, configure multi-AZ deployments, automated backups, and read replicas for relational workloads.
DynamoDB NoSQL
Design DynamoDB tables with partition and sort keys, configure secondary indexes, global tables, and on-demand capacity for serverless NoSQL.
ElastiCache and Caching
Implement Redis and Memcached caching layers with ElastiCache to reduce database load and improve application response times.
Redshift Data Warehousing
Provision Redshift clusters, load data with COPY commands, optimize queries with distribution styles, and manage reserved nodes.
Phase 6: Identity & Access Management
Master IAM fundamentals, policy management, federation, and privilege access management for cloud security.
IAM Fundamentals
Understand IAM concepts including users, groups, roles, and policies. Configure authentication, authorization, and accounting for cloud resources.
IAM Policy Management
Write IAM policies with least-privilege principles, use policy variables, and evaluate permissions with IAM Access Analyzer.
IAM Roles and Instance Profiles
Create IAM roles for EC2, Lambda, and service access. Configure instance profiles, AssumeRole, and cross-account access patterns.
Federation and SSO
Configure identity federation with SAML 2.0, AWS SSO, and OAuth for single sign-on across cloud accounts and enterprise directories.
Phase 7: Cloud Security
Implement encryption, key management, security monitoring, and vulnerability management for cloud workloads.
Encryption Fundamentals
Implement encryption at rest and in transit using KMS, SSE, TLS, and ACM certificates to protect data across cloud services.
Key Management Service
Create and manage KMS keys, configure key policies, enable automatic rotation, and integrate with S3, EBS, and RDS encryption.
Security Monitoring
Deploy GuardDuty for threat detection, Security Hub for compliance, and CloudTrail for API auditing across cloud accounts.
Vulnerability Management
Scan for vulnerabilities with Inspector, manage secrets with Secrets Manager, and implement patching strategies for EC2 and containers.
Phase 8: Containers & Orchestration
Master Docker containerization and Kubernetes orchestration for deploying and managing cloud-native applications.
Docker Fundamentals
Build Docker images with Dockerfiles, manage containers, configure volumes, and use Docker Compose for multi-container development.
Container Registry
Push and pull images with ECR, configure image scanning, lifecycle policies, and cross-account access for container image management.
Kubernetes Fundamentals
Understand Kubernetes architecture, pods, deployments, services, and namespaces. Deploy and manage applications on EKS clusters.
Kubernetes Networking
Configure Kubernetes networking with Services (ClusterIP, NodePort, LoadBalancer), Ingress controllers, and NetworkPolicies.
Phase 9: Serverless Architecture
Design and build serverless applications with Lambda, API Gateway, Step Functions, and event-driven patterns.
Serverless Architecture Patterns
Identify when serverless is appropriate, design event-driven architectures, and apply patterns like fan-out, choreography, and saga.
API Gateway
Create REST and HTTP APIs with API Gateway, configure authorizers, request/response mappings, throttling, and custom domains.
Step Functions
Orchestrate serverless workflows with Step Functions. Build state machines with choice states, parallel execution, and error handling.
Messaging and Event Services
Decouple services with SQS queues, SNS topics, and EventBridge rules. Implement dead-letter queues and event filtering.
Phase 10: Infrastructure as Code
Automate infrastructure provisioning with CloudFormation, Terraform, and CDK using repeatable, version-controlled templates.
IaC Fundamentals
Understand Infrastructure as Code principles, declarative vs imperative approaches, and the benefits of automated provisioning.
CloudFormation
Write CloudFormation templates with resources, parameters, outputs, and conditions. Use stack sets for multi-account deployments.
Terraform Fundamentals
Write Terraform configurations with resources, variables, and outputs. Initialize, plan, apply, and destroy infrastructure state.
Terraform Advanced Patterns
Use modules, workspaces, remote state, and state locking. Implement drift detection and import existing resources.
Phase 11: CI/CD Pipelines
Design and implement continuous integration and deployment pipelines for automated build, test, and release workflows.
CI/CD Fundamentals
Understand continuous integration, continuous delivery, and continuous deployment. Compare pipeline tools and choose the right approach.
CodePipeline and CodeBuild
Build pipelines with CodePipeline stages, configure CodeBuild projects, and integrate with Source, Build, and Deploy actions.
Deployment Strategies
Implement blue-green, canary, and rolling deployments with CodeDeploy. Configure alarms, rollback policies, and traffic shifting.
Pipeline Security
Secure CI/CD pipelines with role-based access, secret management, artifact encryption, and vulnerability scanning in build stages.
Phase 12: Monitoring & Observability
Implement comprehensive monitoring, logging, tracing, and alerting for cloud infrastructure and applications.
Monitoring Fundamentals
Understand the three pillars of observability: metrics, logs, and traces. Design monitoring strategies for cloud workloads.
CloudWatch Metrics and Alarms
Create CloudWatch dashboards, custom metrics, and alarms. Use metric math and anomaly detection for proactive monitoring.
Centralized Logging
Aggregate logs with CloudWatch Logs, OpenSearch, and S3. Configure log groups, retention policies, and log-based alerts.
Distributed Tracing
Trace requests across microservices with X-Ray. Create service maps, analyze latency, and identify bottlenecks in distributed systems.
Phase 13: Cost Optimization
Manage cloud costs with resource optimization, pricing models, budgeting, and FinOps practices.
Cost Management
Use Cost Explorer, Budgets, and Cost & Usage Reports to track, analyze, and optimize cloud spending across accounts.
Resource Optimization
Identify idle and underutilized resources with Trusted Advisor, rightsize instances, and eliminate waste to reduce costs.
Pricing Models and Savings
Compare on-demand, reserved, savings plans, and spot pricing. Calculate TCO and choose optimal pricing strategies for workloads.
FinOps Practices
Implement FinOps culture with showback/chargeback, tagging strategies, cost allocation tags, and organizational cost governance.
Phase 14: High Availability & Disaster Recovery
Design highly available and disaster-resilient architectures across multiple availability zones and regions.
High Availability Architectures
Design fault-tolerant systems with multi-AZ deployments, auto-scaling, health checks, and graceful degradation patterns.
Disaster Recovery Strategies
Implement backup and restore, pilot light, warm standby, and multi-site active-active strategies with defined RPO and RTO targets.
Multi-Region Deployments
Deploy applications across multiple regions with Route 53 failover, Aurora Global Database, and S3 Cross-Region Replication.
Backup and Restore
Configure AWS Backup for centralized backup management, define retention policies, and test restoration procedures.
Phase 15: Compliance & Governance
Implement cloud governance frameworks, compliance automation, and organizational policies for regulated workloads.
Compliance Frameworks
Understand SOC 2, HIPAA, PCI DSS, GDPR, and FedRAMP requirements. Map compliance controls to cloud services and configurations.
Organization Policies
Enforce guardrails with AWS Organizations SCPs, Service Control Policies, and tag policies across multiple accounts.
Audit Logging
Enable CloudTrail for API logging, Config for resource tracking, and Macie for data classification across cloud environments.
Data Residency
Implement data residency controls with region restrictions, encryption boundaries, and cross-border data transfer policies.
Phase 16: Cloud Migration
Plan and execute cloud migrations using assessment frameworks, migration strategies, and validation approaches.
Migration Strategies (6 Rs)
Evaluate the 6 migration strategies: Rehost, Replatform, Refactor, Repurchase, Retire, and Retain for each workload.
Migration Assessment
Use Migration Hub and Application Discovery Service to assess on-premises workloads, dependencies, and migration readiness.
Migration Execution
Execute migrations with AWS DMS, SMS, Snowball, and DataSync. Handle database migration, server migration, and data transfer.
Migration Validation
Validate migrations with data integrity checks, performance testing, cutover planning, and post-migration optimization.
Phase 17: Cloud Architecture Patterns
Apply well-architected frameworks, microservices patterns, and domain-driven design to cloud solutions.
Well-Architected Framework
Apply the five pillars: operational excellence, security, reliability, performance efficiency, and cost optimization to workload reviews.
Microservices Architecture
Decompose monoliths into microservices with API Gateway, service discovery, circuit breakers, and event-driven communication.
Event-Driven Architecture
Design event-driven systems with EventBridge, SNS, SQS, and DynamoDB Streams for decoupled, scalable event processing.
Multi-Account Strategy
Design multi-account architectures with AWS Organizations, control towers, and landing zones for workload isolation and governance.
Phase 18: Advanced Cloud Operations
Master cloud automation, infrastructure optimization, and operational excellence for production workloads.
Cloud Automation
Automate operational tasks with Systems Manager, Lambda-based automation, and Runbooks for routine maintenance and incident response.
Capacity Planning
Forecast resource needs with Trusted Advisor, compute optimizer, and usage trends to right-size and plan for growth.
Performance Tuning
Optimize application and infrastructure performance with CloudWatch Synthetics, X-Ray, and load testing strategies.
Incident Response
Build incident response runbooks, configure SNS notifications, and automate remediation with Lambda and Step Functions.
Phase 19: Multi-Cloud & Hybrid
Design multi-cloud and hybrid architectures with cloud interconnect, portability strategies, and vendor-neutral patterns.
Multi-Cloud Strategy
Evaluate multi-cloud approaches, avoid vendor lock-in, and design portable workloads across AWS, Azure, and GCP.
Hybrid Cloud Architectures
Connect on-premises and cloud with VPN, Direct Connect, and hybrid DNS. Extend data centers with Outposts and Azure Stack.
Cloud Interconnect
Establish dedicated network connections with Direct Connect, ExpressRoute, and Cloud Interconnect for predictable hybrid performance.
Cloud Bursting
Implement cloud bursting for peak demand, scale on-premises workloads into cloud during spikes, and manage hybrid capacity.
Phase 20: Cloud Certification Prep
Prepare for cloud certifications with exam strategies, practice questions, and comprehensive review of all cloud domains.
Certification Overview
Compare AWS, Azure, and GCP certifications. Understand exam formats, domains, passing scores, and career impact of each.
Certification Preparation
Build a study plan with official documentation, hands-on labs, practice exams, and domain-specific review strategies.
Practice Exams
Take timed practice exams, analyze weak areas, and develop test-taking strategies for multiple-choice and scenario-based questions.
Domain Deep Review
Review all exam domains: cloud concepts, security, technology, deployment, and business perspectives with focus on weak areas.
Frequently Asked Questions
How long does the Cloud Engineer roadmap take?
The 20-phase Cloud Engineer roadmap takes 16-24 weeks at 1-2 hours per day. Prior Linux or networking knowledge helps but is not required.
Which cloud providers does this roadmap cover?
The roadmap covers cloud engineering across AWS, Azure, and GCP — focusing on portable skills like networking, compute, storage, IAM, containers, serverless, IaC, and architecture patterns.
Does this roadmap prepare for cloud certifications?
Yes. The curriculum aligns with major cloud associate/solutions architect certification objectives while emphasizing real-world engineering skills over exam cramming.
Do I need programming experience for this roadmap?
Basic scripting helps for IaC and CI/CD but is not required. The roadmap builds from cloud foundations through infrastructure as code and production operations.