Cloud Tutorials and Platform Guides

Create a general-purpose Amazon S3 bucket with modern ownership and access defaults, upload a file, use a presigned URL for temporary access, and verify objects with the AWS CLI.

Create an Amazon ElastiCache for Redis cluster in the AWS console, place it in a VPC subnet group, restrict port 6379 with a security group, and verify PING and SET from a Linux EC2 instance.

Create a gp3 EBS volume, attach and mount it on a Linux EC2 instance in the same Availability Zone, write data, keep the volume after termination, snapshot it, and restore the file from a new volume.

Create an Amazon DynamoDB table with a partition key, add items in the console, read data with scan and get-item in the AWS CLI, and compare on-demand with provisioned capacity.

Create a Cognito user pool with Managed login and a public OAuth app client, sign in through the login page, link an identity pool, and verify STS temporary credentials from a user pool ID token.

Publish plain HTML, CSS, JavaScript, and images on AWS Amplify Hosting with HTTPS on an amplifyapp.com URL, using zip upload or GitHub, then connect a custom domain with managed TLS.

Host plain HTML, CSS, JavaScript, and images on Cloudflare Pages with free HTTPS and a pages.dev URL, then optionally attach your own domain when the zone uses Cloudflare DNS.

Publish plain HTML, CSS, JavaScript, and images on GitHub Pages with a free github.io URL and HTTPS, using the GitHub web interface—no web server to manage.

Plan monthly AWS costs first, then host a static site on Amazon S3 behind CloudFront with a public ACM certificate, Route 53 DNS, and HTTPS on your own domain—without exposing the bucket to the public internet.

Convert an attached EBS gp2 volume to gp3 online with modify-volume, monitor describe-volumes-modifications, tune gp3 IOPS and throughput, and verify the filesystem and data stay intact on RHEL 10.2 in ap-south-1.

Why AWS Systems Manager Session Manager returns TargetNotConnected, how to confirm account and Region, read Fleet Manager ping status, verify the SSM agent and instance profile, check outbound HTTPS and VPC endpoints, …

Step by step instructions to protect S3 website with basic authentication using AWS Lambda and Cloudfront

Fix AWS AccessDenied for not authorized to perform iam PassRole when creating Lambda, ECS, or other resources that need an execution role. Identify the caller, add PassRole to the caller policy, restrict by role ARN and …

How AWS IAM explicit deny and implicit deny differ, what AccessDenied messages can reveal, and how to inspect identity-policy evaluation with simulate-principal-policy.

When sts:AssumeRole returns AccessDenied, check caller identity policy and the role trust policy together, read the CLI error, fix ExternalId or principal mismatches, and verify with get-caller-identity after a …

Configure multiple AWS CLI named profiles for dev and prod accounts, switch with --profile or AWS_PROFILE, verify the active account with aws sts get-caller-identity, and avoid profile and credential precedence mistakes …

Check which credentials AWS CLI is using with aws configure list for credential source, sts get-caller-identity for the active account or role, environment and profile checks, and redacted debug provider lines on Linux …

When AWS returns InvalidAccessKeyId or “The AWS Access Key Id you provided does not exist in our records,” use aws configure list and IAM list-access-keys to find stale credentials and rotate safely.

When AWS CLI returns ExpiredToken, temporary STS credentials passed their expiration — use aws configure list to find the source, refresh SSO, AssumeRole, or exported AWS_SESSION_TOKEN values, then confirm with sts …

Fix AWS CLI SSL certificate verify failed by reading the TLS error, inspecting the certificate chain with openssl s_client, building a CA bundle with your corporate root, and configuring --ca-bundle, AWS_CA_BUNDLE, or …

Fix AWS CLI Unable to locate credentials by reading aws configure list, checking AWS_PROFILE and AWS environment variables, shared credential files, aws login, IAM Identity Center, and EC2 instance profile credentials on …

When AWS CLI returns InvalidClientTokenId, credentials are present but rejected — use aws configure list, env checks, key status, and sts get-caller-identity to find the stale or incomplete source and fix it.

Fix AWS CLI Could not connect to the endpoint URL by reading the hostname in the error, confirming Region and service name, testing DNS and TCP/TLS to the Regional endpoint, checking proxy environment variables, and …

Why AWS cannot decrease EBS volume size in place, how to snapshot the source, size a smaller target, match encryption, migrate with rsync -aHAXx and a final quiesced sync, mount through fstab by UUID, verify with dry-run …

How to move an EBS data volume from one EC2 instance to another in the same Availability Zone with umount, detach-volume, and attach-volume, identify the Nitro NVMe device without mkfs, persist the mount in etc fstab, …

When the EC2 console shows an EBS volume attached at /dev/sdf but that path is missing inside Linux on Nitro, how to confirm the AWS attachment, map the volume ID to the real NVMe device with lsblk SERIAL and nvme …

How to attach an existing EBS volume to EC2 in ap-south-1 without running mkfs, identify XFS or ext4 with lsblk, blkid, file -s, and wipefs -n, unmount and detach from the old host first, mount safely, handle duplicate …

Learn why /dev/sdf appears as an NVMe device on Nitro EC2, how to map EBS volume IDs with lsblk, and why /etc/fstab should use UUIDs.

Why growpart returns NOCHANGE partition cannot be grown on EC2 after an EBS resize, how to compare EBS volume size with disk and partition size in lsblk, confirm the correct NVMe device and partition number, and extend …

Why xfs_growfs prints data size unchanged, skipping after an EBS resize on EC2, how to compare EBS disk size with partition and XFS filesystem size using lsblk and df -hT, extend the partition with growpart, run …