The real graded Amazon Web Services tasks the portal assigns, grouped into three levels.
The portal assigns these Amazon Web Services tasks. Finish Level 1 before Level 2 and Level 2 before Level 3. Your mentor may mark some tasks as required for the certificate.
Level 1: Foundations (12 tasks)
Task
What to do
Create a free-tier account safely
Create an AWS free-tier account, enable MFA on the root user, create an IAM admin user and set a billing alarm at Rs 100. Screenshot each step (hide account numbers).
Cloud basics
Explain regions, availability zones, IaaS/PaaS/SaaS and the shared responsibility model in a README in a repo named aws-internship.
IAM users, groups and policies
Create a group with read-only S3 access, add a user to it and prove the user cannot delete objects.
Launch an EC2 instance
Launch a free-tier EC2 Linux instance, connect with SSH and install a web server that shows your name.
Security groups
Restrict your instance's security group to SSH from your IP and HTTP from anywhere, and explain each rule.
S3 static website
Host a static portfolio site on S3 with the correct bucket policy and share the URL.
S3 storage classes and lifecycle
Add a lifecycle rule that moves old objects to a cheaper class and explain when each class is used.
AWS CLI
Install and configure the AWS CLI and list, upload and delete S3 objects from the terminal.
EBS volumes and snapshots
Attach an extra EBS volume, format and mount it, then take a snapshot.
CloudWatch basics
Create a CloudWatch alarm on EC2 CPU and trigger it with a stress test.
Cost awareness
Use the pricing calculator to estimate a small website's monthly cost and list 5 ways to reduce it.
Clean up
Write and follow a checklist to delete every resource you created so nothing keeps billing.
Level 2: Building real features (10 tasks)
Task
What to do
VPC from scratch
Build a VPC with public and private subnets, an internet gateway, route tables and a NAT option, and draw the diagram.
RDS database
Launch a free-tier RDS MySQL or PostgreSQL in a private subnet and connect to it from EC2 only.
Load balancer and auto scaling
Put two EC2 instances behind an Application Load Balancer with an Auto Scaling group and show failover.
Lambda function
Write a Lambda function triggered by an S3 upload that writes file details to a log or DynamoDB.
API Gateway + Lambda
Build a small serverless REST API with API Gateway and Lambda and test it with Postman.
DynamoDB
Design a DynamoDB table with a good partition key for student attendance and query it.
Route 53 and HTTPS
Explain Route 53 records and how ACM certificates give HTTPS to a load balancer or CloudFront.
CloudFront CDN
Put CloudFront in front of your S3 site and compare load times.
IAM roles for services
Give an EC2 instance an IAM role to read S3 without any access keys on the server.
Infrastructure as Code
Recreate your VPC and EC2 setup with CloudFormation or Terraform.
Level 3: Professional work and capstone (8 tasks)
Task
What to do
Containers on AWS
Deploy a containerised app to ECS Fargate or App Runner from an ECR image.
CI/CD to AWS
Build a GitHub Actions (or CodePipeline) pipeline that deploys your app on every push, using OIDC instead of stored keys.
Monitoring and logging
Send application logs to CloudWatch Logs, create a metric filter for errors and an alarm.
Security review
Run Trusted Advisor / Security Hub checks (free items), fix public access or open ports and document the fixes.
Backup and disaster recovery
Plan backups for EC2, RDS and S3 with retention, and test one restore.
Well-Architected review
Review your project against the five Well-Architected pillars and list improvements.
Certification practice
Complete a full AWS Cloud Practitioner or Solutions Architect Associate practice test and write notes on every wrong answer.
Capstone: three-tier app on AWS
Deploy a complete three-tier app (CloudFront, load balancer, app servers or containers, RDS) with IaC, CI/CD, monitoring, a cost estimate and an architecture diagram.
Internship