← Learn
AWS articles
Plain-English AWS articles grouped by topic, from messaging and networking to security, each with a crossword to test yourself.
Databases
Cloud fundamentals
Messaging and integration
Networking
- NetworkingNAT gateway vs internet gateway: what does each one do?An internet gateway is a two-way door to the internet; a NAT gateway is a one-way exit for private subnets. Here’s when you need each one.5 min readSAA-C03CLF-C02
- NetworkingSecurity groups vs network ACLs: which one do you need?Security groups and network ACLs both filter traffic in a VPC, but they work at different levels and remember different things. Here's when to use each.5 min readSAA-C03CLF-C02
Security and identity
- Security and identityCloudFront signed URLs vs signed cookies: which one should you use?Serve private content through CloudFront with a signed link per file or signed cookies for many files. How each works, canned vs custom policies, exam traps.5 min readSAA-C03
- Security and identityIAM users, groups and roles: what’s the difference?IAM users have long-term credentials, groups share permissions, and roles hand out temporary ones. Here’s when to use each, and why roles usually win.5 min readSAA-C03CLF-C02